Microsoft Certified: Azure Fundamentals (AZ-900) Flashcards

The delivery of computing services—such as compute, storage, databases, networking, and analytics—over the internet, letting organizations rent resources instead of owning and maintaining physical infrastructure.

Security and compliance responsibilities are divided between the cloud provider and the customer. The provider always secures the underlying physical infrastructure; the customer's share of responsibility varies by service type, growing largest in IaaS and smallest in SaaS.

A cloud model where the provider supplies virtualized compute, storage, and networking, while the customer manages the operating system, runtime, and applications on top of it.

A cloud model where the provider manages the infrastructure and runtime environment, and the customer only manages the application and its data—useful for developers who want to focus on code rather than infrastructure.

A cloud model where the provider hosts and manages a complete application, and the customer simply uses it, typically through a browser (e.g., Microsoft 365).

A pricing approach where customers pay only for the resources they actually use, rather than paying upfront for fixed capacity—reducing the need for large capital expenditure.

High availability, scalability, elasticity, agility, fault tolerance, and disaster recovery, along with the shift from capital expenditure (CapEx) to operational expenditure (OpEx).

A geographic area containing one or more datacenters that are networked together with low-latency connections, used to deploy Azure resources close to users.

A physically separate location within an Azure region, each with independent power, cooling, and networking, used to protect applications from datacenter-level failures.

A logical container that holds related Azure resources for a solution, allowing them to be managed, deployed, and billed together as a unit.

The deployment and management layer for Azure that allows you to create, update, and delete resources through a consistent API, portal, CLI, or template.

An IaaS compute service that provisions on-demand, scalable virtual machines running Windows or Linux inside Azure's infrastructure.

A service that lets you deploy and manage a group of identical, load-balanced virtual machines that automatically increase or decrease in number based on demand.

A fully managed PaaS offering for hosting web apps, REST APIs, and mobile back ends without managing the underlying infrastructure.

A serverless compute service that runs small pieces of event-triggered code on demand, without provisioning or managing servers, and bills based on execution.

The fundamental building block for private networking in Azure, enabling Azure resources to securely communicate with each other, the internet, and on-premises networks.

It sends encrypted traffic between an Azure virtual network and an on-premises location (or between virtual networks) over the public internet.

Storing large amounts of unstructured object data, such as text or binary files, images, and documents, accessible via HTTP/HTTPS.

Hot (frequently accessed data), Cool (infrequently accessed, stored for at least 30 days), and Archive (rarely accessed, stored offline for at least 180 days)—tiers trade off storage cost against access/retrieval cost.

Redundancy replicates data to protect against loss. Locally Redundant Storage (LRS) copies data synchronously three times within a single datacenter in one region.

Microsoft's cloud-based identity and access management service, used to authenticate users and manage access to Azure resources and other cloud applications.

A security process requiring users to provide two or more verification methods (such as a password plus a phone prompt) to prove their identity before gaining access.

An authorization system that grants users only the specific permissions they need by assigning roles at a particular scope, following the principle of least privilege.

A unified security management and threat protection tool that assesses the security posture of cloud resources and provides recommendations to improve it.

A set of tools that help monitor, allocate, and optimize cloud spending, including budgets, cost analysis, and recommendations for reducing waste.

A governance service that creates, assigns, and enforces rules over resource properties, ensuring resources stay compliant with organizational standards.

A free personalized recommendation engine that analyzes resource configuration and usage to suggest ways to improve cost, security, reliability, and performance.

A comprehensive platform for collecting, analyzing, and acting on telemetry (metrics and logs) from Azure and on-premises environments to maximize performance and availability.

A formal commitment from Microsoft specifying the guaranteed uptime/performance level for a service, along with remedies if that level isn't met.