Microsoft Azure Fundamentals: key terms

Flashcards for this exam Microsoft Azure Fundamentals guide Class dates

• 7 Rs of Cloud MigrationSeven migration strategies: retire, retain, rehost, relocate, repurchase, replatform and refactor.Foundational
• Availability SetAzure logical grouping that spreads VMs across fault domains and update domains within a data center.Intermediate
• Availability Zone (AZ)One or more physically separate data centers within a region with independent power, cooling and networking.Foundational
• AzCopyCommand-line utility for copying data to, from and between Azure Storage accounts.Foundational
• Azure Activity LogSubscription-level Azure log of control plane operations, such as who created, modified or deleted resources.Foundational
• Azure AdvisorFree Azure service that analyzes configuration and usage telemetry and recommends improvements across five categories.Foundational
• Azure App ServiceAzure PaaS for hosting web apps, REST APIs and mobile back ends on Windows or Linux with built-in scaling and deployment.Foundational
• Azure ArcAzure service that projects on-premises, edge and multicloud servers, Kubernetes clusters and databases into Azure Resource Manager.Intermediate
• Azure BackupAzure service for backing up and restoring Azure VMs, files, databases and on-premises workloads to vaults.Foundational
• Azure BastionAzure PaaS service providing secure RDP and SSH access to VMs over TLS from the portal without public IPs on the VMs.Intermediate
• Azure Blob StorageAzure object storage for massive amounts of unstructured data such as images, video, backups and data lakes.Foundational
• Azure CLICross-platform command-line tool (az) for creating and managing Azure resources.Foundational
• Azure Cloud ShellBrowser-accessible authenticated shell in Azure with Bash or PowerShell and Azure tools preinstalled.Foundational
• Azure Cosmos DBAzure fully managed, globally distributed NoSQL and relational database with multiple APIs and single-digit millisecond latency.Intermediate
• Azure DDoS ProtectionAzure service that mitigates distributed denial-of-service attacks against public IP resources in virtual networks.Intermediate
• Azure DevOpsMicrosoft's suite of developer services: Azure Boards, Repos, Pipelines, Test Plans, and Artifacts.Foundational
• Azure Event GridAzure fully managed event routing service using publish-subscribe for reactive, event-driven applications.Intermediate
• Azure ExpressRouteAzure service providing private, dedicated connectivity from on-premises networks to Microsoft cloud via a connectivity provider.Intermediate
• Azure FilesAzure fully managed file shares accessible via SMB, NFS and REST, mountable from cloud or on-premises systems.Foundational
• Azure FirewallAzure managed, stateful firewall-as-a-service for filtering network and application traffic across virtual networks.Intermediate
• Azure FunctionsAzure serverless compute service that runs event-triggered code with automatic scaling.Foundational
• Azure Hybrid BenefitLicensing benefit letting customers use on-premises Windows Server and SQL Server licenses with Software Assurance on Azure.Foundational
• Azure Load BalancerAzure layer 4 load balancer distributing TCP and UDP traffic across VMs, available as public or internal.Foundational
• Azure LocalMicrosoft hybrid infrastructure solution (formerly Azure Stack HCI) running VMs and Azure services on validated on-premises hardware.Advanced
• Azure Logic AppsAzure low-code service for building automated workflows that integrate apps, data and services using hundreds of connectors.Intermediate
• Azure Managed DisksBlock-level storage volumes for Azure VMs managed by Azure, offered as Ultra, Premium SSD v2, Premium SSD, Standard SSD and Standard HDD.Intermediate
• Azure MigrateAzure hub for discovering, assessing and migrating on-premises servers, databases, web apps and VDI to Azure.Intermediate
• Azure MonitorAzure's comprehensive monitoring platform collecting metrics and logs from Azure, hybrid and multicloud resources.Foundational
• Azure PolicyAzure service that creates, assigns and evaluates rules to enforce organizational standards and assess compliance at scale.Foundational
• Azure PortalWeb-based unified console for building, managing and monitoring Azure resources.Foundational
• Azure Region PairPairing of two Azure regions in the same geography used for prioritized recovery, sequential updates and geo-redundant replication.Intermediate
• Azure ReservationsAzure commitment of 1 or 3 years to specific resources such as VMs or SQL compute in a region in exchange for large discounts.Foundational
• Azure Resource Manager (ARM)Azure's deployment and management service; every request from portal, CLI, PowerShell or SDK passes through it.Foundational
• Azure Role-Based Access Control (Azure RBAC)Authorization system for Azure resources that assigns role definitions to security principals at a scope.Foundational
• Azure Savings Plan for ComputeAzure pricing model committing to a fixed hourly spend on compute for 1 or 3 years to get discounts across services and regions.Intermediate
• Azure Service HealthPersonalized view of Azure service issues, planned maintenance and health advisories affecting your subscriptions and regions.Foundational
• Azure Site Recovery (ASR)Azure disaster recovery service that replicates VMs and physical servers and orchestrates failover and failback.Intermediate
• Azure Spot Virtual MachinesAzure VMs using unused capacity at deep discounts that can be evicted when Azure needs the capacity.Intermediate
• Azure SQL DatabaseAzure fully managed PaaS relational database engine based on the latest stable SQL Server.Foundational
• Azure Storage AccountAzure resource providing a unique namespace for Blob, Files, Queue and Table data with shared settings for redundancy and access.Foundational
• Azure Storage RedundancyAzure Storage replication options: LRS, ZRS, GRS, GZRS and read-access variants RA-GRS and RA-GZRS.Intermediate
• Azure SubscriptionLogical container for Azure resources that serves as a billing boundary and an access control boundary.Foundational
• Azure Virtual Desktop (AVD)Azure Desktop as a Service that delivers Windows desktops and remote apps, including multi-session Windows 11.Intermediate
• Azure Virtual MachinesAzure IaaS compute service providing on-demand Windows and Linux virtual machines.Foundational
• Azure Virtual Network (VNet)Azure's fundamental private network that isolates resources and enables communication with each other, the internet and on-premises networks.Foundational
• Azure VPN GatewayAzure virtual network gateway that sends encrypted IPsec/IKE traffic for site-to-site, point-to-site and VNet-to-VNet connections.Intermediate
• Azure Well-Architected Framework (WAF)Microsoft guidance for improving the quality of Azure workloads across five pillars.Foundational
• Blob Access TiersAzure Blob Storage tiers (Hot, Cool, Cold and Archive) that trade storage cost against access cost and latency.Intermediate
• Block StorageStorage that presents raw volumes divided into fixed-size blocks to an operating system, which formats them with a file system.Foundational
• Capital Expenditure (CapEx)Up-front spending on physical assets such as servers and data centers, depreciated over their useful life.Foundational
• ChargebackAllocating and internally billing cloud costs to the business units or teams that consumed the resources.Foundational
• Cloud BurstingHybrid pattern where an application runs on premises and overflows to public cloud capacity when demand spikes.Intermediate
• Cloud ComputingDelivery of on-demand computing resources such as servers, storage, databases and software over a network with pay-as-you-go pricing.Foundational
• Commitment-Based DiscountLower cloud pricing in exchange for committing to a level of usage or spend over a term, typically 1 or 3 years.Intermediate
• Composite SLAOverall availability of a solution calculated by multiplying the SLAs of the dependent services it uses.Intermediate
• Consumption-Based PricingPricing model where customers pay only for the cloud resources they actually use, also called pay-as-you-go.Foundational
• Database as a Service (DBaaS)Managed cloud database offering where the provider handles provisioning, patching, backups and high availability.Foundational
• Desktop as a Service (DaaS)Cloud-hosted virtual desktops delivered to users over the network, managed by a provider on a subscription basis.Foundational
• Economies of ScaleCost advantage cloud providers gain from enormous purchasing and operating scale, passed to customers as lower prices.Foundational
• Edge ComputingProcessing data near where it is generated, such as on devices or local sites, instead of in a centralized cloud region.Foundational
• Edge LocationProvider point of presence near end users used to cache content and terminate connections for CDN and DNS services.Foundational
• Egress ChargesFees cloud providers charge for data transferred out of their network to the internet or across regions and zones.Foundational
• ElasticityAbility of a system to automatically add and remove resources in near real time to match fluctuating demand.Foundational
• Fault ToleranceAbility of a system to continue operating without interruption when one or more components fail.Intermediate
• Federal Risk and Authorization Management Program (FedRAMP)U.S. government program that standardizes security assessment and authorization of cloud products used by federal agencies.Intermediate
• FinOpsOperational framework and cultural practice that maximizes the business value of cloud through collaboration between engineering, finance and business teams.Foundational
• Function as a Service (FaaS)Serverless compute model that runs individual functions in response to events, billed per invocation and execution time.Foundational
• Government Cloud (GovCloud)Isolated cloud regions built for government agencies and contractors with stringent compliance such as FedRAMP High and ITAR.Intermediate
• High Availability (HA)Design goal of keeping a system operational and accessible for a high percentage of time by eliminating single points of failure.Foundational
• Horizontal ScalingIncreasing or decreasing capacity by adding or removing instances or nodes; also called scaling out/in.Foundational
• Hybrid CloudDeployment model combining two or more distinct clouds, typically private and public, connected to allow data and app portability.Foundational
• Infrastructure as a Service (IaaS)Cloud service model providing virtualized compute, storage and networking; the customer manages the OS, runtime, apps and data.Foundational
• Management GroupAzure container above subscriptions used to apply governance such as Azure Policy and RBAC across many subscriptions.Foundational
• Microsoft Cloud Adoption Framework for Azure (CAF)Microsoft's guidance, best practices and tools for cloud adoption organized into methodologies from strategy through management.Intermediate
• Microsoft Cost ManagementAzure-native tooling for analyzing costs, creating budgets and alerts, allocating costs and exporting billing data.Foundational
• Microsoft Defender for CloudMicrosoft CNAPP providing cloud security posture management and workload protection for Azure, AWS, Google Cloud and on-premises.Intermediate
• Microsoft Entra IDMicrosoft's cloud identity and access management service, formerly Azure Active Directory (Azure AD).Foundational
• Microsoft Entra TenantA dedicated, isolated instance of Microsoft Entra ID representing an organization, identified by a tenant ID and domain.Foundational
• Microsoft Service Trust PortalMicrosoft portal providing audit reports, compliance certifications and trust documents for Microsoft cloud services.Foundational
• MulticloudStrategy of using services from two or more public cloud providers within one organization or architecture.Foundational
• Network Security Group (NSG)Azure set of stateful allow/deny rules filtering traffic to and from resources by source, destination, port and protocol.Foundational
• Object StorageStorage architecture that manages data as objects with metadata and unique keys in a flat namespace, accessed via HTTP APIs.Foundational
• Operational Expenditure (OpEx)Ongoing spending on services and operations, such as monthly cloud bills, expensed in the period incurred.Foundational
• Platform as a Service (PaaS)Cloud service model where the provider manages infrastructure and runtime; the customer deploys and manages applications and data.Foundational
• Private CloudDeployment model where cloud infrastructure is provisioned for exclusive use by a single organization, on or off premises.Foundational
• Public CloudDeployment model where infrastructure is owned by a provider and shared among the general public on a pay-per-use basis.Foundational
• Rapid ElasticityNIST cloud characteristic: capabilities can be provisioned and released quickly, often automatically, to scale with demand.Foundational
• RegionSeparate geographic area where a cloud provider operates one or more data centers, usually grouped into availability zones.Foundational
• RehostMigration strategy that moves applications to the cloud without modification, commonly called lift and shift.Foundational
• Resource GroupAzure logical container that holds related resources sharing a lifecycle, permissions and policies.Foundational
• Resource LockAzure setting that prevents accidental deletion (CanNotDelete) or modification (ReadOnly) of subscriptions, resource groups or resources.Foundational
• Resource TaggingAttaching key-value metadata labels to cloud resources for cost allocation, automation, access control and organization.Foundational
• ScalabilityAbility of a system to handle increased load by adding resources, either vertically or horizontally.Foundational
• Serverless ComputingCloud execution model where the provider manages servers and scaling, and customers pay only for actual usage.Foundational
• Service Level Agreement (SLA)Contractual commitment from a provider defining service availability or performance targets and remedies if they are missed.Foundational
• Shared Responsibility ModelFramework dividing security and operational duties between the cloud provider (of the cloud) and customer (in the cloud).Foundational
• ShowbackReporting cloud costs to the teams or business units that incurred them without actually billing them.Foundational
• Single Point of Failure (SPOF)Component whose failure stops the entire system because no redundant alternative exists.Foundational
• Software as a Service (SaaS)Cloud service model delivering complete applications over the internet; the provider manages everything except user data and access.Foundational
• Total Cost of Ownership (TCO)Full cost of owning and operating an IT system over its life, including hardware, facilities, power, staff and licensing.Foundational
• Vertical ScalingIncreasing or decreasing capacity by changing the size of an existing resource, such as more CPU or RAM; also called scaling up/down.Foundational
• Virtual Machine Scale Sets (VMSS)Azure compute resource for deploying and automatically scaling a group of load-balanced VMs.Intermediate
• Virtual Network PeeringAzure feature that connects two VNets, in the same or different regions, over the Microsoft backbone with private IPs.Intermediate