REVIEW AZ104 SPEED

VNet

Private network for Azure resources.

Subnet

Smaller network inside a VNet.

NSG

Allows or denies network traffic by port, protocol, and IP.

Public IP

Allows an Azure resource to communicate over the Internet.

Azure Firewall

Centralized managed firewall for Azure networks.

Azure Bastion

Securely connects to Azure VMs over RDP/SSH without a public IP.

VPN Gateway

Securely connects an on-premises network to an Azure VNet.

VNet Peering

Connects two VNets for private communication.

Service Endpoint

Securely connects a VNet to an Azure service over the Microsoft backbone.

Private Endpoint

Gives an Azure service a private IP address inside a VNet.

Availability Set

Protects VMs from hardware failures within the same datacenter.

Availability Zone

Protects VMs from datacenter failures by placing VMs in different zones.

VM Scale Set

Automatically increases or decreases VM instances based on demand.

Deployment Slot

Tests a new App Service version before swapping into production.

Azure App Service

PaaS used to host web applications without managing servers.

App Service Plan

Defines the compute resources used by one or more App Services.

Azure Container Registry (ACR)

Stores private container images.

Azure Container Instances (ACI)

Runs individual containers without managing virtual machines.

Azure Container Apps

Runs scalable containerized applications.

ARM Template

JSON template that defines and deploys Azure resources.

Bicep

Domain-specific language that compiles into ARM templates.

RBAC

Controls who can perform actions on Azure resources.

Azure Policy

Enforces organizational rules on Azure resources.

Resource Lock

Protects existing resources from modification or deletion.

Management Group

Organizes multiple Azure subscriptions.

Dynamic Group

Automatically assigns users based on Microsoft Entra attributes.

Group-Based Licensing

Automatically assigns licenses to members of a group.

Storage Account

Top-level Azure storage resource that contains storage services.

Blob Storage

Stores unstructured object data.

Blob Container

Logical grouping of blobs within a storage account.

SAS

Provides temporary delegated access to storage resources.

Stored Access Policy

Centrally manages and revokes SAS permissions.

Storage Explorer

GUI tool for managing Azure Storage.

AzCopy

Command-line tool for copying Azure Storage data.

LRS

Keeps three copies of data within one datacenter.

ZRS

Replicates data across multiple availability zones in one region.

GRS

Replicates data to another Azure region for disaster recovery.

RA-GRS

GRS with read access to the secondary region.

Object Replication

Automatically copies blobs between storage accounts.

Blob Versioning

Keeps previous versions of blobs after changes.

Soft Delete

Recovers accidentally deleted blobs or containers.

Lifecycle Management

Automatically moves or deletes blobs based on rules.

Azure Monitor

Collects and analyzes metrics, logs, and alerts.

Log Analytics Workspace

Central storage for Azure Monitor logs.

Activity Log

Records subscription-level Azure events.

Metrics

Numerical performance data collected over time.

Alerts

Notify administrators when specified conditions are met.

Diagnostic Settings

Send resource logs and metrics to destinations such as Log Analytics.