Microsoft Windows Server Hybrid Administrator (AZ-800/801): key terms

Flashcards for this exam Microsoft Windows Server Hybrid Administrator (AZ-800/801) guide

• Active Directory Certificate Services (AD CS)The Windows Server role that implements a public key infrastructure for issuing and managing digital certificates.Advanced
• Active Directory DomainA logical AD boundary of administration, replication and authentication sharing a common directory database and DNS namespace.Foundational
• Active Directory Domain Services (AD DS)Microsoft's on-premises directory service that stores users, computers and groups and provides authentication and policy for Windows domains.Foundational
• Active Directory Federation Services (AD FS)A Windows Server role providing claims-based single sign-on to external applications using SAML, WS-Federation and OpenID Connect.Advanced
• Active Directory Recycle BinAn optional AD feature that lets deleted objects be restored with all attributes and group memberships intact.Intermediate
• Active Directory ReplicationThe multi-master process that synchronizes directory changes among domain controllers within and between sites.Advanced
• Active Directory SiteAn AD object representing a well-connected physical location, defined by IP subnets, used to control replication and client DC selection.Intermediate
• Active Directory Users and Computers (ADUC)The classic MMC console for managing AD users, groups, computers and OUs.Foundational
• Active Directory-Integrated DNS ZoneA DNS zone stored in the AD database and replicated with AD, supporting multi-master updates and secure dynamic updates.Intermediate
• AGDLPThe Microsoft group nesting strategy: Accounts go into Global groups, which go into Domain Local groups, which receive Permissions.Intermediate
• Authoritative RestoreAn AD restore method that marks restored objects as authoritative so they replicate out and override newer copies on other DCs.Advanced
• Azure ArcAzure service that projects on-premises, edge and multicloud servers, Kubernetes clusters and databases into Azure Resource Manager.Intermediate
• Azure File SyncAn Azure service that syncs Windows file servers with Azure Files and can tier infrequently used files to the cloud.Intermediate
• Cloud WitnessA failover cluster quorum witness that uses an Azure Storage account blob as a tie-breaking vote.Intermediate
• Cluster QuorumThe voting mechanism a failover cluster uses to decide whether enough nodes are communicating to keep running and avoid split-brain.Intermediate
• Cluster Shared Volume (CSV)A Windows failover cluster storage feature that lets all nodes read and write the same NTFS or ReFS volume simultaneously.Advanced
• Connection BrokerThe VDI component that authenticates users and assigns them to available desktops or published applications.Intermediate
• Credential GuardA Windows security feature that uses virtualization-based security to isolate credential secrets from the operating system.Advanced
• Desired State Configuration (DSC)A PowerShell declarative configuration management platform that defines and enforces how servers should be configured.Advanced
• DFS Namespaces (DFS-N)A Windows Server feature that presents shared folders from multiple servers under one logical UNC path.Intermediate
• DFS Replication (DFSR)A Windows Server multi-master replication engine that synchronizes folders between servers using Remote Differential Compression.Intermediate
• DHCP FailoverA Windows Server DHCP feature where two servers share lease information for a scope in load-balance or hot-standby mode.Intermediate
• Directory Services Restore Mode (DSRM)A special boot mode for domain controllers that takes AD DS offline for maintenance or restoration, using a local DSRM password.Advanced
• Distinguished Name (DN)The full LDAP path that uniquely identifies an object in a directory, built from components such as CN, OU and DC.Intermediate
• Domain Controller (DC)A Windows Server running AD DS that authenticates users and computers and holds a writable or read-only copy of the directory.Foundational
• Domain JoinAdding a computer to an Active Directory domain so it trusts the domain for authentication and receives Group Policy.Foundational
• Domain Naming MasterThe forest-wide FSMO role that controls adding and removing domains and application partitions in the forest.Intermediate
• Domain TreeOne or more AD domains sharing a contiguous DNS namespace and connected by two-way transitive parent-child trusts.Intermediate
• Dynamic MemoryA Hyper-V feature that adjusts a VM's memory between minimum and maximum values based on demand.Intermediate
• Event ViewerThe Windows console for viewing System, Application, Security and other event logs.Foundational
• Failover ClusteringA Windows Server feature that groups servers (nodes) so clustered roles automatically fail over to another node when one fails.Intermediate
• File Server Resource Manager (FSRM)A Windows Server role service for managing folder quotas, file screening, classification and storage reports.Intermediate
• Fine-Grained Password Policy (FGPP)An AD feature that applies different password and lockout policies to specific users or global groups through Password Settings Objects.Advanced
• Flexible Single Master Operation (FSMO)Five special AD roles held by specific domain controllers to perform operations that cannot be multi-master.Intermediate
• ForestThe top-level AD container of one or more domain trees that share a schema, configuration and global catalog; the security boundary.Intermediate
• Functional LevelA domain or forest setting that determines which AD features are available, based on the oldest DC operating system allowed.Intermediate
• Global Catalog (GC)A domain controller that stores a partial, read-only replica of every object in the forest to support forest-wide searches and logons.Intermediate
• gpresultA Windows command that displays the Resultant Set of Policy applied to a user and computer.Intermediate
• Group Managed Service Account (gMSA)An AD account for services whose complex password is automatically managed and rotated by domain controllers and usable on multiple servers.Advanced
• Group Policy Object (GPO)A collection of settings in Active Directory that configures users and computers when linked to sites, domains or OUs.Foundational
• Group Policy Processing OrderThe sequence in which GPOs apply: local, site, domain, then OU (LSDOU), with later policies overriding earlier ones.Intermediate
• Group ScopeThe AD property (domain local, global or universal) that determines where a group can be used and what members it can contain.Intermediate
• Hyper-VMicrosoft's Type 1 hypervisor built into Windows Server and Windows client editions.Foundational
• Hyper-V CheckpointHyper-V's point-in-time VM capture; production checkpoints use VSS for application-consistent images, while standard checkpoints include memory state.Intermediate
• Hyper-V Generation 2 VMA Hyper-V VM type using UEFI firmware, Secure Boot, SCSI boot and synthetic devices, versus legacy BIOS-based Generation 1.Intermediate
• Hyper-V ReplicaAsynchronous Hyper-V VM replication from a primary host to a replica host for disaster recovery.Intermediate
• Hyper-V Virtual SwitchA software Layer 2 switch in Hyper-V that connects VMs to each other, the host and external networks.Foundational
• Infrastructure MasterThe domain-wide FSMO role that updates cross-domain object references, such as group members from other domains.Advanced
• Just Enough Administration (JEA)A PowerShell security technology that limits remote administrators to specific cmdlets and parameters through constrained endpoints.Advanced
• Live MigrationMoving a running VM from one host to another with no perceptible downtime, as in Hyper-V Live Migration or KVM live migration.Intermediate
• Microsoft Entra Connect SyncThe on-premises synchronization tool, formerly Azure AD Connect, that syncs AD DS identities to Microsoft Entra ID.Intermediate
• Microsoft Entra IDMicrosoft's cloud identity and access management service, formerly Azure Active Directory (Azure AD).Foundational
• Multipath I/O (MPIO)Using multiple physical paths between a host and storage for redundancy and load balancing, managed by multipathing software.Intermediate
• Nested VirtualizationRunning a hypervisor inside a virtual machine so the VM can host its own VMs.Intermediate
• NIC TeamingCombining multiple NICs on a host into one logical interface for redundancy, load balancing or both.Intermediate
• ntdsutilA command-line tool for AD database maintenance, FSMO role seizure, metadata cleanup, snapshots and authoritative restore.Advanced
• NTFSThe New Technology File System, the standard journaling filesystem for Windows with permissions, encryption, compression and quotas.Foundational
• NTFS PermissionsFile and folder access controls on NTFS volumes, such as Full Control, Modify, Read and Execute, applying both locally and over the network.Foundational
• Organizational Unit (OU)Container for AWS accounts within AWS Organizations used to group accounts and apply policies hierarchically.Intermediate
• Pass-Through Authentication (PTA)A hybrid sign-in method in which Microsoft Entra ID forwards password validation to lightweight on-premises agents that check against AD DS.Intermediate
• Password Hash Synchronization (PHS)A hybrid sign-in method that syncs a hash of the on-premises password hash to Microsoft Entra ID so authentication happens in the cloud.Intermediate
• PCI PassthroughAssigning an entire physical PCIe device, such as a GPU or NIC, directly to a single VM.Advanced
• PDC EmulatorThe domain-wide FSMO role that is the authoritative time source, receives urgent password changes and processes account lockouts.Intermediate
• Performance MonitorA Windows tool for real-time and logged collection of performance counters for CPU, memory, disk and network.Intermediate
• PowerShellMicrosoft's cross-platform, object-based command shell and scripting language for automating Windows Server and cloud administration.Foundational
• PowerShell RemotingRunning PowerShell commands on remote computers over WinRM (WS-Management) or SSH.Intermediate
• Protected Users GroupAn AD security group whose members get hardened credential protections such as no NTLM, no DES or RC4 Kerberos, and no credential caching.Advanced
• RD GatewayAn RDS role service that tunnels Remote Desktop Protocol traffic over HTTPS so external users connect without a VPN.Intermediate
• Read-Only Domain Controller (RODC)A domain controller holding a read-only copy of the AD database, designed for branch offices with weak physical security.Intermediate
• Remote Desktop Services (RDS)The Windows Server role set that delivers session-based desktops, virtual desktops and RemoteApp programs to users.Intermediate
• Remote Desktop Session Host (RDSH)An RDS role service that lets multiple users run sessions simultaneously on one Windows Server, delivering session-based desktops or RemoteApps.Intermediate
• Remote Direct Memory Access (RDMA)A networking capability that lets one computer read or write another's memory directly, bypassing the CPU and OS kernel for low latency.Advanced
• Resilient File System (ReFS)A Microsoft filesystem designed for data integrity and scale, using checksums and integration with Storage Spaces for automatic repair.Intermediate
• RID MasterThe domain-wide FSMO role that allocates pools of relative IDs (RIDs) to DCs for building unique security identifiers.Intermediate
• Schema MasterThe forest-wide FSMO role that controls all updates and modifications to the Active Directory schema.Intermediate
• Security Group (SG)Stateful virtual firewall attached to instances or network interfaces that allows specified inbound and outbound traffic.Foundational
• Server CoreA minimal Windows Server installation option without the desktop GUI, managed remotely or from the command line.Foundational
• Server ManagerThe built-in Windows Server console for adding roles and features and monitoring local and remote servers.Foundational
• Server Message Block (SMB)The Windows file and printer sharing protocol, running directly over TCP port 445.Foundational
• Service Principal Name (SPN)A unique identifier registered in AD that maps a service instance to the account it runs under for Kerberos authentication.Advanced
• Share PermissionsPermissions on an SMB shared folder (Full Control, Change, Read) that apply only when accessed over the network.Foundational
• Shielded VMA Hyper-V Generation 2 VM protected by encryption and a Host Guardian Service so only authorized hosts can run it.Advanced
• Single Root I/O Virtualization (SR-IOV)A PCIe standard that lets one physical device present multiple virtual functions directly to VMs, bypassing the hypervisor switch.Advanced
• Storage ReplicaA Windows Server feature that replicates volumes at the block level between servers or clusters, synchronously or asynchronously.Advanced
• Storage SpacesA Windows feature that pools physical disks and creates virtual disks with mirror or parity resiliency.Intermediate
• Storage Spaces Direct (S2D)Windows Server Datacenter software-defined storage that pools local drives across cluster nodes into highly available volumes.Advanced
• SysprepThe Microsoft System Preparation tool that generalizes a Windows installation by removing machine-specific data before imaging.Intermediate
• System Center Virtual Machine Manager (SCVMM)Microsoft's data center management tool for Hyper-V hosts, clusters, VM templates, networks and storage at scale.Intermediate
• SYSVOLA shared folder on every domain controller that stores Group Policy templates and logon scripts and replicates between DCs.Intermediate
• Trust RelationshipA link between AD domains or forests that lets users in one be authenticated for resources in another.Advanced
• Virtual Hard Disk v2 (VHDX)The Hyper-V virtual disk format supporting up to 64 TB, corruption resilience and 4 KB sector alignment.Intermediate
• Volume Shadow Copy Service (VSS)A Windows framework that coordinates requesters, writers and providers to create consistent point-in-time shadow copies of volumes.Intermediate
• Windows Admin Center (WAC)A browser-based Microsoft management tool for Windows Server, clusters, Hyper-V and hybrid Azure services.Intermediate
• Windows Local Administrator Password Solution (LAPS)A Microsoft feature that randomizes and rotates each computer's local administrator password and stores it securely in AD or Entra ID.Intermediate
• Windows RegistryThe hierarchical database storing configuration for Windows, its services, hardware and applications.Foundational
• Windows Server EditionsThe licensing editions of Windows Server, chiefly Standard and Datacenter, differing in virtualization rights and advanced features.Foundational
• Windows Server Update Services (WSUS)An on-premises Windows Server role for approving and distributing Microsoft updates to managed computers.Intermediate