AZ-900 Microsot Azure Fundamentals, Lab & Exam Prep

Onboard your organization to Azure by creating an account, selecting a subscription, provisioning an Azure Active Directory tenant, then grasp the subscription–AAD tenant relationship, license options, and domain setup.

Create a new Azure Active Directory tenant in the Azure portal by naming the organization, choosing Australia, and linking it to a subscription.

Map the newly created Azure Active Directory tenant to the Tank Cloud Technologies subscription in the Azure portal. Then grant yourself ownership via IAM to resolve billing privileges.

Purchase and own a custom domain, verify ownership with DNS records (MX or TXT), then map it to Azure Active Directory and set it as primary for user logins.

Onboard 200 employees into Azure Active Directory using a bulk CSV upload. Employees span US, Canada, Australia, and UK; learn bulk templates, invites, and future role-based access control provisioning.

Explore how Azure infrastructure is organized into fault domains, availability sets, data centers, availability zones, and regions to achieve redundancy and meet enterprise SLAs, with cost considerations.

Provision a storage account for backup data with the cool access tier, 15-day soft delete, and geo-redundant options, supporting table, queue, file share, and data lake.

Explore Azure storage accounts to store data in the cloud—disks, file shares, blobs, and tables—accessible via http and https, with durable data, highly available, highly secured, and scalable storage.

Explore Azure table storage as a no-sql solution for hosting non-relational data via http, with storage accounts, tables, entities, 252 properties, row key, partition key, timestamp, and table url patterns.

Explore Azure storage access tiers, hot, cool, and archive, and learn to configure them in the Azure portal or Azure Storage Explorer, applying per-file tiers based on access needs.

Create and manage an Azure table in the Azure portal to store employee records. Understand partition key and row key; add entities with department and date of birth.

Learn to interact with Azure blob storage using a C# program. Connect via a storage account connection string, use the Azure storage blobs NuGet package, and manage containers and blobs.

Discover how to use Azure Storage Explorer to manage storage accounts, browse subscriptions, and upload or download files within blob containers, including invoices.

Explore how Docker enables containerization by packaging applications as images for portable containers, and learn to build, publish, and run them with registries and orchestrators like Kubernetes.

Discover Azure app service, a managed web app hosting platform supporting multiple languages and containers. Leverage built-in devops, scaling, and deployment slots for testing and deployment.

Explore the Azure pricing calculator to estimate infrastructure costs, compare virtual machine configurations, add resources like App Service, and understand cost management for Azure deployments.

Discover how reserved instances and Azure hybrid benefits reduce long-term costs by committing to one or three years and using existing enterprise licenses.

Azure advisor, a cloud advisor in the Azure portal, offers recommendations across five areas: reliability, security, performance, cost, and operational excellence—to optimize costs, including right-sizing VMs and cross-region restore suggestions.

Configure a site availability test in azure application insights to monitor the website 24/7 and alert via email to admin at azure labs.xyz; use an action group to sms 041234567.

Learn to enable and configure Azure Application Insights for a dotnet core web app, turning on diagnostics, interop, profiler, snapshot debugger, variable capture, and SQL commands, with deployment verification.

Analyze application insights data by adding four metrics: server request, failed requests, processor time, and availability to a chart, switch chart types, and pin it to the dashboard for monitoring.

Explore how dos commands map to native PowerShell commands via aliases, such as cls to clear-host, and learn how to use aliases to manage Azure resources in PowerShell.

Learn Azure PowerShell command naming patterns to create new resources with new-az, update with set-az, and remove with remove-az, using examples like storage accounts, virtual machines, and virtual networks.

master azure powershell command discovery via autocomplete and get-command with wildcards to locate resource creation commands like New-AzVM for virtual machines and New-AzPrivateDnsZone for private DNS zones.

Learn the Azure PowerShell patterns for creating, updating, and deleting resources. Use New-Az, Set-Az, and Remove-Az commands with examples like storage accounts, virtual machines, and virtual networks.

Engage with multiple quizzes aligned to the AZ-900 exam objectives, each presenting a problem-solving scenario to choose the right approach and tool.

Evaluate Azure storage tiers for long-term backups; avoid the cool tier, and select the archive tier for low-cost, long-term storage.

Learn to create virtual machines via command line interface on Android devices using Azure Cloud Shell in the Azure mobile app, with options for Bash or PowerShell.

Learn how Azure storage access tiers work: hot or cool can be configured at the storage account level, while archive must be configured at the blob level.

Discover how to set up an Enterprise Azure subscription through the Enterprise Agreement portal, log in with an Azure account, and associate subscriptions for volume discounts.

Clarify which Azure tool provides security recommendations for the Azure Active Directory environment: Azure Defender for cloud is correct, while Azure Advisor only displays Defender for cloud’s security suggestions.

Azure free accounts do not include the standard support plan. Default is basic, while other plans like developer, standard, and professional direct require separate purchases.

Learn to launch cloud shell in the Azure portal, choose between bash and PowerShell, and provision a storage account to run scripts within the browser.

Use the Azure Price Calculator to estimate upfront costs for the planned deployment of 15 virtual missions, five app services, and three storage accounts before provisioning.

Leveraging Microsoft Defender for Identity, enforce custom policies that prompt password changes for risky sign-ins from unseen IP addresses.

Choose Microsoft Entra Privileged Identity Management to support and configure multifactor authentication for Azure deployments and multiple IT solutions.

Discover how RBAC permissions set at a higher level—resource group, subscription, or management group—are inherited by all child resources, unless a specific RBAC is configured at the resource level.

Discover how tag inheritance works in Azure: tags on a resource group do not propagate to individual resources, while permissions at the resource group level are inherited.

Confirm that you can use an Azure free account for production workloads, leveraging the $200 benefit, with charges applying only after exceeding that limit.

Learn how to ensure application availability during data center level failures in Azure by applying fault tolerance, contrasting with elasticity, scalability, and low latency.

Azure free account provides 55+ products that are always free, plus a free start with $200 credit and pay-as-you-go pricing; hybrid benefits are not available.

Identify the right Azure management tools for requirements: service trust portal for compliance and audits, service health for outages and maintenance, and TCO calculator and pricing calculator to compare costs.

Choose Azure Machine Learning Studio to build, test, and deploy a predictive analytics solution in Azure, with visualization and metrics to analyze and optimize experiments.

Use the Azure portal's Help + support option to view service health across your subscription, identifying ongoing maintenance or service issues across regions with filters for subscription and region.

Azure App Service, as a platform-as-a-service, does not grant access to the underlying operating system; Azure owns the OS, while you host apps and view logs.

Explore decommissioning private cloud servers by migrating all workloads to the public cloud, enabling complete decommissioning while preserving data, applications, and disks in cloud environments.

Deploy and manage identical virtual machines in a load balanced environment using Azure Virtual Machine Scale Sets, and configure auto scale rules to scale up or down.

Deploy a WordPress solution quickly in Azure by using the Azure Marketplace to select a preconfigured WordPress option and deploy via the deployment wizard to Azure App Service.

Learn how to use Azure Application Insights to monitor a web app deployed in App Service, detect anomalies, and analyze usage with SDKs and visual dashboards.

Azure offers flexible capex and opex options, including pay-as-you-go and reserved instances, enabling cost savings of 40–50% for long-term use.

Identify that two availability zones are sufficient to achieve 99.99% SLA for an application hosted on virtual machines across availability zones.

Compare private cloud and public cloud to determine security and privacy levels. Private cloud, owned by the organization, offers the highest level of security.

Manage cloud identities using Azure's identity management solutions, including Microsoft Entra ID (Azure Active Directory), to control user access.

Configure a site-to-site VPN by creating a local network gateway in Azure that represents your on-premises location for routing and connectivity.

Evaluate azure platform as a service options for hosting web applications, and select Azure App Service as the recommended choice among Azure App Insights, Azure Logic Apps, and Azure Databricks.

Identify cost-saving opportunities in Azure Advisor to resize or shut down underutilized virtual machines, apply oversized sku recommendations, and consider burstable options to reduce Azure costs.

Recommend archive tier and cool tier for infrequently accessed blob storage data, explaining that archive offers long-term, very low cost while cool provides infrequent access at a higher cost.

Confirm that storage accounts in azure support three terabytes and five million files, since they offer up to five petabytes of capacity with no limit on the number of files.

Implement role based access control in Azure to assign groups of users to specific roles such as reader or contributor, and create custom roles to segregate access to resources.

Learn how to use Azure File Sync with cloud tiering to keep frequently accessed files replicated locally while infrequently accessed files remain in the cloud.

Explore how read-access geo-redundant storage enables read access to a secondary region during a region-wide outage by replicating data from a primary storage account.

Explore the azure platform as a service option for sql server RDBMS, focusing on azure sql database as the recommended paas solution over virtual machine based instances.

Learn how to grant a specific user read access to a single Azure storage account (invoice Storage) using Azure RBAC, without affecting other accounts or granting write access.

Tag resources with department metadata using Azure tags to organize resources and monitor billing for department-level virtual machines, enabling filtering and querying by department, owner, or environment.

Open an online customer support request with Microsoft to raise the quota at no charge when your pay as you go plan hits the limit on virtual machines.

Learn how to achieve maximum uptime for 45 virtual machines by using availability zone and availability sets, while noting that resource groups and resource tags do not apply.

Protect Azure resources from compromised identities and insider threats with Microsoft Defender for Identity, integrated with Defender XDR to monitor on-prem and cloud identities, detect and investigate attacks, and respond.

Explore how to implement an enterprise messaging solution in Azure using Service Bus to integrate multiple applications, while differentiating it from API Management, Azure Data Factory, and Logic Apps.

Use azure policies to enforce that resources are created only in US regions, ensuring security and data compliance. Customize an allowed locations policy to constrain VM creation to approved locations.

Discover how Azure reserved instances cut long-term virtual machine costs, offering up to 40–50% off pay-as-you-go for four-year deployments of 50 VMs.

Identify disaster recovery strategies to restore applications after a region-wide failure, focusing on disaster recovery concepts and eliminating unrelated agility, scalability, and elasticity.

Learn to create Azure virtual machines using the Azure CLI on Windows, choosing between PowerShell and Command Prompt to run scripts and interact with Azure resources.

Explore common paas and iaas scenarios in Azure, including deployment frameworks and data analysis tools as platform as a service, and scalable storage as infrastructure as a service.

Map Azure cloud benefits to scalability, reliability, predictability, and manageability—adjust resources, recover from failures, forecast costs, and manage resources via web portal, CLI, or PowerShell.

Learn how b2b collaboration via Microsoft Entra External ID lets you invite guest users from external organizations to access your Azure resources using their own credentials, without creating new accounts.

Learn how to monitor application availability and performance with Log Analytics, Application Insights, and Azure Monitor, including email alerts on thresholds and visualization across App Service and virtual machines.

Map on-premise to Azure hybrid cloud by aligning Azure VPN for encrypted traffic, Microsoft Entra ID for user management, Defender for Cloud for security, and ExpressRoute for high-speed migration.

Utilize Azure management groups at the top of the hierarchy to manage permissions globally. Assign access at the management group level and have it inherited by all subscriptions.

Learn how Azure Functions provide a serverless platform as a service in Azure, running small single-task code without provisioning new infrastructure.

Learn why an Azure subscription must be authenticated first, then use Azure role-based access control to grant access to resources under that subscription.

Availability zones do not support every Azure region or every SKU. Consult the documentation to determine exact region and service coverage.

Learn how availability zones protect against data center level failures in disaster recovery, and compare them with availability sets and other types of availability zones.

Explore how Azure Active Directory supports multiple authentication methods, including SMS as a second factor for legacy devices.

Discover how to retrieve a blob from Azure storage archive by initiating rehydration to an online tier (hot or cool) for read, edit, and publish workflows.

Explore how Azure Active Directory provides user authentication and resource access as a fully managed service, eliminating the need for any domain controller on premises or Azure VMs.

Group Azure policies into an initiative definition to achieve a single goal by creating an initiative and adding multiple policies, such as monitoring for Microsoft Defender for Cloud.

Protect Azure resources from DDoS attacks with Azure DDoS protection, featuring two tiers: network protection and IP protection, easy setup with zero app tweaks and 24/7 vigilance.

Azure storage costs vary by region, even for the same resource like storage accounts or virtual machines, as shown when comparing one terabyte across two regions. Explore the Azure pricing calculator to see how switching regions changes regional prices for storage.

Leverage Azure Active Directory, now Microsoft Entra ID, to authenticate users to Microsoft Office 365 and other SaaS apps, a fully supported cloud-based identity and access management solution.

Explore Azure pricing model through migrating on-premise infrastructure to Azure and building a business justification. Learn how consumption-based model provides no upfront cost and pay-as-you-go resource scaling.

Discover how to secure Azure portal logins with a second-factor authentication using Azure multi-factor authentication, including options like text messages or authenticator app codes.

Explain how migrating on premise resources to Azure justifies cloud adoption by using capex and opex, highlighting operating expenditure to pay only for used infrastructure.

Discover how to manage your Azure storage resources from desktop using Azure Storage Explorer, a Windows-based tool to explore storage accounts, blobs, and files.

Enforce vm creation control by applying Azure role-based access control to grant the Virtual Machine Administrator team full permission, while using policies for region restrictions.

Learn how to create users in Azure Active Directory using Microsoft Entra ID in the Azure portal, locating the Microsoft Entra ID option via the hamburger menu.

Identify the Azure regions closest to users to deploy resources such as storage accounts and virtual machines, ensuring geographic proximity using region selection.

examine the cost impact of removing unused public ip addresses and how deleting ten of twenty-five addresses yields cost savings for the subscription.

Discover how to monitor Azure costs with the Azure Cost Management feature, visualize spending, and drill down into resource-type usage across your subscription.

Discover how moving to Azure public cloud reduces capital costs and improves reliability through pay-for-usage, higher SLA, and redundancy options like secondary backups and regions.

Leverage Azure Virtual Machines to gain full control over the underlying operating system under infrastructure as a service, enabling maintenance tasks like patching and installing software.

Explain how a stopped virtual machine stops compute costs while the operating system disk continues to incur charges, so disk costs remain.

Identify the Azure service to build, deploy, and manage containerized applications, choosing Azure Kubernetes as the solution among Azure Container Instance and Azure Container Apps.

Assess cost implications for a stopped Azure virtual machine: private IP addresses incur no charges, while public IP addresses may incur costs.