AZ 900 Terms
Azure Key Vault
Key Vault is used to securely store cryptographic keys and other application secrets. Allows for provisioning, managing, and deploying public and private SSL/TLS certificates, creating and controlling encryption keys, secure storage ad controlled access to tokens, passwords, certificates, and API keys.
locally redundant storage (LRS)
Maintains three copies of your data within a single facility in a single region. LRS protects your data from normal hardware failures, but not from the failure of a single facility.
What is File Storage?
Managed file shares accessed via SMB protocol.
What is availability?
Measure of consistent accessibility and operational uptime.
What is DDoS Protection?
Measures and services designed to mitigate DDoS attacks.
What is Operational Expenditure (OpEx)?
Ongoing costs associated with day-to-day operations.
Azure Advisor
Personal cloud consultant that provides information needed to follow best practices and optimize Azure deployments. Provides recommendations for proactive, actionable, and personalized best practices.
What is a Dedicated Host?
Physical server in Azure dedicated to a single customer.
PaaS
Platform as a Service. Provides cloud customers with an easy-to-configure operating system and on-demand computing capabilities. Compare to IaaS and SaaS.
What is Resource Hygiene?
Practice of maintaining health, performance, and security of cloud resources.
What is Express Route?
Private network connection service for on-premises data centers and Azure.
What is a Virtual Network?
Private network in Azure for communication between resources and on-premises networks.
What is network security in a cloud environment?
Protection of network infrastructure and communication channels.
Azure DDoS Protection
Protects Azure-hosted applications from distributed denial of service (DDOS) attacks
Spot Pricing
Provides access to Azure compute resources at a discount when unused Azure capacity is available. If resources aren't available Spot VMs can be shut down with a 30-second notice.
Azure Dedicated Host
Provides dedicated physical servers to host Azure virtual machines (VMs). Required by some organizations for compliance to guidelines and standards.
What are cost savings?
Reductions in expenses or expenditures.
What is Key Vault?
Secure service in Azure for storing and managing keys, secrets, and certificates.
What is a Firewall?
Security device or service used to monitor and filter network traffic.
Availability Sets
Separate deployments in the same datacenter. Do not provide geographically separated fault or update zones.
What is Windows Virtual Desktop?
Service for deploying and managing Windows virtual desktops in Azure.
What is VPN Gateway?
Service providing secure connectivity between on-premises networks and Azure.
Containers
Similar to a VM but are self contained libraries and binaries designed to run a single app
SaaS
Software as a Service; a subscription service where you purchase licenses for software that expire at a certain date.
Microsoft Purview Data Loss Prevention (DLP)
Software that scans content for sensitive information like ID or credit card numbers. Can use a regular expression (REGEX) to search content to match a particular combination of characters in emails or files. Once detected, rules can be run to prevent the email from being sent, etc.
What is Azure Synapse Analytics?
A cloud-based analytics service in Azure.
What is Azure Active Directory (AAD)?
A cloud-based identity and access management service in Azure.
What is Azure Machine Learning?
A cloud-based service for building and deploying machine learning models.
What is Azure CLI?
A command-line interface for managing Azure resources.
Resource Groups
A container that holds related resources for an Azure solution. Includes those resources (VMs, app services, storage account, etc), that you want to manage as a group.
Read-access geo-redundant storage (RA-GRS)
Stores three copies of your data in each of two different regions and the data may be only read from the secondary region.
Azure Geo-redundant Storage (GRS)
Stores three copies of your data in each of two different regions. Ensures data remains available even if a location has a complete failure.
What is disaster recovery?
Strategies for protecting data and restoring after disruptions.
Azure Pricing Calculator
A free web-based tool that allows you to input Azure services and modify properties and options of the services. It outputs the costs per service and total cost for the full estimate.
What is Cosmos DB?
A globally distributed, multi-model database service in Azure.
What is Azure Kubernetes Service (AKS)?
A managed Kubernetes container orchestration service in Azure.
Azure Cosmos DB
Supports key-value and document data models. Native support for NoSQL.
What is Azure Kubernetes Service (AKS)?
A managed container orchestration service in Azure.
What is Azure Database for MySQL?
A managed database service for hosting MySQL databases in Azure.
What is Azure Database for PostgreSQL?
A managed database service for hosting PostgreSQL databases in Azure.
What is Azure SQL Database?
A managed relational database service in Azure.
What is Azure Mobile App?
A mobile application for managing and monitoring Azure resources on-the-go.
What is Azure Monitor?
A monitoring and analytics service in Azure.
What is Azure Marketplace?
A platform for discovering, purchasing, and deploying Azure services and solutions.
What is Container (Blob) Storage?
A scalable and secure object storage service in Azure.
Microsoft Sentinel
A scalable, cloud-native security information and event manager (SIEM) solution that delivers intelligent security analytics and threat intelligence across the enterprise. It provides a single solution for alert detection, threat visibility, proactive hunting, and threat response.
What is Azure Sphere?
A secure IoT solution from Microsoft.
What is Azure Functions?
A serverless compute service in Azure.
What is Azure Functions?
A serverless computing service for running code in response to events.
What is Bot Service?
A service for building and deploying chatbots.
What is Azure Logic Apps?
A service for creating workflows and integrations between applications and services.
What is Azure Container Instances (ACI)?
A service for running containers without managing the underlying infrastructure.
What is Azure Service Health?
A service that provides status updates and incident notifications for Azure services.
What is Azure DevOps?
A set of development tools and services for building, testing, and deploying applications.
What is Azure Portal?
A web-based interface for managing Azure resources.
What are Cognitive Services?
AI-powered APIs and services for adding machine learning and AI capabilities.
Azure Application Security Groups (ASG)
ASGs let admins group virtual machines (VMs) and define network security policies based on those groups
What is scalability?
Ability to handle increased workloads by adjusting resources.
What is Cloud Shell?
An interactive, browser-based shell environment in Azure.
What are microservices?
Architectural approach to building applications as a collection of small, independent services.
What does Azure Kubernetes Service (AKS) simplify?
The deployment and management of containerized applications.
What features does Azure Database for PostgreSQL offer?
Automated backups and scaling.
What are the features of Azure App Services?
Automatic scaling, high availability, and integration with various development tools.
What can you achieve with Azure Logic Apps?
Automation and coordination of tasks.
Azure Policy
Azure Policy is a service in Azure that you use to create, assign, and, manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service-level agreements (SLAs). Azure Policy does this by using policies and initiatives. It runs evaluations of your resources and scans for those not compliant with the policies you have created.
What is Azure Resource Manager (ARM)?
Azure's management framework for deploying and managing Azure resources.
What is Azure App Services?
Azure's platform for hosting web applications, RESTful APIs, and mobile app backends.
What is event-driven computing?
Computing model where actions trigger responses.
What is networking?
Connecting computers and devices to share resources and information.
What is Capital Expenditure (CapEx)?
Costs related to acquiring and maintaining physical assets.
What are Storage Tiers?
Different performance tiers for storing data in Azure.
What is policy compliance in the cloud?
Ensuring practices align with regulatory and internal standards.
Azure Total Cost of Ownership (TCO) Calculator
Estimates the cost savings from migrating a workload to Azure
What is Virtual Network Peering?
Feature connecting two virtual networks in Azure.
What are GitHub Actions?
Feature for automating workflows in GitHub.
What are Network Security Groups (NSG)?
Feature in Azure for filtering and controlling network traffic.
What is SQL Managed Instance?
Fully managed SQL Server database engine service in Azure.
Azure Information Protection (AIP)
Helps organizations classify and optionally help protect documents and emails by applying labels.
What are the benefits of Azure Database for MySQL?
High availability, security, and scalability.
What is general security in a cloud environment?
Implementing measures to protect systems, data, and resources.
Azure Firewall
Implements high-security, high-availability firewall with unlimited scalability. Can be used to filter traffic between Azure virtual subnets and between Azure and an on-site deployment.
IaaS
Infrastructure as a Service. A cloud computing technology useful for heavily utilized systems and networks. Organizations can limit their hardware footprint and personnel costs by renting access to hardware such as servers. Compare to PaaS and SaaS.
What is local installation?
Installing software on a local device or computer.
What can you do with Azure CLI?
Interact with Azure services and resources using text commands.
What is GitHub?
Web-based platform for version control and collaborative software development.
What is storage?
The retention and retrieval of data and files.
Management Groups
These groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.
What is a development platform?
Tools and services for building and managing applications.
Container orchestration tools
Tools that help manage and automate the deployment, scaling, and management of containerized applications.
Azure Tags
Used to logically organize your Azure resources. Consist of a name-value pairs and help organize resources for billing.
What is Machine Learning?
Using algorithms and statistical models for data-based predictions and decisions.
What are the components of Azure DevOps?
Version control, continuous integration, and deployment pipelines.
What is a Virtual Machine?
Virtualized computing environment hosted on physical hardware in Azure.
What are virtual machines?
Virtualized instances of computers running on physical hardware.
Resource groups
Define logical resource groups for management purposes.
What is cloud computing?
Delivery of computing services over the internet for innovation and cost savings.
Availability Zones
Deployed in separate datacenters, ensures interruptions in one availability zone does not impact other availability zones. Each zone has separate fault and update zones with low latency with other availability zones in the region.
What is agility?
Capability to quickly adapt to changing business needs.
What is elasticity?
Capacity to dynamically provision and de-provision resources.
What is Serverless Computing?
Cloud computing model with automatic server management.
What is a private cloud?
Cloud infrastructure operated solely for a single organization.
What is SaaS?
Cloud model delivering software applications over the internet.
What is PaaS?
Cloud model offering development platform and tools.
What is IaaS?
Cloud model providing virtualized infrastructure resources.
What is serverless computing?
Cloud model where providers manage infrastructure and users pay for actual usage.
What is a public cloud?
Cloud services accessible to the general public.
What is HDInsight?
Cloud-based big data platform in Azure that provides managed Hadoop, Spark, and other big data technologies.
Microsoft Defender for Identity
Cloud-based security solution designed to detect and help identify advanced threats and help protect hybrid computing environments. Does the following: - Monitor users, entity behavior, and activities - Help protect user identities and credentials stored in AD - Provide clear incident information
What is Azure PowerShell?
Cmdlets and scripts for managing Azure resources.
Azure Monitor
Collecting, analyzing, and acting on telemetry from cloud and on-premise environments. Activity logs and metrics. Diagnostics can be enabled.
What is a hybrid cloud?
Combination of private and public cloud services.
What are security alerts in a cloud environment?
Notifications generated in response to potential security incidents.
What is a Security Score?
Numerical representation of an organization's security posture.
What is Azure Databricks?
An Apache Spark-based analytics platform integrated with Azure.
Traffic Manager
Allows users to access Azure resources from a datacenter nearest to them using DNS.
Application Insights
Allows visual analysis of telemetry data. It is an Application Performance Management (APM) services that detects performance in real time.
Network Security Group (NSG)
Allows you to filter network traffic to and from Azure resources in a virtual network (VNet). Can contain multiple inbound and outbound security rules to deny traffic to an Azure resource.
Scalability
Benefit of cloud computing that allows increasing or decreasing resources to meet a predictable workload. Horizontal (scaling out), when you add additional resources to function together as one unit or Vertical (scaling up) when you increase the capacity of existing resources.
What is Disk Storage?
Durable and high-performance block storage for virtual machines.
Azure Resource Manager (ARM)
Management tool in which resource groups and all the resources within it are created, configured, managed, and deleted Resource Manager provides a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment. With Azure Resource Manager, you can: •Create, configure, manage and delete resources and resource groups •Organize resources •Control access and resources •Automate using different tools and SDKs
What is Defense in Depth?
Multi-layered approach to security.
What is Internet of Things (IoT)?
Network of interconnected devices and sensors for data collection and exchange.
What is the Cloud?
Network of remote servers for storing and managing data and applications.