AZ-104 Microsoft Azure Administrator

TutDojo Azure Administrator

Microsoft Entra ID

A cloud-based identity and access management service that your employees can use to access external resources

Azure DevOps Services

Supports a collaborative culture and set of processes that bring together developers, project managers, and contributors to develop software

Azure Virtual Network

A private, isolated network in Azure allows secure communication among resources, the internet, and on-premises networks.

Azure Application Gateway

A Layer 7 (HTTP/HTTPS) load balancer designed for web applications. It includes advanced features like SSL termination, URL-based routing, and a Web Application Firewall (WAF).

Azure Load Balancer

A Layer 4 (TCP/UDP) load balancer that distributes incoming network traffic across multiple servers to ensure high availability and reliability of applications.

Azure VPN Gateway

A service used to send encrypted traffic between Azure VNets and on-premises networks, such as via VPN connections.

Azure ExpressRoute

A private, dedicated, high-throughput connection between an on-premises network and Azure, bypassing the public internet.

Azure Virtual Machines

A flexible, on-demand cloud computing service offered by Azure that can scale according to needs.

Azure DNS

It translates a service name into an IP address.

Azure App Service

It allows you to develop and host web apps, mobile back ends, and RESTful APIs in your preferred programming language without the need to manage infrastructure.

Azure Container Instances

Quick, serverless solution for running containers.

Azure Kubernetes Service

Managed Kubernetes solution for orchestrating containerized applications.

Azure Blob

A massively scalable object storage solution for storing unstructured data such as text, images, video, and backups.

Azure Files

A fully managed file shares in the cloud, accessible through the standard Server Message Block (SMB) protocol, Network File System (NFS) protocol, and Azure Files REST API.

Azure RBAC (Role-Based Access Control)

A system that offers fine-grained access management for Azure resources based on roles assigned to users.

Azure Policy

A governance tool to enforce standards and compliance at scale for Azure resources.

Azure Monitor

A service that collects, analyzes, and visualizes telemetry data from Azure resources to monitor their performance and health.

Azure File Sync

Allows you to consolidate your organization's file shares within Azure Files, while preserving the flexibility, performance, and compatibility of a Windows file server.

Azure Resource Manager (ARM) template

The are the JSON files that outline the infrastructure and configuration settings for your project.

Azure Key Vault

A service that helps safeguard cryptographic keys and secrets used by cloud applications and services, offering secure management of certificates, secrets, and keys.

Azure Recovery Services Vault

A service used to manage backup and disaster recovery operations in Azure. It stores recovery points and configurations for Azure-based backups and disaster recovery setups.

Geo-Replication

A feature of Azure SQL Database that allows for the replication of databases across multiple Azure regions to enable high availability and disaster recovery.

GRS (Geo-Redundant Storage)

An Azure Blob Storage that offers redundancy options that replicate data to a secondary region for disaster recovery.

Replication

The process of replicating Azure virtual machines or on-premises VMs to a different region or availability zone for disaster recovery.

Azure Site-to-Site VPN

A secure connection between an on-premises network and Azure via a VPN gateway to extend the on-premises network to the cloud.

Azure VPN Gateway

A service used to send encrypted traffic between Azure VNets and on-premises networks, such as via VPN connections.

Point-to-Site (P2S) VPN

It enables you to establish a secure link to your virtual network from a single client computer.

Azure Portal

It is a unified interface that enables you to create and manage all your Azure resources.

OAuth 2.0 authorization

Also known as the auth code flow, allows a client application to gain authorized access to protected resources, such as web APIs.

Dynamic membership groups for users

It allows you to use rules to automatically add and remove users as members.

Assigned groups

It allows you to add specific users as members of a group, providing them with unique permissions.

Azure SQL Database

A fully managed relational database service based on SQL Server that provides high availability, scalability, and security.

Azure PowerShell

It consists of various modules designed to manage Azure resources directly from PowerShell.

IT Service Management Connector (ITSM)

It facilitates quicker incident resolution by integrating service desk and monitoring data.

MX

This DNS record links a name to a mail server.

Azure Internal Load Balancer

It allows you to run highly available services behind a private IP address, accessible only within a cloud service or Virtual Network (VNet), ensuring added security.

Azure Deployment Environments

A service that enables on-demand, self-service deployment of environments using infrastructure as code templates.

Azure Log Analytics

A tool in Azure Monitor that helps you edit and run log queries to analyze the collected data.

Azure Activity Log

A platform log in Azure Monitor that provides data about the operations performed on resources in a subscription, such as resource creation, deletion, and configuration changes.

Azure Advisor

A service that provides personalized best practices and recommendations to help optimize your Azure resources for cost, security, performance, and reliability.

Azure Analysis Services

It is a PaaS offering enterprise-grade cloud data models. It allows you to merge data from various sources, define metrics, and secure your data within one trusted tabular model.

Azure Application Insights

An application performance management service that provides real-time monitoring and telemetry for applications.

Azure Application Insights Profiler

It is preinstalled as part of the Azure App Service runtime.

Azure Arc

It streamlines governance and management by providing a unified platform for managing multicloud and on-premises environments.

Azure Automation State Configuration

A cloud-based feature for PowerShell DSC (Desired State Configuration) that offers services tailored for enterprise environments.

Azure Availability Set

It is a logical grouping of VMs designed to minimize the risk of simultaneous failures affecting related VMs.

Azure Backup

A fully managed backup service that provides data protection for Azure VMs, databases, on-premises machines, and other Azure resources.

Azure Backup Instant Restore

It allows Azure Backup customers to rapidly recover VMs from snapshots stored alongside their disks.

Azure Backup Server

Using this, you can safeguard application workloads including Hyper-V VMs, VMware VMs, Azure Local VMs, Microsoft SQL Server, SharePoint Server, Microsoft Exchange, and Windows clients, all from a single console.

Azure Bastion

A fully managed service that enables secure and seamless RDP and SSH access to virtual machines without exposing them to the public internet.

Azure Cloud Shell

It is a browser-accessible terminal that provides an interactive and authenticated environment for managing Azure resources.

Azure Command-Line Interface

It consists of a set of commands to create and manage Azure resources.

Azure Compute Gallery

It enables you to organize and structure your Azure resources, such as images and applications.

Azure Connected Machine

This agent allows you to manage your Windows and Linux machines that are hosted outside of Azure, whether on your corporate network or with other cloud providers.

Azure Container Apps

A serverless platform that reduces the need for infrastructure management and lowers costs, all while running containerized applications.

Azure Container Networking Interface

This plug-in is installed on an Azure virtual machine, providing virtual network capabilities to Kubernetes Pods and Docker containers.

Azure Container Registry (ACR)

A managed Docker container registry for storing and managing container images in Azure.

Azure Content Delivery Network

A distributed network of servers designed to efficiently deliver web content to users.

Azure Cosmos DB

A globally distributed, multi-model database service that supports document, key-value, graph, and column-family data models.

Microsoft Cost Management

It offers a suite of FinOps tools designed to help organizations analyze, monitor, and optimize their Microsoft Cloud expenses.

Azure Custom Script Extension

This extension can be used for post-deployment configuration, software installation, or any other configuration or management activities.

Azure Data Factory

A managed cloud service designed for complex hybrid extract-transform-load (ETL), extract-load-transform (ELT), and data integration projects.

Azure Data Lake Storage

A highly scalable data lake solution built on Azure Blob Storage, optimized for big data analytics and processing.

Azure Disk Encryption

A service that helps secure your Azure virtual machine disks with encryption to protect data at rest.

Azure Firewall

A managed, cloud-based network security service that protects Azure Virtual Network resources from unauthorized access or threats.

Azure Import/Export

This service imports large volumes of data securely to Azure Blob storage and Azure Files by shipping disk drives to an Azure data center.

Azure Management Groups

A service in Azure that allows for querying and analyzing Azure resource inventory across multiple subscriptions and regions.

Azure Marketplace

An online store offering solutions designed for or built on Azure, catering to IT professionals and developers.

Azure Monitor Agent

It gathers monitoring data from the guest operating systems of both Azure and hybrid virtual machines (VMs).

Azure Monitor Metrics

A monitoring service that collects and analyzes numerical data from resources and services in Azure to track performance and health.

Azure Monitor Network Insights

It provides a comprehensive, visual overview of topology, health, and metrics for all deployed network resources, without any configuration needed.

Azure Monitor Private Link Scope

A collection of Azure Monitor resources that define the boundaries of your monitoring network.

Microsoft Entra multifactor authentication

It involves prompting users for an additional form of identification during the sign-in process, such as a code sent to their cellphone or a fingerprint scan.

Azure Network Watcher

Offers a suite of tools for monitoring, diagnosing, viewing metrics, and enabling or disabling logs for Azure IaaS (Infrastructure-as-a-Service) resources.

Azure Network Watcher Agent

An agent that is necessary for specific Azure Network Watcher features that capture and analyze network traffic to monitor and diagnose Azure virtual machines (VMs).

Azure Peering Service

A networking solution that improves connectivity to Microsoft cloud services, including Microsoft 365, Dynamics 365, software as a service (SaaS) offerings, Azure, and any other Microsoft services accessible over the public internet.

Azure Performance Diagnostics

It is a VM Extension that assists in collecting performance diagnostic data from Windows virtual machines (VMs).

Azure Private Link

It allows you to access Azure PaaS Services (such as Azure Storage and SQL Database) and Azure-hosted customer-owned or partner services through a private endpoint within your virtual network.

Azure Service Health

It offers a range of experiences that provide personalized guidance and support whenever issues in Azure services arise or have the potential to affect you in the future.

Azure Site Recovery

A disaster recovery solution that replicates workloads running on physical and virtual machines to Azure for backup and recovery.

Azure Storage

It provides highly available, massively scalable, durable, and secure storage for various data objects in the cloud.

Azure Storage Explorer

A standalone application that simplifies working with Azure Storage data across Windows, macOS, and Linux.

Azure Stream Analytics

A real-time analytics service designed to handle streaming data from various sources like IoT devices, logs, and social media feeds

Azure Table Storage

A NoSQL key-value store designed for storing large amounts of structured, non-relational data.

Azure Traffic Analytics

A cloud-based solution that offers insight into user and application activity within your cloud networks.

Azure Traffic Manager

A DNS-based traffic load balancer that enables you to distribute traffic to your public-facing applications across global Azure regions.

Azure Virtual Network Manager

A management service that allows you to group, configure, deploy, and oversee virtual networks globally across multiple subscriptions.

Azure Virtual Network Watcher

It offers a comprehensive suite of tools to monitor, diagnose, view metrics, and enable or disable logs for Azure Infrastructure-as-a-Service (IaaS) resources.

Azure Web Application Firewall

It actively protects your web applications from common exploits and vulnerabilities.

Microsoft Azure Recovery Services Agent

Azure Backup utilizes this agent to back up files, folders, and system state from on-premises machines and Azure VMs.

Microsoft Endpoint Manager

A cloud-based solution tailored to tackle the challenges of deploying, managing, and securing devices within an enterprise environment.

Microsoft Entra Application Proxy

It offers secure remote access and cloud-scale security for your private applications.

Microsoft Entra Connect

An on-premises application developed by Microsoft to help you achieve your hybrid identity objectives.

Microsoft Fabric

A platform that is primarily designed to fulfill your organization's data and analytics requirements.

Microsoft Graph

It serves as the gateway to data and intelligence within Microsoft cloud services, such as Microsoft Entra and Microsoft 365.

Microsoft Identity Management

It maintains consistent user identities by seamlessly integrating various on-premises authoritative systems and authentication stores, including Active Directory, SAP, Oracle, as well as other LDAP and SQL systems.

Microsoft Intune

A cloud-based endpoint management solution that handles user access to organizational resources and streamlines app and device management across various devices, including mobile devices, desktop computers, and virtual endpoints.

Microsoft Monitoring Agent

This must be installed and configured on the data collection machine. Additionally, it must be installed on the Log Analytics Gateway if that deployment scenario is used.

Microsoft Sentinel

A scalable, cloud-native SIEM that provides a smart and comprehensive solution for security information and event management (SIEM) as well as security orchestration, automation, and response (SOAR).

Microsoft System Center Service Manager

It offers an integrated platform to automate and tailor your organization's IT service management best practices, including those outlined in the Microsoft Operations Framework (MOF) and the Information Technology Infrastructure Library (ITIL).