Microsoft Azure Fundamentals Certification Course (AZ-900) – Pass the exam in 3 hours!

Hey, this is Andrew Brown from exam Pro. And
welcome to my az 900 course, also known as the Azure fundamentals certification for the
Azure platform. So if you're new to cloud and you don't know anything, and you want
to get into it, this is the course for you. Because we're going to show you how to set
up your account. Look over the core services and more. And as always, I'd love to hear
your feedback. So if you're on Twitter or LinkedIn, definitely tell me how the course
is. And if you do pass, be sure to hashtag Azure Azure certified on Twitter, and I'll
definitely reach out to you. I hope you pass and I'll see you soon. Hey, this is Andrew
Brown from exam Pro. And we're looking at what is the az 900. So the Azure fundamentals
is the entry level cloud certification for Microsoft Azure. This certification is generally
referred to by its course code, which is the az 900. The az 900, is about knowing the Azure
core services, the fundamentals of cloud computing and having a bit of hands on experience working
with the Azure portal.

And if you look in the top right corner, that is what the certification
badge looks like once you earn it for the Azure fundamentals. And then just talking
about certifications in general for Azure. If you want to have a roadmap as to what you
do after this certification, as your breaks up their certifications, the role based certifications
as fundamental associate expert and specialty. So in the fundamentals, we have the az 900.
For the associate, we have the administrator, the developer, the AI engineer, the data scientists,
the data engineer, if you notice, for data engineer, you're gonna see there's two course
codes under it dp 200, dp 201, because some, some certifications require you to pass two
different exams.

So if you want to become a data engineer, you have to pass those two
exams, that the expert level or sorry, we sell the security in associate with the expert
level, we have the solution architect expert, where you have two exams, you have to pass.
Then there's the DevOps engineer, expert. And then for specialties, we have Azure for
SAP workloads, and IoT developer. So these are all the Azure certifications that are
role based, Azure or Microsoft used to have everything that was very service or technology
specific.

But things have changed to roles, which makes things a lot easier for people
that are hiring, because people that are hiring will look and say, Oh, you have the data engineer
certification, you must know how to do data engineering. So that is really simplifying
things. You can take any of these in any order that you like. So if you want to go to the
expert level right away, you absolutely can. But it's not generally recommended. It's you
should start with fundamentals associate go to expert, but you know, whatever you think
is best for you. That's what you have to decide. So here's the az 900, for what's commonly
obtained by sales and management to help inform VPS or CEOs reasons for their company to utilize
Microsoft Azure. And among developers, it's to show they have familiar knowledge with
cloud concepts. So anyone that's like, if you've had a program background, but just
don't have cloud experience, it's just a great way to tack on the cloud skill there at az
900 focuses on building security and business centric concepts, which makes sense because
if it's designed for sales and management, it's going to be things that are going to
help them convince to adopt it such as, like using the TCL calculator, and, and informing
decisions like that, like knowing SLA s and things like that to drive business decisions.
So what value does the az 900 hold? Well, if you're developer, it's not going to be
that useful on your resume, people aren't going to be trying to hire you just because
you have it, you really gonna have to move on to the associate or expert track.

But that
doesn't mean you shouldn't get this one. If you are a developer, and you already have
cloud knowledge, and another cloud provider, say you have AWS skills, you already have
an associate level. And you just want to show that you can work cross cloud grabbing this
certification just shows that Oh, yeah, okay, I poked around the Azure portal. So you'll
have that transferable knowledge. So that would be a good case to get it as a developer.
Or if you don't have any cloud certifications, and you want to make Azure the cloud provider
you want to use then that makes sense to go get. The main reason I tell people always
get a fundamental certification is because it helps them build confidence before you
take a harder certification. It also gets you familiar with the exam experience, whether
you do it in person or online, because that can be extremely stressful. Okay, so now you're
convinced that you want to go get the az 900. So you're going to be asking me, well, how
much time do I have to put in to gain the certification? Well, if you're developer,
say, you know, a junior to mid developer, and you've been working in industry for a
few years, but you don't have cloud experience, I'm going to say that you're going to have
to spend about eight hours of study if you're a bootcamp grad.

So you don't really have
any real world industry experience. But you want to try to tack on cloud as early as possible
to help your resume and stand amongst the crowd. You're probably gonna be spending 15
hours of study if you are in sales or management, so you just do not have a technical background,
but you're trying to understand Why you should adopt Azure or cloud for your business, you're
looking at 20 hours of study. And the way I recommend it is you want to put one to three
hours a day for seven days. And I mean, every single day, you don't want to spread this
stuff out. Now, next question is where do you take this exam. And the way it works with
most cloud service providers as they are partnered with a, a, a company that is also partnered
with a bunch of test centers around the world, and the one that Azure is partnered with is
called Pearson VUE. But the great thing about Pearson VUE is that you can either go in person
to a test center, so you'd use their Pearson Pearson VUE website, and it would tell you
test centers nearby.

Or you can take it from the convenience of your own home. So if you
have a web camera, and you have a very sparse room so that you don't have a bunch of things
in the background, and they can trust that you're in a secure location, the lets you
take it from your home office. And that's what we call the proctored exam. And the reason
we call that a proctored exam is because a proctor is a supervisor or person who monitors
students during an examination.

So you have those, both options available to you, if I
had to choose one or the other, I would strongly recommend going in person because online,
things can just go wrong, and you don't want to have that problem. But you know, it just
depends on you. Okay. And the last thing is, what does it take to pass the exam. So there
are three components here.

The first is to watch the video lectures and memorize key
information. The second thing is to do hands on labs and follow along with your own Azure
account. And I will show you how to set up your own account in here. But when we get
to the sections, definitely you should do it, just don't watch it, because that's going
to make a huge difference to help you pass. And the last is to do paid online practice
exams that simulate the real exam, you can pass the exam without using paid practice
exams at the foundation level, which is this certification. It's much harder the associate
and expert level. So you're going to have to go get a paid solution, if you are going
to go get paid practice exams, please do me the favor and use hours because it supports
us able to produce this content. So don't go and use one of those other paid providers
that do not provide free content. Because for us, if we made enough money, we'd make
everything free. And that's the whole point. So there you go. So now let's take a look
at the exam guide and break down what it is that we're going to need to do to pass the
exam and how we're going to have to study.

So the first thing is the content outline.
And this is basically the general domains, we're going to have to focus our time on the
first being cloud concepts, this is worth 15 to 25% of the exam, then you have Azure
core services, this is worth 30 to 35% of the exam, then you have security, privacy,
compliance, and trust, this is 25 to 3% of the exam, and then you have pricing and support,
which is 20 to 25% of the exam, you'll notice that there are ranges here.

So the thing is,
is that it's not a guarantee that exactly 25% of the questions are going to be of that
sort. So just be aware of that. Then onto grading. In order to pass this exam, you have
to score 700 out of 1000. So generally you what you're trying to get is around 70% to
pass I say around because you could get exactly 700. And you could fail because Azure uses
a scaled scoring meaning that the raw score that you get doesn't necessarily reflect the
final score. So you're going to want to score a bit higher than 70%. So you want to aim
for 75% or higher. The type of questions you'll see on the exam, we'll talk about here in
a moment. But there are between 40 to 60 questions. So that means you have you have the chance
of getting 12 to 18 questions wrong. I put an asterisk here, because people who have
actually taken exam has reported only been presented with 30 questions.

And I even reached
out to Azure support to clarify that to say, what is the real number and their official
answer was 40 to 60. But I know that when people are taking the exam, they're there,
their experience is different. There's not much I can do about it. It's just that's what
it is. It's going to be a bit fluid in terms of what your experience is going to be. But
let's just go with this and say there's 40 to 60 questions. In terms of the format of
the questions, you're going to see multiple choice, you're going to see multiple answer,
you're going to see maybe drag and drop, and then you might see a hot area hot areas usually
just means like a couple drop downs where you have to answer two things at once. And
the duration of the exam is 60 minutes. So that means you get one minute per question
roughly around that time, but the exam time is 60 minutes, but the seat time is 90 minutes.
So see time refers to the amount of time that you should allocate for the actual exam so
that you have time that includes reviewing instructions before you start your exam reading
accepting the NDA completing the actual exam itself, which is the exam time 60 minutes
And then provide feedback at the end of the exam, which is generally optional.

And the
last thing is, how long is this certification going to be valid for, it's going to be valid
for 24 months. So that means you're going to be able to hold on this for two years before
you have to get recertified. So there you go. So now I just wanted to quickly show you
the exam guide, they don't call their exam guide, literally exam guide, it's the Microsoft
Azure fundamentals skills measured. And so this gives you pretty much the information
for the breakdowns in terms of what stuff you might need to learn. But that doesn't
mean necessarily everything that is listed in here is actually on the exam.

But let's
just quickly go through it. So you have an idea. So the first is the cloud concepts domain.
And in here, we need to know, cloud terms such as availability, scalability, elasticity,
fault tolerance, disaster recovery, agility, haven't seen that on the exam before, but
they haven't listed there, then we have to describe the economics of scale capex versus
OPEX consumption based models, then you have to describe the different types of cloud cloud
models such as infrastructure as a service platform as a service Software as a Service,
then we have to describe public private and hybrid cloud models.

So there's that there,
then you have to know a bunch of different core services for Azure. So these ones I would
call them global infrastructure, they mostly have to do with networking, then you have
all your core services here. And then more core services or extended services, I suppose
then management tools, then you have your security, privacy, compliance and trust. So
more networking components around security, but these don't really show up in the exam
that much, but I've covered them anyway, just in case than Azure identities. So that's creating
accounts giving access to people, the big one there is really Azure Active Directory,
that other security tools. So this is just knowing about things like the Security Center,
which is a security tool, or just security services. within Azure, then we have governance.
So this is going to be like policies, role based access, just general access that has
to do but kind of with Azure identities up here.

Then monitoring tools, then we have
compliance data protection standards, this is generally just pointing to websites under
the Trust Center is just a website that lists compliance information that we have described
pricing SLA is lifecycle. So understanding the subscriptions, so you know, free versus
student versus enterprise, then here are just a bunch of pricing. So like they have a pricing
calculator and a TCL calculator and understanding the support plans, and then understand the
SLA s and then there's lifecycle stuff like understanding general availability. So yeah,
there you go. That's the that's exam guide outline. I mean, it has stuff down here below
about changes, that doesn't really matter. But yeah, that is the exam guide outline.
If you want more information about the actual, like the actual exam policies, this page is
really good for that I got this from the Azure support team.

So it says exam policies and
FAQs. So this would be about like retiring and certifications, or like how to book your
exam or they would have information here about retake. So what happens if you paid for it?
And like you missed it? Or how many retakes Did you get or how long the exam hours are?
So there's a lot of information here. So if you just want to scroll through it, but yeah,
here, like, they don't say on the exam that it's 60 minutes, they just say, oh, for general,
fundamental exams are 60 minutes.

So we just have to assume that is what that's the time
you get on the az 900. But yeah, just check out that page. And check this out if it interests
you. But you don't really have to, because we cover everything in the course that you
need to know. But I just wanted those resources. I wanted to make you aware of those resources,
just in case. Hey, this is Andrew Brown from exam Pro. And we're starting at the beginning
of our journey asking the most fundamental question, which is what is cloud computing.
So looking into the dictionary, cloud computing is described as the practice of using a network
of remote servers hosted on the internet to store manage and process data rather than
a local server or personal computer.

So when we're talking about local, we describe this
as being on premise. So being your own office or your own data center. And so this is where
you own the servers, you hire the IT people, you pay the rent or the real estate, you take
all the risk. Whereas with a cloud provider, if you're utilizing them, it's someone else
who owns the servers, someone else who hires the IT people someone else who pays or rents
the real estate, and you are only left with being responsible for configuring your cloud
services and code, and someone else takes care of the rest.

Sounds great, doesn't it?
So now what I want to do is just give you a quick overview of how servers have evolved,
and what we describe as cloud computing from a technical perspective, and we'll probably
dive deeper into this later in the course. But we're just going to get a good overview
here to understand from a business perspective. So way back in the day, what we had was dedicated
servers, if you wanted a server to run your web app or your technology, what you had to
do is you had to go buy a single, dedicated physical machine. And that was for one specific
business, and dedicated servers are still used today. But there's some downsides with
them. They're very expensive. They're high maintenance, however, you do get a great level
of customer customization and you and you potentially can have better, better security,
based on your use case, then came along was a virtual private servers. So we still had
one physical machine, but we it was still dedicated to a single business, but we figured
out how to take that physical machine and virtualize it into sub machines.

So now we
could fully utilize or better utilize that physical server with running multiple apps,
we didn't have to buy four different servers for for four different apps, we could easily
run for what a web apps into four virtual sub machines, then we had shared hosting.
And so this made it a lot easier for anybody who's building websites or WordPress is, but
the idea here is he had one physical machine, and it was shared by hundreds of businesses.
So it wasn't a single business, sharing the class, it was multiple businesses. So this
relies on most tenants under utilizing the resources, though. So if you had 100 people
on a server, and one person use more of the server than the others, then you could all
potentially suffer from that case, but at the very least, you are getting very, very
cheap servers. But there are definitely some limitations. So now coming down to cloud hosting,
Cloud Hosting gives us the best of both worlds. So we have multiple physical machines that
act as one system, which it could be described as the cloud.

And that system is abstracted
away into multiple cloud services. So you get the you get flexibility, scalability,
it's very secure. It's very cost effective. And it's highly configurable. So that is where
we're at. And so that is generally what cloud computing, Cloud Hosting is. Hey, this is
Andrew Brown from exam Pro. And we are looking at common cloud services. So a cloud provider
can have hundreds of cloud services are grouped into various types of services. And the four
most common types of cloud services for infrastructure is a service. And we'll talk about what that
is later on, would be compute. So this is where you have a virtual computer that can
run applications, programs and cold code, then you have storage. So this is where you
would have virtual hard drives that you could store files, then you'd have virtual networking,
because you have these computers and stored. So you need to put them in some kind of virtual
network. And then you have databases.

So just imagine a database that is running in the
cloud. Or if you're not familiar databases, just imagine that it's excel in the cloud,
but it powers your web apps. And one thing I want you to know about the term cloud computing
is that even though it says computing in the word, at this point, we just use it as a catch
all term. So it could refer to all of these categories.

So when I say cloud computing,
I could be referring to compute network storage and databases. But you can also say cloud
storage, cloud Compute Cloud databases, cloud networking, and people will know what you
mean. Hey, this is Andrew Brown from exam Pro, and we are looking at what is Microsoft.
So you've probably seen this logo before. And Microsoft is an American multinational
Computer Technology Corporation, headquartered in Redmond, Washington. And Microsoft makes
software phones, tablets, game consoles, cloud services, which is what we care about here
today. And they even have a search engine. And we're not just limited to that list. They
have tons of stuff. But Microsoft is best known for their operating operating system
called Windows. And they've been around since the 1970s. So they've been around for quite
a while in the tech sphere. So now that leads us to the question is what is Azure? So Azure
is what Microsoft calls their cloud provider service. And so it's called Microsoft Azure,
or we commonly refer to it as just Azure. And so here is the logo for it.

If you're
wondering, what is the name behind the service, it means bright blue color of the cloudless
sky. So sure, that's great. And so you'll hear me say cloud service provider frequently
it was throughout this course and it is abbreviated to CSP, but that's what Azure is. It is a
cloud service provider. So there you go. Hey, this is Andrew Brown from exam pro and we
are looking at the benefits Cloud computing. So what are the benefits? Well, we have a
big list here for you starting with cost effectiveness. So you pay for what you consume, there is
no upfront costs, you pay as you go, also abbreviated as P A YG. And you're sharing
the cost with 1000s of customers. So that's how you're getting that. That Low, low cost.
Another benefit is that you can go global, so launch workloads anywhere in the world,
just choose your region, and you are now in the global market.

Another benefit is that
the cloud is secure as a cloud providers take care of the physical security. And cloud services
can be secured by default, or you have the ability to configure access down to the granular
level. So you have a lot of security controls that you would have that you you would normally
not have, or you'd have to build out on pram. Now, the cloud is also known for being reliable.
So you can have data backups, disaster recovery, and data replication and fault tolerance.
The cloud is also scalable, you can increase or decrease your resources and services based
on the demand. The cloud is also elastic. So you can automate scaling during spikes.
And, and a drop the demand when there is no longer the demand for that stuff. And it's
also current, so the underlying hardware and manner software is patch upgraded and replaced
by the cloud provider without interruption to you.

And I mean, the last one, there is
cases of interruption, but generally, fewer interruptions than you would have on prem.
So there you go. Hey, this is Andrew Brown from exam Pro. And we are looking at the different
types of cloud computing. And we have this nice pyramid on left hand side to help us
understand how each type builds off the other. Starting at the top of our pyramid, we have
Software as a Service, also known as SAS. And this is a product that is run and managed
by the service provider, you don't worry about how the service is maintained. And it just
works and remains available. So you might not be aware of this, but you probably already
are using a SaaS product. So examples of that could be Salesforce, or Gmail, or office 365.
So those are the those are things that would be considered SaaS, and these are really for
customers. So it's just you wanting to use software, like general software on your computer,
but in the cloud.

The next category we have is Platform as a Service, abbreviated as past.
And so here we focus on development and management of your app applications. And so you don't
worry about provisioning, configuring or understanding the hardware or less. And this is really for
people that are building apps, but they don't, but they don't think about any of the infrastructure
underneath services like this would be Elastic Beanstalk on AWS Heroku, which is very popular
amongst junior developers, which is a third party service for launching web apps.

And
then you have the Google App Engine. So those are three examples there. And these are really
for developers. So platform service makes it easy for developers to build apps on the
cloud without worrying about all the stuff underneath. At the bottom, we have Infrastructure
as a Service IaaS. And this is the basic building blocks of cloud it. So provide access to networking
features, computers, and data storage space, don't worry about the ABOUT IT staff, data
centers, and hardware. And this is the true focus of our course here is focusing on this
layer. But the thing is, again, on this pyramid is that I do emphasize your service can have
platform as a service and software service on top of it. And so examples of infrastructure
service would be a Microsoft, Azure, AWS, or even Oracle Cloud. And so this is really
intended for administrators. So that is the three types of cloud computing. And there
you go, Hey, this is Andrew Brown from exam Pro. And we're looking at the types of cloud
computing responsibilities. So we saw the three categories there. But we don't really
understand what it is that we're responsible for what is the cloud service provider responsible
for? So let's lay out our categories.

And we're going to include on premise into this
because technically, on premise could be a private cloud and should be in the category
here. So we have on premise infrastructure as a service platform as a service and software
as a service. So when we're looking at applications, it's going to be the customer's responsibility
for on prem infrastructure pass. But when we have Software as a Service, the cloud service
provider is responsible for that, when looking at the data level is going to be the same
for software as a service, the cloud service provider is going to be responsible, but for
the rest, it's going to be the customer.

And then on the next level for the runtime. It's
going to be responsible on the cloud service drivers for the platform as a service and
software as a service. For middleware, it's going to be the same for the O s, like the
operating system that is running on the servers, it's going to be the same, then we get to
virtualization. Now it's the virtualization is responsible with the cloud service provider
and above and then from Storage, its or sorry, servers, it's the same as for storage, it's
the same and for networking, it's the same. So you can see that on premise, you're responsible
for everything. And the farther we move up the types of cloud computing, the less responsibility
you have, hey, this is Andrew Brown from exam Pro. And we were looking at Azure as deployment
models.

And the first model we're going to talk about is public cloud. And that's where
everything is built on the cloud service provider, you're not using anything on prem, or in your
own data centers, everything is running within Azure. And generally, this is known as cloud
native. But for some reason, Azure calls that public clouds. So that's what we're going
to use in the terminology here. And so here, I have an architectural diagram, where we
have a network on Azure. And within that network, we have a virtual machine running and a database
running. So that would be an example of public cloud, then we have private cloud. And this
is where everything is built on the company's data centers, also known as on premise, because
it's within the premises of the organization, like their physical location.

And it could
an organization organization could technically be operating their own cloud, but it'd be
private cloud, and it could be running some open source cloud software that mimics what
Azure would do, such as OpenStack. So it looks very similar. But you just put an OpenStack
in there. And it's running a virtual machine or a server, and it's also running a database.
And the last on our list here is hybrid.

So with hybrid, you're using both on premise
and the cloud service provider, and they're connected together. And so there's a lot of
different networking services that you can use that will facilitate the connection between
the two. In this case, we're using Express Route Express rose is a dedicated connection,
it's like having a fiber optic line running from your on premise data center to the Azure
network. So just one of the ways you can connect. And if we wanted to understand like the pros
and cons, I have this nice little table here, we'll just quickly go through it. So if you're
using public cloud, it's more cost effective security. It's, it's great controls are stronger
by default. But some people might not find the cloud will meet all their security requirements
because of government and regulatory, regulatory reasons, not because the cloud is not secure.
But it's just those those policies for level of configuration, it's going to be limited
based on what the cloud service provider exposes to you.

So there's a lot of configuration
there. It's just that if you're if you have your own servers, you obviously can do anything
and everything with them. For technical knowledge, you don't need to have as much in depth knowledge
of the underlying infrastructure, because you're not physically setting up servers,
or that networking, everything else. Now, coming down to private cloud, private cloud
is the most expensive option on our list. So you're going to be paying a lot of money
there. For security, there is no guarantee that is 100% secure, because you just don't
have the same kind of visibility that you would have with a cloud service provider.
With all those dashboards, it's just so hard to build out all that software, but you could
meet your security compliance requirements, depending on your situation. But this is becoming
less and less as more governments and larger organizations move over to the cloud, you
can configure infrastructure, exactly how you'd like because you literally have bought
the hardware and do anything you want with it. And the technical knowledge, you'll have
to have a serious amount of technical knowledge, you might even have a really hard time finding
the resources to to maintain all that stuff.

Then down below, we have the hybrid model.
So this could be more cost effective based on what you offload to the cloud and also
the cost of actually moving data back and forth. For security, you know, you have more
to secure. But technically, some things are easier to secure on the cloud than it is in
private. So maybe you have a boost and security, you're going to get the best of both worlds
in terms of configuration. And for technical knowledge, you're going to need to know both
the cloud and and like how to set things up on premise.

So that's the most work there.
And just one more deployment model here. I just wanted to talk about cross cloud. This
isn't something that is listed on the actual exam, but it's something that you should understand
and know. And so cross cloud is when you're using multiple cloud providers, sometimes
we will refer this as multi cloud or hybrid cloud. And so I just have an example here.
So there's a service called Azure arc. And what Azure arc does is it extends your control
plane. So you can run a containers, Kubernetes containers on different platforms.

And so
you could have AWS on the left hand side with Eks and GCP Kubernetes engine and so you could
be running virtual machines, and they're all treated like they're on the same network.
So cross cloud is becoming very popular with extremely large organizations where they they
have a very unique requirements, but I definitely want you to know what that is, because it
just gets left out. And it's definitely something that is part of the industry. So there you
go. Hey, this is Andrew Brown from exam Pro. And we're looking at the concept of total
cost of ownership to CEO. So what is the difference between on premise so having your own data
centers, and then using Azure, and you'll notice above it, it says capex and OPEX, we're
going to talk about that in the next slide.

But for the time, or for the time being, we're
gonna focus on the total cost of ownership. So to really make sense of this, I always
use this graphic here. And if you're wondering what that is, those are icebergs, people sometimes
think they look like teeth. And so just to make this drawing a little bit more clear,
I've added some penguins and a whale, so there's no mistaking it. And the reason we're using
this as a representation is because we have the top of the iceberg, which are the costs
that we're generally concerned about. But then we have those hidden costs, those costs
that we're not really thinking about that is underneath the water. And if you know icebergs,
they can be really big underneath, you don't know.

So on the left hand side, the cost that
we generally think of is the software license fees. And then for the cloud service provider,
we look at the subscription fees. And so when you're comparing these two, sometimes the
subscription fees can cost more than the software license fee. So you think, well, we should
really just use on pram because it's more cost effective. But when we take in the total
cost of ownership, all the costs involved, we're gonna see a very different picture.
On the left hand side, if you are on premise, you have to deal with the implementation,
the configuration and the training, but you also have to deal with the physical security
of your building, you have to pay for the hardware, you have to pay for the IT personnel,
you have to deal with maintenance.

Now on the right hand side on the cloud, you still
have to do implementation, and configuration and training. But that's about it. So there's
a big difference in terms of what you have to do. And you might ask, okay, well, what
is the amount of savings? Well, generally, people find that when they move from on prem
to the cloud, they save 75%. That's a lot of money, okay, 75% of what you generally
would spend. And so now all this stuff on the left hand side is now Azure is responsibility,
you don't take care of those anymore, Azure is going to take care of it for you.

So that's
total cost of ownership. Hey, this is Andrew Brown from exam Pro, and we're looking at
Capital versus operational expenditure. So on the left hand side, we have capex, so capital
expenditures. On the right hand side, we have operational expenditures OPEX. And so looking
on the left hand side, capital expenditure is spending money upfront on physical infrastructure,
so deducting the expenses from your tax bill over time, a lot of companies larger companies
are used to dealing with capital expenses. And they know how to work their tax bill.
And so that's why a lot of people are afraid to move on to the cloud, because they're used
to this, this this way of operating.

But let's talk about some of the things that would be
considered a capital expense. So again, it's anything that's physical, and then you're
buying it with money upfront. So computers, so that would be your server costs, if you
were to buy hard drives of your storage costs, if you bought routers, cables and switches
for your network, if you're purchasing things for backup and archive costs, if you had disaster
recovery.

So like an uninterruptible, power supply would be an example that you have your
data center cost. So that's your rent, cooling, physical security, your technical personnel,
so you're hiring people to do things for you. And so with capital expenses, you have to
guess upfront what you plan to spend. Now let's look at operational expenditure. So
operational expenditure is the costs associated when an on premises Center has shifted that
cost to the service provider. So here, in this case, it's the cloud service provider,
and the customer only has to be concerned with non physical costs.

So what's examples
of OPEX costs well, leasing software and customizing features, training employees in cloud services,
paying for cloud support, billing based on the cloud metrics, so compute usage, and storage
usage. And the advantage here is with operational expenses, you can try a product or service
without investing equipment. So we have flexibility of investment. And we also from the previous
slide, we saw that we have a huge reduction cost. So there's two reasons, really good
reasons to use the cloud. Hey, this is Andrew Brown from exam Pro. And we are looking at
cloud architecture terminologies and these are very important to help you conceptualize
the advantages of the cloud. And so we're going to go through these terms and then we're
going to go through them again in more detail in further slides. So at the top of our list,
we have availability and this is your ability to ensure a service remains available.

And
this this is generally known as high height being highly available or high availability
abbreviated to h a, that's a term you should know. Then we have scalability so your ability
to grow rapidly or unimpeded. Then you have a lasticity. So this is your ability to shrink
and grow to meet the demand. You have full tolerance. This is your ability to prevent
a failure, then you have disaster recovery. This is your ability to to recover, recover
from a failure. And this is known generally as high being highly durable or high durability.
D are. So there you go, Hey, this is Andrew Brown from exam Pro. And we are looking at
the concept of high availability. So this is your ability for your service to remain
available by ensuring there is no single point of failure, or ensure a certain level of performance.
So here I have a technical architectural diagram that is describing high availability.

So,
the idea behind this is that if you have a server, which runs your web application, if
you were to run redundant versions of your server, if anything happened to a single server,
traffic could always be routed to those other servers. And that way, your service would
remain available. Now, having multiple servers is great. But even what's better is having
multiple servers in multiple data centers because something could happen to a data center,
it could become unavailable because of a networking issue. So by being able to route traffic,
or that way, you're going to remain highly available. And and running a workload across
multiple availability zones and availability zones is what Azure calls their data centers
ensures that if one or two data center becomes unavailable, your service will remain available,
very, very common to run at least three servers across three data centers.

Now, how would
you distribute the traffic or manage the traffic to all three, and that's where an Azure load
balancer comes into play that green triangle with the arrows that is the representation
of a load balancer. So load balancer allows you to evenly distribute traffic to multiple
servers in one or more data center. And if a data center or server becomes unavailable,
so unhealthy, the load balancer will route the traffic to only available data centers,
with servers. So there you go, that is high availability. Hey, this is Andrew Brown from
exam Pro. And we're looking at the concept of high scalability. And this is your ability
to increase your capacity based on the increasing demand of traffic memory and computing power.
If you are a growing company, you're going to have to scale up, you're gonna have to
get bigger and better servers. But the there are different types of scaling. And the first
type is vertical scaling. This is the most obvious one people are gonna think of, and
it's called scaling up. And what we do is we just upgrade to bigger servers, we need
bigger hard drives, faster computers, that's vertical scaling.

But there's another kind
of scaling called horizontal scaling and horizontal scaling is is described as scaling out. And
what you're doing is you're just adding additional servers, because we saw with the high availability,
we have a load balancer, we can distribute traffic to multiple servers, and three servers
can equal the same thing as one big server. So horizontal scaling is when we add more
servers of the same size. Hey, this is Andrew Brown from exam Pro. And we're looking at
the concept of high elasticity. And this is your ability to automatically increase or
decrease your capacity based on the current demand of traffic memory and computing power.
So this sounds a lot like high scalability, but the key difference is that it's automatic.
And you can decrease the demand, not just increase it.

And so the way we would do that
is that we would have a virtual server, virtual machine or server, and if we needed more servers,
we would add more servers. And if we need less servers, we'd remove less servers. And
so this is going to be accomplished using horizontal scaling. So when we say we're scaling
out, this means we're adding more servers of the same size, when we're scaling in this
means we're removing more servers of the same size.

And generally, you're not going to use
vertical scaling for high elasticity, it's just extremely difficult to, to vertically
scale. Because if you have if you have to increase, let's say, your storage drive, and
then you decrease it, you could lose data. So it's not a good idea, or even feasible
to do vertical scaling with high elasticity. Now, how would you accomplish being an elastic
on Azure, while you use Azure as VM scale set, so scale sets automatically increase
or decrease in the response to demand or based on a defined schedule, and we'll talk about
those in greater detail later in this course. And then we have SQL Server, or server stretch
database, these dynamically stretch warm and cold transactional data from Microsoft SQL
Server 2016 to Microsoft Azure, not something we're going to cover, but it's generally the
same concept that skill sets do.

So there you go, that's high elasticity. Hey, this
is Andrew Brown from exam Pro. And we're looking at the concept of high durability. So this
is your ability to recover from a disaster and to prevent the loss of data. So this could
be solutions that recover from a disaster is known as disaster recovery d r, and so
I'm just going to ask you a bunch of questions to help you think about how to be highly durable.
So one question would be like, do you have a backup? So do you have a backup in place?
How fast can you restore your backup? Does your backup still work? How do you ensure
current live data is not corrupt. So that is the concept of high durability, there's
a variety of services to implement it. So it's not just a single service. But there
you go, that is the full list of cloud architecture, terminologies. Hey, this is Andrew Brown from
exam Pro, and we are looking at the evolution of computing.

And this is going to really
help you to understand the different layers of compute. And so we're going to start from
on the left hand side to dedicated and work our way all the way to functions. So what
I want you to know is that when we're talking about dedicated This is a physical server,
wholly utilized by a single customer. And so the idea is that this customer has purchased
this dedicated piece of hardware. But the thing with this is that you have to guess
your capacity. So when you buy it, it's like a capital cost or you're purchasing for for
like the whole, like, you have to plan how you're going to fully utilize it. So you're
gonna overpay, and you're gonna have underutilized servers. And the reason why is that when you
first launch your app, it might be small, and then you're expected to grow into that
space, but you're just not using that space until you grow into it. So it's considered
wasted. If you want to upgrade beyond your capacity, this is going to be slow and expensive,
you literally would have to buy a new server that's larger, and then move everything over,
you're going to be limited by your operating system.

So whatever operating system is installed,
that's what you're going to have, you're going to have multiple apps, if you do install multiple
apps onto a dedicated server, you might have conflicts in resource sharing. But generally,
it's recommended to only have a single primary application on a dedicated server, you are
going to have a guarantee of security, privacy and full utility of the underlying resources.
Because that is what that's the whole purpose of having a dedicated server is sometimes
dedicated servers where you have full control of everything is called bare metal. And that's
basically mimics what it was like to have a server on premise or back in the day, and
they still exist.

So that is dedicated, we'll move on to VMs. So now we're moving on to
virtual machines, also known as VMs. And so the idea here is that if you had a physical
server, and you had the capability of running virtual machines, that's like running a machine
within a machine. And so now you're able to run multiple applications on a single machine.
The technology that's used to actually run VMs is known as hypervisor there, sir, there
are some other kinds of the ones we need to know is hypervisor, so just know that that's
the software that makes virtual machines work, you are now sharing the physical server with
multiple customers, that is generally a good thing, because you are paying a fraction of
the server costs, you have to buy that server outright, you are still gonna be overpaying
for under underutilized. The under utilization of virtual machine, because it solves that
issue of wasted space, because you have to choose a particular size of virtual machine,
it's not going to be perfectly fit for your application, you are going to be limited by
your guest operating system.

So whatever OS that you've chosen, that's what you get. So
that's, that's what you have there. If you want to run multiple apps on a single virtual
machine, they can still result in conflict, resource sharing, but now customers that are
isolated from you aren't going to conflict with you. So you can run, you could run, if
you had three apps, you could run them as three virtual machines. So you're not have
that issue. But if they're on the same VM, you still have that issue. So there you go,
that is virtual machines. And we'll move on to containers. Hey, this is Andrew Brown from
exam Pro. And we are looking at the concept of containers. And so this takes it a step
further, where we have virtual machines, and we're running multiple containers. So we're
even, we're further subdividing the way that we run our applications. And the technology
that is used to run containers within a VM or on a physical server is called Docker,
Docker daemon.

If you're using Docker for cleaner education, that's the most common
one. But that's going to let you run multiple containers, and you can maximize the utility
of the available capacity. So this is extremely more cost effective, right? So that available
space is is always there for you to launch more servers within or you can or you can
expand the usage for your app to take up that available space, your containers share the
same underlying OS. So the containers are more efficient than multiple VMs. But the
great thing is, is that you can have different OSS. So the idea is that each container can
technically be running a different OS. And so now you have a lot more flexibility. It
doesn't seem like you could improve upon this further, but we will we move over to function.
So now we're going to take a look at the evolution of computing for functions and I bet you didn't
believe it. But we subdivided even further. And so we've taken our applications that were
running containers, and we broke up the apps into little pieces of code called functions.
And now we even have a more or better utility of our compute.

So we have a Managed VM running
manage containers. So we don't have to worry about the containers or configure them themselves,
functions are usually taken care of this is known as serverless compute, because you don't
set up anything, you just put your code online. And it just works, you might choose the memory
and the duration that you need to utilize. And that's all you pay for. You're only responsible
for your code, and data and nothing else. And it's extremely, extremely cost effective,
right? Because you're just paying for that individual function to run and all that underutilized
spaces is the problem of the cloud service provider, it's not your issue.

The only downside
is that there is a concept called cold starts meaning that when you launch a function, or
serverless, or a serverless code, it generally has to provision a server, because the the,
the cloud service provider doesn't want to be running servers, when they don't, they
don't, they aren't being utilized. So you might experience a cold start where you're
waiting for a server to start before your code will execute. There's definitely ways
around that. So there you go, that is the evolution of compute. Hey, this is Andrew
Brown from exam Pro. And we are looking at regions and geographies for Azure. So a region
is a grouping of multiple data centers. And for Azure, they call their data centers, availability
zones, as your has 58 regions available across 140 countries.

One thing Azure likes to promote
is that they have the most regions out of all cloud service providers, then we have
something what we call a geography. So geography is a discrete market of two or more regions
that preserve data residency and compliance boundaries and the geographies that are available
for Azure. We have the United States, then there's Azure Government, us, this is a geography
that's only for the US government.

So regular citizens cannot use it, then you have Canada,
that's where I'm from Brazil, and Mexico. And I just want to emphasize that data residency
and compliance boundaries for geography, and I just want to give you an example. So imagine,
you live in Canada, and you and you work for Canadian company, you want to guarantee that
the data will remain within Canada, for whatever government regular regulatory reasons. So
then you'd want to use the Canada as your geography because that data would never leave
Canadian soil. So that's the case there. And I just want to give you kind of a visual example.
So on the left hand side, we have two regions, we have US East one.

And we have the Europe,
Norway, East region. And in those regions, I'm not showing it here, because I don't want
to make it too complicated. But there would be availability zones, and we could launch
resources. So we have some servers, virtual machines, those are the images you see within
the regions. And generally, the way regions work in Azure is that when you go to launch
a resource, you choose the region at that time of creation. So if you're launching virtual
machine, it's going to give you an option to choose a region and you just choose from
that list.

So yeah, there you go. So I just made my way over to Azure. So I just typed
in Azure global infrastructure, because I just wanted to show you the big map of all
the regions. And where Azure is available all throughout the world. Because sometimes
it's nice to look here. So we can see we have stuff down in Australia, we have regions in
Africa, we have a region in South America, we have a lot in North America, we have a
lot in Western Europe.

And then we have some in Asia here. So we have Japan, China, all
over the place. So you know, if you want to look a little bit more into that, there's
a lot of good information here on the global infrastructure pages. But that's about it.
I just wanted to show you that world map. So now we're looking at paired regions. So
each region is paired with a another region 300 miles away. And the reason why Azure does
this is so that if one region is being updated, then the other one is still available, meaning
that if you're running if you're planning to make sure that you never have downtime,
you can put your resources in that paired region, and you're gonna have higher availability.
So some Azure services rely on paired regions for disaster recovery.

So when you turn those
services on, they're automatically going to launch in that paired region. One service,
which would help you leverage your paired region would be a service called Azure wall.
It's a feature of storage but it's called Azure geo redundant storage so replicate your
data to a secondary region automatically, ensuring that the data is durable enough In
the event of the primary region, is it recoverable. And just to give you an example of a paired
region, so let's say we're talking about Canada, so with Canada, you'd have Canada Central,
and then it's paired region is Canada, east, for North America. And when we say North America,
we're really talking about the United States. Its East us region paired with the West us
region.

And then for Germany, you have Germany Central, and German, Germany, north east.
So it gives you an idea how far away they are 300 miles, that's quite a distance. But
there you go. Hey, this is Andrew Brown from exam Pro. And we are looking at region types
and service availability for Azure. And what I want you to know about a service availability
regarding regions is that not all cloud services are available in every single region. And
there's infrastructure reasons as to why and there's compliance reasons as to why. So Azure
has two types of regions, they have recommended regions. These are regions that provide the
broadest range of service capabilities. What that means is that the majority of services
are going to be available in this region. And this recommended region is designed to
support availability zones, then you have alternate regions. And these are regions that
extends Azure footprint within a data residency boundary, where a recommended region also
exists.

But they're not designed to support availability zones. That doesn't mean you
can't launch resources within them. It just means that when you go to launch a resource,
you're not going to choose an availability zone. And these regions are labeled as other
when you're in the Azure portal. Now let's talk about general availability. So general
availability, abbreviated to ga is when a service is considered ready to be used publicly
by everyone. So if you have a service or product, and it was in beta, and now you're ready to
sell to people, that means that it's GA. But it's, but just because it's where you sell
it, there's also the conversation around whether it's actually available to us. And that's
going to be determined based on the category that the Azure cloud services in. And so Azure
categorizes three different types of availability for services. And the first one is foundational.
So a cloud service that is foundational is going to be available immediately in a recommended
and alternate regions, when it goes ga or at least in fifth 12 months of the time that
it was announced, then you have mainstream.

So these are cloud services that will become
immediately available in a recommender region or in 12 months when it goes GA. But for the
alternate region, it may become available based on the customer demand. And then the
last one is specialized. So Cloud services are in this category will become available
in recommended or alternate regions based on customer demand. So hopefully that clears
up service availability and region types. Hey, this is Andrew Brown from exam Pro. And
we are looking at special regions for Azure. So Azure has specialized regions to meet compliance
or legal reasons because they might not want they might want to work with specific governments
have. And to meet those requirements. They basically give them their own region. And
so the first on our list is the us and we have three regions that we know about.

So
we have the US Department of Defense Central, the US government, Virginia region, the US
government of Iowa region, and then we have an additional three that we just don't know
about it, because they're in secret locations. So maybe they're for area 51, we don't know.
And so the reason why they have these special regions is that if you just want to do business
with the government, they need these kind of regulations. Then on the other side, we
have China and so they have a region in China east and China north.

And these regions are
available through a unique partnership between Microsoft and 21 via net. And so Microsoft
does not directly maintain these data centers, but they worked with 21 v net to give you
accessibility to these regions. And probably to operate these regions, you'd probably be
assistant of these countries. And you'd also be an employee of the government. So it's
not going to be for citizens to use. But there you go. Hey, this is Andrew Brown from exam
Pro. And we are looking at availability zones for Azure. And so availability zones, abbreviated
to short for AZ and you'll hear me using that revision a lot in this course.

And you should
learn to remember that as well, is a physical location made up of one or more data center.
And so a data center is a secured building that contains hundreds of 1000s of computers
if you want a little visual, here is the inside of a data center. And there's a technician
working on a rack of servers and there's a dog in the data center. You should definitely
never have a dog in your data center. You'll probably hear me refer to available availability
zones as a data center because it's the easiest way to think of it but It actually can be
more than one data center.

Now, a region will generally contain three availability zones,
I say generally here because there are cases where there are less than three. But there's
actually very specific reasons as to having exactly three availability zones, data centers
within a region will be isolated from each other. So there'll be in different buildings,
but they will be close enough to provide low latency. And that low latency would probably
be in the sub milliseconds. I don't know what it is for Azure. But that's generally how
it'd be designed. Because you want it to feel like you're, it's on the same network. It's
common practice to run workloads in at least three azs. And that's why I was saying that
earlier, that's important to ensure services remain available. In the case, one or two
data centers fail fail.

And this is called high availability. And we'll definitely cover
this concept again, in this course, just to give you a bit of a visual, on the left hand
side, what we have is a region called US East one. And we have multiple availability zones.
Azure just labeled them one, two, and three. And so when you go to launch a resource, if
you look on the right hand side, you choose your region. So we are choosing us, East us,
then we were saying we're going to use availability zone, and then we choose which one we want
to launch it into.

So if we, if we choose to, it's going to go into availability zone
two, that doesn't mean we're gonna launch two instances, it just means availability
zone two. So there you go. Hey, this is Andrew Brown from exam Pro. And we're looking at
AZ supported regions for Azure. And so not every region has support for availability
zones, and we touched on this in the region section, but we'll touch on it here again.
So we know that there are regions called alternate or others and these do not have availability
zones whatsoever, then you have recommended regions, and these are supposed to have three
azs.

The reason why they might not have them is because it's a newer region. And Azure
is promising to add more regions within 12 months or whatever time period that they say.
But generally, what you want to do is when you have cloud resources, you want to launch
them where they have at least three AZ so which regions actually have three Z's. And
that is central us, East us, West us to West Europe, France, Central, north, Northern Europe,
Southeast Asia. So that is where you generally want to run your workloads. Now, what does
it look like when you tried to go launch a resource, and they and you choose a region
that doesn't have an availability zone? What's that gonna look like what's gonna look like
this, so you're going to availability zones going to be blanked out. And you'll have to
choose no infrastructure redundancy required.

And so that would be an example for Brazil,
South where it's just there are there is a single az, but it's described as not having
AZ so you just don't choose it in the interface. So there you go. Hey, this is Andrew Brown
from exam Pro. And we were looking at fault and update domains. So an availability zone
in an Azure region is a combination of a fault domain and an update domain. So a fault domain
is a logical grouping of hardware to avoid a single point of failure within an AZ.

So
basically, it's a group of virtual machines that share a common power source and network
switch. The reason why as your does is, is that so if part of the data center fails,
then other servers will be taken down with its let's say, there's a fire within the data
center and one particular region, it won't affect other hardware that is running, then
you have update domains. And so update domains is when Azure needs to apply updates to the
underlying hardware and software. But the thing is, is that because Azure is updating
them, it takes these machines offline. So the idea is that if you run your workloads
in another, like another domain, in the update domain, neither domain will be updated the
exact same time. And that way, you won't have downtime because of updates.

And so the way
fault domains and update domains work is that you use availability sets. So availability
sets is a logical grouping that you can use in Azure to ensure that your VMs you place
in the availability set are in different fault update domains to avoid downtime. And just
to really help with that visual here, what I'm going to do is just show you this here.
So each virtual machine and availability set is assigned a fault domain and update domain.
And so what you're looking at here is, you see those gray boxes, those are racks. In
your data center, a rack is just like it's like a closet for servers and all those servers
sit on top of each other.

And so each of those servers in that is where your virtual machine
might be deployed. So if you are deployed, if you have a server and it's deployed in
full domain zero and fault domain one, it could be any of the, the servers on that rack,
but then up to domains, you just might have very particular servers in that rack that
are Those update domains. So hopefully that makes that a bit clear and a little bit confusing.
But just remember the concept behind fault domains and update domains. And just to give
you a visual of what it would look like in the Azure portal, if you go ahead and create
a availability set, you name it. So here I call it production. And you would choose the
fault domains, and you would choose the update domains. And so I believe that what you're
doing there is that you're choosing the amount of domains that you want your, your virtual
machines to be distributed across.

And I keep on saying virtual machine, that's your server,
okay. So if you say, two fault domains, that means that when you launch two servers, and
you put them into that availability set, they're gonna be cross to fault, two different fault
domains. And if you launch five servers, and your update domains is at five, that means
it's going to be across five different servers that are isolated from each other. So hopefully,
that makes sense. But that's fault and update domains. So I quickly just wanted to show
you the default and update domains that are in Azure here. So the idea is, if you're launching
a virtual machine, and you want to control the availability set, what you can do is you
can go to down to here, where we have availability options, we're going to drop it down and choose
availability set.

And then we don't have an availability set. So I'm going to go ahead
and create one, if I just click there. And so when we create a set, we'd say, you know,
production set. And so we have these two, these two dialogues here. And so what what
it is, is when you say there's three fault domains, that means that if you were to launch
three VMs, and you put them all into this availability set, it'll be spread across three
different racks, so that if a rack goes out to other racks are operational, and so your
service will remain available. And then down below, it's the same thing on a rack, there
might be multiple machines, and certain machines, will will be will be scheduled for updates,
but they won't all be updated at the same time. So if you're saying this, you'll say
spread it across five machines. And that's all there really is to it. So I just wanted
to show you where that was, when you actually launch it for a virtual machine.

Hey, this
is Andrew Brown from exam Pro. And we are looking at creating ourselves our own Azure
account so that we can get some hands on experience with Azure. So what I've done here is I've
gone to Azure dot Microsoft COMM And that's what I want you to do as well. And then when
you're here, just look for a free account, they have it everywhere. So they have it here
and they have it here. And I bet you could even get it through sign in. Well, what I'm
going to do is just click free account here in the top right corner. And then when I'm
here, we're going to have another start free button. So we'll go ahead and click that.
And so now we have to login with our Microsoft account. Or if you don't have one, we'll create
one, I'm gonna create a new one. And I created an email just for this tutorial here. It's
called Azure exam pro Co. And I'm going to need to set a password. So I'm just going
to go off screen and generate myself a password.

Great. So I just generated myself out a very
strong password, I'm just going to paste that in there. And I'm going to proceed forward.
And so the next thing it's going to ask is just going to send me an email to my email
there. And I'm going to have to enter a verification code. So I'll be back here in a moment to
show you that code. Okay, so I went ahead and checked my email, and immediately I received
the verification code. So mine is 6599, yours is going to be different. So I'm just going
to go ahead and enter mine in here. So it was 6599. And I'm good, I don't need any tips
or offers, and then we'll proceed to next. And so now, before we proceed, we have to
complete this challenge here. So let's give it a go.

So we have x and five, w w w Q. All
right. And so after waiting a little bit, for this page to load, we have some information.
So we have to fill in our about you. So our country, your first name, last name, email,
phone number, identity verification by phone identity verification by card. Oh, wow, they
have a lot of steps here. And so we will make our way through here. So now I'm just going
to go ahead and fill in this information. And I'll see you here in a moment. So I just
filled in the About Us section here. And so what I'm gonna do is I'm going to just proceed
to next. And so now it's going to ask me to verify my identity by phone.

So I want a text
message. So I'm gonna click the text me button. And so I'm just going to check my phone for
that verification code. And so I received the text message for the verification code,
I'm just going to go ahead and enter that in. So mine happens to be 351033. Your codes
going to be different from my code. I'm going to go ahead and verify that code. Alright,
and so it looks like it's going to ask us to identify our verification by card. So we're
just waiting for something to load here.

And so what we're gonna have to do is we're gonna
have to enter in credit card information. So we'll just go ahead here and fill that
in. So I have gone ahead and filled in my credit card information, I'm just gonna proceed
to next. Great. And so now that it's been verified, I can go ahead and just go ahead
and click on the agreement. So I'm going to say I agree to the subscription. And the second
one, I do not have to check box. That's if I want to get tips in offers. But the first
one, I'll definitely check box because we have to, and we'll go ahead and sign up.

Great.
And so now we are here. And it looks like we are ready, I guess you could schedule a
live demo, which seems very generous of Azure. But I'm just going to go ahead and proceed
to the portal. And so here we are, we made it into Microsoft Azure. And what you're looking
at right now is the portal, it's telling me I have $250 worth of credits. If you're wondering
why it's higher than yours, or lower than yours, notice that it's in Canadian dollars.
So I believe that it's 200 USD, when that's converted my currency, it's a bit higher.
And so it might be different for for you.

But there you go, that's all we had to do
to create an account. And now we can actually start learning other things in Azure. Hey,
this is Andrew Brown from exam Pro. And I just wanted to quickly show you that you can
change the experience of your Azure Portal, if you just go all the way up here and click
the cog, you can switch the default view from home or dashboard, you can change the flyout
here, so it's docked, which is a lot easier when you're navigating stuff all the time.
And if you're choose, if you want to change your theme, you can go to a dark mode here.
Or even you can do a high contrast.

So very old school, but very easy on the eyes. So
just wanted to make that aware to you. Because you may feel that you want to change your
experience right off the bat. So there you go. Hey, this is Andrew Brown from exam Pro.
And we are looking at Azure computing services starting with Azure virtual machines. So virtual
machine is going to be the most common type of compute whenever you're launching a server,
I would just think of a virtual machine.

And your virtual machines could either be running
Windows or the Linux operating system. Now the great thing with virtual machines is you
get a lot of configuration. So you can choose your address, the amount of memory, the amount
of CPU, you can attach storage to it. The thing here is that because it's a virtual
machine, the the hardware shared with other customers, you can get dedicated, but generally,
it's shared. And then you get a virtual computer. So it seems like you have like 100% of the
resource, okay, then we have Azure Container instances. So this I would describe as Docker
as a service, you can run containerized apps probably runs Docker in both windows containers,
because I believe Windows has containers as well, but runs containerized apps on Azure
without provisioning servers, or VMs.

That makes that a lot easier for you. The next
sounds very similar, which is called Azure Kubernetes service. So it's Kubernetes as
a service, easy to deploy, manage, and scale containerized applications. So the idea here
is that Kubernetes is just another way of working with containers. But it's using an
open source library. Kubernetes has basically become the de facto for containers. And so
we've seen all the cloud providers try to make their own service or orchestration service,
but Kubernetes is kind of one out.

So you'll see it on all platforms. The next one is Azure
Service Fabric. This one can be a bit confusing, because it's described as many things. But
I'm going to describe it here as a tier one enterprise container as a service, application
or cloud service. So it's for distributed system platforms, it runs on on the Azure
cloud or on premise.

And the way they described is easy to package, deploy and manage scalable
and reliable micro services. And anytime you hear the word microservices, think of also
containers. So with Azure Container instances and Azure Kubernetes services, that's where
you'd also run micro services, then we have Azure Functions. So this would be event driven
serverless compute. Anytime we're talking about serverless compute, we're used to talking
about serverless functions, which are little bytes of code that you can just upload. And
it just works. You don't have to think about the servers or provision anything.

And you
only pay for the time that that code run. So serverless functions generally run for
a very short duration. And as soon as they're done, those underlying servers are shutting
off. And the last on our list here is Azure Batch. So you can plan schedule, execute your
batch compute workloads across 100 plus jobs in parallel. When I say jobs here, it's just
the code that you want to run. You can use spot VMs spot VMs might not be out at the
time of this, but it will be in the future. But generally, it's known as low priority
VMs. But the idea here is that there are virtual machines that are being underutilized. And
so Azure is allowing you to rent them at a more cost effective costs. And so if you're
doing a lot of scientific compute or other things, and it doesn't matter if these services
get interrupted, and you want to use those low priority VMs, that is a great way to save.
And that is the computing services.

Hey, this is Angie brown from exam Pro. And we are looking
at Azure storage services starting with Azure Blob Storage. So I would describe this as
objects serverless storage. So have you ever heard of object storage or service storage,
this is going to make sense to you. So you're able to store very large files and, and large
amounts of unstructured files. And the idea here is that you pay for only what you store.
It's basically unlimited storage, you don't have to resize the volumes, you don't have
to worry about filesystem protocols, you just upload files. And that's why it's considered
serverless storage, then we're gonna move on to Azure disk storage, this is the most
common type of storage you'll encounter. So we can describe it as a virtual volume. So
you're just choosing either an SSD, or HDD. So it's basically a hard drive in the cloud.
It has encryption by default, and it's attached to virtual machines.

So anytime you're spinning
up a virtual machine, it's probably spinning up also as your disk storage attached to it.
Then you have Azure file storage. So this is a shared volume that you can access and
manage like a file server. So it's going to use protocols such as SMB, the reason you'd
want this is that let's say you had multiple virtual machines, multiple servers, and you
wanted them to all share the same hard drive, that's what you use it for. Or if you need
to have users access it using those protocols. That's another way of doing that. Then you
have as your queue storage, now I put an asterisk in front of it, because this is just a weirdly
named service.

Because this is really, for a messaging queue. This is actually for application
integration by listed here, because they put the word storage on. So I just think it's
poorly named. And even the way to describe it is is just makes you think it's storage.
But it's a data store for queuing and reliably delivering messages between applications.
So it's just been integrating two applications together, passing messages along. Another
one that's confusing is Azure table storage, I would put this in the database categories.
And it's a no SQL database. And specifically, it's a wide column no SQL database. As they
describe, it's a no SQL store that hosts unstructured data independent from any schema. So just
be aware of those two, they're just very poorly worded. Then you have Azure Data box, and
also its upgraded version, the Azure Data box heavy This is a rugged briefcase, computer
and storage designed to move terabytes or petabytes of data. So imagine, somebody shows
up your door with this, this tower, that's a computer and you plug in your USB or whatever,
whatever you want.

And you transfer all your files locally on your on premise data center,
and then they they ship it because it's faster to ship the data on a physical piece of device
than it is to send it over the internet. That's what Azure Data box is. And then we have Azure
archive storage. So this is long term cold storage for when you need to hold on to false
for years, but you want the cheapest storage options. If you have lots of data. And it's
not, it's not doing anything, you definitely want to be putting on the cheapest possible
storage devices. Cheap meaning doesn't mean that they're not reliable just means that
they're not active, the disk are not active, actively spinning, nobody's accessing the
data on those hard drives.

The last one is Azure, Azure Data Lake storage. And so this
is a centralized repository repository that allows you to store all structured and unstructured
data at any scale when you're working with big data from multiple different sources,
and used to be in one place, that is the service for you. And so that is the Azure storage
services.

Hey, this is Andrew Brown from exam Pro. And we are looking at Azure database
services during the top of our list is Azure Cosmos dB. This is a fully managed no SQL
database. It's designed for scale with guarantee of 99.999% availability, as your loves talking
about this database. It's their flagship database because it works at incredible scale and incredible
performance. So whenever you're thinking about like, like super large databases, think of
Azure Cosmos dB. Next on our list is as your SQL database even though it doesn't have its
name. This is for the MS SQL engine. So if you're running Microsoft SQL, you're going
to want to use this.

It's fully managed with auto scale integrity, integrity, intelligence,
robust security says a lot of great features built around this four MSL SQL databases.
Now if you're not using MS SQL, and you're using something like MySQL, Postgres or MongoDB
they Azure database. So it's fully managed and scalable. With high availability and security.
Then you have SQL Server on VMs. Again, it doesn't have its name, but it's Microsoft
SQL engine. Okay? Anytime it says SQL servers, just assume that it's the Microsoft flavor
of SQL. And the idea for this one is that if you already have SQL servers running on
premise, within your data center, and you want to move them on to Azure, this is where
you use a lift and shift. So it takes those virtual machines and directly moves them onto
the cloud, you don't get all the functionality that you would with Azure SQL Database.

But
it's the easiest way to get onto the cloud. Then you have Azure synopsis analytics, previously
known as as your SQL Data Warehouse, it's because they added an analytics component
to it. But it's a fully managed data warehouse with integrity, integral security at every
low level skill at no extra cost, then you have Azure database migration service, so
migrate your databases to the cloud with no application code changes. So there's that
service, then you have Azure cache for Redis. So if you need an in memory cache, that is
using the open source Redis, you can use that. And last on our list is Azure table storage.
We mentioned this in the storage services. But to me, this is a database, it's not a
storage service, even though it's named as such, so why column no SQL database, a no
SQL store that hosts unstructured data, independent of any schema. So there you go, that's the
Azure database services. Hey, this is Andrew Brown from exam Pro. And we are looking at
application integration services on Azure.

Now, I didn't have room on the slide for this.
But just to tell you what application integration is, these are services that are designed to
help apps or services talk to each other. So it's basically the glue of services. The
first on our list here is Azure notifications hub. This is using publisher subscription
technology underneath. And this is for sending push notifications to any platform from any
back end. Next, we have Azure API apps. So this is essentially an API gateway. So you
can quickly build a consume API's in the cloud. And then the those API's will have API endpoints,
and you can route them to Azure services, or maybe functions or containers. But it's
a way of building an API in the cloud.

Then you have Azure Service Bus. And as the name
implies, it is a service bus. So reliable Cloud Messaging as a service, ma s and simple
hybrid integration. I know that's not very clear. That is the language that Microsoft
uses to describe it. But just what you need to know is that it is a service bus, then
you have Azure Stream Analytics. So this is serverless, real time analytics. Remember
that world word real time and think of this service from the cloud to the edge. Then you
have Azure Logic Apps. So you can schedule automate orchestrate tasks, business processes,
and workflows, and integrates with enterprise, SAS and enterprise applications.

Then you
have Azure API Management. This can be confusing, because we have another service called Azure
API apps, I don't know what we would generally call the service. They say it's a hybrid multi
cloud management platform for API's, across all environments, whatever that means. But
when I looked at it, what it does is you can put this in front of an existing API to add
additional functionality. So if you have an API, you put it in front of it, and it's a
basically a proxy to your API, and you get all this additional stuff.

Then last on our
list is Azure queue storage. We saw this in our storage service sections. And I had said
that I don't really consider this a storage service, I consider it an application integration
service. And this is a messaging queue. So it's a data store for queuing and reliably
delivering messages between applications. So there you go. That is the application integration
services on Azure. Hey, this is Andrew Brown from exam Pro. And we were looking at developer
and mobile tools that are commonly used with Azure. The first on the list is Azure signal,
our service and this is a real time messaging service, not to be confused with azures notification
service. This is for easily adding real time web functionality to applications. So if you
ever heard of pusher, it's just like pusher. So that is the equivalent there.

The next
we have is Azure App Service. So easy to use service for deploying and scaling web applications
with dotnet. No GS, Java, Python and PHP. I'm a bit sad, I don't see Ruby in there.
But what are you going to do? So it's for developers want to focus on building your
web apps, and not worry about the underlying infrastructure. So if you've ever used Heroku
Think of it like that, but for Azure. Next you have Visual Studio And Visual Studio is
a code editor. It's it's basically an ID and integrated development development environment
designed for creating powerful, scalable applications for Azure. You might have heard of Visual
Studio code, which is similar but different.

But I just wanted to make mention of Visual
Studio here. Then you have Xamarin. I think I'm pronouncing it right. And it's a mobile
app framework. It's for creating powerful and scalable native mobile apps and dotnet,
and Azure. And yeah, so that is the developer and mobile tools for Azure. Hey, this is Andrew
Brown from exam Pro. And we're looking at Azure DevOps Services. So Azure DevOps is
really just an umbrella service for a bunch of modern dev services. And we'll jump into
them right away. First being Azure boards, if you've ever used a combat board, that is
what Azure boards is.

And if you've ever used GitHub projects, it literally is that because
Azure, and GitHub are owned by the same company, Microsoft. And so they brought over that technology
to Azure. So deliver value to your users faster using proven agile tools, to plan, track and
discuss work across your teams. Then you have Azure pipelines. So build, test and deploy
ci CD that works with any language, platform and Cloud Connect to GitHub or any other provider
and deploy continuously. So if you need automatic deployments, that's what Azure pipelines is
for, then you have Azure repos. And this is exactly like GitHub repos. So get unlimited
code, cloud hosted private Git repos and collaborate to build better code with pull requests and
advanced file management. I really mean, it's just like GitHub repos, because it's just
that technology moved over to Azure. And you have as your test plan, so test and ship with
confidence using manual and exploratory testing tools. So this is just a way of setting up
tests. Have you ever used like, was it called Cypress or any other like, or any other testing
tools, it's just built into Azure, it'll, it'll open up a browser and literally test
your application and make sure it works as expected, then you have Azure artifacts, so
create hosts and share packages with your team.

So this is just package management,
but specifically for ci CD pipelines, so ci CD pipelines, they have to set up the servers,
and you have to have pre installed packages, that's just going to make it a lot easier
for you. Last is Azure dev test labs. So this is just an easy way to create dev test environments
for your developers. And that is the Azure DevOps Services.

Hey, this is Andrew Brown
from exam Pro, and we are looking at Azure Resource Manager. And just to understand the
service, we understand what infrastructure as code is, so also abbreviated as IAC. This
is the process of managing and provisioning computer data centers through machine readable
definition files rather than physical hardware configurations, or interacting configuration
tools. If that is complicated, all it means is that we're using scripts, we're using scripts
to set up less services like VMs, or databases or storage. So you don't have to manually
go through the interface or you can give that script to another team or company and they
can set up the exact same setup you have within seconds. So the the infrastructures code service
for Azure is called Azure Resource Manager or arm for short, and allows you to programmatically
create Azure resources via a JSON template, I'm just going to show you what that template
looks like. So you'd make this template and it will allow you to launch a virtual machine.
Okay, so instead of going to the interface, and clicking and doing a bunch of stuff, you
just define all the stuff you want to do in JSON.

This is a very short version of it,
there's definitely a lot more configuration that would be required. But here, this would
be a very easy way to set up a virtual machine using code. Hey, this is Andrew Brown from
exam Pro, and we are looking at Azure quickstart templates. So Azure quickstart templates is
a library of pre made ARM templates provided by the community partners to help you quickly
launch new projects for a variety of stack scenarios. So in the last slide, we just talked
about Azure Resource Manager where it's just a template to or a JSON file to quickly set
up resources. Well, that is taking that file and just sharing with other people, right,
but it's shared through actual vendors. Okay, so you could go to the Azure quickstart. And
let's say you wanted to deploy a Django app.

And I think it's like also vendors and also
community contributed scripts. So if you want to deploy an Azure or sorry, a Django app,
you could use that quickstart. If you wanted to deploy Ubuntu with a Docker engine, you
could use that script. If you wanted a CI CD containerized app. with Docker enterprise
Jenkins, you could use that script. And if you wanted a web app that was running Linux
with Postgres, you could use that script so it's just a quick way Getting Started. Hey,
this is Andrew Brown from exam Pro. And we are looking at Azure virtual networks, also
known as V net and the concept of subnets. So a virtual network and as we said, It stands
for V net is a logically isolated section of the Azure network where you launch and
your Azure resources. And when you create a virtual network, you have to define a certain
amount of IP addresses that you're going to use, which we call a cider range.

We'll come
back to that in a moment. But here is a graphical representation of your V net. So here we have
the Azure network. And then within that, we have a region, so US East one, and then we
would create our virtual network so that we can launch our Azure resources within. And
in there, we have two subnets, a public one, a private one. And then in the public one,
we have a virtual machine and the private one, we have a database and the end in the
public one, it's actually it can actually have access to the internet, where's the private
one, it does not. So not all services require a V net.

But most do so because you just have
to put your resources somewhere. And they have to go into a virtual network, which are
associated with an IP address, whether it's public or private. And then there's other
network controls that are involved. So now let's take a look at the cider range. So cider
range, I said is just an allocation of IP addresses that you're going to use in your
virtual network. All I want you to know is that C versus 10.0, point 0.0. That's the
name of our network. But we have that forward slash 16. That is the cider range. And the
lower the number, the higher the more IP addresses you get, I'm not going to get into the math
in this video, it's not necessary. But just understand that the forward slash 16 is a
very big number. And that's the amount of IP addresses that we can launch. So we could
essentially launch 65,000 servers within this virtual network. And so we can subdivide our
virtual network into subnets.

So it's a logical partition of an IP network into smaller network
segments. So that's what you're doing, you're breaking up into smaller IP ranges. And when
you create a subnets, they have to be smaller. So you have to you have to define a cider
range for those as well. But they have to be smaller than the V net. Remember, I said
the higher the number, the lower it is. So when you have forward slash 24, that's just
saying 256 IP addresses.

Alright. And one more thing is I want to note is that we have
things called public subnets, and private subnets, public subnets, reach the internet,
private subnets do not. So when you have sensitive things like your database, you don't want
that to be in a public subnet, but a web app, which generally has traffic coming from it
from the internet. That's okay. All right. And that's all we need to know here.

Hey,
this is Andrew Brown from exam Pro. And we're looking at the cloud native networking services.
Now, these networking services aren't super, super important for the exam, but I like to
go through them generally would make an architectural diagram for this, but it's just a bit too
complicated. So I thought we'll just go through and list them. So the first is Azure DNS.
And we do describe the service later in the course here. But this provides an ultra fast
DNS responses and ultra high domain availability. So if you have a domain name, and you just
want it to be managed by Azure, you can associate it with Azure DNS, then you have Azure virtual
network, we talked about this prior, but we'll talk about it again, short for V net, a logical
isolated section of your Azure network for customers to launch Azure resources within,
then you have Azure load balancer, and as the name implies, it is a load balancer, but
this one is at level four transport.

So it doesn't really understand requests, like what
a web application would send, it's more lower level. And so that's what that is, then you
have Azure application gateway. And this is an HTTP load balancer. So it does understand
like requests coming from a web server. And what you can do with it is you can actually
route based on HB requests to specific services. But it also you can apply a web application
firewall because it is an application load balancer. That's why you can ply that web
application firewall, which is a separate service, then you have network security groups.
So this is a way of protecting your subnets.

So it's a virtual firewall around your subnets
where you can say, allow these allow these ports to be open. And, and from who and and,
and such. So there you go. That's the cloud native networking services. And the reason
why they're cloud native networking is because you wouldn't use these with enterprise or
on or, or in hybrid models. It's just what you normally use. And most startups would
be using all these cloud, these networking services. So next we have enterprise or hybrid
networking services. So this is when you're using networking.

That is going to work on
prem to the cloud. So the first is Azure front door. So this is a scalable and secure entry
point for fast delivery of your global applications, such as making sure you have a secure entry
point into Azure from outside, then you have Azure Express Route, you want to remember
this one definitely for the exam, it probably will show up as a question. This is a connection
between your on premise to Azure cloud. And it can be between 50 megabytes per second
to 10 gigabytes per second. I'm pretty sure it's also secure. But the point is, is that
if you need a super, super fast connection, from your on prem data center to Azure, you'd
use this service Express Route. Remember, it's going to be on your exam, then you have
virtual LAN. So a network service that brings many networking security routing, functionality
together to provide a single operations, operational interface.

I know that sounds complicated,
but awareness, just a way of making networking easier by creating like a hub spoke model,
then you have Azure connection. So a VPN connection securely connects to Azure local networks
via IPsec. So that's just a way of creating a secure connection with Azure. Then you have
virtual network gateway, a site to site VPN connection between Azure virtual network and
your local network. So it's just a way of connecting with Azure. So there you go, that
is the networking services. Hey, this is Andrew Brown from exam Pro, and we are looking at
Azure Traffic Manager. So this service operates at the DNS layer to quickly and efficiently
direct incoming DNS requests based on the routing method of your choice.

So what you
do is you'd choose a routing method. So we got performance weighted priority, geog, geographic
multivalue sub net, and you'd be able to reroute your traffic so you can route traffic to servers
geographically, nearby to reduce latency failover to redundant systems in case primary systems
become unhealthy, or route to random virtual machines to simulate a B testings, I think,
like the best use cases fail overs for DNA at the DNS level, like that's a great one.
And just a visual example here. Imagine we had exam pro.co. And we had a production server
and a beta server. And we only want a 20% of our users to see the beta server. So we
could use I guess we use weighted there and we'd say 80%, on prod, 20%. There. And that's
how that would work. So there you go, that's Azure Traffic Manager.

Hey, this is Andrew
Brown from exam Pro. And we're looking at Azure DNS, I told you, we would come back
to this one, because we're on the networking slides, I just did not describe this in detail.
So as your DNS allows you to host your domain names on Azure, you can create DNS zones and
manage your DNS records. So if you wanted to add a record, like let's say we had example
CO and it was being managed by DNS as your DNS, we could add beta as a sub domain. And
we could use alias to route that to a load balancer or virtual machine. And then that
would go into our list of records. One thing that is interesting on is kind of like a downer,
which is Azure DNS does not allow you to purchase domain.

So it only gives you the ability to
manage DNS records, some other cloud providers, they allow you to purchase and manage but
only as your DNS does not at this time, maybe in the future. Hey, this is Andrew Brown from
exam Pro. And we are looking at Azure load balancer, we had only mentioned this briefly
in the networking services slide. And so we'll look at it more here. So as your load bouncer
is used for evenly distributing incoming network traffic across a group of back end resources
or servers, as your load bouncer operates on the OSI layer four, that's the transport
layer.

So it doesn't understand HTP requests, it's just sending packets back and forth.
So here is a graphical representation. So imagine you have the internet, and somehow
it's making its way to the load balancer, the load balancer is going to do is it's going
to distribute that amongst your virtual machines, virtual machines being your servers. And the
great thing is, is that you can have virtual machines in different availability zones,
and the load balancer can distribute it to to those and that's how we get high availability.
Okay. And now with Azure load balancer, you can create both a public load balancer, so
that's incoming traffic from the internet to public facing servers of servers that have
a public IP address with internal or an easier way described would be a private load balancer,
so incoming internal network traffic to private facing servers, so private IP addresses, so
there you go. Hey, this is Andrew Brown from exam Pro, and we are looking at scale sets.
And so this allows you to group identical virtual machines and automatically increase
or decrease the amount of servers based on the change in CPU, memory, disk network performance,
or on a pre defined schedule.

So when we talk about elasticity, we're talking about using
scale sets the ability to automatically increase or decrease the amount of servers. So here
is a visual representation. Imagine you have internet traffic, and it hits that load balancer.
And then we determined that the current load on the existing server is greater than 80%
CPU utilization, it's going to need some extra servers. And so what happens is the skill
set decides, okay, we're gonna have to add one or two more servers. And when that CPU
usage goes below 80%, but it says, okay, we don't need those servers anymore. Get rid
of them. Okay. So that is scale sets. Hey, this is Andrew Brown from exam Pro, and we
are looking at IoT services on Azure. And so before we get into it, what is IoT? So
IoT stands for Internet of Things. So a network of internet connected objects, usually hardware,
able to connect and exchange data.

So here is a graphical representation of IoT devices,
maybe you recognize some, let's just go through a quick list of things that could be IoT devices.
So you have smart bulbs, so maybe there's light bulbs in your house that are controlled
by the internet. Smart fridges who doesn't want one of those smart light switches, narrowband,
or wideband hardware, this is just a way of connecting to the internet, it's just like,
it's kind of like Wi Fi. Then you have security cameras, then you have voice command speakers.
So think of like Alexa, then you might have temperature pressure or humidity sensors,
if you're in the farming industry, you can use you can leverage leverage IoT devices
for that. Maybe you have drones, maybe you have phones, that could be an IoT device,
and even buttons. So AWS had these things called AWS, or dash buttons.

They weren't
popular. But the idea was, you could like press a button and like purchase something.
So like, if you always had to get like soap for your washer, you could have that button
right on your washer. But let's actually talk about the IoT services here. So the first
one here is IoT Central. So this allows you to connect your IoT devices to the cloud,
then you have IoT Hub. So this, this enables highly secure and reliable communications
between your IoT applications and devices that manages then you have IoT edge is a fully
managed service built on the Azure IoT Hub, and allows you allows data processing analysts
near the IoT devices. So this is really edge computing, I really should have highlighted
that for you. But this is where you are able to offload your compute from the cloud to
local computing hardware, such as IoT devices, phones, or home computers. So it's just a
way of saving money or utilizing your local network for compute. Then you have Windows
10, IoT Core services.

So this is a cloud services subscription that provides the essential
services needed to commercialize the device on Windows IoT, or 10 IoT Core, so basically,
it's long term Oh, support and services to manage device updates, and assess device health.
Alright, so there you go. That's your IoT services. Hey, this is Andrew Brown from exam
Pro. And we are looking at big data and analytics services on Azure. So before we jump into
it, let's talk about what is big data. So it is a term used to describe massive volumes
of structured and unstructured data that is so large, it is difficult to move in process
using traditional database and software techniques. So we need special services just to handle
them. The first on our list here is Azure synopsis analytics, formerly known as SQL
Data Warehouse. So it is enterprise data warehousing and big data analytics.

So it's intended to
run SQL queries against a large databases to generate things such as reporting. Then
you have HD Insight HD is short for Hadoop. But anyway, it runs open source analytics
software, such as Hadoop, Kafka and spark I imagined was called HD Insight because it
only supported Hadoop and then they added additional services, but that's just what
it's called. Then you have Azure Data bricks. So we have a patchy spark based analytics
platform optimized for Microsoft Azure Cloud Service platforms.

So third party data, bricks,
cloud services support with Azure, so data bricks, was made by the creators of Spark.
And yes, of course, you can run spark on HD Insight. But data bricks is its own cloud
service provider and Azure partnered up with them so that you can use it within the Azure
platform. Then you have data lake analytics, so an on demand analytics job service that
simplifies big data. And we saw what data lakes were when we looked at storage services,
but we'll describe them here just in a little bit.

Different way, a data lake is a storage
repository that holds a vast amount of raw data in its native format until it is needed.
So there you go, that is the big data and analytics services, we need to know. Hey,
this is Andrew Brown from exam Pro. And we are looking at artificial intelligence and
machine learning services on Azure. So a great way of describing that is to always have this
graphic here where we have this kind of like onion thing where each is dependent on the
other.

And we'll start with artificial intelligence. So what is artificial intelligence or AI,
this is where machines that perform jobs that mimic human behavior. Now, that doesn't mean
that the technology behind it has to be complex. It could be if all statements, but it could
be utilizing machine learning, it could be utilizing deep learning. But the point is,
is that it mimics human behavior, then you have machine learning.

And this is where machines
that get better at a task without explicit programming. So they are smart enough to learn
on their own, then you have deep learning. And so deep learning is where machines that
have an artificial neural network inspired by the human brain to solve complex problems.
So literally, it's like the power of the human brain. Maybe not as not as great as the human
brain, but quite quite close there. And AI could be leveraging ml, and deep learning.
So that's why it is like that. So when we want to do machine learning on Azure, they
have a service called Azure Machine Learning service.

So this is a service that that simplifies
running AI, ml related workloads, allowing you to build flexible pipelines to automate
workflows. So you can use Python, and R, you can run your deep learning workloads using
technologies such as TensorFlow. And so that's what you'd use. Now, there was a service called
Azure Machine Learning Studio, I think it's still around if you if you're still using
it. And that's the classic version of the service. And it does basically what Azure
Machine Learning service does.

But there's some limitations. So does not have like a
pipeline and other functionalities. And if you're wondering if you could easily migrate
from classic to the other one, it's not easy to migrate. So basically, you definitely always
want to start with Azure Machine Learning Services. No reason you'd want to use Azure
Machine Learning Studio, unless you're using it for legacy reasons. Hey, this is Andrew
Brown from exam Pro. And we're still looking at AI and ml services, specifically just AI
services, because Azure has a lot of them, and I'm just going to quickly go through them
and they're pretty self explanatory.

So the first one is personalized, it delivers a rich,
personalized experiences for every user using AI. Then you have translator it adds real
time multi language text translation to your apps, websites and tools. You have anomaly
detector detects anomalies and data to quickly identify and troubleshoot issues. Azure bot
service Intelligence Service a bot service at scales on demand form recognize, recognizer
automate the extraction of text key value pairs and tables from your documents. You
have computer vision, easily customized computer vision models for unique use cases, language
understanding, so build a natural language understanding into apps, bots and IoT devices.
We have q&a maker so create a conversational Question and Answer bot from your existing
content. Text Analytics, extracting information such as sentiment, key phrases, named entities
and languages from your text, content moderator, so moderate text and images to provide a safer
more positive user experience.

Face so detect and identify people and emotions in images,
ink, recognizer recognize digital ink content, and such as handwriting shapes, and document
layouts. So there you go, they have a lot of services, and they haven't even made time
to make all icons for them. That's how many they have. Hey, this is Andrew Brown from
exam Pro. And we are looking at serverless services on Azure. So what is serverless This
is one of the underlying servers or servers infrastructure and OS is taken care of by
the cloud service provider, it will generally be highly available scalable and cost effective.
So serverless is event driven at scale. So a service function can be triggered, or trigger
other events allowing you to compose complex application and just scale.

So with serverless
technology, it's like playing with Lego blocks. Then you have abstraction of servers, so servers
are abstracted away your code is described as functions. These functions can be running
on different compute instances. So if some people like to use Python, or some people
like to use JavaScript, you can mix and match there. Then you have micro billing. So when
you have traditional servers, you probably be billed by at least a second some bill by
the hour. But the thing is, if you're not using the server for the whole second or hour,
You're paying for compute that you're not using.

So serverless functions will bill you
in the microsecond. So you're saving money because you're not paying for unused computation.
Now, let's quickly walk through some of the serverless services. I'm sure there's more
than this, but this is what I think are worth highlighting. So the first is Azure Functions
to run small amounts of code known as serverless. functions in your favorite languages, you
got C sharp, Java, JavaScript, Python and PowerShell. And if Azure is listening, please
can you support Ruby, because I love using Ruby. Then you have blob storage. So this
is serverless. object storage, just upload your files, don't think about the underlying
file systems resizing, basically unlimited space, and you can upload pretty darn large
files. Then you have Logic Apps allows you to build serverless workflows composed of
Azure Functions, building a, I would say this is you building a state machine for serverless
compute, then you have event bridge, which seems a bit similar, but it's not it uses
pub sub messaging systems to allow you to react to events and trigger other Azure cloud
services such as Azure Functions.

So there you go, that is serverless services. Hey,
this is Andrew Brown from exam Pro. And we are looking at the Azure portal. So the Azure
portal is a web based unified console that provides an alternative to command line tools.
You can manage your Azure subscription with the Azure portal, build, manage, monitor everything
from simple web apps to complex cloud deployments. So what does that mean? It just means the
browser that you use to access Azure. So anytime you're logged into Azure, that is the portal,
that's all you need to know. There's another thing about Azure Portal, and that's Azure
preview portal. So the thing is, is that sometimes there are new features, or new products that
Azure has made that are not necessarily generally available, but you can get a sneak peek of
them sooner if you use the Azure preview portal.

So that could be previews, betas, or other
pre releases. So the way you do that is very similar how to how you'd access the regular
portal. But if you want to test preview of new features, you go to the preview dot portal
azure.com. Or if you're looking for a stable release, in production, ready features, you
just use portal dot Azure calm. So that's all you need to know about the Azure portal.
So I just wanted to quickly show you what the portal looks like.

We are going to show
you in this course how to create your own account and work within the portal. I already
have one set up here. And I've already logged in. And if I go to the top here, I actually
have this portal link now. And when I go here, we can see what the portal looks like. So
this is the portal, you can see that it's telling me about my spend, but I'm on the
dashboard. Right now, on the left hand side, we have this hamburger menu where we can explore
the services, we can go up here and search them as well. So whatever I'm looking for,
if it's monitor, we can go there. And that's pretty much it. This is the portal. So it's
just the browser when you're logged in, you can interact with any cloud resources. Hey,
this is Andrew Brown from exam Pro. And we are looking at PowerShell for Azure. So first
of all, what is PowerShell.

So PowerShell is a task automation and configuration management
tool. But an easier way to think of it, it's just it's a command line shell it's also a
scripting language. And so when I say a command line shell, I mean this thing, this blue thing.
And so if you have a Windows machine, you can actually you'd have to I think have Windows
Professional, but you can go ahead and install this. And it's allows you to automate things
using its scripting language, as well as in this, this program. Now, the PowerShell is
available on Azure as well. And we'll get to that a moment, let's just talk about the
benefits of PowerShell over traditional, traditional shells.

So shell could be something like bash
or Zed sh, which would accept and return tax. But PowerShell is built on top of the dotnet
Common Language Runtime, so CLR. And it accepts and returns dotnet objects. So those objects
make it a lot easier to automate scripting. And so PowerShell is available on Azure, and
it's known as Azure PowerShell. And so we have a set of command commandlets for managing
Azure resources directly from the PowerShell command line. And if you're wondering how
you'd access PowerShell, you could use Cloud Shell, which we'll talk about here in a moment.
Okay, so I just wanted to quickly show you PowerShell, I'm on my Windows computer right
now. And this is natively installed on my, my windows 10 computer, and I can type in
commands here.

And so this is just give me a list of all my, my my directories in in
this current folder. But I just also want to show you that we have PowerShell here in
the Azure portal. So I'm using the Cloud Shell up here, and I've chosen to use PowerShell.
And you can see it's pretty much the same experience with some extra things that make
it easier to work on cloud. So that's it Hey, this is Andrew Brown from exam Pro. And we're
looking at Visual Studio code. So Visual Studio code is a free source code editor, meaning
it at its code made by Microsoft, for Windows, Linux and Mac OS. And you can even run it
in the cloud. If you're wondering what it looks like this is the editor. And this is
not to be confused with Visual Studio. So Visual Studio is an ID, and is also for programming.
But it has a lot of functionality built in here is Visual Studio Code open source? Well,
they say that it is but I don't know to what degree I don't know if it's 100% open source.
But this is the most popular text editor or code editor out right now.

And Microsoft has
or sorry, Azure has a service called, like Visual Studios workspaces that's on Azure
and allows you to spin up these developer environments using this editor right in the
cloud. I don't think it's gonna be on your exam. But I just thought it was cool to mention.
And if you don't have a code editor, I strongly recommend downloading this one for your computer
because it is great. So I just wanted to quickly show off Visual Studio code here. So if you
wanted to go download yourself, you just type in Visual Studio code into Google. And you
should end up here, you can download a version, it's for Windows, Mac, and Linux, so you can
download for anything, and you can run it in the cloud on Azure, or even launch your
own server on other other other cloud providers. I just have happened to have Visual Studio
Code open here with an open source project.

Just to show you what it looks like. The thing
that people really like about it is just It looks great, and it has really good plugins.
So if I just go to extensions here, you can anything you need, you can add it and enhance
this editor here. If you don't have a code editor, I strongly recommend downloading this.
And I just wanted to make make you familiar with this editor here. Hey, this is Andrew
Brown from exam Pro. And we're looking at Azure Cloud Shell.

So Azure Cloud Shell is
an interactive authenticated browser accessible shell for managing Azure resources. And so
it provides the flexibility of choosing the shell experience that best suits the way you
work. So you can either use bash, or PowerShell, we just talked about PowerShell. And this
is the place where you could use it in Azure. So just to give you a visual, if you ever
want to access the Cloud Shell, it's all the way up in the header there in the portal.
And so you click that button, it opens up PowerShell or it will depends on what you
choose, but it will open it up down below. And then you'll be able to use PowerShell
right away and also the CLR right away, which we'll talk about next is the Azure Salesforce.
Hey, this is Andrew Brown from exam Pro.

And we are looking at Azure see ally. So what
is the CLR will CL eyes stands for command line interface. And it processes commands
to a computer program in the form of lines of text. And the operating system implements
a command line interface in a shell or terminal. So we saw a shell earlier, which was PowerShell.
But we'll look at what CLR commands look like here in a moment. So the Azure COI can be
installed on Windows, Mac and Linux. once its installed, you would type A z followed
by other commands to create, update, delete, view and manage your Azure resources. And
so to really show you what that code looks like, down below, we have a bash script. But
this could easily be PowerShell. And you have the commands AZ and then you'd have what it
is that you want to do.

So if you wanted to create a group, you type a C group create
an E provide the name and the location. Or let's say you wanted to launch a virtual machine,
which is a server you do AZ VM create, and then provide those other parameters. So that
is how you would programmatically create Azure resources. And there's tons and tons of ci
commands for Azure. So you basically anything you're looking at pretty much can be created
with the CLR programmatically. Hey, this is Andrew Brown from exam Pro, and I'm going
to show you how to create resource groups. And the reason why we are going to make one
is because without one, we're not going to be able to launch pretty much any resource
until we do so because you always have to choose a resource group when launching Azure
resources. So even though it shows up here on our dashboard, if it doesn't, I want you
to go up here at the top and type in resource group.

And we'll go ahead and click resource
group here. And then all the way on the left hand side, I want you to click on Add. And
we're just going to have to use our free trial which is our type of subscription. I'm just
going to type in exam pro as the resource group. We're going to stay in US East, because
that is where the most most of the services are available Azure and that's what I'm going
to be using throughout. This course is always using US East. So we'll go down here and hit
Create plus, review, plus, create Because there's really nothing else to check. And
once validation pass, this might happen instantaneously for you, you might have to wait a few seconds,
go ahead and hit Create. And so now we have created our resource group. And there is no
cost resource group. So there's no worry about happiness, or whether you keep it around,
don't delete it, or you're going to notice that the group hasn't showed up just yet,
you're gonna have to hit refresh.

And sometimes Azure is a bit slow about showing resources
when you create them initially, and when you delete them. So I'm just going to wait a little
bit here. And I'm just going to keep on refreshing. And I'll see you back in a few minutes. All
right, so waited a couple of minutes. And if you just go ahead up here and hit refresh,
now we can see that we have our resource group.

So that's all there really is to it. Nothing
super exciting there. I'm just going to click Microsoft Azure at the top here to get back
to my dashboard. And I'll see you in the next follow along. Hey, this is Andrew Brown from
exam Pro. And we're going to look at making our own virtual network. So we made a resource
group, but we also need a virtual network or V net.

So we actually have some network
to launch our resources within. So what I want you to do is make your way all the way
to the top here, and we're going to go ahead and type in V net, which will get virtual
networks and go ahead and click that. If you notice, you don't have any network. So we're
gonna have to go ahead and create our own. So go ahead and hit the Add button. And we're
going to have a bunch of options here, I'm just going to name this, or sorry, we're going
to choose that resource group. So exam Pro, and we're just going to name this exam pro
v net. And there are some additional steps here, we'll just take a peek here, we don't
really need to change anything, but we'll just take a look.

So for IP address, you can
set the IP address space, it's going to default to 10 dot 0.0 416, which is very good for
us, you can see that it supports ipv6, which is great. It's going to create us a default
subnet which is going to be 10 dot 0.04, slash 24. That's going to be a subnet with like
256 IP addresses, which is great. Go to the Security tab, we have DDoS protection basic
and you definitely want to stay on that because that is free.

Same thing with the firewall,
we don't want it on because that's going to cost extra money, I'm gonna go back to basics,
we're gonna hit review plus create, we're just gonna wait for validation to complete,
this could be instantaneous for you, or you could wait a few seconds, it's different for
everybody. And now the validation has completed, we'll go ahead and hit Create. And so we'll
just wait for that to finish creating. Great, so it's created. So it's just saying deployment
is underway. So we're just gonna have to wait a little bit here until says deployment is
complete, it's already done super fast.

And we'll go ahead and hit go to resource. And
so now we are in our virtual network. And we have a bunch of settings on the left hand
side. So address space, subnets, etc, etc. Nothing we need to know at this level, we
just need that virtual network so we can launch resources in. So now that we have resource
groups and virtual networks, we can start launching resources. So there you go, I'll
see you in the next follow along. Hey, this is Andrew Brown from exam Pro. And I'm going
to show you how to launch your own server on Azure. And so a server would be considered
some kind of computing service.

And the one we're going to do right now is we're going
to use virtual machines. So go all the way at the top here to search, I want you to type
in a virtual machine. I know it's on our dashboard here. But just to get in the habit of always
being able to find stuff, it's great to use the search. And then once we're here on the
left hand side, I want you to click Add. And we're going to be presented with a lot of
different options. So the first thing we need to do is choose our resource group, we have
another resource group we that was created here for us for Azure, I wouldn't worry about
let's just choose the one that we created.

I'm going to name this virtual machine, I'm
going to call it my VM, we're going to launch in USBs. If we want to choose an AZ we could
so we go to availability zone and choose one I'm just going to stick to no infrastructure,
then we have Ubuntu here, it's using the latest version, it might be different for you, I
wouldn't worry too much about it. Then we need to choose our size. This is going to
really determine our cost here. This is $89. Canadian, I'm just going to go ahead and hit
select here. And we're just going to sort on the right hand side based on cost and we're
going to choose the most inexpensive server which is the b1 Ls. So that's one VPC, eu
and half a gigabyte of RAM.

Because this is just an example app. We're not going to do
a or server we're not going to do anything with it. So might as well make sure we're
not overspending our free credits. We have the option to add a public key This is what
you generally would want to do. But that's a lot of work. And so for this demo, so we're
just going to choose password. They're very finicky about the passwords here that it has
to have a uppercase, lowercase special character. Number, and it also has to be 12 characters.
So I'm going to type in testing with a capital T testing, 123, exclamation exclamation, and
then testing with a capital on the T 123. Explanation exclamation.

So there we go. We
don't need any inbound ports, I'm gonna say none because we're not SSH. Again, I'm just
going to click forward here to show you some of the other options. So we could choose our
the type of disk we'd be attaching. So it's by default on premium, you might want to use
standard or standard HDD. Generally, when you're launching web apps, you want SSD, if
we did choose standard, it would say, hey, you should really use premium. So we're just
going to go back to premium, you're going to notice that the disk is encrypted by default,
so you can't have an unencrypted disk. That's a very good default option.

If we go over
to networking, it's going to automatically select our V net that we chose, and the default
subnet that we that it created when we created the V net. And then here, we could choose
whether we want an IP address or not. If it had no IP or public IP address, it would still
have a private IP address. And that would that would mean that it would like it's really
intended for a private subnet. It has a network security group set on two basic here. And
that's pretty much it here, you can also put it behind a load balancer, we're not going
to do that. Let's go over to management, management, we have a couple options here, like identity,
auto Shut, shut down backup, these are all fine, we're just gonna leave it alone for
advanced, we could put custom data in here, that means we could provide it a script that
it would use to initially set up the server, we're not going to do that.

And that's about
it. So I'm gonna go back to basic, and I'm going to scroll all the way down the bottom,
and I'm gonna hit review, review plus create. And what we're gonna have to do is wait for
this validation step. That was very fast, it might take multiple seconds for you, or
even a minute. But sometimes it's faster than others. So now I'm going to go down below
and hit Create.

And we're just going to wait for that deployment to be submitted, it's
going to say deployment is underway. And then soon, it's going to say deployment is complete.
So I'll see you back here in a moment when deployment is complete. Great, so we had to
wait a few minutes there. And now it says deployment is complete. And we can press proceed
to go to resource. And so here's our virtual machine, we have some CPUs and networks on
disk. So there's some activity here. If we wanted to gain access to it, there should
be a Connect button here, we're not going to be able to gain access to it, because we
just didn't set it up in a way. That was the case, we have a few options down the left
hand side such as the disks that are actually attached to it, and maybe the size here. So
if maybe if we wanted to resize, change it to a larger size, we could go ahead and do
that.

But there's nothing really exciting here to do, I just wanted to show you how
to launch your own virtual machine. And now that we have our own virtual machine launch,
I'm gonna go back to overview, we're going to go ahead and delete that because this is
now costing us money. It's not costing us a lot of money. But again, we're done here.
So we'll just go ahead and delete, we're going to say yes to delete. And now it says it's
still in the virtual machine. And so we're just gonna wait until this is finished a leading.
And a lot of times, you can just look at the progress up here. And it'll say deleting the
virtual machine could take a few seconds, it could take a few minutes, it just depends.
So all I'll see you here in a little bit when this is done deleting. So after waiting a
little while here, it says it's how it successfully deleted the virtual machine. If we want to
make sure that it's deleted, let's go make our way over to virtual machines, the talker
in the search.

And you're going to notice that it's still showing up there. But it said
it was deleted. And this is the thing with Azure is that it takes time for it to propagate.
So what we'll have to do is just hit refresh, and now it's gone. So just be aware that sometimes
the consistency in terms of what you see in the UI is a bit delayed. And so if you remember
clicking Delete, and it says that it deleted it, just have a bit of patience there and
hit refresh and just double check to make sure that's the case. So there you go. Okay,
great. So now that we've done that, let's actually go learn how to do a different kind
of compute, which is serverless functions. So if we want to launch your own serverless
function, by the way, if you're not at the screen, just click on Microsoft Azure here
at the top.

And we're going to go to our search and we're going to type in functions. And
so on the left hand side, I want you to click on Add. And then what we're doing is we need
to create a function app. So we're going to be on our free trial. We're going to choose
our resource group we created earlier, we're going to name this I'm just call this this
is the function app names. I have just saved my my app. My app is not available yet. They're
all unique nicknames, I just call exam pro app, you might have to change this a few times
before you get what you want. And then for publish, we're going to use code, we don't
want use a Docker container, that's too much work. And we're gonna just use node j s, which
is just JavaScript version 12.

Sounds great to me, we're going to change this to make
sure that you s east. To make our lives a little easier, there's nothing wrong with
Central, it's just I want everything to be consistent. So everything's very predictable
in these. In these follow along here, we'll go all the way to the top and look at hosting
just quickly here, we're gonna see that we have a storage account. Okay, nothing exciting
here, it's going to either be Linux or Windows, this doesn't really matter to us, we can let
it be windows, go back to basic, I'm gonna go ahead and hit review plus create. So we're
gonna wait for this validation step to complete here. So again, it could take a second or
it could take a minute, just depends on the day with Azure. So we'll just wait here a
little bit. There we go. It's just finished validating, and it go ahead and hit Create.
And now we're waiting for that initial deployment.

So we're gonna see the deployment is on its
way, and then we have to wait for deployment to be complete. So it's in progress, it's
underway, this shouldn't take too long, and should say that it's complete here in a moment.
Great. So after waiting a few minutes, here, our deployment is complete, we'll go ahead
and hit go to resources. So now what we need to do is we need to go create ourselves a
function. So on the left hand side, make your way to functions. And then in here, we're
going to add ourselves a new function. And so we have a lot of presets here for us, it's
not gonna matter what we choose, while it does, and I'm going to say, Let's choose HTTP
trigger, we're going to leave with a default name, that's fine, we'll have it stay as function
for authorization level, we'll go ahead and create that function.

So once that function
is, has been created here, and it's already done, let's start adding our code. Because
again, the whole point of serverless is that you don't have to worry about servers, you
just add your code, and it works. And so here's some code it already has for us. What I'm
gonna do is I'm just gonna add myself a console log. console. log is just like saying, hello,
world. So we're gonna say hello, world. And then I'm gonna hit save. And now it's just
connecting to Application Insights. I don't know if it's actually running it. Yeah, it's
connected. Great. And now let's go ahead and hit test. And so we have a bunch of options
here, I'm not going to fill in anything, I'm just going to hit run. And we're going to
see what the output is. Okay, great. So you know, I'm just looking at how this actually
works. And I think what we need to do is we need to actually pass a name and to the, to
the query string here.

So what we'll do is we're just going to go ahead and type in query
here, and we'll put a name, and we'll say, Andrew. Um, and so that should do it. So let's
just hit run. Okay, great. So it's saying, hello, Andrew. So there you go. That's all
you have to do to create a serverless function. And it doesn't cost us anything to keep this
around. So we don't necessarily have to delete it. If you did want to go delete it, I guess
we'd go back here, we'd have to go back to functions here. And I will just click Delete.
Here, we'll type in Yes, it will hit Delete. And there you go. So that's, that's all there
is there to it for serverless compute, go back to Microsoft Azure here, back to the
dashboard.

And we'll see you in the next follow along. Hey, this is Andrew Brown. And in this
video, I'm going to show you how to set up blob storage. And so if you remember through
the actual course, Blob Storage is like serverless storage, so you don't have to worry about
running out of space or resizing your disk. So let's go to it. At the top here, I want
you to type in blob storage. And you're going to go to storage accounts. And this is where
you end up creating all of your storage accounts, you can see that we have a couple of storage
devices from the virtual machine and when we created the serverless serverless function
there, so go ahead and hit Add. And what we're going to do is choose exam Pro, or whatever
you called yours when we were at the resource groups step. Then we're gonna have a storage
device and I say my blob storage. Oh, that'd be all lowercase my blob storage. And that's
already taken. So we'll say exam pro blob storage and it can't have hyphens.

There we
go. And so we're gonna launch it in US East. We have the difference between standard and
premium. I think we'll stick with standard We have storage type v2, or v1 or Blob Storage,
we want Blob Storage, we have some replication options here, I'm just gonna leave it alone.
We have access here hot or cool, we're just gonna leave it hot. And we can just look at
networking here for a moment, we're gonna leave this alone, we're just gonna look advanced
at the moment. So nothing exciting there, we go back to basic hit review, plus create,
we'll have to wait for validation. We'll go ahead and now hit Create. And then it should
say deployment underway, we're waiting to see to say deployment complete, you might
be getting into the rhythm of how grading services now it's almost always the same process.
And we'll just wait here till this is a complete. Okay, great. So I just waited a minute there.
And now, that's all set up. So let's go ahead and hit go to resource. And then we have a
lot of stuff around here.

So what we want to do is want to start uploading files. But
I think we have to create a container first to go all the way down here, left hand side
and go to containers, we're going to create a new container, I'm going to call this Star
Trek, it's going to be a private container. So it's only just for me, we'll hit Create.
And now we should be able to click into that container.

Alright, so now we know that we
have that container, what we can do is go ahead and upload our first file, I just happen
to have a file on my desktop here. So I'm just going to go select that there and upload.
All the options by default are great here, we'll just hit upload. And there we go. So
we just upload a file into our blob storage. Yep, so that's all there really is to it.
So now that we're all done there, we can just go ahead and delete this container.

So I think
we'll just go back to storage accounts. Not sure if we have to delete the containers,
first, I guess we'll find out. And we'll just go here to Blob Storage, we'll go ahead and
hit Delete. And we'll hit yes, we'll go to delete. And there you go. So just go back
to Microsoft Azure there and back on your desktop, and I'll see you in the next follow
along. Hey, this is Andrew Brown from exam Pro. And I'm going to show you how to use
Cloud Shell. So if you want to, it actually doesn't matter where you are, because Cloud
Shell is accessible anywhere. When you're in the Azure portal. It's actually this icon
up here.

So what I want you to do is go ahead and click that. And what it's going to do
is ask you whether you want bash or PowerShell, I'm going to choose PowerShell, we're going
to use our free tier and it's going to we're going to need to create some storage with
it. I'm just gonna drag that up there a bit. So we'll just wait for it to create that storage
device. So now we get this blue screen, which is very typical of PowerShell.

And so it's
gonna have to initialize our accounts. So we're just gonna wait here a little bit until
that's done. Great. And so now we have our Cloud Shell. And so one of the advantages
of having a Cloud Shell is that if you want to do the CLR, and start doing things programmatically,
within Azure, you can do that very easily here. So we already have the CLR installed,
we can just type in AZ whoops, typing clear here, AZ account list. And there we go. So
we got some account information back there. So that's all I wanted to show you for PowerShell,
we can go ahead here and I think we can just power it off, or that would restart it, we
just hit X. And there you go. That's it. Hey, this is Andrew Brown from exam Pro. And we
are looking at the Azure Trust Center. So all it is it's a public facing website portal
providing easy access to privacy, security and regulatory compliance information.

So
there it is, that is the portal. If you type in Azure Trust Center, that's the way you
get to it. And the idea here is that you know, whatever information your organization needs,
it's just all public facing, so you don't even have to log in to get access to it. But
it just helps you make security decisions for your company. Alright, so I just went
ahead there and went to Google and typed in Microsoft Trust Center.

And so this is the
page here. So if we just scroll on down here a little bit, we'll see that we have Microsoft
Azure. And here we have a bunch of options where we can read about their security, security,
privacy, privacy and compliance. Let's go into compliance for Azure. and here we can
see a list of a bunch of compliance programs that Azure is meeting. So we have a ton here.
So if we went into GDPR It might ask us to sign in. So I'll just hit Andrew, in Canada.
And I agree. Okay, and so now I can read all about GDPR. So it gives me a lot of detailed
information about this compliance program and how it applies to Azure.

So there's a
lot of interesting stuff here, I'll just go back here, we can click on security. And so
there's just some generalized information here. But generally, what you're looking for
when you are coming to here is really this compliance programs. That's what everybody's
always looking for, is to read about that stuff in detail. And so that's all you have
to do to get there. So yeah, there you go. Hey, this is Andrew Brown from exam Pro, and
we're looking at compliance programs for Azure. So enterprise companies will not buy your
software solutions unless they are secure. And so how would you go about meeting their
security compliance requirements, and that's where compliance programs come into come into
play.

So basically, an enterprise company is going to say to you, we'll only do business
with you if you are NIST compliant, or if your P IP da compliant, or if you are HIPAA
compliant. Or if you are FIPS, 140, hyphen, two compliant, you might say, well, that's
a lot of stuff. But you know, after a while, you just start to remember them. But at first,
it is extremely daunting, but I thought it'd be fun to go through some of the compliance
programs. And it actually might help your exam, they might ask you about some of these
programs. So we'll just go down the list. So the first one here is the criminal justice
Information Services, the cgis. So this is any US state or local agency that wants to
access the fpis cgis database is required to adhere to this security policy. So that's
their compliance program. Then you have the Cloud Security Alliance star certification.
This is an independent third party assessment of a cloud providers security posture, then
you have general data protection, regulation, the GDPR.

So a European privacy law imposes
new rules on companies, government agencies, nonprofits, and other orgs that offer goods
and services to people in the EU or collect and analyze data tied to EU residents. So
if you're dealing with data in the EU, you got to care about the GD p r. You have EU
model clauses, so contractual, contractual guarantees around transfers of personal data
outside the EU. Then you have HIPAA. So this is the one that you're going to want to remember
this is the Health Insurance Portability and Accountability Act. So for US federal law
that regulates patient protected health information, whenever you're dealing with hospital stuff
you're dealing with HIPAA, then you have is ISO 27018. So this is an international standard.
And it is the code of practice or so Code of Practice covering the processing of personal
information by cloud service providers. That's a good one to remember. Then we have Ida.
So this is a multi tier cloud security, Singapore outside of Singapore, it is Singapore's the
organization, but this one is called mt CS.

So operational. Singapore security management
standard, a standard, a common standard that cloud service providers can apply to address
customer concerns about the security and confidential confidentiality of data in the cloud and impact
on businesses of using cloud services, not one you have to remember but interesting know
this one you want to remember service organization controls sock One, two and three independent
third party examination reports that demonstrate how the company achieves key compliant controls
and objectives. I know there's a lot sorry. Then we have the National Institute of Standards
and Technology NIST cybersecurity framework CSF, you definitely want to know this one.
It's a voluntary framework that consists of standard guidelines and best practices to
manage cybersecurity related risks. Then you have the UK Government, G Cloud. So that's
cloud computing certification for services used by government entities in the UK. And
the last one is FIPS. And we will be talking about FIPS. Again, in this course here. So
this is the US and Canadian government standard that specifies the security requirements for
cryptographic modules that protect sensitive information. So there you go, that's compliance
programs. Hey, this is Andrew Brown from exam Pro, and we are looking at Azure Active Directory.
So Azure Active Directory, abbreviated to ad is Microsoft's cloud based identity and
access management service, which helps your employees sign in and access resources.

If
you work for a larger company and they use Microsoft products. They're probably using
Active Directory and you're already familiar with this. But if you're not, let's learn
up on this because this is a super important service to the Azure and Microsoft ecosystem.
So Azure directory would work with external resources. So it would maybe give you access
to your office 365 to the Azure portal, which is what we're using for two different types
of SaaS applications, it could also grant us access to internal resources. So if you
have applications running within your network, or maybe you're using Azure Active Directory
to gain access to actual workstations on premise, so actual workstations with Azure Active Directory,
you can implement single sign on. And Azure Active Directory comes in four edition. So
we have free, which provides MFA SSO, basic security and usage reports user management,
then we have the next level up office 365.

And by the way, each version has the features
prior to it. So with Office 365 apps, you get company branding SLA to sync between on
prem and cloud, which is really nice. For premium one, you get hybrid architecture,
advanced group access, can conditional access, and then premium to you have identity production
and identity governance. But if I didn't make it clear, active directory is what you use
to help your employee sign in and access resources. That is what it does, it controls access to
resources. So there you go. Hey, this is Andrew Brown from exam Pro. And we are looking at
multi factor authentication.

So what is MFA? So MFA is a security control where after you
fill in your username, or maybe three email and password into a login portal, so this
login portal could be the Azure portal, this could be you logging into Facebook, the idea
is that you have to use a second device such as a phone to confirm that it's you logging
in. And so why do we use MFA? Well, MFA protects against people who have stolen your password
because they might have your password, but they don't have your phone or whatever device
that you're using for MFA. So, MFA is an option most cloud providers have. And just as I said
before, most social media websites have it. So Facebook, Twitter, they all have it.

So
just to give you a visual example, we have a forum where I'm entering my email and password,
then we have a phone, which is our MFA in this case, and then we get authorization.
So the first case that is one factor, right, so if we didn't have to use a phone or another
device, I'd be considered one factor. And then multi factor or two factor authentication
would be the, the addition of another device to confirm that that it's you. And pretty
what pretty much what's common is to use your phone and to install an app on your phone.
And then what that phone will do is it will give you a random number that expires, like
every, I don't know, 10 seconds, you have to enter that in with your username and password
or as a second step, and then you gain access to Azure Portal. Hey, this is Andrew Brown
from exam Pro. And we are looking at Azure Security Center. So Azure Security Center
is a unified infrastructure security management system. It strengthens the security posture
of your data centers and provides advanced threat protection across your hybrid workloads
in the cloud.

That sounds really fancy. But let's take a look at what that is. So that's
what it is down below. It's a bunch of graphs. And it's gonna tell you, if you are compliant
with particular policies, they'll tell you about your security, hygiene, all sorts of
security stuff, so you have a good visual about your security within Azure. So there
you go. Hey, this is Andrew Brown from exam Pro, and we're looking at Key Vault. So Azure
Key Vault helps you safeguard cryptographic keys and other secrets used by cloud apps
and services.

And so within Key Vault, it has a bunch of functionality in it. So one
thing it can do is manage your secrets store, store and tightly control access to tokens,
passwords, certificates, API, keys, and other secrets. It also has key management. So it
can create and control encryption keys used to encrypt your data. Then we have certificate
management so easily provision, manage and deploy public and private SSL certificates
for use with Azure and internal connected resources. And then it also is a hardware
security module. So secrets and keys can be protected either by software, or FIPS, 142
or 140, hyphen to level two validated HSM, I told you that we would be talking about
hips again, and we are right now. So to understand HSM The last thing we're talking about, which
stands for a hardware security module, it's a piece of hardware designed to store your
encryption keys.

And it literally looks like something like that. So Azure would have bought
one of these are a tons of these and that is what is storing your cryptographic keys.
And this piece of hardware is special because when you store keys on it, they're stored
in memory, meaning They're not written to disk. If that thing shuts down, the the keys
are gone and nobody can steal your data. It's just a security measure. And that security
measure has to do with FIPS. Okay, so FIPS 147. Two is a US and Canadian government standard
that specifies the security requirements for cryptographic modules to protect sensitive
information. So for hsms, that are multi tenant, they're generally going to be a 140 hyphen,
two compliant, multi tenant, meaning that, that there's more than one customer that is
using that piece of piece of hardware, but they're virtually isolated from each other.
And then if you have a single tenant HSM, they're generally going to be FIPS 140, hyphen,
three compliant, so a single customer on a dedicated HSM, it's better to be FIPS 140,
hyphen, three compliant. But what FIPS 140 hyphen two is pretty good for most people.
So there you go.

Hey, this is Andrew Brown from exam Pro. And we were looking at Azure
DDoS protection. So before we talk about DDoS protection, let's talk about what DDoS is,
that stands for distributed denial of service attack, this is a malicious attack, to disrupt
the normal traffic by flooding a website with large amounts of fake traffic. So to get this
better visualize, imagine there is somebody that doesn't like you, and you have your servers,
and they want to attack you and they want to stop your your server from running. So
what they can do is they can send a remote commands to a bunch of computers that they
control. And these could also be in a cloud service provider or their own data center,
and from a foreign country. And what they'll do is they will send 1000s upon 1000s of fake
requests to your server.

So they'll they'll have packets they're sending to you with IP
addresses, all those IP addresses are made up so we so they're just fake traffic, and
then they will flood you with so much traffic that your your servers are going to crash,
the network is going to crash, you're not gonna be able to do anything. But the great
thing is, is that the majority of cloud service providers, including Azure have built in DDoS
protection. So just by using a cloud service provider, you're going to have a certain level
of protection against DDoS attacks.

And to talk about the different levels. Azure offers
two tiers of DDoS protection. So DDoS protection, basic is free, it's already turned on. It's
it protects all of azures global network. So if you're using Azure, you already get
DDoS protection, if you need something more advanced, because the attacks are extremely
more complex, and you need more visibility, and you need professional support. There's
the DDoS protection standard plan. So that starts at $2,944. You might say that's high,
but trust me, I've experienced the dossing. And when you're a DDoS, you're willing to
pay that amount and it works right away, you'd get metrics alerts reporting, you'd get a
DDoS expert, so that you can talk to you or a team that you can talk to. And they'd have
a guarantee of application cost protection. So SLA, so if, if they couldn't prevent the
attack, and if you lost the cost of money, they're going to give you credits or help
you out. Okay, so that is DDoS protection for Azure. Hey, this is Andrew Brown from
exam Pro. And we are looking at Azure firewall, which is a managed cloud based network security
service that protects your Azure virtual network resources.

So the way it works is you're going
to set up a V net, which is a virtual network, and you're gonna attach that firewall, you're
going to use it as a point of entry for all your traffic. And then what you're going to
do is you're going to have spoke v net. So when I say spoke, I just mean other virtual
networks that you've created, that are intermediate to your traffic, so the traffic is gonna pass
through that V net into those other ones. And our V net with the firewall is going to
decide what traffic's allowed to flow through and what's not to which other v nets that
have specific virtual machines so that we get protection. But let's talk about some
of the features of the Azure firewall. So the first thing is you, you essentially create
enforce at essentially creates enforce and logs application network connectivity policies
across subscriptions, and virtual network. So subscriptions, meaning multiple accounts,
uses a static public IP address for your virtual network resources, allowing outside firewalls
to identify traffic originating from your virtual network that's very useful.

High availability
is built in at no additional cost. So you don't have to create load balancers and do
all that work yourself. You can configure, you can configure it during deployment to
span multiple easy's so that it has high availability. There's no additional costs for a firewall
deployed in an availability zone. There's an additional cost for inbound and outbound
data transfers associated with ACS, which is, is, is typical. So there you go, Hey,
this is Andrew Brown from exam Pro. And we're looking at Azure Information Protection, also
known as AIP. And what this does is it protects sensitive information, such as your emails
or documents with encryption. And it restricts access based on rights. And it's integrated
directly into Office apps. So if you're using PowerPoint, or word or exchange or any of
the Microsoft 360 suite, where you're going to have this, this button called protect,
and you can drop it down and you can change the access controls the privacy controls of
your data.

And this is really important if you are a larger Corporation. And this kind
of stuff really matters to you. So that is Azure Information Protection, just think of
that button that you click, and then you have those security controls. Hey, this is Andrew
Brown from exam Pro. And we're looking at Azure application gateway. So I believe we
talked about application gateway earlier. And it is a load balancer. And specifically,
it's an application load balancer. So it operates on layer seven. So it's dealing with HTTP
requests. And because it's dealing with HTTP requests, it can actually understand the nature
of a request. And you can create rules to route traffic to other places. Another really
great feature of Azure application gateway is you can attach a web application firewall.
And it will protect on the layer seven. So you can set up rules, just as you were setting
up routing rules, you can set up security rules about what should be able to flow in
and out of this load balancer to give you a visual down below, you have the internet,
you have your application gateway, and you can optionally attach your your wife to it.
And as traffic flows through, you can create some rules.

So let's say you had a server
that served up all your JavaScript assets, and a server that served up all your images,
you could make a rule that saying when the path matches this, only send it to this server
and when the path matches that, only send it to that server. Okay, so there's, there
you go, that's Azure application gateway. Hey, this is Andrew Brown from exam Pro. And
we are looking at Azure Advanced Threat Protection, also known as ATP. And so before we talk about
the service, let's talk about what is IDs and IPS. I know there's a lot of acronyms
being thrown at you today.

So IDs stands for intrusion detection system, and IPS stands
for intrusion protection system. And what that is, it's a piece of technology that monitors
a network, or systems for malicious activity, activity or policy violations. And so the
difference between an IDP IPS is or sorry, IDs and an IPS is an IDS detects an IPS protect,
so it actually takes action in the ladder. And I'm not sure if advanced advanced threat
protection is just an IDS, or an IPS, but it doesn't hurt to call in the same category.
It's not a big deal. So it Azure Advanced Threat Protection, ATP is a cloud based security
solution that leverages your on premise Active Directory signals to identify, detect and
investigate advanced threats, compromised identities and malicious insight actions directed
at your organization. So there you go, that's what it does. Hey, this is Andrew Brown from
exam Pro. And we were looking at the Microsoft Security development lifecycle, also known
as STL. Or some people might call it an STL. So STL is an industry leading security security
asset assurance process. And it's a Microsoft wide initiative and a mandatory policy since
2004.

So that means Microsoft uses it, because they made it. The STL has played a critical
role in embedding security and privacy in Microsoft software, software and culture.
So building security into each STL phase of the development lifecycle helps you catch
issues earlier. And it helps you reduce your development costs. So it's talking about these
phases. These are the phases for it. So you have training requirements, design, implementation,
verification, release response. If you wanted to implement this yourself, I bet they have
a big white paper on it like a PDF you can read through, but it's just a business process.
And it's just saying, the sooner we implement stuff into our pipeline in terms of development,
the sooner we can reduce security risks, and that is actually called pushing left because
the farther left you start implementing security the earlier on the better.

Security will be
in your entire pipeline. So there you go. Hey, this is Andrew Brown from exam Pro. And
we are looking at policies. So an Azure policy is a service that you can use to create, assign
and manage policies. A policy allows you to enforce or control the properties of a resource.
an Azure policy evaluates resources in Azure by comparing the properties of those resources
to business rules. And these business rules described in JSON format are known as policy
definitions. So if it's not clear, just yet, do not worry, we're going to be looking at
policy definitions very soon. But just understand what Azure policies do. They're used to create,
assign, manage policies and enforce and control properties of your resources. Hey, this is
Andrew Brown from exam Pro. And we are looking at Azure role based access controls our b
a c, so this is a service in particular, but it's more of a concept of how all the components
of gaining access to resources works.

So as your role based access control helps you manage
who has access to resources, what they can do with those resources, and what areas they
have access to. So you have a role assignments. And this is the way you control access to
resources. So a role assignment consists of three elements, you have the security principle,
the role definition, and the scope. So talking about the security principle, first, this
represents the identity requesting access to the Azure resource. So this is who wants
to have access, you could have a user, which is an individual profile in your Azure Active
Directory, you could have a group of users in your Azure Active Directory, you could
have a service principal. So this is a security identity used by applications or services.
To access specific Azure resources. This is what a a service wants access. And you'd have
managed identity, this is identity in Azure Active Directory that is automatically managed
by Azure, that one's a bit more harder to describe.

But that's not that important for
the exam. Then the last part of the component here is scope. So this is the set of resources
that the set of resources that the role assignment is going to be granted access to. So scoping,
scope, actually strolls at the management subscription or resource group level. So to
explain that, the idea that I'm trying to get here is that you have resources down below,
right, and that is what you want to gain access to. But you can set scope at the management
group level, you can set scope at the subscriptions level, you can set scope at the resource groups
levels. So just to talk about the three management group is when you're managing a bunch of accounts,
subscription is an individual account and resource groups is a grouping of resources.
So wherever you want to apply that scope, you can choose any any one of those three,
they're now looking at a role definitions or role definition is a collection of permissions.
And so remember, we were talking about a policy earlier, this is kind of where that comes
in.

Because policies are permissions. A role definition lists the operations that can be
performed, such as the read, write, and delete, roles can be high level like owner or specific
like a virtual machine reader. And just to give you an example, so as your has built
in roles, and you can define your own custom roles, but I think you have to pay more to
be able to do custom roles, because that's through Azure Active Directory. But the built
in roles you need to know which is owner, contributor reader, and user access administrator,
these are the four fundamental built in roles. Now, look at the graphic there, we have the
green and the red. So for an owner, you can read, you can grant you can create, update
and delete resources, you can do everything as a contributor, all you can do is read,
create, update, and delete, you can't grant access, you can't, you can't allow other users
to gain access to your resources. Then you have a reader.

So a reader, as the name implies,
can only read resources they can't create and delete, they can't grant access to other
users. And then a user acts as administrator only grant. So their job is to give access
to other resources, but they can't do anything themselves. So there you go, that is role
based access controls. Hey, this is Andrew Brown from exam Pro. And we are looking at
Lock resources. So as an image, you may need to lock a subscription resource group or resource
to prevent other users from accidentally letting other users delete or modify critical resources.
So in the Azure portal, you can set the following lock levels you can set it to be cannot delete.
And so in the Azure portal, this will just be called delete. And this authorized This
will allow authorized users can still read and modify resource but they cannot delete
the resource.

Then you have read only and in the Azure portal, it's going to be read
hyphen only. And this is so that authorized users can read a resource, but they can't
delete or update a resource. Hey, this is Andrew Brown from exam Pro. And let's look
at Azure Management Group. So Azure Management groups is a way of managing multiple, multiple
subscriptions. And when you hear the word subscriptions in Azure just think accounts,
because that's an easier way to think about it into a hierarchical structure. So each
directory is given a single top level management group called the root Management Group. All
subscriptions within a management group automatically inherit the conditions applied to the management
group. And so this is a graphical representation.

So at the top, you have your root management
group, and then create management groups underneath. So human resources, it marketing, production
developers, whatever you want. And underneath, you have those individual subscriptions. Again,
just things like an account. So that is Azure Management groups. Hey, this is Andrew Brown
from exam Pro, and we are looking at Azure monitor. So Azure monitor is a comprehensive
solution for collecting, analyzing and acting on elementary dental telemetry from your cloud
and on premise environment. So if you were to go into Azure monitor on the left hand
side, you'd see all these options, activity log alerts, metrics, logs, service, health,
etc. And so that's what Azure monitor is, it's it's like an umbrella for a bunch of
services underneath. And so here's an example of a bunch of information in the form of a
dashboard, about monitoring and analytics. So with Azure monitor, you can create a Visual
Dashboard, as we can see here, you can create smart alerts, you can create automated actions,
and you can collect logs, so that you have log monitoring.

So there you go. Hey, this
is Andrew Brown from exam Pro. And we're looking at Azure service health. So this is about
information about current upcoming issues such as service impacting events, planned
maintenance, and other changes that may affect your availability. So going down the list,
we have Azure status, which informs you of service outages in Azure as your service health
as is a personalized view of the health of the Azure service and regions you're using.
And then Azure resource health is information about the health of the individual cloud resources,
such as your VM. So if you're ever wondering the state of your health, you can use Azure
service health and if you noticed, it was an option under Azure monitor. So if you're
looking for it, that's where you go to find it. Hey, this is Andrew Brown from exam Pro,
and we're looking at Azure advisor. So average Azure advisor is a personalized cloud consultant
that helps you follow best practices to optimize your Azure deployments.

The ad, the advisor,
dashboard displays personalized recommendations for all your subscriptions for the following
five categories, high availability, security, performance, costs, and operational excellence.
And since we're in the security category, that's what we mostly care about is security.
But it would also be important for the pricing section there as well. So the first thing
we're gonna look at is actually the Azure advisor recommendation for costs. So here,
you can see that it's telling you where the most impact can occur and leaving, tell you
how much money you can save if you follow its recommendations of the new app security.
And so here, it has 21 recommendations, if we click into it, it would tell you what kind
of things that you could improve in your system to improve your security.

So there you go,
that's Azure AD. Hey, this is Andrew Brown from exam Pro. And we are looking at SLA s
for Azure. So SLA stands for service level agreement. And this describes Asher's commitment
for uptime and connectivity. That, that means like if you have a web server, Azure is going
to say, yeah, we guarantee 99.9% of the time it's going to remain running throughout the
year, it's not going to go down. So that's kind of the idea behind an SLA for Azure SLA
is are individually individualized per Azure service. So they don't have broad SLA is you're
gonna have to investigate each service to figure out what the commitment of Azure is
for that service.

And the way we describe these SLA is in terms of uptime and connectivity
is through performance targets. Now, performance target is just a representation in the form
of a percentage. So if somebody were to say to you, you know, this service hat is 99%,
likely of not failing, that's called two nines. And then you have the three nines, and then
you have five nines, and then you have nine nines. And the higher this number goes up,
the more reliable the the better coverage this SLA is going to give you so you want
something that has a higher number of nines, and it's not always just nines, it could be
99.9.

Nine 5%. But just understand that when someone says nine nines, they're talking about
that last value there. And it is like one of the highest. One of the highest guarantees
that SLA can give, I can't remember, there's like 11 nines, there might be 11 nines. But
generally nine nines is the upper limit. And just to mention it is that for Azure, if you
are using the free tier of shared tears, you do not get SLA because they just do not provide
support for those because you're consuming everything for free.

So you have to be paying
to get the advantage of that SLA guarantee. So I did say that the SLA is our service specific.
And so if you want to actually go investigate, all you got to do is type in Azure SLA into
Google. And you should be able to make your way to this page. And what we can do is we
can click into any of these here. So if I go to database, and we choose Cosmos dB, and
we just expand our information here, we get tons of information about their SLA s.

And
then our performance targets are down here. So we have this for availability, this is
for read availability. So they have a lot of information. And as I said, it's for basically
any service, anything you want, just click into it. And they have all that SLA information.
So there you go. Hey, this is Andrew Brown from exam Pro, and we are looking at service
credits for Azure. So a service credit is when a custom customer would get a discount
on their Azure bill as competent as compensation for an underperforming Azure product or service
based on the SLA.

So, those guarantees that Azure gives, if they don't meet those guarantees,
then they owe you money. And the way they do it is through credits, right. So credits
is just like virtual money, I actually don't know what a like what a service credit is
worth. But I just know that you know, if they if they do not meet those SLA is they're gonna
back it and give you your money back in some sense. So just an example here, if we have
Azure virtual machine, remember, a virtual machine is a server, if you had monthly uptime
percentage of 99.9.

So if it was under that, then you get a service credit of 10%. If it
was under 99, then you get a service credit of 25%. And if it was under 95, you get a
service credit of 100%. So I guess what that means is maybe it's the cost of what you spent.
But anyway, I'm not exactly sure. But I would take a guess that if let's say the uptime
was under 95%. And they're going to give you a service credit of 100%. Maybe it's 100%
of your resources given back to you. So if you spend $100, you get that $100 back. So
there you go. Hey, this is Andrew Brown from exam Pro. And we are looking at composite
SLA. So we had said earlier that different services have different SLA s. And the problem
with that is that when you have different servers different SLA is it's kind of hard
to understand what the actual guarantee is when you use them in combination.

So composite
SLA is just a way of understanding what the actual SLA guarantee underneath is for the
performance target. So imagine you have a web application. And that web application
uses an SQL database. So the web app has a guarantee of 99.95%. Because maybe that's
the performance target for the virtual machine, and then the SQL databases 99.99%. So what
is it? Is it 95 99.95%? Or is it four nines? We don't know. So if we had to calculate,
calculate that for the SLA with the web app and SQL database, that would come out to 99.94%.
Don't ask me on the math, that is the example that we are given.

But just understand that
that's what it would come out to become it would come up to 99.94%. And so you'd have
an overall reduction of the SLA, whereas the SQL database would have 99.9%. So how could
we improve our SLA and consider that in our design, so we get the the SLA that we want.
And so you can do is you can add in fallback systems that will improve the overall SLA.
And if you logically think about it, it makes sense why that would work. So imagine you
have that SQL database and it goes down. But if you had a queue, and that queue was saving
all the transaction attempts that the web app was trying to write to the database and
saving the queue, it wouldn't matter if the database went down.

Because once the database,
one backup, all those transactions would be there. And then those transactions would then
complete. And so by using the cue, which has a 99.9% uptime, based on the math down below,
and don't ask me how the math works, but the the the outcome would be an SLA of 99.95%.
And so that's an improvement over 99.94% so that is called composite SLA isn't there you
go. Hey, this is Andrew Brown from exam pro and we are looking at the TCS calculator for
Azure. So if you remember, earlier in the course, we talked about the total cost of
ownership. That's what TC O stands for. It's about showing an enterprise enterprise that
that operates on premise how much money they would save if they moved on to cloud on to
Azure. So that's what the TCL calculator does, it estimates the cost savings, you can realize
by migrating your workloads to Azure. So what it can do is it can generate, generate out
a detailed report and export as a PDF to send to your decision makers.

Now you have to input
all the information in but it's going to help you convince your boss convinced the executive
level that it's time to move over to the cloud, because they'll be saving tons and tons of
money. And so if you want to use that calculator, you just got to go to azure.microsoft.com,
forward slash pricing, Ford slash calculator, and it's going to give you an idea of how
much you'll save. And now this is only a little bit of what it generates out. Because it's
a it's a very detailed report. But in this example, it would compare on premise add to
the cost savings of Azure. And in this case, this person would be saving $130,000 over
five years. And it's going to vary on use case. But yeah, that is the TCL calculator.
So I just wanted to quickly show you the TCL calculator in action, if you want to find
it yourself, just type in Azure TCL calculator into Google. And you should be able to find
your way here. So what I've done here is I've defined my workload.

So in my workflow, I
defined some servers. So we have some Linux servers, we have 10 of them four processes,
four cores, eight gigabytes of RAM. And then here I've added four servers that are databases
running Postgres, then I added some HDD drives. So I said three terabytes, two terabytes backup,
etc. And then I defined some network bandwidth. So going on to the next step, we're going
to adjust our assumptions. This helps us to make it even more accurately estimate. So
we can choose our our currency, some other additional features, we might want to consider
where we might save money, like using Azure hybrid benefit. And then down below, we can
tweak some of our costs that we do know about for our on prem. So there's a lot here to
tweak it to make it more accurate. And then if we go to next, we're going to get our,
our savings, here's just wait a moment.

And so over a five year period, we should save
$666 and 158 cents. And you can drop it down, if you want to do one year we'll go to one
year. So here it says $381. And we have a lot of graphics here, as you can see, and
then down below, you should be able to download it. So you can just go ahead and download
the results there. And that is the TCL calculator. Hey, this is Andrew Brown from exam Pro. And
we are looking at the Azure Marketplace. So the Azure Marketplace is a place where there
are apps and services made available to you by third party publishers to quickly get started
on Azure. And so the apps available of the apps and services that can be available could
be free, they could be free trial that could be paid as you go, or that could be bring
your own license. So just an example of what that looks like if you were logged into the
Azure portal, and you searched for marketplace, what you could do here is you could type in
a variety of things.

So like here, I'm typing in WordPress. And here I have a bunch of WordPress
is that are provided by third party publishers that have been vetted by Azure. And and again,
they could cost money, they could have a free trial, it could be 100%, free, but whatever
you need, it's generally in the marketplace, it's a great place to go check out. So just
be aware of that. So I just wanted to quickly show you the Azure Marketplace. So you'd have
to have an account to actually see it. But we do show you that in this course.

But anyway,
I'm just going to go up here to the top and type in marketplace. And this will pull up
the marketplace. And here you can see we have a huge amount of categories of things that
we can launch. So whatever we need, and I think I showed before WordPress, but we'll
type that in there. So enter in WordPress, and there's all these servers. So you can
click into there. It might, it might have plans associated with it if there's any price,
but you just go ahead and hit Create. And then that would start the process of creating
a virtual machine and you go through that and you'd subscribe to whatever the underlying
costs would be. But you can see there's just tons of stuff in here. So and you can sort
by price, sort by operating system.

So there you go. Hey, this is Andrew Brown from exam
Pro. And we are looking at Azure support plans. And so we have four support plans. We have
basic developer standard and professional direct. Technically, we have five we count
enterprise, I don't think it's going to be on the exam. And there's not a lot of information
around it because you got to call sales to find out that those enterprise price and support.
So let's just go through the difference between these things is it's definitely important
for your exam. So we're looking at the basic support plan and everybody gets the basic
support plan.

When you sign up. You get email support only for billing and accounts. If
you have any questions about your your bills, or questions about your account, you can get
answers from support. Now, for developers standard and professional direct, you get
tech support, and you get email tech support for all levels. And generally, over talking
just for developer, they're only going to reply during the business hours. But if you
had standard or professional direct, they have people answering emails, 24, seven around
the clock, I think the general response time for email support, no matter what level it
is, is about 24 hours. But you know, it's just going to vary. So I would say that if
you need something that is more urgent, then you're going to want that phone support. And
so phone support is for standard and professional direct, and that's 24. Seven. So if it's a
Saturday, and it's 9pm, and you need to call support, you can do that. And sometimes you
only have to wait 10 to 15 minutes, I'm not sure if Azure has chat, but it's very common
for cloud service providers to provide both chat and phone support, and you wait 10 to
15 minutes, and you get access there.

Now for third party support, if you are using
technologies, like Ruby on Rails, spring Jango, those things aren't really part of Azure,
they're third party software that you're using to build your web application. And Azure is
going to try to do their best effort to support you, even though it's not what they've built.
And that's not what they have to do. But they're going to do their best effort for developer
standard and professional direct. So that is advantage for paying for support. Now,
in terms of response times, when you open up a ticket, you can say, the severity of
your ticket, and that's going to determine how fast they respond if you need the response.
So if there's a ticket, and you say that it has minimal business impact, so maybe it's
like general questions or something that's going to be considered a severity C, and for
developer in standard, they're going to respond within eight hours or less, for professional
director can get that in four hours or less.

So again, it's just general questions. Now,
if you have something that it's going to have a moderate business impact, then the time
is going to be a lot faster, they call that severity be. So it's going to be less than
four hours. And then for professional direct is going to be less than two hours. And so
this would be if your production system was compromised, but it's not taking your business
down. Now, if you have a critical business impact, that means your your web app is 100%
down and you are losing money, by the minute, you open up a ticket called critical business
impact, which is severity c actually should be severity a it's just a spelling mistake
there.

But if they would respond within an hour or less. So what I find is that there's
like even though they say an hour or less, it's not always the case. But that's generally
how fast they're going to respond. Now for other services, you get as your advisor, the
health status, the community support, and Azure documentation, all these support plans.
The only reason we're mentioning this here, and they mentioned it on their support page,
but they're just trying to say, hey, just be aware that you have these additional support
tools that you can use at any given time that are self serve, so the community support and
the Azure documents.

Now if you need some general guidance on your architecture, you're
going to get that with developer and standards. So you can definitely ask questions there.
If you are using professional direct, you actually get access to team in that in that
team, there's a pool of people that you may you may get when when you talk to them, where
they'll give you a guidance, and they call those operational support and proactive guidance
by by pro direct delivery managers. So professional directors, it's called pro direct. And so
they have delivery managers, I don't know if that means that they're developers. But
the point is, is that they're going to put some extra effort to help you there. And then
also, you can actually access webinars led by Azure engineers.

So that's really cool
as well, if you pay for the professional direct. So just going through all the support plans
here for the pricing. So basic is free. And when you sign up, if you don't use the plan,
you are using basic. And then for developers $29 per month USD for standard, it's $100
USD per month. And for professional direct, it's 1000 USD dollars per month. So there
you go, that is the Azure support plans.

So I just wanted to show you how to get to this
support plan page in case you want to investigate a bit further, but pretty much my graphic
sums up everything that is included in the SERP support plans. So if you want to find
this, you just go to Azure, just type in Google as your support plans and you should be able
to make your way here, you'll notice we have the four plans and then there's enterprise
support. And if we go here, there's more information on this. But again, you'll have to call support
to find out the actual price and offerings there. But yeah, just take a look here and
see if there's anything I missed, but I'm pretty sure I have have everything you need
in the main graphic from the slide prior. Hey, this is Andrew Brown from exam Pro. And
we are looking at Azure hybrid benefit.

So many customers have invested already in Windows
servers licenses, and they want to repurpose their investment on Azure. This happens because
enterprises had been working with Microsoft servers even before Azure existed, or they
were on premise originally. And so they wanted to use the software. So they purchased the
licenses, but now they're ready to move on to Azure. And so since they've already got
a special deal with Microsoft, because they purchase those licenses, they want to keep
those deals and bring them to the cloud. So that's where the Azure hybrid benefit comes
into play, also abbreviated as hub.

Sometimes it's called Azure hybrid use benefit in Microsoft
documentation, but for some reason, Azure, they just dropped the word use, but the abbreviation
is hub. So this gives customers the right to use these licenses for virtual machines
on Azure. And so such types of virtual machines would be Windows servers, or SQL servers.
And I would imagine this would probably happen with a lift and shift, which I think we described
somewhere in this course.

So hub can be turned on and off at any time for existing virtual
machines. And hub can be applied at deployment time for new VMs. And I just wrote, bring
your own license down here, just because we are talking about licensing, and I just want
to get you more exposure to that term, bring your own license, b y o L. And so that just
means that someone's purchased the license, and they want to apply it, they want to bring
it on to Azure. So there you go, that is Azure hybrid benefit. So I just wanted to quickly
show you this page here, which is the Azure hybrid benefit page. If you were to type into
Google as your hybrid benefit, you definitely make your way here, what I wanted to show
you is that they actually have this nice little calculator down below.

So if you do have licenses,
and you're bringing them over and you want to run workloads on Azure, you can fill this
stuff out, and it'll give you an idea of what you might save. So I just wanted to make you
aware of that. So there you go. Hey, this is Andrew Brown from exam Pro. And we are
looking at Azure subscription. So an Azure subscription, I would describe as the equivalent
of saying my Azure account. I don't know why they use the term subscription, because to
me, it's just confusing. But I always try to reinforce that it's just your account.
And there are four tiers of Azure subscriptions. The first is the free subscription. So when
you first sign up, this is the the account that your subscription you're going to have,
you have to provide a credit card to complete the process, you're going to get 200 USD credits
free for 30 days, and certain Azure products will be free for 12 months.

Now, the whole
point of this free subscription is to help you avoid charges. And there are some limitations.
I remember when I was trying to add another user. I couldn't grant them access. So there
was definitely some some limitations here too, to prevent you from being charged, but
it's not a complete sandbox. So it is possible to get charged and count if you start using
things outside the free tier, or if you burn through your credit. So just be careful there.
And then once you are ready to switch or to upgrade and unlock everything, then you can
switch to pay as you go subscription, also abbreviated to PAY g some people might call
that on demand.

And so for this, you still need a credit card required. But since you've
already entered it in the free subscription stage, no problem here, you're going to be
charged at the end of the month based on on consumed cloud resources, then you have an
enterprise agreement. So if you are an enterprise, you can make a deal to Azure and agree to
receive a discounted price for licenses and cloud service. But I bet you're paying a lot
of money, like compared to the normal person, but the deal is worth it for you.

So just
be aware, if you're an enterprise, go talk to Azure, they want to make a deal. And the
last is the students subscription. So the students subscription, you do not require
a credit card, you get $100 USD credits for 12 months, but it requires a valid student
email. So there is a little bit of a vetting process there. So you definitely have to be
in school to get that but it is a very nice option to have. So there you go, that is the
Azure subscription models. Hey, this is Andrew Brown from exam Pro. And we are looking at
Azure pricing calculator. So configure it estimate the costs of Azure products, you
don't have to sign in to use this tool. And what you can do is download an Excel spreadsheet
and share that those costs with your boss. So to get there, you go to azure.microsoft.com
forward slash pricing forward slash calculator. And from there you can you can go in here
and you can fill out different things.

So there's a bunch of different categories of
those common one would probably be a virtual machine. So you go in there and you say what
regions it's going to launch in what OS and all the types of configuration it's going
to give you an estimated cost. So this one down below is an upfront cost of $0 with a
monthly cost of 100 52 dot $62. So if you're not sure how to make sense of all the pricing,
go here and play around and you will get a clear picture of what you're going to spend
on Azure. So I just wanted to show you the pricing calculator. So if you just went to
Google and typed in Azure pricing calculator, you should be able to make your way to this
page. And so down below, we have a bunch of products. We also have example scenarios,
which is very nice to see here. So let's say we wanted a CI CD pipeline here, and we said
add to estimate, we can get that information for all these components, I'm just going to
go to single products, because it's a bit easier to view.

So let's say we wanted to
determine our costs for storage. So let's just go to storage here. And we will try storage
accounts. And then down below, we've now added storage. And so we can enter some information
to try to determine our costs. So we could do blob file storage, table storage, I'm gonna
go with file storage, I'm actually not gonna go with blob, it's just easier to calculate.
And so we're gonna have the performance tier two premium redundancy LRS. And we're gonna
be East us. And so if we had 1000 gigabytes, I guess it's a terabyte, that's $150. If we
had X amount of write operations, X amount of listing, create container operations, read
operations. And here we'd have $150 as a monthly cost. So here, you just have to tweak it based
on your consumptions.

And then generally, they'll show you like purchase options. But
really, this just means like go sign up for an Azure account. But I just wanted to show
you what that looks like in just so that you know that you can go explore any cost, and
try to calculate something before you use it. Hey, this is Andrew Brown from exam Pro.
And we are looking at Azure cost management. And so this service allows you to perform
cost analysis. So you can visualize the spending of your Azure cloud resources. But you can
also create a budget under the service.

So when you set a budget, you're going to, you're
going to define a threshold and you're going to be alerted when you're approaching or you've
exceeded that threshold. And so just to give you a visual representation there that is
for the cost analysis. So you can see you get beautiful graphs, and you can drill down
and filter that stuff out to really understand how you're spending stuff on Azure. So definitely
check it out. And there you go. Hey, this is Andrew Brown. From exam Pro, I'm going
to show you how to book your exam for the az 900. So what I want you to do is type in
Pearson VUE Azure, or Pearson, Vue Microsoft into Google, and you should make your way
to this page. And then what you're going to want to do is on the right hand side, go ahead
there and click login, then it's gonna ask what certification you want to type in the
az 900.

And so there is the certification there, then we're going to see this page is
going to show some intermediate information about the certification, what we're going
to do is go ahead and schedule a Pearson VUE. Now there is a sort of certiport. But that's
if you're a student or an instructor, we are neither. So we are going to be choosing the
Pearson VUE mode, there's this drop down here that literally does nothing. I don't know
why they have it here. I thought maybe it would change the price. Maybe it would change
the availability if based on where you are. But we'll go ahead there and hit schedule
with Pearson VUE, what's going to do is ask us to log into our Microsoft account. Mine
is called Azure exam pro cow, it's the same account I created when I created my Azure
account. And then I'm just gonna put my password in there. We'll hit sign in. And then the
next step is it's going to ask me to fill in my certification profile.

So this is all
personal information relating to me. And notice that you have to enter in exactly as your
government issued identification, so you can book the exam. So I'm going to fill this in
and proceed to the next step. And I'll see you there. Alright, so we're on to the next
step here. And so we finished my profile, separate exam discount, I'm not a Microsoft
employee, I didn't attend event, so I'm not getting any cool discounts here. So we're
just going to go ahead and proceed to Pearson VUE to schedule our exam. So just wait here
a moment. And so now that we're on to here, it's going to ask how do you want to exam
at a local Test Center at my home office, or private access cloud, I'm going to show
you how to do it a local test center, we might not have any options here, but we'll give
it a go. And we're gonna choose our language, English is the case here. And it's going to
say the price and etc, we'll go to next.

And so what it's going to do is it's going to
show me locations that are nearby to me. So down below, you have a graph and you have
some stuff there. So we'll just take a look here. And so what I can do is I can click
on a location, so I'm just going to choose the Mississauga center. That one's pretty
good. So I'm going to go ahead and check box app. And we're gonna have to select at least
three test centers here. So I'm gonna choose this one and that one will proceed to next.
And so now we have some options here to schedule I want them to stop One will have to go back
to this one here. And then we will choose our time.

And so from there, all we have to
do is add to order pay and there you go. So that's all it takes to book your exam. So,
good luck on your exam..

As found on YouTube