Azure AZ-900 flashcards
Azure AZ-900 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Cloud computing
- Delivery of computing services such as compute, storage, and networking over the internet with pay-as-you-go pricing, enabling on-demand resources without owning physical infrastructure.
- Consumption-based model
- A pricing model where you pay only for the resources you use, with no upfront capacity commitment; spending becomes an operating expense rather than a capital expense.
- Shared responsibility model
- A division of security duties: the cloud provider secures physical datacenters, hosts, and networks, while the customer secures data, identities, devices, and applications, with boundaries varying by service model.
- Public cloud
- A provider-owned, multi-tenant environment accessible over the internet where resources are shared logically and the customer does not maintain physical hardware.
- Private cloud
- A cloud environment dedicated to a single organization, hosted on-premises or by a provider, offering greater control and isolation at higher cost.
- Hybrid cloud
- A combination of public and private cloud environments that allows data and applications to move between them, supporting gradual migration and burst capacity.
- Infrastructure as a Service
- A cloud service model where the provider manages physical infrastructure while the customer manages the operating system, middleware, applications, and data, giving maximum control.
- Platform as a Service
- A cloud service model where the provider manages infrastructure, operating system, and runtime, while the customer deploys and manages applications and data.
- Software as a Service
- A cloud service model where the provider manages the entire application; the customer accesses software over the internet and manages only data and user access.
- Vertical scaling
- Increasing or decreasing the resources such as CPU and memory of a single instance; also called scaling up or scaling down.
- Horizontal scaling
- Adding or removing instances of a resource; also called scaling out or scaling in; supports elasticity and improves fault tolerance.
- Azure region
- A geographic area containing one or more Azure datacenters; resources are deployed into a region, which defines latency boundaries and data residency options.
- Region pair
- Two Azure regions within the same geography paired for disaster recovery; platform updates roll out sequentially and the regions are at least 300 miles apart.
- Availability zone
- A physically separate group of datacenters within an Azure region, with independent power, cooling, and networking, used to protect workloads from datacenter failures.
- Resource group
- A logical container for Azure resources; each resource belongs to exactly one resource group, and deleting the group deletes all contained resources.
- Subscription
- An Azure billing and access boundary linked to an identity tenant; resources, quotas, and costs are organized under a subscription.
- Virtual network
- An isolated private network in Azure that contains subnets and enables communication among Azure resources, on-premises networks, and the internet.
- Network security group
- A set of security rules that allow or deny inbound and outbound network traffic; it can be associated with subnets or network interfaces.
- Azure Blob Storage
- Object storage for unstructured data such as documents, images, and backups; supports hot, cool, and archive access tiers and is accessed over HTTP or HTTPS.
- Azure App Service
- A platform-as-a-service offering for hosting web applications and APIs; the provider manages patching and scaling, and multiple programming languages are supported.
- Microsoft Entra ID
- A cloud identity provider that handles authentication and authorization; it supports single sign-on, multifactor authentication, and Conditional Access for users and applications.
- Azure Policy
- A governance service that enforces organizational rules on Azure resources; policies can deny, audit, or remediate noncompliant resources, and initiatives group related policies.
- Role-based access control
- An authorization system that assigns roles to identities at a scope such as subscription or resource group; permissions are inherited and should follow least privilege.
- Resource lock
- A setting that prevents accidental deletion or modification of a resource; CanNotDelete blocks deletion, while ReadOnly blocks changes, even for owners.
- Tags
- Key-value metadata applied to Azure resources for organization, cost allocation, and automation; tags are not inherited by child resources by default.
- Azure Cost Management
- A tool for analyzing, monitoring, and optimizing Azure spending; it supports budgets, alerts, and cost allocation using tags and scopes.
- Azure Pricing Calculator
- An online tool that estimates the cost of planned Azure services by configuring region, tier, and usage; it does not deploy resources.
- TCO Calculator
- A tool that compares the total cost of ownership of on-premises infrastructure with Azure, accounting for hardware, power, labor, and software costs.
- Azure Advisor
- A personalized recommendation service that identifies ways to improve cost, security, reliability, performance, and operational excellence across Azure resources.
- Azure Monitor
- A monitoring service that collects metrics and logs from Azure resources, creates alerts, and provides dashboards for observability and troubleshooting.
- Azure Service Health
- A service that provides personalized information about Azure outages, planned maintenance, and health advisories that may affect your resources.
- Microsoft Defender for Cloud
- A security service that provides posture management, a secure score, recommendations, and threat protection across Azure and hybrid workloads.