Management Groups in Azure
Flashcard Study
What is a region in Azure?
A region in Azure is a geographical area on the planet that contains at least one but potentially multiple datacenters that are nearby and networked together with a low-latency network.
Related Lecture: Understanding Azure Regions and Regional Pairs
Why are regions important in Azure?
Regions are important in Azure because they provide flexibility to bring applications closer to users no matter where they are, global regions provide better scalability and redundancy, and they preserve data residency for services.
Related Lecture: Understanding Azure Regions and Regional Pairs
What are some examples of special Azure regions?
Examples of special Azure regions include US DoD Central, US Gov Virginia, US Gov Iowa, China East, and China North.
Related Lecture: Understanding Azure Regions and Regional Pairs
What are availability zones in Azure?
Availability zones in Azure are created by using one or more datacenters, and there is a minimum of three zones available within a single region.
Related Lecture: Understanding Azure Regions and Regional Pairs
What are region pairs in Azure?
Each Azure region is paired with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away. This allows for the replication of resources across a geography and helps reduce the likelihood of interruptions because of events such as natural disasters, civil unrest, power outages, or physical network outages that affect both regions at once.
Related Lecture: Understanding Azure Regions and Regional Pairs
What are the advantages of region pairs in Azure?
Region pairs in Azure include automatic geo-redundant storage and prioritization of one region out of every pair in the event of an extensive Azure outage. Planned Azure updates are rolled out to paired regions one region at a time to minimize downtime and risk of application outage.
Related Lecture: Understanding Azure Regions and Regional Pairs
What is the purpose of region pairs in Azure?
The purpose of region pairs in Azure is to provide reliable services and data redundancy by replicating resources across a geography and reducing the likelihood of interruptions because of events such as natural disasters, civil unrest, power outages, or physical network outages that affect both regions at once.
Related Lecture: Understanding Azure Regions and Regional Pairs
What happens if a region in a region pair is affected by a natural disaster in Azure?
If a region in a region pair is affected by a natural disaster in Azure, services will automatically failover to the other region in its region pair.
Related Lecture: Understanding Azure Regions and Regional Pairs
How does Azure provide a high guarantee of availability?
Azure provides a high guarantee of availability by having a broadly distributed set of datacenters, creating region pairs that are directly connected and far enough apart to be isolated from regional disasters, and offering automatic geo-redundant storage and failover capabilities.
Related Lecture: Understanding Azure Regions and Regional Pairs
What is the difference between regions, geographies, and availability zones in Azure?
In Azure, regions are geographical areas on the planet that contain at least one but potentially multiple datacenters that are nearby and networked together with a low-latency network. Geographies refer to the larger geographical area that a region is located in, such as US, Europe, or Asia. Availability zones are created by using one or more datacenters and there is a minimum of three zones within a single region.
Related Lecture: Understanding Azure Regions and Regional Pairs
What is an availability zone?
Availability zones are physically separate datacenters within an Azure region that are equipped with independent power, cooling, and networking, and are connected through high-speed, private fiber-optic networks.
Related Lecture: Availability Zones in Azure
What is the purpose of availability zones?
The purpose of availability zones is to provide high availability for mission-critical applications by creating duplicate hardware environments, in case one goes down.
Related Lecture: Availability Zones in Azure
How are availability zones connected?
Availability zones are connected through high-speed, private fiber-optic networks.
Related Lecture: Availability Zones in Azure
What types of Azure services support availability zones?
VMs, managed disks, load balancers, and SQL databases support availability zones.
Related Lecture: Availability Zones in Azure
What are zonal services?
Zonal services are resources that are pinned to a specific zone, such as VMs, managed disks, and IP addresses.
Related Lecture: Availability Zones in Azure
What are zone-redundant services?
Zone-redundant services are services that the platform replicates automatically across zones, such as zone-redundant storage and SQL Database.
Related Lecture: Availability Zones in Azure
What are non-regional services?
Non-regional services are services that are always available from Azure geographies and are resilient to zone-wide outages as well as region-wide outages.
Related Lecture: Availability Zones in Azure
What is a resource in Azure?
A manageable item that's available through Azure. Virtual machines (VMs), storage accounts, web apps, databases, and virtual networks are examples of resources.
Related Lecture: Azure Resources and Resource Groups
What is a resource group in Azure?
A container that holds related resources for an Azure solution. The resource group includes resources that you want to manage as a group.
Related Lecture: Azure Resources and Resource Groups
What is the purpose of a resource group in Azure?
The purpose of a resource group is to help manage and organize Azure resources by placing resources of similar usage, type, or location in a resource group.
Related Lecture: Azure Resources and Resource Groups
Can a resource belong to multiple resource groups in Azure?
No, a resource can only be a member of a single resource group.
Related Lecture: Azure Resources and Resource Groups
Can resource groups be nested in Azure?
What happens when a resource group is deleted in Azure?
When a resource group is deleted, all resources contained within it are also deleted.
Related Lecture: Azure Resources and Resource Groups
How can resource groups be used for authorization in Azure?
Resource groups are also a scope for applying role-based access control (RBAC) permissions. By applying RBAC permissions to a resource group, you can ease administration and limit access to allow only what's needed.
Related Lecture: Azure Resources and Resource Groups
What is the relationship between resources and resource groups in Azure?
All resources must be in a resource group, and a resource can only be a member of a single resource group.
Related Lecture: Azure Resources and Resource Groups
What is an Azure subscription?
An Azure subscription is a logical unit of Azure services that links to an Azure account, which is an identity in Azure Active Directory (Azure AD) or in a directory that Azure AD trusts. It provides authenticated and authorized access to Azure products and services and allows you to provision resources.
Related Lecture: Understanding Azure Subscriptions
What are the two types of subscription boundaries in Azure?
The two types of subscription boundaries in Azure are Billing boundary and Access control boundary.
Related Lecture: Understanding Azure Subscriptions
What happens when you delete a subscription in Azure?
When you delete a subscription in Azure, all resources contained within it are also deleted.
Related Lecture: Understanding Azure Subscriptions
What is the purpose of creating a billing profile in Azure?
The purpose of creating a billing profile in Azure is to have its own monthly invoice and payment method.
Related Lecture: Understanding Azure Subscriptions
How can you manage costs in Azure?
You can manage costs in Azure by creating multiple subscriptions for different types of billing requirements, and Azure generates separate billing reports and invoices for each subscription so that you can organize and manage costs.
Related Lecture: Understanding Azure Subscriptions
What is the purpose of resource access control in Azure?
The purpose of resource access control in Azure is to manage and control access to the resources that users provision within each subscription.
Related Lecture: Understanding Azure Subscriptions
What is the purpose of an Azure management group?
Azure management groups provide a level of scope above subscriptions for efficiently managing access, policies, and compliance for those subscriptions.
Related Lecture: Management Groups in Azure
How do management groups affect subscriptions?
All subscriptions within a management group automatically inherit the conditions applied to the management group.
Related Lecture: Management Groups in Azure
Can all subscriptions within a single management group trust different Azure AD tenants?
No, all subscriptions within a single management group must trust the same Azure AD tenant.
Related Lecture: Management Groups in Azure
How can management groups be used for governance?
You can apply policies to a management group that limit the regions available for VM creation, for example, which would be applied to all management groups, subscriptions, and resources under that management group.
Related Lecture: Management Groups in Azure
How can management groups be used to provide user access to multiple subscriptions?
By moving multiple subscriptions under that management group, you can create one role-based access control (RBAC) assignment on the management group, which will inherit that access to all the subscriptions.
Related Lecture: Management Groups in Azure
How many management groups can be supported in a single directory?
10,000 management groups can be supported in a single directory.
Related Lecture: Management Groups in Azure
How many levels of depth can a management group tree support?
A management group tree can support up to six levels of depth, not including the root level or the subscription level.
Related Lecture: Management Groups in Azure
Can each management group and subscription have multiple parents?
No, each management group and subscription can support only one parent.
Related Lecture: Management Groups in Azure
Is each management group and subscription within a single hierarchy in each directory?
Yes, all subscriptions and management groups are within a single hierarchy in each directory.
Related Lecture: Management Groups in Azure