Time
14 hours 28 minutes
Difficulty
Intermediate
CEU/CPE
15

Video Transcription

00:00
Hello, Siberians. Welcome to Lesson three points. 11 off auditory Off This Coast, titled Is a Tour is over. One Microsoft Azure architect design.
00:11
Here are the landing objectives for this particular lesson.
00:15
We'll start out by covering as your cosmos. Debbie Design decisions from an availability perspective. What the things that we need to know for design and five fallibility.
00:25
Well, then proceed to cover cosmos tibia design decisions from its scalability perspective
00:31
and also from the monitoring perspective,
00:36
we'll talk about your cosmos TB security design decisions on your hand by talking about a joke. Cosmos TB Cost design decisions Let's get right into this
00:48
when it comes to security design decisions off azure cosmos. TB
00:53
Talking about network security we can use I p Firewall goes to lock down network connectivity access. Or we can limit connectivity to village that under our control
01:03
when it comes to access management. It's a similar case off. Wants to use verbs, access control to restrict management access to the cosmos, devious service itself.
01:14
And then we have to master keys and to read only keys that I provided when we create an agile cosmos TB account. Want to protect this keys because anyone that gets ahold of those keys gets Angelique and connects to the service and get access to our data
01:30
when it comes to data protection and corruption is a neighborhood at rest by the fault, and that's using a year's 256 encryption.
01:38
We can an ance this by using our own kids off. For example, the default
01:44
encryption uses makes off manage keys. We can choose to use our own case integrated with as your key votes.
01:51
And when it comes to trade protection,
01:53
we can enable advance trade protection. Forager cosmos TB on this provides an additional layer of security intelligence, so this can help to detect unusual or potentially harmful attempts to exploit as a cosmos. TB accounts. So so this uses a combination off your heuristic and behavior analyses
02:13
on machine learning to make this detections
02:19
when talking about costs. Forager cosmos D B. We need to understand what we pay for what we mended. Pay for four hijackers must be at two things. We pay for the guaranteed performance, which are the request units that was selected if you're not family, which what request units are our recommend? Looking into odd azure Kassie's
02:38
provided in the cyber Real life library for for Roger and have a look at those.
02:43
So what we pay for it would pay for guaranteed performance. What I request you need. We also pay for consumed storage, and it's very important what we pay for its consumed storage
02:53
Martyr Vigen Replication with a single master essentially doubles ***. Also, you're never replication that doubles the cost off the request units.
03:01
Martyr Vigen replication if with multiple masters increases, request unit costs. So if you're gonna be using multi right regions, be aware that your request unit cost increases.
03:15
If you're using a single Vigen cost, mostly be account and you enable the option for availability zones.
03:23
That's gonna hard to your cost. That is the equivalent of you using emotive regional. Adin is an additional vision to your account,
03:32
so be aware of debt.
03:37
Like many other Microsoft Service's off platform services in azure azure cosmos, Debbie's off supports reserved capacity, which can lead to a cost savings off up to 65%.
03:51
So when it comes to the self capacity makes of has made some adjustment in Thames off the entry point to be able to purchase reserved capacity. So now there's a new entry point of 5000 records units per seconds, so you can reserve that on. Then you get a discounted price. Also valid in just paying for eat
04:10
yearly up front.
04:12
You can pay for it on a monthly basis. So which is a good alternative
04:17
the max of recently just a few weeks ago and now on something called autopilot, which is in preview, which allows for more flexible, more flexibility when it comes to the question. It's because in the past, what happens is we can, on Lee
04:32
specified request you needs that our database will be used invite up front, and then we have to implement some from off automated monitoring and automated adjustment if we each that limit. What is allows us to do is to say, you can consume up to this number off requests you need based on the actual workload that's coming in.
04:53
What's to understand when it comes to cost? Is that this as a slightly I A cost for request units per second?
05:02
Quiz Question number one
05:05
you are designing a solution. Doug is is azure cosmos TB.
05:11
You have enabled diagnostic logs. Toby start in agile Log Analytics.
05:15
You need to ensure that on a lot is generated. When a request charge for a query exit 50 requests, you need modern 20 times within a 15 minute window.
05:29
What will you recommend?
05:30
Option one. Create a set quickie toe. Identify when requests judge
05:36
exceeds 50.
05:39
Configure on a large treasure off 20 and a period of 15.
05:45
Option to create a such query toe. Identify Winter vision exceeds 20 on the question. Exceeds 50.
05:55
Configure a period off 15.
05:58
Option tree creates such query to identify when we question exists. Exit 20.
06:05
Configure a period of 15 and F frequency of 20
06:10
option fall. Create a such quickly to identify. Went division exceeds 20.
06:15
Configure a period of 15.
06:18
If you select that option one, you would be correct. We'll need to create a such query to identify when the request statics exit 50
06:28
on Dhe. Then our lunch tray showed will between tea and a period off 15. Because that's within the 15 minutes window
06:35
on we're looking for when we questioned Exceeds 50 Requests unit so that we'll be looking for
06:44
qu'est. Question number two.
06:46
You are designing a solution which requires you to impart data for me. Table in an on Prem sequel Severed database into an azure cosmos. TB accounts that use a sequel, a p I. What should you recommend?
07:03
Option one as your data migration assistant.
07:08
Option two is it copy
07:10
option three as your cost. Most Eby Data migration to
07:15
option for Didn't might management get way Option five as your database migration service
07:21
If you select that option three as your cosmos TB in data migration to you will be correct
07:28
because that's the two that support migration from Sequels of a database
07:33
to Azure Cosmos TV sequel AP A database migration service only supports the Mongol D. B in this case
07:45
Quiz question number three
07:46
you plan to migrate and on premises deployment off Mongo D B toe on azure Cosmos baby account that uses the Mongol D B. A. P I.
07:57
What solution will you recommend for doing in the migration?
08:01
Option one As your database migration service
08:05
option to data migration Assistant
08:07
Option three. As a storied explorer
08:11
option for Jules Cosmos, TB did immigration, too.
08:15
If you selected up Option one as your database migration service, you become Rex because that supports that scenario.
08:26
It brings me to the hand off this lesson. Thanks very much for watching, and I'll see you in the next lesson.

Up Next

AZ-301 Microsoft Azure Architect Design

This AZ-301 training covers the skills that are measured in the Microsoft Azure Architect Design certification exam. Learn strategies to plan for the exam, target your areas of study, and gain hands-on experience to prepare for the real world.

Instructed By

Instructor Profile Image
David Okeyode
Cloud Security Architect
Instructor