Microsoft glossary
Key Microsoft certification terms and acronyms.
Definitions are AI-assisted and reviewed for general accuracy — verify critical details against Microsoft's official documentation.
AADAzure Active Directory
Microsoft's cloud-based identity and access management service used to authenticate and authorize users and applications.
ACRAzure Container Registry
A managed Docker-compatible registry for storing, managing, and deploying container images and Helm charts.
AIArtificial Intelligence
The simulation of human-like intelligence by machines to perform tasks such as reasoning, learning, and problem-solving.
AKSAzure Kubernetes Service
A managed Kubernetes container orchestration service in Azure that simplifies cluster deployment, scaling, and operations.
AKSAzure Kubernetes Service
A managed Kubernetes container orchestration service that offloads cluster control-plane management to Azure.
AKSAzure Kubernetes Service
A managed Kubernetes container orchestration service that offloads cluster control-plane management to Azure.
APIMAzure API Management
A managed service for publishing, securing, transforming, and monitoring APIs exposed to internal or external consumers.
App Service Plan
An Azure resource that defines the region, compute size, and pricing tier for hosting one or more App Service web apps.
Application Insights
An APM service within Azure Monitor that collects telemetry including requests, exceptions, dependencies, and custom metrics from applications.
ARMAzure Resource Manager
The deployment and management layer for Azure that provides a consistent way to create, update, and delete resources using templates or APIs.
ARMAzure Resource Manager
Azure's deployment and management layer that provides a consistent API for creating, updating, and deleting resources across Azure subscriptions.
ARMAzure Resource Manager
The deployment and management layer for Azure that provides a consistent API for creating, updating, and deleting resources.
ARM TemplateAzure Resource Manager Template
A JSON file that declaratively defines Azure infrastructure and configuration for repeatable deployments.
ASGApplication Security Group
A logical grouping of VM network interfaces that simplifies NSG rule management by allowing rules to reference groups instead of individual IPs.
Availability Zone
Physically separate datacenter locations within an Azure region, each with independent power, cooling, and networking to protect against datacenter-level failures.
Availability Zone
Physically separate datacenters within an Azure region, each with independent power, cooling, and networking to protect against datacenter failure.
Availability Zone
Physically separate datacenter locations within an Azure region, each with independent power, cooling, and networking to protect against datacenter failures.
AzureMicrosoft Azure
Microsoft's public cloud platform offering compute, storage, networking, and other services via Microsoft-owned datacenters worldwide.
Azure ADAzure Active Directory
Microsoft's cloud-based identity and access management service used to authenticate users and control access to Azure and other Microsoft services.
Azure ADAzure Active Directory
Microsoft's cloud-based identity and access management service used for authentication and authorization of users and applications.
Azure ADAzure Active Directory
Microsoft's cloud-based identity and access management service used to authenticate users and control access to Azure resources and applications.
Azure AI Document Intelligence
An Azure service that uses ML to extract structured data such as fields, tables, and key-value pairs from documents and forms.
Azure AI Foundry
An Azure platform for building, evaluating, and deploying generative AI applications and custom AI solutions in a unified environment.
Azure AI Language
An Azure service providing NLP features including sentiment analysis, key phrase extraction, entity recognition, and question answering.
Azure AI Speech
An Azure service that converts speech to text, text to speech, and performs speaker recognition and translation.
Azure AI Vision
An Azure Cognitive Service that analyzes images and videos to extract descriptions, tags, objects, and text.
Azure Bastion
A fully managed PaaS service providing secure RDP and SSH connectivity to VMs directly through the Azure portal without exposing public IP addresses.
Azure Blob Storage
An Azure object storage service optimized for storing large amounts of unstructured data such as images, videos, and backups.
Azure Blueprints
A service that packages ARM templates, policies, role assignments, and resource groups into a repeatable, auditable definition for consistent environment provisioning.
Azure Bot Service
An Azure service for building, connecting, and deploying intelligent conversational bots across multiple channels.
Azure Cosmos DB
A globally distributed, multi-model NoSQL database service with single-digit millisecond latency, automatic scaling, and multiple consistency level options.
Azure Defender
A set of threat protection plans within Microsoft Defender for Cloud that monitors and detects threats across Azure and hybrid workloads.
Azure Defender
A set of threat protection plans within Microsoft Defender for Cloud that detects and responds to advanced threats across Azure, hybrid, and multi-cloud workloads.
Azure Front Door
A global, scalable entry point that uses Microsoft's edge network to deliver fast, secure, and highly available web applications with built-in load balancing and WAF.
Azure Functions
A serverless compute service that executes event-driven code without requiring explicit infrastructure management.
Azure Key Vault
A cloud service for securely storing and controlling access to secrets, encryption keys, and certificates used by applications and services.
Azure Machine Learning
An Azure cloud service for building, training, deploying, and managing machine learning models at scale.
Azure Monitor
A platform service that collects, analyzes, and acts on telemetry data from Azure and on-premises environments to maximize performance and availability.
Azure Monitor
An Azure service that collects, analyzes, and acts on telemetry data from Azure and on-premises environments to maximize performance and availability.
Azure Monitor
A comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure and on-premises environments.
Azure OpenAI Service
An Azure service that provides access to OpenAI large language models, including GPT-4, with enterprise security and compliance.
Azure Policy
A governance service that creates, assigns, and manages policy definitions to enforce rules and effects on Azure resources at scale.
Azure Policy
An Azure service that creates, assigns, and manages policy definitions to enforce organizational standards and assess compliance.
Azure Policy
A governance service that creates, assigns, and manages policy definitions to enforce organizational rules and compliance standards on Azure resources.
Azure Region
A set of datacenters deployed within a latency-defined perimeter, connected via a dedicated low-latency regional network.
Azure Site RecoveryASR
A disaster recovery service that orchestrates replication, failover, and recovery of Azure VMs and on-premises workloads to a secondary location.
BlobBinary Large Object
Unstructured object storage in Azure Storage optimized for storing large amounts of text or binary data such as images, videos, and backups.
Blob Storage
Azure object storage service for unstructured data such as images, videos, logs, and backups.
CAFCloud Adoption Framework
Microsoft's documented guidance and best practices covering the full lifecycle of cloud adoption, including strategy, planning, governance, and operations.
CapExCapital Expenditure
Upfront spending on physical infrastructure such as servers and datacenters, depreciated over time on a company's balance sheet.
CDNContent Delivery Network
A distributed network of servers that caches and delivers static content to users from geographically closer edge nodes.
Classification
A supervised ML task that assigns input data to one of a set of discrete categories or labels.
Clustering
An unsupervised ML task that groups data points into clusters based on similarity without predefined labels.
Cognitive Services
A collection of pre-built Azure APIs and services that add AI capabilities such as vision, speech, and language to applications.
Computer Vision
An AI field that enables machines to interpret and process visual information from images and videos.
Concurrency Token
A value stored with a resource (e.g., ETag) used to detect and prevent conflicting concurrent updates through optimistic concurrency control.
Cosmos DB
A globally distributed, multi-model NoSQL database service with single-digit millisecond response times and multiple consistency levels.
Deep Learning
A subset of ML that uses multi-layered neural networks to learn complex patterns, particularly effective for image, audio, and text data.
Deployment Slot
A live environment within an Azure App Service app that allows staging and swapping deployments with zero downtime.
Durable Functions
An extension of Azure Functions that enables writing stateful workflows as code using orchestrator and activity functions.
Event Grid
A fully managed event routing service that uses a publish-subscribe model to deliver events from Azure or custom sources to handlers.
Event Hubs
A big-data streaming platform and event ingestion service capable of receiving and processing millions of events per second.
ExpressRoute
A dedicated private connectivity service that links on-premises networks to Azure datacenters without traversing the public internet.
ExpressRoute
A dedicated private connectivity service that links on-premises networks to Microsoft Azure via a connectivity provider, bypassing the public internet.
Fairness
A Responsible AI principle requiring that AI systems do not produce biased outcomes that disadvantage certain groups.
Generative AI
A class of AI models that can produce new content such as text, images, or code based on learned patterns from training data.
Geo-Redundancy
A replication strategy that copies data to a secondary Azure region geographically distant from the primary region for disaster recovery.
Geo-Redundant StorageGRS
An Azure Storage redundancy option that asynchronously replicates data to a secondary region hundreds of miles from the primary region for disaster recovery.
GRSGeo-Redundant Storage
A storage replication option that replicates data to a secondary region hundreds of miles away, providing cross-region durability.
IaaSInfrastructure as a Service
A cloud service model where the provider manages physical hardware and virtualization; the customer manages OS, middleware, and applications.
Key Vault
An Azure service for securely storing and accessing secrets, encryption keys, and certificates.
Landing Zone
A pre-configured, scalable Azure environment defined by a set of design principles covering identity, networking, security, and governance to host workloads.
LLMLarge Language Model
A deep learning model trained on large text corpora that can generate, summarize, translate, and answer questions in natural language.
Log Analytics
A tool within Azure Monitor that collects and aggregates log data from multiple sources and provides a query interface using Kusto Query Language.
Log Analytics
A tool in Azure Monitor used to edit and run log queries against data collected in a Log Analytics workspace.
Logic Apps
A cloud service for automating and orchestrating workflows, business processes, and integrations using a visual designer and pre-built connectors.
LRSLocally Redundant Storage
A storage replication option that keeps three synchronous copies of data within a single datacenter in one Azure region.
Managed Disk
An Azure-managed block-level storage volume used with VMs where Azure handles storage account management and redundancy on the user's behalf.
Managed Identity
An Azure AD identity automatically managed by Azure that allows services to authenticate to other Azure resources without storing credentials in code.
MFAMulti-Factor Authentication
An authentication method requiring two or more verification factors, reducing risk of compromised credentials.
MFAMulti-Factor Authentication
An authentication method requiring users to verify identity with two or more factors, reducing the risk of compromised credentials.
MLMachine Learning
A subset of AI where models learn patterns from data to make predictions or decisions without being explicitly programmed.
MSALMicrosoft Authentication Library
A client-side library that simplifies acquiring tokens from Azure AD using various OAuth 2.0 and OpenID Connect flows.
MSIManaged Service Identity
An Azure feature that provides Azure resources with an automatically managed identity in Azure AD, eliminating the need for credentials in code.
Neural Network
A computational model inspired by the human brain, consisting of layers of interconnected nodes used to learn data patterns.
NLPNatural Language Processing
A branch of AI that enables computers to understand, interpret, and generate human language in text or speech form.
NSGNetwork Security Group
A set of inbound and outbound security rules used to filter network traffic to and from Azure resources within a VNet.
NSGNetwork Security Group
A resource containing security rules that filter inbound and outbound network traffic to and from Azure resources.
NSGNetwork Security Group
An Azure resource containing inbound and outbound security rules that filter network traffic to and from Azure resources.
OAuth 2.0
An open authorization framework that allows third-party applications to obtain limited access to a service on behalf of a user.
OCROptical Character Recognition
A technology that detects and extracts printed or handwritten text from images and documents into machine-readable text.
OpExOperational Expenditure
Ongoing spending for services or products, billed as consumed; cloud services are typically OpEx rather than CapEx.
PaaSPlatform as a Service
A cloud service model where the provider manages infrastructure and OS; the customer manages only the application and its data.
Peering
A mechanism to connect two Azure VNets so that resources in each network can communicate using private IP addresses.
PIPPublic IP Address
An Azure resource that provides an internet-routable IP address assignable to services such as VMs, load balancers, and VPN gateways.
Private Endpoint
A network interface that connects privately and securely to an Azure service using a private IP address from within a VNet, eliminating public internet exposure.
RBACRole-Based Access Control
An authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources using defined roles.
RBACRole-Based Access Control
An authorization system built on Azure Resource Manager that controls access to Azure resources by assigning roles to users, groups, or service principals.
RBACRole-Based Access Control
An authorization system built on ARM that grants users only the permissions they need to perform their job roles.
RBACRole-Based Access Control
An authorization system in Azure that grants access to resources by assigning built-in or custom roles to users, groups, or service principals.
Redis Cache
Azure Cache for Redis is a managed in-memory data store based on Redis, used for caching, session management, and message brokering.
Regression
A supervised ML task that predicts a continuous numeric value as output.
Responsible AI
A set of principles and practices ensuring AI systems are fair, reliable, transparent, private, inclusive, and accountable.
RPORecovery Point Objective
The maximum acceptable amount of data loss measured in time; defines how far back in time a recovery point must exist.
RTORecovery Time Objective
The maximum acceptable duration of time that a system can be offline after a disaster before business impact becomes unacceptable.
SaaSSoftware as a Service
A cloud service model where the provider hosts and manages a complete application; the customer uses it via a browser or thin client.
SASShared Access Signature
A URI that grants restricted access rights to Azure Storage resources for a specified time period and set of permissions.
SASShared Access Signature
A URI-based token that grants limited, time-bound access to Azure Storage resources without exposing account keys.
Scalability
The ability to increase or decrease resources and services to match demand, either vertically (resize) or horizontally (add instances).
Service Bus
A fully managed enterprise message broker supporting queues and publish-subscribe topics for reliable asynchronous messaging.
Shared Responsibility Model
A framework defining which security tasks are handled by the cloud provider and which remain the customer's responsibility, varying by service model.
SLAService Level Agreement
A formal commitment by Microsoft specifying the guaranteed uptime percentage and remedies (service credits) if the target is not met.
SLAService Level Agreement
A formal commitment by Microsoft defining the guaranteed uptime percentage and remedies for a specific Azure service.
SLAService Level Agreement
A formal commitment from Microsoft specifying the guaranteed uptime percentage and connectivity rates for a given Azure service.
Supervised Learning
An ML approach where a model is trained on labeled input-output pairs to learn a mapping from inputs to known outputs.
TCOTotal Cost of Ownership
The complete cost of an IT solution over its lifetime, including hardware, software, labor, and operational expenses.
UDRUser-Defined Route
A custom route in an Azure route table that overrides default system routes to control the next hop for subnet traffic.
Unsupervised Learning
An ML approach where a model identifies patterns or groupings in data without labeled examples.
VMVirtual Machine
An Azure IaaS compute resource that emulates a physical computer and runs an OS chosen by the customer.
VMSSVirtual Machine Scale Sets
An Azure compute resource that lets you deploy and manage a set of identical, autoscaling VMs as a single resource.
VNetVirtual Network
An isolated, logically defined network in Azure that enables Azure resources to securely communicate with each other, the internet, and on-premises networks.
VNetVirtual Network
Azure's isolated, private network environment that enables secure communication between Azure resources, the internet, and on-premises networks.
VNetVirtual Network
An Azure networking resource that provides an isolated, private network environment within the Azure cloud.
VPNVirtual Private Network
An encrypted tunnel that connects an on-premises network or client device to an Azure VNet over the public internet.
WAFWell-Architected Framework
Microsoft's set of architectural best practices organized across five pillars: Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency.