Microsoft Azure Administrator Associate: key terms

Flashcards for this exam Microsoft Azure Administrator Associate guide Class dates

• App Service PlanSet of compute resources and pricing tier on which Azure App Service apps run.Intermediate
• Application InsightsAzure Monitor feature for application performance monitoring (APM), including requests, dependencies, exceptions and availability tests.Intermediate
• Application Security Group (ASG)Azure construct that groups VM network interfaces by role so NSG rules can reference workloads instead of IP addresses.Intermediate
• Availability SetAzure logical grouping that spreads VMs across fault domains and update domains within a data center.Intermediate
• Availability Zone (AZ)One or more physically separate data centers within a region with independent power, cooling and networking.Foundational
• AzCopyCommand-line utility for copying data to, from and between Azure Storage accounts.Foundational
• Azure Activity LogSubscription-level Azure log of control plane operations, such as who created, modified or deleted resources.Foundational
• Azure AdvisorFree Azure service that analyzes configuration and usage telemetry and recommends improvements across five categories.Foundational
• Azure App ServiceAzure PaaS for hosting web apps, REST APIs and mobile back ends on Windows or Linux with built-in scaling and deployment.Foundational
• Azure Application GatewayAzure regional layer 7 load balancer with URL path routing, TLS termination and an optional web application firewall.Intermediate
• Azure ArcAzure service that projects on-premises, edge and multicloud servers, Kubernetes clusters and databases into Azure Resource Manager.Intermediate
• Azure BackupAzure service for backing up and restoring Azure VMs, files, databases and on-premises workloads to vaults.Foundational
• Azure BastionAzure PaaS service providing secure RDP and SSH access to VMs over TLS from the portal without public IPs on the VMs.Intermediate
• Azure Blob StorageAzure object storage for massive amounts of unstructured data such as images, video, backups and data lakes.Foundational
• Azure CLICross-platform command-line tool (az) for creating and managing Azure resources.Foundational
• Azure Cloud ShellBrowser-accessible authenticated shell in Azure with Bash or PowerShell and Azure tools preinstalled.Foundational
• Azure ExpressRouteAzure service providing private, dedicated connectivity from on-premises networks to Microsoft cloud via a connectivity provider.Intermediate
• Azure File SyncAn Azure service that syncs Windows file servers with Azure Files and can tier infrequently used files to the cloud.Intermediate
• Azure FilesAzure fully managed file shares accessible via SMB, NFS and REST, mountable from cloud or on-premises systems.Foundational
• Azure FirewallAzure managed, stateful firewall-as-a-service for filtering network and application traffic across virtual networks.Intermediate
• Azure Front DoorMicrosoft global layer 7 entry point combining CDN, global HTTP load balancing, TLS offload and WAF at the edge.Intermediate
• Azure Hybrid BenefitLicensing benefit letting customers use on-premises Windows Server and SQL Server licenses with Software Assurance on Azure.Foundational
• Azure Key VaultAzure service for securely storing and controlling access to secrets, encryption keys and certificates.Intermediate
• Azure Landing ZoneMicrosoft's reference architecture for a scalable, governed multi-subscription Azure environment, part of the Cloud Adoption Framework.Advanced
• Azure Load BalancerAzure layer 4 load balancer distributing TCP and UDP traffic across VMs, available as public or internal.Foundational
• Azure LocalMicrosoft hybrid infrastructure solution (formerly Azure Stack HCI) running VMs and Azure services on validated on-premises hardware.Advanced
• Azure Managed DisksBlock-level storage volumes for Azure VMs managed by Azure, offered as Ultra, Premium SSD v2, Premium SSD, Standard SSD and Standard HDD.Intermediate
• Azure MigrateAzure hub for discovering, assessing and migrating on-premises servers, databases, web apps and VDI to Azure.Intermediate
• Azure MonitorAzure's comprehensive monitoring platform collecting metrics and logs from Azure, hybrid and multicloud resources.Foundational
• Azure NAT GatewayFully managed Azure service providing outbound-only internet connectivity for subnets using static public IPs.Intermediate
• Azure PolicyAzure service that creates, assigns and evaluates rules to enforce organizational standards and assess compliance at scale.Foundational
• Azure PortalWeb-based unified console for building, managing and monitoring Azure resources.Foundational
• Azure Private LinkAzure service that exposes PaaS services or your own services through private endpoints with private IPs in your VNet.Intermediate
• Azure Region PairPairing of two Azure regions in the same geography used for prioritized recovery, sequential updates and geo-redundant replication.Intermediate
• Azure ReservationsAzure commitment of 1 or 3 years to specific resources such as VMs or SQL compute in a region in exchange for large discounts.Foundational
• Azure Resource Manager (ARM)Azure's deployment and management service; every request from portal, CLI, PowerShell or SDK passes through it.Foundational
• Azure Resource Manager Template (ARM template)A JSON file that declaratively defines Azure resources for deployment through Azure Resource Manager.Intermediate
• Azure Role-Based Access Control (Azure RBAC)Authorization system for Azure resources that assigns role definitions to security principals at a scope.Foundational
• Azure Savings Plan for ComputeAzure pricing model committing to a fixed hourly spend on compute for 1 or 3 years to get discounts across services and regions.Intermediate
• Azure Service HealthPersonalized view of Azure service issues, planned maintenance and health advisories affecting your subscriptions and regions.Foundational
• Azure Site Recovery (ASR)Azure disaster recovery service that replicates VMs and physical servers and orchestrates failover and failback.Intermediate
• Azure Spot Virtual MachinesAzure VMs using unused capacity at deep discounts that can be evicted when Azure needs the capacity.Intermediate
• Azure Storage AccountAzure resource providing a unique namespace for Blob, Files, Queue and Table data with shared settings for redundancy and access.Foundational
• Azure Storage RedundancyAzure Storage replication options: LRS, ZRS, GRS, GZRS and read-access variants RA-GRS and RA-GZRS.Intermediate
• Azure SubscriptionLogical container for Azure resources that serves as a billing boundary and an access control boundary.Foundational
• Azure Traffic ManagerAzure DNS-based traffic load balancer that directs clients to endpoints across regions using routing methods.Intermediate
• Azure Virtual Desktop (AVD)Azure Desktop as a Service that delivers Windows desktops and remote apps, including multi-session Windows 11.Intermediate
• Azure Virtual MachinesAzure IaaS compute service providing on-demand Windows and Linux virtual machines.Foundational
• Azure Virtual Network (VNet)Azure's fundamental private network that isolates resources and enables communication with each other, the internet and on-premises networks.Foundational
• Azure VPN GatewayAzure virtual network gateway that sends encrypted IPsec/IKE traffic for site-to-site, point-to-site and VNet-to-VNet connections.Intermediate
• Azure Well-Architected Framework (WAF)Microsoft guidance for improving the quality of Azure workloads across five pillars.Foundational
• Backup as a Service (BaaS)Cloud service that stores and manages backups offsite on provider infrastructure, often with policy-based retention.Foundational
• Bastion HostHardened server in a public subnet used as a controlled entry point for administrative access to private instances.Foundational
• BicepMicrosoft's domain-specific language for declaratively deploying Azure resources, which transpiles to ARM JSON templates.Intermediate
• Blob Access TiersAzure Blob Storage tiers (Hot, Cool, Cold and Archive) that trade storage cost against access cost and latency.Intermediate
• Conditional AccessMicrosoft Entra ID policy engine that grants, blocks or restricts access based on signals such as user, device, location and risk.Intermediate
• Data ResidencyRequirement or choice that data be stored and processed in a specific geographic location.Foundational
• Dedicated HostPhysical server fully allocated to one customer, giving visibility of sockets and cores for license compliance.Intermediate
• Deployment SlotLive App Service environment with its own hostname used to stage a new version and swap it into production with no downtime.Intermediate
• Detective GuardrailGovernance control that identifies noncompliant resources after creation and reports or remediates them.Intermediate
• Disaster Recovery as a Service (DRaaS)Cloud service that replicates servers and data to a provider and orchestrates failover so workloads can recover after a disaster.Intermediate
• Health CheckPeriodic probe a load balancer, DNS service or orchestrator uses to determine whether a target is healthy and should receive traffic.Foundational
• Kusto Query Language (KQL)A read-only query language used in Azure Monitor Log Analytics, Application Insights, Microsoft Sentinel, and Azure Data Explorer.Intermediate
• Log Analytics WorkspaceAzure Monitor data store where log data is collected and queried with Kusto Query Language (KQL).Intermediate
• Managed IdentityAutomatically managed Entra ID identity for Azure resources, letting code authenticate to services without stored credentials.Intermediate
• Management GroupAzure container above subscriptions used to apply governance such as Azure Policy and RBAC across many subscriptions.Foundational
• Microsoft Cloud Adoption Framework for Azure (CAF)Microsoft's guidance, best practices and tools for cloud adoption organized into methodologies from strategy through management.Intermediate
• Microsoft Cost ManagementAzure-native tooling for analyzing costs, creating budgets and alerts, allocating costs and exporting billing data.Foundational
• Microsoft Defender for CloudMicrosoft CNAPP providing cloud security posture management and workload protection for Azure, AWS, Google Cloud and on-premises.Intermediate
• Microsoft Entra B2B CollaborationEntra ID capability for inviting external partner users as guests to access an organization's apps and resources.Intermediate
• Microsoft Entra ConnectMicrosoft tool (formerly Azure AD Connect) that synchronizes on-premises Active Directory identities to Microsoft Entra ID.Intermediate
• Microsoft Entra Connect SyncThe on-premises synchronization tool, formerly Azure AD Connect, that syncs AD DS identities to Microsoft Entra ID.Intermediate
• Microsoft Entra IDMicrosoft's cloud identity and access management service, formerly Azure Active Directory (Azure AD).Foundational
• Microsoft Entra Privileged Identity Management (PIM)Entra ID feature providing just-in-time, time-bound and approval-based activation of privileged Entra and Azure roles.Advanced
• Microsoft Entra TenantA dedicated, isolated instance of Microsoft Entra ID representing an organization, identified by a tenant ID and domain.Foundational
• Network Security Group (NSG)Azure set of stateful allow/deny rules filtering traffic to and from resources by source, destination, port and protocol.Foundational
• Preventive GuardrailGovernance control that blocks noncompliant actions before they happen, typically implemented with policies.Intermediate
• Provisioned IOPS (PIOPS)Storage performance option where a specific number of I/O operations per second is purchased and guaranteed for a volume.Intermediate
• Resource GroupAzure logical container that holds related resources sharing a lifecycle, permissions and policies.Foundational
• Resource LockAzure setting that prevents accidental deletion (CanNotDelete) or modification (ReadOnly) of subscriptions, resource groups or resources.Foundational
• Resource TaggingAttaching key-value metadata labels to cloud resources for cost allocation, automation, access control and organization.Foundational
• RightsizingMatching resource types and sizes to actual workload requirements to eliminate waste while maintaining performance.Foundational
• Service EndpointAzure VNet feature that extends a subnet's identity to Azure PaaS services over the Azure backbone so services can restrict access to that subnet.Intermediate
• Service PrincipalSecurity identity in an Entra tenant representing an application or automation tool that needs access to resources.Intermediate
• Shared Access Signature (SAS)Signed URI token granting restricted, time-limited delegated access to Azure Storage resources.Intermediate
• User-Defined Route (UDR)Custom route in an Azure route table that overrides system routes to control where subnet traffic is sent.Intermediate
• Virtual Machine Scale Sets (VMSS)Azure compute resource for deploying and automatically scaling a group of load-balanced VMs.Intermediate
• Virtual Network PeeringAzure feature that connects two VNets, in the same or different regions, over the Microsoft backbone with private IPs.Intermediate