Luyện Nền Tảng Đám Mây Azure

Azure Virtual Machines is an IaaS compute service that gives full control over the operating system and configuration.

Azure Functions is a serverless compute service that runs event-driven code without managing infrastructure.

Elasticity means cloud resources can scale out or in automatically to match demand.

A hybrid cloud connects on-premises infrastructure with cloud services such as Azure.

Using shared Azure services over the internet with no on-premises datacenter is a public cloud deployment.

Availability Zones are physically separate datacenters within a region; each zone has independent power, cooling, and networking.

A resource group is a logical container that holds related Azure resources for management and organization.

Microsoft Entra ID, formerly Azure Active Directory, provides identity, authentication, and access management.

Azure Blob Storage stores unstructured data such as documents, images, and backups as objects.

Azure SQL Database is a managed relational database-as-a-service built on SQL Server.

Azure Cosmos DB is a globally distributed, multi-model database service with multiple NoSQL APIs.

Azure Virtual Network provides isolated private networks, subnets, and IP addressing in Azure.

Network security groups contain security rules that allow or deny traffic to and from Azure resources.

Azure CDN caches content at edge locations to improve delivery speed for users around the world.

Azure DNS hosts domain names and resolves them using Azure global DNS infrastructure.

Azure Monitor collects, analyzes, and acts on telemetry from Azure resources and applications.

ARM templates and Bicep define infrastructure as code so deployments are repeatable and consistent.

Azure Kubernetes Service (AKS) provides a managed Kubernetes cluster for containerized workloads.

Azure Container Apps is a serverless container service that manages the platform for you.

Azure App Service hosts web apps and APIs as PaaS with built-in scaling, deployment, and security.

Azure Logic Apps provides low-code workflows that connect applications and data sources.

Azure Service Bus provides enterprise messaging with queues and topics for reliable decoupling.

Azure Synapse Analytics combines data integration, warehousing, and analytics at large scale.

Azure Machine Learning is the Azure platform for the full machine learning lifecycle.

Azure Files provides fully managed file shares that can be accessed using standard file protocols.

Azure Virtual Desktop delivers virtualized desktops and apps as a managed service.

Azure DevOps includes Azure Repos, Pipelines, Boards, and related development tools.

Azure Key Vault protects cryptographic keys, secrets, and certificates used by cloud applications.

Azure DDoS Protection mitigates distributed denial-of-service attacks against Azure resources.

Microsoft Defender for Cloud assesses security posture and provides hardening recommendations.

Microsoft Entra ID is the identity and access management service for users, groups, and applications.

Azure RBAC grants permissions based on roles assigned to users, groups, or service principals.

Azure Policy evaluates resources and enforces rules for compliance, tagging, and configuration.

Management groups organize subscriptions and apply governance at scale. They sit above subscriptions and let you apply policies, role assignments, and cost controls to multiple subscriptions at once. A virtual machine, DNS record set, or storage account manages a single resource type rather than organizing subscriptions.

A subscription is a billing and access boundary for Azure resources and services.

Azure Cost Management provides budgets, analysis, and recommendations for cloud spending.

The Azure Pricing Calculator estimates the monthly cost of individual Azure services.

The Azure TCO Calculator estimates the cost savings of moving on-premises workloads to Azure.

Azure Reservations provide discounted pricing when you prepay for one or three years of resources.

Azure Hybrid Benefit allows eligible on-premises licenses to reduce Azure costs.

An SLA states the availability and uptime commitment for an Azure service.

Azure Service Health gives personalized notifications for service issues and planned maintenance.

Azure Advisor analyzes resources and provides best-practice recommendations across cost, security, reliability, and performance.

Azure Log Analytics stores and queries log and telemetry data using the Kusto Query Language.

Application Insights monitors application performance, availability, and exceptions. It collects telemetry such as request times, failed requests, and dependency calls, so teams can find errors and bottlenecks. Key Vault stores secrets, Azure DNS resolves names, and Azure CDN accelerates content, none of which monitor application performance.

Azure Bastion provides browser-based RDP/SSH connectivity through the Azure portal without public IP exposure.

Azure ExpressRoute creates private connections to Azure that do not travel over the public internet.

Azure VPN Gateway sends encrypted traffic between a virtual network and on-premises networks over the internet.

Azure Front Door routes and optimizes global HTTP(S) traffic and can apply a web application firewall.

Azure Load Balancer provides layer-4 traffic distribution to healthy resources in a region.

Azure Traffic Manager uses DNS to route traffic to endpoints across regions.

Azure App Service hosts web apps, mobile back ends, and APIs with managed scaling and security.

Azure Virtual Machines is the IaaS compute offering with control over the OS and configuration.

Azure Functions executes code on demand without provisioning servers. It responds to events such as HTTP requests, queue messages, or timers and scales automatically, so billing is based on execution. Virtual machines and dedicated hosts require managed infrastructure, and Batch is designed for parallel jobs rather than event-driven functions.

Scaling out adds more instances to handle increased load. The workload is spread across additional virtual machines or app instances, which improves capacity without making each machine larger. Increasing the size of one instance is scaling up, while moving regions or reducing storage does not add capacity.

Scaling up increases the capacity of an existing resource, such as using a larger VM size.

LRS makes three synchronous copies within a single datacenter in the primary region.

GRS copies data to a paired secondary region to protect against regional failures.

Azure Event Grid routes events from publishers to subscribers for event-driven integration.

Azure Backup protects data with managed backup policies and restores for Azure workloads.

Virtual Machines, Functions, and AKS are compute services; Blob Storage is a storage service.

Blob Storage, Files, and Queue Storage are storage services; Front Door is a networking service.

Virtual Network, ExpressRoute, and Load Balancer are networking services; Key Vault is a security service.

Entra ID, Policy, and Defender for Cloud support identity, governance, and security; CDN is content delivery.

Cost Management tracks spending, Advisor gives cost recommendations, and Reservations reduce cost; Bastion is a connectivity service.

Azure SQL Database, PostgreSQL, and Cosmos DB are managed database services; Traffic Manager is networking.

AKS, Container Instances, and Container Apps run containers; Azure Files provides storage.

Front Door, CDN, and Traffic Manager route or deliver traffic globally; Queue Storage stores messages.

Azure Functions provides serverless, event-driven compute. It runs code in response to events and scales automatically, so you do not provision or manage servers. The blank needs Functions because the service is named Azure Functions.

Azure Key Vault protects secrets, cryptographic keys, and certificates. It centralizes access control, rotation, and auditing for sensitive material used by applications. The blank should be Key Vault because that is the service name that stores keys, secrets, and certificates.

Azure Cosmos DB is a globally distributed, multi-model database service.

A resource group is a logical container for related Azure resources.

Azure ExpressRoute provides private, dedicated connectivity to Azure. Traffic travels over a private carrier connection rather than the public internet, giving more consistent latency and higher security. The blank should be ExpressRoute because it matches the private-connection description.

Azure Reservations offer discounted pricing when you prepay for resources.

Virtual Machines is IaaS, App Service is PaaS web hosting, Functions is serverless, and AKS is managed Kubernetes.

Blob stores objects, Files provides shares, Queue stores messages, and Disk provides VM disks.

Load Balancer handles regional traffic, Front Door handles global HTTP, Traffic Manager uses DNS, and ExpressRoute is private connectivity.

Entra ID manages identity, RBAC grants roles, Key Vault protects secrets, and Defender for Cloud assesses security posture.

Pricing Calculator estimates costs, Cost Management tracks spending, Reservations reduce cost, and Policy enforces rules.

Azure Monitor collects telemetry, Application Insights monitors apps, Log Analytics queries logs, and Advisor gives recommendations.