Azure AZ-801 key terms

A PowerShell remoting security technology that restricts administrative tasks to specific cmdlets, functions, and parameters, and runs them under a temporary privileged virtual account. It reduces the attack surface by enforcing role-based access controls.

A Windows security feature that uses virtualization-based security to isolate and protect derived domain credentials, such as NTLM hashes and Kerberos tickets, from theft by malware running with administrative privileges.

A Windows feature that uses the hypervisor to create an isolated environment for security-sensitive components. It underpins features like Credential Guard and Device Guard by protecting secrets and code integrity from the main operating system.

A software-based security feature that restricts which drivers and applications can run on a Windows Server by enforcing code integrity policies. It helps block untrusted or malicious code, including zero-day attacks.

A Group Policy-based feature that lets administrators control which applications and files users can run. Rules can be based on file path, publisher, or hash, and it is often used to block unauthorized software.

A collection of policy settings stored in Active Directory that defines configurations for users and computers. GPOs are linked to sites, domains, or organizational units and are applied to target objects during refresh.

A predefined set of security configuration settings, often provided by Microsoft, that helps harden Windows Server against known threats. Baselines are applied via Group Policy or other tools and are compared using the Security Compliance Toolkit.

A snap-in that configures security settings on a single Windows Server, such as password policies, audit policies, and user rights. These settings apply only to the local computer and can be overridden by domain Group Policy.

A feature that allows users' certificates, private keys, and other credential objects to be stored in Active Directory and roamed across multiple computers. It simplifies credential management in hybrid and on-premises environments.

A Windows Server role that provides public key infrastructure services, including issuing and managing digital certificates. It supports secure authentication, encryption, and signing for users, computers, and applications.

Definitions in AD CS that specify the contents, validity, and enrollment permissions for certificates. They allow administrators to standardize certificate issuance for specific purposes, such as web server or user authentication.

A host-based firewall that filters inbound and outbound traffic based on rules, profiles, and connection security. It can be managed locally or via Group Policy and supports IPsec for secure communication.

Firewall rules in Windows Firewall with Advanced Security that use IPsec to authenticate and encrypt traffic between computers. They define the security requirements for specific connections, such as requiring Kerberos authentication.

A suite of protocols that secures IP communications by authenticating and encrypting each IP packet. In Windows Server, it is configured through connection security rules and is often used for domain isolation.

A server role that downloads updates from Microsoft Update and distributes them to Windows computers in a network. It allows administrators to approve and manage update deployment centrally.

A group of independent servers that work together to provide high availability for services and applications. If one node fails, another node takes over the workload, minimizing downtime.

A feature in Failover Clustering that provides a shared storage volume accessible by multiple cluster nodes simultaneously. It simplifies storage management and enables live migration of virtual machines.

The mechanism in a failover cluster that ensures only one set of nodes is active at a time, preventing split-brain scenarios. It uses a voting configuration, such as node majority or a witness disk, to determine cluster health.

A small shared disk used in a failover cluster to maintain quorum when there is an even number of nodes. It stores cluster configuration data and helps the cluster determine which partition has the majority.

A Hyper-V feature that moves a running virtual machine from one host to another with minimal downtime. It requires shared storage or storage migration and is often used with failover clusters for maintenance.

A software-defined storage feature that uses local disks in a failover cluster to create highly available and scalable storage. It pools disks and provides resiliency through mirroring or parity.

A Windows Server feature that distributes incoming network traffic across multiple servers to improve availability and scalability. It is often used for stateless applications like web servers.

A Windows Server feature that enables synchronous or asynchronous block-level replication of storage between servers or clusters. It supports disaster recovery and stretch clusters by replicating volumes over a network.

A built-in backup tool that provides bare-metal recovery, volume backups, and system state backups. It can back up to local disks, network shares, or removable media and is often used for small environments.

A backup that includes critical system components such as the registry, COM+ class registration database, boot files, and Active Directory. It is used to recover server roles and configuration without restoring user data.

The process of restoring a server from backup to a new or wiped hard disk, including the operating system, applications, and data. It is used after a complete system failure or disaster.

An Azure service that provides disaster recovery by replicating on-premises workloads to Azure or another site. It orchestrates failover and failback, helping maintain business continuity for virtual and physical servers.

A cloud-based backup service that protects on-premises and Azure workloads. It uses the Microsoft Azure Recovery Services (MARS) agent or backup extensions to store backups in a Recovery Services vault.

An Azure storage entity that holds backup and replication data for Azure Backup and Azure Site Recovery. It is used to manage and monitor protected items and recovery points.

A feature that allows administrators to restore deleted Active Directory objects, such as users and groups, without taking the domain offline. It preserves object attributes and links for a configurable retention period.

A method of restoring Active Directory data that marks the restored objects as authoritative, causing them to replicate to other domain controllers. It is used to recover from accidental deletions or corruption.

A Windows Server tool that inventories data on a source server, transfers files and shares to a new server, and optionally takes over the identity of the old server. It simplifies migrations to newer Windows Servers.

A set of cmdlets and tools that help migrate server roles and features from an older Windows Server to a newer one. It captures configuration settings and data for roles like DHCP and DNS.

A command-line utility for copying files and directories with options for mirroring, retrying, and preserving permissions. It is commonly used for data migration and synchronization between servers or shares.

A central hub in Azure for discovering, assessing, and migrating on-premises servers, databases, and applications to Azure. It provides tools for dependency mapping, cost estimation, and replication.

A browser-based management tool for Windows Servers, clusters, and hybrid environments. It provides a graphical interface for managing servers, configuring roles, and monitoring performance without needing Remote Desktop.

A built-in Windows tool for tracking system performance through counters such as CPU, memory, disk, and network usage. It can log data and generate alerts for troubleshooting and capacity planning.

A configuration in Performance Monitor that specifies which performance counters to collect, the sampling interval, and where to store the log. It is used to create performance baselines and troubleshoot issues.

A Windows tool that displays event logs generated by the operating system, applications, and services. Administrators use it to diagnose problems, audit security events, and monitor system health.