DP-420: Microsoft Azure Cosmos DB Exam Practice Tests 2025

Multi-factor authentication requires proof from at least two different kinds of factor, such as a password and a device-generated code, so that stealing one is not enough to log in.

Identity and access management is the set of policies and systems that create, verify, govern and retire identities and decide what each one may reach.

Least privilege is the principle that every user, process and system should hold only the access required for its current task, and no more.

Switching is the forwarding of frames within a single network segment by a device that learns which hardware address sits on which port and sends each frame only where it needs to go.

A VLAN divides one physical switched network into several logical segments, each with its own broadcast domain, by tagging frames with a VLAN identifier so that ports and devices in different VLANs cannot reach each other without a router.

Network address translation rewrites the addresses and ports in packets as they cross a network boundary, most commonly so that many devices with private addresses can share one public address to reach the internet.

A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.

Object storage keeps every file as a self-contained object (the bytes, a unique key and some metadata) inside a flat bucket you read and write over HTTP, with no drive to mount and no directory tree underneath it.

Kubernetes is an open-source system that runs containers across a cluster of machines, keeping the number and placement of running copies matched to a declared desired state, and restarting, rescheduling and scaling them without a person intervening.

A web server is the program listening on a network port for HTTP requests and answering them, either by returning a file from disk or by handing the request to application code behind it.

Load balancing is the practice of putting one entry point in front of several interchangeable servers and distributing incoming requests among them by a chosen policy, so that no single machine carries the traffic and no single machine's failure takes the service down.

A CDN is a worldwide network of servers that answers requests for your site from a location near the person asking, instead of sending every request back to the single machine your site runs on.