Azure Monitor – IT – Engineering – Cloud

November 19, 2020May 16, 2022

AZ-900: Microsoft Azure Fundamentals – Top 100 Questions and Answers Dumps

Microsoft Certified: Azure Fundamentals Average Salary — $126,653/year

Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Amazon’s AWS and Microsoft’s Azure are the big boys of the cloud computing world, even though AWS is much bigger than Azure.

Revenue from Microsoft Azure grew 72% from 2018 from $7.56 billion to $13 billion. Azure contributed to almost 10.5% of Microsoft’s total revenue in 2019. It has also been noted that the US defense chose Azure in its tactical operations. The last quarter earnings of 2019 grew by 64%.

2022 AWS Cloud Practitioner Exam Preparation

Azure Fundamentals exam is an opportunity to prove knowledge of:

Describing Cloud Concepts (20%),

Describing Azure s ervices (20%),

Describing core solutions and management tools on Azure (10-15%),

Describing general security and network security features (10-15%),

Describing identity, governance, privacy, and compliance features (15-20%),

Describe Azure cost management and Service Level Agreements (10-15%)

This blog also includes Azure Services Cheat Sheet.

Save 65% on select product(s) with promo code 65ZDS44X on Amazon.com

The exam is intended for candidates who are just beginning to work with cloud-based solutions and services or are new to Azure.
Candidates should be familiar with the general technology concepts, including concepts of
networking, storage, compute, application support, and application development.
Azure Fundamentals can be used to prepare for other Azure role-based or specialty
certifications, but it is not a prerequisite for any of them.

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep in Udemy [50% OFF with this link]

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

Azure Fundamentals AZ900 Exam Prep on Web/PWA

Djamgatech App store

Below are the top 100 AZ-900 Microsoft Azure fundamentals Certification exam questions and answers dumps.

I- AZ-900 Cloud Concepts – Azure Services

Question 1: Microsoft Office 365 is an example of which cloud deployment model?

A. PaaS

B. IaaS

C. CASB

D. SaaS

Answer1:

Notes:

Software as a service (SaaS) allows users to connect to and use cloud-based apps over the internet. Common examples are email, calendar, and office tools, such as Microsoft Office 365.

Reference1: SAAS

Question 2: You have an on-premises application that processes incoming Simple Message Submission Service (SMSS) queue messages and records the data to a log file. You migrate this application to an Azure function app. What kind of cloud service would this be considered?

A. Software-as-a-Service (SaaS)

B. Infrastructure-as-a-Service (IaaS)

C. Serverless

D. Platform-as-a-Service (PaaS)

Answer2:

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep in Udemy [50% OFF with this link]

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

Azure Fundamentals AZ900 Exam Prep on Web/PWA

Djamgatech App store

Notes2:

Serverless computing is the abstraction of servers, infrastructure, and operating systems. When you build serverless apps, you don’t need to provision and manage any servers, so you don’t have to worry about infrastructure. Serverless computing is driven by the reaction to events and triggers happening in near-real time in the cloud.

Reference2: Platform-as-a-Service (PaaS)

Question 3: Define “economy of scale”.

A. Spending money on products or services now and being billed for them now. You can deduct this expense from your tax bill in the same year.

B. Spending money on physical infrastructure up front, and then deducting that expense from your tax bill over time.

C. Prices for individual resources and services are provided so you can predict how much you will spend in a given billing period based on your expected usage.

D. The ability to do things more efficiently or at a lower cost per unit when operating at a larger scale.

Answer 3:

Notes 3:

Cloud providers such as Microsoft, Google, and Amazon are large businesses that leverage the benefits of economies of scale and then pass the savings on to their customers.

Reference3: Cloud: Economies at scale

Download Azure Fundamentals AZ900 Certification Exam Prep#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #DjamgatechAzure Fundamentals AZ900 Exam Prep on iOs Azure Fundamentals AZ900 Exam Prep on android Azure Fundamentals AZ900 Exam Prep on Windows 10/11 Azure Fundamentals AZ900 Exam Prep on Web/PWA

Djamgatech App store

Question 4: Which of the following are characteristic of private clouds?

A. Lower costs

B. High scalability

C. Improved security

D. Limited flexibility

Answer 4:

B and C

Notes 4:

Private clouds still afford the scalability and efficiency of a public cloud. Resources are purchased and available to meet your business needs.

Video for reference: The Private Cloud Model

Because resources are not shared with others, private clouds provide higher levels of control and security.

Reference 4: The private cloud model

Question 5: Which of the following Azure solutions allows you to geographically cache and distribute high-bandwidth content, such as streaming videos, to users in different parts of the world?

A. Content Delivery Network (CDN)

B. Load Balancer

C. Application Gateway

D. Virtual Network Gateway

Answer 5:

Notes 5:

Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth content to users by caching their content at strategically placed physical nodes around the world. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network optimizations using CDN POPs.

Reference 5: CDN

Question 6: You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?

A. Platform-as-a-Service (PaaS)

B. Infrastructure-as-a-Service (IaaS)

C. Software-as-a-Service (SaaS)

D. Hybrid-as-a-Service (HaaS)

Answer 6:

Notes 6:

Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the internet. Deploying virtual machines into an Azure subscription would be considered an IaaS service.

Reference 6: IAAS

Download Azure Fundamentals AZ900 Certification Exam Prep App For More

AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

Azure Fundamentals AZ900 Exam Prep on Udemy [50% OFF]

AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store

Question 7: Select the concept that is defined as ensuring that servers are available if a single data center goes offline.

A. Scalability

B. Fault tolerance

C. Elasticity

D. Agility

Answer 7:

Notes 7:

Fault tolerance is the property that enables a system to continue operating properly in the event of the failure of one or more of its components. In Azure, it refers to ensuring that a portion of the production systems are available online (via a failover cluster, available set, or available zone) if a subset of the system components (or an entire data center) goes offline.

Reference 7: Fault Tolerance

Question 8: In regards to comparing Public Cloud and Private Cloud, which of these best describe the characteristics of a Public Cloud?

A. No-upfront costs

B. More control over the security

C. Less reliability

D. Less maintenance

Answer 8:

A and D

Notes 8

The public cloud provides a pay-as-you-go pricing model which can lead to lower costs than those in private cloud solutions where capital expenditures are high.

The public cloud provides agility to provision and de-provision resources quickly with far less maintenance than that of private cloud solutions.

Reference 8: Pay as you go

Question 9: Which of the following are considered capital expenditures (CapEx)?

A. Storage area network

B. Cloud-based virtual machine

C. Office 365 licenses

D. Hyper-V host server

Answer 9:

A and D

Notes 9:

Storage costs are typically considered CapEx and include storage hardware components and the cost of supporting them. Depending on the application and level of fault tolerance, centralized storage can be expensive.

Server costs are considered CapEx and include all server hardware components and the cost of supporting them. When purchasing servers, make sure to design for fault tolerance and redundancy (e.g., server clustering, redundant power supplies, and uninterruptible power supplies). When a server needs to be replaced or added to a data center, you need to pay for the computer. This can affect your immediate cash flow because you must pay for the server up front.

Reference 9: Storage area network – Hyper-V host server

Question 10: You are in the process of migrating your existing on-premises SQL databases to Azure. You will migrate them to Azure SQL databases, as opposed to deploying SQL database servers in Azure. What kind of cloud service would this be considered?

A. Software-as-a-Service (SaaS)

B. Platform-as-a-Service (PaaS)

C. Serverless

D. Infrastructure-as-a-Service (IaaS)

Answer 10:

Notes 10:

Platform as a service (PaaS) is a complete development and deployment environment in the cloud with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications. An Azure SQL instance would be considered a PaaS service.

Reference 10: PAAS

Question 11: Which of the following statements are true for IaaS cloud services?

A. The client is responsible for purchasing all Operating System (OS) host licensing.

B. Services can be scaled automatically to support system load.

C. The client has complete control over the host operating system.

D. The client is responsible for all guest OS and application updates.

Answer 11:

B and D

Notes 11:

IaaS host services are scaled automatically to combat increased system load and scaled back during periods of inactivity.

The cloud service provider performs all underlying hardware, OS, and middleware updates. The client performs all guest OS and application updates.

Question 12: Which of the following tools can be used to manage Azure resources on a Google Chromebook?

A. Azure portal

B. PowerShell

C. Azure Cloud Shell

D. Azure CLI

Answer 12:

A and C

Notes 12:

You can run the Azure portal on all modern desktop, tablet devices, and browsers.

Azure Cloud Shell is an interactive, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work. Linux users can opt for a Bash experience, while Windows users can opt for PowerShell.

Reference 12: Azure Portal – Azure Cloud Shell

Question 13: Which Azure service can provide big data analysis for machine learning?

A. Azure App Service

B. Azure WebJobs

C. Application Insights

D. Azure Databricks

Answer 13:

Notes 13:

Azure Databricks is an Apache Spark-based analytics platform optimized for the Microsoft Azure cloud services platform. Databricks enables collaboration between data scientists, data engineers, and business analysts.

Reference 13: Azure Databricks

Question 14: You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?

A. A Queue service in a storage account

B. A virtual machine data disk

C. A File service in a storage account

D. A Blob service in a storage account

Answer 14:

Notes 14:

Azure Queue storage is a service for storing large numbers of messages that can be accessed from anywhere in the world via authenticated calls using HTTP or HTTPS.

Reference: Azure Queue storage

Question 15: You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a computing solution for the application that should minimize costs by incurring charges only when it is executed.

Which Azure solution is best for this type of application?

A. Logic App

B. A web app

C. Service Bus App

D. IaaS web server in Azure

Answer 15:

Notes 15:

Azure Logic Apps is a cloud service that helps you automate and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations. Logic Apps simplifies how you design and build scalable solutions for app integration, data integration, system integration, enterprise application integration (EAI), and business-to-business (B2B) communication, whether in the cloud, on-premises, or both.

For example, here are just a few workloads you can automate with logic apps:Process and route orders across on-premises systems and cloud services.

Send email notifications with Office 365 when events happen in various systems, apps, and services.

Move uploaded files from an SFTP or FTP server to Azure Storage.

Monitor tweets for a specific subject, analyze the sentiment, and create alerts or tasks for items that need review.

For new logic apps that run in the public or “global” Azure Logic Apps service, you pay only for what you use. These logic apps use a consumption-based plan and pricing model.

Reference 15: Logic App Logic App Pricing

Question 16: You are the Systems Administrator for a local university. You are deploying several sets of systems that will be used for research and development teams. Each set of systems will be uniform in nature, containing the same number and type of Azure resources.

What should you recommend to automate the creation of these Azure resources?

A. Azure Resource Manager templates

B. Multiple Azure subscriptions

C. Management groups

D. Virtual machine scale sets

Answer 16:

Notes 16:

An Azure Resource Manager template is the framework by which resources are created. They can be used to define and automate the creation of similar resources.

Reference 16: ARM Templates

Question 17: You are deploying a pair of Azure virtual machines. You want to ensure that the application will remain available in the event of a complete data center failure. What Azure technology will help most in this task?

A. Locally redundant storage

B. Zone Redundant Storage

C. Availability zone

D. Availability set

Answer 17:

Notes 17:

An Availability zone consists of two or more virtual machines in different physical locations within an Azure region. This configuration ensures that only a subset of the virtual machines in an availability zone will be affected in the event of hardware failure, OS update, or a complete data center outage. This configuration offers 99.99% SLA.

Question 18: Which of the following database solutions has the ability to add data concurrently from multiple regions simultaneously?

A. SQL managed instances

B. Cosmos DB

C. SQL Data Warehouses

D. Azure SQL Databases

Answer 18:

Notes 18:

Azure Cosmos DB is Microsoft’s globally distributed, multi-model database service. Cosmos DB elastically and independently scales throughput and storage across any number of Azure regions worldwide.

Reference: Azure Cosmo DB

Question 19: Which Azure service can host your web apps without you having to manage underlying infrastructure?

A. Azure App Service

B. Azure WebJobs

C. Azure Databricks

D. Application Insights

Answer 19:

Notes 19:

Azure App Service enables you to build and host web apps, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure.

Reference 19: Azure App Services

Question 20: Which of the following components can be used to load balance traffic to web applications, such as Azure App Service web apps using layer 7 of the OSI model?

A. Virtual Network

B. Virtual Network Gateway

C. Route table

D. Load Balancer

E. Application Gateway

Answer 20:

Notes 20:

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 — TCP and UDP) and route traffic based on source IP address and port to a destination IP address and port.

Reference 20: Application Gateway

Question 21: Which Azure service can help you collect, analyze, and act on telemetry from your cloud and on-premises environments?

A. Azure App Service

B. Azure Monitor

C. Azure Analyzer

D. Azure WebJobs

Answer 21:

Notes 21:

Azure Monitor is a service that can help you understand how your applications are performing and proactively identify issues affecting them and the resources they depend on.

Reference 21: Azure Monitor

Download Azure Fundamentals AZ900 Certification Exam Prep App For More

AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store

II- Azure workloads, Security, Privacy, Compliance, and Trust

Question 22: Which of the following components are required to establish communication between on-premises resources and resources in Azure?

A. Virtual Network

B. VNet peer

C. Route tables

D. Virtual network gateway

Answer 22:

A and D

Notes 22:

Azure Virtual Network enables many types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the internet, and on-premises networks.

A virtual network gateway defines the Azure network side of a site-to-site virtual private network.

Question 23: Which Azure service should you use to correlate metrics and logs from multiple resources into a centralized repository?
A. Azure Event Grid

B. Azure Event Hubs

C. Azure SQL Data Warehouse

D. Azure Monitor

Answer 23:

Notes 23:

Log data collected by Azure Monitor (formerly Azure Log Analytics) is stored in a Log Analytics workspace, which is based on Azure Data Explorer. It collects telemetry from a variety of sources and uses the Kusto query language used by Data Explorer to retrieve and analyze data.

Reference 23: Azure Monitor – Log Query Overview

Question 24: You are the Azure Administrator for Radio Gaga, LTD. You have a resource group named RG-RG and need to ensure no other administrators can create virtual networks in this resource group. What can you implement to accomplish this?

A. Access Control (IAM)

B. Azure policy

C. Locks

D. Properties

Answer 24:

Notes 24:

Azure Policy is a service in Azure used to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

For example, you can have the policy to allow only a certain SKU size of virtual machines in your environment. Once this policy is implemented, new and existing resources are evaluated for compliance. With the right type of policy, existing resources can be brought into compliance.

Reference 24: Azure Policy

Question 25: Which of the following is the organization that defines standards used by the United States government?

A. NIST

B. ITIL

C. GDPR

D. ISO

Answer 25:

Notes 25:

The National Institute of Standards and Technology (NIST) promotes and maintains measurement standards and guidance to help organizations assess risk. It defines the standards that are used by the United States government as well as the US Department of Defense (DoD).

Reference 25: NIST

Download Azure Fundamentals AZ900 Certification Exam Prep App For More

AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store

Question 26: You have an Azure virtual network named VNet in a resource group named Bob-RG. You assign an Azure policy specifying virtual networks are not an allowed resource type in Bob-RG. What happens to VNet once this policy is applied?

A. VNet is moved to a new resource group.

B. Bob-RG is deleted automatically

C. VNet continues to function normally, but no new subnets can be added.

D. VNet is deleted automatically.

Answer 26:

Notes 26:

Azure policies that determine the allowed types of resources can only prevent non-compliant resources from being created. Existing non-compliant resources are not affected. However, the policy is flagged as non-compliant so that the administrator can determine action (if any).

Reference: Here

Question 27: Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?

A. Azure Event Hubs

B. Azure Activity Log

C. Azure Service Health

D. Azure Monitor

Answer 27:

Notes 27:

The Azure Activity Log is a subscription log that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. Events such as starting and stopping of virtual machines can be found here.

Reference 27: Here

Question 28: What kind of information does Azure Information Protection protect?

A. Email messages

B. Office documents

C. Azure Blob Storage

D. Virtual hard disks

E. PDF documents

Answer 28:

A B E

Notes 28:

A collaboration between Microsoft and Adobe brings you a more simplified and consistent experience for PDF documents that have been classified and, optionally, protected. This collaboration provides support for Adobe Acrobat native integration with Microsoft Information Protection solutions, such as Azure Information Protection.

Question 29: Which of the following is true regarding HDInsight?

A. It is an on-demand analytics job service that simplifies big data. Instead of deploying, configuring, and tuning hardware, you write queries to transform your data and extract valuable insights.

B. It is a managed relational cloud database service.

C. It is a cloud-based service that is a limitless analytics service that brings together enterprise data warehousing and Big Data analytics.

D. It is an open-source framework for the distributed processing and analysis of big datasets in clusters.

Answer 29:

Notes 29:

Azure HDInsight is a managed, full-spectrum, open-source analytics service for enterprises. HDInsight is a cloud service that makes it easy, fast, and cost-effective to process massive amounts of data. HDInsight also supports a broad range of scenarios, like extract, transform, and load (ETL); data warehousing; machine learning; and IoT.

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store

Question 30: Which of the following website provides information on Azure product updates, roadmaps, and announcements?

A. https://preview.portal.azure.com/

B. https://azure.microsoft.com/en-us/updates/

C. https://portal.azure.com/

D. https://azure.microsoft.com/en-us/services/updates/

Answer 30:

Notes 30:

Learn about important Azure product updates, roadmap, and announcements here

Questions 31: Azure virtual machines can be moved between which of the following Azure resources?

A. Subscriptions

B. Regions

C. Availability Sets

D. Resource Groups

E. Availability Zones

Answer 31:

A, B, D, E

Notes 31:

Azure virtual machines can be moved between subscriptions with either Azure PowerShell or the Azure portal. Using Azure Site Recovery, you can migrate Azure VMs to other regions. Azure virtual machines can be moved between resource groups with either Azure PowerShell or the Azure portal. Using Azure Site Recovery, you can migrate Azure VMs to other Availability Zones.

II- Azure Pricing and Support

Question 32: Which Azure support plans can open support cases?

A. Professional Direct

B. Basic

C. Standard

D. Developer

E. Premier

Answer 32:

A, C, D, E

Notes 32:

All support plans outside of the basic support plan can open support cases.

Question 33: For any Single Instance virtual machine using premium SSD or Ultra Disk for all Operating System Disks and Data Disks, what is the SLA guarantee for virtual machine connectivity?

A. 99.9%

B. 99.99

C. 99.95%

D. There is no SLA guarantee

Answer 33:

Notes 33:

For any Single Instance Virtual Machine using Premium SSD or Ultra Disk for all Operating System Disks and Data Disks, Azure guarantees you will have Virtual Machine Connectivity of at least 99.9%.

Question 34: Which of the following Azure services is a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database?

A. Azure SQL database

B. Azure HDInsight

C. Azure SQL Data Warehouse (Azure Synapse )

D. Azure Data Lake Analytics

Answer 34:

Notes 34:

Azure SQL Data Warehouse (Azure Synapse ) is a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database.

Reference 34: Azure SQL Data Warehouse (Azure Synapse )

Question 35: You have an Azure subscription that contains the following unused resources:

Name	Type	Configuration
nic0	Network Interface	10.0.0.6
pip1	Public IP	Static
lb1	Load Balancer	Standard, 5 rules configured
VNet2	Virtual Network	10.1.0.0/16
VM3	Virtual Machine	Stopped (Deallocated)

Based on this information, which of the following unused resources should you remove to lower cost?

A. lb1

B. VNet2

C. pip1

D. nic0

E. VM3

Answer 35:

A and C

Notes 35:

The pricing for Standard Load Balancer is based on the number of rules configured (load balancer rules and NAT rules) and data processed. However, there is no hourly charge for the Standard Load Balancer itself when no rules are configured. Since this load balancer contains rules, it should be removed to save money.

In ARM deployment model, there is no charge for dynamic public IP addresses when the associated virtual machine is “stopped-deallocated”. However, you’re charged for a static public IP address irrespective of the associated resource (unless it is part of the first five static ones in the region). This resource should be removed.

Reference 35: IP addresses

Question 36: Which of the following recommendations is provided by Azure Advisor?

A. Azure resource costs

B. Azure virtual machine IP configuration

C. Storage performance and reliability

D. Azure App Service security

Answer 36:

A C D

Notes 36:

A key recommendation of Azure Advisor is cost, which allows you to see how your resources are performing and provide recommendations on how to reduce the cost of underutilized systems.

Advisor identifies virtual machines with standard disks that have a high volume of transactions on your storage account and recommends upgrading to premium disks.

Azure Advisor integrates with Azure Security Center to provide recommendations and detect vulnerabilities.

Download Azure Fundamentals AZ900 Certification Exam Prep#Azure

#AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store

Question 37: You are planning on purchasing Azure AD Premium for your Azure subscription. What is the SLA for this product?

A. 99.99%

B. 99.9%

C. 99.95%

D. Azure AD products are not covered under an SLA.

Answer 37:

Notes 37:

Per the Azure documentation: We guarantee at least 99.9% availability of the Azure Active Directory Basic and Premium services. The services are considered available in the following scenarios:

Users are able to login to the service, log in to the Access Panel, access applications on the Access Panel and reset passwords. IT administrators are able to create, read, write and delete entries in the directory or provision or de-provision users to applications in the directory.

No SLA is provided for the Free tier of Azure Active Directory.

Question 38: Which of the following Azure support plans offer Severity “A” and “B” cases to be opened?

A. Premier

B. Standard

C. Developer

D. Professional Direct

E. Basic

Answer 38:

A B D

Notes 38:

This support plan offers cases to be assigned a severity of “A”, “B”, and “C”. The response times are as follows:

“A”: < 1 hour

“B”: < 2 hour

“C”: < 4 business hours

Standard Support

Professional Direct Support

Question 39: This question requires that you evaluate the underlined text to determine if it is correct.
When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed.

B. defining scalability rules

C. installing the SaaS solution

D. configuring the SaaS solution

Answer 39:

Notes 39:

SAAS

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Question 40: You have an on-premises network that contains several servers.
You plan to migrate all the servers to Azure.
You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period.
What should you include in the recommendation?

A. fault tolerance

B. elasticity

C. scalability

D. low latency

Answer 40:

Notes 40:

Fault Tolerance

Question 41: This question requires that you evaluate the underlined text to determine if it is correct.
When planning to migrate a public website to Azure, you must plan to pay monthly usage costs.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed

B. Deploy a VPN

C. pay to transfer all the website data to Azure

D. reduce the number of connections to the website

Answer 41:

Notes 41:

No change is needed

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store

Question 42: You have an on-premises network that contains 100 servers.
You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs.
What should you include in the recommendation?

A. a complete migration to the public cloud

B. an additional data center

C. a private cloud

D. a hybrid cloud

Answer 42:

Notes 42:

Private Cloud

Question 43: Which Azure offering refers to a set of development, testing, and automation tools?

A. Azure Cognitive Services

B. Azure Boards

C. Azure DevOps

D. GitHub

Answer 43:

Notes: Azure DevOps Services provides development collaboration tools, including high-performance pipelines, free private Git repositories, configurable Kanban boards, and extensive automated and continuous testing capabilities.

Question 44: Which of the following are available in the Azure Marketplace?

A. Virtual machine images

B. SaaS applications

C. Solution templates

D. Sample application code

Answer 44:

A B C

Notes: Virtual machine images are available in the Azure Marketplace. Images are available for Windows and Linux. Stock operating system images, as well as custom images with pre-installed applications, are also available.

SaaS applications make up the majority of the Azure Marketplace. One click allows you to install and use many popular applications — such as Office365, Salesforce, Zoom, and others — seamlessly with your Azure subscription.

Solution templates allow you to deploy entire IaaS solutions with a simple click. Examples include complete SharePoint farms as well as SQL Always Available clusters.

Question 45: Which of the following regulates data privacy in the European Union (EU)?

A. ITIL

B. GDPR

C. ISO

D. NIST

Answer 45:

Notes: The General Data Protection Regulation (EU) 2016/679 (“GDPR”) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas. The GDPR aims primarily to give control to individuals over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

Question 46: You currently have two Azure Pay-As-You-Go subscriptions. You would like to transfer billing ownership of the subscriptions to another account while moving the subscriptions into the other accounts Azure AD tenant. How can you accomplish this?

A. Open a support ticket by contacting Microsoft Azure Support

B. In the Azure Portal, under Azure Subscriptions click Change Directory

C. Using Azure CLI, run the az account merge command

D. In the Azure Portal, under Cost Management + Billing under Azure Subscriptions

Answer 46:

Notes: It is here that we can transfer billing ownership by clicking on the context menu for the subscription. We then select “Transfer billing ownership” and as part of the process, we can provide the email associated with the other account, and can also choose to move the subscription into the Azure AD tenant of the other account. This will move the subscription into the default Azure AD tenant of the destination account.

Azure Documentation

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Web/PWA: https://azurefundamentalsexamprep.com

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Djamgatech App store

Question 47: Where can you open a new Azure support request?

A. Knowledge Center

B. support.microsoft.com

C. Azure Portal

D. Security Center

Answer 47:

Notes: A support request can only be opened via the Azure Portal.

Question 48: You attempt to create several managed disks in your Azure environment. In the Portal, you receive a message that you must increase your Azure subscription limits. What should you do to increase the limits?

A. Modify an Azure policy.

B. Use Azure PowerShell to create the new managed disks.

C. Create a new support request.

D. Upgrade your support plan.

Answer 48:

Notes: If you want to raise the limit or quota above the default limit, open an online customer support request at no charge.

Question 49: A company wants to build a new voting kiosk for sales to governments around the world. Which IoT technologies should the company choose to ensure the highest degree of security?

A. IoT Hub

B. IoT Central

C. Azure Sphere

D. Azure IoT

Answer 49:

Notes: Azure Sphere provides the highest degree of security to ensure the device has not been tampered with.

Question 50: This question requires that you evaluate the underlined text to determine if it is correct.
When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed.

B. defining scalability rules

C. installing the SaaS solution

D. configuring the SaaS solution

Answer 50:

Notes: configuring the SaaS solution

Question 51: A company wants to quickly manage its individual IoT devices by using a web-based user interface. Which IoT technology should it choose?

A. IoT Hub

B. IoT Central

C. Azure Sphere

D. Azure IoT

Answer: B – IoT Central quickly creates a web-based management portal to enable reporting and communication with IoT devices.

Question 52: You want to send messages from the IoT device to the cloud and vice versa. Which IoT technology can send and receive messages?

A. IoT Hub

B. IoT Central

C. Azure Sphere

D. Azure IoT

Answer: A – An IoT hub communicates to IoT devices by sending and receiving messages.

IV- Microsoft Azure Question and Answers

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

What is Azure VM temporary storage?

In Azure, every VM – regardless if Linux or Windows – gets a temporary disk assigned automatically. This temporary disk is located on the physical server (the hypervisor) where the Azure VM is hosted and is non-persistent. Disks used by the operating system or additionally added data disks are persistent disks and stored in Azure Storage.

Azure VM’s can be moved from its current host to new host at any time due to maintenance, hardware failures or other reasons. In such an event, the data from the temporary storage will not preserve or moved to the new host. Apart from the hardware failures, there are many other reasons data from the temporary disk will be lost:

Resizing of the VM
Restarting of the VM
Moving from one host to another
Updating/upgrading of host

Really, the temporary disk should never be used for data that has to be persistent. To avoid misconfiguration, the disk also has the drive label “Temporary Storage” and includes a text file “DATALOSS_WARNING_README.txt”. Read more here…

Does Azure VM include a Windows license?

It depends on the virtual machine type we talk about. Some Azure virtual machines include a Windows operating system license in their price (some even include a SQL Server). Some do not, however, there is an “Azure Hybrid Use Benefit” in certain Microsoft licensing programs, where basically the customer can use its previously acquired software licenses on Azure virtual machines (“bring you own license”). Also, there are Azure virtual machines available with different Linux distributions (both commercial and community), Windows Server license is obviously not included in these. Continue reading here

Please consult the Windows virtual machine pricing guide of Azure for details: Pricing – Windows Virtual Machines | Microsoft Azure

Does Azure VM cost include an OS disk?

Hello. Yes They charge you for the disk usage too. So its Disk, Network, License (if Windows Server Instance) and Processor/RAM that are taken into consideration

(more)

Why don’t I see the N-Series (vga enabled) VMs in my Azure vm sizes list (I have Bizspark subscription)?

It has nothing to do with BizSpark. N series VMs are generally available since 1 December, 2016 (Azure N-Series: General availability on December 1 ), but only in select Azure datacenter regions. Please consult the Azure Products by Region | Microsoft Azure website for regional availability.

(more)

What is a data disk in Azure VM?

What are things to look out for when choosing a location for your Microsoft Azure VM?

The argument in placing a cloud vm would be performance. Performance in the cloud world means cost. The better performance you need the more its going to cost you. But the other side of that is the faster you can solve the problem you are trying to solve. The business problem to evaluate in placement of a VM is loosley these two things: Does increasing the performance of the application provide the overall answers required faster? Are there things you can do to your application that will allow it to better take advantage of cloud capabilities…

(more)

How can I get real time Microsoft Azure VM and Cloud Service monitoring for free or a reasonable price?

Please review Azure Monitor, the built-in monitoring service in Azure. Azure Monitor provides metrics and logs for many services in Azure including VMs. A quick overview : Product documentation: Get started with Azure Monitor Note: As of today (Apr ‘17) Cloud Services metrics are served using an older telemetry pipeline but that is the process of being migrated to Azure Monitor pipeline. You will soon be able to consume Cloud Service metrics via Azure Monitor, the same way you can for Azure VMs, Web Apps or Azure SQL DBs.

(more)

How does the Azure VM backup work?

Azure Backup introduces a reinforcement expansion to the Azure VM specialist that is running on the VM. This expansion backs up the whole VM. You can back up explicit records and organizers on the Azure VM by running the MARS operator.

(more)

What are some best practices in setting up an Azure VM for a production MySQL database?

Make sure you have VMs in Availability set. Before selecting a VM collect below inputs either from Application or from Performance monitoring team 1. Maximum IOPS required. 2. Maximum size of DB in next 2 years at least. Based on these inputs select the VM size and required storage tier – Standard or Premium. For high performance, you can perform disk stripping if you require more than 5000 IOPS. Also you can configure Backup to URL.

(more)

Could I connect to a Linux Azure VM using SSH and private IP through Putty?

Absolutely. You can check your VM’s public IP address on the Azure Portal and SSH into it with the SSH client of your choice. A private IP allows Azure VMs to communicate with other resources in a virtual network or an on-premises network through a VPN or ExpressRoute. So you can SSH into an Azure VM using the private IP from the same virtual network or via VPN / ExpressRoute.

(more)

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Web/PWA: https://azurefundamentalsexamprep.com

Djamgatech App store

How do I access Azure VM through a web browser?

Azure portal ( Microsoft Azure ) now has a feature called Cloud Shell. This basically gets you a command line interface, in the browser, where you can make an authenticated access to Azure resources, including your virtual machines. Both Bash and PowerShell are available, and you can also save your frequently used scripts, etc for later re-use. More details here: Azure Cloud Shell – Browser-Based Command Line | Microsoft Azure

(more)

How do I resize my Azure VM?

How to resize a Linux VM with the Azure CLI – Azure Linux Virtual Machines az vm resize –resource-group mygroup –name mytestvm –size Standard_D4s_v3 This call would trigger instance restart in the background if needed.

(more)

How do I redeploy a Microsoft Azure VM?

How do I access my Azure VM storage?

How do I stop Azure VM based on CPU usage?

For a Linux Azure VM, could I reset the root password or am I not eligible to use this mode?

This document indicates how a Linux VM password can be reset Reset Linux VM password and SSH key from the CLI. There is also an option in the Azure portal (https://portal.azure.com). Go to the details of the virtual machine you wish to reset the password for and look for “reset password” at the bottom left:

(more)

Is the usage of Tor browser permitted for use on an Azure VM?

Does Azure VM have the same benefits for a VMware workstation?

How do I connect my Raspberry Pi with Azure VM using RDP?

Depending on what OS you are using lets say Linux. You could use properJavaRDP you will need a Java VM installed. I’ve used this with success the screen refresh was not great tho.

(more)

How do I monitor my Azure VM?

Monitor VM in Azure Management Portal.

Step 1 − Login to Azure Management Portal.
Step 2 − Go to Virtual Machine.
Step 3 − Select the virtual machine you want to monitor.
Step 4 − Select Monitor from the top menu as shown in following image.

How do we make an Azure VM accessible from outside?

Accessing Azure VM port from Outside of VM

Open VM instance and run the server on port 80 and checked the localhost is running in the local browse,
added port 80 in the inbound of Network security group,
turned off all three types of firewall from the VM windows.

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330

android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen

Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5

Web/PWA: https://azurefundamentalsexamprep.com

Djamgatech App store

How do you see the memory usage of an Azure VM?

Steps For Existing Windows VMs:

Click on a Windows VM.
Select Diagnostics settings from the Azure UI blade.
Under the Overview tab: Pick a Storage account: Select your storage account so that the metrics stats can be stored. Click on ‘Enable guest level monitoring‘ and wait for the process to complete.

How do I make an Azure VM from an existing disk?

1. From the Azure portal, on the left menu, select All services.

2. In the All services search box, enter disks and then select Disks to display the list of available disks.

3. Select the disk that you would like to use.

4. In the Overview page, ensure that DISK STATE is listed as Unattached.

(more)

How do I enable SSL on my Azure VM?

Configure App Service Certificate to Azure Virtual machines

1. Step 1: Create an Azure Virtual machine with IIS web server.

2. Step 2: Add a Custom Domain to your virtual machine.

3. Step 3: Place an SSL Certificate order.

4. Step 4 – Store the certificate in Azure Key Vault.

5. Step 5: Verify the domain ownership.

6. Step 6: Assign certificate to Virtual machine.

(more)

If I change the size of my Azure VM while running a script, will that stop the execution of the script? (Currently using a Linux VM).

Changing the size of an Azure VM (scaling up or down) is only possible with a reboot. That will most definitely stop the execution of your script.

(more)

How do I make an Azure VM snapshot?

1. On the Azure portal, select Create a resource. 2. Search for and select Snapshot. 3. In the Snapshot window, select Create. 4. Enter a Name for the snapshot. 5. Select an existing Resource group or enter the name of a new one. 6. Select an Azure datacenter Location.

(more)

On the Azure portal, select Create a resource.
Search for and select Snapshot.
In the Snapshot window, select Create. …
Enter a Name for the snapshot.
Select an existing Resource group or enter the name of a new one.
Select an Azure datacenter Location.

Can we restrict a developer (on Microsoft Azure VM) to not upload a source code on any website or email?

You can restrict a developer from uploading a source code on any website by following the below steps: 1. Go to the desired VM instance in the Azure portal 2. Select “Access control (IAM)” option from the left pane 3. Select Role Assignment option under +Add option 4. Now, you will be able to assign any one of the available pre-defined roles to a user 5. Give contributor level access to the respective developer, now he will not be able to access/upload a file to the website

(more)

What can I do if I lost my Azure VM’s ssh private key?

Why there is a difference in the same VM prices among Azure regions?

azure fundamentals az900 exam preparation pro

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

The region prices are related to pricing conditions in particular region. In details it is about tenancy of physical area, prices of the hardware from vendors, the cost of man-hours in a particular region for IT specialists and other Azure datacenter workers, and so on. Unfortunately, I can’t find any reference for that information, I’m talking here personally as the person who works with Azure every day and have a contact with Microsoft teams.

(more)

Can we spin up a Windows Azure VM programmatically from a php page? We can assume that we have valid Microsoft Credentials.

The REST Management API is the one you want to go for. Authentication is certificate based. You’ll have to upload a management certificate using the Windows Azure portal in able for your PHP application to authenticate. A good starting point on how to use the Windows Azure REST APIs for management can be found here How to use Windows Azure service management APIs (PHP). Like Rahul suggested, once you have that up-and-running use the Operations on Virtual Machines API set to manipulate your Virtual Machine deployments.

(more)

How do you reduce the size of my Azure VM disk?

Hi, Below are some points that would be beneficial for you. 1. Pick the best possible disk size. 2. Compress the panel size in the VM. 3. Export the managed disk to a VHD. 4. Compress the exported VHD. 5. Make another new managed disk from the VHD. 6. Make another VM from the new recently created disk. 7. Alternatively, clean up all the old resources. Hope it helps.

(more)

Your company wants to use Azure to manage all of their IoT devices. They are going to create the infrastructure themselves, but need a backend in Azure to manage the flow of data, and to ensure security as well as ease of deployment of new devices. Which Azure product or solution would be suitable?

Azure IoT Hub is a solution for providing managed services for large IoT projects. It provides secure and reliable communication from devices to the Azure backend. Azure IoT Central is a SaaS solution that provides both managed connections and security as well as the dashboards and applications to use the data. Event Grid is used to connect many Azure services. IoT Hub

Your company has a new Azure virtual network that needs to be secured. What is the best way to only allow specific kinds of outside traffic into this network?

Use an Azure Firewall attached to the virtual network.

Azure Firewall blocks any incoming or outgoing traffic that isn’t specifically allowed on a network. A Network Security Group manages the traffic to specific services, Azure DDoS Protection Service protects against attacks and a load balancer distributes traffic to specific VMs. Azure Firewall FAQ

How is authorization different from authentication?

Authentication is the process of proving that you are who you say you are. Authorization is the act of granting an authenticated party permission to do something.

Authentication is the process of proving that you are who you say you are. It’s sometimes shortened to AuthN. The Microsoft identity platform uses the OpenID Connect protocol for handling authentication. Authorization is the act of granting an authenticated party permission to do something. It specifies what data you’re allowed to access and what you can do with that data. Authorization is sometimes shortened to AuthZ. The Microsoft identity platform uses the OAuth 2.0 protocol for handling authorization. Reference: Authentication vs. authorization

Which minimum costing support plan provides access to general guidance with architecture support?

The Developer support plan provides access to technical support via email in business hours and is the most-effective. The Standard and

Azure Support Plans Comparison

You are looking to build and host your website on Azure without needing to manage the underlying infrastructure. Which type of Cloud service should you choose?

Platform as a service (PaaS) is a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications, all without you having to manage any of the underlying infrastructure or services. Reference: What is PaaS? Platform as a Service

You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?

Infrastructure as a service (IaaS) is the use of on-demand computing infrastructure which is provisioned and managed over the internet. Deploying virtual machines into an Azure subscription would be considered an IaaS service. Reference: What is IaaS? Infrastructure as a Service

Define the concept of “dynamic elasticity.”

Dynamic elasticity is defined as a cloud service that both quickly scales up and also back down in order to serve your changing workload patterns for the lowest cost.

Which Azure service can host your web apps without you having to manage underlying infrastructure?

Azure App Service enables you to build and host web apps, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure. Azure App Service documentation – Azure App Service

Which Azure service can you use to make sure your virtual machines are running smoothly and without problems?

Azure Monitor collects and analyzes telemetry data from your virtual machines to provide your with alerts and recommendations for how they are running.
Azure Monitor overview – Azure Monitor

Which Azure DevOps tool would you use to share applications and code libraries?

Azure Artifacts is a service in Azure DevOps, which can host code libraries and applications for you to share internally or externally. Azure Boards is for project managers. Azure Repos holds your source code. Azure Test Plans is used to create manual and automatic test scenarios for your application. Azure Pipelines is the process that builds and deploys your application. Azure DevOps Services

What are the main components of an Azure VPN Gateway setup?

The VPN Gateway must be attached to an Azure Virtual Network.

An on-premises network with a complimentary gateway that can accept the encrypted data.

A secure connection, called a tunnel, which encrypts the traffic sent through it.

An Azure VPN Gateway consists of a Virtual Network, a secure connection called a tunnel, and an on-premises network and gateway. A storage account, a backend pool of VMs and a Load Balancer are not needed. About Azure VPN Gateway

Your company has a large amount of documents that are both sensitive and important to a large number of people. How would you secure these documents so you can still share them, but track where they are?

Use Azure Information Protection – Azure Information Protection (AIP) is a cloud-based solution that helps your organization to classify and protect its documents and emails by applying labels. What is Azure Information Protection?

Which Azure solution would you implement to embed a watermark into Office documents that contain social security numbers?

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization classify and, optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations. Azure Active Directory. This includes access to resources in Azure AD, Azure resources, and other Microsoft Online Services, like Office 365 or Microsoft Intune. What is Azure Information Protection? – AIP

What are region pairs?

A region that is linked with another region in the same geography) – Azure has the concept of region pairs, these are two or more regions that are at least 300 miles apart within a single Geography. This enables the ability to replicate certain resources such as virtual machine storage across the geography providing protection against such events as natural disasters or civil unrest. Ensure business continuity & disaster recovery using Azure Paired Regions

Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?

The correct answer is the Azure Activity Log – it is a logging service that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. Events such as starting and stopping of virtual machines can be found here.
Overview of Azure platform logs – Azure Monitor

What does Azure Information Protection do?

Provides the ability to securely share sensitive data – Azure Information Protection helps control and secure information (including emails and documents) that is shared outside of your organization. Azure information protection

Which of the following can be used to manage governance across multiple Azure subscriptions?

A. Azure initiatives

B. Management groups

C. Resource groups

Which of the following is a logical unit of Azure services that links to an Azure account?

A. Azure subscription

B. Management group

C. Resource group

D. Public cloud

**Which of the following features does not apply to resource groups?**

A. Resources can be in only one resource group.

B. Role-based access control can be applied to the resource group.

C. Resource groups can be nested.

Which of the following statements is a valid statement about an Azure subscription?

A. Using Azure doesn’t require a subscription.

B. An Azure subscription is a logical unit of Azure services.

You need to process messages from a queue, parse them by using some existing imperative logic written in Java, and then send them to a third-party API. Which serverless option should you choose?

Azure Functions: Azure Functions is the correct choice because you can use existing Java code with minimal modification.

You want to orchestrate a workflow by using APIs from several well-known services. Which is the best option for this scenario?

Azure Logic Apps: Azure Logic Apps makes it easy to create a workflow across well-known services with less effort than writing code and manually orchestrating all the steps yourself.

Your team has limited experience with writing custom code, but it sees tremendous value in automating several important business processes. Which of the following options is your team’s best option?

Azure Logic Apps is best suited for users who are more comfortable in a visual environment that allows them to automate their business processes. Logic Apps is the best option in this scenario.

You need to predict future behavior based on previous actions. Which product option should you select as a candidate?

A. Azure Machine Learning

B. Azure Bot Service

C. Azure Cognitive Services

Answer: A. Azure Machine Learning enables you to build models to predict the likelihood of a future result. It should not be eliminated as a candidate.

You need to create a human-computer interface that uses natural language to answer customer questions. Which product option should you select as a candidate?

A. Azure Machine Learning

B. Azure Cognitive Services

C. Azure Bot Service

Answer: Azure Bot Service creates virtual agent solutions that utilize natural language. It should not be eliminated as a candidate.

You need to identify the content of product images to automatically create alt tags for images formatted properly. Which product option is the best candidate?

A. Azure Machine Learning

B. Azure Cognitive Services

C. Azure Bot Service

Answer: Azure Cognitive Services includes Vision services that can identify the content of an image. Azure Cognitive Services is the best candidate.

Your development team is interested in writing Graph-based applications that take advantage of the Gremlin API. Which option would be ideal for that scenario?

A. Azure Cosmos DB

B. Azure SQL Database

C. Azure Databricks

D. Azure Database for PostgreSQL

Answer: Azure Cosmos DB supports SQL, MongoDB, Cassandra, Tables, and Gremlin APIs.

CompanyA uses the LAMP stack for several of its websites. Which option would be ideal for migration?

A. Azure Cosmos DB

B. Azure Database for MySQL
C. Azure Database for PostgreSQL

B: Answer: Azure Database for MySQL is the logical choice for existing LAMP stack applications.

CompanyA has millions of log entries that it wants to analyze. Which option would be ideal for analysis?

A. Azure Cosmos DB
B. Azure SQL Database
C. Azure Database for PostgreSQL
D. Azure Synapse Analytics

D: Azure Synapse Analytics is the logical choice for analyzing large volumes of data.

Which of the following options can you use to link virtual networks?

A. Network address translation
B. Multi-chassis link aggregation
C. Dynamic Host Configuration Protocol
D. Virtual network peering

D: Answer: Virtual network peering can be used to link virtual networks.

Which of the following options isn’t a benefit of ExpressRoute?

A. Redundant connectivity
B. Consistent network throughput
C. Encrypted network communication

D. Access to Microsoft cloud services

C: Answer: ExpressRoute does provide private connectivity, but it isn’t encrypted.

Testimonial: Passed my AZ-900 on the second attempt!

Wow, what a difference a couple of days and a different set of questions makes. I took the exam Monday and fell just short of passing (659), and I retook it today and scored 850! The questions on the first attempt were definitely harder, and I could tell from the first few questions I was going to have a rough time.

Today was totally different and I felt like I was getting all the “gimme” questions first and was able to coast through most questions confidently. I flagged exactly half the questions for review and at the end I had 20 minutes leftover after I was done reviewing. Total day and night difference between the two attempts.

For preparation I used:

– Microsoft Learn

– A Cloud Guru AZ-900 course + practice exam

– Tutorials Dojo practice exam

– and of course, John Savill’s YT channel

I bought the TD practice exams because of all the suggestions here, and I can attest they were well worth the price. This morning before the exam I went through all the TD section-based exams and took each one until I scored 90% on every section. I don’t always condone preparing for the exam on the day of but it was certainly a nice confidence booster to help me get mentally prepared.

Testimonial: Passed my AZ-900 on the first attempt!

Pleased to have passed this first time with a score of 775!

For any looking to sit this, I’ve had around 3 years of experience proving 2nd line technical support for an Azure environment. I used the following to prep for this exam:

Scotty Duffy’s Udemy Course – this was a bit of a waste of time and money in my eyes, nowhere near detailed enough. There are some reviews from people saying they passed the exam using this course alone with no experience using Azure but I really do not believe that.

Tim Warner’s YouTube series – this was great bearing in mind it was free. Way more worth the time than Scott’s, I wish I’d have started here.

Tutorials Dojo Practise Exams – I’d only recommend using these exams to test your knowledge and build some confidence, the questions in the exam were more difficult but the format and nature of these give you a good idea of what to expect.

Hope this advice helps some of you – onto the AZ-104!

Testimonial: AZ900 – Passed – some notes

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Just passed with a 970. I used a combination of:

1. ITProTV – good training overviews but useless practice tests. Utterly not even close to the exam.

2. Udemy and Whizlabs – VERY close to what is on the exam, highly recommend this.

3. TutorialsDojo – this was the closest to the actual test – if you can pass these tests you can pass the exam.

ANKI for terms and basic rules.

I studied way too much – make sure you know what each service does and how offerings differ

1. Availability Zones vs. Sets

2. Datacenters vs. Regions vs. Geographies

3. Where Compliance and Security information is done

4. Exactly what Azure Advisor can do, so you know what it can’t do.

5. The Difference between the DB offerings.

6. The difference between SaaS, IaaS and PaaS – really know this, multiple questions on it.

7. When you are charged for data transfer vs. when you are not.

Testimonial: Passed AZ104. Here is how i studied

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

So guys im not going to bore you with all the blah-blah-blah. Here is how you pass AZ104.

My background: Only az900 fundamentals ( no IT previous experience)

Learning Path

Step 1) DO all the MS Learn modules.

( if you get stuck on any chapter or portion use this playlist of videos from John Savill … he is amazing at explaining this stuff)

Step 2) Complete all the labs on github for az104

Step 3) Watch this cram video which will cement in the concepts

Study Material

Use tutorials dojo practice tests and do them until you reach 90+% Passing on average, Every question you get wrong make sure to read the explanation as to why you are wrong.

AZ-104 Microsoft Azure Administrator Practice Exams

Watch these YOutube follow alongs for 40 more practice questions with good explanations (parts 1-4)

Then you are ready to take the exam. Good luck everyone!

Azure Services Cheat Sheet

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

Azure Fundamentals AZ900 Exam Prep on Web/PWA

Djamgatech App store

Azure Virtual Machine vs Azure Web App Cheat Sheet — Azure Virtual Machine vs Azure Web App

Azure Containers vs Azure Kubernetes Cheat Sheet

Use the following flowchart to select a candidate compute service.

Definitions:

“Lift and shift” is a strategy for migrating a workload to the cloud without redesigning the application or making code changes. Also called rehosting. For more information, see Azure migration center.
Cloud optimized is a strategy for migrating to the cloud by refactoring an application to take advantage of cloud-native features and capabilities.

App Service. A managed service for hosting web apps, mobile app back ends, RESTful APIs, or automated business processes.
Azure Kubernetes Service (AKS). A managed Kubernetes service for running containerized applications.
Batch. A managed service for running large-scale parallel and high-performance computing (HPC) applications
Container Instances. The fastest and simplest way to run a container in Azure, without having to provision any virtual machines and without having to adopt a higher-level service.
Functions. A managed FaaS service.
Service Fabric. A distributed systems platform that can run in many environments, including Azure or on premises.
Virtual machines. Deploy and manage VMs inside an Azure virtual network.

Infrastructure-as-a-Service (IaaS) lets you provision individual VMs along with the associated networking and storage components. Then you deploy whatever software and applications you want onto those VMs. This model is the closest to a traditional on-premises environment, except that Microsoft manages the infrastructure. You still manage the individual VMs.

Platform-as-a-Service (PaaS) provides a managed hosting environment, where you can deploy your application without needing to manage VMs or networking resources. Azure App Service is a PaaS service.

Functions-as-a-Service (FaaS) goes even further in removing the need to worry about the hosting environment. In a FaaS model, you simply deploy your code and the service automatically runs it. Azure Functions are a FaaS service.

There is a spectrum from IaaS to pure PaaS. For example, Azure VMs can autoscale by using virtual machine scale sets. This automatic scaling capability isn’t strictly PaaS, but it’s the type of management feature found in PaaS services.

Azure Data Store:

Use the following flowchart to select a candidate data store.

Which of the following choices isn’t a cloud computing category: NAAS, PAAS, SAAS, IAAS, DAAS?
– Networking-as-a-Service (NaaS)

– NaaS isn’t a cloud computing category.

Download Azure Fundamentals AZ900 Certification Exam Prep

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

Azure Fundamentals AZ900 Exam Prep on Web/PWA

Djamgatech App store

Updates to AZ-900 Coming May 5th 2022

[AZ-900](Exam AZ-900: Microsoft Azure Fundamentals – Learn)

Under skills measured section:

The English language version of this exam will be updated on May 5, 2022. Please download the exam skills outline below to see what’s changing.

[List of Changes]

To be honest seems like decent set of changes. In addition to reshuffling existing titles and task #s of several items, there is a redistribution of weight across objectives and removing of following sections:

3.1 Describe core solutions available in Azure

5.3 Describe privacy and compliance resources

6.2 Describe Azure Service Level Agreements (SLAs)

Top-paying Cloud certifications:

Sources:

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

Azure Fundamentals Breaking News – Azure Fundamentals Certifications Testimonials

Create automated reports and stats to manage subscriptions with Power BI
by /u/sayeya (Microsoft Azure) on May 19, 2022 at 8:26 am
Hi everyone ! I am here to look for some advice concerning my subscriptions on Azure. I wanted to know if one of you was able to give me maybe tutorial links to get started with Power BI on these subscriptions. My goal is to manage them thanks to automated and periodic reports that will be send to the admins and the team in charge of these subscriptions. I can't find proper documentation on this subject and I am totally new on this subject. Can someone help me ? Thanks in advance for all your answers ! submitted by /u/sayeya [link] [comments]
Availability zone 1/3 not available but 3 is
by /u/AuXDubz (Microsoft Azure) on May 19, 2022 at 8:08 am
As per title, i'm trying to deploy a VM within either zone 1 or 2 and it just won't validate however when selecting zone 3 it does okay. Not a problem for one VM, though i'm looking to deploy multiple VMs across availability zones UK South - Trust Launch VM (Win10 E Multi-session) Has anyone experience this before? submitted by /u/AuXDubz [link] [comments]
Looking for recommendations.
by /u/StealthCatUK (Microsoft Azure) on May 19, 2022 at 8:06 am
Hi all, I am exploring IAC options for a POC in our company. I've tried bicep and it seems decent but I've been asked to also try terraform as we already use AWS so it would make sense. Do you guys have any recommendations on books to read on terraform? Cheers submitted by /u/StealthCatUK [link] [comments]
Error Setting Sqlserver Auditing Logs (Powershell)
by /u/d3fnotarandomnam3 (Microsoft Azure) on May 19, 2022 at 7:43 am
Set-AzContext -Subscription "subscription01" $server = Get-AzSqlServer -ResourceGroupName. "Resourcegroup-01" -ServerName "servername-01"| Select-Object ServerName,ResourceGroupName Set-AzSQLServerAudit -ResourceGroupName $server.ResourceGroupName -ServerName $server.ServerName -AuditActionGroup "SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP", "FAILED_DATABASE_AUTHENTICATION_GROUP", "SUCCESSFUL_LOGIN_GROUP", "FAILED_LOGIN_GROUP", "DATABASE_PRINCIPAL_CHANGE_GROUP", "SERVER_PRINCIPAL_CHANGE_GROUP" The error message: Set-AzSqlServerAudit : Cannot bind parameter 'AuditActionGroup'. Cannot convert value "SUCCESSFUL_LOGIN_GROUP" to type "Microsoft.Azure.Commands.Sql.Auditing.Model.AuditActionGroups". Error: "Unable to match the identifier name SUCCESSFUL_LOGIN_GROUP to a valid enumerator name. Specify one of the following enumerator names and try again: BATCH_STARTED_GROUP, BATCH_COMPLETED_GROUP, APPLICATION_ROLE_CHANGE_PASSWORD_GROUP, BACKUP_RESTORE_GROUP, DATABASE_LOGOUT_GROUP, DATABASE_OBJECT_CHANGE_GROUP, DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP, DATABASE_OBJECT_PERMISSION_CHANGE_GROUP, DATABASE_OPERATION_GROUP, DATABASE_PERMISSION_CHANGE_GROUP, DATABASE_PRINCIPAL_CHANGE_GROUP, DATABASE_PRINCIPAL_IMPERSONATION_GROUP, DATABASE_ROLE_MEMBER_CHANGE_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, SCHEMA_OBJECT_ACCESS_GROUP, SCHEMA_OBJECT_CHANGE_GROUP, SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP, SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP, SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, USER_CHANGE_PASSWORD_GROUP, LEDGER_OPERATION_GROUP, DBCC_GROUP, DATABASE_OWNERSHIP_CHANGE_GROUP, DATABASE_CHANGE_GROUP" If you notice the successful login group is part of the allowed values. submitted by /u/d3fnotarandomnam3 [link] [comments]
Quota delays?
by /u/yellowplantain (Microsoft Azure) on May 19, 2022 at 2:30 am
Is anyone else having problems getting quota from Azure? I've been trying for two months now to get a few hundred low priority cores, and I'm making absolutely no progress with the support request, just being bounced around from broken forms to broken process to follow, with two weeks latency between their responses. I first tried to start some instances - no quota, so I go to the Quota page and request it. After following up twice, a month later they respond to tell me to fill out a different ticket template, and link to that template on a dev.azure.com address that it says I don't have permission to view. They escalate it again and now a month later tell me I need to switch to Invoice Billing. I follow the steps for invoice billing, but the button to actually request it is just... not there. Can you just let me give you money Azure? Please? Is this just happening to me or everyone? submitted by /u/yellowplantain [link] [comments]
3rd Party VPNs with Virtual WAN
by /u/pedrotheterror (Microsoft Azure) on May 19, 2022 at 1:51 am
So we have a vWAN deployed, with multiple vHUBs. These are not secured vHUBs, but we do have Azure FWs deployed in VNETs peered to the vHUBs which we use for outbound Internet access. Now we need to provide for a 3rd Party VPN to access some of our resources. I do not want to terminate this into our exiting vHub as then then would have access to all of our resources. So, I want to terminate them into a dedicated VPNG sitting behind an AFW. But, I am running into some snags. I do not see how to advertise routes that the VNET learned from the vHub to the VPN endpoint. We could turn the vHub into a secured vHub, but the issue with that is that I do not see a Terraform provider to do that, and I am not 100% confident we can do that without destroying the existing infrastructure. The other option I guess is to create a separate secured vHub for this, but see the note above about no TF provider for it (though I could use the azAPI provider). Anyone have any insight or pointers they can send my way? submitted by /u/pedrotheterror [link] [comments]
Azure App Service deployment question
by /u/ihorbond (Microsoft Azure) on May 19, 2022 at 12:37 am
I've described everything here https://stackoverflow.com/questions/72297391/azure-app-service-deployment-fails-when-referenced-by-azure-function but I will give a short description: I have a solution that contains 2 projects: functions and web API. Functions project references web API, one way. Functions deploy fine but web API deployment fails. I don't understand why? It doesn't reference functions project. submitted by /u/ihorbond [link] [comments]
Best way to transfer data from an Azure Storage Blob to a Azure File Share
by /u/noscpal (Microsoft Azure) on May 19, 2022 at 12:10 am
Hey All, As the title suggests looking at the best way to make this happen, i have roughly 2.6tb in a blob that i would like to migrate to some Azure file shares. regards submitted by /u/noscpal [link] [comments]
How can I fix this Cisco Anyconnect Azure SAML CSRF Token error?
by /u/TheHungryNetworker (Microsoft Azure) on May 18, 2022 at 11:20 pm
submitted by /u/TheHungryNetworker [link] [comments]
Getting AD groups synced into AAD to use for a few things
by /u/Ok-Examination3168 (Microsoft Azure) on May 18, 2022 at 11:11 pm
Sup team, running into some issues on a current project. Have a work around in place so I'm not at a deadline but would love some insights. We've got an AD sync to AAD, and use Okta as our idp. We have a ton of security groups for license provisioning through okta - all dandy. I've been tasked with making some permission sets in Power BI from Active directory. So the ideal end result would be Active Directory security groups for powerBI license prov, specific sharepoint access, and data set in PowerBI access. There will be a few different groups with different outcomes. Currently I've manually made AAD groups for the PowerBI, SharePoint stuffs. Wondering if I can drive allllll of it from Active Directory for ease of use. Is this possible? Am I an idiot? Ideally yes to both. submitted by /u/Ok-Examination3168 [link] [comments]
Azure AD Security defaults for all users to 2FA at login
by /u/mattzacamber (Microsoft Azure) on May 18, 2022 at 10:53 pm
We have Security defaults enabled on our tenant. I expect all users to register for 2FA. Admins to be forced to 2FA. We find all users are asked to 2FA at login. Audit logs show reason is 'security defaults' Azure does state it will also trigger 'when necessary' 'One common method to improve protection for all users is to require a stronger form of account verification, such as Multi-Factor Authentication, for everyone. After users complete Multi-Factor Authentication registration, they'll be prompted for another authentication whenever necessary. Azure AD decides when a user will be prompted for Multi-Factor Authentication, based on factors such as location, device, role and task. This functionality protects all applications registered with Azure AD including SaaS applications. ' Seems to apply to all users at any portal (portal,devops,office). Didn't expect defaults to enforce 2FA for everyone. Is this expected behaviour now? Is it just enforced for everyone? submitted by /u/mattzacamber [link] [comments]
Increase the expiration period of Graph Api access token
by /u/Pristine-Month-8944 (Microsoft Azure) on May 18, 2022 at 10:29 pm
Using the app only approach of creating access token using msal for Graph API. It expires in about an hour usually. Can I increase it anyway? If not, can I check if the token is valid currently etc. For context I'll be creating and using the token in Python code. I need to make many API calls, so which is the best approach to make sure unnecessary tokens aren't created? Also, looked into refresh token, it's only for user credential flow, I'm using the app only approach. submitted by /u/Pristine-Month-8944 [link] [comments]
Where to get key vault connection key for logic apps?
by /u/prinkpan (Microsoft Azure) on May 18, 2022 at 10:06 pm
When we add a Get secret action in logic app it creates a connection with the key vault in Azure and generates a connection key which is then stored in local.settings.json file shown below. How is it generated? { "IsEncrypted": false, "Values": { "AzureWebJobsStorage": "UseDevelopmentStorage=true", "FUNCTIONS_WORKER_RUNTIME": "node", "WORKFLOWS_TENANT_ID": "<tenant-id>", "WORKFLOWS_SUBSCRIPTION_ID": "<subscription-id>", "WORKFLOWS_RESOURCE_GROUP_NAME": "<resource-group-name>", "WORKFLOWS_LOCATION_NAME": "westus2", "WORKFLOWS_MANAGEMENT_BASE_URI": "https://management.azure.com/", "keyvault-connectionKey": "eyJ0eXAiOiJKV1QiLCJhbGciO..." <-- How is this key generated? } } submitted by /u/prinkpan [link] [comments]
How to initiate VNET peering from one side, complete from the other side later on
by /u/0x4ddd (Microsoft Azure) on May 18, 2022 at 9:50 pm
My case is: dedicated team is managing hub virtual network developer teams can can create their own vnets Most likely developers would like to use ARM/Bicep/Terraform/whatever templates to automate their deployments. What I have thought about is that they could create peering to the hub from their side and then someone from the networking team can complete peering from the Hub side. However, when I did simple test on my subscription, I have been able to initiate peering from application side. It appeared with the "Initiated" state on the peerings list for my VNET with the message above - "At least one peering is in an initiated state. Navigate to the peer virtual network to complete the initiation. " Now I have thought I just would need to go to my hub virtual network and somewhere there I would see there is a peering request pending. However, I do not see any information on the Hub network side. Moreover, using Azure Portal I cannot create "one-way" peering, so in this case I cannot just create peering from Hub to App. Portal requires to create two-way peering while there is already existing Initiated peering from App to Hub. Is there any way to complete peering using Azure Portal from the Hub side, after application side initiated peering? Or maybe there is no other way than completing this using Azure CLI or any IaC tool? submitted by /u/0x4ddd [link] [comments]
azure front door + application gateway
by /u/Tmmcwm (Microsoft Azure) on May 18, 2022 at 9:05 pm
Hi everyone, Playing around with application gateway and front door. So far my config is app gateway with an internal ase ilb (wildcard domain) and this works fine. But I want to put front door in front so I can make things a little more redundant. So I've configured the front door with my app gateways public ip as the backend and re assigned my custom domain to the front door and stuck everything in forward mode. When I hit that custom domain it just immediately hits a not found page. I'm confused as to why this wouldn't work. Anyone configured a similar thing before? submitted by /u/Tmmcwm [link] [comments]
How can I add a IoT Hub in Azure into a VNet
by /u/sjimenez46 (Microsoft Azure) on May 18, 2022 at 8:14 pm
I see that is possible to use a private link to generate a static IP in the same VNet but I cant figure out how to provisioning an IoT Edge using Eflow to connect with the IoT Hub if I disable the public address. In the connection string is possible to change the public hostname with the static IP assigned yo IoT Hub in the VNet? Thanks in advance submitted by /u/sjimenez46 [link] [comments]
HTTP Logic App
by /u/dj_avi (Microsoft Azure) on May 18, 2022 at 8:14 pm
I'm trying to create a logic app with http GET. It can get a site code status of 200 when the site is running fine. If the site is attacked or the web service is down, it can't pull the GET request, so I the actions won't run. Is there way I can make it do that (When site is down). submitted by /u/dj_avi [link] [comments]
Best way to Automate setup for New Employees
by /u/Mortamus978 (Microsoft Azure) on May 18, 2022 at 7:25 pm
Hey Everyone, So we've just moved one of our companies to Azure AD, moving them away from on-premises AD. I want to know what the best way to "automate" setting up new hires for the company. What I've been doing in the past may make you cringe, so bear with me. Get laptop Install Fresh 21H2 on it w/ USB Go through OOBE Add machine to Azure AD Sign into their Azure AD account Have to add their account to my authenticator (We require 2FA) Install all the software and ready the PC for the employee Remove myself from their 2FA in Azure settings, send re-register Ship it to the user, or set it up in the corp office. Now, as you can see it's not the most efficient way of doing things. I'm looking for some advice on a few things. Avoiding adding myself as a 2FA on their account for the setup... is there a way to avoid that for first sign on or something? What would be the best way to prep these new machines for users? I wonder if it's possible to create a "golden image" for all the stuff they need, then apply it to the machine with their Azure AD account linked. Sorry if any of that is poorly explained. I'm mostly helpdesk / network infrastructure... this is my first time taking on a project that I would consider sysadmin-y. Thanks! submitted by /u/Mortamus978 [link] [comments]
Hybrid Azure AD join windows 10 or later
by /u/VirtualCHi (Microsoft Azure) on May 18, 2022 at 7:10 pm
Hi We are planning an pilot for hybrid Azure AD joined windows 10 computers. Do I need to use the Intune connector for active directory? For example in this article, the setup is not using Intune connector. In this other article, is using group policy for auto enrollment. Please shed some light, I am a bit confused, which is the best method. My environment is Hybrid, on-premise AD sycning to Azure AD. submitted by /u/VirtualCHi [link] [comments]
Received an offer from Microsoft. Faced with an interesting choice.
by /u/ThrowAwayTheSys (Microsoft Azure) on May 18, 2022 at 7:06 pm
Greetings, This is a throwaway for obvious reasons, my co-workers may read this, and I'd like some degree of anonymity. I'm currently in a Sysadmin role at a company and I'm doing pretty well for myself there. I make 86k per year with a yearly 10% bonus. I've made great connections and fostered even better relationships since I started here almost 10 months ago. Overall, I'm pretty happy with what I'm doing. I get to focus heavily on Powershell automation and coming up with creative solutions to solve the technical debt in my department. We underwent quite a bit of structural changes within the company & my department effectively was cut in half. We've been playing catch up and are finally rediscovering our footing and bringing on new talent. Now we have some interesting things coming down the pipeline, such as a full lift and shift to Azure, which is fairly exciting as that's the direction I want to take in my career. Got my AZ900 + AZ104. Want to get the AZ305 and work my way up to becoming a Azure Solutions Architect. Queue me recently getting a call out of the blue from a recruiter and I landed an interview for freaking Microsoft for an Azure AD Support Engineering role. I just received my offer letter. $49.00 per hour on a long term contract to hire role with benefits. The FTE conversion is an automatic bump to 115k + stock options, a sign on bonus, and pretty ridiculous benefits, which is needless to say, very attractive. Assuming I can really shine in this role and actually land the FTE position. I received a counter offer from my company for a bump to 95k + a 10k retention bonus + my 10% performance bonus paid up front. It seems like an ok counter offer, I could probably try and peg them for more, but I'm thinking the right move here is to go with Microsoft. I can't seem to find much information out there on what it's like to work in that role on the Azure team, but from the interviews & people I've talked to, the opportunity for growth is unparalleled if you're hungry enough. I'm curious to hear what you fine folks have to say. What would you do in this position? And if there are any Microsoft engineers lurking this sub, would love to hear what your experience working for the giant is like. Much appreciate anyone's feedback! submitted by /u/ThrowAwayTheSys [link] [comments]

#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech

Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF

Azure Fundamentals AZ900 Exam Prep on iOs

Azure Fundamentals AZ900 Exam Prep on android

Azure Fundamentals AZ900 Exam Prep on Windows 10/11

A Twitter List by enoumen

October 12, 2019March 24, 2022

What are the corresponding Azure and Google Cloud services for each of the AWS services?

What are unique distinctions and similarities between AWS, Azure and Google Cloud services? For each AWS service, what is the equivalent Azure and Google Cloud service? For each Azure service, what is the corresponding Google Service? AWS Services vs Azure vs Google Services? Side by side comparison between AWS, Google Cloud and Azure Service?

For a better experience, use the mobile app here.

Cloud Practitioner Exam Prep: AWS vs Azure vs Google

2022 AWS Cloud Practitioner Exam Preparation

Category: Marketplace
Easy-to-deploy and automatically configured third-party applications, including single virtual machine or multiple virtual machine solutions.
References:
[AWS]:AWS Marketplace
[Azure]:Azure Marketplace
[Google]:Google Cloud Marketplace
Tags: #AWSMarketplace, #AzureMarketPlace, #GoogleMarketplace
Differences: They are both digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on their respective cloud platform.

Category: AI and machine learning
A cloud service to train, deploy, automate, and manage machine learning models.
References:
[AWS]:AWS SageMaker(build, train and deploy machine learning models), AWS DeepComposer (ML enabled musical keyboard), Amazon Fraud Detector (Detect more online fraud faster), Amazon CodeGuru (Automate code reviews and identify expensive lines of code), Contact Lens for Amazon Connect (Contact center analytics powered by ML), Amazon Kendra (Reinvent enterprise search with ML), Amazon Augmented AI (Easily implement human review of ML predictions), Amazon SageMaker Studio (The first visual IDE for machine learning), Amazon SageMaker Notebooks (Quickly start and share ML notebooks), Amazon SageMaker Experiments (Organize, track, and evaluate ML experiments), Amazon SageMaker Debugger (Analyze and debug ML models in real time), Amazon SageMaker Autopilot (Automatically create high quality ML models), Amazon SageMaker Model Monitor (Continuously monitor ML models)
[Azure]:Azure Machine Learning
[Google]:Google Cloud TensorFlow
Tags: #AI, #CloudAI, #SageMaker, #AzureMachineLearning, #TensorFlow
Differences: According to the StackShare community, Azure Machine Learning has a broader approval, being mentioned in 12 company stacks & 8 developers stacks; compared to Amazon Machine Learning, which is listed in 8 company stacks and 9 developer stacks.

Category: AI and machine learning
Build and connect intelligent bots that interact with your users using text/SMS, Skype, Teams, Slack, Office 365 mail, Twitter, and other popular services.
References:
[AWS]:Alexa Skills Kit (enables a developer to build skills, also called conversational applications, on the Amazon Alexa artificial intelligence assistant.)
[Azure]:Microsoft Bot Framework (building enterprise-grade conversational AI experiences.)
[Google]:Google Assistant Actions ( developer platform that lets you create software to extend the functionality of the Google Assistant, Google’s virtual personal assistant,)

Tags: #AlexaSkillsKit, #MicrosoftBotFramework, #GoogleAssistant
Differences: One major advantage Google gets over Alexa is that Google Assistant is available to almost all Android devices.

Category: AI and machine learning
Description:API capable of converting speech to text, understanding intent, and converting text back to speech for natural responsiveness.
References:
[AWS]:Amazon Lex (building conversational interfaces into any application using voice and text.)
[Azure]:Azure Speech Services(unification of speech-to-text, text-to-speech, and speech translation into a single Azure subscription)
[Google]:Google APi.ai, AI Hub (Hosted repo of plug-and-play AI component), AI building blocks(for developers to add sight, language, conversation, and structured data to their applications.), AI Platform(code-based data science development environment, lets ML developers and data scientists quickly take projects from ideation to deployment.), DialogFlow (Google-owned developer of human–computer interaction technologies based on natural language conversations. ), TensorFlow(Open Source Machine Learning platform)

Save 65% on select product(s) with promo code 65ZDS44X on Amazon.com

Tags: #AmazonLex, #CogintiveServices, #AzureSpeech, #Api.ai, #DialogFlow, #Tensorflow
Differences: api.ai provides us with such a platform which is easy to learn and comprehensive to develop conversation actions. It is a good example of the simplistic approach to solving complex man to machine communication problem using natural language processing in proximity to machine learning. Api.ai supports context based conversations now, which reduces the overhead of handling user context in session parameters. On the other hand in Lex this has to be handled in session. Also, api.ai can be used for both voice and text based conversations (assistant actions can be easily created using api.ai).

Category: AI and machine learning
Description:Computer Vision: Extract information from images to categorize and process visual data.
References:
[AWS]:Amazon Rekognition (based on the same proven, highly scalable, deep learning technology developed by Amazon’s computer vision scientists to analyze billions of images and videos daily. It requires no machine learning expertise to use.)
[Azure]:Cognitive Services(bring AI within reach of every developer—without requiring machine-learning expertise.)
[Google]:Google Vision (offers powerful pre-trained machine learning models through REST and RPC APIs.)
Tags: AmazonRekognition, #GoogleVision, #AzureSpeech
Differences: For now, only Google Cloud Vision supports batch processing. Videos are not natively supported by Google Cloud Vision or Amazon Rekognition. The Object Detection functionality of Google Cloud Vision and Amazon Rekognition is almost identical, both syntactically and semantically.
Differences:
Google Cloud Vision and Amazon Rekognition offer a broad spectrum of solutions, some of which are comparable in terms of functional details, quality, performance, and costs.

Category: Big data and analytics: Data warehouse
Description:Cloud-based Enterprise Data Warehouse (EDW) that uses Massively Parallel Processing (MPP) to quickly run complex queries across petabytes of data.
References:
[AWS]:AWS Redshift (scalable data warehouse that makes it simple and cost-effective to analyze all your data across your data warehouse and data lake.), Amazon Redshift Data Lake Export (Save query results in an open format),Amazon Redshift Federated Query(Run queries n line transactional data), Amazon Redshift RA3(Optimize costs with up to 3x better performance), AQUA: AQUA: Advanced Query Accelerator for Amazon Redshift (Power analytics with a new hardware-accelerated cache), UltraWarm for Amazon Elasticsearch Service(Store logs at ~1/10th the cost of existing storage tiers )
[Azure]:Azure Synapse formerly SQL Data Warehouse (limitless analytics service that brings together enterprise data warehousing and Big Data analytics.)
[Google]:BigQuery (RESTful web service that enables interactive analysis of massive datasets working in conjunction with Google Storage. )
Tags:#AWSRedshift, #GoogleBigQuery, #AzureSynapseAnalytics
Differences: Loading data, Managing resources (and hence pricing), Ecosystem. Ecosystem is where Redshift is clearly ahead of BigQuery. While BigQuery is an affordable, performant alternative to Redshift, they are considered to be more up and coming

Category: Big data and analytics: Data warehouse
Description: Apache Spark-based analytics platform. Managed Hadoop service. Data orchestration, ETL, Analytics and visualization
References:
[AWS]:EMR, Data Pipeline, Kinesis Stream, Kinesis Firehose, Glue, QuickSight, Athena, CloudSearch
[Azure]:Azure Databricks, Data Catalog Cortana Intelligence, HDInsight, Power BI, Azure Datafactory, Azure Search, Azure Data Lake Anlytics, Stream Analytics, Azure Machine Learning
[Google]:Cloud DataProc, Machine Learning, Cloud Datalab
Tags:#EMR, #DataPipeline, #Kinesis, #Cortana, AzureDatafactory, #AzureDataAnlytics, #CloudDataProc, #MachineLearning, #CloudDatalab
Differences: All three providers offer similar building blocks; data processing, data orchestration, streaming analytics, machine learning and visualisations. AWS certainly has all the bases covered with a solid set of products that will meet most needs. Azure offers a comprehensive and impressive suite of managed analytical products. They support open source big data solutions alongside new serverless analytical products such as Data Lake. Google provide their own twist to cloud analytics with their range of services. With Dataproc and Dataflow, Google have a strong core to their proposition. Tensorflow has been getting a lot of attention recently and there will be many who will be keen to see Machine Learning come out of preview.

Category: Virtual servers
Description:Virtual servers allow users to deploy, manage, and maintain OS and server software. Instance types provide combinations of CPU/RAM. Users pay for what they use with the flexibility to change sizes.
Batch: Run large-scale parallel and high-performance computing applications efficiently in the cloud.
References:
[AWS]:Elastic Compute Cloud (EC2), Amazon Bracket(Explore and experiment with quantum computing), Amazon Ec2 M6g Instances (Achieve up to 40% better price performance), Amazon Ec2 Inf1 instancs (Deliver cost-effective ML inference), AWS Graviton2 Processors (Optimize price performance for cloud workloads), AWS Batch, AWS AutoScaling, VMware Cloud on AWS, AWS Local Zones (Run low latency applications at the edge), AWS Wavelength (Deliver ultra-low latency applications for 5G devices), AWS Nitro Enclaves (Further protect highly sensitive data), AWS Outposts (Run AWS infrastructure and services on-premises)
[Azure]:Azure Virtual Machines, Azure Batch, Virtual Machine Scale Sets, Azure VMware by CloudSimple
[Google]:Compute Engine, Preemptible Virtual Machines, Managed instance groups (MIGs), Google Cloud VMware Solution by CloudSimple
Tags: #AWSEC2, #AWSBatch, #AWSAutoscaling, #AzureVirtualMachine, #AzureBatch, #VirtualMachineScaleSets, #AzureVMWare, #ComputeEngine, #MIGS, #VMWare
Differences: There is very little to choose between the 3 providers when it comes to virtual servers. Amazon has some impressive high end kit, on the face of it this sound like it would make AWS a clear winner. However, if your only option is to choose the biggest box available you will need to make sure you have very deep pockets, and perhaps your money may be better spent re-architecting your apps for horizontal scale.Azure’s remains very strong in the PaaS space and now has a IaaS that can genuinely compete with AWS
Google offers a simple and very capable set of services that are easy to understand. However, with availability in only 5 regions it does not have the coverage of the other players.

Category: Containers and container orchestrators
Description: A container is a standard unit of software that packages up code and all its dependencies so the application runs quickly and reliably from one computing environment to another.
Container orchestration is all about managing the lifecycles of containers, especially in large, dynamic environments.
References:
[AWS]:EC2 Container Service (ECS), Fargate(Run containers without anaging servers or clusters), EC2 Container Registry(managed AWS Docker registry service that is secure, scalable, and reliable.), Elastic Container Service for Kubernetes (EKS: runs the Kubernetes management infrastructure across multiple AWS Availability Zones), App Mesh( application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure)
[Azure]:Azure Container Instances, Azure Container Registry, Azure Kubernetes Service (AKS), Service Fabric Mesh
[Google]:Google Container Engine, Container Registry, Kubernetes Engine
Tags:#ECS, #Fargate, #EKS, #AppMesh, #ContainerEngine, #ContainerRegistry, #AKS
Differences: Google Container Engine, AWS Container Services, and Azure Container Instances can be used to run docker containers. Google offers a simple and very capable set of services that are easy to understand. However, with availability in only 5 regions it does not have the coverage of the other players.

Category: Serverless
Description: Integrate systems and run backend processes in response to events or schedules without provisioning or managing servers.
References:
[AWS]:AWS Lambda
[Azure]:Azure Functions
[Google]:Google Cloud Functions
Tags:#AWSLAmbda, #AzureFunctions, #GoogleCloudFunctions
Differences: Both AWS Lambda and Microsoft Azure Functions and Google Cloud Functions offer dynamic, configurable triggers that you can use to invoke your functions on their platforms. AWS Lambda, Azure and Google Cloud Functions support Node.js, Python, and C#. The beauty of serverless development is that, with minor changes, the code you write for one service should be portable to another with little effort – simply modify some interfaces, handle any input/output transforms, and an AWS Lambda Node.JS function is indistinguishable from a Microsoft Azure Node.js Function. AWS Lambda provides further support for Python and Java, while Azure Functions provides support for F# and PHP. AWS Lambda is built from the AMI, which runs on Linux, while Microsoft Azure Functions run in a Windows environment. AWS Lambda uses the AWS Machine architecture to reduce the scope of containerization, letting you spin up and tear down individual pieces of functionality in your application at will.

Category: Relational databases
Description: Managed relational database service where resiliency, scale, and maintenance are primarily handled by the platform.
References:
[AWS]:AWS RDS(MySQL and PostgreSQL-compatible relational database built for the cloud,), Aurora(MySQL and PostgreSQL-compatible relational database built for the cloud)
[Azure]:SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL
[Google]:Cloud SQL
Tags: #AWSRDS, #AWSAUrora, #AzureSQlDatabase, #AzureDatabaseforMySQL, #GoogleCloudSQL
Differences: All three providers boast impressive relational database offering. RDS supports an impressive range of managed relational stores while Azure SQL Database is probably the most advanced managed relational database available today. Azure also has the best out-of-the-box support for cross-region geo-replication across its database offerings.

Category: NoSQL, Document Databases
Description:A globally distributed, multi-model database that natively supports multiple data models: key-value, documents, graphs, and columnar.
References:
[AWS]:DynamoDB (key-value and document database that delivers single-digit millisecond performance at any scale.), SimpleDB ( a simple web services interface to create and store multiple data sets, query your data easily, and return the results.), Managed Cassandra Services(MCS)
[Azure]:Table Storage, DocumentDB, Azure Cosmos DB
[Google]:Cloud Datastore (handles sharding and replication in order to provide you with a highly available and consistent database. )
Tags:#AWSDynamoDB, #SimpleDB, #TableSTorage, #DocumentDB, AzureCosmosDB, #GoogleCloudDataStore
Differences:DynamoDB and Cloud Datastore are based on the document store database model and are therefore similar in nature to open-source solutions MongoDB and CouchDB. In other words, each database is fundamentally a key-value store. With more workloads moving to the cloud the need for NoSQL databases will become ever more important, and again all providers have a good range of options to satisfy most performance/cost requirements. Of all the NoSQL products on offer it’s hard not to be impressed by DocumentDB; Azure also has the best out-of-the-box support for cross-region geo-replication across its database offerings.

Category:Caching
Description:An in-memory–based, distributed caching service that provides a high-performance store typically used to offload non transactional work from a database.
References:
[AWS]:AWS ElastiCache (works as an in-memory data store and cache to support the most demanding applications requiring sub-millisecond response times.)
[Azure]:Azure Cache for Redis (based on the popular software Redis. It is typically used as a cache to improve the performance and scalability of systems that rely heavily on backend data-stores.)
[Google]:Memcache (In-memory key-value store, originally intended for caching)
Tags:#Redis, #Memcached
<Differences: They all support horizontal scaling via sharding.They all improve the performance of web applications by allowing you to retrive information from fast, in-memory caches, instead of relying on slower disk-based databases.”, “Differences”: “ElastiCache supports Memcached and Redis. Memcached Cloud provides various data persistence options as well as remote backups for disaster recovery purposes. Redis offers persistence to disk, Memcache does not. This can be very helpful if you cache lots of data, since you remove the slowness around having a fully cold cache. Redis also offers several extra data structures that Memcache doesn’t— Lists, Sets, Sorted Sets, etc. Memcache only has Key/Value pairs. Memcache is multi-threaded. Redis is single-threaded and event driven. Redis is very fast, but it’ll never be multi-threaded. At hight scale, you can squeeze more connections and transactions out of Memcache. Memcache tends to be more memory efficient. This can make a big difference around the magnitude of 10s of millions or 100s of millions of keys. ElastiCache supports Memcached and Redis. Memcached Cloud provides various data persistence options as well as remote backups for disaster recovery purposes. Redis offers persistence to disk, Memcache does not. This can be very helpful if you cache lots of data, since you remove the slowness around having a fully cold cache. Redis also offers several extra data structures that Memcache doesn’t— Lists, Sets, Sorted Sets, etc. Memcache only has Key/Value pairs. Memcache is multi-threaded. Redis is single-threaded and event driven. Redis is very fast, but it’ll never be multi-threaded. At hight scale, you can squeeze more connections and transactions out of Memcache. Memcache tends to be more memory efficient. This can make a big difference around the magnitude of 10s of millions or 100s of millions of keys.

Category: Security, identity, and access
Description:Authentication and authorization: Allows users to securely control access to services and resources while offering data security and protection. Create and manage users and groups, and use permissions to allow and deny access to resources.
References:
[AWS]:Identity and Access Management (IAM), AWS Organizations, Multi-Factor Authentication, AWS Directory Service, Cognito(provides solutions to control access to backend resources from your app), Amazon Detective (Investigate potential security issues), AWS IAM Access Analyzer(Easily analyze resource accessibility)
[Azure]:Azure Active Directory, Azure Subscription Management + Azure RBAC, Multi-Factor Authentication, Azure Active Directory Domain Services, Azure Active Directory B2C, Azure Policy, Management Groups
[Google]:Cloud Identity, Identity Platform, Cloud IAM, Policy Intelligence, Cloud Resource Manager, Cloud Identity-Aware Proxy, Context-aware accessManaged Service for Microsoft Active Directory, Security key enforcement, Titan Security Key
Tags: #IAM, #AWSIAM, #AzureIAM, #GoogleIAM, #Multi-factorAuthentication
Differences: One unique thing about AWS IAM is that accounts created in the organization (not through federation) can only be used within that organization. This contrasts with Google and Microsoft. On the good side, every organization is self-contained. On the bad side, users can end up with multiple sets of credentials they need to manage to access different organizations. The second unique element is that every user can have a non-interactive account by creating and using access keys, an interactive account by enabling console access, or both. (Side note: To use the CLI, you need to have access keys generated.)

Category: Object Storage and Content delivery
Description:Object storage service, for use cases including cloud applications, content distribution, backup, archiving, disaster recovery, and big data analytics.
References:
[AWS]:Simple Storage Services (S3), Import/Export(used to move large amounts of data into and out of the Amazon Web Services public cloud using portable storage devices for transport.), Snowball( petabyte-scale data transport solution that uses devices designed to be secure to transfer large amounts of data into and out of the AWS Cloud), CloudFront( content delivery network (CDN) is massively scaled and globally distributed), Elastic Block Store (EBS: high performance block storage service), Elastic File System(shared, elastic file storage system that grows and shrinks as you add and remove files.), S3 Infrequent Access (IA: is for data that is accessed less frequently, but requires rapid access when needed. ), S3 Glacier( long-term storage of data that is infrequently accessed and for which retrieval latency times of 3 to 5 hours are acceptable.), AWS Backup( makes it easy to centralize and automate the back up of data across AWS services in the cloud as well as on-premises using the AWS Storage Gateway.), Storage Gateway(hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage), AWS Import/Export Disk(accelerates moving large amounts of data into and out of AWS using portable storage devices for transport)
[Azure]:Azure Blob storage, File Storage, Data Lake Store, Azure Backup, Azure managed disks, Azure Files, Azure Storage cool tier, Azure Storage archive access tier, Azure Backup, StorSimple, Import/Export
[Google]:Cloud Storage, GlusterFS, CloudCDN
Tags:#S3, #AzureBlobStorage, #CloudStorage
Differences:Source: All providers have good object storage options and so storage alone is unlikely to be a deciding factor when choosing a cloud provider. The exception perhaps is for hybrid scenarios, in this case Azure and AWS clearly win. AWS and Google’s support for automatic versioning is a great feature that is currently missing from Azure; however Microsoft’s fully managed Data Lake Store offers an additional option that will appeal to organisations who are looking to run large scale analytical workloads. If you are prepared to wait 4 hours for your data and you have considerable amounts of the stuff then AWS Glacier storage might be a good option. If you use the common programming patterns for atomic updates and consistency, such as etags and the if-match family of headers, then you should be aware that AWS does not support them, though Google and Azure do. Azure also supports blob leasing, which can be used to provide a distributed lock.

Category:Internet of things (IoT)
Description:A cloud gateway for managing bidirectional communication with billions of IoT devices, securely and at scale. Deploy cloud intelligence directly on IoT devices to run in on-premises scenarios.
References:
[AWS]:AWS IoT (Internet of Things), AWS Greengrass, Kinesis Firehose, Kinesis Streams, AWS IoT Things Graph
[Azure]:Azure IoT Hub, Azure IoT Edge, Event Hubs, Azure Digital Twins, Azure Sphere
[Google]:Google Cloud IoT Core, Firebase, Brillo, Weave, CLoud Pub/SUb, Stream Analysis, Big Query, Big Query Streaming API
Tags:#IoT, #InternetOfThings, #Firebase
Differences:AWS and Azure have a more coherent message with their products clearly integrated into their respective platforms, whereas Google Firebase feels like a distinctly separate product.

Category:Web Applications
Description:Managed hosting platform providing easy to use services for deploying and scaling web applications and services. API Gateway is a a turnkey solution for publishing APIs to external and internal consumers. Cloudfront is a global content delivery network that delivers audio, video, applications, images, and other files.
References:
[AWS]:Elastic Beanstalk (for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS), AWS Wavelength (for delivering ultra-low latency applications for 5G), API Gateway (makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale.), CloudFront (web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. CloudFront delivers your content through a worldwide network of data centers called edge locations.),Global Accelerator ( improves the availability and performance of your applications with local or global users. It provides static IP addresses that act as a fixed entry point to your application endpoints in a single or multiple AWS Regions, such as your Application Load Balancers, Network Load Balancers or Amazon EC2 instances.)AWS AppSync (simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources: GraphQL service with real-time data synchronization and offline programming features. )
[Azure]:App Service, API Management, Azure Content Delivery Network, Azure Content Delivery Network
[Google]:App Engine, Cloud API, Cloud Enpoint, APIGee
Tags: #AWSElasticBeanstalk, #AzureAppService, #GoogleAppEngine, #CloudEnpoint, #CloudFront, #APIgee
Differences: With AWS Elastic Beanstalk, developers retain full control over the AWS resources powering their application. If developers decide they want to manage some (or all) of the elements of their infrastructure, they can do so seamlessly by using Elastic Beanstalk’s management capabilities. AWS Elastic Beanstalk integrates with more apps than Google App Engines (Datadog, Jenkins, Docker, Slack, Github, Eclipse, etc..). Google App Engine has more features than AWS Elastic BEanstalk (App Identity, Java runtime, Datastore, Blobstore, Images, Go Runtime, etc..). Developers describe Amazon API Gateway as “Create, publish, maintain, monitor, and secure APIs at any scale”. Amazon API Gateway handles all the tasks involved in accepting and processing up to hundreds of thousands of concurrent API calls, including traffic management, authorization and access control, monitoring, and API version management. On the other hand, Google Cloud Endpoints is detailed as “Develop, deploy and manage APIs on any Google Cloud backend”. An NGINX-based proxy and distributed architecture give unparalleled performance and scalability. Using an Open API Specification or one of our API frameworks, Cloud Endpoints gives you the tools you need for every phase of API development and provides insight with Google Cloud Monitoring, Cloud Trace, Google Cloud Logging and Cloud Trace.

Category:Encryption
Description:Helps you protect and safeguard your data and meet your organizational security and compliance commitments.
References:
[AWS]:Key Management Service AWS KMS, CloudHSM
[Azure]:Key Vault
[Google]:Encryption By Default at Rest, Cloud KMS
Tags:#AWSKMS, #Encryption, #CloudHSM, #EncryptionAtRest, #CloudKMS
Differences: AWS KMS, is an ideal solution for organizations that want to manage encryption keys in conjunction with other AWS services. In contrast to AWS CloudHSM, AWS KMS provides a complete set of tools to manage encryption keys, develop applications and integrate with other AWS services. Google and Azure offer 4096 RSA. AWS and Google offer 256 bit AES. With AWs, you can bring your own key

Category:Internet of things (IoT)
Description:A cloud gateway for managing bidirectional communication with billions of IoT devices, securely and at scale. Deploy cloud intelligence directly on IoT devices to run in on-premises scenarios.
References:
[AWS]:AWS IoT, AWS Greengrass, Kinesis Firehose ( captures and loads streaming data in storage and business intelligence (BI) tools to enable near real-time analytics in the AWS cloud), Kinesis Streams (for rapid and continuous data intake and aggregation.), AWS IoT Things Graph (makes it easy to visually connect different devices and web services to build IoT applications.)
[Azure]:Azure IoT Hub, Azure IoT Edge, Event Hubs, Azure Digital Twins, Azure Sphere
[Google]:Google Cloud IoT Core, Firebase, Brillo, Weave, CLoud Pub/SUb, Stream Analysis, Big Query, Big Query Streaming API
Tags:#IoT, #InternetOfThings, #Firebase
Differences:AWS and Azure have a more coherent message with their products clearly integrated into their respective platforms, whereas Google Firebase feels like a distinctly separate product.

Category: Backend process logic
Description: Cloud technology to build distributed applications using out-of-the-box connectors to reduce integration challenges. Connect apps, data and devices on-premises or in the cloud.
References:
[AWS]:AWS Step Functions ( lets you build visual workflows that enable fast translation of business requirements into technical requirements. You can build applications in a matter of minutes, and when needs change, you can swap or reorganize components without customizing any code.)
[Azure]:Logic Apps (cloud service that helps you schedule, automate, and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations.)
[Google]:Dataflow ( fully managed service for executing Apache Beam pipelines within the Google Cloud Platform ecosystem.)
Tags:#AWSStepFunctions, #LogicApps, #Dataflow
Differences: AWS Step Functions makes it easy to coordinate the components of distributed applications and microservices using visual workflows. Building applications from individual components that each perform a discrete function lets you scale and change applications quickly. AWS Step Functions belongs to \”Cloud Task Management\” category of the tech stack, while Google Cloud Dataflow can be primarily classified under \”Real-time Data Processing\”. According to the StackShare community, Google Cloud Dataflow has a broader approval, being mentioned in 32 company stacks & 8 developers stacks; compared to AWS Step Functions, which is listed in 19 company stacks and 7 developer stacks.

Category: Enterprise application services
Description:Fully integrated Cloud service providing communications, email, document management in the cloud and available on a wide variety of devices.
References:
[AWS]:Amazon WorkMail, Amazon WorkDocs, Amazon Kendra (Sync and Index)
[Azure]:Office 365
[Google]:G Suite
Tags: #AmazonWorkDocs, #Office365, #GoogleGSuite
Differences: G suite document processing applications like Google Docs are far behind Office 365 popular Word and Excel software, but G Suite User interface is intuite, simple and easy to navigate. Office 365 is too clunky. Get 20% off G-Suite Business Plan with Promo Code: PCQ49CJYK7EATNC

Category: Networking
Description: Provides an isolated, private environment in the cloud. Users have control over their virtual networking environment, including selection of their own IP address range, creation of subnets, and configuration of route tables and network gateways.
References:
[AWS]:Virtual Private Cloud (VPC), Cloud virtual networking, Subnets, Elastic Network Interface (ENI), Route Tables, Network ACL, Secutity Groups, Internet Gateway, NAT Gateway, AWS VPN Gateway, AWS Route 53, AWS Direct Connect, AWS Network Load Balancer, VPN CloudHub, AWS Local Zones, AWS Transit Gateway network manager (Centrally manage global networks)
[Azure]:Virtual Network(provide services for building networks within Azure.),Subnets (network resources can be grouped by subnet for organisation and security.), Network Interface (Each virtual machine can be assigned one or more network interfaces (NICs)), Network Security Groups (NSG: contains a set of prioritised ACL rules that explicitly grant or deny access), Azure VPN Gateway ( allows connectivity to on-premise networks), Azure DNS, Traffic Manager (DNS based traffic routing solution.), ExpressRoute (provides connections up to 10 Gbps to Azure services over a dedicated fibre connection), Azure Load Balancer, Network Peering, Azure Stack (Azure Stack allows organisations to use Azure services running in private data centers.), Azure Load Balancer , Azure Log Analytics, Azure DNS,
[Google]:Cloud Virtual Network, Subnets, Network Interface, Protocol fowarding, Cloud VPN, Cloud DNS, Virtual Private Network, Cloud Interconnect, CDN interconnect, Cloud DNS, Stackdriver, Google Cloud Load Balancing,
Tags:#VPC, #Subnets, #ACL, #VPNGateway, #CloudVPN, #NetworkInterface, #ENI, #RouteTables, #NSG, #NetworkACL, #InternetGateway, #NatGateway, #ExpressRoute, #CloudInterConnect, #StackDriver
Differences: Subnets group related resources, however, unlike AWS and Azure, Google do not constrain the private IP address ranges of subnets to the address space of the parent network. Like Azure, Google has a built in internet gateway that can be specified from routing rules.

Category: Management
Description: A unified management console that simplifies building, deploying, and operating your cloud resources.
References:
[AWS]: AWS Management Console, Trusted Advisor, AWS Usage and Billing Report, AWS Application Discovery Service, Amazon EC2 Systems Manager, AWS Personal Health Dashboard, AWS Compute Optimizer (Identify optimal AWS Compute resources)
[Azure]:Azure portal, Azure Advisor, Azure Billing API, Azure Migrate, Azure Monitor, Azure Resource Health
[Google]:Google CLoud Platform, Cost Management, Security Command Center, StackDriver
Tags: #AWSConsole, #AzurePortal, #GoogleCloudConsole, #TrustedAdvisor, #AzureMonitor, #SecurityCommandCenter
Differences: AWS Console categorizes its Infrastructure as a Service offerings into Compute, Storage and Content Delivery Network (CDN), Database, and Networking to help businesses and individuals grow. Azure excels in the Hybrid Cloud space allowing companies to integrate onsite servers with cloud offerings. Google has a strong offering in containers, since Google developed the Kubernetes standard that AWS and Azure now offer. GCP specializes in high compute offerings like Big Data, analytics and machine learning. It also offers considerable scale and load balancing – Google knows data centers and fast response time.

Category: DevOps and application monitoring
Description: Comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments; Cloud services for collaborating on code development; Collection of tools for building, debugging, deploying, diagnosing, and managing multiplatform scalable apps and services; Fully managed build service that supports continuous integration and deployment.
References:
[AWS]:AWS CodePipeline(orchestrates workflow for continuous integration, continuous delivery, and continuous deployment), AWS CloudWatch (monitor your AWS resources and the applications you run on AWS in real time. ), AWS X-Ray (application performance management service that enables a developer to analyze and debug applications in aws), AWS CodeDeploy (automates code deployments to Elastic Compute Cloud (EC2) and on-premises servers. ), AWS CodeCommit ( source code storage and version-control service), AWS Developer Tools, AWS CodeBuild (continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. ), AWS Command Line Interface (unified tool to manage your AWS services), AWS OpsWorks (Chef-based), AWS CloudFormation ( provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.), Amazon CodeGuru (for automated code reviews and application performance recommendations)
[Azure]:Azure Monitor, Azure DevOps, Azure Developer Tools, Azure CLI Azure PowerShell, Azure Automation, Azure Resource Manager , VM extensions , Azure Automation
[Google]:DevOps Solutions (Infrastructure as code, Configuration management, Secrets management, Serverless computing, Continuous delivery, Continuous integration , Stackdriver (combines metrics, logs, and metadata from all of your cloud accounts and projects into a single comprehensive view of your environment)
Tags: #CloudWatch, #StackDriver, #AzureMonitor, #AWSXray, #AWSCodeDeploy, #AzureDevOps, #GoogleDevopsSolutions
Differences: CodeCommit eliminates the need to operate your own source control system or worry about scaling its infrastructure. Azure DevOps provides unlimited private Git hosting, cloud build for continuous integration, agile planning, and release management for continuous delivery to the cloud and on-premises. Includes broad IDE support.

SageMaker | Azure Machine Learning Studio

A collaborative, drag-and-drop tool to build, test, and deploy predictive analytics solutions on your data.

Alexa Skills Kit | Microsoft Bot Framework

Build and connect intelligent bots that interact with your users using text/SMS, Skype, Teams, Slack, Office 365 mail, Twitter, and other popular services.

Amazon Lex | Speech Services

API capable of converting speech to text, understanding intent, and converting text back to speech for natural responsiveness.

Amazon Lex | Language Understanding (LUIS)

Allows your applications to understand user commands contextually.

Amazon Polly, Amazon Transcribe | Azure Speech Services

Enables both Speech to Text, and Text into Speech capabilities.
The Speech Services are the unification of speech-to-text, text-to-speech, and speech-translation into a single Azure subscription. It’s easy to speech enable your applications, tools, and devices with the Speech SDK, Speech Devices SDK, or REST APIs.
Amazon Polly is a Text-to-Speech (TTS) service that uses advanced deep learning technologies to synthesize speech that sounds like a human voice. With dozens of lifelike voices across a variety of languages, you can select the ideal voice and build speech-enabled applications that work in many different countries.
Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for developers to add speech-to-text capability to their applications. Using the Amazon Transcribe API, you can analyze audio files stored in Amazon S3 and have the service return a text file of the transcribed speech.

Amazon Rekognition | Cognitive Services

Computer Vision: Extract information from images to categorize and process visual data.
Amazon Rekognition is a simple and easy to use API that can quickly analyze any image or video file stored in Amazon S3. Amazon Rekognition is always learning from new data, and we are continually adding new labels and facial recognition features to the service.

Face: Detect, identy, and analyze faces in photos.

Emotions: Recognize emotions in images.

Alexa Skill Set | Azure Virtual Assistant

The Virtual Assistant Template brings together a number of best practices we’ve identified through the building of conversational experiences and automates integration of components that we’ve found to be highly beneficial to Bot Framework developers.

Big data and analytics

Data warehouse

AWS Redshift | SQL Data Warehouse

Cloud-based Enterprise Data Warehouse (EDW) that uses Massively Parallel Processing (MPP) to quickly run complex queries across petabytes of data.

Big data processing EMR | Azure Databricks
Apache Spark-based analytics platform.

EMR | HDInsight

Managed Hadoop service. Deploy and manage Hadoop clusters in Azure.

Data orchestration / ETL

AWS Data Pipeline, AWS Glue | Data Factory

Processes and moves data between different compute and storage services, as well as on-premises data sources at specified intervals. Create, schedule, orchestrate, and manage data pipelines.

AWS Glue | Data Catalog

A fully managed service that serves as a system of registration and system of discovery for enterprise data sources

Analytics and visualization

AWS Kinesis Analytics | Stream Analytics

Data Lake Analytics | Data Lake Store

Storage and analysis platforms that create insights from large quantities of data, or data that originates from many sources.

QuickSight | Power BI

Business intelligence tools that build visualizations, perform ad hoc analysis, and develop business insights from data.

CloudSearch | Azure Search

Delivers full-text search and related search analytics and capabilities.

Amazon Athena | Azure Data Lake Analytics

Provides a serverless interactive query service that uses standard SQL for analyzing databases.

Compute

Virtual servers

Elastic Compute Cloud (EC2) | Azure Virtual Machines

Virtual servers allow users to deploy, manage, and maintain OS and server software. Instance types provide combinations of CPU/RAM. Users pay for what they use with the flexibility to change sizes.

AWS Batch | Azure Batch

Run large-scale parallel and high-performance computing applications efficiently in the cloud.

AWS Auto Scaling | Virtual Machine Scale Sets

Allows you to automatically change the number of VM instances. You set defined metric and thresholds that determine if the platform adds or removes instances.

VMware Cloud on AWS | Azure VMware by CloudSimple

Redeploy and extend your VMware-based enterprise workloads to Azure with Azure VMware Solution by CloudSimple. Keep using the VMware tools you already know to manage workloads on Azure without disrupting network, security, or data protection policies.

Containers and container orchestrators

EC2 Container Service (ECS), Fargate | Azure Container Instances

Azure Container Instances is the fastest and simplest way to run a container in Azure, without having to provision any virtual machines or adopt a higher-level orchestration service.

EC2 Container Registry | Azure Container Registry

Allows customers to store Docker formatted images. Used to create all types of container deployments on Azure.

Elastic Container Service for Kubernetes (EKS) | Azure Kubernetes Service (AKS)

Deploy orchestrated containerized applications with Kubernetes. Simplify monitoring and cluster management through auto upgrades and a built-in operations console.

App Mesh | Service Fabric Mesh

Fully managed service that enables developers to deploy microservices applications without managing virtual machines, storage, or networking.
AWS App Mesh is a service mesh that provides application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure. App Mesh standardizes how your services communicate, giving you end-to-end visibility and ensuring high-availability for your applications.

Serverless

AWS Lambda | Azure Functions

Integrate systems and run backend processes in response to events or schedules without provisioning or managing servers.
AWS Lambda is an event-driven, serverless computing platform provided by Amazon as a part of the Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code

Database

Relational database

AWS RDS | SQL Database Azure Database for MySQL Azure Database for PostgreSQL

Managed relational database service where resiliency, scale, and maintenance are primarily handled by the platform.
Amazon Relational Database Service is a distributed relational database service by Amazon Web Services. It is a web service running “in the cloud” designed to simplify the setup, operation, and scaling of a relational database for use in applications. Administration processes like patching the database software, backing up databases and enabling point-in-time recovery are managed automatically. Scaling storage and compute resources can be performed by a single API call as AWS does not offer an ssh connection to RDS instances.

NoSQL / Document

DynamoDB and SimpleDB | Azure Cosmos DB

A globally distributed, multi-model database that natively supports multiple data models: key-value, documents, graphs, and columnar.

Caching

AWS ElastiCache | Azure Cache for Redis

An in-memory–based, distributed caching service that provides a high-performance store typically used to offload non transactional work from a database.
Amazon ElastiCache is a fully managed in-memory data store and cache service by Amazon Web Services. The service improves the performance of web applications by retrieving information from managed in-memory caches, instead of relying entirely on slower disk-based databases. ElastiCache supports two open-source in-memory caching engines: Memcached and Redis.

Database migration

AWS Database Migration Service | Azure Database Migration Service

Migration of database schema and data from one database format to a specific database technology in the cloud.
AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from most widely used commercial and open-source databases.

DevOps and application monitoring

AWS CloudWatch, AWS X-Ray | Azure Monitor

Comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.
Amazon CloudWatch is a monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), and IT managers. CloudWatch provides you with data and actionable insights to monitor your applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. CloudWatch collects monitoring and operational data in the form of logs, metrics, and events, providing you with a unified view of AWS resources, applications, and services that run on AWS and on-premises servers.
AWS X-Ray is an application performance management service that enables a developer to analyze and debug applications in the Amazon Web Services (AWS) public cloud. A developer can use AWS X-Ray to visualize how a distributed application is performing during development or production, and across multiple AWS regions and accounts.

AWS CodeDeploy, AWS CodeCommit, AWS CodePipeline | Azure DevOps

A cloud service for collaborating on code development.
AWS CodeDeploy is a fully managed deployment service that automates software deployments to a variety of compute services such as Amazon EC2, AWS Fargate, AWS Lambda, and your on-premises servers. AWS CodeDeploy makes it easier for you to rapidly release new features, helps you avoid downtime during application deployment, and handles the complexity of updating your applications.
AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates. CodePipeline automates the build, test, and deploy phases of your release process every time there is a code change, based on the release model you define.
AWS CodeCommit is a source code storage and version-control service for Amazon Web Services’ public cloud customers. CodeCommit was designed to help IT teams collaborate on software development, including continuous integration and application delivery.

AWS Developer Tools | Azure Developer Tools

Collection of tools for building, debugging, deploying, diagnosing, and managing multiplatform scalable apps and services.
The AWS Developer Tools are designed to help you build software like Amazon. They facilitate practices such as continuous delivery and infrastructure as code for serverless, containers, and Amazon EC2.

AWS CodeBuild | Azure DevOps

Fully managed build service that supports continuous integration and deployment.

AWS Command Line Interface | Azure CLI Azure PowerShell

Built on top of the native REST API across all cloud services, various programming language-specific wrappers provide easier ways to create solutions.
The AWS Command Line Interface (CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts.

AWS OpsWorks (Chef-based) | Azure Automation

Configures and operates applications of all shapes and sizes, and provides templates to create and manage a collection of resources.
AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.

AWS CloudFormation | Azure Resource Manager , VM extensions , Azure Automation

Provides a way for users to automate the manual, long-running, error-prone, and frequently repeated IT tasks.
AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.

Networking

Area

Cloud virtual networking, Virtual Private Cloud (VPC) | Virtual Network

Provides an isolated, private environment in the cloud. Users have control over their virtual networking environment, including selection of their own IP address range, creation of subnets, and configuration of route tables and network gateways.

Cross-premises connectivity

AWS VPN Gateway | Azure VPN Gateway

Connects Azure virtual networks to other Azure virtual networks, or customer on-premises networks (Site To Site). Allows end users to connect to Azure services through VPN tunneling (Point To Site).

DNS management

AWS Route 53 | Azure DNS

Manage your DNS records using the same credentials and billing and support contract as your other Azure services

Route 53 | Traffic Manager

A service that hosts domain names, plus routes users to Internet applications, connects user requests to datacenters, manages traffic to apps, and improves app availability with automatic failover.

Dedicated network

AWS Direct Connect | ExpressRoute

Establishes a dedicated, private network connection from a location to the cloud provider (not over the Internet).

Load balancing

AWS Network Load Balancer | Azure Load Balancer

Azure Load Balancer load-balances traffic at layer 4 (TCP or UDP).

Application Load Balancer | Application Gateway

Application Gateway is a layer 7 load balancer. It supports SSL termination, cookie-based session affinity, and round robin for load-balancing traffic.

Internet of things (IoT)

AWS IoT | Azure IoT Hub

A cloud gateway for managing bidirectional communication with billions of IoT devices, securely and at scale.

AWS Greengrass | Azure IoT Edge

Deploy cloud intelligence directly on IoT devices to run in on-premises scenarios.

Kinesis Firehose, Kinesis Streams | Event Hubs

Services that allow the mass ingestion of small data inputs, typically from devices and sensors, to process and route the data.

AWS IoT Things Graph | Azure Digital Twins

Azure Digital Twins is an IoT service that helps you create comprehensive models of physical environments. Create spatial intelligence graphs to model the relationships and interactions between people, places, and devices. Query data from a physical space rather than disparate sensors.

Management

Trusted Advisor | Azure Advisor

Provides analysis of cloud resource configuration and security so subscribers can ensure they’re making use of best practices and optimum configurations.

AWS Usage and Billing Report | Azure Billing API

Services to help generate, monitor, forecast, and share billing data for resource usage by time, organization, or product resources.

AWS Management Console | Azure portal

A unified management console that simplifies building, deploying, and operating your cloud resources.

AWS Application Discovery Service | Azure Migrate

Assesses on-premises workloads for migration to Azure, performs performance-based sizing, and provides cost estimations.

Amazon EC2 Systems Manager | Azure Monitor

Comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.

AWS Personal Health Dashboard | Azure Resource Health

Provides detailed information about the health of resources as well as recommended actions for maintaining resource health.

Security, identity, and access

Authentication and authorization

Identity and Access Management (IAM) | Azure Active Directory

Allows users to securely control access to services and resources while offering data security and protection. Create and manage users and groups, and use permissions to allow and deny access to resources.

Identity and Access Management (IAM) | Azure Role Based Access Control

Role-based access control (RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.

AWS Organizations | Azure Subscription Management + Azure RBAC

Security policy and role management for working with multiple accounts.

Multi-Factor Authentication | Multi-Factor Authentication

Safeguard access to data and applications while meeting user demand for a simple sign-in process.

AWS Directory Service | Azure Active Directory Domain Services

Provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory.

Cognito | Azure Active Directory B2C

A highly available, global, identity management service for consumer-facing applications that scales to hundreds of millions of identities.

AWS Organizations | Azure Policy

Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

AWS Organizations | Management Groups

Azure management groups provide a level of scope above subscriptions. You organize subscriptions into containers called “management groups” and apply your governance conditions to the management groups. All subscriptions within a management group automatically inherit the conditions applied to the management group. Management groups give you enterprise-grade management at a large scale, no matter what type of subscriptions you have.

Encryption

Server-side encryption with Amazon S3 Key Management Service | Azure Storage Service Encryption

Helps you protect and safeguard your data and meet your organizational security and compliance commitments.

Key Management Service AWS KMS, CloudHSM | Key Vault

Provides security solution and works with other services by providing a way to manage, create, and control encryption keys stored in hardware security modules (HSM).

Firewall

Web Application Firewall | Application Gateway – Web Application Firewall

A firewall that protects web applications from common web exploits.

Web Application Firewall | Azure Firewall

Provides inbound protection for non-HTTP/S protocols, outbound network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.

Security

Inspector | Security Center

An automated security assessment service that improves the security and compliance of applications. Automatically assess applications for vulnerabilities or deviations from best practices.

Certificate Manager | App Service Certificates available on the Portal

Service that allows customers to create, manage, and consume certificates seamlessly in the cloud.

GuardDuty | Azure Advanced Threat Protection

Detect and investigate advanced attacks on-premises and in the cloud.

AWS Artifact | Service Trust Portal

Provides access to audit reports, compliance guides, and trust documents from across cloud services.

AWS Shield | Azure DDos Protection Service

Provides cloud services with protection from distributed denial of services (DDoS) attacks.

Storage

Object storage

Simple Storage Services (S3) | Azure Blob storage

Object storage service, for use cases including cloud applications, content distribution, backup, archiving, disaster recovery, and big data analytics.

Virtual server disks

Elastic Block Store (EBS) | Azure managed disks

SSD storage optimized for I/O intensive read/write operations. For use as high-performance Azure virtual machine storage.

Shared files

Elastic File System | Azure Files

Provides a simple interface to create and configure file systems quickly, and share common files. Can be used with traditional protocols that access files over a network.

Archiving and backup

S3 Infrequent Access (IA) | Azure Storage cool tier

Cool storage is a lower-cost tier for storing data that is infrequently accessed and long-lived.

S3 Glacier | Azure Storage archive access tier

Archive storage has the lowest storage cost and higher data retrieval costs compared to hot and cool storage.

AWS Backup | Azure Backup

Back up and recover files and folders from the cloud, and provide offsite protection against data loss.

Hybrid storage

Storage Gateway | StorSimple

Integrates on-premises IT environments with cloud storage. Automates data management and storage, plus supports disaster recovery.

Bulk data transfer

AWS Import/Export Disk | Import/Export

A data transport solution that uses secure disks and appliances to transfer large amounts of data. Also offers data protection during transit.

AWS Import/Export Snowball, Snowball Edge, Snowmobile | Azure Data Box

Petabyte- to exabyte-scale data transport solution that uses secure data storage devices to transfer large amounts of data to and from Azure.

Web applications

Elastic Beanstalk | App Service

Managed hosting platform providing easy to use services for deploying and scaling web applications and services.

API Gateway | API Management

A turnkey solution for publishing APIs to external and internal consumers.

CloudFront | Azure Content Delivery Network

A global content delivery network that delivers audio, video, applications, images, and other files.

Global Accelerator | Azure Front Door

Easily join your distributed microservice architectures into a single global application using HTTP load balancing and path-based routing rules. Automate turning up new regions and scale-out with API-driven global actions, and independent fault-tolerance to your back end microservices in Azure—or anywhere.

Miscellaneous

Backend process logic

AWS Step Functions | Logic Apps

Cloud technology to build distributed applications using out-of-the-box connectors to reduce integration challenges. Connect apps, data and devices on-premises or in the cloud.

Enterprise application services

Amazon WorkMail, Amazon WorkDocs | Office 365

Fully integrated Cloud service providing communications, email, document management in the cloud and available on a wide variety of devices.

Gaming

GameLift, GameSparks | PlayFab

Managed services for hosting dedicated game servers.

Media transcoding

Elastic Transcoder | Media Services

Services that offer broadcast-quality video streaming services, including various transcoding technologies.

Workflow

Simple Workflow Service (SWF) | Logic Apps

Serverless technology for connecting apps, data and devices anywhere, whether on-premises or in the cloud for large ecosystems of SaaS and cloud-based connectors.

Hybrid

Outposts | Azure Stack

Azure Stack is a hybrid cloud platform that enables you to run Azure services in your company’s or service provider’s datacenter. As a developer, you can build apps on Azure Stack. You can then deploy them to either Azure Stack or Azure, or you can build truly hybrid apps that take advantage of connectivity between an Azure Stack cloud and Azure.

How does a business decide between Microsoft Azure or AWS?

Basically, it all comes down to what your organizational needs are and if there’s a particular area that’s especially important to your business (ex. serverless, or integration with Microsoft applications).

Some of the main things it comes down to is compute options, pricing, and purchasing options.

Here’s a brief comparison of the compute option features across cloud providers:

Here’s an example of a few instances’ costs (all are Linux OS):

Each provider offers a variety of options to lower costs from the listed On-Demand prices. These can fall under reservations, spot and preemptible instances and contracts.

Both AWS and Azure offer a way for customers to purchase compute capacity in advance in exchange for a discount: AWS Reserved Instances and Azure Reserved Virtual Machine Instances. There are a few interesting variations between the instances across the cloud providers which could affect which is more appealing to a business.

Another discounting mechanism is the idea of spot instances in AWS and low-priority VMs in Azure. These options allow users to purchase unused capacity for a steep discount.

With AWS and Azure, enterprise contracts are available. These are typically aimed at enterprise customers, and encourage large companies to commit to specific levels of usage and spend in exchange for an across-the-board discount – for example, AWS EDPs and Azure Enterprise Agreements.

You can read more about the differences between AWS and Azure to help decide which your business should use in this blog post

Source: AWS to Azure services comparison – Azure Architecture