Azure Administrator (AZ-104) - Core Infrastructure & Identity

Azure AD is Microsoft's cloud-based identity and access management service. It helps employees sign in and access internal and external resources, providing single sign-on (SSO), multi-factor authentication (MFA), and conditional access.

A Member user is a native user account created directly in your Azure AD tenant. A Guest user is an external user from another Azure AD tenant or a consumer identity (e.g., Microsoft account) invited to collaborate on resources within your tenant.

Security Groups are used to manage access to Azure resources, applications, and services. Microsoft 365 Groups (formerly Office 365 Groups) provide a collaboration space for teams, including a shared inbox, calendar, document library, and integration with services like Teams and SharePoint.

The Global Administrator role has the highest level of permissions in an Azure AD tenant. It can manage all administrative aspects of Azure AD and Microsoft 365 services. It's recommended to use this role sparingly and with caution.

An Azure Virtual Network (VNet) is a logical isolation of the Azure cloud dedicated to your subscription. It enables Azure resources (like VMs) to securely communicate with each other, the internet, and on-premises networks.

VNet Peering connects two Azure VNets, allowing resources in both VNets to communicate with each other as if they were in the same network. Traffic between peered VNets uses the Microsoft backbone network and is private.

An Azure VPN Gateway is used to send encrypted traffic between an Azure VNet and an on-premises location over the public internet (Site-to-Site VPN) or between an individual client and an Azure VNet (Point-to-Site VPN).

VPN Gateway uses encrypted tunnels over the public internet, suitable for hybrid connectivity with lower bandwidth needs. ExpressRoute provides a private, dedicated connection between your on-premises network and Azure, offering higher bandwidth, lower latency, and greater reliability.