AZ-900 (Azure Fundamentals) Exam Prep Course

Learn what Azure is, a Microsoft cloud service, and how it compares to AWS and Google Cloud, with a certification exam overview and mention of gaming, AI, and machine learning.

Gain an overview of the Azure Fundamentals certification exam and learn at your own pace with on-demand learning, category-based Azure coverage, flexible playback, and practice questions.

Explore the three levels: fundamentals, associate, and expert, and how AZ-900 fits as the gateway exam for Azure, including virtual machines.

Understand the basics of cloud computing, including on-premises versus cloud services, data center architecture, and pay-as-you-go deployment that enables scalable, on-demand resources.

Explore cloud features such as high availability, redundancy across regions and availability zones, disaster recovery, RPO and RTO concepts, and scalable pay-as-you-go models that shift CapEx to OpEx.

The lecture explains cloud computing categories by service model—SaaS, PaaS, and IaaS—alongside serverless computing, the shared responsibility model, and public, private, and hybrid clouds.

Understand Azure fundamentals: management level and hierarchy from management groups to subscriptions and resources, and how tenant and subscription govern identities, access, and billing, regions and availability zones.

Explore how regions and availability zones enable regional and global services, region pairs for redundancy, and fault-tolerant configurations such as availability sets and update and fault domains.

Explore Azure Resource Manager, the deployment and management service for Azure resources. Use the Azure Portal, Azure Cloud Shell, a command line interface, or rest to deploy with arm templates.

Create an Azure account with Start Free, sign in with a Microsoft account, access the Azure portal, and set up Microsoft Entra ID alongside cost alerts for resource groups.

Create a dedicated resource group for hands-on demos, then delete all resources after practice to prevent leftover costs, and regularly monitor cost management by subscription and resource group.

Explore Azure Monitor and Azure Advisor to track system monitoring with logs, metrics, and alerts; learn to analyze activity and event logs with Azure Log Analytics and Kusto queries.

Discover azure advisor, a service delivering recommendations for azure resources based on the well-architected framework pillars—reliability, security, cost optimization, operational excellence, and performance efficiency—detecting unused resources and scoring compliance.

Create and configure an Azure virtual machine, generate a new key pair, and then set up and connect a Log Analytics workspace to monitor the VM.

Create a log analytics workspace and a data collection rule to collect performance counters for cpu and memory from linux test vm, then use kql heartbeat queries to monitor liveliness.

Detect a stopped test VM by configuring a threshold-based query in an Azure Monitor alert rule and notify by email.

Explore azure monitor metrics for a virtual machine, selecting scope and resource type, view memory usage and time granularity, then clean up by deleting alert rules and the test VM.

Explore Azure Monitor activity logs and agents, filter by subscription, resource, and event severity, and download the agent to connect via workspace ID and keys.

Introduce Microsoft Defender for cloud, Cnap, Cspm, and the Kwp, offering unified security management across cloud and on premises with security posture visualization and free and paid plans.

Explore how encryption protects data in the cloud, at rest and in transit, and how Azure Key Vault stores keys and secrets with rotation, HSM, and RBAC.

Explore Microsoft Entra ID as the cloud-based authentication and authorization backbone for Microsoft 365, Azure, and SaaS, including tenants, guests, groups, and dynamic membership rules.

Explore Microsoft Entra ID features, including OAuth, OpenID Connect, and SAML authentication, with conditional access, MFA, device management, and on-premises integration for seamless single sign-on.

Learn how Azure Policy enforces governance with rules and effects on resources, using JSON definitions and initiatives to enforce tagging, regional constraints, and compliance across subscriptions and resource groups.

Learn how Azure RBAC enables fine-grained access control by assigning built-in or custom roles to security principals at scopes from management groups to resources, with actions and scopes in JSON.

Apply locks to resources, resource groups, or subscriptions to prevent modification or deletion, including read-only and delete locks, and use tags to organize and analyze costs at scale.

Discover azure virtual machines as on-demand scalable compute, with configurable size, region, os image, and disk types (os, temporary, data), plus azure bastion access and dedicated hosts.

Set up and start an Azure virtual machine, connect to configure time zone and language, and export the image with Sysprep.

Learn to create an Azure virtual machine in the portal, choosing basics, disks, networking, availability zones, image, and security options for Windows Server 2022.

Configure the virtual machine’s networking, IP, and security groups with firewall rules and IP ranges. Enable accelerated networking, diagnostics, backups, updates, VM extensions, and application gateway for performance and monitoring.

Connect to the sample vm via bastion, adjust time and language settings, explore drives, then generalize with sysprep and create a reusable image in the Azure Compute Gallery.

Explore Azure virtual machine scale set and autoscaling by CPU, memory, network, or schedule to keep apps responsive; configure initial instances, min zero, thresholds, and health probes.

Explore azure serverless services and how app service provides a managed platform to build, deploy, and scale web apps with auto scaling, custom domains, ssl certificate, and multi language support.

Learn how containers package code, runtime, and dependencies into isolated units, and explore container services such as Azure Container Registry, Container Instance, AKS, and App Service for deployment and orchestration.

Explore Azure storage types and services, including blob object storage, block storage for high performance, and file storage, along with disaster recovery, storage accounts, endpoints, and table and queue storage.

Learn how to create and configure an Azure storage account, including blob storage, Azure Data Lake, and file services, with subscription, resource group, security, networking, and data protection settings.

Explore Azure storage redundancy options, including LRS, ZRS, GRS, RA-GRS, and GZRS, to safeguard data across primary and secondary regions with optional read access.

Azure blob storage stores unstructured data worldwide via http(s) and supports block, append, and page blobs for images, streaming media, and backups.

Learn to configure Azure blob storage: create a container, enable encryption scope and immutability, manage object versions, generate SAS tokens, control anonymous access, and switch access tiers.

Explore the Azure portal layout for storage accounts and configure security settings, access keys, and lifecycle management rules, including sample 30-day and 20-day delete or move actions.

Explore Azure file storage options, including SMB and NFS access, cross-platform mounting, and storage tiers: premium, hot, and cool, plus Azure File Sync for seamless cloud and on-premises access.

Create an Azure file share in a storage account, select an access tier, optionally enable backups, and connect the share to a Windows VM via Bastion with a PowerShell script.

learn to set up Azure file sync by creating a storage sync service in Japan West, registering servers with the Azure file sync agent to join a sync group.

Protect storage with encryption in transit and at rest, RBAC access control, and SAS-based delegated access; include soft delete, client-side encryption, and private or service endpoints over the backbone network.

Explore disaster recovery concepts and metrics, including RPO and RTO, and compare backup and restore with cold, warm, and hot standby to minimize downtime.

Discover how Azure Backup provides cloud-based protection for Azure VMs, SQL databases, file shares, and on-premises servers, with policy-driven backups, restoration via the portal, and soft-delete retention.

Azure Site Recovery replicates Azure resources and on-premises assets into Azure, replicating only disks and enabling failover to a secondary region with recovery points every five minutes.

Set up Azure backup and site recovery by creating a recovery service board, configuring region, redundancy, encryption, and backing up a virtual machine.

Explore Azure Storage Explorer and azcopy, enabling sas tokens, offline access, encrypted communications, parallel transfers, and script automation, plus Import and Export Service for on-premise to Azure data transfers.

Explore Azure network services, including virtual networks, public and private subnets, firewalls, a content delivery network, load balancers, IP addressing, and secure connectivity.

Explore Bowienet, Azure's isolated virtual network, and learn to define CIDR address spaces, segment resources with subnets, and enable secure connectivity using public and private IPs, DHCP, DNS, and NSGs.

Learn to use network security groups, application security groups, and azure firewall to control inbound and outbound traffic in and between the VNet, with stateful filtering and DDoS protection.

Explore how the domain name system translates domain names into IP addresses and how Azure DNS hosts public and private zones with cross-VNet resolution and pay as you go model.

Azure CDN caches static content at edge locations to reduce origin load and boost performance. Azure Front Door provides load balancing, edge SSL termination, and WAF integration for dynamic apps.

Azure vnet peering creates private, secure cross-region connectivity between bowienets via the azure backbone, with global vnet peering, address space overlap avoidance, and not transitive by default.

Explore how a virtual private network creates a secure encrypted tunnel between your device and remote networks, enabling access to resources via site-to-site, point-to-site, and vnet-to-vnet Azure VPN options.

Learn how to set up an Azure VPN gateway with a dedicated gateway subnet, configure site-to-site and point-to-site connections, and connect on-premises networks using a local network gateway and BGP.

ExpressRoute creates a private, dedicated link from on premise to Azure data centers, bypassing the public internet with high bandwidth options and various peering and connectivity choices.

Explore a wide area network service in hub-and-spoke architecture, enabling site-to-site vpn, point-to-site vpn, express route, and transitive connections, with basic and standard pricing and upgrade allowed but downgrades not.

Explore service endpoints that route from your virtual network to Azure over the backbone using public IPs, and private endpoints that use private IPs via Azure private link.

Distribute incoming traffic across backend pools to boost availability, using Azure Load Balancer at layer 4 and Azure Application Gateway at layer 7 with SSL termination and WAF.

Azure application gateway is a layer seven load balancer that routes by url path and host header, features a built-in WAF, SSL termination, cookie-based affinity, and health probes.

Explore network watcher, a monitoring service that visualizes topology, checks connectivity, and uses ipx4 verify, NSG diagnostic, and next hop to troubleshoot Azure networks.

Explore how to create an Azure virtual machine scale set (VMSS), including building a virtual network and subnet, attaching a network security group, and configuring load balancing and scaling.

Create a virtual network and subnet, deploy a virtual machine scaling set, configure a network security group with http/https and remote desktop rules, and attach the NSG to the subnet.

Explore how to create and configure an Azure virtual machine scale set, including manual and auto scaling, load balancers, networking, spot instances, health monitoring, and rollout strategies.

Explore practice questions for the Azure fundamentals exam, covering deployment models (hybrid, public, private), Azure portal management, resource groups, and core services like storage, compute, and networking.

Engage in a repeatable AZ-900 practice test with pause and resume, featuring multiple-choice questions and on-screen selections, plus explanations after completion; note the real exam adds drag-and-drop and hot-area items.

Explore official Azure documentation, learning paths, and the pricing calculator to estimate costs; learn compute, storage, and networking through tutorials, quickstart, and labs for roles from admin to data scientist.