Fault and update domains, zones, the SLA each gives, and what you can and can't change after a VM is created.
From Ultra Transcenders AZ-104 by Tony Rough
Availability options decide what kind of failure a group of VMs can survive. An availability set spreads VMs within one datacentre; availability zones spread them across datacentres in a region; neither protects against losing the whole region.
| Availability set | Availability zones | |
|---|---|---|
| Protects against | Rack/hardware failure and planned maintenance in one datacentre | Loss of one datacentre (zone) in a region |
| Mechanism | Fault domains (max 3, some regions 2) and update domains (max 20, default 5) | VMs spread one per zone |
| Region outage | No | No; use another region (for example the paired region) |
With two or more VMs, an availability set qualifies for a 99.95% VM SLA, while VMs spread across two or more availability zones qualify for 99.99%. (See Figure 8.1.)
platformFaultDomainCount = 3 and platformUpdateDomainCount = 20.A proximity placement group (PPG) keeps resources physically close for low latency, and it is regional: a VM or scale set can use only a PPG in its own region. The resource group’s location doesn’t matter.
This note is one section of Ultra Transcenders AZ-104: Microsoft Azure Administrator, an independent study guide that explains every topic the exam covers by technology, with comparison tables, diagrams and the common traps, plus a glossary linked to Microsoft Learn.
About the book · Free AZ-104 glossary · All AZ-104 study notes
Where LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS keep your copies, what each survives, and which account types support them.
The three SAS types, what each can grant, how they're signed, and how to revoke one when a token leaks.
How the storage account firewall decides who gets in: IP rules, VNet rules with service endpoints, private endpoints and the trusted-services exception.
The order Azure applies subnet and NIC network security groups for inbound and outbound traffic, how priority works, and a worked example.
What a private endpoint puts in your subnet, how private DNS zones make names resolve to it, and when to choose it over a service endpoint.
Which App Service tiers allow manual scale-out, autoscale, slots and how many instances, and the difference between scaling up and scaling out.
What delete and read-only locks block, how they inherit, and the surprising things a ReadOnly lock stops (like listing storage keys).