AZ-900 Microsoft Azure Fundamentals: Complete Exam Prep 2026

Before diving into Microsoft Azure, it's essential to understand the foundation it's built upon — cloud computing. In this lecture, we'll break down what cloud computing really means, why it has transformed the way businesses and individuals use technology, and how it powers everything from streaming services to enterprise applications.

You'll learn how cloud computing delivers on-demand computing resources — such as servers, storage, databases, networking, software, and analytics — over the internet, allowing users to access powerful technology without the need to own or maintain physical hardware.

In this lecture, we'll cover:

• A clear, simple definition of cloud computing

• The key characteristics that define the cloud (on-demand self-service, scalability, elasticity, and pay-as-you-go pricing)

• Real-world examples of cloud computing in everyday life

• How cloud computing differs from traditional on-premises IT environments

• Why organizations are rapidly adopting the cloud to drive innovation, agility, and cost savings

By the end of this lesson, you'll have a strong conceptual understanding of what the cloud is and why it serves as the backbone of modern digital services — setting the stage for exploring Microsoft Azure in greater depth.

When moving to the cloud, one of the most important concepts to understand is who is responsible for what. In this lecture, we'll explore the Shared Responsibility Model — a foundational principle that defines how security, compliance, and management tasks are divided between the cloud provider (Microsoft Azure) and the customer.

You'll discover how responsibilities shift depending on the type of cloud service being used, and why understanding this model is critical for protecting your data, applications, and infrastructure in the cloud.

In this lecture, we'll cover:

• What the Shared Responsibility Model is and why it exists

• The division of responsibilities between the cloud provider and the customer

• How responsibilities change across IaaS, PaaS, and SaaS service models

• Key areas of ownership, including physical security, operating systems, applications, identity, and data

• Real-world scenarios that illustrate how this model applies in practice

By the end of this lesson, you'll clearly understand where Microsoft's responsibilities end and yours begin — empowering you to make smarter, more secure decisions when deploying resources in Azure.

Not all clouds are created equal! In this lecture, we'll explore the three primary cloud deployment models — Public, Private, and Hybrid — and help you understand when and why organizations choose each one. Selecting the right cloud model is a critical decision that impacts cost, security, scalability, and control.

You'll learn how each model works, what makes them unique, and how they can be combined to meet the diverse needs of modern businesses.

In this lecture, we'll cover:

• Public Cloud: Services delivered over the internet by providers like Microsoft Azure — offering scalability, cost-efficiency, and minimal maintenance

• Private Cloud: Dedicated cloud environments used by a single organization for greater control, customization, and compliance

• Hybrid Cloud: A flexible mix of public and private clouds that allows data and applications to move seamlessly between environments

• The advantages and disadvantages of each model

• Real-world use cases showing how organizations choose the right deployment model for their goals

By the end of this lesson, you'll be able to confidently distinguish between the three cloud models and understand how each fits into an organization's cloud strategy — an essential concept for both the AZ-900 exam and real-world Azure adoption.

One of the biggest advantages of the cloud is its flexible and cost-efficient pricing structure. In this lecture, we'll dive into how cloud services are priced and explore the Consumption-Based Model — a pay-as-you-go approach that has revolutionized the way organizations budget for and use technology.

You'll learn how this model eliminates the need for large upfront investments in hardware and instead allows businesses to pay only for the resources they actually use, when they use them.

In this lecture, we'll cover:

• How traditional CapEx (Capital Expenditure) compares to cloud-based OpEx (Operational Expenditure)

• The fundamentals of the Consumption-Based Pricing Model

• How Azure charges for resources like compute, storage, and networking

• The financial benefits of paying only for what you use — including scalability, flexibility, and cost predictability

• An introduction to Azure pricing tools, such as the Pricing Calculator and Total Cost of Ownership (TCO) Calculator

• Real-world examples showing how businesses save money by adopting consumption-based pricing

By the end of this lesson, you'll understand how cloud pricing works, why the consumption-based model is so powerful, and how it helps organizations align their IT spending with actual business needs.

Despite the name, serverless computing doesn't mean there are no servers — it means you don't have to worry about them! In this lecture, we'll demystify one of the most exciting and modern approaches to cloud computing, showing how it allows developers and businesses to focus purely on writing code and delivering value, while the cloud provider handles everything else behind the scenes.

You'll learn how serverless computing enables applications to scale automatically, run on-demand, and charge you only for the time your code actually runs — making it incredibly efficient and cost-effective.

In this lecture, we'll cover:

• A clear definition of serverless computing and how it works

• The key benefits, including automatic scaling, reduced operational overhead, and cost efficiency

• How serverless differs from traditional cloud models like IaaS and PaaS

• Popular Azure serverless services, such as Azure Functions and Azure Logic Apps

• Real-world use cases where serverless computing shines — from event-driven apps to automated workflows

• Common limitations and considerations to keep in mind

By the end of this lesson, you'll have a solid understanding of what serverless computing is, how it fits within the Azure ecosystem, and why it's becoming a go-to choice for building modern, scalable applications.

In today's always-on digital world, users expect applications and services to be fast, reliable, and available 24/7. In this lecture, we'll explore two of the most important benefits of cloud computing — High Availability and Scalability — and discover how Microsoft Azure makes it easier than ever to deliver consistent performance, no matter the demand.

You'll learn how these concepts work hand-in-hand to ensure your applications stay online during outages and can effortlessly adapt to changing workloads.

In this lecture, we'll cover:

• What High Availability (HA) means and why it's critical for modern applications

• How Azure achieves high availability through redundancy, failover, and distributed architecture

• The concept of Scalability and how it allows systems to handle growth in users, data, or traffic

• The difference between Vertical Scaling (scaling up) and Horizontal Scaling (scaling out)

• How Elasticity complements scalability by automatically adjusting resources based on demand

• Real-world examples showing how businesses leverage HA and scalability to stay competitive

By the end of this lesson, you'll understand how Azure helps organizations build resilient, high-performing, and future-ready solutions — key principles that are essential for the AZ-900 exam and real-world cloud success.

When businesses move to the cloud, they need to know their applications will run consistently, securely, and as expected — every single time. In this lecture, we'll explore two key pillars of a successful cloud strategy: Reliability and Predictability. Together, these concepts ensure that your workloads perform dependably while giving you clear visibility into both performance and cost.

You'll learn how Microsoft Azure is engineered to deliver trustworthy services and how predictable behavior empowers organizations to plan, budget, and scale with confidence.

In this lecture, we'll cover:

• What Reliability means in the cloud and why it's essential for business continuity

• How Azure ensures reliability through redundancy, fault tolerance, and disaster recovery

• The role of Service Level Agreements (SLAs) in guaranteeing uptime and performance

• What Predictability means in terms of both performance and cost

• How Azure tools like Azure Advisor, Cost Management, and Monitor help deliver predictable outcomes

• Real-world examples demonstrating how reliable and predictable cloud services support business success

By the end of this lesson, you'll understand how Azure's commitment to reliability and predictability helps organizations reduce risk, optimize performance, and maintain confidence in their cloud investments.

As organizations move more of their data and workloads to the cloud, security and governance become top priorities. In this lecture, we'll explore how Microsoft Azure helps businesses protect their resources, maintain compliance, and enforce organizational policies — all while enabling agility and innovation.

You'll learn how Azure provides a powerful set of built-in tools and frameworks to safeguard your environment and ensure that your cloud usage aligns with both business goals and regulatory requirements.

In this lecture, we'll cover:

• The importance of Security in the cloud and how Azure protects data, identities, and infrastructure

• Key Azure security features such as encryption, identity management, and threat protection

• What Governance means in a cloud environment and why it's essential for control and accountability

• How tools like Azure Policy, Azure Blueprints, and Role-Based Access Control (RBAC) help enforce standards

• The role of compliance frameworks and regulatory requirements in shaping cloud governance

• Real-world examples showing how organizations use Azure to stay secure and compliant

By the end of this lesson, you'll understand how Azure empowers businesses to confidently operate in the cloud with strong security protections and governance controls — a critical foundation for any cloud strategy and a key topic for the AZ-900 exam.

Managing IT resources has never been easier than with the cloud — but what exactly does cloud manageability mean, and how does Microsoft Azure make it so powerful? In this lecture, we'll break down the concept of manageability in the cloud and explore the tools and capabilities that help organizations monitor, automate, and control their environments with ease.

You'll discover how Azure simplifies complex IT operations, enabling teams to spend less time on maintenance and more time on innovation.

In this lecture, we'll cover:

• What Cloud Manageability means and why it's a key benefit of cloud computing

• The two main aspects of manageability: Management OF the cloud and Management IN the cloud

• How Azure enables automatic scaling, monitoring, and self-healing of resources

• Popular Azure management tools, including the Azure Portal, Azure CLI, Azure PowerShell, ARM Templates, and Azure Mobile App

• How automation services like Azure Automation and Azure Resource Manager reduce manual effort

• Real-world examples illustrating how manageability improves efficiency, consistency, and reliability

By the end of this lesson, you'll have a clear understanding of how Azure empowers organizations to manage cloud resources effortlessly — delivering greater agility, visibility, and control across their entire environment.

When it comes to cloud computing, Infrastructure as a Service (IaaS) is where it all begins. In this lecture, we'll explore one of the most fundamental cloud service models and discover how it gives organizations the power to build, run, and manage their IT infrastructure in the cloud — without the cost and complexity of owning physical hardware.

You'll learn how IaaS provides the building blocks of the cloud — including virtual machines, storage, and networking — while giving you maximum flexibility and control over your environment.

In this lecture, we'll cover:

• A clear definition of IaaS and how it fits within the cloud service model hierarchy

• The key components of IaaS, including compute, storage, and networking

• How IaaS compares to traditional on-premises infrastructure

• The shared responsibility between Microsoft and the customer in an IaaS environment

• Popular Azure IaaS services, such as Azure Virtual Machines, Azure Virtual Networks, and Azure Disk Storage

• Real-world use cases for IaaS, including lift-and-shift migrations, disaster recovery, and test/dev environments

• The advantages and considerations of adopting IaaS

By the end of this lesson, you'll have a solid understanding of what IaaS is, how it works in Azure, and why it's the go-to choice for organizations seeking flexibility, scalability, and control in the cloud.

What if you could build, deploy, and scale powerful applications without worrying about managing servers, operating systems, or infrastructure? That's exactly what Platform as a Service (PaaS) offers! In this lecture, we'll explore how PaaS empowers developers and organizations to focus on what truly matters — building great applications — while the cloud provider takes care of the underlying platform.

You'll learn how PaaS strikes the perfect balance between control and convenience, making it an ideal choice for modern application development.

In this lecture, we'll cover:

• A clear definition of PaaS and how it differs from IaaS and SaaS

• The core components provided by PaaS, including development tools, middleware, databases, and runtime environments

• How the shared responsibility model applies to PaaS, and what Microsoft manages vs. what you manage

• Popular Azure PaaS services, such as Azure App Service, Azure SQL Database, and Azure Functions

• Real-world use cases for PaaS, including web app development, API hosting, and business analytics

• The benefits and limitations of using PaaS

By the end of this lesson, you'll understand how PaaS accelerates development, reduces operational overhead, and enables teams to deliver applications faster — making it a powerful option within the Azure ecosystem and an essential concept for the AZ-900 exam.

Chances are, you're already using Software as a Service (SaaS) every single day — from checking your email to collaborating on documents online. In this lecture, we'll explore SaaS, the most widely used cloud service model, and uncover how it delivers ready-to-use software applications over the internet with no installation, no maintenance, and no hassle.

You'll learn how SaaS allows users to simply sign in and start working, while the cloud provider handles everything from infrastructure to updates behind the scenes.

In this lecture, we'll cover:

• A clear definition of SaaS and how it fits within the cloud service model hierarchy

• How SaaS compares to IaaS and PaaS in terms of responsibility and control

• The shared responsibility model in a SaaS environment — what the provider manages vs. what the user manages

• Popular examples of SaaS, including Microsoft 365, Dynamics 365, Outlook, and Microsoft Teams

• Real-world use cases showing how businesses and individuals rely on SaaS every day

• The benefits and limitations of adopting SaaS, including cost, accessibility, and customization

By the end of this lesson, you'll have a clear understanding of what SaaS is, why it's so popular, and how it fits into the broader Azure and Microsoft cloud ecosystem — an essential concept for the AZ-900 exam and for navigating today's cloud-powered world.

Now that you understand the three main cloud service models — IaaS, PaaS, and SaaS — the next big question is: which one is right for your needs? In this lecture, we'll bring it all together by comparing these models side by side and helping you determine when to use each one based on your goals, technical requirements, and level of control.

You'll learn how each model offers a different balance of flexibility, responsibility, and convenience — and how choosing the right one can dramatically impact cost, speed, and success in the cloud.

In this lecture, we'll cover:

• A quick recap of IaaS, PaaS, and SaaS and their key characteristics

• A side-by-side comparison of each model in terms of control, management, scalability, and use cases

• How the shared responsibility model shifts across the three service models

• Key decision factors to consider, such as technical expertise, budget, customization needs, and time-to-market

• Real-world scenarios showing which model is best suited for common business goals

• Practical examples of Azure services that fall under each category

By the end of this lesson, you'll be able to confidently evaluate the differences between IaaS, PaaS, and SaaS and choose the model that best fits any given scenario — a critical skill for both the AZ-900 exam and real-world cloud decision-making.

Congratulations on completing the Cloud Concepts section of the course! Before moving forward, it's time to pause, reflect, and reinforce everything you've learned so far. In this lecture, we'll recap the key concepts covered in this module and provide valuable exam tips to help you tackle the Cloud Concepts portion of the AZ-900 certification exam with confidence.

You'll get a concise review of the foundational ideas that set the stage for the rest of your Azure learning journey, along with practical strategies to help you retain and apply this knowledge effectively.

In this lecture, we'll cover:

• A quick recap of cloud computing fundamentals, including the shared responsibility model, cloud deployment models, and pricing structures

• Key takeaways on high availability, scalability, reliability, predictability, security, governance, and manageability

• A summary of the three main cloud service models — IaaS, PaaS, and SaaS — and when to use each

• Common exam question formats you'll encounter on the AZ-900

• Top study tips and strategies for mastering the Cloud Concepts domain

• Frequently tested topics and concepts to focus your preparation on

• Helpful resources and practice techniques to boost your confidence before exam day

By the end of this lesson, you'll have a clear understanding of the cloud fundamentals, feel fully prepared to move into the next section of the course, and be one step closer to earning your Microsoft Certified: Azure Fundamentals certification!

Microsoft Azure operates one of the largest and most advanced global cloud networks in the world — but how exactly is it organized? In this lecture, we'll explore the global infrastructure that powers Azure, focusing on Regions, Region Pairs, and Sovereign Clouds. Understanding these concepts is essential for designing solutions that are highly available, compliant, and resilient across the globe.

You'll learn how Azure's worldwide presence enables organizations to deploy services close to their users while meeting strict regulatory and data residency requirements.

In this lecture, we'll cover:

• What an Azure Region is and how it represents a set of datacenters in a specific geographic area

• How Azure's global footprint spans more countries and regions than any other cloud provider

• The concept of Region Pairs and how they provide disaster recovery, redundancy, and business continuity

• The benefits of choosing the right region based on performance, compliance, and cost

• An introduction to Sovereign Clouds, such as Azure Government, Azure China, and other specialized environments

• Real-world examples of how organizations strategically use regions to meet business and regulatory needs

By the end of this lesson, you'll have a solid understanding of Azure's global infrastructure and know how to leverage regions, region pairs, and sovereign clouds to build reliable, compliant, and globally scalable solutions — a vital concept for both the AZ-900 exam and real-world Azure deployments.

Behind every Azure service lies a massive, globally distributed network of datacenters engineered to deliver performance, resilience, and reliability at scale. In this lecture, we'll take a closer look at Azure Datacenters and the concept of Availability Zones — two critical pieces of Azure's global infrastructure that help ensure your applications stay up and running, even in the face of unexpected failures.

You'll learn how Microsoft designs and operates these facilities to provide high availability, fault tolerance, and disaster recovery for mission-critical workloads.

In this lecture, we'll cover:

• What Azure Datacenters are and how they form the physical backbone of Microsoft's cloud

• How datacenters are grouped into regions to deliver services globally

• The concept of Availability Zones and how they provide physical separation within a region

• How Availability Zones protect against datacenter-level failures through redundancy and isolation

• The difference between Zonal and Zone-Redundant services in Azure

• Real-world examples showing how Availability Zones support high availability and business continuity

• Best practices for designing resilient architectures using Availability Zones

By the end of this lesson, you'll understand how Azure's datacenters and Availability Zones work together to provide a rock-solid foundation for the cloud — ensuring your applications stay available, durable, and performant no matter what.

Every solution you build in Azure is made up of resources — but how are they organized, managed, and secured at scale? In this lecture, we'll explore the fundamental building blocks of Azure: Resources and Resource Groups. Understanding how these components work together is essential for keeping your cloud environment organized, efficient, and easy to manage.

You'll learn how Azure enables you to logically group related resources, apply consistent policies, and streamline operations across your entire environment.

In this lecture, we'll cover:

• What an Azure Resource is and examples of common resources, such as virtual machines, storage accounts, databases, and virtual networks

• The concept of Resource Groups and how they act as logical containers for related resources

• Best practices for organizing resources by application, environment, department, or lifecycle

• How tags, policies, and role-based access control (RBAC) can be applied at the resource group level

• How resource groups simplify deployment, monitoring, billing, and deletion of resources

• Real-world examples showing how organizations structure their resources for maximum efficiency

• Key rules and limitations to keep in mind when working with resource groups

By the end of this lesson, you'll understand how Azure resources and resource groups help you build a well-structured cloud environment — giving you the control, clarity, and consistency needed to manage workloads at any scale.

As your Azure environment grows, so does the need for structure, control, and governance. In this lecture, we'll explore two essential components of Azure's organizational hierarchy: Subscriptions and Management Groups. Together, they help organizations manage billing, access, and policies across multiple teams, projects, and environments — all from a centralized framework.

You'll learn how these elements fit into Azure's overall structure and how they empower businesses to scale efficiently while maintaining strong governance.

In this lecture, we'll cover:

• What an Azure Subscription is and how it serves as a billing and access boundary for Azure resources

• The relationship between subscriptions, resource groups, and resources

• Different types of subscriptions, including Free, Pay-As-You-Go, and Enterprise Agreements

• What Management Groups are and how they enable you to organize multiple subscriptions under a unified hierarchy

• How to apply policies, RBAC, and compliance rules at the management group level to enforce governance at scale

• Real-world examples showing how organizations structure subscriptions and management groups for different departments, environments, or regions

• Best practices for designing a scalable and well-governed Azure hierarchy

By the end of this lesson, you'll understand how Azure subscriptions and management groups work together to provide the foundation for secure, organized, and enterprise-ready cloud management — a key concept for the AZ-900 exam and real-world Azure administration.

To effectively manage and govern your cloud environment, it's important to understand how Azure organizes everything from top to bottom. In this lecture, we'll bring together the key components you've learned so far — Management Groups, Subscriptions, Resource Groups, and Resources — and see how they fit into the Azure Resource Hierarchy.

You'll discover how this layered structure provides a clear, scalable, and secure framework for managing cloud resources across teams, departments, and entire organizations.

In this lecture, we'll cover:

• A complete overview of the Azure Resource Hierarchy and its four main levels:

  • Management Groups

  • Subscriptions

  • Resource Groups

  • Resources

• How each level inherits policies, permissions, and settings from the level above

• The role of Azure Active Directory (Microsoft Entra ID) as the identity foundation of the hierarchy

• How the hierarchy supports governance, cost management, and access control at scale

• Real-world examples illustrating how organizations design their hierarchy to match business structure

• Best practices for building a clean, scalable, and well-governed Azure environment

By the end of this lesson, you'll have a clear mental model of how Azure is structured — enabling you to design, manage, and govern cloud environments with confidence, consistency, and control.

At the heart of nearly every cloud solution lies compute power — the engine that runs your applications, processes your data, and delivers your services to users around the world. In this lecture, we'll introduce you to Azure Compute Services, the broad family of solutions that allow you to run workloads of any size, type, or complexity in the cloud.

You'll get a high-level overview of the different compute options Azure offers and learn how to choose the right one based on your application's needs, architecture, and goals.

In this lecture, we'll cover:

• What Azure Compute is and why it's a foundational category of cloud services

• An introduction to the main types of compute services in Azure, including:

  • Virtual Machines (VMs) – full control over operating systems and infrastructure

  • Azure App Service – fully managed platform for web apps and APIs

  • Azure Container Instances (ACI) and Azure Kubernetes Service (AKS) – containerized workloads

  • Azure Functions – event-driven, serverless compute

  • Virtual Desktop – secure remote desktop experiences in the cloud

• How each service aligns with different cloud service models (IaaS, PaaS, and Serverless)

• Key factors to consider when choosing a compute service, such as control, scalability, cost, and management

• Real-world use cases highlighting when to use each compute option

By the end of this lesson, you'll have a clear understanding of the compute options available in Azure and be ready to dive deeper into each service in the upcoming lectures — an essential foundation for the AZ-900 exam and for building real-world cloud solutions.

When you need full control over your computing environment in the cloud, Azure Virtual Machines (VMs) are the perfect solution. In this lecture, we'll take an in-depth look at one of Azure's most popular and versatile services — giving you the power to run Windows or Linux workloads in the cloud, just like you would on traditional on-premises servers, but with all the flexibility and scalability Azure provides.

You'll learn how Azure VMs work, when to use them, and how they fit into a modern cloud strategy.

In this lecture, we'll cover:

• What an Azure Virtual Machine is and how it represents the IaaS model in Azure

• The key components of a VM, including compute, storage, networking, and operating system

• How to choose the right VM size and series based on workload requirements (compute-optimized, memory-optimized, GPU, etc.)

• Common Azure VM use cases, such as lift-and-shift migrations, development/testing, and running enterprise applications

• How Azure VMs support high availability through features like Availability Sets, Availability Zones, and Scale Sets

• An overview of pricing options, including Pay-As-You-Go, Reserved Instances, and Spot VMs

• Real-world examples showcasing how businesses use Azure VMs to power their workloads

By the end of this lesson, you'll have a strong understanding of what Azure Virtual Machines are, how they work, and when to use them — empowering you to make informed decisions when designing cloud solutions and preparing for the AZ-900 exam.

In today's world of remote work and hybrid teams, organizations need secure, flexible ways to deliver desktops and applications to users — anywhere, on any device. That's where Azure Virtual Desktop (AVD) comes in! In this lecture, we'll explore Microsoft's powerful desktop and app virtualization service that runs entirely in the cloud, enabling a modern workplace experience without the complexity of traditional VDI infrastructure.

You'll learn how Azure Virtual Desktop helps businesses boost productivity, strengthen security, and simplify IT management — all while giving users a seamless Windows experience in the cloud.

In this lecture, we'll cover:

• What Azure Virtual Desktop is and how it works

• How AVD delivers full Windows 10/11 multi-session experiences in the cloud

• The key benefits, including security, scalability, cost efficiency, and global accessibility

• How AVD supports remote work, BYOD (Bring Your Own Device), and contractor access scenarios

• Integration with Microsoft 365 apps and existing Azure services

• How identity, access, and security are managed through Microsoft Entra ID (Azure AD)

• Real-world use cases showing how organizations use AVD to modernize their workforce

• Basic overview of licensing and cost considerations

By the end of this lesson, you'll understand how Azure Virtual Desktop empowers organizations to deliver a secure, flexible, and productive desktop experience from anywhere in the world — a key offering in the Azure ecosystem and an important concept for the AZ-900 exam.

In modern cloud development, containers have revolutionized the way applications are built, shipped, and run. In this lecture, we'll introduce you to the world of containers and explore how Azure Container Instances (ACI) make it easier than ever to deploy containerized applications in the cloud — without the need to manage servers or complex infrastructure.

You'll learn how containers provide a lightweight, portable, and consistent environment for your applications, and how ACI lets you run them quickly, simply, and on demand.

In this lecture, we'll cover:

• What containers are and how they differ from traditional virtual machines

• The benefits of containerization, including portability, speed, scalability, and consistency

• An introduction to Docker and how it relates to Azure's container services

• What Azure Container Instances (ACI) is and how it provides serverless container hosting

• Key features of ACI, such as fast startup times, per-second billing, and custom networking

• Real-world use cases, including simple applications, batch jobs, task automation, and event-driven workloads

• How ACI compares to other Azure container services like Azure Kubernetes Service (AKS)

By the end of this lesson, you'll understand the fundamentals of containers and see how Azure Container Instances offer a fast, flexible, and cost-effective way to run containerized workloads in the cloud — a modern and essential concept for the AZ-900 exam and cloud-native development.

What if you could run your code in the cloud without worrying about servers, scaling, or infrastructure — and only pay for the exact time your code runs? That's the power of serverless compute, and Azure Functions is Microsoft's flagship service for making it happen. In this lecture, we'll dive into how Azure Functions enables developers to build event-driven, highly scalable applications with minimal effort and maximum efficiency.

You'll learn how serverless compute lets you focus purely on writing code while Azure handles everything else behind the scenes.

In this lecture, we'll cover:

• A recap of serverless computing and how it fits into modern cloud architecture

• What Azure Functions is and how it delivers event-driven, on-demand execution

• How Azure Functions automatically scales based on demand and charges only for the time your code runs

• Common triggers and bindings, including HTTP requests, timers, queues, and blob storage events

• Supported programming languages, such as C#, Python, JavaScript, and more

• Real-world use cases like automation, APIs, data processing, IoT workflows, and scheduled tasks

• How Azure Functions compares to other compute options like VMs, App Service, and Container Instances

• Key benefits and limitations of using serverless compute

By the end of this lesson, you'll understand how Azure Functions empowers developers to build fast, scalable, and cost-effective applications — embracing the serverless revolution and gaining a key concept for the AZ-900 exam and modern cloud development.

Every great cloud solution needs a strong networking foundation — and in Azure, that foundation starts with Virtual Networks (VNets) and Subnets. In this lecture, we'll explore how Azure networking works, how it enables secure communication between your cloud resources, and how it connects your Azure environment to the internet, your on-premises infrastructure, and other Azure services.

You'll learn how VNets and subnets provide the structure, segmentation, and security needed to build reliable and scalable cloud architectures.

In this lecture, we'll cover:

• What an Azure Virtual Network (VNet) is and why it's essential in the cloud

• How VNets provide isolation, segmentation, and secure communication for Azure resources

• The role of Subnets in dividing a VNet into smaller, more manageable sections

• Key networking concepts such as IP address ranges, CIDR blocks, and address spaces

• How VNets enable communication between Azure resources, such as VMs, databases, and services

• How to connect VNets to on-premises networks via VPN Gateway or Azure ExpressRoute

• The basics of Network Security Groups (NSGs) and how they control traffic flow

• Real-world examples illustrating how organizations design VNets and subnets for various workloads

By the end of this lesson, you'll have a solid understanding of how Azure Virtual Networks and Subnets work together to provide the networking backbone of the Azure cloud — a critical concept for building secure, scalable, and well-architected solutions, and an important topic for the AZ-900 exam.

As your Azure environment grows, so does the need to connect networks efficiently and resolve names reliably. In this lecture, we'll explore two powerful Azure networking features that make large-scale cloud architectures possible: Virtual Network (VNet) Peering and Azure DNS. Together, they enable seamless communication between networks and simplify how resources are discovered and accessed across the cloud.

You'll learn how these services work behind the scenes to provide fast, secure, and scalable connectivity across your Azure environment.

In this lecture, we'll cover:

• What VNet Peering is and how it allows Virtual Networks to communicate privately with each other

• The difference between Regional VNet Peering and Global VNet Peering

• Key benefits of VNet Peering, including low latency, high bandwidth, and private connectivity

• How VNet Peering differs from VPN Gateways in terms of performance and use cases

• An introduction to Azure DNS and how it provides name resolution for Azure-hosted and public domains

• The difference between Public DNS Zones and Private DNS Zones in Azure

• How Azure DNS integrates with other Azure services to enable seamless, scalable name resolution

• Real-world examples demonstrating how organizations use VNet Peering and Azure DNS together

By the end of this lesson, you'll understand how VNet Peering and Azure DNS empower organizations to build interconnected, discoverable, and well-organized cloud environments — a key concept for the AZ-900 exam and real-world Azure networking.

When organizations extend their on-premises networks into the cloud, they need a secure and reliable way to connect the two environments. That's exactly what Azure VPN Gateway provides! In this lecture, we'll explore how Azure VPN Gateway enables encrypted connections between your on-premises infrastructure and your Azure Virtual Networks — making hybrid cloud connectivity simple, secure, and scalable.

You'll learn how VPN Gateway works, the different types of connections it supports, and how it fits into a modern hybrid cloud strategy.

In this lecture, we'll cover:

• What Azure VPN Gateway is and how it enables secure, encrypted communication over the internet

• The role of VPN Gateway in supporting hybrid cloud and cross-premises connectivity

• The main types of VPN connections:

  • Site-to-Site (S2S) VPN – connects entire on-premises networks to Azure

  • Point-to-Site (P2S) VPN – connects individual devices to Azure

  • VNet-to-VNet VPN – connects multiple Azure Virtual Networks

• How VPN Gateway uses IPsec/IKE protocols to secure your data in transit

• An overview of VPN Gateway SKUs and how they impact performance and scalability

• Real-world use cases, such as remote access, branch office connectivity, and disaster recovery

• How VPN Gateway compares to Azure ExpressRoute for hybrid connectivity

By the end of this lesson, you'll understand how Azure VPN Gateway provides a secure bridge between your on-premises environment and the cloud — a vital concept for building hybrid solutions and an important topic for the AZ-900 exam.

For organizations that need fast, secure, and highly reliable connectivity to Azure, a standard internet connection may not be enough. That's where Azure ExpressRoute comes in! In this lecture, we'll explore Microsoft's premium networking service that allows you to create private, dedicated connections between your on-premises infrastructure and Azure — bypassing the public internet entirely.

You'll learn how ExpressRoute delivers the performance, consistency, and security required for mission-critical enterprise workloads.

In this lecture, we'll cover:

• What Azure ExpressRoute is and how it works

• The key differences between ExpressRoute and VPN Gateway

• How ExpressRoute provides private, high-bandwidth, low-latency connectivity to Azure services

• The role of connectivity providers in establishing ExpressRoute circuits

• Supported connection models, including CloudExchange Co-location, Point-to-Point, and Any-to-Any

• Services accessible over ExpressRoute, such as Microsoft 365, Dynamics 365, and Azure services

• Key benefits, including enhanced security, reliability, and predictable performance

• Real-world use cases, such as large enterprises, financial services, healthcare, and government workloads

• A brief look at pricing considerations and when ExpressRoute is the right choice

By the end of this lesson, you'll understand how Azure ExpressRoute enables organizations to build enterprise-grade hybrid cloud connections with unmatched performance and security — a powerful networking option and an important concept for the AZ-900 exam.

When connecting to Azure services, how your data travels is just as important as where it's going. In this lecture, we'll explore the difference between Public Endpoints and Private Endpoints — two essential networking concepts that determine how Azure services are accessed and secured. Understanding these options is key to building cloud environments that balance accessibility, performance, and security.

You'll learn how each endpoint type works, when to use them, and how they fit into Azure's overall networking and security strategy.

In this lecture, we'll cover:

• What an Endpoint is in the context of Azure services

• How Public Endpoints expose Azure services over the public internet using a public IP address

• The benefits and risks of using public endpoints, and how to secure them with firewalls, IP restrictions, and service endpoints

• What Private Endpoints are and how they provide secure, private connectivity through an Azure Virtual Network

• How Private Endpoints use Azure Private Link to keep traffic off the public internet

• Key differences between Public Endpoints, Service Endpoints, and Private Endpoints

• Real-world use cases showing when to choose one over the other

• Best practices for securing access to Azure services like Storage Accounts, SQL Databases, and App Services

By the end of this lesson, you'll understand how Public and Private Endpoints work in Azure, and how choosing the right option helps you build secure, efficient, and well-architected cloud solutions — a critical networking concept for both the AZ-900 exam and real-world Azure deployments.

Every modern application relies on data — and in Azure, that data lives inside a powerful, scalable, and secure service known as the Azure Storage Account. In this lecture, we'll explore what a Storage Account is, what it offers, and why it serves as the foundation for storing all types of data in the cloud, from documents and images to backups and large-scale analytics.

You'll learn how Azure Storage Accounts provide a unified platform for storing different types of data, each optimized for specific use cases.

In this lecture, we'll cover:

• What an Azure Storage Account is and why it's essential in the cloud

• The core data services offered within a Storage Account:

  • Blob Storage – for unstructured data like documents, images, and videos

  • File Storage – fully managed file shares accessible via SMB and NFS

  • Queue Storage – for messaging between application components

  • Table Storage – for NoSQL key-value data

  • Disk Storage – persistent storage for Azure Virtual Machines

• How Storage Accounts provide scalability, durability, and high availability

• An overview of performance tiers (Standard vs. Premium) and replication options (LRS, ZRS, GRS, RA-GRS)

• How security features like encryption, access keys, and role-based access control protect your data

• Real-world use cases showing how Azure Storage Accounts power websites, backups, big data analytics, and more

• Best practices for naming, structuring, and managing Storage Accounts

By the end of this lesson, you'll have a clear understanding of how Azure Storage Accounts work and why they serve as a cornerstone of nearly every Azure solution — an important concept for the AZ-900 exam and essential knowledge for cloud success.

When it comes to storing massive amounts of unstructured data in the cloud — like documents, images, videos, backups, and logs — Azure Blob Storage is the go-to solution. In this lecture, we'll take a deep dive into Azure's most versatile storage service and explore the Access Tiers that help you optimize both performance and cost based on how frequently your data is accessed.

You'll learn how Blob Storage provides virtually unlimited, highly durable storage for any type of data, and how smart tiering can dramatically reduce your storage costs.

In this lecture, we'll cover:

• What Azure Blob Storage is and why it's used for storing unstructured data

• The three main types of blobs: Block Blobs, Append Blobs, and Page Blobs

• How Blob Storage is organized into Storage Accounts, Containers, and Blobs

• An overview of the different Access Tiers and when to use each:

  • Hot Tier – for frequently accessed data

  • Cool Tier – for infrequently accessed data stored for at least 30 days

  • Cold Tier – for rarely accessed data stored for at least 90 days

  • Archive Tier – for long-term storage of rarely accessed data with the lowest cost

• How to use Lifecycle Management Policies to automatically move data between tiers

• Security features such as encryption, access control, and shared access signatures (SAS)

• Real-world use cases including media storage, backups, big data analytics, and archival solutions

By the end of this lesson, you'll understand how Azure Blob Storage and its Access Tiers empower organizations to store data efficiently, securely, and cost-effectively — a key concept for the AZ-900 exam and a cornerstone of modern cloud storage strategies.

Azure Storage is about much more than just blobs — it also offers powerful services for file sharing, messaging, and structured data storage. In this lecture, we'll explore three essential components of an Azure Storage Account: Azure Files, Azure Queues, and Azure Tables. Each one is designed to solve a specific challenge, giving developers and organizations flexible tools to build modern, cloud-native applications.

You'll learn how these services work, what makes them unique, and how they can be combined to support a wide range of business scenarios.

In this lecture, we'll cover:

• Azure Files:

  • What Azure Files is and how it provides fully managed cloud file shares

  • Support for SMB and NFS protocols for easy integration with Windows, Linux, and macOS

  • Common use cases like shared storage, lift-and-shift migrations, and hybrid file services with Azure File Sync

• Azure Queues:

  • What Azure Queue Storage is and how it enables asynchronous messaging between application components

  • How queues help build scalable, decoupled, and reliable applications

  • Real-world use cases such as background processing, order handling, and task scheduling

• Azure Tables:

  • What Azure Table Storage is and how it provides NoSQL key-value storage

  • When to use Table Storage for structured but schemaless data

  • Common scenarios like storing user profiles, device data, and metadata

• How these services integrate with other Azure resources to power modern cloud architectures

By the end of this lesson, you'll understand how Azure Files, Queues, and Tables expand the capabilities of Azure Storage — giving you the tools to build flexible, scalable, and efficient cloud applications. An important concept for the AZ-900 exam and everyday Azure use!

When it comes to storing data in the cloud, durability and availability are non-negotiable. That's why Azure offers a powerful set of Storage Redundancy Options designed to keep your data safe, accessible, and protected — even in the face of hardware failures, datacenter outages, or regional disasters. In this lecture, we'll explore how Azure replicates your data across multiple locations to ensure it's always there when you need it.

You'll learn how to choose the right redundancy option based on your business requirements, compliance needs, and budget.

In this lecture, we'll cover:

• Why data redundancy is essential in the cloud

• How Azure ensures 99.999999999% (11 nines) of durability for your data

• The main Azure Storage Redundancy Options:

  • LRS (Locally Redundant Storage) – replicates data 3 times within a single datacenter

  • ZRS (Zone-Redundant Storage) – replicates data across multiple Availability Zones in a region

  • GRS (Geo-Redundant Storage) – replicates data to a secondary region for disaster recovery

  • RA-GRS (Read-Access Geo-Redundant Storage) – adds read access to the secondary region

  • GZRS and RA-GZRS – combine zone redundancy with geo-redundancy for maximum protection

• How each option balances cost, performance, and resilience

• Real-world use cases showing when to use each redundancy option

• Best practices for choosing the right storage replication strategy

By the end of this lesson, you'll understand how Azure's storage redundancy options protect your data from a wide range of failures and disasters — helping you build resilient, reliable, and compliant cloud solutions. A critical topic for the AZ-900 exam and real-world Azure architecture.

SD

Data Movement Tools: AzCopy, Storage, Explorer, File Sync

Claude Opus 4.7

Here's a Lecture Description for Data Movement Tools: AzCopy, Storage Explorer, and File Sync:

Data Movement Tools: AzCopy, Storage Explorer, and File Sync

Moving data to, from, and within Azure is a critical part of nearly every cloud project — whether you're migrating workloads, backing up files, or syncing data between environments. In this lecture, we'll explore three powerful Azure data movement tools that make transferring and managing your data easier, faster, and more reliable: AzCopy, Azure Storage Explorer, and Azure File Sync.

You'll learn what each tool does, when to use it, and how together they give you a complete toolkit for managing data in Azure.

In this lecture, we'll cover:

• AzCopy:

  • A command-line tool designed for fast, high-performance data transfers

  • How to use AzCopy to upload, download, and copy data between Azure Storage accounts

  • Ideal for bulk transfers, scripting, and automation

• Azure Storage Explorer:

  • A free, cross-platform GUI tool for managing Azure Storage resources

  • How to visually browse, upload, download, and manage blobs, files, queues, and tables

  • Perfect for developers and admins who prefer a graphical interface

• Azure File Sync:

  • A hybrid service that syncs on-premises file servers with Azure Files

  • How it enables cloud tiering, centralized file management, and multi-site replication

  • Ideal for organizations modernizing file services while keeping local performance

• A comparison of each tool and guidance on when to use which

• Real-world scenarios showing how businesses use these tools for migration, backup, and hybrid storage strategies

By the end of this lesson, you'll know how to choose the right Azure data movement tool for any scenario — empowering you to move, manage, and synchronize data efficiently and securely. A practical skill set for cloud professionals and a helpful concept for the AZ-900 exam.

Moving to the cloud is a major step — and Microsoft provides a powerful set of tools to make that journey smooth, efficient, and secure. In this lecture, we'll explore two key solutions designed to help organizations migrate their workloads and data to Azure: Azure Migrate and Azure Data Box. Whether you're moving servers, databases, or massive volumes of data, these tools simplify the migration process from start to finish.

You'll learn how each service works, when to use them, and how they fit into a successful cloud migration strategy.

In this lecture, we'll cover:

• Azure Migrate:

  • A centralized hub for discovering, assessing, and migrating on-premises workloads to Azure

  • How it supports the migration of servers, databases, web apps, and virtual desktops

  • Key features like dependency mapping, cost estimation, and readiness assessments

  • Integration with tools such as Azure Migrate: Server Assessment and Server Migration

• Azure Data Box:

  • A family of physical devices used to transfer large volumes of data to Azure

  • Ideal for scenarios with limited bandwidth, massive datasets, or one-time migrations

  • Overview of the Data Box product family:

    • Data Box Disk – small-scale transfers (up to 35 TB)

    • Data Box – medium-scale transfers (up to 80 TB)

    • Data Box Heavy – large-scale transfers (up to 800 TB)

  • How Data Box ensures secure, encrypted data transport

• A comparison of online vs. offline migration approaches

• Real-world use cases showing how organizations use these tools to migrate efficiently

By the end of this lesson, you'll understand how Azure Migrate and Azure Data Box simplify the journey to the cloud — enabling organizations to move workloads and data with confidence, speed, and security. An important topic for the AZ-900 exam and a practical foundation for real-world cloud migrations.

In the cloud era, identity is the new security perimeter — and at the heart of Microsoft's identity platform is Microsoft Entra ID, formerly known as Azure Active Directory (Azure AD). In this lecture, we'll explore how Entra ID serves as the foundation of identity and access management across Azure, Microsoft 365, and thousands of other applications.

You'll learn how Microsoft Entra ID helps organizations secure user identities, manage access, and enable seamless sign-in experiences — all while supporting modern hybrid and cloud-first environments.

In this lecture, we'll cover:

• What Microsoft Entra ID (Azure AD) is and how it differs from traditional on-premises Active Directory

• The role of Entra ID as a cloud-based identity and access management (IAM) service

• Core features, including:

  • User and group management

  • Single Sign-On (SSO) for thousands of SaaS applications

  • Multi-Factor Authentication (MFA) for enhanced security

  • Conditional Access policies for smart, risk-based access control

• How Entra ID integrates with Azure, Microsoft 365, and third-party apps

• The different Entra ID editions (Free, P1, and P2) and their key capabilities

• Hybrid identity concepts with tools like Microsoft Entra Connect

• Real-world use cases showing how organizations use Entra ID to secure users, devices, and applications

By the end of this lesson, you'll have a clear understanding of how Microsoft Entra ID powers modern identity and access management — forming the foundation of security and productivity in the Azure ecosystem. An essential concept for the AZ-900 exam and for anyone working in the cloud.

While Microsoft Entra ID is perfect for modern cloud identity management, many organizations still rely on traditional Active Directory features like domain join, Group Policy, and LDAP. That's where Microsoft Entra Domain Services comes in! In this lecture, we'll explore how this fully managed service brings classic Active Directory capabilities to the cloud — without the need to deploy, manage, or patch domain controllers yourself.

You'll learn how Entra Domain Services bridges the gap between legacy on-premises environments and modern cloud identity, making it easier to run traditional workloads in Azure.

In this lecture, we'll cover:

• What Microsoft Entra Domain Services is and how it differs from Microsoft Entra ID

• How Entra Domain Services provides managed domain services such as:

  • Domain join

  • Group Policy

  • LDAP

  • Kerberos and NTLM authentication

• How it integrates seamlessly with Microsoft Entra ID for synchronized identities

• Why it's ideal for lift-and-shift migrations and legacy applications

• How it eliminates the need to deploy, manage, or patch domain controllers

• Typical use cases, including running legacy apps in Azure VMs, supporting file shares, and enabling secure admin access

• How Entra Domain Services compares to traditional Active Directory Domain Services (AD DS) running on Azure VMs

• Key licensing and cost considerations

By the end of this lesson, you'll understand how Microsoft Entra Domain Services empowers organizations to modernize their identity infrastructure while preserving the familiar capabilities of Active Directory — a valuable concept for hybrid cloud environments and an important topic for the AZ-900 exam.

In today's digital world, how users sign in is just as important as what they can access. In this lecture, we'll explore the modern authentication methods that power secure, seamless, and user-friendly access to cloud applications and services. You'll learn how Microsoft Entra ID supports Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Passwordless authentication — helping organizations strengthen security while improving the overall user experience.

You'll also discover how these methods work together to defend against today's most common cyber threats.

In this lecture, we'll cover:

• Single Sign-On (SSO):

  • How SSO allows users to sign in once and access multiple applications without re-entering credentials

  • The benefits for productivity, security, and IT management

  • How Microsoft Entra ID enables SSO across Microsoft 365, Azure, and thousands of third-party SaaS apps

• Multi-Factor Authentication (MFA):

  • What MFA is and why it's one of the most effective defenses against account compromise

  • The different verification methods, such as phone calls, SMS, authenticator apps, and biometrics

  • How MFA integrates with Conditional Access for smart, risk-based protection

• Passwordless Authentication:

  • Why passwords are becoming obsolete and often the weakest link in security

  • Modern passwordless options, including Windows Hello, Microsoft Authenticator, and FIDO2 security keys

  • How passwordless sign-in improves both security and user experience

• Real-world use cases demonstrating how organizations combine these methods to build strong identity security

By the end of this lesson, you'll understand how SSO, MFA, and Passwordless authentication work together to create a secure, seamless, and modern sign-in experience — a critical topic for the AZ-900 exam and a core concept in today's cloud security landscape.

Modern organizations don't just serve internal users — they also need to securely connect with partners, vendors, contractors, and customers. That's where Microsoft Entra External Identities comes in! In this lecture, we'll explore how Azure enables organizations to manage identities beyond their own workforce through two powerful solutions: B2B (Business-to-Business) and B2C (Business-to-Consumer) collaboration.

You'll learn how these capabilities extend identity and access management outside your organization — securely, flexibly, and at scale.

In this lecture, we'll cover:

• An overview of Microsoft Entra External Identities and why external access matters

• B2B Collaboration:

  • What Azure AD B2B is and how it enables secure collaboration with external partners and vendors

  • How guests can access your resources using their own credentials — no extra accounts needed

  • Key features like guest invitations, conditional access, and MFA

  • Real-world use cases such as shared documents, Teams collaboration, and partner portals

• B2C Identity Management:

  • What Azure AD B2C is and how it provides customer identity and access management (CIAM)

  • How B2C enables customers to sign in using their preferred identity providers — like Google, Facebook, or email

  • How developers can build custom sign-up and sign-in experiences for apps and websites

  • Real-world use cases such as customer portals, e-commerce, and public-facing applications

• Key differences between B2B and B2C, and when to use each

• Security and governance considerations for managing external users

By the end of this lesson, you'll understand how Microsoft Entra External Identities empower organizations to securely extend collaboration and customer engagement beyond their walls — a key concept for modern identity strategies and an important topic for the AZ-900 exam.

Conditional Access Policies

In today's cloud-first world, security can't be a one-size-fits-all solution — it needs to be smart, adaptive, and context-aware. That's exactly what Conditional Access Policies in Microsoft Entra ID deliver! In this lecture, we'll explore how Conditional Access acts as the intelligent decision-maker at the heart of Azure's identity security, ensuring that the right users get the right access under the right conditions.

You'll learn how Conditional Access combines signals like user identity, location, device health, and risk level to make real-time access decisions that protect your organization without slowing down productivity.

In this lecture, we'll cover:

• What Conditional Access is and how it enhances identity and access security

• The "if-then" logic behind Conditional Access policies (e.g., if a user signs in from a risky location, then require MFA)

• The key signals Conditional Access can evaluate, including:

  • User or group membership

  • Device state and compliance

  • Location (IP ranges)

  • Application being accessed

  • Real-time sign-in risk

• Common access controls, such as requiring MFA, compliant devices, or blocking access entirely

• How Conditional Access integrates with MFA, Microsoft Entra ID Protection, and Intune

• Real-world use cases, including blocking legacy authentication, requiring MFA for admins, and restricting access by location

• Best practices for designing effective Conditional Access policies

By the end of this lesson, you'll understand how Conditional Access empowers organizations to build a modern, zero-trust security model — providing powerful, flexible, and automated protection for users and data. A must-know concept for the AZ-900 exam and real-world Azure security.

In any cloud environment, managing who can do what is critical to maintaining security and control. That's exactly what Azure Role-Based Access Control (RBAC) is designed for! In this lecture, we'll explore how RBAC enables organizations to grant the right level of access to the right people — following the important security principle of least privilege.

You'll learn how RBAC works, how to assign roles effectively, and how it helps you manage permissions consistently across your entire Azure environment.

In this lecture, we'll cover:

• What Azure Role-Based Access Control (RBAC) is and why it's essential for cloud security

• The three key components of an RBAC role assignment:

  • Security Principal – who is getting access (user, group, service principal, or managed identity)

  • Role Definition – what actions are allowed

  • Scope – where the access applies (management group, subscription, resource group, or resource)

• An overview of built-in roles, such as Owner, Contributor, Reader, and User Access Administrator

• How to create custom roles for more granular control

• The principle of least privilege and why it's a best practice

• How RBAC integrates with the Azure resource hierarchy and supports inheritance

• Real-world examples showing how RBAC is used to manage permissions across teams and environments

• Best practices for designing an effective RBAC strategy

By the end of this lesson, you'll understand how Azure RBAC empowers organizations to manage access securely, efficiently, and at scale — ensuring that users have exactly the permissions they need, and nothing more. A core concept for the AZ-900 exam and a foundational skill for any Azure professional.

In today's evolving threat landscape, traditional security models — where everything inside the corporate network is trusted — are no longer enough. Modern organizations need a smarter, layered, and more resilient approach to security. In this lecture, we'll explore two foundational security strategies that Microsoft and the broader industry rely on: Zero Trust and Defense in Depth.

You'll learn how these complementary models help protect identities, devices, data, and applications in a world where threats can come from anywhere.

In this lecture, we'll cover:

• Zero Trust:

  • The core principle: "Never trust, always verify"

  • The three guiding pillars of Zero Trust:

    • Verify explicitly

    • Use least-privilege access

    • Assume breach

  • How Zero Trust applies across identities, devices, applications, data, networks, and infrastructure

  • How Microsoft tools like Entra ID, Conditional Access, and MFA enable a Zero Trust model

• Defense in Depth:

  • What Defense in Depth means and why layered security is critical

  • The seven layers of security in the Defense in Depth model:

    • Physical → Identity & Access → Perimeter → Network → Compute → Application → Data

  • How each layer adds protection and mitigates risk

  • Real-world examples showing how organizations apply Defense in Depth to protect workloads

• How Zero Trust and Defense in Depth work together to form a robust, modern security strategy

• Best practices for adopting these models in your Azure environment

By the end of this lesson, you'll understand how Zero Trust and Defense in Depth create a comprehensive, layered, and proactive security posture — empowering organizations to stay secure in a world of constant change. A key concept for the AZ-900 exam and a must-know for modern cloud security.

In a world where cloud environments are constantly evolving and cyber threats are becoming more advanced, organizations need a unified, intelligent security solution to protect their workloads. That's exactly what Microsoft Defender for Cloud delivers! In this lecture, we'll explore how this powerful service provides end-to-end security posture management and threat protection for resources running in Azure, on-premises, and even across multi-cloud environments like AWS and Google Cloud.

You'll learn how Defender for Cloud helps you continuously assess, secure, and defend your cloud infrastructure — all from a single centralized platform.

In this lecture, we'll cover:

• What Microsoft Defender for Cloud is and why it's essential for modern cloud security

• The two core capabilities it provides:

  • Cloud Security Posture Management (CSPM) – continuously assess and improve your security posture

  • Cloud Workload Protection (CWP) – detect and respond to threats across your workloads

• Key features, including:

  • Secure Score to measure and improve your security posture

  • Security recommendations and prioritized remediation steps

  • Regulatory compliance dashboards

  • Threat detection and alerts powered by AI and threat intelligence

• Support for protecting a wide range of resources, such as VMs, containers, databases, storage, and Kubernetes

• How Defender for Cloud integrates with Microsoft Sentinel for advanced threat detection and response

• Real-world use cases showing how organizations use Defender for Cloud to strengthen their security

• Overview of free vs. paid tiers and what's included

By the end of this lesson, you'll understand how Microsoft Defender for Cloud empowers organizations to see, secure, and defend their cloud environments with confidence — a vital concept for the AZ-900 exam and a cornerstone of modern cloud security strategy.

You've made incredible progress! You've explored the core building blocks of Azure — from its global infrastructure to compute, networking, storage, identity, and security services. Before moving on, it's the perfect time to pause, consolidate, and reinforce everything you've learned. In this lecture, we'll recap the key concepts from the Azure Architecture and Services domain and share exam tips to help you confidently tackle this heavily weighted section of the AZ-900 certification exam.

You'll walk away with a clear mental model of how Azure's core components fit together and how to approach related exam questions with confidence.

In this lecture, we'll cover:

• A high-level recap of Azure's global infrastructure, including Regions, Region Pairs, Availability Zones, and Sovereign Clouds

• A review of the Azure resource hierarchy: Management Groups → Subscriptions → Resource Groups → Resources

• Key Azure compute services, such as Virtual Machines, App Service, Functions, Containers, and Virtual Desktop

• Core networking concepts, including VNets, Subnets, VNet Peering, VPN Gateway, and ExpressRoute

• A summary of Azure Storage Services, including Blob, File, Queue, Table, and redundancy options

• An overview of identity and access management with Microsoft Entra ID, RBAC, Conditional Access, and MFA

• Security essentials like Zero Trust, Defense in Depth, and Microsoft Defender for Cloud

• Top exam tips, including:

  • Commonly tested concepts

  • Keywords to watch for in exam questions

  • Strategies for tackling scenario-based questions

  • How to manage your time effectively

• Recommended study resources and hands-on practice ideas

By the end of this lesson, you'll have a well-organized overview of the Azure Architecture and Services domain and feel fully prepared to move forward — one big step closer to earning your Microsoft Certified: Azure Fundamentals certification!

One of the biggest advantages of the cloud is its flexible, pay-as-you-go pricing model — but that flexibility also means your costs can vary based on many different factors. In this lecture, we'll explore what truly impacts Azure costs and how understanding these factors can help you optimize spending, avoid surprises, and maximize the value of your cloud investment.

You'll learn how even small decisions — like where you deploy, how you size resources, or which pricing model you choose — can make a big difference on your monthly bill.

In this lecture, we'll cover:

• A quick recap of Azure's consumption-based pricing model

• The main factors that influence Azure costs:

  • Resource type – compute, storage, networking, databases, etc.

  • Usage and consumption – how much and how often you use a service

  • Service tier and performance level – Basic, Standard, Premium, etc.

  • Region – pricing can vary based on geographic location

  • Data transfer (egress) costs – moving data out of Azure

  • Licensing options – such as Bring Your Own License (BYOL) or Azure Hybrid Benefit

  • Reserved Instances and Savings Plans – commitment-based discounts

  • Spot VMs – cost savings for interruptible workloads

• How architecture decisions affect cost, including scaling strategies and redundancy options

• Real-world examples showing how different choices impact the final bill

• Best practices for building cost-efficient Azure solutions

By the end of this lesson, you'll understand the key drivers behind Azure costs and how to make smarter, more cost-effective decisions when designing and managing your cloud environment — a critical skill for the AZ-900 exam and real-world Azure success.

Before deploying resources in the cloud, it's important to know what they will cost — and that's where the Azure Pricing Calculator comes in! In this lecture, we'll take a hands-on look at this powerful, free tool from Microsoft that allows you to estimate the cost of Azure services before you spend a single dollar. Whether you're planning a small project or a large enterprise deployment, the Pricing Calculator helps you make informed, budget-conscious decisions.

You'll learn how to build accurate cost estimates, compare configurations, and plan your Azure investments with confidence.

In this lecture, we'll cover:

• What the Azure Pricing Calculator is and why it's essential for cloud planning

• How to access and navigate the Pricing Calculator interface

• Step-by-step guidance on how to:

  • Select services and add them to your estimate

  • Configure options like region, tier, size, operating system, and usage

  • Apply licensing benefits such as Azure Hybrid Benefit

  • Include Reserved Instances or Savings Plans for additional discounts

• How to save, share, and export your cost estimates

• Tips for creating accurate and realistic estimates

• Real-world examples of estimating costs for common scenarios, such as hosting a web app or running a virtual machine

• How the Pricing Calculator compares to the Total Cost of Ownership (TCO) Calculator

By the end of this lesson, you'll be confident using the Azure Pricing Calculator to forecast your Azure expenses and plan smarter cloud deployments — a practical, must-know skill for the AZ-900 exam and everyday cloud management.

Once your resources are running in Azure, the next critical step is managing and optimizing your spending. Microsoft provides a powerful suite of tools — collectively known as Azure Cost Management and Billing — to help you track, analyze, and control your cloud costs with ease. In this lecture, we'll explore how these tools give you complete visibility into your Azure spending and empower you to make smarter financial decisions.

You'll learn how to monitor usage, set budgets, identify savings opportunities, and stay in control of your cloud investments — all from a centralized dashboard.

In this lecture, we'll cover:

• An introduction to Azure Cost Management and Billing and why it's essential for every Azure user

• How to access and navigate the Cost Management + Billing experience in the Azure Portal

• Key features and capabilities, including:

  • Cost analysis – visualize and break down spending by resource, service, or tag

  • Budgets – set spending limits and receive alerts when approaching thresholds

  • Cost alerts – proactive notifications to prevent overages

  • Recommendations – insights from Azure Advisor for cost optimization

  • Invoices and payment management – view, download, and manage billing details

• How tags can help organize and track costs across projects, teams, or environments

• How to use exports and APIs to integrate billing data with external tools like Power BI

• Real-world use cases showing how organizations manage and reduce their Azure spending

• Best practices for maintaining financial accountability and cost transparency

By the end of this lesson, you'll understand how Azure Cost Management and Billing tools help organizations stay on top of their cloud spending and drive cost efficiency at scale — a key skill for cloud professionals and an important topic for the AZ-900 exam.

As your Azure environment grows, keeping track of who owns what, what's being spent where, and why can quickly become a challenge. That's where Azure Tags come in! In this lecture, we'll explore how tags serve as a simple but incredibly powerful tool for organizing, categorizing, and tracking Azure resources — especially when it comes to cost management and reporting.

You'll learn how a well-planned tagging strategy can bring clarity, accountability, and control to your cloud environment, making cost tracking effortless and accurate.

In this lecture, we'll cover:

• What Azure Tags are and how they work as key-value pairs assigned to resources

• Why tagging is a critical part of cloud governance and cost management

• Common tagging examples, such as:

  • Environment = Production

  • Department = Finance

  • Project = WebsiteRedesign

  • Owner = Jane.Doe

• How tags help you:

  • Track costs by project, department, or environment

  • Allocate and chargeback expenses to the right teams

  • Filter and analyze spending in Cost Management + Billing

  • Apply governance and policies using Azure Policy

• How to apply tags using the Azure Portal, CLI, PowerShell, or ARM templates

• Key limitations and best practices, including consistency, automation, and inheritance

• How to use Azure Policy to enforce a tagging strategy across your environment

• Real-world examples showing how organizations use tags for effective cost reporting

By the end of this lesson, you'll understand how Azure Tags provide the foundation for smart cost tracking and organizational clarity — a simple yet powerful tool for managing your cloud environment. An essential concept for the AZ-900 exam and real-world Azure operations.