Azure Administrator (AZ-104) - Core Infrastructure & Services

An Azure VPN Gateway is a specific type of virtual network gateway used to send encrypted traffic between an Azure VNet and an on-premises location over the public internet (Site-to-Site VPN) or between Azure VNets (VNet-to-VNet). It can also enable Point-to-Site VPN for individual clients.

An Azure VNet is a logically isolated section of the Azure cloud dedicated to your subscription. It enables Azure resources to securely communicate with each other, the internet, and on-premises networks.

Subnets allow you to segment the VNet into smaller, isolated network segments. Each subnet can have its own Network Security Group (NSG) and routing table, providing granular control over traffic flow and resource isolation.

An NSG acts as a virtual firewall for Azure resources, filtering network traffic to and from Azure resources in an Azure VNet. It uses security rules to allow or deny traffic based on source/destination IP address, port, and protocol.

Inbound rules control traffic coming into a resource (e.g., allowing RDP to a VM). Outbound rules control traffic going out of a resource (e.g., allowing a VM to access the internet).

VNet Peering connects two Azure VNets, allowing resources in both VNets to communicate with each other as if they were in the same network. Traffic between peered VNets uses the Microsoft backbone network and is not routed through the public internet.

An Azure Storage Account is a unique object in Azure that provides a namespace for storing various types of data objects: blobs, files, queues, and tables. It's the foundation for Azure's scalable and durable cloud storage.

1. Blob Storage: Stores unstructured object data (text, binary) like images, videos, and backups.
2. File Storage: Managed file shares for cloud or on-premises deployments, accessible via SMB protocol.
3. Table Storage: NoSQL key-value store for semi-structured data.
4. Queue Storage: Message queuing for reliable messaging between application components.