32,99 €
Mehr erfahren.
- Herausgeber: John Wiley & Sons
- Kategorie: Wissenschaft und neue Technologien
- Serie: Sybex Study Guide
- Sprache: Englisch
Quickly preps technical and non-technical readers to pass the Microsoft AZ-900 certification exam Microsoft Certified Azure Fundamentals Study Guide: Exam AZ-900 is your complete resource for preparing for the AZ-900 exam. Microsoft Azure is a major component of Microsoft's cloud computing model, enabling organizations to host their applications and related services in Microsoft's data centers, eliminating the need for those organizations to purchase and manage their own computer hardware. In addition, serverless computing enables organizations to quickly and easily deploy data services without the need for servers, operating systems, and supporting systems. This book is targeted at anyone who is seeking AZ-900 certification or simply wants to understand the fundamentals of Microsoft Azure. Whatever your role in business or education, you will benefit from an understanding of Microsoft Azure fundamentals. Readers will also get one year of FREE access to Sybex's superior online interactive learning environment and test bank, including hundreds of questions, a practice exam, electronic flashcards, and a glossary of key terms. This book will help you master the following topics covered in the AZ-900 certification exam: * Cloud concepts * Cloud types (Public, Private, Hybrid) * Azure service types (IaaS, SaaS, PaaS) * Core Azure services * Security, compliance, privacy, and trust * Azure pricing levels * Legacy and modern lifecycles Growth in the cloud market continues to be very strong, and Microsoft is poised to see rapid and sustained growth in its cloud share. Written by a long-time Microsoft insider who helps customers move their workloads to and manage them in Azure on a daily basis, this book will help you break into the growing Azure space to take advantage of cloud technologies.
Sie lesen das E-Book in den Legimi-Apps auf:
Seitenzahl: 396
Veröffentlichungsjahr: 2021
Ähnliche
Table of Contents
Cover
Title Page
Copyright
Acknowledgments
About the Author
About the Technical Editor
Introduction
Microsoft AZ‐900 Certification Exam
AZ‐900 Exam Objectives
Domain 1: Describe Cloud Concepts
Domain 2: Describe Core Azure Services
Domain 3: Describe Core Solutions and Management Tools on Azure
Domain 4: Describe General Security and Network Security Features
Domain 5: Describe Identity, Governance, Privacy, and Compliance Features
Domain 6: Describe Azure Cost Management and Service Level Agreements
Assessment Test
Answers to Assessment Test
Chapter 1: Cloud Concepts
Understanding Cloud Computing
Benefits of Cloud Computing
Financial Models
Cloud Computing Models and Responsibilities
Public, Private, and Hybrid Cloud Models
Summary
Exam Essentials
Review Questions
Chapter 2: Azure Core Services
Core Azure Architectural Components
Azure Subscriptions and Billing Scope
Core Azure Services
Core Azure Storage
Core Data Services
Microsoft Marketplace
Summary
Exam Essentials
Review Questions
Chapter 3: Azure Core Networking Services
Networking Concepts
Virtual Networks
Load Balancers
VPN Gateway
Content Delivery Networks
Summary
Exam Essentials
Review Questions
Chapter 4: Security, Compliance, Privacy, and Trust
Network Security
Authentication and Authorization
Security Tools and Features
Azure Governance Methodologies
Azure Monitoring and Reporting Options
Compliance and Data Protection Standards
Summary
Exam Essentials
Review Questions
Chapter 5: Azure Solutions
Internet of Things (IoT)
Artificial Intelligence
Serverless Computing
DevOps
Summary
Exam Essentials
Review Questions
Chapter 6: Azure Pricing, Service Levels, and Lifecycle
Purchasing Azure Services
Planning and Managing Azure Costs
Service Level Agreements
Service Lifecycles
Summary
Exam Essentials
Review Questions
Chapter 7: Creating and Managing Azure Resources
Azure Management Tools
Creating and Managing Resources
Summary
Exam Essentials
Review Questions
Appendix: Answers to Review Questions
Chapter 1: Cloud Concepts
Chapter 2: Azure Core Services
Chapter 3: Azure Core Networking Services
Chapter 4: Security, Compliance, Privacy, and Trust
Chapter 5: Azure Solutions
Chapter 6: Azure Pricing, Service Levels, and Lifecycle
Chapter 7: Creating and Managing Azure Resources
Index
Online Test Bank
Register and Access the Online Test Bank
End User License Agreement
List of Tables
Chapter 2
TABLE 2.1 Billing scopes for Microsoft Online Services Program
TABLE 2.2 Billing scopes for enterprise agreements
TABLE 2.3 Billing scopes for Microsoft Customer Agreements
List of Illustrations
Chapter 1
FIGURE 1.1 A hybrid cloud scenario
FIGURE 1.2 Horizontal scaling adds additional resources when they are needed...
FIGURE 1.3 Vertical scaling adjusts the capacity of existing resources to ac...
FIGURE 1.4 Microsoft 365 is an example of an SaaS offering.
FIGURE 1.5 A simplified illustration of a virtualized SharePoint farm in Azu...
FIGURE 1.6 Creating a web app named JBTestApp99 to use ASP.NET 4.7 and run o...
FIGURE 1.7 IaaS, PaaS, and SaaS are all categories of cloud computing and sh...
FIGURE 1.8 The three categories of Azure cloud computing have different leve...
Chapter 2
FIGURE 2.1 The relationships between geographies, regions, region pairs, and...
FIGURE 2.2 Availability zones offer an additional layer of service availabil...
FIGURE 2.3 Creating a resource in Azure
FIGURE 2.4 Billing scopes for a Microsoft Customer Agreement account
FIGURE 2.5 A shared application is an example of multitenancy.
FIGURE 2.6 Multiple guest VMs on a physical host
FIGURE 2.7 Availability sets distribute VMs across multiple fault domains an...
FIGURE 2.8 An example of a container group
Chapter 3
FIGURE 3.1 A simple home network
FIGURE 3.2 The load‐balancing services in Azure can work individually or in ...
FIGURE 3.3 A VPN connection establishes a secure tunnel between networks.
FIGURE 3.4 ExpressRoute establishes a secure route from your on‐premises net...
FIGURE 3.5 A CDN places content close to users geographically.
Chapter 4
FIGURE 4.1 Use Azure Firewall to scan and filter network traffic.
FIGURE 4.2 Web Application Firewall works in conjunction with the Applicatio...
FIGURE 4.3 A network security group is a simple firewall offering in Azure....
FIGURE 4.4 Management groups serve as containers for subscriptions and enabl...
FIGURE 4.5 You access Security Center from the Azure portal.
FIGURE 4.6 RBAC uses an additive model to apply permissions.
FIGURE 4.7 Azure Monitor encompasses multiple services and features to enabl...
FIGURE 4.8 Azure Status provides status information about Azure services wor...
FIGURE 4.10 You can view health data for resources in your Azure environment...
FIGURE 4.9 Service Health provides information on Azure service health, plan...
FIGURE 4.10 You can view health data for resources in your Azure environment...
Chapter 5
FIGURE 5.1 IoT Central provides a visual interface for viewing and managing ...
FIGURE 5.2 Azure Machine Learning Studio provides a rich portal‐based experi...
Chapter 6
FIGURE 6.1 Estimate Azure costs with the TCO Calculator.
FIGURE 6.2 Begin in the Pricing Calculator by selecting the products to incl...
FIGURE 6.3 Specify the options for each resource.
FIGURE 6.4 Use Azure Advisor to help manage costs.
Chapter 7
FIGURE 7.1 You can use the Azure portal to manage most Azure resources.
FIGURE 7.2 The Compute category is selected in the Azure portal with all Com...
FIGURE 7.3 The Azure Cloud Shell running Azure PowerShell
FIGURE 7.4 You can quickly access the Cloud Shell from the Azure portal.
FIGURE 7.5 The first thing you see after creating a free subscription is the...
FIGURE 7.6 Use the Resource Groups page to create and manage resource groups...
FIGURE 7.7 Enter information to create your first storage account.
FIGURE 7.8 A storage account created in Azure called jimboycestorage1
FIGURE 7.9 Use the Azure Storage Explorer to view storage in Azure.
FIGURE 7.10 An Azure account added to the Azure Storage Explorer
FIGURE 7.11 Two folders created in a file share called test1
FIGURE 7.12 You can choose among several options when creating a preconfigur...
FIGURE 7.13 Viewing status of a VM in the Azure portal
FIGURE 7.14 Use the Create SQL Database page to create an instance of a SQL ...
FIGURE 7.15 The Azure portal shows the status of a newly created SQL Databas...
FIGURE 7.16 Use All Resources to view and manage your Azure resources.
Guide
Cover
Table of Contents
Title Page
Copyright
Acknowledgments
About the Author
About the Technical Editor
Introduction
Begin Reading
Appendix: Answers to Review Questions
Index
Online Test Bank
End User License Agreement
Pages
iii
iv
v
vii
ix
xix
xx
xxi
xxii
xxiii
xxiv
xxv
xxvi
xxvii
xxviii
xxix
xxx
xxxi
xxxii
xxxiii
xxxiv
xxxv
xxxvi
xxxvii
xxxviii
xxxix
xl
xli
xlii
xliii
xliv
xlv
xlvi
xlvii
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
Microsoft Certified Azure Fundamentals
Study GuideExam AZ-900
Jim Boyce
Copyright © 2021 by John Wiley & Sons, Inc., Indianapolis, Indiana
Published simultaneously in Canada
ISBN: 978‐1‐119‐77092‐3ISBN: 978‐1‐119‐76820‐3 (ebk.)ISBN: 978‐1‐119‐77115‐9 (ebk.)
No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per‐copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750‐8400, fax (978) 646‐8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748‐6011, fax (201) 748‐6008, or online at www.wiley.com/go/permissions.
Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.
For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762‐2974, outside the U.S. at (317) 572‐3993 or fax (317) 572‐4002.
Wiley publishes in a variety of print and electronic formats and by print‐on‐demand. Some material included with standard print versions of this book may not be included in e‐books or in print‐on‐demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.
Library of Congress Control Number: 2021934224
TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Microsoft and Azure are registered trademarks of Microsoft Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.
Acknowledgments
I've written more than 60 books over the past 30+ years, and each has been a unique experience. With every book, however, success comes from a team approach. Once again, I need to thank the members of the team who helped bring this book together.
First, thanks to Kenyon Brown for bringing me this opportunity and helping to get it off the ground. Thanks also to my agent, Carole Jelen, for all she has done through the years and for this project. Many thanks also to John Sleeva, the book's project editor, and to Rob Tidrow, the technical editor for this project and a partner in crime throughout most of my writing career. Special thanks to Victoria Hester, one of my peers at Microsoft, for taking the time out of her busy schedule to also review the content. Finally, thanks go to Liz Welch, the book's copyeditor, to Louise Watson, the proofreader, and to Saravanan Dakshinamurthy for helping polish the rough content. Thanks also to all of the people who push the buttons and move the levers to turn words on virtual paper into a finished product.
About the Author
Jim Boyce has been involved in IT since the late 1970s in a wide range of roles. He has been a structural steel designer, CAD operator and trainer, college instructor, consultant, ISP owner, and freelance author. He was a director at Xerox, where he managed globally distributed teams providing managed services for Windows Server and collaboration platforms, including SharePoint and Documentum. Over the past 10 years, Jim has held multiple roles as an individual contributor and people manager at Microsoft, including Technical Account Manager, Delivery Management Manager, and now Customer Success Account Manager. In a writing career spanning over 30 years, Jim has written more than 60 books and upwards of a thousand articles for many print and online publications, including InfoWorld, TechRepublic.com, WINDOWS Magazine, and Microsoft.com. He has also created video training content for WatchIT and Lynda.com. In his spare time, he is a building inspector for his small town; works on construction and woodworking projects; flies model aircraft, drones, and full‐sized aircraft; and participates as a coach and unified player for Special Olympics.
About the Technical Editor
Rob Tidrow works as an information technology consultant in the education field. He has been working with technologies professionally for more than 25 years, including operating systems, cloud‐based technologies, databases, mobile devices, networking, security, and more. He has written over 15 books and contributed to over 30 books. His focus is on Microsoft Windows, Microsoft Azure, Microsoft 365, and SharePoint. He resides in Richmond, Indiana, IN and can be reached at robtidrow@yahoo.com.
Introduction
I currently manage the support and proactive services experience for a portfolio of Microsoft customers, many of whom have either already made a significant transition from on‐premises to Azure or are in the process of evaluating a move to Azure. I field questions daily about Azure services, deployment strategies, and proactive services designed to not only educate our customers on Azure and Microsoft 365, but also assist them in planning, deploying, and supporting their Azure and M365 workloads.
Continuing technical training is one of the commitments that most Microsoft employees make in addition to the core responsibilities of their roles. As part of that commitment, I completed the AZ‐900 Microsoft Azure Fundamentals Certification. The certification helped broaden my background across the entire Azure service portfolio. It also reinforced my understanding that not only highly technical roles benefit from the training and certification—less technical roles benefit from the certification as well.
That's the approach we've taken for this book. The content is intended to help you understand the requirements of the AZ‐900 Fundamentals exam and prepare to successfully pass the exam. The book does not go deep into Azure but rather focuses on core concepts, services, and resources in Azure that are covered by the exam objectives. The goal of the AZ‐900 exam is not to give you a technical depth in Azure, but rather to give you a broad understanding that will enable you to understand the benefits that Azure offers and begin to integrate Azure into your role, whether technical or not.
Microsoft AZ‐900 Certification Exam
Microsoft currently offers 17 certifications at many levels across the Azure cloud offering, ranging from fundamental to very technical. The AZ‐900 exam and certification should be the first certification step in your Azure certification path if you do not yet have a fundamental understanding of cloud offerings and Azure in particular. So, whether you are interested in certification in Azure solutions, data, AI, or other areas, your certification path often begins with AZ‐900.
The following section explores the certification paths and process in more detail.
How Do You Become Certified in Azure?
As explained earlier, Microsoft currently offers 17 certifications for Azure. Obviously, fundamentals is one certification area, but there are multiple certification paths for Azure administration, app development, data, AI, security, DevOps, IoT, and Azure Stack. These certifications are currently supported by 39 exams. Even if you plan to pursue certification in, for example, Azure IoT development, you should consider AZ‐900 Fundamentals to give you a broader understanding of Azure; the knowledge you gain will supplement your understanding of your selected certification. It will also help you leverage and integrate additional Azure workloads in your area of specialization.
Becoming certified in Azure is relatively simple. Choose the certification you want to achieve, work through the prescribed learning path for the certification, prepare for the exam, and pass it. Preparation can take many forms, and this book is intended to be your primary one. People have different learning styles, varying backgrounds and experiences, differing amounts of time to study, and so on. So, this book might be one of a handful of resources you use to prepare for the exam.
To begin, work through the chapters of this book and develop a strong understanding of the questions and answers offered in each one. Practice does make perfect, so consider working through additional practice test options before taking the exam. Microsoft offers some knowledge checks online within the content at the following URL: docs.microsoft.com/en-us/learn/certifications/azure-fundamentals
You will also find other sample test options online, some for free and some for a fee. All of them provide good additional preparation for the exam. The more questions you work through before taking the exam, the more likely you are to be successful on your first attempt.
Types of Exam Questions
We have tried to model the sample questions in this book on the types of questions you will see in the official AZ‐900 exam. Because the test is online, however, some types of questions are difficult to model in print. The following sections explore the types of questions you will experience in the official, online AZ‐900 exam.
Multiple Choice
These are generally straightforward and come in two variants. The first is a simple question followed by a selection of possible answers. The test question indicates whether there is a single answer or multiple correct answers. Each correct response counts toward your point total. Example (you would choose one answer):
1.
Which one of the following provides container orchestration services for containers in Azure?
A.
Azure Container Instances (ACI)
B.
Azure Kubernetes
C.
Azure Logic Apps
D.
Azure Container Orchestration Services
Many multiple‐choice questions are scenario based, describing a planning, deployment, or management scenario, followed by a question about the scenario. Example:
2.
You are the IT director for Contoso Corporation. Your CIO has asked you to recommend a solution that will enable the development team to quickly deploy VMs for testing applications. The solution must provide flexibility but also result in the lowest cost. Which of the following solutions meets these requirements? (You would choose one or more correct solutions.)
Drag‐and‐Drop and Select Questions
Drag‐and‐drop questions provide a list of answers that you must match with a corresponding description. For example, the answers might include Disaster Recovery, Fault Tolerance, Low Latency, and Dynamic Scalability. You would drag each of these answers into a box beside the correct description of each.
Select questions describe a scenario and you must choose the correct answer from a drop‐down list that typically offers three possible answers. Example:
3.
Which cloud deployment model is used for Azure VMs and Azure SQL Database instances? (You would choose Infrastructure‐as‐a‐Service from a drop‐down list beside Azure VMs and choose Platform‐as‐a‐Service from the drop‐down list beside Azure SQL Database.)
Yes/No Questions
These questions typically include three questions related to a specific topic. You answer by selecting either Yes or No beside each one. Example (for each you would select either Yes or No):
4.
Azure resources can access other resources only in the resource group in which they reside. Yes No
Deleting a resource group also deletes all resources in the group. Yes No
A resource group can include resources from multiple Azure regions. Yes No
Text Replacement Questions
These questions offer a statement with part of the statement underlined. The statements sometimes include leading sentences providing additional information. The question offers four options, A through D. Three offer alternative text that you would use in place of the underlined text to make it correct. Or, you choose the answer No change is needed if the underlined text is correct. Example:
5.
Azure Data Lake Analytics
is a PaaS solution that enables you to query data in a data lake and build visualizations without deploying hardware or supporting services.
A.
is built on SQL Managed Service to provide analytics for large SQL implementations.
B.
is a component of Azure IoT Central that provides deep analysis of IoT telemetry.
C.
integrates with Azure DevTest Labs to provide code analysis capabilities.
D.
No change is needed.
In this example, the underlined text makes the statement correct, so the appropriate answer is D (no change is needed). But, if Azure Data Lake Analytics were instead a component of Azure IoT that provided deep analysis of IoT telemetry (it is not), then you would choose B.
Achieving AZ‐900 Fundamentals Certification
The previous sections have explored the concepts surrounding AZ‐900 certification. The following sections offer guidance on preparing and registering for the exam, and for taking the exam.
Preparing for the Exam
Each person has a unique learning style, and one preparation method is not necessarily the best for everyone. However, the following list of preparation methods will help anyone be successful if used as a whole:
Studying:
This book obviously provides a great set of resources for learning about Azure fundamentals, but you might prefer a deeper discussion of some topics to help you better understand them. Many online sources are available, but Microsoft's website is perhaps the best, most authoritative source. When I need to go deeper into a particular topic, I usually open Bing in a browser and use a search similar to the following, specifying where to confine the search and the search terms (replace
Service Health
with the topic you need to find): site:docs.microsoft.com Azure Service Health.
Hands‐on experience:
You can create a free Azure subscription that provides a monthly credit that you can use to deploy and experiment with Azure resources and services. Although you can't feasibly experience all of Azure this way (you're unlikely to deploy Azure Data Lake and begin mining data), but you can at least explore basic concepts and resources such as VMs, virtual networking, and so on. Equally important, you can gain understanding of and experience with the Azure portal and other management tools covered by the AZ‐900 exam.
Sample tests:
The test questions in this book are designed to cover the exam objectives outlined by Microsoft for the AZ‐900 exam. However, it's a good idea to use additional sample test resources to prepare for the test. Not only does this expose you to a broader base of questions, but it helps avoid the “memorize the question and answer” issue that often arises from using a single sample source.
Registering for the Exam
When you feel confident in your ability to pass the exam, your next step is to register for the exam. To do so, navigate to docs.microsoft.com/en-us/learn/certifications/exams/az-900. There you will find information about the exam and links to register for the exam with a testing provider. The test might be administered in person at a testing site or remotely. In either case, you will need to provide photo identification when registering and provide that same identification when you take the exam. You will not be able to use any electronic devices or other resources during the exam. If taking the exam remotely, your device must have a camera through which a proctor can watch you throughout.
Taking the Exam
Unless you already have a strong background in Azure and taking the AZ‐900 exam is a formality, I recommend you set aside a few days to prepare for the exam even after you complete your training and study. Spend several hours reviewing the material and the practice questions. Ensure that you are well rested the day of the exam.
When you are taking the exam, carefully read through each question in full, even if you think you know the intent of the question from samples that you have seen. Be deliberate about each question. As you review the possible answers, consider that one answer might provide a more complete answer than another, and choose the one that most completely suits the question. Think carefully about the scenario outlined by each question when choosing your answer.
Here is a summary of points to help you be successful:
Arrive or go online early to give yourself time to review content and mentally prepare for the exam.
As emphasized previously, read each question carefully and don't jump to a snap answer. Be deliberate about reading each question and choosing the correct answer.
Answer all questions as you go along in case you run out of time. You will likely have time when you finish to go back through your answers and adjust as needed any answers you were unsure of on the first pass.
Sometimes the additional information included in a question is relevant to the answer, but in others it only colors the scenario. Know that there are no trick questions. Read carefully to understand the intent of the question.
If you are unsure of the correct answer, eliminate the answers that you know are incorrect to narrow the possibilities.
Who Should Read This Book?
IT administrators and other deeply technical roles are not the only ones who can benefit from Azure fundamentals training. If you are in technical sales, project management, or other less technical roles, understanding Azure and its services can help you in your role as well. That's why we have designed this book and its content to provide broad coverage of Azure fundamentals at an introductory level rather than a deep technical level. The book is appropriate for anyone who wants to understand Azure in a broad sense and prepare for the AZ‐900 exam, even if you are not highly technical.
What's Included in the Book?
This book consists of seven chapters plus supplementary information: a glossary, this introduction, flashcards, and the assessment test after the introduction. The chapters are organized as follows:
Chapter 1
, “Cloud Concepts,” explores the basic concepts of cloud computing to lay the foundation for the rest of the book.
Chapter 1
covers categories of cloud computing, the financial benefits of cloud computing, and the various cloud models available with Microsoft Azure.
Chapter 2
, “Azure Core Services,” explores the core services available with Azure, including key concepts such as subscriptions and billing, tenants, resources, and resource management. The chapter begins the exploration of key Azure services, including virtual machines, storage, and data services.
Chapter 3
, “Azure Core Networking Services,” begins with an explanation of basic networking concepts to create a framework for the discussion of Azure‐specific networking services. The chapter explores virtual networks, load balancers, VPN gateways, and content delivery networks.
Chapter 4
, “Security, Compliance, Privacy, and Trust,” covers concepts, services, and solutions in Azure related to security,, compliance, privacy, and trust. Topics covered include Azure network security resources, authentication and authorization, and key Azure security services such as Security Center, Key Vault, and others. The chapter also covers governance methodologies, compliance resources, monitoring and reporting, privacy and compliance topics, and government implementations of Azure for the United States and China.
Chapter 5
, “Azure Solutions,” covers services in Azure for Internet of Things (IoT), big data and analytics, artificial intelligence (AI), serverless computing, and DevOps.
Chapter 6
, “Azure Pricing, Service Levels, and Lifecycle,” helps you understand subscriptions, ways to purchase Azure services, and how to estimate and manage costs in Azure. Pricing tools including the TCO Calculator and Pricing Calculator are explored, as are service level agreements (SLAs), ways to improve SLAs (and the potential effect of SLAs on cost), and other ways to manage cost in Azure.
Chapter 7
, “Creating and Managing Azure Resources,” begins with an exploration of the tools you can use to create and manage Azure resources, including the Azure portal, PowerShell, the Azure CLI, the Azure Cloud Shell, and the Azure Mobile App. The chapter finishes with sections that step you through the process of creating several types of Azure resources.
Each chapter begins with a list of the objectives that are covered in that chapter. The book doesn't cover the objectives in order. Thus, you shouldn't be alarmed at some of the odd ordering of the objectives within the book. At the end of each chapter, you'll find a couple of elements you can use to prepare for the exam:
Exam Essentials
This section summarizes important information that was covered in the chapter. You should be able to perform each of the tasks or convey the information requested.
Review Questions
Each chapter concludes with review questions. You should answer these questions and check your answers against the ones provided after the questions. If you can't answer at least 80 percent of these questions correctly, go back and review the chapter, or at least those sections that seem to be giving you difficulty.
The review questions, assessment test, and other testing elements included in this book are not derived from the exam questions, so don't memorize the answers to these questions and assume that doing so will enable you to pass the exam. You should learn the underlying topic, as described in the text of the book. This will let you answer the questions provided with this book and pass the exam. Learning the underlying topic is also the approach that will serve you best in the workplace—the ultimate goal of a certification.
To get the most out of this book, you should read each chapter from start to finish and then check your memory and understanding with the chapter‐end elements. Even if you're already familiar with a topic, you should skim the chapter; Azure is complex enough that there are often multiple ways to accomplish a task, so you may learn something even if you're already competent in an area.
Recommended Home Lab Setup
Microsoft Azure is a cloud‐based offering, so you really don't need a home lab setup to learn about Azure. Instead, you need only a computer with a connection to the Internet and an Azure subscription for experimentation. As described in Chapter 7, you can create a free subscription in Azure and use a monthly credit included with that free subscription to work in Azure for up to a year without incurring any cost.
How to Contact Sybex
We want to ensure that you have the best resources and most up‐to‐date information as you take your Azure certification journey. On a periodic basis, visit www.wiley.com/go/Sybextestprep for updates, errata, and additional content as it becomes available.
Interactive Online Learning Environment and Test Bank
We've put together some great online tools to help you pass the AZ‐900 exam. The interactive online learning environment that accompanies Microsoft Certified Azure Fundamentals Study Guide: Exam AZ‐900 provides a test bank and study tools to help you prepare for the exam. By using these tools, you can dramatically increase your chances of passing the exam on your first try.
The online section includes the following:
Sample Tests
Many practice questions are provided throughout this book and online, including the questions in the assessment test, which you'll find at the end of this introduction, and the review questions at the end of each chapter. In addition, we provide two bonus practice exams. Use these practice questions to test your knowledge of the study guide material. The online test bank runs on multiple devices.
Flashcards
The online text bank includes 134 flashcards specifically written to test your knowledge. Don't get discouraged if you don't ace your way through them at first. The purpose of the flashcards is to help ensure that you're ready for the exam. And no worries—armed with the review questions, practice exams, and flashcards, you'll be more than prepared when exam day comes! Questions are provided in digital flashcard format (a question followed by a single correct answer). You can use the flashcards to reinforce your learning and provide last‐minute test prep before the exam.
Other Study Tools
A glossary of key terms from this book and their definitions are available as a fully searchable PDF.
Go to wiley.com/go/sybextestprep to register and get one year of free access after activation to the interactive online learning environment and test bank with study tools.
AZ‐900 Exam Objectives
Microsoft Certified Azure Fundamentals Study Guide: Exam AZ‐900 has been written to cover every exam objective at a level appropriate to its exam weighting. The following table provides a breakdown of this book's exam coverage, showing you the weight of each section and the chapter where each objective or subobjective is covered:
Subject Area
% of Exam
Describe cloud concepts
20–25%
Describe core Azure services
15–20%
Describe core solutions and management tools on Azure
10–15%
Describe general security and network security features
10–15%
Describe identity, governance, privacy, and compliance features
20–25%
Describe Azure cost management and service level agreements
10–15%
Total
100%
Domain 1: Describe Cloud Concepts
Subdomain 1a: Identify the benefits and considerations of using cloud services
Exam Objective
Chapter
1‐1 Identify the benefits of cloud computing, such as High Availability, Scalability, Elasticity, Agility, and Disaster Recovery
1
1‐2 Identify the differences between Capital Expenditure (CapEx) and Operational Expenditure (OpEx)
1
1‐3 Describe the consumption‐based model
1
Subdomain 1b: Describe the differences between categories of cloud services
Exam Objective
Chapter
1‐4 Describe the shared responsibility model
1
1‐5 Describe Infrastructure‐as‐a‐Service (IaaS)
1
1‐6 Describe Platform‐as‐a‐Service (PaaS)
1
1‐7 Describe serverless computing
1
1‐8 Describe Software‐as‐a‐Service (SaaS)
1
1‐9 Identify a service type based on a use case
1
Subdomain 1c: Describe the differences between types of cloud computing
Exam Objective
Chapter
1‐10 Define cloud computing
1
1‐11 Describe Public cloud
1
1‐12 Describe Private cloud
1
1‐13 Describe Hybrid cloud
1
1‐14 Compare and contrast the three types of cloud computing
1
Domain 2: Describe Core Azure Services
Subdomain 2a: Describe the core Azure architectural components
Exam Objective
Chapter
2‐1 Describe the benefits and usage of Regions and Region Pairs
2
2‐2 Describe the benefits and usage of Availability Zones
2
2‐3 Describe the benefits and usage of Resource Groups
2
2‐4 Describe the benefits and usage of Subscriptions
2
2‐5 Describe the benefits and usage of Management Groups
2
2‐6 Describe the benefits and usage of Azure Resource Manager
2
2‐7 Explain Azure resources
2
Subdomain 2b: Describe core resources available in Azure
Exam Objective
Chapter
2‐8 Describe the benefits and usage of Virtual Machines, Azure App Service, Azure Container Instances (ACI), Azure Kubernetes Service (AKS), and Windows Virtual Desktop
2
2‐9 Describe the benefits and usage of Virtual Networks, VPN Gateway, Virtual Network peering, and ExpressRoute
3
2‐10 Describe the benefits and usage of Container (Blob) Storage, Disk Storage, File Storage, and storage tiers
2
2‐11 Describe the benefits and usage of Cosmos DB, Azure SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL, and SQL Managed Instance
2
2‐12 Describe the benefits and usage of Azure Marketplace
2
Domain 3: Describe Core Solutions and Management Tools on Azure
Subdomain 3a: Describe core solutions available in Azure
Exam Objective
Chapter
3‐1 Describe the benefits and usage of Internet of Things (IoT) Hub, IoT Central, and Azure Sphere
5
3‐2 Describe the benefits and usage of Azure Synapse Analytics, HDInsight, and Azure Databricks
5
3‐3 Describe the benefits and usage of Azure Machine Learning, Cognitive Services, and Azure Bot Service
5
3‐4 Describe the benefits and usage of serverless computing solutions that include Azure Functions and Logic Apps
5
3‐5 Describe the benefits and usage of Azure DevOps, GitHub, GitHub Actions, and Azure DevTest Labs
5
Subdomain 3b: Describe Azure management tools
Exam Objective
Chapter
3‐6 Describe the functionality and usage of the Azure Portal, Azure PowerShell, Azure CLI, Cloud Shell, and Azure Mobile App
7
3‐7 Describe the functionality and usage of Azure Advisor
7
3‐8 Describe the functionality and usage of Azure Resource Manager (ARM) templates
7
3‐9 Describe the functionality and usage of Azure Monitor
7
3‐10 Describe the functionality and usage of Azure Service Health
7
Domain 4: Describe General Security and Network Security Features
Subdomain 4a: Describe Azure security features
Exam Objective
Chapter
4‐1 Describe the basic features of Azure Security Center, including policy compliance, security alerts, secure score, and resource hygiene
4
4‐2 Describe the functionality and usage of Key Vault
4
4‐3 Describe the functionality and usage of Azure Sentinel
4
4‐4 Describe the functionality and usage of Azure Dedicated Hosts
4
Subdomain 4b: Describe Azure network security
Exam Objective
Chapter
4‐5 Describe the concept of defense in depth
4
4‐6 Describe the functionality and usage of Network Security Groups (NSG)
4
4‐7 Describe the functionality and usage of Azure Firewall
4
4‐8 Describe the functionality and usage of Azure DDoS Protection
4
Domain 5: Describe Identity, Governance, Privacy, and Compliance Features
Subdomain 5a: Describe core Azure identity services
Exam Objective
Chapter
5‐1 Explain the difference between authentication and authorization
4
5‐2 Define Azure Active Directory
4
5‐3 Describe the functionality and usage of Azure Active Directory
4
5‐4 Describe the functionality and usage of Conditional Access, Multi‐Factor Authentication (MFA), and Single Sign‐On (SSO)
4
Subdomain 5b: Describe Azure governance features
Exam Objective
Chapter
5‐5 Describe the functionality and usage of Role‐Based Access Control (RBAC)
4
5‐6 Describe the functionality and usage of resource locks
4
5‐7 Describe the functionality and usage of tags
4
5‐8 Describe the functionality and usage of Azure Policy
4
5‐9 Describe the functionality and usage of Azure Blueprints
4
5‐10 Describe the Cloud Adoption Framework for Azure
4
Subdomain 5c: Describe privacy and compliance resources
Exam Objective
Chapter
5‐11 Describe the Microsoft core tenets of Security, Privacy, and Compliance
4
5‐12 Describe the purpose of the Microsoft Privacy Statement, Product Terms site, and Data Protection Addendum (DPA)
4
5‐13 Describe the purpose of the Trust Center
4
5‐14 Describe the purpose of the Azure compliance documentation
4
5‐15 Describe the purpose of Azure Sovereign Regions (Azure Government cloud services and Azure China cloud services)
4
Domain 6: Describe Azure Cost Management and Service Level Agreements
Subdomain 6a: Describe methods for planning and managing costs
Exam Objective
Chapter
6‐1 Identify factors that can affect costs (resource types, services, locations, ingress and egress traffic)
6
6‐2 Identify factors that can reduce costs (reserved instances, reserved capacity, hybrid use benefit, spot pricing)
6
6‐3 Describe the functionality and usage of the Pricing Calculator and the Total Cost of Ownership (TCO) Calculator
6
6‐4 Describe the functionality and usage of Azure Cost Management
6
Subdomain 6b: Describe Azure Service Level Agreements (SLAs) and service lifecycles
Exam Objective
Chapter
6‐5 Describe the purpose of an Azure Service Level Agreement (SLA)
6
6‐6 Identify actions that can impact an SLA (i.e. Availability Zones)
6
6‐7 Describe the service lifecycle in Azure (Public Preview and General Availability)
6
Exam domains and objectives are subject to change at any time without prior notice and at Microsoft's sole discretion. Please visit their website for the most current information.
Assessment Test
1.
Microsoft Azure enables your organization to move IT expenditures to:
A.
Capital expenditures
B.
Operational expenditures
C.
A controlled expense model
D.
None of the above
2.
Which of the following tools can you use to estimate the expense of moving a data center from on‐premises to Azure?
A.
Azure Pricing Calculator
B.
Azure Cost Management + Billing
C.
Azure TCO Calculator
D.
Azure CLI
3.
The term
agility
in Microsoft Azure refers to:
A.
The ease with which you can move workloads from on‐premises to Azure and back again
B.
The ability to quickly adjust resources such as memory to adapt to changes in demand
C.
The ability to add more front‐end web servers to a web application to adapt to increased demand
D.
The ability to quickly create redundancy in a solution
4.
Which of the following describes the benefit
economy of scale
as it relates to Microsoft Azure?
A.
The capability to distribute resources across multiple regions to reduce cost
B.
The ability to place resources in less expensive Azure regions to reduce costs
C.
The capability to automatically scale down the number of virtual machines in an Azure solution to reduce costs when demand decreases
D.
The decrease in price per subscriber as more subscribers are added
5.
Which of the following in an example of vertical scaling?
A.
Adding VMs to a web app as demand increases
B.
Reducing memory allocated to VMs when demand decreases
C.
Adding CPU cores to a VM when demand increases
D.
Both B and C
6.
A service that provides the capability to deploy a SQL database without the need for you to set up a VM or install SQL Server is an example of:
A.
Infrastructure‐as‐a‐service (IaaS)
B.
Software‐as‐a‐service (SaaS)
C.
Platform‐as‐a‐service (PaaS)
D.
Data‐as‐a‐service (DaaS)
7.
Accessing an application through a web page rather than installing the application on your local device is an example of:
A.
Infrastructure‐as‐a‐service (IaaS)
B.
Software‐as‐a‐service (SaaS)
C.
Platform‐as‐a‐service (PaaS)
D.
Data‐as‐a‐service (DaaS)
8.
Deploying virtual machines (VMs) in a shared cloud environment is an example of:
A.
Infrastructure‐as‐a‐service (IaaS)
B.
Software‐as‐a‐service (SaaS)
C.
Platform‐as‐a‐service (PaaS)
D.
Data‐as‐a‐service (DaaS)
9.
Which of the following accurately describes an Azure
geography
?
A.
It corresponds to a single country or to a market encompassing multiple countries.
B.
It always corresponds to a specific country.
C.
It represents a set of physical data centers.
D.
None of the above.
10.
An Azure region:
A.
Describes a specific Azure data center
B.
Is usually paired with another region to ensure high availability
C.
Can span across multiple countries
D.
Encompasses the data centers in which all of your Azure resources reside
11.
Azure China is a physically isolated instance of Azure available only to Chinese government entities.
A.
Yes
B.
No
12.
You are deploying three VMs in a single region as web front ends to a web application. You need to ensure that power outages or other potential data center outages do not make your web application unavailable. Which of the following achieves this goal?
A.
You place the VMs in an availability set.
B.
You place the VMs in separate resource groups.
C.
You place the VMs in different availability zones.
D.
You deploy additional VMs to other regions.
13.
What is the function of a resource group in Azure?
A.
It provides automatic scaling of CPU cores, memory, and other resources for VMs.
B.
It enables you to establish a higher SLA for VMs.
C.
It protects resources from being deleted.
D.
It serves as a logical container for Azure resources.
14.
Is the underlined portion of the following statement true, or does it need to be replaced with one of the other fragments that appear below?
Azure Resource Manager enables you to deploy multiple resources using JSON‐based templates.
A.
is the primary tool you use to manage resources in Azure.
B.
is the blade in Azure portal that provides access to resource management and monitoring tools, including management templates.
C.
enables you to interactively allocate additional CPU cores and memory to VMs.
D.
No change is needed.
15.
Which of the following statements is not true regarding Azure subscriptions?
A.
A subscription is aligned to a specific Azure region.
B.
You can move resources from one subscription to another.
C.
Subscriptions can help simplify Azure billing and cost management.
D.
You can move a subscription to a new Azure AD tenant.
16.
Azure App Service provides support for multiple development languages, containers, and Windows and Linux.
A.
Yes
B.
No
17.
Which of the following can you use to orchestrate container management in Azure?
A.
Azure Container Instance (ACI)
B.
Azure Resource Manager
C.
Azure Kubernetes
D.
Azure CLI
18.
Is the underlined portion of the following statement true, or does it need to be replaced with one of the other fragments that appear below? Containers that you deploy in a group Azure
support only the Linux OS
.
A.
support only the Windows OS.
B.
share the same OS as other containers in the group.
C.
require configuration of the OS for each container.
D.
No change is needed.
19.
You need to set up a storage solution in Azure to enable you to store the state of an application from one execution of the application to the next. Which of the following storage solutions provide that capability?
A.
Azure Disk
B.
Azure Blob
C.
Azure Files
D.
Azure Archive
20.
Which of the following data solutions would be the most cost‐efficient solution for storing and retrieving sales data for your sales team using SQL statements?
A.
Host a database using Azure SQL Database
B.
Host a database using Azure Managed SQL Instance
C.
Install SQL Server on a VM in Azure
D.
Host a database using Cosmos DB
21.
Which of the following does not provide load balancing between resources in Azure?
A.
Azure Front Door
B.
Azure Traffic Manager
C.
Azure Load Balancer
D.
Azure network security groups (NSGs)
22.
You have deployed a web application in Azure and need HTTPS traffic to be routed to a specific endpoint based on the requested URL. Which of the following load‐balancing solutions provides this capability?
A.
Azure Traffic Manager
B.
Azure Load Balancer
C.
Azure Application Gateway
D.
Azure network security groups
23.
You need to ensure that network traffic between your on‐premises data center and Azure is securely encrypted as it traverses the Internet, but you do not want your organization to manage the service. Which of the following should you choose?
A.
Azure VPN Gateway
B.
Azure Point‐to‐Point VPN
C.
Azure ExpressRoute
D.
Azure ExpressRoute Direct
24.
Your organization has compliance restrictions that prevent your data from traversing the Internet between your on‐premises data center and your resources in Azure. Which of the following provides a solution for this requirement?
A.
Azure Managed VPN
B.
Azure ExpressRoute Direct
C.
Azure VPN Gateway
D.
Azure ExpressRoute
25.
Which of the following is an appropriate solution for placing video files and large documents close to where your globally dispersed users are located to reduce latency?
A.
A dedicated point‐to‐point VPN connection between the source files and each location.
B.
Azure DirectRoute
C.
Azure Content Delivery Network
D.
None of the above
26.
Which of the following solutions would enable only you and one of your peers to access and manage an Azure VM using RDP on port 3389?
A.
Role‐based access control (RBAC) and an Azure network security group (NSG)
„Ich bin wirklich begeistert. Auch die Möglichkeit des zusätzlichen eReaders im Abo finde ich persönlich toll.”
Happy Booktime
„Die Auswahl von Legimi ist großartig.”
Bücherleser
„Der Leser findet seine E-Books/Hörbücher sehr schnell und sie lassen sich, ob mit oder ohne Internetverbindung problemlos öffnen.”
Wurm sucht Buch
„Ich finde das Angebot von Legimi richtig toll.”
TheSarahStory
„Besonders schön finde ich die große Auswahl an möglichen Abo-Modellen und besonders die Abos mit eReader.”
Miss Foxy Reads
„Ich muss sagen, dass ich von dem E-Reader mehr als positiv überrascht bin.”
Wortmalerei
„Das ist wirklich eine großartige Idee und mal was ganz Anderes.”
Mikka liest das Leben...
Tausende von E-Books und Hörbücher
Ihre Zahl wächst ständig und Sie haben eine Fixpreisgarantie.
Sie haben über uns geschrieben:
Dabei gewährt der E-Book-Anbieter größtmögliche Freiheiten
Größter Vorteil die Möglichkeit, in der aktuellen App komfortabel zwischen E-Book und Hörbuchversion eines Titels
Spotify for E-Books
