Azure CLI
Installing and authenticating the Azure CLI, its command structure, output formatting and JMESPath queries, scripting patterns, and service-principal login for pipelines.
Installing and authenticating the Azure CLI, its command structure, output formatting and JMESPath queries, scripting patterns, and service-principal login for pipelines.
Storing secrets, keys, and certificates in Key Vault, access policies vs RBAC, managed identity access, Key Vault references in App Service, and the secret-caching gotcha that requires a full stop/start.
VNets and subnets in Azure, NSG rules, service endpoints vs private endpoints, App Service VNet integration, and how these combine to secure resources like Azure SQL.
How Azure role-based access control actually works — the scope hierarchy, role assignments, built-in roles, control-plane vs data-plane access, and diagnosing permission failures.
Blob storage fundamentals — containers, access tiers, authentication methods (connection strings, SAS tokens, managed identity), lifecycle management, and diagnosing access failures.
How DNS actually resolves a name to an address — recursive vs authoritative resolution, record types, TTLs, Azure DNS and private zones, split-brain DNS, email authentication records, and propagation.
The difference between a load balancer and a reverse proxy, load balancing algorithms, health probes, SSL offload, Azure Application Gateway vs. Front Door, and WAF basics.
Tenants, app registrations, service principals vs managed identities, and the specific Entra configuration gotchas — AzureAd:Instance, managed identity SQL auth — that cause silent failures.
How network communication actually works — the OSI and TCP/IP models, IP addressing, subnetting and CIDR, ports, TCP vs UDP, NAT, routing, and how these map onto Azure networking.
What a VPN actually does, remote-access vs site-to-site VPNs, the major protocols, Azure VPN Gateway, and when a Traxs workflow actually needs one versus when it doesn't.