Azure Foundations Cheat Sheets
Azure Foundations Cheat Sheets
These cheat sheets are provided for non-commercial purpose for personal study.
BigData Services
• Azure Synapse Analytics — (SQL Data Warehouse) Enterprise data warehousing and Big Data analytics. Intended to
run SQL queries against large databases for things such as reporting.
• HDInsight — Run open-source analytics software such as Hadoop, Kafka and Spark
• Azure Databricks — An Apache Spark-based analytics platform optimized for the Microsoft Azure cloud services
platform. Third-Party Databricks cloud services supported within Azure.
• Data Lake Analytics — An on-demand analytics job service that simplifies big data. A data lake is a storage repository
that holds a vast amount of raw data in its native format until it is needed.
What is Artificial Intelligence (AI)? — Machines that perform jobs that mimic human behavior
What is Machine Learning (ML)? — Machines that get better at a task without explicit programming
What is Deep Learning (DL)? —Machines that have an artificial neural network inspired by the human brain to solve complex problems
Technology Overview Cheat Sheet
Machine Learning (ML) and Artificial Intelligence (AI) services
• Azure Machine Learning Service — A service for that simplifies running AI/ML related workloads allowing you to
build flexible Pipelines to automate workflow. Use Python an R, Run DL workloads such as Tensorflow
• Azure Machine Learning Studio (classic) — An older service that manages AI/ML workloads. Does not have a
pipeline and other limitations. Workloads are not easily transferable to from classic to the new service.
• Personalizer — Deliver rich, personalised experiences for every user.
• Translator — Add real-time, multi-language text translation to your apps, website and tools.
• Anomaly detector — Detect anomalies in data to quickly identify and troubleshoot issues.
• Azure Bot Service — Intelligent, serverless bot service that scales on demand
• Form Recogniser — Automate the extraction of text, key/value pairs and tables from your documents.
• Computer Vision — Easily customise computer vision models for your unique use case.
• Language Understanding — Build natural language understanding into apps, bots and IoT devices.
• QnA Maker — Create a conversational question-and-answer bot from your existing content.
• Text Analytics — Extract information such as sentiment, key phrases, named entities and language from your text.
• Content moderator — Moderate text and images to provide a safer, more positive user experience.
• Face — Detect and identify people and emotions in images.
• Ink Recogniser — Recognise digital ink content, such as handwriting, shapes and document layout.
Technology Overview Cheat Sheet
What is Serverless?
When the underlying servers, infrastructure and OS is taken care of by the Cloud Service Provider (CSP) It will generally
be highly available, scalable and cost-effective. The three advantage of Serverless:
1. Event-Driven Scale A serverless function can be triggered or trigger other events allowing you to compose complex
applications and its just scales.
2. Abstraction of Servers Servers are abstracted away. Your code is described as functions. These functions can be
running on different compute instances.
3. Micro-Billing Serverless compute could run for a fraction of a second. Billing into micro-seconds will save you money.
Serverless Services
• Azure Functions Run small amounts of code (serverless functions) in C#, Java, JavaScript, Python or PowerShell
• Blog Storage Serverless Object Storage. Just upload files, don’t think about the underlying file-systems or resizing
• Logic Apps build serverless workflows composed of Azure Functions. Building a state machines for serverless compute.
• Event Grid Pub/Sub messaging system to allow you react to events and trigger other Azure services such as Azure Functions
Management Tools Cheat Sheet
• The Azure portal is a web-based, unified console that provides an alternative to command-line tools. You can manage your
Azure subscription with the Azure portal. Build, manage, and monitor everything from simple web apps to complex cloud
deployments.
• If you want to test preview features should use preview.portal.azure.com
• if you stable-release and production-ready features you should you use portal.azure.com
• PowerShell is a task automation and configuration management framework, command-line shell and a scripting language
• Azure PowerShell A set of cmdlets for managing Azure resources directly from the PowerShell command line
• Visual Studio Code is a free source-code editor made by Microsoft for Windows, Linux and macOS.
• Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources.
• It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.
• Azure Command Line Interface (CLI) processes commands to a computer program in the form of lines of text. Operating
systems implement a command-line interface in a shell or terminal
• The Azure CLI can be installed on Windows, Mac and Linux.
• Once installed you can type az followed by other commands to create, update, delete, view and manage Azure
resources.
Azure Security Cheat Sheet
• Azure Trust Portal is a a public-facing website portal providing easy access to privacy and security and regulatory
compliance information.
• Compliance Programs is a set of internal policies and procedures of a company to comply with laws, rules, and
regulations or to uphold business reputation.
• Criminal Justice Information Services (CJIS) Any US state or local agency that wants to access the FBI's CJIS
database is required to adhere to the CJIS Security Policy.
• General Data Protection Regulation (GDPR) A European privacy law. Imposes new rules on companies, government
agencies, non-profits, and other organizations that offer goods and services to people in the European Union (EU),
or that collect and analyze data tied to EU residents.
• Health Insurance Portability and Accountability Act (HIPAA). US federal law that regulates patient Protected Health
Information
• Service Organization Controls (SOC) 1, 2, and 3 independent third-party examination reports that demonstrate how
the company achieves key compliance controls and objectives
• National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) Voluntary Framework that
consists of standards, guidelines, and best practices to manage cybersecurity-related risks.
• Federal Information Processing Standard (FIPS) 140-2 US and Canadian government standard that specifies the
security requirements for cryptographic modules that protect sensitive information.
• What is Multi-Factor Authentication (MFA)? A security control where after you fill in your username/email and
password you have to use a second device such as a phone to confirm that its you logging in.
Azure Security Cheat Sheet
• Azure Active Directory (Azure AD) is Microsoft’s cloud-based identity and access management service, which helps your
employees sign in and access resources.
• Azure can connect to External Resources: Microsoft Office 365, Azure Portal, SaaS applications
• Azure can connect to Internal Resources: Applications within your internal networking, access to om-prem workstations
• Use Azure AD to implement Single-Sign On (SSO)
• Azure Active Directory comes in four editions
• Free MFA, SSO, Basic Security and Usage Reports, User Management
• Office 365 Apps Company Branding, SLA, Two-Sync between On-Premise and Cloud
• Premium 1 Hybrid Architecture, Advanced Group Access, Conditional Access
• Premium 2 Identity Protection, Identity Governance
• Azure Security Center is a unified infrastructure security management system It strengthens the security posture of your
data centers, and provides advanced threat protection across your hybrid workloads in the cloud.
• Azure Application Gateway is a web-traffic load balancer (Layer 7 HTTP) that re-route traffic based on a set of rules. A Web
Application Firewall (WAF) can be attached for additional protection on OSI Layer 7.
• Azure Key Vault helps you safeguard cryptographic keys and other secrets used by cloud apps and services.
• Secrets Management store and tightly control access to tokens, passwords, certificates, API keys, and other secrets
• Key Management create and control the encryption keys used to encrypt your data
• Certificate Management easily provision, manage, and deploy public and private SSL certificates for use with Azure and
internal connected resources.
• Hardware Security Module secrets and keys can be protected either by software or FIPS 140-2 Level 2 validated HSMs
Azure Security Cheat Sheet
• An HSM is a Hardware Security Module. Its a piece of hardware designed to store encryption keys.
• Federal Information Processing Standard (FIPS) 140-2 US and Canadian government standard that specifies the security
requirements for cryptographic modules that protect sensitive information.
• HSM’s that are multi-tenant are FIPS 140-2 Compliant (multiple customers virtually isolated on an HSM)
• HSM’s that are single-tenant are FIPS 140-3 Compliant (single customer on a dedicated HSM)
• DDoS (Distributed Denial of Service) Attack malicious attempt to disrupt normal traffic by flooding a website with fake traffic
• Azure offers two tiers of DDoS Protection
• DDoS Protection Basic: Free, Already turned on protect Azure ‘s global network
• DDoS Protection Standard
Starting at $2,994/month
• Metrics, Alerts, Reporting
• DDoS Expert Support
• Application and Cost Protection SLAs
• Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources.
• Azure Information Protection — Protects sensitive information such as emails and documents with encryption, restricted
access and rights, and integrated security in Office apps
• Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments for
the following 5 categories: 1] High Availability, 2] Security, 3] Performance, 4] Cost, 5] Operational Excellence
Azure Security Cheat Sheet
• Intrusion Detection / Intrusion Protection System (ID/IPS) A device or software application that monitors a network or
systems for malicious activity or policy violations.
• Azure Advanced Threat Protection (ATP) is a cloud-based security solution that leverages your on-premises Active Directory
signals to identify, detect, and investigate threats, compromised identities, and malicious actors
• Microsoft Security Development Lifecycle (SDL) is a software security assurance process. SDL is defined in phases:
• Training > Requirements > Design > Implementation > Verification > Release > Response
• Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules. These business
rules, described in JSON format, are known as Policy Definitions.
• Azure role-based access control (Azure RBAC) — helps you manage who has access to Azure resources, what they can do
with those resources, and what areas they have access to.
• A Role Definition — is a collection of permissions. A role definition lists the operations that can be performed,
• such as read, write, and delete. Roles can be high-level, like owner, or specific, like virtual machine reader.
• Lock Resources — As an admin, you may need to lock a subscription, resource group, or resource to prevent other users
from accidentally deleting or modifying critical resources.
• CanNotDelete (Delete) authorized users can still read and modify a resource, but they can't delete the resource.
• ReadOnly (Read-only) authorized users can read a resource, but they can't delete or update the resource
• Azure Management Groups is used for managing multiple subscriptions (accounts) into a hierarchal structure.
• Azure Monitor comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises
environments: Create Visual Dashboards, Smart Alerts , Automated Actions, Log Monitoring
• Azure Service Health provides Information about current and upcoming issues eg. Service outrages
Billing and Pricing Cheat Sheet
• Service Level Agreement (SLA) describes Azure’s commitments for uptime and connectivity
• SLA’s are individualized per Azure service
• Uptime and connectivity is described as Performance Targets
• A Performance Target is represented as a percentage %.
• 99% (two nines)
• 99.9% (three nines)
• 99.999% (five nines)
• 99.9999999% (nine nines)
• Azure not does provide SLAs for Free Tier or the shared tiers.
• Service Credits — customers may have a discount applied to their Azure bill, as compensation for an under-performing
Azure product or service based on the SLA.
• A Composite SLA is when you combine SLAs across different service offerings to improve overall SLA performance target
• TCO Calculator — Estimate the cost savings you can realize by migrating your workloads to Azure
• Azure Marketplace are apps and services made available by third-party publishers to quickly get started. The available apps
and services can be Free, Free-Trial, Pay-As-You-Go, Bring-Your-Own-License (BYOL)
• Azure Hybrid Use Benefit (HUB) Gives customers the right to use these licenses for virtual machines on Azure.
• Azure Pricing Calculator — Configure and estimate the costs for Azure products. No Sign-in require. Download an Excel
spreadsheet and share with your boss.
• Azure Cost Management
• Perform cost-analysis, visualize the spending of your Azure cloud resources
• Create budgets, set a budget threshold be alerted when approaching or exceeded
Billing and Pricing Cheat Sheet
• There are 4 tiers of Azure Subscriptions:
• Free Subscription
• Credit Card Required
• $200 USD credits free for 30 days
• Certain Azure products free for 12 months
• Pay-As-You-Go (PAYG) Subscription
• Credit Card Required
• Charged end at the of the month based on consumed cloud resources
• Enterprise Agreement
• An Enterprise and Azure agree on receive discounted price for licenses and cloud services
• Student Subscription
• No Credit Card Required
• $100 USD credits for 12 months
• Requires valid student email
Azure Support Plans
Cheat sheets, Practice Exams and Flash cards www.exampro.co/az-900
Webinars led by
Azure Engineers
$0 USD / month $29 USD / month $100 USD / month $1000 USD / month