A network security group (NSG) is a set of inbound and outbound security rules that allow or deny traffic to Azure resources by source, destination, port, and protocol. AZ-104 covers NSGs, application security groups, and evaluating effective security rules.
Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud identity and access management service.
Azure role-based access control (RBAC) is the authorization system that grants access to Azure resources through role assignments made up of a security principal, a role definition, and a scope.
Azure Policy is a governance service that enforces organizational rules on resources, for example allowed regions or required tags, and reports on compliance.
A management group is a container that organizes multiple Azure subscriptions so that governance conditions such as Azure Policy and RBAC apply across them.
A resource lock is a setting that prevents accidental deletion or modification of Azure resources, available as CanNotDelete or ReadOnly.
Storage redundancy is the Azure Storage setting that determines how many copies of your data are kept and where, with options such as LRS, ZRS, GRS, and GZRS.
A shared access signature (SAS) is a signed URL that grants limited, time-bound access to Azure Storage resources without sharing account keys.
Azure Blob Storage is Azure's object storage service for unstructured data, organized into containers with access tiers (hot, cool, cold, archive).
Bicep is a domain-specific language for deploying Azure resources declaratively, a more concise alternative to Azure Resource Manager (ARM) JSON templates.
A Virtual Machine Scale Set is an Azure compute resource that lets you deploy and manage a group of identical, load-balanced VMs that can automatically scale in and out.
A network security group (NSG) is a set of inbound and outbound security rules that allow or deny traffic to Azure resources by source, destination, port, and protocol.
Virtual network peering is a connection that links two Azure virtual networks so resources communicate privately as if on one network.
Azure Monitor is the platform service that collects and analyzes metrics and logs from Azure resources, supporting log queries, alert rules, action groups, and Insights.