AZ Landscape flashcards
AZ Landscape · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Azure region
- A geographic area containing one or more Azure datacenters, providing local residency and latency choices; not every region supports availability zones.
- Availability zone
- Physically separate datacenter group within an Azure region with independent power, cooling, and networking; used to build high-availability solutions across fault domains.
- Management group
- An Azure hierarchy container above subscriptions used to apply governance and access controls consistently across multiple subscriptions without duplicating assignments.
- Shared responsibility model
- A cloud framework dividing security duties: the provider secures physical infrastructure, while the customer always owns data, identities, and access configuration.
- App Service plan
- Defines the region, operating system, pricing tier, and compute resources for Azure App Service apps; multiple apps can share the same plan.
- Functions Consumption plan
- A serverless hosting plan that scales automatically and bills per execution and execution time, scaling to zero when no events arrive.
- VM Scale Set
- An Azure compute resource that deploys and manages a group of identical or flexible virtual machines with autoscaling and load balancing.
- Azure Kubernetes Service
- A managed Kubernetes service where Azure operates the control plane and customers manage worker nodes and workloads in their subscription.
- VNet peering
- Connects two Azure virtual networks so resources communicate privately using the Azure backbone; peering is non-transitive and can span regions.
- Network security group
- A stateful packet filter applied to subnets or network interfaces, containing prioritized allow or deny rules evaluated by rule number.
- ExpressRoute
- A private dedicated connection between on-premises networks and Azure through a connectivity provider, bypassing the public internet.
- Azure Bastion
- A managed jump-host service that provides RDP and SSH access to virtual machines through the Azure portal over TLS without public IPs.
- Blob access tiers
- Hot, Cool, Cold, and Archive tiers trade storage cost against access cost and latency; Archive requires rehydration before reading.
- Azure Data Box
- A physical appliance shipped to a site to transfer large datasets offline into Azure when network transfer is too slow or costly.
- Cosmos DB consistency levels
- Five choices from strong to eventual: strong, bounded staleness, session, consistent prefix, and eventual; stronger consistency increases latency and reduces availability.
- Azure Files
- Managed file shares accessible over SMB or NFS protocols, usable by cloud and on-premises clients with snapshots and identity-based access.
- Microsoft Entra ID
- A cloud identity provider that stores users, groups, and applications for an Azure tenant and issues tokens for authentication and authorization.
- Managed identity
- An automatically managed identity in Entra ID that lets an Azure resource authenticate to other services without storing credentials in code.
- Conditional Access
- An Entra ID policy engine that grants or blocks access based on user, device, location, application, and risk conditions.
- Azure RBAC
- A role-based authorization system assigning built-in or custom role definitions to security principals at management group, subscription, resource group, or resource scope.
- Azure Policy
- A governance service that evaluates resources against rules and can audit, deny, modify, or deploy resources to enforce organizational standards.
- Azure budget
- A Cost Management object that tracks spending against a threshold and triggers alerts or actions when forecasted or actual cost exceeds limits.
- Resource group
- A logical container for Azure resources that share lifecycle and access control; a resource belongs to exactly one resource group at a time.
- Azure Reservations
- A one- or three-year commitment to specific Azure resources in exchange for discounted pricing, suitable for predictable, steady workloads.
- Azure Data Factory
- A cloud data integration service for building pipelines that copy and transform data across on-premises and cloud sources using linked services and activities.
- Azure Synapse Analytics
- An analytics platform combining dedicated SQL pools, serverless SQL, Spark, and pipelines for enterprise data warehousing and big-data processing.
- Azure Event Hubs
- A scalable event-ingestion service that receives millions of events per second for streaming processing by consumers such as Stream Analytics or Spark.
- Azure Logic Apps
- A low-code workflow service with connectors to SaaS and enterprise systems, used to automate integration processes and business workflows.
- Azure Monitor metrics
- Numeric time-series data collected at regular intervals for Azure resources, optimized for fast queries and alerting on thresholds.
- Log Analytics workspace
- A central repository for Azure Monitor logs queried with KQL, defining data retention and access boundaries for collected telemetry.
- Recovery Time Objective
- The maximum acceptable duration before a workload is restored after disruption; informs backup, replication, and disaster recovery design choices.
- Azure Site Recovery
- A disaster recovery service that replicates virtual machines and orchestrates failover and failback between Azure regions or from on-premises to Azure.