Unused cloud resources can put an unnecessary drain on your computing budget, and unlike legacy on-premises architectures, there is no need to over-provision compute resources for times of heavy usage.
Autoscaling is one of the value levers that can help unlock cost savings for your Azure workloads by automatically scaling up and down the resources in use to better align capacity to demand. This practice can greatly reduce wasted spend for those dynamic workloads with inherently “peaky” demand.
In some cases, workloads with occasionally high peak demand have extremely low average utilization, making them ill-suited for other cost optimization practices, such as rightsizing and reservations.
For periods when an app puts a heavier demand on cloud resources, autoscaling adds resources to handle the load and satisfy service-level agreements for performance and availability. And for those times when the load demand decreases (nights, weekends, holidays), autoscaling can remove idle resources to reduce costs. Autoscaling automatically scales between the minimum and maximum number of instances and will run, add, or remove VMs automatically based on a set of rules.
Autoscaling is near real-time cost optimization. Think of it this way: Rather than build an addition to your house with extra bedrooms that will go unused most of the year, you have an agreement with a nearby hotel. Your guests can check-in, at any time and at the last minute, and the hotel will automatically charge you for the days when they visit.
Not only does it utilize cloud elasticity by paying for capacity only when you need it, you can also reduce the need for an operator to continually monitor the performance of a system and make decisions about adding or removing resources.
What services can you autoscale?
Azure provides built-in autoscaling using Azure Monitor autoscale for most compute options, including:
◉ Azure Virtual Machines Scale Sets
◉ Service Fabric
◉ Azure App Service
◉ Azure Cloud Services has built-in autoscaling at the role level.
Azure Functions differs from the previous compute options because you don't need to configure any autoscale rules. The hosting plan you choose dictates how your function app is scaled:
◉ With a consumption plan, your functions app will scale automatically, and you will only pay for compute resources when your functions are running.
◉ With a premium plan, your app will automatically scale based on demand using pre-warmed workers that run applications with no delay after being idle.
◉ With a dedicated plan, you will run your functions within an App Service plan at regular App Service plan rates.
Azure Monitor autoscale provides a common set of autoscaling functionality for virtual machine scale sets, Azure App Service, and Azure Cloud Service. Scaling can be performed on a schedule, or based on a runtime metric, such as CPU or memory usage.
Use the built-in autoscaling features of the platform if they meet your requirements. If not, carefully consider whether you really need more complex scaling features. Examples of additional requirements may include more granularity of control, different ways to detect trigger events for scaling, scaling across subscriptions, and scaling other types of resources.
Also know that, in general, it is better to scale up than to scale down. Scaling down usually involves deprovisioning or downtime. So, choose smaller instances when a workload is highly variable and scale out to get the required level of performance.
The AZ-400 Microsoft Azure DevOps Solutions certification exam measures and confirms an applicant's skill as a DevOps Professional around utilizing Microsoft Azure technologies for designing and executing DevOps practices. This exam is a part of the required exams required to achieve the more comprehensive Microsoft Certified: Azure DevOps Engineer Expert certification.
Microsoft AZ-400 Certification Overview
The AZ-400 Microsoft Azure DevOps Solutions certification exam is designed for DevOps Professionals who link people, processes, and tools to constantly provide value to fulfill users' needs and business goals. These applicants simplify delivery by improving practices, enhancing communication and collaboration, and generating automation. They design and enforce app code and infrastructure tactics that enable continuous integration, testing, delivery, and constant observation and feedback.
Exam takers are expected to be experts in Agile practices, must be acquainted with both Azure Administration and Azure Development, and should be masters in one of these areas. They must be capable of designing and executing DevOps practices for version control, infrastructure as code (IaC), compliance, build, configuration management, release, and testing by utilizing Microsoft Azure technologies.
AZ-400 Exam Objectives
Develop an instrumentation strategy (5-10%)
Develop a Site Reliability Engineering (SRE) strategy (5-10%)
Develop a security and compliance plan (10-15%)
Manage source control (10-15%)
Facilitate communication and collaboration (10-15%)
Define and implement continuous integration (20-25%)
Define and implement continuous delivery and release management strategy (10-15%)
AZ-400 Microsoft DevOps Solutions Exam Structure
Certification Name: Microsoft Certified: Azure DevOps Engineer Expert
Question Type: Multiple-choice, Multiple-answer, Sequence type, Case studies based questions
Exam Cost: USD 165.00
Total Questions: 40 – 60 Questions
Exam Duration: 150 Minutes
Languages: English, Japanese, Chinese (Simplified), Korean, Spanish, German, and French
Is the Microsoft Azure AZ-400 Exam Difficult to Pass?
Achieving a Microsoft Certification is every professional's dream, and it helps them make higher salaries and fill the gap in their dream job. But the most crucial question is how difficult is the Microsoft Azure AZ-400 exam? Well, one thing is sure this exam is not impossible to crack. The pass ratio is low, but if you have the appropriate preparation plan. Furthermore, if you have former knowledge and a thorough understanding of the field of Azure, then the exam is not difficult to crack. On the contrary, if this is your first Microsoft Azure exam, in the first place, you must concentrate on the AZ-400 syllabus topics. Line up your preparation with the exam course and concepts.
However, it is not easy to pass the certification exam, as discussed, and it demands a lot of preparation and practice. So to smoothen your preparations, read the next section!
Study Resources for Microsoft DevOps Engineer AZ-400 Exam Preparation
The study resources you prefer explain how well you will be performing in the exam. But with the lots of options available for Microsoft exam preparation, it usually becomes challenging to select the right resources. Here is a list of a few resources that will boost your learning. Furthermore, they will help you take your preparations to the next level.
1. Make Most Out of Microsoft Documentation
Microsoft provides Microsoft documentation that includes various learning pages, and Microsoft documentation aids you in understanding various scales of different Azure services in a much more thorough manner. This will assure that you are working by the clock and understanding so many new azure technologies offered by industry professionals straight to you.
2. Take Up Instructor-Led Training Course
Microsoft offers online and instructor-led training courses that are on-demand classroom lectures that you can smoothly arrange anywhere and anytime. Furthermore, these training courses help you understand the AZ-400 exam syllabus in-depth. The course for the AZ-400 exam is:
Books have been a traditional and vital element for any exam preparation. They equip you with a profound understanding of the AZ-400 syllabus. Also, books provide real-life scenarios that help you qualify for a practical exam.
4. Gauge Your Preparation Level with AZ-400 Practice Test
Mistakes are unavoidable, but certainly, they can be restricted. When it comes to Microsoft exams, practice tests help in reducing errors. Moreover, readying the brain is vital. Practice tests offer that simulation in which the brain requires to get used to the real exam. Hence after studying the complete syllabus, you need to perform AZ-400 practice tests to assess your performance. This will help you out find your strong and weak areas. Moreover, attempting numerous AZ-400 practice tests will enhance your confidence. Try improving yourself with each subsequent exam.
Why Earn Microsoft AZ-400 Certification?
AZ-400 opens the door to career-changing opportunities for those individuals who are bound to use Cloud operations and surpass in the Cloud Computing field.
Earning this Microsoft certification will improve your knowledge of technical DevOps.
Applicants get the right idea of how to enforce techniques for continuous delivery and integration.
Applicants are qualified to formulate the security plans of an organization's applications and services on Azure Cloud. Therefore, it assists them in solving the credibility problems to operate all business operations seamlessly.
A large number of enterprises are progressively moving to DevOps and are executing related practices. With AZ-400 certification, applicants can outshine the crowd and open various lucrative job opportunities.
Because the competition is mounting among the organizations and Cloud implementations, different enterprises will prefer to hire Certified engineers over non-certified professionals.
The DevOps engineers holding Microsoft AZ-400 certification hold the skills working with Agile practices, and they are skilled in how to deliver secure and fast outcomes. Thus, AZ-400 certified Microsoft DevOps Engineers are among the IT field's highest-paying professionals.
In the present IT field, the AZ-400 exam is sought-after and one of the high-paid certifications. Those organizations working in Cloud always prioritize hiring Microsoft Azure DevOps Engineers who have passed Microsoft exam AZ-400. If you are determined to pursue the examination, you have to execute a lot of effort and have the perseverance to prepare for the same entirely. Following the tips and recommendations discussed above helps applicants pass the AZ-400 exam on the first try.
Continuous cost optimization can take place at all stages of an Azure workload’s lifecycle, but your Azure subscription provides a very effective benefit to further optimize your investment when you are ready to deploy that workload.
For cloud workloads with consistent resource usage, you can buy reserved instances at a significant discount and reduce your workload costs by up to 72 percent compared to pay-as-you-go prices. Azure Reservations can be obtained by committing to one-year or three-year plans for virtual machines, Azure Blob storage or Azure Data Lake Storage Gen2, SQL Database compute capacity, Azure Cosmos DB throughput, and other Azure resources.
When you can predict and commit to needed capacity, it gives us visibility into your resource requirements in advance, allowing us to be more efficient in our operations. We can then pass the savings on to you. This benefit applies to both Windows and Linux virtual machines (VMs).
In addition, you now can combine the cost savings of reserved instances with the added Azure Hybrid Benefit when running on-premises and Azure workloads to save up to 80 percent over pay-as-you-go pricing.
How to get your reservation
A reservation discount only applies to resources associated with Enterprise Agreement, Microsoft Customer Agreement, Cloud Solution Provider (CSP), or subscriptions with pay-as-you-go rates. These are billing discounts (paid upfront or monthly) and do not affect the runtime state of your resources. And do not worry, you will not pay any extra fees when you choose to pay monthly.
Reservation purchase recommendations are calculated by analyzing your hourly usage data over the last seven, 30, and 60 days.
Simple and flexible
You can purchase Azure Reserved VM Instances in three easy steps—just specify your Azure region, virtual machine type, and term (one year or three years)—that's it.
Here is how it works: Discounts are generally applied to the resource usage matching the attributes you select when you buy the reservation. Attributes include the scope where the matching VMs, SQL databases, Azure Cosmos DB, or other resources run. Attributes include the SKU, regions (where applicable), and scope. Reservation scope selects where the reservation savings apply. You can scope a reservation to a subscription or resource group. When you scope the reservation to a resource group, reservation discounts apply only to the resource group—not the entire subscription.
You can manage reservations for Azure resources including updating the scope to apply reservations to a different subscription, changing who can manage the reservation, splitting a reservation into smaller parts, or changing instance size. Enhanced data for reservation costs and usage is available for Enterprise Agreement (EA) and Microsoft Customer Agreement (MCA) usage in Azure Cost Management and Billing. Those same customers can view amortized cost data for reservations and use that data to chargeback the monetary value for a subscription, resource group, or resource.
Capacity on demand
The ability for you to access compute capacity with service-level agreements, and ahead of actual VM deployments, is important to ensure the availability of mission-critical applications running on Azure. On-demand capacity reservations, now in preview, enable you to reserve compute capacity for one or more virtual machine size(s) in an Azure region or availability zone for any length of time. You can create and cancel an on-demand capacity reservation at any time, no commitment is required.
You also can exchange a reservation for another reservation of the same type or refund a reservation, up to $50,000 USD in a 12-month rolling window if you no longer need it, or cancel a reserved instance at any time and return the remaining months to Microsoft.
Azure Lab Services offers classroom labs for higher education, K-12 institutions, and commercial organizations that don't want to use the on-premises hardware but rather want to harness the power of the cloud to host labs for students or users. We are excited to announce major updates to Azure Lab Services including enhanced lab creation and improved backend reliability, access performance, extended virtual network support, easier labs administration via new roles, improved cost tracking via Azure Cost Management service, availability of PowerShell module, and .NET API SDK for advanced automation and customization, and integration with Canvas learning management system. Learn more about the new update and how to use it.
Along with making significant reliability enhancements to the backend, labs creation, and access performance improvements, this major update is bringing a whole slew of additional features for the IT departments and administrators, educators, and the students, who are the three key personas that use this service.
IT and administrators
For the IT and administrators, we have now introduced the concept of a lab plan instead of a lab account to provide more control over the creation, configuration, and management of the labs. For ease of administration of the lab, new roles have been created to provide granular control for different people managing labs for a large organization.
Creating a large number of labs with many virtual machines requires additional vCPUs which you have to request from us. With this new update, there is an improved vCPU capacity management for your subscription and you don't share the vCPU capacity with others using the service. We have also now made it easier for you to track costs for your lab resources in Azure Cost Management. We have replaced virtual network peering with virtual network injection. With Virtual Network Injection you have more control over the network for lab virtual machines. In your own subscription, create a virtual network in the same region as the lab, delegate a subnet to Azure Lab Services, and you’re off and running.
For advanced automation, deployment, configuration, and management we have the PowerShell module and .NET API SDK. The Azure Lab Services PowerShell will now be integrated with the Azure PowerShell module and will release early February. In alignment with all the global compliance and regulatory laws around data residency, we are also saving the customer data in the regions where the labs are set up.
Educators
For all the educators and instructors using the service, we have added new functionality to improve their experience. Azure Lab Services can now be integrated within Canvas, a popular learning management system. Educators can use Canvas to create and configure labs for the students. Students can connect to the virtual machine from inside their course in Canvas. We have improved the auto-shutdown feature of the virtual machine. Auto-shutdown settings are now available for all operating systems. In addition, we have improved idle detection based on resource usage. For more flexibility, an instructor or IT Administrator can choose to skip the virtual machine template creation process if they already have an image ready to use or want to quickly deploy virtual machines for their lab.
Students
Student experiences have also improved. Students can now redeploy their virtual machine without losing data if they are having issues accessing or using the virtual machine. If the lab is set up to use AAD group sync, there is no longer a need to send an invitation email so students can access their virtual machine—one is assigned to the student automatically.
As we highlighted in our latest attack trends report, Distributed Denial-of-Service (DDoS) attacks are one of the biggest security concerns today. Whether in the cloud or on-premises, DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet. Planning and preparing for a DDoS attack is crucial to a well-vetted incident management response plan.
Today, Microsoft is excited to announce a new collaboration with Red Button, offering our customers an additional DDoS attack simulation testing provider to choose from. With Red Button’s DDoS Testing service suite, you will be able to work with a dedicated team of experts to simulate real-world DDoS attack scenarios in a controlled environment. Simulation testing allows you to assess your current state of readiness, identify gaps in your incident response procedures, and guide you in developing a proper DDoS response strategy.
Red Button experts meet with your team to understand your network architecture, assemble technical details, and define clear goals and testing schedules. This includes planning the DDoS test scope and targets, attack vectors, and attack rates. The joint planning effort is detailed in a test plan document.
2. Controlled DDoS attack
Based on the defined goals, the Red Button team launches a combination of multi-vector DDoS attacks. The test typically lasts between three to six hours. Attacks are securely executed using dedicated servers and are controlled and monitored using Red Button’s management console.
3. Summary and recommendations
The Red Button team provides you with a written DDoS Test Report outlining the effectiveness of DDoS mitigation. The report includes an executive summary of the test results, a complete log of the simulation, a list of vulnerabilities within your infrastructure, and recommendations on how to correct them.
In addition, Red Button offers two other service suites that can complement the DDoS Testing service suite:
◉ DDoS 360 is an “all included” annual service that includes the DDoS Testing, DDoS Hardening, DDoS team skills development, and DDoS Incident Response services. The program consists of multiple year-round activities carried out by Red Button’s top DDoS experts, which includes extensive pre-attack activities to strengthen your technological infrastructure and improve the skills of your teams as well as a dedicated incident response expert team in the event of an attack.
◉ DDoS Incident Response (IR) is a 30-day incident response service that consists of three phases: when under a DDoS attack or DDoS threat (for example, DDoS ransom threat), Red Button DDoS experts are immediately assigned and work closely with your security and IT teams to analyze the attack and apply the appropriate mitigations. Once the attack has been fully mitigated, Red Button audits your network architecture and DDoS protection system configuration, including running a DDoS test and provides detailed recommendations for hardening and optimization to prevent future attacks. Lastly, Red Button conducts DDoS training for your teams to increase your skills and readiness, and helps you build a DDoS Playbook that provides detailed procedures and activities to prepare for any future attack.
Azure DDoS simulation testing policy
Red Button’s simulation environment is built within Azure. You can only simulate attacks against Azure-hosted public IP addresses that belong to an Azure subscription of your own, which will be validated by Azure Active Directory (Azure AD) before testing. Additionally, these target public IP addresses must be protected under Azure DDoS Protection. Red Button services are sold separately from Azure DDoS Protection and can be purchased directly through Red Button.
You may only simulate attacks using our approved testing partners:
One of the biggest topics of discussion at COP26, the global climate conference held in November 2021, was how a lack of reliable and consistent measurement hampers progress on the path to Net Zero. I have been reflecting on this issue and, on this Earth Day, I would like to provide an update on how we are measuring energy and water use at our datacenters to improve sustainability across the Azure Cloud.
Today, we’re sharing an important update on how Microsoft, and our datacenters, are helping to solve our part of this measurement challenge.
While the environmental goals are similar, each industry has unique challenges in measuring its carbon emissions to build its sustainability strategy. It’s one of the key reasons we, together with ClimateWorks Foundation and 20 other leading organizations, launched the Carbon Call. It’s also why we developed Microsoft Cloud for Sustainability, an Azure-based platform that allows organizations to combine disparate data sources into one place and help provide insights into how to improve their sustainability approaches.
You’ve told us just how important measuring energy and water consumption from our datacenters is in taking sustainability into account for commercial decisions. Below you will see, for the first time, our datacenter PUE (Power Usage Effectiveness) and WUE (Water Usage Effectiveness) metrics. To address these capabilities, we set design goals—our theoretical estimates of the most efficient we can operate our datacenters—and ensure we have measurements of our actual efficiencies. These targets can vary between datacenter generations and usage; for instance, newer datacenter generations as well as datacenters operating at peak utilization are more efficient. We track these statistics at a global level and by our operating geographies—Americas, Asia Pacific, and EMEA (Europe, Middle East, Africa).
Understanding Power Usage Effectiveness (PUE)
PUE is an industry metric that measures how efficiently a datacenter consumes and uses the energy that powers the datacenter, including the operation of systems like powering, cooling, and operating the servers, data networks and lights. The closer the PUE number is to “1,” the more efficient the use of energy.
While local environment and infrastructure can affect how PUE is calculated, there are also slight variations across providers. Here’s the simplest way to think about PUE.
We design and build our datacenters toward the optimum PUE figure. We can also predict, with a high degree of accuracy, that optimum PUE figure. As we constantly innovate, we factor these changes into our datacenter designs to get as close to “1” as feasible. Our newest generation of datacenters have a design PUE of 1.12 and, with each new generation, we strive to become even more efficient. In the chart below, the blue bars show our estimated, or designed, PUE figures, while the grey bars indicate our actual PUE figures. As you can see, in Asia Pacific our actual PUE is higher; that’s due in part to higher ambient temperatures in the region which necessitates additional cooling.
In almost every region, our actual operating PUE is more efficient than our designs.
Understanding Water Usage Effectiveness (WUE)
Water Usage Effectiveness (WUE) is another key metric relating to the efficient and sustainable operations of our datacenters and is a crucial aspect as we work towards our commitment to be water positive by 2030.
WUE is calculated by dividing the number of liters of water used for humidification and cooling by the total annual amount of power (measured in kWh) needed to operate our datacenter IT equipment.
Like PUE, there are variables that can impact WUE—many of which relate to the location of the datacenter. Humid locations often have more atmospheric water, while arid locations have very little. Datacenters in colder parts of the world, like Sweden and Finland operate in naturally cooler environments so require less water for cooling. Our datacenter designs minimize water use. The chart below shows (in blue) our estimated or designed WUE figure, and in grey, our actual WUE figure. Again, Asia Pacific is higher due to higher ambient temperatures and as a result the need in some places for water-cooled chillers.
We continue to integrate our standards in water reduction technologies such as those in our Phoenix, Arizona datacenter where we use direct outside air most of the year to cool servers. We otherwise cool through direct evaporation that requires a fraction of the water compared to other, conventional water-based cooling systems such as water-cooled chillers.
Furthermore, by powering our datacenter with power from the Sun Streams 2 Solar Project owned by local partner, Longroad Energy, we’re displacing the water needed in the traditional electricity generation process and expect to save 356 million liters of water annually.
Scope 3 and supply chain
As we shared in March with our annual sustainability report, we made good progress on a number of our goals. Across the company’s operations, we saw an overall reduction in our Scope 1 and Scope 2 emissions of about 17 percent year over year, through our purchasing of renewable energy. At the same time, we also saw a rise in our Scope 3 emissions, which increased about 23 percent year over year.
We know that Scope 3 emissions (representing the total emissions across a company’s entire value chain) are the most difficult to control and reduce, because we can often only influence change. We know this is a long-term effort and this year we have increased our focus on operational discipline that is rooted in reliable data. We’ve also been working with partners across the industry, including Infrastructure Masons on carbon transparency within the datacenter supply chain, and will have exciting news to share at the Datacloud Global Congress on April 25 to 27.
In September of 2021, we announced the highly anticipated general availability of Azure Purview—a cloud-native data governance solution to enable organizations of all sizes to manage and govern their on-premises, multicloud, and software as a service (SaaS) data. Since Azure Purview was brought onto the market, thousands of organizations including London Heathrow Airport, Grundfos, and illimity have collectively discovered tens of billions of data assets as well as served up millions of searches every month to empower knowledge workers to find valuable enterprise data quickly and easily.
Organizations that use Azure Purview have a more holistic understanding of their hybrid data estate, which is always kept up to date with automated data discovery and sensitive data classification. In addition to empowering knowledge workers, this understanding, along with insights from sensitivity, business context, and relationships between data assets is also being used by teams working under the Chief Data Officers (CDO), the Chief Information and Security Officers (CIO and CISO) and the Chief Risk and Compliance Officers (CRO and CCO) to govern, protect, and manage data more effectively.
Traditional data management solutions rely on multiple unconnected, duplicative business processes, and a patchwork of software products augmented with custom code and point-wise integrations. Dozens of products are sometimes used together to address fragments of the data governance and compliance landscape, forcing Chief Data, Security, Compliance, and Legal Officers to stitch together solutions that don’t work together, expose infrastructure gaps, and are costly and complex to manage. A survey of US-based decision-makers showed that to meet their compliance and data-protection needs, almost 80 percent had purchased multiple products, and a majority had purchased three or more. The result is increased operations costs, ineffective data governance, poor security outcomes, failed compliance audits, and damage to brand reputation. Additionally, as the threat landscape continues to evolve, the types of risks organizations face inevitably expand and extend well beyond the traditional cybersecurity risks. This means that risk roles within the organization are blurring, requiring a collaborative and cohesive approach across data, compliance, and risk officers, as each drives an integral part of an effective data strategy. We believe the new way to optimize your data strategy is to deliver a unified view of data in the organization across hybrid, multicloud environments by bringing together the business users of data with the protectors of data.
In the past, we have shared how Azure Purview and Microsoft 365 Compliance are used together to ensure consistent, automated application of sensitivity labels to data assets across the data estate to simplify how organizations understand their sensitive data.
Today, we are excited to introduce Microsoft Purview—a comprehensive set of solutions from Microsoft to help you govern, protect, and manage your entire data estate. By bringing together the former Azure Purview and the former Microsoft 365 Compliance portfolio under one brand and over time, a more unified platform, Microsoft Purview can help you understand and govern the data across your estate, safeguard that data wherever it lives, and improve your risk and compliance posture in a much simpler way than traditional solutions on the market today.
Microsoft Purview
◉ Helps you gain visibility into assets across your entire data estate.
◉ Leverages that visibility to manage end-to-end data risks and regulatory compliance.
◉ Governs, protects, and manages data in a new, more comprehensive, and simpler way.
Posts
