AZ-900 Microsoft Azure Fundamentals with SIMULATIONS

Navigate assignments with simulations hosted off Udemy, opening links in a new tab and submitting results to proceed. Completion toward the certificate depends on watching all videos.

learn how to create a free azure account, claim $200 credit for 30 days, access free services for 12 months, and set up a pay-as-you-go option via portal.azure.com.

Convert a personal Azure account to a business account by updating the user principal name in Microsoft Entra ID, a custom domain, and sign in with the new business account.

Activate a Microsoft intra ID p2 license to access advanced features like risk-based conditional access. Start a free trial via admin.microsoft.com or marketplace, or use portal.azure.com to explore all products.

Define cloud computing as hosting services off-premises through virtualization, enabling elastic, scalable resources. Learn how IaaS, PaaS, and SaaS reduce hardware management and cost.

Explore the shared responsibility model across on premise, IaaS, PaaS, and SaaS in Azure and Microsoft 365, clarifying which layers you and the provider manage, from hardware to identity.

Explore public, private, and hybrid cloud models, comparing control, security, and costs; learn how pay-as-you-go, elasticity, and data separation shape use cases and compliance decisions.

Explore the consumption-based cloud model, a pay-as-you-go approach with no upfront cost that lets you scale resources and pay only for actual cpu, memory, and storage usage.

Explore how region, currency, and hourly versus monthly pricing affect cloud costs, compare pay-as-you-go with reserved enterprise plans, and use the Azure pricing calculator.

Analyze high availability and scalability in Azure by focusing on uptime, SLA, and the role of availability zones and availability sets, then compare vertical and horizontal scaling with scale sets.

Cloud security and governance centralize with automated monitoring, risk-based access, and device compliance in Azure. Learn how identity protection, conditional access, MFA, and sensitivity labels strengthen cloud defenses.

Explore distinction between management of the cloud and management in the cloud, managing Azure resources via blades, portal, Cloud Shell, PowerShell, and Azure CLI, plus API connectors for cross-cloud integration.

IaaS is infrastructure as a service, where the provider hosts hardware and data center. Under the shared responsibility model, you manage the OS, networking, and applications for VMs in portal.azure.com.

Describe platform as a service with Azure Active Directory and App Service plans, focusing on per-user licensing and how PaaS manages operating systems for simplified web hosting.

Describe software as a service (SaaS) and how Microsoft hosts the hardware and software, so users can use Word, Excel, and PowerPoint online with no configuration.

Compare IaaS, PaaS, and SaaS to match control and management needs, from VM OS control to platform-hosted apps and ready-to-use software, with guidance on cost and use cases.

Explore how Azure regions host data centers, support region pairs for failover, and manage sovereign regions to meet compliance, data residency, and data travel rules.

Describe how availability zones in each Azure region provide separate data centers with independent power, networking, and cooling, enabling synchronous or asynchronous replication of virtual machines across zones.

Treat resource groups as containers for Azure resources; they cannot be nested, but you can move resources between groups, create them under a subscription, and analyze cost per group.

Describe how subscriptions act as your payment method for resources in Azure, enable adding multiple subscriptions with different payment methods, and control access as contributors or owners.

Learn how to organize Azure subscriptions with management groups, create and name groups, assign subscriptions, and set role privileges in the Azure portal.

Grasp the azure hierarchy: management groups organize policies and compliance across subscriptions; resource groups host diverse resources across regions, with policies applying downward and quotas controlling spend.

Learn how to redo simulations after completing an assignment by navigating to summary, returning to the assignment, opening instructions, and accessing the simulation link.

Explore Azure compute types by comparing virtual machines (IaaS) and containers (PaaS) with Azure Container Instances and AKS, and discover serverless Azure Functions for development.

Explore creating an Azure virtual machine from the portal, choose a resource group and Windows Server 2022 data center image, configure a VNet and RDP, and reference the Azure Calculator.

Discover how to enable high availability for Azure VMs by using availability sets, zones, or virtual machine scale sets during creation, and learn about sla, fault domains, and update domains.

Explore Azure virtual machine scale sets, enabling elasticity and auto load balancing to scale out, instantiate more virtual machines as traffic increases, and manage with min and max instances.

Describe how a virtual machine uses a virtual network, subnet with DHCP, and a NIC connected to that network, plus an NSG and optional public IP and OS disk.

Explore Azure App Service plans for hosting web apps and containers, compare pricing tiers, auto scaling, and ease of use versus Kubernetes, with Windows and Linux options.

Explore Azure virtual networks and subnets, address spaces, and traffic control concepts, including VNet, VNICs, DHCP, NSG, peering, hub-and-spoke designs, and on-premises connectivity via VPN gateway or ExpressRoute.

Create virtual networks and subnets in Azure by configuring a resource group, naming VNets, setting address spaces like 10.1.0.0/16 and 10.1.1.0/24, and adding subnets such as subnet 1a.

Explore the difference between Azure service endpoints and private endpoints, enabling direct, internet-free access from virtual machines to storage accounts, with region-wide versus one-to-one connections.

Learn how Azure storage accounts provide blobs, file shares, queues, tables, and disks with standard and premium options, endpoints, and budgeting via the Azure Calculator.

Create an Azure storage account in the portal, choosing a new resource group, a unique name, and East US region, with general purpose standard and hot or cool access tiers.

Learn how Azure file shares replace on-premise file servers using SMB and port 445 to map drives, choose storage tiers, and manage access.

Explore Azure storage redundancy, including LRS, zone redundant storage (XZ), and geo redundant storage (GRS) with read access, and understand synchronous vs asynchronous replication across primary and secondary regions.

Explore file transfer options to Azure storage with Storage Explorer and AZ Copy, including uploading via blob containers and using SAS tokens.

Learn how to move large data sets to Azure storage using import/export jobs and shipping hard drives, with verification via journal files and hash codes to ensure data integrity.

Explore the foundations of on-premise active directory services (LDAP, Kerberos, GPOs) and how Azure AD, Azure AD Domain Services, and Microsoft Entra enable hybrid solution.

Describe Microsoft Entra ID authentication for Azure and Microsoft 365, including password, passwordless, MFA, and phishing-resistant methods, with OAuth 2.0, OpenID Connect, SAML, and WS-Federation, plus tokens and FIDO2 passkeys.

Explore authentication methods in Intra ID, including primary and secondary options, passwordless sign-in with Windows Hello and FIDO2, MFA, SSPR, and tools like Microsoft Authenticator for Azure and Microsoft 365.

Master how to create single users, bulk users, and external guest access in Azure Active Directory using the portal, with CSV bulk import, and optional PowerShell or Azure CLI workflows.

Understand role-based access control (RBAC) in Azure and Microsoft 365 by assigning roles, enforcing least privilege, and using privileged identity management (PIM) for just in time access.

Explore how Azure RBAC implements role-based access control through security principals, role definitions, and assignments, with privileged identity management, MFA requirements, and temporary access options.

Explore how Azure role-based access control uses the IAM blade to apply scope from management groups to subscriptions, resource groups, and resources by assigning roles like contributor or reader.

Explore the zero trust model: verify everything explicitly, assume breach, and apply least privilege with just-in-time and just-enough access, PIM, conditional access, and identity protection.

Apply defense in depth in Azure by layering security around resources, from virtual machines to networks, with updates, Azure Firewall, NSGs, ACLs, RBAC, and DDoS protection.

Explore Microsoft Defender for Cloud's single pane of glass dashboard in Azure to monitor security posture, secure score, and actionable recommendations such as enabling MFA and compliance and workload protections.

Explore cost drivers in Azure, including resource types, usage meters, subscriptions, and licenses. Learn how region, VM size, disks, storage tier, and turning resources on or off affect bills.

Learn to use Azure pricing calculator for cost analysis, budgeting, and alerts, and explore subscriptions and advisor recommendations to optimize spending.

Learn how tags attach text name-value pairs to Azure resources and resource groups, enabling search, filtering, and contextual data like created by and billing codes for budgeting and administration.