AZ-900T0x

Module 02:
Core Azure
Services

© Copyright Microsoft Corporation. All rights reserved.

Module Outline

© Copyright Microsoft Corporation. All rights reserved.

Module 02 – Outline

You will learn the following concepts:

 Azure Architectural Components

• Regions and Availability Zones
• Subscriptions and Resource Groups
 Core Azure Resources
• Compute
• Networking
• Storage
• Databases

© Copyright Microsoft Corporation. All rights reserved.

Core Azure architectural components

© Copyright Microsoft Corporation. All rights reserved.

Core Azure architectural components – Objective
Domain
Describe the benefits and usage of:
• Regions and Region Pairs
• Availability Zones
• Azure Resources
• Resource Groups
• Azure Resource Manager
• Subscriptions
• Azure Management Groups

© Copyright Microsoft Corporation. All rights reserved.

Regions

Azure offers more global

regions than any other
cloud provider with 60+
regions representing over
140 countries

• Regions are made up of one or more datacenters in close

proximity.
• Provide flexibility and scale to reduce customer latency.
• Preserve data residency with a comprehensive compliance
offering.
© Copyright Microsoft Corporation. All rights reserved.
 Region Region
Region Pairs North Central US​ South Central
US​
East US​
West US 2​ West US​
US East 2​ West Central US​
• At least 300 miles of separation Central US​
Canada Central​
between region pairs. North Europe​ Canada East​
UK West​ West Europe​
• Automatic replication for some UK South​
Germany
services. Central​ Germany
Northeast​
• Prioritized region recovery in the South East Asia​
East China​ East Asia​
event of outage. Japan East​ North China​
Japan West​
• Updates are rollout sequentially to Australia
Southeast​ Australia East​
minimize downtime.
Web Link: https://aka.ms/PairedRegions India South​ India Central​
Brazil South South Central
(Primary)​ US ​

© Copyright Microsoft Corporation. All rights reserved.

Availability Options
VM SLA VM SLA MULTI-REGION DISASTER RECOVERY
99.9% with Premium Storage 99.99%

Region 1 Region 2

SINGLE VM AVAILABILITY ZONES REGION PAIRS

Easier lift and shift Protection from entire datacenter Regional protection within Data
failures Residency Boundaries

© Copyright Microsoft Corporation. All rights reserved.

Availability zones
Azure Region
• Provide protection against downtime
Availability Zone 1 Availability Zone 2
due to datacenter failure.
• Physically separate datacenters within
the same region.
• Each datacenter is equipped with
independent power, cooling, and
networking.
• Connected through private fiber-optic
networks. Availability Zone 3

© Copyright Microsoft Corporation. All rights reserved.

Azure Resources
Azure resources are components like storage, virtual machines, and
networks that are available to build cloud solutions.

Virtual Machines Storage Accounts Virtual Networks

App Services SQL Databases Functions

© Copyright Microsoft Corporation. All rights reserved.

Resource groups
Resource groups
(web + DB, VM, Storage) in one
A resource group is a container to group

manage and aggregate resources in a

single unit.
• Resources can exist in only one OR
resource group.
• Resources can exist in different
regions.
Web and Virtual
• Resources can be moved to DB machine Storage
resource resource resource
different resource groups. group group group

• Applications can utilize multiple

resource groups.

© Copyright Microsoft Corporation. All rights reserved.

Azure Resource Manager

The Azure Resource

Manager (ARM)
provides a management
layer that enables you to
create, update, and
delete resources in your
Azure subscription.

© Copyright Microsoft Corporation. All rights reserved.

 Azure Subscriptions

An Azure subscription provides you with

authenticated and authorized access to
Azure accounts.
• Billing boundary: generate separate
billing reports and invoices for each
subscription.
• Access control boundary: manage
and control access to the resources
that users can provision with specific
subscriptions.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough – Explore the Azure Portal

Launch the Azure Portal and have a

look at the common components
used everyday building cloud
solutions

1. Connect to
https://portal.azure.com
2. Explore the home screen.
3. Find “All Services” and see what is
available.

© Copyright Microsoft Corporation. All rights reserved.

Management Groups

• Management groups can include

multiple Azure subscriptions.
• Subscriptions inherit conditions
applied to the management
group.
• 10,000 management groups can
be supported in a single directory.
• A management group tree can
support up to six levels of depth.

© Copyright Microsoft Corporation. All rights reserved.

Core Azure workload products

© Copyright Microsoft Corporation. All rights reserved.

Core Azure Workloads - Objective Domain

Describe the benefits and usage of:

• Virtual Machines, Azure App Services, Azure Container Instances (ACI),
Azure Kubernetes Service (AKS), and Azure Virtual Desktop
• Virtual Networks, VPN Gateway, Virtual Network peering, and
ExpressRoute
• Container (Blob) Storage, Disk Storage, File Storage, and storage tiers
• Cosmos DB, Azure SQL Database, Azure Database for MySQL, Azure
Database for PostgreSQL, and SQL Managed Instance
• Azure Marketplace

© Copyright Microsoft Corporation. All rights reserved.

Azure compute services

Azure compute is an on-demand computing service that provides

computing resources such as disks, processors, memory, networking, and
operating systems.

Virtual App Container Azure Azure Virtual

Machines Services Instances Kubernetes Desktop
Services (AKS)

© Copyright Microsoft Corporation. All rights reserved.

Azure virtual machines

Azure Virtual Machines (VM) are software

emulations of physical computers.
• Includes virtual processor, memory, storage,
and networking.
• IaaS offering that provides total control and
customization.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough – Create a Virtual Machine

Create a virtual machine in the

Azure Portal, connect to the
virtual machine, install the web
server role, and test.

1. Create the virtual machine.

2. Connect to the virtual
machine.
3. Install the web server role and
test.

© Copyright Microsoft Corporation. All rights reserved.

Azure App Services

Azure App Services is a fully managed platform to

build, deploy, and scale web apps and APIs quickly.
• Works with .NET, .NET Core, Node.js, Java, Python,
or php.
• PaaS offering with enterprise-grade performance,
security, and compliance requirements.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough – Create an App Service

Create a new Web App by using a

Docker image stored in Azure
Container Registry.

1. Create a Web App using a Docker

image.
2. Test the Web App.

© Copyright Microsoft Corporation. All rights reserved.

Azure Container Services
Azure Containers are a light-weight, virtualized environment that does not
require operating system management, and can respond to changes on
demand.

Azure Container Instances: a PaaS offering that runs a

container in Azure without the need to manage a virtual
machine or additional services.

Azure Kubernetes Service: an orchestration service for

containers with distributed architectures and large volumes of
containers.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough - Deploy Azure Container Instances

Using the Azure Portal create,

configure, and deploy a Docker
container to an Azure Container
Instance. The container will
deploy a Hello HTML page.

1. Create a container instance.

2. Deploy the container and test.

© Copyright Microsoft Corporation. All rights reserved.

Azure Virtual Desktop

Azure Virtual Desktop is a desktop and app

virtualization that runs in the cloud.
• Create a full desktop virtualization environment
without having to run additional gateway servers.
• Publish unlimited host pools to accommodate
diverse workloads.
• Reduce costs with pooled, multi-session resources.

© Copyright Microsoft Corporation. All rights reserved.

Azure networking services
Azure Virtual Network (VNet) enables Azure
resources to communicate with each other, the
internet, and on-premises networks.

Virtual Private Network Gateway (VPN) is used

to send encrypted traffic between an Azure virtual
network and an on-premises location over the public
internet.

Azure Express Route extends on-premises

networks into Azure over a private connection that is
facilitated by a connectivity provider.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough - Create a virtual network

Create a virtual network with two

virtual machines and then test
connection between the
machines.

1. Create a virtual network.

2. Create two virtual machines.
3. Test the connection.

© Copyright Microsoft Corporation. All rights reserved.

Azure storage services

Container storage (blob) is optimized for storing

massive amounts of unstructured data, such as text or
binary data.

Disk storage provides disks for virtual machines,

applications, and other services to access and use.

Azure Files sets up a highly available network file

shares that can be accessed by using the standard
Server Message Block (SMB) protocol.

© Copyright Microsoft Corporation. All rights reserved.

Azure storage access tiers

Hot Cool Archive

Optimized for storing Optimized for storing Optimized for storing
data that is accessed data that is data that is rarely
frequently. infrequently accessed accessed and stored
and stored for at least for at least 180 days
30 days. with flexible latency
requirements.

You can switch between these access tiers at any time.

© Copyright Microsoft Corporation. All rights reserved.

Walkthrough - Create blob storage

Create a storage account with a

blob storage container. Work with
blob files.
1. Create a storage account.
2. Work with blob storage.
3. Monitor the storage account.

© Copyright Microsoft Corporation. All rights reserved.

Azure database services

Azure Cosmos Database is a globally-distributed

database service that elastically and independently scales
throughput and storage.
Azure SQL Database is a relational database as a service
(DaaS) based on the latest stable version of the Microsoft
SQL Server database engine.

Azure Database for MySQL is a fully-managed MySQL

database service for app developers.

Azure Database for PostgreSQL is a relational database

service based on the open-source Postgres database
engine.

© Copyright Microsoft Corporation. All rights reserved.

Azure SQL Managed Instance

Azure SQL Managed Instance allows existing

SQL Server customers to lift and shift their on-
premises applications to the cloud with minimal
application and database changes.
• Fully managed and evergreen platform as a
service.
• Preserves all PaaS capabilities (automatic
patching and version updates, automated
backups, and high availability)
• Exchange existing licenses for discounted rates
on SQL Managed Instance using the Azure
Hybrid Benefit
© Copyright Microsoft Corporation. All rights reserved.
Walkthrough-Create a SQL database

Create a SQL database in Azure

and then query the data in that
database.

1. Create the database.

2. Query the database.

© Copyright Microsoft Corporation. All rights reserved.

Explore Azure Marketplace

Azure Marketplace allows customers to find, try, purchase, and

provision applications and services from hundreds of leading service
providers, which are
all certified to run on Azure.
• Open source container platforms.
• Virtual machine and database images.
• Application build and deployment software.
• Developer tools.
• And much more, with 10,000+ listings!

© Copyright Microsoft Corporation. All rights reserved.

Knowledge Check

Which one?
Populate with instructions to use
the polling tool of your choice A). Azure
Portal
Module 2 B). PowerShell
C). Local Tool
1. Use your Smartphones or Mobile
Devices
2. Go to (insert polling app link of your
choice)
3. Enter Code: 123-45-678
4. Please participate in the quiz for this
section

© Copyright Microsoft Corporation. All rights reserved.

Module 02 Review

• Microsoft provides more global presence

than any other cloud provider with over
60 regions distributed worldwide
• Azure Management tools
• Azure's multiple services (compute,
networking, storage, and databases)
• Azure Marketplace
Microsoft Learn Modules
(docs.microsoft.com/Learn)

© Copyright Microsoft Corporation. All rights reserved.