AZ-900: Microsoft Azure Fundamentals Exam Preparation 2026

Leverage cloud services for scalability, cost efficiency, and flexibility, offloading infrastructure to Azure, while using artificial intelligence, machine learning, IoT, and big data analytics to boost innovation and collaboration.

Explore how high availability keeps cloud resources accessible by leveraging redundancies and uptime guarantees, with Azure's infrastructure supporting 99.99% uptime for virtual machines.

Explore vertical scaling and horizontal scaling in cloud computing, boosting a single resource's power or distributing workloads with additional virtual machines, containers, and Azure autoscale.

Explore real-world examples of high availability and scalability to ensure reliability and performance for modern businesses under any conditions.

Azure offers several powerful tools to enhance both availability and scalability, helping businesses build a robust and reliable cloud.

Explore how cloud scalability, vertical and horizontal, with auto scaling, load balancing, and high availability, enables reliable, predictable performance and cost control using Azure Cost Management tools.

Explore how cloud manageability streamlines resources with proactive monitoring and automation, using Azure Monitor, Azure Policy, governance policies, and Azure Automation to keep environments secure, reliable, and efficient.

Automate scaling and resource management to match real-time demand, using Azure Resource Manager ARM templates and continuous health monitoring with real-time alerts.

Explore cloud management with the Azure portal's dashboards and drag-and-drop tools, helping beginners and developers control resources, while Azure CLI, APIs, and Azure PowerShell enable automation and scripting.

Leverage real-world Azure manageability to handle traffic with auto scaling, deploy with Azure Resource Manager templates, monitor health with Azure Monitor, and automate deployments across regions using the Azure CLI.

Governance in the cloud is enabled by Azure Policy, Azure Blueprints, and compliance auditing to enforce encryption, cost controls, and regulatory standards such as GDPR and HIPAA across deployments.

Explore how cloud security adapts to deployment models, with IaaS granting control over systems and PaaS and SaaS reducing overhead, while DDoS protection and identity and access management protect data.

Enforce data residency with Azure policy for GDPR, guard against traffic spikes with distributed denial-of-service protection, and automatically patch systems to meet HIPAA requirements.

Establish governance early to keep your cloud secure and manageable as resources grow, leveraging Azure Policy, blueprints, and Azure Security Center to enforce encryption, control costs, and ensure compliant deployments.

Explore how the cloud delivers high availability and reliability, strengthens security with encryption and automated updates, and enables governance with Azure Policy and Azure Blueprints.

Explore IaaS, PaaS, and SaaS, and how the shared responsibility model defines control and responsibilities. Compare use cases and benefits to choose the cloud service that fits your business needs.

Explore how IaaS provides flexible cloud services with maximum control over your IT resources, while providers manage physical infrastructure and data center security; you control operating systems, networks, and applications.

Under the shared responsibility model, IaaS places OS and application security on you while providers secure the physical infrastructure; deploying a virtual machine requires firewalls, patches, and access controls.

Explore how infrastructure as a service enables lift-and-shift migrations from on-premises to Azure, rapid testing environments, and hosting websites with full control of the underlying infrastructure, and high-performance computing.

Infrastructure as a service provides maximum control to customize resources for performance and security, with pay-for-what-you-use pricing, rapid deployment, disaster recovery, and analytics-ready scalability.

Explore platform as a service, which abstracts server management so developers focus on code; examples include Azure App Service and Azure Functions with auto scaling and authentication.

Explore software as a service (SaaS), a simple cloud service that delivers fully managed applications over the internet with no local installation, enabling collaboration with Microsoft 365.

Learn how the shared responsibility model shifts most operational tasks to the cloud provider, while you manage user access and data security to maximize productivity with minimal overhead.

Discover common use cases of software as a service, including productivity and collaboration with Microsoft 365, customer relationship management with Dynamics 365, and data analytics with Power BI.

Explore Azure's core architecture and services, including data centers, regions, availability zones, and sovereign regions, and learn how resources, resource groups, subscriptions, and management groups enable scalable governance.

Discover Microsoft Azure, a global cloud platform offering end-to-end IaaS, PaaS, and SaaS solutions with multiple languages and tools like Visual Studio .NET and Java.

Azure offers unified management across on premises, cloud, and hybrid environments with Azure Arc and Azure Monitor, enabling centralized control for intelligent applications powered by Cognitive Services and Machine Learning.

Explore Azure's extensive service catalog and migrate apps to virtual machines for seamless cloud adoption. Build intelligent chatbots, leverage cognitive services, and use analytics to gain scalable insights.

Use an Azure subscription as the foundation to access, deploy, and manage resources, enforce access with rbac and policies, and monitor costs across multiple subscriptions.

Explore Azure with a free student account that provides $100 in credits for 12 months, no credit card required, and access to developer tools for AI, ML, and cloud computing.

Explore the Microsoft Learn Sandbox, a temporary Azure subscription for hands-on learning that tests and deploys resources at no cost, then auto cleans up to prevent charges on your subscription.

Sign up on the Azure website for a self-service subscription, or work with a Microsoft representative; CSPs provide managed solutions, resource optimization, hybrid cloud integration, and pay-as-you-go or reserved instances.

Explore the Azure account hierarchy, including subscriptions, resource groups, and resources, to organize, manage costs, apply permissions, and implement policies for secure, scalable cloud operations.

Explore the Learn Sandbox, a temporary Azure environment for hands-on learning that lets you interact with resources at no cost in a safe, controlled setting, with automatic cleanup.

Explore four methods to interact with Azure resources: PowerShell CLI, Bash CLI, Azure CLI interactive mode, and the Azure Portal, enabling hands-on connectivity and resource management.

Azure's physical infrastructure centers on data centers, regions, and availability zones to house servers, storage, and networking equipment for scalable, reliable cloud services and global resiliency.

Understand Azure regions as data-center areas connected by a high-speed network to deploy resources near customers, optimize performance, meet compliance, and manage costs, with some services region-specific and others global.

Provide isolation and high availability by deploying independently powered data centers within an Azure region across zones, enabling data replication and low latency communication for disaster recovery and operational continuity.

Azure region pairs enhance resiliency by placing regions at least 300 miles apart in the same geography to support disaster recovery and updates to one region at a time.

Explore Azure sovereign regions designed for enhanced security and regulatory compliance for governments and industries. See how US government and China regions operate as network isolated environments under strict controls.

Explore Azure infrastructure to enable flexibility, reliability, and security using availability zones for redundancy, region pairs for disaster recovery and failover, and sovereign regions for regulatory compliance.

Discover how Azure management infrastructure uses resources, resource groups, subscriptions, and management groups to enforce governance with policies, tagging, access control, and billing boundaries.

Explore how Azure resources and resource groups organize and govern cloud infrastructure, enforce policies (encryption, region controls), control access, enable bulk deletion, and simplify scalable deployments.

Create and manage Azure resource groups to organize services and apply governance. Deploy a virtual machine, assign a policy like restrict location to West US, and clean up the group.

Azure subscriptions serve as the core unit for management and billing, grouping resources, enabling separation of development, testing, and production environments, and enforcing RBAC-driven access and cost boundaries.

Create multiple Azure subscriptions to isolate development, testing, and production, control access, track costs by department, and enforce distinct security policies across regions and resources.

Discover how Azure management groups enable scalable governance for large environments, supporting up to 10,000 groups and six levels of hierarchy, with policies and role based access control propagating.

Organize Azure resources with a hierarchy of resources, resource groups, subscriptions, and management groups to enable governance, policy enforcement, role-based access control, and data residency policies.

Explore the Azure global infrastructure, regions, and data centers, understanding latency, pricing, and availability. Navigate the Azure portal to view services, create storage accounts, and configure virtual networks.

Explore Azure free tier and free trial to spin up a virtual machine. Learn to use 200 credits and manage costs with budgeting and alerts in the Azure portal.

Learn about Azure subscription types, budgets, and billing alerts, including pay-as-you-go, free tier, student discounts, and enterprise agreements, to monitor and control cloud costs and cost management.

Explore Azure architecture that delivers resiliency, scalability, and governance. See how availability zones, region pairs, subscriptions, and RBAC enable centralized governance and reliable, scalable cloud deployment.

Compare Azure compute options: virtual machines, containers, and functions, and learn scale sets, availability sets, Azure Web Apps, networking with virtual networks, subnets, endpoints, DNS, and ExpressRoute for secure architectures.

Understand Azure compute and networking services, including virtual machines, containers, and functions, and how virtual networks with ExpressRoute and VPN gateways enable secure, scalable cloud solutions.

Azure virtual machines provide infrastructure as a service with flexible, customizable cloud deployment and complete control over the operating system for legacy apps, custom hosting, or testing environments.

Virtual machine scale sets automate creating and configuring virtual machines, dynamically adjusting instances by demand, ideal for big data processing and containerized workloads with a load balancer for high availability.

Leverage availability sets to improve virtual machine resiliency by distributing VMs across fault domains and update domains, reducing downtime and maintaining high availability during maintenance.

Explore Azure virtual machines for testing and development, enabling quick, customized environments; scale cost-effectively, extend on-premises data centers with hybrid cloud, and enable disaster recovery and lift and shift migrations.

Configure Azure virtual machines by selecting size, cores, ram, storage options (standard HDDs or premium SSDs), and networking (virtual networks, subnets, public IPs) for scalable, high-performance workloads.

Explore how Azure Virtual Desktop delivers a secure, scalable cloud-based solution for desktop and application virtualization across Windows, macOS, iOS, Android, and browsers, with Microsoft 365 integration.

Secure your Azure virtual desktop by leveraging Microsoft Entra ID for centralized authentication, MFA, and conditional access, while RBAC grants granular permissions and data stays securely in the Azure cloud.

Explore Azure Virtual Desktop's flexible remote access, scalable resources, and centralized security for modern businesses. Leverage multi-session capability and policy enforcement to achieve cost efficiency and seamless collaboration.

Discover how Azure Virtual Desktop enables secure remote work by accessing desktops and apps from any device, scales for staff, supports BYOD, and hosts legacy apps on a managed platform.

Compare containers with virtual machines, noting that containers virtualize only the application layer and dependencies, share the host OS kernel, and speed startup times for modular applications like microservices.

Explore azure container apps built on container instances for event-driven elastic workloads with dynamic resource allocation, featuring built-in load balancing and automatic scaling from http traffic, cpu, or memory.

Explore Azure Kubernetes Service as a container orchestration platform that automates scaling, load balancing, and lifecycle management for large, complex applications across hybrid and multi-cloud environments.

Explore how containers underpin microservice architectures by isolating front-end, back-end, and database services, enabling independent scaling, seamless updates, and fault isolation for high availability.

Leverage Azure containers to modernize applications, break monoliths into microservices, and enable faster, consistent deployments in CI and CD pipelines across development, testing, and production.

Azure Functions is an event-driven, serverless compute service that provisions resources only when an event occurs, enabling cost-efficient code execution, HTTP request handling, and data processing with other Azure services.

Azure functions respond to triggers like rest requests, timer schedules, or storage queue messages, provisioning resources in a sandboxed environment, deallocating after use, and scaling automatically to minimize costs.

Azure Functions let you focus on writing code, with no infrastructure to manage, and scale automatically for spikes, triggered by file uploads, HTTP requests, or database changes, with pay-for-use.

Azure functions run stateless by default, not retaining data between executions, while durable functions maintain context across steps to coordinate long-running workflows such as approval processes.

Explore azure functions for data processing, real time tasks like image resizing, and event driven workflows with event grid, service bus, or storage queues, plus scalable lightweight web APIs.

Azure Functions use a pay-as-you-go model, charging only for CPU and memory during execution, with no costs when idle and resources allocated after run, ideal for intermittent workloads.

Describe Azure hosting options including virtual machines, containers, and Azure App Service. Learn how each provides full control, modular deployment, rapid scaling, or fully managed hosting for your apps.

Explore how Azure App Service integrates infrastructure management and enables automatic scaling, load balancing, and traffic management to ensure high availability, secure endpoints, and authentication for enterprise deployments.

Discover how Azure App Service hosts web apps with DotNet, Java, and Python, enables API publishing to the Azure marketplace, backend services, push notifications, and web jobs for background processing.

Choose the right hosting option in Azure to match your app needs. Use virtual machines for full control, containers for fast scaling, and App Service for a fully managed experience.

Learn to set up Azure App Services in public, private, and hybrid clouds using Azure Arc, with a hands-on demo of web app creation and auto-scaling.

Set up a private Azure cloud with a resource group, VNet, and VM, secure RDP with a network security group, and test a web server locally and via public IP.

Explore the Azure app service plan as the core host for web apps, defining compute, region, pricing tier, and elastic scaling through autoscale rules based on metrics.

Explore Azure app service plans as scalable, resilient PaaS hosting with auto scaling. Learn plan tiers, scaling triggers, and cloud concepts to prep for AZ-900 and build better cloud apps.

Explore Azure hosting options from virtual machines for full control and legacy workloads to containers for scalable deployment and the fully managed App Service for handling scaling and infrastructure.

Azure virtual networking forms the backbone of connectivity, extending on premises networks into the cloud and providing secure control over routing, filtering, and segmentation.

Explore isolation and segmentation in Azure Virtual Networking to create secure environments using private IP ranges not routable over internet, subnets, and traffic policies. Customize DNS configurations for name resolution.

Explore Azure virtual networking to connect virtual networks with private communication over Azure's backbone, delivering low latency and high performance via virtual network peering and user defined routes.

Explore how Azure virtual networking enables secure application deployment by hosting apps in segmented subnets, using private endpoints, and isolating workloads for a hybrid, globally connected cloud.

Explore how a virtual private network creates a secure, encrypted tunnel between trusted private networks, protecting data integrity and confidentiality when transferring across untrusted networks like the internet.

Explore how Azure VPN gateway securely transfers encrypted data across on-premises, remote users, and Azure networks, using site-to-site, point-to-site, and network-to-network connections.

Explore policy-based versus route-based Azure VPN gateways, focusing on static IP rules and encryption. Route-based VPN offers dynamic routing, scalability for evolving networks, multi-site connections, and ExpressRoute coexistence.

Explore the versatility of route based VPNs for secure virtual network to network connections across Azure regions and multiple sites, including point-to-site access for remote users.

Explore Azure vpn gateway high availability options, including active standby failover, active active with BGP routing, ExpressRoute failover, and zone redundant gateways for multi-az resilience.

Explore Azure VPN gateway features that enable secure, private site-to-site, point-to-site, and network-to-network connectivity with IPsec encryption, boasting resiliency, scalability, and ExpressRoute integration for hybrid cloud infrastructure.

Explore how Azure ExpressRoute delivers a private, dedicated connection from on-premises networks to the Microsoft Cloud, bypassing the public internet for secure, reliable access to Azure and Microsoft 365.

Explore ExpressRoute's direct access to Microsoft services across Azure regions, enabling secure integration with Azure, Microsoft 365, and Dynamics 365, using a private backbone, BGP dynamic routing, and built-in redundancy.

Discover how Azure ExpressRoute Global Reach enables direct, private connectivity between on-premises sites across regions, reducing latency, boosting security, and improving reliability for global enterprises.

Explore how Azure ExpressRoute uses Border Gateway Protocol (BGP) to enable dynamic routing between on-premises networks and Azure resources, with automatic route updates and improved resilience.

Explore Azure Express route redundancy features that enable active standby and active active configurations, zone redundant gateways, and continuous connectivity for mission critical workloads and high availability.

Explore how Azure ExpressRoute provides high speed, secure cloud connections for hybrid environments by extending on-prem networks to Azure with low latency and global reach.

Explore Azure dns, a managed cloud-based service that hosts dns domains on Microsoft Azure's infrastructure, enabling fast name resolution and seamless integration with your Azure resources, credentials, APIs, and tools.

Explore the benefits of Azure DNS: reliable, high-performance DNS hosting with security via RBAC, easy management through Azure tools, and support for private domains and alias records.

Azure DNS delivers high availability and reliable name resolution through anycast routing across Microsoft Azure's global network, minimizing latency for global queries and resilience through automatic failover.

Azure DNS is designed for ease of use, integrating with the Azure portal, CLI, and PowerShell to manage DNS zones and automate records via REST APIs and SDKs for CI/CD.

Use private DNS zones in Azure DNS to create custom domain names for resources in private virtual networks, simplifying configurations and ensuring secure, consistent internal naming.

Explore alias record sets in Azure DNS and how they automatically resolve to the IP or endpoint as resources change, linking records to public IPs and traffic manager profiles.

Azure DNS provides comprehensive DNS management and integrates with other Azure services, but domain registration occurs with a third-party registrar or App Service domains before transferring management to Azure DNS.

Explore the versatility of Azure DNS and learn how it simplifies DNS management for Azure-based and external resources, supports private domains in virtual networks, and ensures reliable name resolution.

Configure Azure public DNS and map a custom domain to an app service using A, CNAME, and TXT records. Verify with nslookup and complete SSL binding.

Explore Azure compute and networking for scalable, flexible workloads. Leverage virtual machines, containers, and functions for diverse deployment needs, plus secure, low-latency connectivity with virtual networks, ExpressRoute, and VPN gateway.

Explore Azure storage services: storage accounts, hot, cool, and archive tiers, redundancy for durability, and migration tools like Azure Migrate, AZ Copy, and Azure Data Box for secure storage.

Compare Azure storage services and select hot, cool, and archive tiers to optimize costs. Explore redundancy options, including blob, file, table, and queue storage, plus migration with Azure Migrate.

Azure storage services provide scalable, durable, and redundant data management with disaster recovery, data archiving, and analytics for application hosting, plus a migration toolkit for seamless cloud movement.

Explore Azure storage accounts and choose between general purpose v2 for versatility, premium blob for high transaction workloads, premium file shares for high throughput, and premium page blobs for IOPS.

Explore Azure storage redundancy options from locally redundant storage (LRS) to zone redundant storage (Xres), read access, and geo redundant storage (GRS) to protect data across failures and ensure availability.

Explore how Azure storage accounts provide a unique namespace and secure, structured access across blob, data lake storage Gen2, files, queue, and table services with consistent endpoints.

Azure storage accounts provide a unique namespace with secure access across blob, data lake gen2, files, queues, and table storage. Follow consistent endpoint formats for seamless integration and data access.

Explore backup and disaster recovery with geo redundant storage and read access. Leverage data lake storage gen two with hierarchical namespace and Azure Synapse Analytics, Apache Spark, and Hadoop.

Learn locally redundant storage (LRS) in Azure, replicating three copies in a data center for 11 nines durability at cost. Best for backup and dev/test workloads where resilience isn't critical.

Distribute data across three availability zones within a single Azure region to enable zone-redundant storage, delivering 99.12 nines of durability and fault-tolerant, high-availability performance for mission-critical workloads.

Understand geo-redundant storage (grs) with lrs in the primary region and asynchronous replication to a secondary region for disaster recovery, failover latency, regional resilience, and durability up to 60 nines.

Enhance resilience with geo-zone-redundant storage (gzrs) by combining zone redundant storage and locally redundant storage, enabling zone and regional protection with Azure's 16 nines durability for critical workloads.

Explore read-access options RA-GRS and RA-GZRS that provide real-time access from the secondary region without failover, enabling low-latency, globally distributed applications and a CDN.

Balance data availability, durability, cost, and compliance to choose the right redundancy option for critical applications. Weigh options like LRS, GRS, and regional boundaries to ensure uninterrupted access and alignment.

Explore Azure blob storage, including block, append, and page blobs for various use cases, with hot, cool, and archive tiers and cost implications for the AZ-900 exam.

Explore Azure Files, a fully managed file sharing solution that supports SMB and NFS, enabling lift-and-shift workloads, Azure File Sync hybrid caching, and backup, disaster recovery, and low-latency on-premises access.

Explore Azure Queue Storage to enable asynchronous communication by storing and processing messages at scale. Learn how visibility timeout prevents duplication and supports task scheduling, background jobs, and event-driven microservices.

Azure disks provide block level storage in four tiers: standard HDD, standard SSD, and ultra disks. They deliver low latency, high IOPs, with snapshots and encryption for durable workloads.

Explore Azure Tables, a highly scalable NoSQL data store for structured non-relational data and key-value storage, delivering low latency and high throughput for IoT, telemetry, and web app sessions.

Explore Azure storage services—from blob storage for unstructured data and data lakes with data lake gen2 to Azure Files, Queue Storage, Azure Tables, and Cosmos DB for scalable cloud apps.

Discover Azure storage services, including blob storage for unstructured data, Azure files for hybrid environments, and Azure disks for high performance virtual machines storage, aligned with the AZ-900 exam.

Sign into the Azure portal, create a storage account, and configure the basics tab—subscription, resource group, and redundancy—then enable anonymous access if public access is needed and use blob storage.

Create and configure a blob container in your storage account, set its access level to private, and upload an image file to store in Azure blob storage.

Configure Azure Blob Storage public access at the blob level to grant read-only access without exposing the container, enabling hosting of static images or downloadable assets.

Protect Azure storage data from accidental deletion by enabling soft delete for blobs and file shares; configure retention, test restores, and recognize the need for snapshots for file shares.

Manage Azure resources to cut costs and boost security. Apply cleanup in the learn sandbox; resources auto-clean, and on personal subscriptions delete unused resources or resource groups.

Explore Azure data migration options, including Azure Migrate for real-time on-premises to Azure migrations with minimal downtime, and Azure Data Box for offline bulk transfers.

Explore Azure Migrate, a centralized platform that discovers, assesses, and migrates on-prem resources to Azure. Leverage built-in tools and third-party integrations to tailor migrations for virtual machines, servers, databases, applications.

Explore Azure migration tools, including discovery and assessment, server migration, and database and app migration, to move VMware, Hyper‑V, and physical servers to Azure.

Discover Azure Data Box, a rugged offline migration device that securely transfers up to 80 TB of data, enabling local transfer and ship back to Microsoft for Azure upload.

Explore how Azure Data Box supports data migration, from one-time bulk imports to hybrid workflows with AzCopy and Azure Data Factory, enabling disaster recovery and secure exports.

Discover end-to-end security for azure data box—from order to final upload—with visibility in the azure portal, and ensure migration follows NIST 888 one standards for permanent data erasure.

Explore Azure file movement options like Azcopy, Azure Storage Explorer, and Azure File Sync to move and manage smaller scale files with speed, precision, automation, and seamless synchronization.

Discover AzCopy, a fast command-line tool for uploading, downloading, and synchronizing blobs with Azure storage, including cross-cloud transfers and automation through scripting for large-scale file management.

Explore Azure Storage Explorer, a cross-platform visual tool for managing Azure storage accounts across Windows, macOS, and Linux, integrating AzCopy for high-speed transfers within the graphical interface.

Learn how azure file sync links on-premises file servers with azure files in hybrid environments, supporting SMB, NFS, and FTPS, with cloud tiering that caches hot data locally.

Compare Azcopy, Azure Storage Explorer, and Azure File Sync to streamline, automate, and optimize file transfers across on premises, cloud, and hybrid environments.

Explore best practices for Azure file movement by using AzCopy for automation, Azure Storage Explorer for visual transfers, and Azure File Sync for hybrid synchronization to maximize efficiency and security.

Review Azure storage fundamentals, compare blob storage and Azure files for unstructured and hybrid data, apply storage tiers, redundancy, and tools like AzCopy and Azure Data Box to optimize costs.

Explore azure identity, access, and security with Microsoft Entra ID, covering single sign-on, multi-factor, passwordless authentication, RBAC, conditional access, zero trust, defense in depth, and Defender for cloud.

Explore Microsoft Entra ID, formerly Azure Active Directory. A cloud-based identity and access management solution enabling secure sign-ins, unified organization-wide identity, and hybrid integration with on-premises Active Directory.

Explore Azure domain services with intra domain services, a managed solution for migrating legacy on-prem apps to the cloud, supporting Kerberos, NTLM, and automating domain controllers, backups, and data-at-rest encryption.

Explore how authentication verifies identity across people, devices, and services, balancing security and user convenience. Learn Azure methods from passwords to SSO, MFA, and passwordless options.

Explore how passwordless authentication, biometrics, device-based access, and security keys bridge security and convenience, delivering stronger protection with a seamless user experience.

Explore multi-factor authentication (MFA), a critical security layer requiring multiple identification factors during sign in. Learn how passwords, codes on your phone, and biometric factors create layered protection.

Learn how Azure external identities enable secure collaboration with external users by bringing their own identity and using Azure AD B2C to manage permissions and security policies.

Enable seamless, secure cross-organization collaboration with Azure external identities, including b2b guest access, b2b direct connect, and Azure ad b2c for customer-facing apps.

Discover how Azure AD B2B guest access enables collaboration by inviting guests to sign in with their credentials, while admins conduct access reviews and use Entry ID to remove accounts.

Explore how Microsoft Entra ID uses conditional access to enforce adaptive, context-aware security with real-time identity signals like device, location, risk, and application, guiding MFA decisions.

Explore how conditional access operates in three phases—signal collection, decision making, and enforcement—and adapts in real time to determine when to grant access, require MFA, or block.

Apply conditional access to fine-tune security across scenarios by enforcing multifactor authentication, restricting to approved apps, and ensuring device compliance and trusted networks.

Discover how Azure role-based access control maps users to roles, applies permissions at a scope, and auto-enforces access as new resources are added.

Explore how role based access control permissions apply across management groups, subscriptions, resource groups, and resources, with higher level scopes cascading to child scopes for scalable, centralized access.

Azure RBAC enforces permissions via the Azure Resource Manager by evaluating role assignments at the relevant scope for portal, PowerShell CLI, or APIs, using an allow model with additive permissions.

Learn how the zero trust model verifies access request explicitly, enforces least privileged access with just in time permissions, and assumes breach to segment networks and monitor threats with analytics.

Compare traditional perimeter-based security with zero trust, where every user, device, and access request is untrusted until authenticated, guided by real-time risk signals against evolving threats.

Apply a defense in depth approach by deploying multiple security layers that slow attackers, enable detection and response, and contain breaches through overlapping defenses.

Explore defense in depth across data, application, compute, network, and identity layers. Implement encryption, secure coding, MFA, and access controls to protect Azure environments.

Explore how defense in depth layers safeguard data centers through physical security, biometric controls, and identity protections. Defend compute, application, and data with segmentation, malware protection, encryption, and access controls.

Explore Microsoft Defender for Cloud, protecting Azure native resources like virtual machines and storage with default monitoring, and Azure Arc extends security to on-premises, AWS, and Google Cloud.

Assess, secure, and defend your cloud with Microsoft Defender for cloud through continuous vulnerability scans, tailored security policies, and advanced threat detection and prioritized alerts.

Discover how Microsoft Defender for cloud's Secure Score quantifies your security posture, prioritizes risk-based remediation, and delivers actionable steps including encryption, access policies, and patching to strengthen your Azure environment.

Master azure identity, access, and security with Entra ID, Inter Domain Services, and single sign-on plus MFA. Apply conditional access, RBAC, zero trust, defense in depth, and Defender for cloud.

Explore cost management in Azure by analyzing resource configurations, usage patterns, and geographical considerations to control cloud expenses. Leverage pricing calculator and Microsoft Cost Management to estimate and monitor costs.

Explore factors influencing Azure costs, including resource configurations, consumption patterns, and subscription types, and learn to use the pricing calculator, total cost of ownership calculator, Microsoft Cost Management, and tags.

Learn how Azure shifts from capex to opex, paying only for used resources like virtual machines and storage, and optimize costs through geography, usage patterns, and marketplace purchases.

Explore how Azure resource types, configurations and regions drive costs, with meters tracking compute, storage, and network usage to optimize performance and budget.

Proactively manage Azure resources to avoid idle costs by deprovisioning unused resources, and optimize costs by understanding regional pricing and zone based outbound data charges.

Learn how inbound traffic is free while outbound charges vary by billing zones, and how subscription types from the Azure free trial to enterprise plans help manage cloud costs.

Explore the Azure Marketplace's third-party solutions, from preconfigured virtual machines to application templates, and note Microsoft-certified security and the cost split between resource charges and vendor fees.

Browse, deploy, and manage third-party solutions from the Azure Marketplace, using WordPress as a virtual appliance to illustrate configuring subscription, resource group, VM size, region, and networking.

Explore Azure cost estimation with the pricing calculator and the total cost of ownership calculator, forecasting compute, storage, and network costs, and comparing on premises versus cloud migration.

Leverage the total cost of ownership calculator to compare on-premises and Azure setups, inputting servers, storage, and databases, plus power, cooling, and IT labor costs to reveal cloud savings.

Explore the pricing calculator to estimate Azure costs by adjusting storage tiers and vm sizes, and compare the total cost of ownership for migration, considering power, cooling, and labor.

Navigate the Microsoft cost management tool to monitor Azure resource spending, analyze costs, and set budgets and automated alerts across subscriptions to prevent budget overruns.

Learn to use cost analysis in Microsoft Cost Management to visualize Azure spending by billing cycle, region, and resources, track trends, and forecast future costs to optimize your budget.

Define budgets to set spending thresholds for subscriptions, resource groups, or services, automate cost management, and trigger email alerts when limits are reached to suspend or modify resources.

Monitor Azure spending in real time with cost analysis to detect overspending and trends. Set up alerts and budgets, and suspend services when thresholds are met to optimize costs.

Calculate total cost of ownership for migrating from on premises to Azure using the official TCO calculator, entering servers, storage, and networking to compare costs and savings.

Organize Azure resources with tags as metadata to classify, manage, and track resources across large environments. Improve cost management, operational efficiency, and security and compliance.

Azure tags simplify resource management by grouping resources and enable cost tracking across cost centers, while supporting security, compliance, service level agreements by resource criticality, and workload optimization through automation.

Manage tags across Azure resources using the Azure portal, PowerShell, Azure CLI, Rest API, or Resource Manager templates; enforce tagging rules with Azure Policy to align with operations and finances.

Learn how a name-and-value tagging structure applies to Azure resources, using tags like app name, cost center, owner, environment, and impact level to support management, security, and cost tracking.

Define naming conventions to ensure consistency across resources, then automate tagging with Azure policies or DevOps pipelines, prioritizing mission-critical resources and regularly auditing tags to stay aligned with organizational goals.

Learn how to implement Azure tags to organize resources, track cost, and enforce governance, using cost management tools to group by tags and export reports.

Identify key factors driving Azure costs—resource types, consumption, geography—and use pricing calculator, total cost of ownership calculator, and Microsoft Cost Management with tags for cost control and security compliance.

Describe factors influencing Azure costs and use the pricing calculator, total cost of ownership calculator, and Microsoft cost management tool to estimate, track, and optimize spending with resource tags.

Explore Azure governance and compliance tools to govern your cloud environment with clarity. Maintain control over resources, enforce policies, and monitor compliance at scale.

Describe the role of Microsoft purpose for data governance and its integration with risk and compliance management, and explain Azure policy, resource locks, and the Service Trust Portal for transparency.

Explore how Microsoft Purview delivers integrated data governance across hybrid cloud environments with an end-to-end, unified view of your data estate to support risk, compliance, and secure governance.

Explore Microsoft Purview's automated data discovery, sensitive data classification, and lineage tracking across Azure SQL databases and Amazon S3, to manage risk and meet GDPR, HIPAA, and CCPA.

Explore Microsoft Purview's two solution areas, risk and compliance and unified data governance, and learn how a data map, classification, and lineage support secure, governed access in Microsoft 365.

Explore how Microsoft Purview provides cross-environment data protection, governance, and role-based access control with GDPR and HIPAA compliance, data classification, lineage tracking, and scalable secure access for informed decisions.

Visualizing Microsoft Purview bridges risk and compliance management with unified data governance by integrating data classification, lineage tracking, sensitive data protection within compliance framework across on-premises, Azure, and multi-cloud ecosystems.

Define Azure Policy and initiatives to enforce governance across resources, resource groups, and subscriptions. Leverage inheritance for consistent enforcement, tagging conventions, cost tracking, and audits for security and compliance.

Monitor, block, and remediate non-compliant resources with Azure policy, enforcing tags and configurations, preventing non-compliant deployments, and offering scalable automatic remediation with configurable exceptions.

Integrate Azure Policy with Azure DevOps to enforce governance throughout the development lifecycle, automatically checking compliance in build and release pipelines and failing non-compliant deployments.

Group related policies into initiatives to form a framework that supports a larger governance goal, enabling cohesive monitoring and enforcement across resources for encryption, operating system vulnerabilities, and endpoint protection.

Explore built-in Azure policy templates to enforce tagging, VM size restrictions, and encryption, then customize rules, group them into initiatives, and regularly review compliance to stay aligned with governance.

Apply resource locks in Azure to protect critical resources from accidental deletion or modification. Lock at resource, resource group, or subscription levels for granular control and policy compliance.

Discover two types of resource locks in Azure: delete locks prevent deletion while allowing updates, and read only locks block changes, with inheritance from a resource group or subscription.

Manage azure resource locks with the portal, PowerShell, Azure CLI, or Azure Resource Manager templates, enabling locks at scale; safely modify locked resources by a cautious, two-step removal process.

Protect Azure resource groups from accidental edits or deletions by applying a read-only lock in the Azure portal, ensuring stability and compliance in production environments.

Apply resource locks to virtual machines, databases, and storage accounts to prevent accidental deletion or modification, and regularly audit them to align with governance policies while preserving essential flexibility.

Describe how the Microsoft Service Trust Portal provides security, privacy, and compliance insights through reports, tools, and documentation to build trust.

Navigate the service trust portal to access home-page navigation, pin important documents in My Library, receive update notifications, and download compliance documents from a repository, including audit reports and certifications.

sign in with your Microsoft account to access the service trust portal, review and accept the NDA, then explore compliance materials and security reports.

Access up-to-date compliance reports, certifications, and security updates in the service trust portal for 12 months or until updated, and receive MyLibrary notifications when documents are revised to maintain compliance.

Explore the service trust portal to access compliance reports, download certifications, and evaluate industry-specific security frameworks for regulatory adherence and security best practices.

Sign into the Microsoft Purview Compliance portal to use Compliance Manager and assess your alignment with ISO 27,001, GDPR, NIST 853, and HIPAA, with real-time, environment-specific recommendations.

Explore Azure governance and compliance tools such as Microsoft Purview to organize, classify, and protect data across Azure SQL and Amazon S3, and apply Azure Policy to enforce standards.

Explore tools for managing and deploying azure resources from the portal using azure cli and powershell. Describe azure arc for on-premises and multi-cloud management and arm templates with bicep.

Discover the Azure portal, a unified web console that graphically manages Azure resources, builds and monitors apps, with continuous updates, zero downtime, and resiliency across data centers for high availability.

Learn to automate Azure resource management with Azure PowerShell, using cmdlets and scripts in Cloud Shell or locally on Windows, Linux, or Mac.

Understand how the Azure CLI, a bash-based tool for managing Azure resources with bash commands, provides a streamlined way to interact with the cloud across Windows, Linux, or Mac environments.

Deploy and manage an Azure virtual machine with Azure CLI and Cloud Shell. Create a resource group in West US three and use Ubuntu LTS with repeatable commands for automation.

Explore how Azure Arc extends Azure governance to on premises and multi-cloud resources, using Azure Policy, Azure Security Center, and Azure Monitor to maintain unified policy and compliance.

Centralize management across on-premises and clouds with Azure Arc. Project non-Azure resources into Azure Resource Manager to manage VMs, Kubernetes, and databases from a unified platform with governance and security.

Azure Arc extends Azure to on-premises and multi-cloud resources, enabling governance and monitoring of servers, Kubernetes clusters, data services like SQL Database and Cosmos DB, SQL Server instances, and VMs.

Discover how Azure Arc enables centralized governance, consistent monitoring, and policy enforcement across on-premises, Azure, AWS, and Google Cloud, extending management to non-Azure resources.

Explore how Azure Resource Manager enables deploying and managing resources as a group. Define dependencies to ensure correct order and use ARM templates for consistent deployments across environments.

Define and deploy Azure resources such as virtual machines, storage accounts, and networks using ARM templates, a JSON-based declarative approach that validates configurations and enables parallel provisioning.

Bicep offers a concise, user-friendly alternative to ARM templates. It remains fully compatible with Azure, compiles directly into ARM templates, and supports infrastructure as code.

Explore how Bicep delivers immediate support for new Azure services and APIs, enables reusable modules, and ensures idempotent deployments for consistent, automated infrastructure management of Azure resources.

Discover and manage Azure resources with the Resource Explorer’s visual REST API, inspect virtual machine configurations, and upgrade VM sizes for service discovery and learning before automation.

Review the learning objectives and master tools for managing and deploying Azure resources using the Azure Portal, Azure CLI, PowerShell, and automation scripts across on-premises and multi-cloud setups.