AZ-900

Azure Resource Manager: Azure Resource Manager is a management service that enables customers to deploy, manage, and monitor Azure resources.
• Azure Portal: Azure Portal is a web-based portal that enables customers to manage their Azure resources.
• Azure CLI: Azure Command-Line Interface (CLI) is a command-line tool that enables customers to manage Azure resources.
• Azure Cloud Shell: Azure Cloud Shell is a browser-based command-line interface that enables customers to manage Azure resources. Uses Bash and PowerShell.
• PowerShell: PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework.
• Bash: Bash is a Unix shell, which is a command-line interface for interacting with an operating system.
• AZCopy: AZCopy is a command-line utility that enables customers to copy data to and from Azure storage.
• Data Migration Assistant: Azure Data Migration Assistant is a tool that enables customers to assess and migrate their on-premises SQL Server databases to Azure SQL Database.
• Azure Diagnostics: Azure Diagnostics is a service that enables customers to collect diagnostic data from Azure resources and applications.
• Azure Government: Azure Government is a cloud platform that is dedicated to government customers and organizations, and is operated by screened US citizens.
• Azure Region: An Azure region is a physical location around the world where Microsoft has data centers to provide Azure services.
• Azure Regions: Azure regions are the physical locations where Azure services are hosted.
• Azure Data Center: An Azure data center is a physical facility that houses Azure servers and equipment.
• Azure Private Preview: Azure Private Preview is a stage in the Azure product development process where a limited group of customers can test and provide feedback on new features and services.
• Azure Public Preview: Azure Public Preview is a stage in the Azure product development process where new features and services are made available to all customers for testing and feedback.
• Azure Generally Available: Azure Generally Available (GA) is the stage in the Azure product development process where a feature or service is considered stable and ready for production use.
• Azure Locks: Azure Locks is a feature of Azure that enables customers to prevent accidental deletion or modification of resources by locking them.
• Azure Support Plan Tiers: Azure Support Plan Tiers are different levels of support that are available for Azure customers, each with its own set of features and benefits.
• Knowledge Center: Knowledge Center is a website that provides information and resources to help customers learn about and use Azure services.
• Compliance Manager: Compliance Manager is a service that enables customers to manage and assess their compliance with regulatory standards.
• Cloud Partner Portal: The Cloud Partner Portal is a portal that enables Azure partners to manage their Azure subscriptions and services.
• Microsoft Privacy Statement: The Microsoft Privacy Statement is a statement that describes how Microsoft collects, uses, and protects personal data.
• Data Protection Addendum: The Data Protection Addendum is a legal document that sets out the terms and conditions for the processing of personal data in Azure.
• Online Services Terms: The Online Services Terms is a legal document that sets out the terms and conditions for the use of Azure services.Private Cloud: A private cloud is a cloud infrastructure that is dedicated to a single organization and is operated solely for that organization’s benefit.
• Active Directory: Active Directory is a Microsoft technology used to manage and store information about network resources and users.
• Capital Expenditure (CapEx): Capital Expenditure (CapEx) is the cost of buying assets such as property and equipment, as opposed to Operating Expenditure (OpEx) which is the cost of running a business, including wages, rent, and utilities.
• On-Premises Network: On-premises network refers to the network infrastructure that is located on the customer’s own property, as opposed to a cloud-based infrastructure.
Hybrid Cloud: A hybrid cloud is a cloud infrastructure that uses a combination of on-premises, private cloud, and third-party, public cloud services with orchestration between the two platforms.
• Azure AD Connect: Azure AD Connect is a tool that enables customers to connect their on-premises Active Directory to Azure Active Directory.
Public Cloud: A public cloud is a cloud infrastructure that is open for public use and is owned and operated by a third-party cloud service provider.
• Azure Active Directory: Azure Active Directory (Azure AD) is a cloud-based identity and access management service.

• Managed Service Identity: Managed Service Identity (MSI) is a feature that enables Azure services to authenticate to other Azure services securely and without the need for credentials.
• Single-Sign-On (SSO): Single-Sign-On (SSO) is a feature that enables customers to use one set of credentials to access multiple applications.
• Azure Multi-Factor Authentication: Azure Multi-Factor Authentication is a service that enables customers to add an additional layer of security to their Azure resources.
• Azure AD Connect Health: Azure AD Connect Health is a service that enables customers to monitor and troubleshoot their on-premises identity infrastructure.
• Azure AD Privileged Identity Management: Azure AD Privileged Identity Management is a service that enables customers to manage and control access to Azure resources.
• Azure AD Identity Protection: Azure AD Identity Protection is a service that enables customers to protect against identity-related risks by using machine learning algorithms to detect and investigate suspicious activities, and provide recommendations to mitigate them.
• Business-to-Consumer Identity Services: Business-to-Consumer (B2C) Identity Services is a feature that enables customers to authenticate and authorize consumer-facing applications.

Operating Expenditure (OpEx): Operating Expenditure (OpEx) is the cost of running a business, including wages, rent, and utilities, as opposed to Capital Expenditure (CapEx) which is the cost of buying assets such as property and equipment.

SaaS: Software as a Service is a software delivery model in which software and associated data are hosted centrally (typically in the cloud) and are accessed by customers over a network, typically the Internet.
• Office 365: Office 365 is a subscription-based online version of Microsoft Office, which includes Office apps, email, and online storage.
• Microsoft Dynamics 365: Microsoft Dynamics 365 is a set of enterprise resource planning (ERP) and customer relationship management (CRM) services that enable customers to manage their business operations and customer interactions.
• Microsoft Managed Desktop: Microsoft Managed Desktop is a service that enables customers to outsource the management of their Windows devices to Microsoft.
PaaS: Platform as a Service (PaaS) is a cloud computing model that delivers a platform for customers to develop, run, and manage their applications without the complexity of building and maintaining the underlying infrastructure.
• API Management Service: Azure API Management is a fully managed service that enables customers to publish, secure, transform, maintain, and monitor APIs.
• Azure Logic Apps: Azure Logic Apps is a service that enables customers to create workflows that integrate apps and data across cloud and on-premises services.
• Azure Batch: Azure Batch is a service that enables customers to run large-scale parallel and high-performance computing workloads in the cloud.
• Azure App Service Plans: Azure App Service Plans is a service that enables customers to create and manage a collection of resources that support web apps.
• Azure Functions: Azure Functions is a serverless compute service that enables customers to run event-triggered code without having to provision or manage infrastructure.

• Azure Bastion: Azure Bastion is a fully managed service that provides secure and seamless RDP/SSH connectivity to Azure virtual machines directly in the Azure portal over SSL.
• Azure Devops: Azure DevOps is a collection of services that enables customers to plan, build, test, and deploy applications.
• Azure Virtual Desktop: Azure Virtual Desktop is a service that enables customers to deliver Windows-based desktops and apps to any device.
• PowerBI: Power BI is a business intelligence tool that enables customers to connect to and visualize data, create reports, and share insights.
• 365 Admin Center: The 365 Admin Center is a web-based portal that enables customers to manage their Office 365 subscriptions and services.
• Infrastructure as a Service (IaaS): Infrastructure as a Service (IaaS) is a form of cloud computing that provides virtualized computing resources over the internet.
• Azure Virtual Machine: Azure Virtual Machine is a service that enables customers to create and manage VMs in Azure.
• Availability Zones: Availability Zones are physically separate locations within an Azure region that provide redundant power, cooling, and networking.
• Availability Zone: Availability Zone is a physically separate location within an Azure region that provides redundant power, cooling, and networking.
• Azure Reserved Virtual Machine Instances: Azure Reserved Virtual Machine Instances (RI) are a pricing option that enables customers to save money by committing to a one- or three-year term for virtual machines.
• Virtual Machine Scale Sets: Virtual Machine Scale Sets are a service that enables customers to create and manage a group of identical, load-balanced VMs.
• Azure Spot Virtual Machine Instances: Azure Spot Virtual Machine Instances are a type of Azure Virtual Machine that can be bid on and acquired at a lower price than on-demand instances, but can be reclaimed by Azure if the spot price increases.
• Management Group: Azure Management Groups is a feature that enables customers to organize and manage their Azure resources at scale.
• Azure Blueprints: Azure Blueprints is a service that enables customers to create and manage sets of Azure resources and policies as a single package.
• Azure Policies: Azure Policies is a service that enables customers to create, assign, and manage policies that enforce rules and effects for Azure resources.
• Azure Roles: Azure roles are predefined sets of permissions that can be assigned to users, groups, or service principals to grant them access to resources in Azure.
• Azure Owner: Azure Owner is the role that has full access to all resources in an Azure subscription.
• Azure Billing Role: Azure Billing role grants the user or service principal access to view the subscription’s billing information and manage the subscription’s payment methods.
• Azure Free Account Limits: Azure free account limits are the maximum amount of resources that a customer can use with an Azure free account.
• Azure Subscription: An Azure subscription is a logical container that holds all of the Azure resources that a user or organization creates. It acts as a billing and security boundary, allowing users to organize and manage resources while controlling access and costs. Azure subscriptions are tied to an Azure Active Directory (AAD) tenant and require an AAD account or service principal to access and manage resources. Each subscription can have one or more resource groups, which are used to organize resources. Subscriptions can also be assigned to different offer plans, such as pay-as-you-go or enterprise agreements, which determine the pricing and billing options for the resources.
• Azure Resource Groups: Azure Resource Groups is a feature that enables customers to organize and manage their Azure resources.
• Enterprise Agreement Azure: Enterprise Agreement (EA) for Azure is a licensing agreement for organizations with 500 or more users that enables customers to purchase Azure services at a discounted rate.
• Pay As You Go Azure: Pay-As-You-Go (PAYG) for Azure is a pricing option that enables customers to pay for Azure services on a pay-per-use basis.
• Software Assurance Microsoft: Software Assurance is a Microsoft program that provides benefits such as technical support, training, and access to new versions of software to customers who purchase volume licensing agreements.
• Cost Management (Azure): The process of identifying, analyzing and controlling costs associated with a project, service or organization, specifically for resources and services in Azure.
• TCO Calculator (Azure): The Azure TCO (Total Cost of Ownership) Calculator is a tool that allows organizations to estimate the costs associated with running their workloads in Azure, compared to running them on-premises.
• Pricing Calculator (Azure): The Azure Pricing Calculator is a tool that allows organizations to estimate the costs associated with using Azure services, based on the specific usage and configuration of the services.
• Azure Public IP Address: A public IP address is an IP address that can be reached from the internet.
• Azure SLA: Azure SLA stands for Service Level Agreement, which is a contract between Microsoft and the customer that guarantees a certain level of availability for Azure services.
• Budget Alerts: Azure budget alerts are notifications that are sent when the cost of an Azure subscription exceeds a specified threshold.
• Monthly Uptime Percentage Formula: The monthly uptime percentage formula is used to calculate the availability of a service or resource, typically expressed as a percentage.
• Azure Advisor: Azure Advisor is a service that provides recommendations for optimizing the performance, security, and cost of Azure resources.
• Fault Tolerance: Fault tolerance is the ability of a system to continue operating correctly in the event of the failure of (or one or more faults within) some of its components.
• Elasticity: Elasticity refers to the ability of a system to scale up or down its resources as needed to handle changing workloads.
• Scalability: Scalability refers to the ability of a system to handle increasing amounts of work by adding resources.
• Low Latency: Low latency refers to the ability of a system to respond quickly to requests.
• High Availability: High availability is a characteristic of a system that ensures it is always operational and available to users.
• High Latency: High latency refers to the amount of time it takes for a request to be processed and a response to be returned. A system with high latency may take a long time to respond to requests.
• Low Latency: Low latency refers to the amount of time it takes for a request to be processed and a response to be returned. A system with low latency will respond quickly to requests.
• Load Balancing: Load balancing is a technique used to distribute workloads evenly across multiple servers or resources to ensure that no single resource is overwhelmed.

Manageability: Manageability refers to the ease with which a system or service can be managed and administered.
Predictability: Predictability refers to the ability to plan for and anticipate the performance and behavior of a system or service.
Agility: Agility refers to the ability to quickly and easily adapt to changing conditions or requirements.
Reliability: The ability of a system or service to perform its intended function consistently and without interruption.
Horizontal Scaling: Horizontal scaling is a technique that increases the number of resources in a system to handle increased loads.
Vertical Scaling: Vertical scaling is a technique that increases the capacity of a single resource to handle increased loads.
Physical Security: Physical security refers to the protection of physical assets and facilities from unauthorized access, theft, and damage.
Identity & Access: Identity and access management refers to the processes and technologies used to secure and control access to resources.
Perimeter: Perimeter security refers to the protection of an organization’s network boundaries.
Network: Network security refers to the protection of an organization’s network infrastructure.
Compute: Compute security refers to the protection of an organization’s servers and other compute resources.
Application: Application security refers to the protection of an organization’s applications and data.
Data: Data security refers to the protection of an organization’s data from unauthorized access, theft, and damage.
Network Security Group: A network security group is a feature of Azure that allows you to control inbound and outbound traffic to virtual machines (VMs) and subnets in Azure virtual networks.
Network Gateways: Network gateways are used to connect a virtual network to other networks.
Express Route Circuits: Express Route circuits are used to create private connections between Azure datacenters and infrastructure that’s on your premises or in a colocation facility.
Virtual Network Gateway: A virtual network gateway is a service that enables customers to create and manage a VPN connection to their on-premises network.
Gateway Subnet: A gateway subnet is a subnet that is used to host Azure virtual network gateway resources.
Application Gateway: An application gateway is a service that enables customers to create and manage a web application firewall.
Content Delivery Network: A content delivery network is a service that enables customers to distribute content to users with high availability and low latency.
Web Application Firewall: A web application firewall (WAF) is a security service that enables customers to protect their web applications from common attacks.
Automatic Scaling: Automatic scaling is a feature that enables Azure services to automatically adjust the number of resources based on usage.
Data Compression: Data compression is a technique that reduces the amount of storage required for data.
Versioning: Versioning is a feature that enables customers to keep multiple versions of a file or resource.
Economies of Scale: Economies of scale refer to the cost advantages that a company can achieve by increasing its production output.
Geo-Distribution: Geo-distribution is a feature that enables customers to distribute their resources across multiple Azure regions for high availability and disaster recovery.
Agility: Agility refers to the ability to quickly and easily adapt to changing conditions or requirements.
Compliance: Compliance refers to the process of adhering to regulatory standards and industry best practices for security, privacy, and data protection.
Defense in Depth: Defense in depth is a security strategy that employs multiple layers of security controls to protect against threats.
Disaster Recovery: Disaster recovery is the process of restoring normal operations after a disaster or disruption.
NAT Rules: Network Address Translation (NAT) rules are used to control inbound and outbound network traffic.
Networking Layer: The networking layer is the part of the infrastructure stack that provides connectivity between resources.
Public Endpoint: A public endpoint is a network endpoint that is accessible over the Internet.
Service Endpoint: A service endpoint is a network endpoint that is accessible over a virtual network.
Local Network Gateway: A local network gateway represents the on-premises location in a Site-to-Site VPN or ExpressRoute connection.
SysLog: Syslog is a standard for sending log messages from devices to a centralized server.
ISO: ISO stands for International Organization for Standardization, is an independent, non-governmental international organization that develops standards to ensure the quality, safety, and efficiency of products, services, and systems.
NIST: NIST stands for National Institute of Standards and Technology, is an agency of the U.S. Department of Commerce that develops and promotes measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life.
GDPR: GDPR stands for General Data Protection Regulation, is a regulation of the European Union that came into effect on May 25, 2018. It strengthens data protection for individuals within the EU and regulates the export of personal data outside the EU.Azure Services:
• Azure Native

• Azure Key Vault: Azure Key Vault is a service that enables customers to store and manage cryptographic keys and other secrets used by cloud applications and services.
• Azure Cognitive Services: Azure Cognitive Services is a collection of APIs that enable customers to add intelligent features, such as image and speech recognition, to their applications.
• Azure Arc: Azure Arc is a service that allows organizations to manage resources that run on multiple platforms, including on-premises, multi-cloud, and edge, from a single control plane in Azure.
• Azure PowerApps: Azure PowerApps is a service that enables customers to create custom business apps that can connect to data and workflows.
• Azure DevTest Labs: Azure DevTest Labs is a service that enables customers to create and manage test environments for development and testing.
• Azure Service Fabric: Azure Service Fabric is a distributed systems platform that enables customers to build and manage scalable and reliable microservices and applications.
• Azure Marketplace: Azure Marketplace is an online store that enables customers to discover, try, and buy software and services that run on Azure.
• Apps Grid: The apps grid is a feature in Azure that enables customers to view and manage their Azure resources.
• Azure Sphere: Azure Sphere is a solution that enables customers to secure the Internet of Things (IoT) devices and gateways.
• IOT Central: Azure IoT Central is a fully managed SaaS (Software as a Service) that makes it easy to connect, monitor, and manag e IoT assets at scale.
• IOT Hub: Azure IoT Hub is a fully managed service that enables customers to connect, monitor, and manage IoT devices.
• Azure IoT Hub: Azure IoT Hub is a service that enables customers to connect, monitor, and control millions of IoT devices.
• Azure Bot Services: Azure Bot Service is a service that enables customers to build and deploy chatbots.
• Azure Container Instances: Azure Container Instances is a service that enables customers to run containerized applications without the need to manage virtual machines or scale the underlying infrastructure.
• Azure Kubernetes Service: Azure Kubernetes Service (AKS) is a service that enables customers to deploy and manage containerized applications using Kubernetes.
• Messaging and Storage
• Azure Storage Account: Azure Storage Account is a service that enables customers to store and retrieve data in Azure. Azure storage accounts provide access to the Azure storage services, including blobs, files, queues, and tables.
• Azure Storage Tiers: Azure Storage Tiers are different levels of storage that offer varying levels of performance and cost.
• Data Lake Storage Container: A Data Lake Storage Container is a logical container for storing files and folders in Azure Data Lake Storage.
• Blobs Container: A Blobs Container is a logical container for storing binary large objects (BLOBs) in Azure Storage.
• GZRS (Azure Storage): GZRS (Geo-Zone-Redundant Storage) is a type of Azure storage that stores data in multiple regions, providing high availability and data durability in the event of a regional outage.
• GARZS (Azure Storage): GARZS (Geo-Active-Zone-Redundant Storage) is a type of Azure storage that stores data in multiple regions, with automatic failover to a secondary region in the event of a regional outage. It provides higher availability than GZRS.
• Locally Redundant Storage (LRS): Locally redundant storage (LRS) is a type of Azure storage that stores data in at least three storage nodes in the same Azure region for high availability.
• Zone-Redundant Storage (ZRS): Zone-redundant storage (ZRS) is a type of Azure storage that stores data in at least three storage nodes across two or more Azure availability zones for high availability and disaster recovery.
• Geo-Redundant Storage (GRS): Geo-redundant storage (GRS) is a type of Azure storage that stores data in at least two Azure regions for high availability and disaster recovery.
• Azure Lifecycle Policy: Azure Lifecycle Policy is a service that enables customers to manage the lifecycle of their Azure resources.
• General Purpose v2: General Purpose v2 storage accounts are the latest generation of Azure storage accounts that provide access to the Azure storage services, including blobs, files, queues, and tables.
• Azure Event Hubs: Azure Event Hubs is a fully managed, real-time data ingestion service that enables customers to ingress millions of events per second from any source, so they can be processed with multiple consumers.
• Azure Service Bus: Azure Service Bus is a messaging service that enables customers to send and receive messages between decoupled systems.
• Azure Event Hubs: Azure Event Hubs is a service that enables customers to ingest and process large volumes of data in near real-time.
• Event Hub: Azure Event Hub is a fully managed service that enables customers to ingest and process large volumes of data in near real-time.
• • Monitoring
• Azure Monitor: Azure Monitor is a service that enables customers to collect, analyze, and act on telemetry from Azure resources, applications, and other systems.
• Azure Log Analytics: Azure Log Analytics is a service that enables customers to collect, search, and analyze log data from various sources.
• Log Analytics Workspace: A Log Analytics Workspace is a container for storing log data and metadata in Azure Monitor Logs.
• Azure Application Insights: Azure Application Insights is a service that enables customers to monitor the performance and usage of their applications.
• Azure Activity Log: Azure Activity Log is a log of all the management operations that have been performed on an Azure subscription.
• Azure Service Health: Azure Service Health is a service that enables customers to view the health of Azure services and take action when there are issues.
• Network
• Azure Front Door: Azure Front Door is a service that enables customers to build high-performance and scalable web applications.
• Azure Firewall: Azure Firewall is a firewall-as-a-service offering that enables customers to centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks.
• Azure Firewall DDoS Protection: Azure Firewall Distributed Denial of Service (DDoS) Protection is a service that provides protection against DDoS attacks for Azure virtual networks.
• Azure Route Filter: Azure Route Filter is a service that enables customers to control routing in Azure ExpressRoute and Virtual WAN.
• Azure Traffic Manager: Azure Traffic Manager is a service that enables customers to control the distribution of traffic to their Azure resources. Azure Traffic Manager is a service that enables customers to distribute traffic across multiple Azure resources.

• Azure SQL Database: Azure SQL Database is a fully managed relational database service in Azure that enables customers to create, configure, and manage databases in the cloud.
• Azure Cosmos DB: Azure Cosmos DB is a fully managed, globally distributed, multi-model database service.
• Azure Data Lake: Azure Data Lake is a service that enables customers to store and analyze large amounts of data.
• Azure SQL Data Warehouse: Azure SQL Data Warehouse is a service that enables customers to create and run a data warehouse in Azure.
• Azure SQL Database: Azure SQL Database is a service that enables customers to create and run a SQL database in Azure.
• Azure Database for PostgresSQL: Azure Database for PostgreSQL is a fully-managed service that enables customers to create and run a PostgreSQL database in Azure.
• Azure Data Lake: Azure Data Lake Storage is a fully-managed, scale-out data lake that enables customers to store, manage, and analyze large amounts of data.
• Azure SQL Synapse: Azure Synapse Analytics (formerly SQL Data Warehouse) is a cloud-based analytics service that enables customers to analyze large amounts of data using a combination of big data and traditional data warehousing.
• Azure Data Lake: Azure Data Lake Storage is a fully-managed, scale-out data lake that enables customers to store, manage, and analyze large amounts of data.
• Azure Analysis Services: Azure Analysis Services is a fully managed platform as a service (PaaS) that provides enterprise-grade data modeling in the cloud. It enables customers to create semantic data models for business intelligence (BI) and analytics.
• Azure Machine Learning Studio: Azure Machine Learning Studio is a collaborative, web-based environment for building, testing, and deploying machine learning models.
• Azure DataBricks: Azure Databricks is a service that enables customers to process large amounts of data using Apache Spark and other data processing frameworks.
• Azure Data Factory: Azure Data Factory is a service that enables customers to create, schedule, and manage data pipelines.
• Azure HDInsight: Azure HDInsight is a fully-managed cloud service that makes it easy, fast, and cost-effective to process big data.
• Azure Databricks: Azure Databricks is a service that enables customers to build, train, and deploy machine learning models using Apache Spark.
• Azure Analysis Services: Azure Analysis Services is a service that enables customers to create and deploy semantic data models for business intelligence and analytics.
• Security
• Azure Advanced Threat Protection: Azure Advanced Threat Protection is a service that enables customers to detect, investigate, and respond to advanced threats, compromised identities, and malicious insider actions in their Azure AD and on-premises environments.
• Microsoft Defender: Microsoft Defender is a security feature that helps protect Windows devices from malware, viruses, and other malicious software.
• Azure Information Protection: Azure Information Protection is a service that enables customers to classify, label, and protect their sensitive data.
• Azure Sentinel: Azure Sentinel is a service that enables customers to detect and investigate security threats across their organization.
• Azure Security Center: Azure Security Center is a service that enables customers to protect their Azure resources and applications.
• Trust Center: Trust Center is a website that provides information about Microsoft’s commitment to security, compliance, and privacy.
• Azure Information Protection: Azure Information Protection is a service that enables customers to classify, label, and protect sensitive information.
• Azure Access Control IAM: Azure Access Control (IAM) is a service that enables customers to manage access to Azure resources by managing roles and permissions.
• Security Center: Azure Security Center is a service that enables customers to manage and improve their security posture across their Azure resources.
• Conditional Access: Azure Conditional Access is a service that enables customers to control access to their Azure resources based on conditions such as location, device, and user identity.
• Just In Time VM Access: Just-In-Time VM Access is a feature that enables customers to control and limit access to their Azure virtual machines.