Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
6.2. Quick Reference
💡 First Principle: A fast, structured recall aid works best when it groups concepts that are commonly confused with each other side by side, since confusion between similar-sounding concepts — not lack of exposure to a topic — is what typically costs points on this exam.
Commonly Confused Pairs
| Concept A | Concept B | Key Distinguisher |
|---|---|---|
| Authentication | Authorization | Who you are vs. what you can do |
| Encryption | Hashing | Reversible vs. one-way |
| NSG | Azure Firewall | Lightweight per-subnet vs. centralized, feature-rich |
| CSPM | Cloud workload protection | Finds misconfiguration vs. detects active threats |
| Sensitivity labels | Retention labels | Protect/restrict access vs. govern how long content is kept |
| eDiscovery | Audit | Finds content vs. finds user/admin activity |
| Compliance Manager | Compliance score | The workflow tool vs. the number it produces |
| Directory service | Identity provider | Stores identity objects vs. authenticates and issues tokens |
| Standing access | PIM eligible access | Always active vs. activated just-in-time |
| Sign-in risk | User risk | This specific attempt vs. this account overall |
Decision Tree: "Which Azure Network Control?"
One-Line Domain Summaries
- Domain 1 (Concepts): Every control maps to CIA; shared responsibility never reaches zero for the customer; Zero Trust verifies continuously, it doesn't deny by default.
- Domain 2 (Entra): Entra ID is the cloud identity platform; Conditional Access is a policy engine; PIM converts standing access to just-in-time.
- Domain 3 (Security Solutions): Layer your network controls; CSPM ≠ workload protection; Defender XDR correlates, it doesn't replace, the specialized Defender products.
- Domain 4 (Compliance Solutions): Classification finds it, sensitivity labels protect it, retention labels govern how long it's kept; eDiscovery finds content, Audit finds activity.
Written byAlvin Varughese
Founder•18 professional certifications