Notes

use a different key to encrypt data at rest - Create an encryption scope.

Kubectl must be used to apply yaml manifests in Kubernetes clusters.

Create an alert within an hour - You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.



We cannot just move a virtual machine between networks. What we need to do is identify the disk used by the VM, delete the VM itself while retaining the disk, and recreate the VM in the target virtual network and then attach the original disk to it.

Note: You can change the Subnet a VM is connected to after it's created, but you cannot change the VNet.



ASP.NET Core apps can be hosted both on Windows or Linux.
The region in which your app runs is the region of the App Service Plan is in.

ASP.NET apps can be hosted on Windows only.

Provision a new web server in ARM template - Upload a config script, Modify the extensionProfile section of the Azure Resource Manager template
To install kubectl locally, use the az aks install-cli command: az aks install-cli


Blob Storage authentication - Azure AD and SAS
File Storage authentication - SAS only

Persistent and unstructured - Azure Files

When you create an Availability Set, the hardware in a location is divided into multiple update domains and fault domains. During scheduled maintenance, only one update domain is updated at any given time. Update domains aren't necessarily updated sequentially. So, we need two update domains.

First action: Create a Storage Sync Service
The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.
Second action: Install the Azure File Sync agent
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share.

Object storage data tiering between hot, cool, and archive is supported in Blob Storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts don't support tiering.





Since it is using "net use" where it uses SMB, the SMB (Server Message Broker) protocol does not support SAS. it still asks for username/password. Accordingly, it will give error wrong username/pass and will not provide access.

The lifecycle management feature is available in all Azure regions for general purpose v2 (GPv2) accounts, blob storage accounts, premium block blobs storage accounts, and Azure Data Lake Storage Gen2 accounts.



Install the Azure File Sync agent on server1
Register server1
Add a server endpoint

Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single Region.
ZRS only support GPv2.

GRS and RA GRS use asynchronous replication.


Azure Import/Export service to copy files - Dataset csv and driveset csv

From the Recovery Service vault, stop the backup of each backup item

Note: Only VM and Fileshare is allowed to Backup.

[storageaccountname].file.core.windows.net/[FileShareName]

- LRS has 3 copies of data
- Access tier has the "cool" option to store infrequently accessed data.

AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.



Azure Automation state configuration Steps:
1: Upload a configuration to Azure Automation State Configuration
2: Compile a configuration into a node configuration
3: Check the compliance status of the node.

The app must be running in the Standard, Premium, or Isolated tier in order for you to enable multiple deployment slots. If the app isn't already in the Standard, Premium, or Isolated tier, you receive a message that indicates the supported tiers for enabling staged publishing. At this point, you have the option to select Upgrade and go to the Scale tab of your app before continuing.

Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more.

Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances

When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.

14 virtual machine - Max update domain: 2 (planned maintenance), Max Fault domain: 7 (server rack)

To be able to access applications on Kubernetes, you need an application Load Balancer created by Azure which have public IP.

1) Internet users "can connect to the container from any device"
2) If Internet Information Services (IIS) in the container fails, "the container will restart automatically".

While resizing, the VM must be in a stopped state, therefore there will be a downtime.

Record all the successful and failed connection attempts - Enable Azure Network watcher, Register Insights provider, Enable Azure Network Watcher flow logs.

Deploy 5 VM asap - Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.

We need to configure autoscaler for the AKS cluster. We do not want to scale Kubernetes pods, so kubectl command is not needed.
A: kubectl command is used for configuring Kubernetes and not AKS cluster.
B: The az aks command is used for the AKS cluster configuration.
C: Set-AzVm cmdlet is used for VMs.
D: Azure portal, under node pools, press scale, then choose auto scale.
E: Set-AzAks, creates or updates an AKS cluster, the correct cmdlet is Set-AzAksCluster.

ensure that at least two virtual machines are available - each virtual machine in a separate Availability Zone.

The Get-AzVmssVM cmdlet gets the model view and instance view of a Virtual Machine Scale Set (VMSS) virtual machine.