AZ-900 Microsot Azure Fundamentals, Lab & Exam Prep

Onboard your organization to Azure by creating an account, selecting a subscription, provisioning an Azure Active Directory tenant, then grasp the subscription–AAD tenant relationship, license options, and domain setup.

Create a new Azure Active Directory tenant in the Azure portal by naming the organization, choosing Australia, and linking it to a subscription.

Map the newly created Azure Active Directory tenant to the Tank Cloud Technologies subscription in the Azure portal. Then grant yourself ownership via IAM to resolve billing privileges.

Purchase tank.xyz from GoDaddy and prepare to map it to the initial Azure AD domain tank.on.microsoft.com.

Purchase and own a custom domain, verify ownership with DNS records (MX or TXT), then map it to Azure Active Directory and set it as primary for user logins.

Onboard 200 employees into Azure Active Directory using a bulk CSV upload. Employees span US, Canada, Australia, and UK; learn bulk templates, invites, and future role-based access control provisioning.

Create a resource group in Australia East, provision a lab user at Azure Labs XYZ, and grant that user the contributor role to manage resources within the group.

Explore how Azure infrastructure is organized into fault domains, availability sets, data centers, availability zones, and regions to achieve redundancy and meet enterprise SLAs, with cost considerations.

Create two Windows Server 2016 virtual machines in the same availability set to guarantee a 99.95% SLA for high availability in Azure.

Design and deploy Nebula prod VNet in Australia east to host 25 servers, with subnets for app, web, and db, CIDR address spaces, and peering for hybrid connectivity.

Create two Azure VMs in the Nebula prod vnet: sql in the db server subnet and web in the web servers subnet, using Windows Server 2019 and B1 with RDP.

Explore network security groups to configure inbound and outbound rules with priorities, and implement rules like allow RDP from a specific IP while denying internet access.

Provision a storage account for backup data with the cool access tier, 15-day soft delete, and geo-redundant options, supporting table, queue, file share, and data lake.

Explore Azure storage accounts to store data in the cloud—disks, file shares, blobs, and tables—accessible via http and https, with durable data, highly available, highly secured, and scalable storage.

Explore Azure table storage as a no-sql solution for hosting non-relational data via http, with storage accounts, tables, entities, 252 properties, row key, partition key, timestamp, and table url patterns.

Explore Azure storage access tiers, hot, cool, and archive, and learn to configure them in the Azure portal or Azure Storage Explorer, applying per-file tiers based on access needs.

Create and manage an Azure table in the Azure portal to store employee records. Understand partition key and row key; add entities with department and date of birth.

Learn to interact with Azure blob storage using a C# program. Connect via a storage account connection string, use the Azure storage blobs NuGet package, and manage containers and blobs.

Discover how to use Azure Storage Explorer to manage storage accounts, browse subscriptions, and upload or download files within blob containers, including invoices.

Explore Azure Files and managed file shares to upload and download data from a storage account using network file shares, PowerShell scripts, and drive letter mapping for seamless Windows access.

Explore how Docker enables containerization by packaging applications as images for portable containers, and learn to build, publish, and run them with registries and orchestrators like Kubernetes.

Demonstrate creating a dotnet console app, building and publishing a docker image to docker hub, and running it as a container, plus a full ERP example with odoo and postgres.

Build a simple Azure function app in the portal that triggers on text file uploads, extracts content, and sends it to the processed file queue for processing.

Discover Azure app service, a managed web app hosting platform supporting multiple languages and containers. Leverage built-in devops, scaling, and deployment slots for testing and deployment.

Explore the Azure pricing calculator to estimate infrastructure costs, compare virtual machine configurations, add resources like App Service, and understand cost management for Azure deployments.

Discover how reserved instances and Azure hybrid benefits reduce long-term costs by committing to one or three years and using existing enterprise licenses.

Learn to classify and govern Azure resources using tags and Azure policy, enforcing mandatory environment and duration tags and automatically appending created on date, with policy definitions and assignments.

Azure advisor, a cloud advisor in the Azure portal, offers recommendations across five areas: reliability, security, performance, cost, and operational excellence—to optimize costs, including right-sizing VMs and cross-region restore suggestions.

Configure a site availability test in azure application insights to monitor the website 24/7 and alert via email to admin at azure labs.xyz; use an action group to sms 041234567.

Learn to enable and configure Azure Application Insights for a dotnet core web app, turning on diagnostics, interop, profiler, snapshot debugger, variable capture, and SQL commands, with deployment verification.

Analyze application insights data by adding four metrics: server request, failed requests, processor time, and availability to a chart, switch chart types, and pin it to the dashboard for monitoring.

Explore how dos commands map to native PowerShell commands via aliases, such as cls to clear-host, and learn how to use aliases to manage Azure resources in PowerShell.

Explore PowerShell variables beyond the basics by using the pipe operator to format output as a table, select specific columns, and index into the resources collection.

Learn Azure PowerShell command naming patterns to create new resources with new-az, update with set-az, and remove with remove-az, using examples like storage accounts, virtual machines, and virtual networks.

master azure powershell command discovery via autocomplete and get-command with wildcards to locate resource creation commands like New-AzVM for virtual machines and New-AzPrivateDnsZone for private DNS zones.

Learn to locate a PowerShell command and use Git help to view its name, syntax, parameters, and examples, then copy an example to create a new AZ private DNS zone.

Learn the Azure PowerShell patterns for creating, updating, and deleting resources. Use New-Az, Set-Az, and Remove-Az commands with examples like storage accounts, virtual machines, and virtual networks.

Master essential PowerShell commands and features for Azure resource management, including ad hoc scripts, control structures, functions, and creating cmdlets, aligned with exam-focused tips.

Engage with multiple quizzes aligned to the AZ-900 exam objectives, each presenting a problem-solving scenario to choose the right approach and tool.

Evaluate Azure storage tiers for long-term backups; avoid the cool tier, and select the archive tier for low-cost, long-term storage.

Learn to create virtual machines via command line interface on Android devices using Azure Cloud Shell in the Azure mobile app, with options for Bash or PowerShell.

Identify the right Azure support plan to secure architecture guidance from Microsoft, selecting the professional direct plan to access delivery managers for 100% perfect architecture.

Learn how Azure storage access tiers work: hot or cool can be configured at the storage account level, while archive must be configured at the blob level.

Define authentication as the act of challenging a user to provide legitimate credentials to gain access to Azure resources.

Discover how to set up an Enterprise Azure subscription through the Enterprise Agreement portal, log in with an Azure account, and associate subscriptions for volume discounts.

Confirm that Azure Active Directory handles authentication and implements authorization with role-based access control to restrict access to resources at the resource, resource group, or subscription level.

Discover Azure preview features by using the Azure preview portal at preview.portal.azure.com, access feature documentation, and compare them with general availability in portal.azure.com.

Clarify which Azure tool provides security recommendations for the Azure Active Directory environment: Azure Defender for cloud is correct, while Azure Advisor only displays Defender for cloud’s security suggestions.

Use Azure Advisor to guide and improve the Azure environment by analyzing resources with usage telemetry and recommending cost, performance, reliability, and security improvements, with Microsoft Defender for Cloud integration.

Azure free accounts do not include the standard support plan. Default is basic, while other plans like developer, standard, and professional direct require separate purchases.

Learn to launch cloud shell in the Azure portal, choose between bash and PowerShell, and provision a storage account to run scripts within the browser.

Propose Azure scale sets to deploy 60 identical VMs, 40 Windows and 20 Ubuntu, in a load balanced environment, enabling the least administrative effort and auto scale across instances.

Recommend a cost-effective Azure data storage solution for three terabytes accessed infrequently via Power BI by using Azure Data Lake Storage Gen2, which integrates with Power BI.

Use Azure policy to enforce that every resource in the subscription includes a tag named company and defaults to tag cloud during creation.

Use the Azure Price Calculator to estimate upfront costs for the planned deployment of 15 virtual missions, five app services, and three storage accounts before provisioning.

Leveraging Microsoft Defender for Identity, enforce custom policies that prompt password changes for risky sign-ins from unseen IP addresses.

Learn to deploy Azure resources efficiently using infrastructure as code with Azure Resource Manager templates, a source code approach to configure and deploy multiple identical resources.

Learn how to use Azure Cloud Shell to run PowerShell and Bash scripts in the browser to create virtual machines in Azure, even when Linux PowerShell versions are insufficient.

Identify the mandatory resources for creating an Azure virtual machine, including the OS disk, Azure virtual network, and network interface card, while noting optional data disks and public IPs.

Choose Microsoft Entra Privileged Identity Management to support and configure multifactor authentication for Azure deployments and multiple IT solutions.

Select the no sql solution for a data storage design with no schema or index management and low latency, namely Azure Cosmos DB.

Explore how an organization consuming SaaS selects its responsibility, focusing on configuring the application settings and client-specific configurations while noting no responsibility for scalability, high availability, or hardware maintenance.

Explore Azure PowerShell compatibility across operating systems by comparing PowerShell 5.x on Windows with cross-platform 6.2.4+ and the recommended PowerShell 7.x for Linux and Mac, and assess VM creation scripts.

Discover how RBAC permissions set at a higher level—resource group, subscription, or management group—are inherited by all child resources, unless a specific RBAC is configured at the resource level.

Discover that a resource group is not region-bound and can house resources from multiple regions, enabling four virtual machines in different regions within a single group.

Recommend upgrading from the free Azure Active Directory plan to the P1 plan (Microsoft Entra ID P1) to enable self-service password reset, which is unavailable on the free tier.

Discover how tag inheritance works in Azure: tags on a resource group do not propagate to individual resources, while permissions at the resource group level are inherited.

Confirm that you can use an Azure free account for production workloads, leveraging the $200 benefit, with charges applying only after exceeding that limit.

Identify the deployment category for virtual machines and confirm it falls under IaaS, distinguishing it from PaaS, SaaS, and FaaS.

Learn to monitor web applications on Azure with Application Insights, track usage and health through rich dashboards, code maps, and telemetry via SDKs across languages and logging frameworks.

Even when two Azure virtual machines are stopped, costs accrue for resources like the operating system disk, billed from the storage account even if the VM is off.

Learn how to ensure application availability during data center level failures in Azure by applying fault tolerance, contrasting with elasticity, scalability, and low latency.

Route sign-in activity logs from Azure Active Directory to Azure Monitor using diagnostic settings in Microsoft Enter ID for long-term retention and archiving, with security information and event management tools.

Azure free account provides 55+ products that are always free, plus a free start with $200 credit and pay-as-you-go pricing; hybrid benefits are not available.

Identify the right Azure management tools for requirements: service trust portal for compliance and audits, service health for outages and maintenance, and TCO calculator and pricing calculator to compare costs.

Choose Azure Machine Learning Studio to build, test, and deploy a predictive analytics solution in Azure, with visualization and metrics to analyze and optimize experiments.

Use the Azure portal's Help + support option to view service health across your subscription, identifying ongoing maintenance or service issues across regions with filters for subscription and region.

Azure App Service, as a platform-as-a-service, does not grant access to the underlying operating system; Azure owns the OS, while you host apps and view logs.

Explore decommissioning private cloud servers by migrating all workloads to the public cloud, enabling complete decommissioning while preserving data, applications, and disks in cloud environments.

Deploy and manage identical virtual machines in a load balanced environment using Azure Virtual Machine Scale Sets, and configure auto scale rules to scale up or down.

Deploy a WordPress solution quickly in Azure by using the Azure Marketplace to select a preconfigured WordPress option and deploy via the deployment wizard to Azure App Service.

Explore deploying small, short-lived code in Azure for microservices with Azure Functions, a serverless hosting solution that lets you write less code, maintain less infrastructure, and save costs.

Learn how to use Azure Application Insights to monitor a web app deployed in App Service, detect anomalies, and analyze usage with SDKs and visual dashboards.

Azure offers flexible capex and opex options, including pay-as-you-go and reserved instances, enabling cost savings of 40–50% for long-term use.

Identify that two availability zones are sufficient to achieve 99.99% SLA for an application hosted on virtual machines across availability zones.

Compare private cloud and public cloud to determine security and privacy levels. Private cloud, owned by the organization, offers the highest level of security.

Identify the right Azure management tools for requirements, including Azure Advisor for well-architected recommendations, Azure Policy for enforcement, Microsoft Purview for data governance, and Microsoft Defender for Cloud.

Manage cloud identities using Azure's identity management solutions, including Microsoft Entra ID (Azure Active Directory), to control user access.

Learn to manage azure resources across Windows 10, Ubuntu, and Mac OS using Azure CLI, Azure PowerShell, and Azure Portal, with OS-specific compatibility requirements.

Identify the Azure service matching each description: Service Fabric for microservices, App Service for web apps and APIs, Container Instances for isolated containers, and Virtual Machine for traditional hosting.

Evaluate the key cost considerations when migrating a public-facing website from on-prem to Azure, highlighting monthly hosting fees and that VPN connectivity is not required.

Mount a network drive across on-premises Windows machines by using Azure Storage Account File Service, enabling access to common files with a simple PowerShell script over the SMTp protocol.

Configure a site-to-site VPN by creating a local network gateway in Azure that represents your on-premises location for routing and connectivity.

Evaluate azure platform as a service options for hosting web applications, and select Azure App Service as the recommended choice among Azure App Insights, Azure Logic Apps, and Azure Databricks.

Learn that Azure App Service includes basic, free Microsoft support with every service. Upgrade to a paid plan such as Standard or Professional Direct for architecture and deployment guidance.

Discover how the Microsoft Q&A forum offers support for Azure free accounts and non production proof of concept work, accessible to everyone without a paid subscription.

Scale up Azure App Service by upgrading the App Service plan tier to gain more CPU, memory, and features, and by changing the pricing tier for higher performance.

Explain why you cannot select a custom secondary region for GRS geo-redundant storage; region pairs are fixed by Microsoft, with workarounds to back up data elsewhere.

Identify cost-saving opportunities in Azure Advisor to resize or shut down underutilized virtual machines, apply oversized sku recommendations, and consider burstable options to reduce Azure costs.

Learn how Azure Arc centralizes management of multi-cloud and hybrid environments by bringing on-premises and other clouds into the Azure portal, enabling unified control of VMs, Kubernetes clusters, and databases.

Map SQL Server on Azure VM requirements to right services, including auto shutdown, Azure Hybrid Benefit, network security group, firewall, VNet with NSG, and Azure Advisor for cost optimization right-sizing.

Examine valid authentication methods for multi-factor authentication in Azure, including Fido2 security key and OAuth software tokens as listed for Microsoft enter ID.

Discover how to check a virtual machine’s health in the Azure portal using resource health, view current status and health history, and access troubleshooting and monitoring options.

If your organization is acquired, transfer the subscription ownership via the Azure portal; no Microsoft support is needed, and only the building administrator can perform the transfer.

Learn to securely store and retrieve secrets with Azure Key Vault, avoiding credentials in config files. Use managed identities for machine-to-machine access to secrets like connection strings and api keys.

Recommend archive tier and cool tier for infrequently accessed blob storage data, explaining that archive offers long-term, very low cost while cool provides infrequent access at a higher cost.

Confirm that storage accounts in azure support three terabytes and five million files, since they offer up to five petabytes of capacity with no limit on the number of files.

Use Azure Firewall to configure port range access and priority-based security rules, with rule collections processed in order from lower to higher priorities.

Implement role based access control in Azure to assign groups of users to specific roles such as reader or contributor, and create custom roles to segregate access to resources.

Learn how to use Azure File Sync with cloud tiering to keep frequently accessed files replicated locally while infrequently accessed files remain in the cloud.

Explore how read-access geo-redundant storage enables read access to a secondary region during a region-wide outage by replicating data from a primary storage account.

Explore the azure platform as a service option for sql server RDBMS, focusing on azure sql database as the recommended paas solution over virtual machine based instances.

Learn how to grant a specific user read access to a single Azure storage account (invoice Storage) using Azure RBAC, without affecting other accounts or granting write access.

Compare the monthly cost of identical vm sizes across regions, and use the pricing calculator to check current region-specific prices, since pricing is dynamic.

Explore passwordless authentication options for Azure Active Directory, including Windows Hello for Business, FIDO2 security keys, and the Microsoft Authenticator app, noting cryptographic keys are not supported.

Tag resources with department metadata using Azure tags to organize resources and monitor billing for department-level virtual machines, enabling filtering and querying by department, owner, or environment.

Learn why an organization cannot create multiple Azure free accounts for a single customer, since the Azure free account offers one free account with $200 credit per new customer.

Migrate on-premise data to Azure with Azure Data Box, a physical data shipping service that securely transfers up to 80 TB per device by courier for quick, reliable cloud onboarding.

Open an online customer support request with Microsoft to raise the quota at no charge when your pay as you go plan hits the limit on virtual machines.

Visualizes a hybrid cloud model linking on-prem servers to Microsoft Azure through a site-to-site VPN tunnel, demonstrating coexistence of data centers in hybrid cloud.

Learn how to achieve maximum uptime for 45 virtual machines by using availability zone and availability sets, while noting that resource groups and resource tags do not apply.

Protect Azure resources from compromised identities and insider threats with Microsoft Defender for Identity, integrated with Defender XDR to monitor on-prem and cloud identities, detect and investigate attacks, and respond.

Explore how to implement an enterprise messaging solution in Azure using Service Bus to integrate multiple applications, while differentiating it from API Management, Azure Data Factory, and Logic Apps.

Use azure policies to enforce that resources are created only in US regions, ensuring security and data compliance. Customize an allowed locations policy to constrain VM creation to approved locations.

Identify elasticity as the cloud's ability to scale resources dynamically to meet demand. Use scale sets to implement elasticity and handle load increases.

Explore how to distribute web content worldwide using Azure Content Delivery Network, caching static content at edge locations to deliver low-latency content from the nearest location.

Discover how Azure reserved instances cut long-term virtual machine costs, offering up to 40–50% off pay-as-you-go for four-year deployments of 50 VMs.

Identify disaster recovery strategies to restore applications after a region-wide failure, focusing on disaster recovery concepts and eliminating unrelated agility, scalability, and elasticity.

Use Azure Resource Manager templates to declare dependencies and deploy resources in the correct order, ensuring dependent resources are created first before the main resource.

Build a data analytics solution with Azure Synapse Analytics, enabling data from warehousing and big data to power Power BI and machine learning through ETL/ELT pipelines, Spark, and Data Explorer.

Learn to create Azure virtual machines using the Azure CLI on Windows, choosing between PowerShell and Command Prompt to run scripts and interact with Azure resources.

Connects on premise data centers to azure virtual network using a site-to-site connection via the virtual network gateway, the azure vpn gateway, to send encrypted traffic over the public internet.

Explore how conditional access enforces login from devices registered in Azure Active Directory and from specific locations, using signals like location to control access.

Explore common paas and iaas scenarios in Azure, including deployment frameworks and data analysis tools as platform as a service, and scalable storage as infrastructure as a service.

Implement a comprehensive telemetry solution by using Azure Monitor to collect, ingest, and transform logs, traces, and metrics, then visualize insights and act on them.

Map Azure cloud benefits to scalability, reliability, predictability, and manageability—adjust resources, recover from failures, forecast costs, and manage resources via web portal, CLI, or PowerShell.

Explore how to build a big data analytics solution using open source frameworks like Hadoop, and implement it with Azure HDInsight to analyze streaming data.

Explore the benefits of moving to the Azure public cloud, including pay-as-you-go pricing, high reliability from a vast server network, and disaster recovery capabilities.

Learn how b2b collaboration via Microsoft Entra External ID lets you invite guest users from external organizations to access your Azure resources using their own credentials, without creating new accounts.

Learn how to monitor application availability and performance with Log Analytics, Application Insights, and Azure Monitor, including email alerts on thresholds and visualization across App Service and virtual machines.

Map on-premise to Azure hybrid cloud by aligning Azure VPN for encrypted traffic, Microsoft Entra ID for user management, Defender for Cloud for security, and ExpressRoute for high-speed migration.

Identify the right Azure management tool for each task, mapping CLI, portal, ARM templates, and PowerShell commands to VM creation, cost management, and resource deployment.

Utilize Azure management groups at the top of the hierarchy to manage permissions globally. Assign access at the management group level and have it inherited by all subscriptions.

Learn how Azure Functions provide a serverless platform as a service in Azure, running small single-task code without provisioning new infrastructure.

Learn why an Azure subscription must be authenticated first, then use Azure role-based access control to grant access to resources under that subscription.

Discover how Azure Advisor delivers personalized recommendations to optimize your Azure environment, emphasizing performance, reliability, and cost.

Availability zones do not support every Azure region or every SKU. Consult the documentation to determine exact region and service coverage.

Learn how availability zones protect against data center level failures in disaster recovery, and compare them with availability sets and other types of availability zones.

Deploy identical virtual machines as individual instances under a single resource group and apply role-based access control at the resource group level for minimal administrative effort.

Azure Virtual Desktop delivers a cloud-based multi-session Windows desktop and apps with pre-installed organization apps, supporting lightweight client devices and scalable onboarding for call centers.

Explore how Azure Active Directory supports multiple authentication methods, including SMS as a second factor for legacy devices.

Discover how to retrieve a blob from Azure storage archive by initiating rehydration to an online tier (hot or cool) for read, edit, and publish workflows.

Explore how Azure Active Directory provides user authentication and resource access as a fully managed service, eliminating the need for any domain controller on premises or Azure VMs.

Explore whether HTML or JavaScript can be used as a tag value in Azure; tag values are treated as raw text, not executable, preventing cross-site scripting.

Group Azure policies into an initiative definition to achieve a single goal by creating an initiative and adding multiple policies, such as monitoring for Microsoft Defender for Cloud.

Deploy a load balancer to evenly distribute user traffic across multiple virtual machines hosting the invoice processing app within the Azure virtual network, using a private load balancer.

Protect Azure resources from DDoS attacks with Azure DDoS protection, featuring two tiers: network protection and IP protection, easy setup with zero app tweaks and 24/7 vigilance.

Learn how data transfer charges apply to Azure storage accounts across data centers and regions, noting that transfers within the same data center are free while cross-region transfers incur costs.

Azure storage costs vary by region, even for the same resource like storage accounts or virtual machines, as shown when comparing one terabyte across two regions. Explore the Azure pricing calculator to see how switching regions changes regional prices for storage.

Discover how Azure Advisor identifies virtual machines without backup and delivers recommendations to enable backup across your Azure environment.

Discover how Azure blob storage costs are shaped by data volume stored per month, the quantity and types of read and write operations, and the redundancy type selected.

Organize department-level billing by using an Azure subscription for each department under a single billing account, with invoices and payment methods defined per subscription.

Leverage Azure Active Directory, now Microsoft Entra ID, to authenticate users to Microsoft Office 365 and other SaaS apps, a fully supported cloud-based identity and access management solution.

Learn how Azure Active Directory supports assigning multiple product licenses to a single user across various products and services within Azure, and confirm that this is technically possible.

You can create a user defined route before creating a subnet by creating a route table and associating it with subnets, each subnet can have 0 or 1 route attached.

Assess your organization's Azure Active Directory security using the Identity Security Score to measure alignment with Microsoft's best practices for identity security.

Explain why Azure SQL Database operates as a fully managed platform as a service with no access to underlying hardware or OS, while Azure handles upgrades, patches, backups, and monitoring.

Encrypting traffic with Azure Firewall Service is not possible, as it provides threat protection and traffic inspection but not encryption; use VPN to encrypt traffic from Azure to the internet.

Learn to control incoming traffic to Azure virtual machines using Azure Network Security Groups, defining inbound and outbound rules to restrict or allow traffic.

Explore Azure pricing model through migrating on-premise infrastructure to Azure and building a business justification. Learn how consumption-based model provides no upfront cost and pay-as-you-go resource scaling.

Discover how to secure Azure portal logins with a second-factor authentication using Azure multi-factor authentication, including options like text messages or authenticator app codes.

Identify blob storage as the service that stores the virtual hard disk for an Azure virtual machine, while page blobs support random access files up to eight TB.

Explain how migrating on premise resources to Azure justifies cloud adoption by using capex and opex, highlighting operating expenditure to pay only for used infrastructure.

Discover how to manage your Azure storage resources from desktop using Azure Storage Explorer, a Windows-based tool to explore storage accounts, blobs, and files.

Deploy a group of Azure resources together using Azure Resource Manager templates, enabling infrastructure as code and defining resource dependencies for seamless, simultaneous deployment.

Learn that removing unused network interfaces does not reduce costs because network interfaces incur no charges. Recognize that Azure resources like resource groups also cost nothing.

Enforce vm creation control by applying Azure role-based access control to grant the Virtual Machine Administrator team full permission, while using policies for region restrictions.

Learn how to create users in Azure Active Directory using Microsoft Entra ID in the Azure portal, locating the Microsoft Entra ID option via the hamburger menu.

Identify the Azure regions closest to users to deploy resources such as storage accounts and virtual machines, ensuring geographic proximity using region selection.

Create a full desktop virtualization environment in your Azure subscription using Azure Virtual Desktop, an alternative to Azure Virtual Machine, in line with Azure environment security considerations.

examine the cost impact of removing unused public ip addresses and how deleting ten of twenty-five addresses yields cost savings for the subscription.

Discover how to monitor Azure costs with the Azure Cost Management feature, visualize spending, and drill down into resource-type usage across your subscription.

Discover how moving to Azure public cloud reduces capital costs and improves reliability through pay-for-usage, higher SLA, and redundancy options like secondary backups and regions.

Leverage Azure Virtual Machines to gain full control over the underlying operating system under infrastructure as a service, enabling maintenance tasks like patching and installing software.

Deallocating a stopped virtual machine incurs no computing costs, but the premium operating system disk may incur storage charges.

Define and enforce an Azure policy to restrict resource deployment to specific regions, preventing administrators from deploying in restricted regions.

Explain how a stopped virtual machine stops compute costs while the operating system disk continues to incur charges, so disk costs remain.

Examine why removing unused Azure Active Directory Premium users does not reduce costs, as the directory supports up to 50,000 objects, resulting in no cost impact.

Identify the Azure service to build, deploy, and manage containerized applications, choosing Azure Kubernetes as the solution among Azure Container Instance and Azure Container Apps.

Assess cost implications for a stopped Azure virtual machine: private IP addresses incur no charges, while public IP addresses may incur costs.

Explore why Azure App Service operates as a platform as a service and why teams can't control the operating system or underlying infrastructure.

Discover how to prevent accidental deletion of virtual machines in Azure by using Azure locks to protect critical resources.

Enable dynamic routing between your on premise network and Microsoft Cloud services using BGP. Choose Border Gateway Protocol as the correct option among the choices.

Group hundreds of resources logically in Azure using Azure Resource Groups to organize, manage, and deploy resources efficiently.