Microsoft Federal CSA – Azure &
Microsoft Glossary Practice Exam
| Actual Questions and Answers
CAF
Answer ✔✔ Cloud Adoption Framework — Microsoft's end-to-end guidance for
strategy planning readiness adoption governance management and security of a
cloud estate
WAF
Answer ✔✔ Well-Architected Framework — Microsoft's five-pillar guidance
(Reliability Security Cost Optimization Operational Excellence Performance
Efficiency) for designing and reviewing workloads
Landing zone
Answer ✔✔ A pre-configured environment of subscriptions networking identity and
governance that serves as the foundation for deploying workloads
Enterprise-scale
Answer ✔✔ The CAF reference architecture for building a consistent secure large-
organization Azure landing zone with management group hierarchy and policy
baseline
Management group
Answer ✔✔ A container above subscriptions used to apply policy and RBAC across
many subscriptions at once
Subscription
Answer ✔✔ A billing and access boundary that holds resource groups and
resources
Resource group
,Answer ✔✔ A logical container for resources that share a lifecycle and are
managed together
Azure Policy
Answer ✔✔ Governance service that audits denies or remediates resources that do
not meet defined rules
RBAC
Answer ✔✔ Role-based access control — assigning built-in or custom roles to
identities at a scope such as subscription or resource group
Microsoft Entra ID
Answer ✔✔ Microsoft's cloud identity and access management service formerly
Azure Active Directory
Conditional Access
Answer ✔✔ Entra policy engine that grants or blocks sign-in based on signals such
as user device location risk and MFA
PIM
Answer ✔✔ Privileged Identity Management — just-in-time time-bound approval-
based activation of privileged Entra and Azure roles
Managed identity
Answer ✔✔ An automatically managed Entra identity for an Azure resource that lets
it authenticate to other services without stored credentials
Service principal
Answer ✔✔ An identity used by applications and automation to access Azure
resources
MFA
Answer ✔✔ Multi-factor authentication — requiring more than one proof of identity
at sign-in
Zero Trust
Answer ✔✔ Security model built on verify explicitly least privilege access and
assume breach
, Key Vault
Answer ✔✔ Azure service for storing and controlling access to secrets keys and
certificates
Microsoft Sentinel
Answer ✔✔ Azure's cloud-native SIEM and SOAR for collecting analyzing and
responding to security data
Defender for Cloud
Answer ✔✔ Cloud security posture management and workload protection across
Azure and multicloud
Defender XDR
Answer ✔✔ Microsoft's unified extended detection and response across endpoints
identities email and apps
Microsoft Purview
Answer ✔✔ Data governance classification labeling and compliance across
Microsoft 365 and Azure data
KQL
Answer ✔✔ Kusto Query Language — the query language for Log Analytics
Sentinel and Azure Data Explorer
Log Analytics workspace
Answer ✔✔ The Azure Monitor data store where logs are collected and queried with
KQL
Azure Monitor
Answer ✔✔ Platform service for metrics logs alerts and dashboards across Azure
resources
Azure Advisor
Answer ✔✔ Free service giving recommendations on reliability security
performance cost and operational excellence
Cost Management
Microsoft Glossary Practice Exam
| Actual Questions and Answers
CAF
Answer ✔✔ Cloud Adoption Framework — Microsoft's end-to-end guidance for
strategy planning readiness adoption governance management and security of a
cloud estate
WAF
Answer ✔✔ Well-Architected Framework — Microsoft's five-pillar guidance
(Reliability Security Cost Optimization Operational Excellence Performance
Efficiency) for designing and reviewing workloads
Landing zone
Answer ✔✔ A pre-configured environment of subscriptions networking identity and
governance that serves as the foundation for deploying workloads
Enterprise-scale
Answer ✔✔ The CAF reference architecture for building a consistent secure large-
organization Azure landing zone with management group hierarchy and policy
baseline
Management group
Answer ✔✔ A container above subscriptions used to apply policy and RBAC across
many subscriptions at once
Subscription
Answer ✔✔ A billing and access boundary that holds resource groups and
resources
Resource group
,Answer ✔✔ A logical container for resources that share a lifecycle and are
managed together
Azure Policy
Answer ✔✔ Governance service that audits denies or remediates resources that do
not meet defined rules
RBAC
Answer ✔✔ Role-based access control — assigning built-in or custom roles to
identities at a scope such as subscription or resource group
Microsoft Entra ID
Answer ✔✔ Microsoft's cloud identity and access management service formerly
Azure Active Directory
Conditional Access
Answer ✔✔ Entra policy engine that grants or blocks sign-in based on signals such
as user device location risk and MFA
PIM
Answer ✔✔ Privileged Identity Management — just-in-time time-bound approval-
based activation of privileged Entra and Azure roles
Managed identity
Answer ✔✔ An automatically managed Entra identity for an Azure resource that lets
it authenticate to other services without stored credentials
Service principal
Answer ✔✔ An identity used by applications and automation to access Azure
resources
MFA
Answer ✔✔ Multi-factor authentication — requiring more than one proof of identity
at sign-in
Zero Trust
Answer ✔✔ Security model built on verify explicitly least privilege access and
assume breach
, Key Vault
Answer ✔✔ Azure service for storing and controlling access to secrets keys and
certificates
Microsoft Sentinel
Answer ✔✔ Azure's cloud-native SIEM and SOAR for collecting analyzing and
responding to security data
Defender for Cloud
Answer ✔✔ Cloud security posture management and workload protection across
Azure and multicloud
Defender XDR
Answer ✔✔ Microsoft's unified extended detection and response across endpoints
identities email and apps
Microsoft Purview
Answer ✔✔ Data governance classification labeling and compliance across
Microsoft 365 and Azure data
KQL
Answer ✔✔ Kusto Query Language — the query language for Log Analytics
Sentinel and Azure Data Explorer
Log Analytics workspace
Answer ✔✔ The Azure Monitor data store where logs are collected and queried with
KQL
Azure Monitor
Answer ✔✔ Platform service for metrics logs alerts and dashboards across Azure
resources
Azure Advisor
Answer ✔✔ Free service giving recommendations on reliability security
performance cost and operational excellence
Cost Management
