Azure Fundamentals

You might also like

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 5

Mobile Computing

Std name ‫عبدالجكيم أبوبكر الفرجاني‬

Std Number 4109

The Three Microsoft Azure Fundamentals

The Microsoft Azure Fundamentals cover a wide range of topics related to Azure services,
concepts, and principles. The 3 main are

1. Cloud Concepts: This area covers the basics of cloud computing, including the benefits of
cloud services, differences between Infrastructure as a Service (IaaS), Platform as a Service
(PaaS), and Software as a Service (SaaS), and the differences between public, private, and
hybrid cloud models.

2. Core Azure Services: This section focuses on the core services provided by Azure, such as
compute, storage, networking, and databases. It also covers Azure management tools, like the
Azure Portal, Azure PowerShell, Azure CLI, and Azure Resource Manager (ARM) templates.

3. Security, Privacy, Compliance, and Trust: This area covers the security features and
services provided by Azure, such as Azure Active Directory, Multi-Factor Authentication, and
Azure Security Center. It also discusses privacy, compliance, and data protection standards, as
well as Azure's shared responsibility model for security.

Cloud Concepts

Cloud computing is the delivery of computing services, such as servers, storage, databases,
networking, software, analytics, and intelligence, over the internet ("the cloud"). It allows
organizations to access and manage these resources on-demand, enabling them to scale up or
down as needed. Cloud computing offers several benefits, including cost savings, flexibility,
scalability, and reliability.

Here are some of the concepts for cloud computing


A. Benefits of cloud services:

● Cost savings: Cloud services eliminate the need for upfront investments in hardware and
software, as well as ongoing maintenance costs. You pay only for the resources you
use.
● Scalability: Cloud services can be easily scaled up or down to meet changing demands,
ensuring that you have the right amount of resources at any given time.
● Flexibility: Cloud services allow you to access and manage your resources from
anywhere with an internet connection, making it easier to collaborate and work remotely.
● Reliability: Cloud providers offer redundancy and backup options to ensure that your
data and applications are always available, even in the event of hardware failures or
other issues.

B. Service models:

● Infrastructure as a Service (IaaS): IaaS provides virtualized computing resources over


the internet. It offers the most basic building blocks for cloud services, such as virtual
machines, storage, and networking. Examples: Microsoft Azure Virtual Machines,
Amazon EC2.
● Platform as a Service (PaaS): PaaS provides a platform for developers to build, test, and
deploy applications without worrying about the underlying infrastructure. It includes tools
and services for application development, such as middleware, databases, and
development frameworks. Examples: Microsoft Azure App Service, Google App Engine.
● Software as a Service (SaaS): SaaS delivers software applications over the internet,
eliminating the need for users to install and maintain software on their own devices.
SaaS providers manage the underlying infrastructure, as well as software updates and
maintenance. Examples: Microsoft Office 365, Salesforce.

C. Deployment models:

● Public cloud: In a public cloud, resources are owned and operated by a third-party cloud
service provider and shared among multiple customers. Public clouds offer cost savings
and scalability but may have less control and customization options.
● Private cloud: A private cloud is dedicated to a single organization, offering more control
and customization options. Private clouds can be hosted on-premises or by a third-party
provider. They offer increased security and compliance but may have higher costs and
less scalability.
● Hybrid cloud: A hybrid cloud combines elements of both public and private clouds,
allowing organizations to take advantage of the benefits of each. Hybrid clouds enable
organizations to move workloads between public and private clouds as needed, offering
flexibility, scalability, and security.
Core Azure Services

Microsoft Azure offers a wide range of services that cater to various aspects of cloud computing.
The core Azure services can be categorized into four main areas: compute, storage,
networking, and databases. Additionally, Azure provides management tools for working with
these services.

A. Compute:

● Virtual Machines (VMs): VMs are software-based computers that run on physical
hardware in the Azure data centers. They allow you to run applications and workloads
on-demand, with the ability to scale up or down as needed.
● Azure App Service: This is a fully managed platform for building, deploying, and scaling
web apps. It supports various programming languages and frameworks, such as .NET,
Java, Node.js, Python, and PHP.
● Azure Functions: These are serverless compute services that allow you to run small
pieces of code (functions) in response to events or triggers, without the need to manage
the underlying infrastructure.

B. Storage:

● Azure Blob Storage: This is an object storage service for storing large amounts of
unstructured data, such as text or binary data. It is ideal for serving images, documents,
or streaming video and audio.
● Azure File Storage: This service provides fully managed file shares in the cloud,
accessible via the industry-standard Server Message Block (SMB) protocol. It is suitable
for migrating on-premises applications that rely on file shares.
● Azure Disk Storage: This is a block-level storage service for use with Azure Virtual
Machines. It provides high-performance, durable storage for VMs, with options for both
SSD and HDD storage.

C. Networking:

● Azure Virtual Network: This service allows you to create isolated, private networks in
Azure, with full control over IP address ranges, DNS settings, and security policies.
● Azure Load Balancer: This service distributes incoming network traffic across multiple
resources, such as VMs, to ensure high availability and reliability.
● Azure VPN Gateway: This service enables you to create secure, encrypted connections
between your on-premises networks and your Azure Virtual Networks.
D. Databases:

● Azure SQL Database: This is a fully managed relational database service based on the
Microsoft SQL Server engine. It provides automatic scaling, backups, and patching, as
well as built-in intelligence for optimizing performance.
● Azure Cosmos DB: This is a globally distributed, multi-model NoSQL database service
that supports various data models, such as document, key-value, graph, and column-
family. It offers low-latency, high-availability, and consistency guarantees.

E. Management Tools:

● Azure Portal: A web-based interface for managing and monitoring Azure resources.
● Azure PowerShell: A command-line interface for managing Azure resources using
PowerShell scripts.
● Azure CLI: A command-line interface for managing Azure resources using cross-
platform scripts.
● Azure Resource Manager (ARM) templates: A declarative way to define and deploy
Azure resources using JSON templates.

Security, Privacy, Compliance, and Trust

Microsoft Azure provides various security features and services to protect your data
and applications in the cloud. Additionally, Azure adheres to privacy, compliance, and
data protection standards to ensure trust in its services. Here are some key aspects of
security, privacy, compliance, and trust in Azure:

A. Security Features and Services:

● Azure Active Directory (Azure AD): This is a cloud-based identity and access
management service that helps secure access to applications and resources. It provides
features such as single sign-on (SSO), multi-factor authentication (MFA), and conditional
access policies.
● Azure Security Center: This is a unified security management and threat protection
service that provides visibility and control over the security of your Azure resources. It
offers features such as security recommendations, threat detection, and incident
response.
● Azure Firewall: This is a managed, cloud-based network security service that protects
your Azure Virtual Network resources. It provides features such as application filtering,
network traffic filtering, and threat intelligence-based filtering.

B. Privacy and Data Protection:

● Data Privacy: Azure is committed to protecting the privacy of your data and adheres to
strict privacy standards, such as the General Data Protection Regulation (GDPR). Azure
provides tools and resources to help you manage and protect your data in accordance
with these standards.
● Data Residency: Azure offers data centers in various regions around the world, allowing
you to choose where your data is stored and processed. This helps you meet data
residency requirements and ensure compliance with local regulations.
● Encryption: Azure provides encryption options for data at rest, in transit, and in use. For
data at rest, Azure Storage Service Encryption (SSE) automatically encrypts your data
before it is stored. For data in transit, Azure uses industry-standard protocols such as
SSL/TLS and IPsec. For data in use, Azure Confidential Computing offers hardware-
based encryption to protect your data while it is being processed.

Note : SSL/TLS stands for Secure Sockets Layer/Transport Layer Security. It is a


protocol used to establish a secure and encrypted connection between a client and a
server over the internet.

References :

1. Microsoft Azure Essentials - Fundamentals of Azure By Michael Collier,


Robin Shahan
2. Fundamentals of Azure Second Edition Microsoft Azure Essentials

Some AI services were used to Extract data from the pdf books and summarized them

All info were studied and understood by the student before submission ( probably )

You might also like