AZ-900: Microsoft Azure Fundamentals Certification Training

Explore how Azure data centers form availability zones to deliver redundancy, fault tolerance, data replication, and high availability across regions, with load balancing and disaster recovery.

Discover Azure regions and availability zones, learn how to choose a region for deployments, verify region availability for services, and note global services and the three separate availability zones requirement.

Explore azure region pairing, where paired regions in the same geography enable disaster resilience and ensure data stays within the geography, with default partner regions and customer-configured failover.

Explore Azure global infra by viewing regional locations, availability zones, compliance, data residency, and service availability; compare regions to choose suitable compute resources and features.

Azure resources are the lowest layer in the Azure management hierarchy and the basic building blocks you create, provision, or deploy; resource groups organize these resources for collective management.

Create an Azure resource group by accessing the resource group console, selecting a subscription, naming the group, choosing East US, then review and create.

Learn how Azure subscriptions enable billing, access control, and resource management, including creating multiple subscriptions for environments, governance via management groups, Azure policies, and Azure AD integration.

Learn how Azure management groups define scope for subscriptions, support nesting, and apply governance across all subscriptions for enterprise-grade management from the root tenant.

Explore the Azure management levels from management groups to resources and how scope, inheritance, role-based access controls, and policies govern access and governance.

Explore how to navigate the Azure portal, customize dashboards, and manage resources and favorites. Use search, create resources, and access tools like Cloud Shell and alerts.

Explore Azure Cloud Shell, a cloud-based Linux shell in the browser with persistent storage via Azure File Share and seamless management of Azure resources through the Azure CLI and PowerShell.

Explore Azure cloud shell in the Azure portal, mount storage to persist scripts and files, reset settings, and run Azure CLI commands in bash or PowerShell.

Learn how to use Azure PowerShell, a cross-platform module and command-line tool for managing Azure resources through scripting, automation, and a rich set of commands with regular updates.

Install the Azure PowerShell module from PSGallery using PowerShellGet, verify execution policy, install and update az modules, and review installed versions across az service modules.

Discover how Azure CLI enables cross-platform, scriptable management of Azure resources from the command line, with JSON/table/TSV output, autocomplete, and beginner-friendly automation.

Install Azure CLI on Windows by downloading the 64-bit MSI and running it as administrator. Reopen PowerShell to verify installation by running a login command.

learn how to log into an Azure tenant using the Azure CLI, provide the login credentials or code sent to mobile, select the correct subscription, and verify your subscription context.

Use the Azure CLI to select the correct subscription, create a resource group, and verify resources with a table listing, while consulting Microsoft documentation for cost and disk management commands.

Explore infrastructure as code (IaC) and how to provision IT resources with code using tools like Terraform, PowerShell, Ansible, and Azure Resource Manager, gaining consistency, speed, and cost savings.

Azure VMs provide scalable Windows or Linux servers in the cloud with pay-as-you-go pricing. Configure vertical or horizontal scaling, availability sets, and virtual machine scale sets for high availability.

Demonstrates creating a Windows virtual machine in an Azure environment by configuring subscription, resource group, image, size, networking, security, and post-deployment steps.

Package your application into a portable container image, store it in Azure Container Registry, and deploy with Azure container services to run consistently across environments.

Azure Virtual Desktop (AVD) delivers cloud-based desktop and application virtualization for secure remote work, accessible from any device, with multi-session support, scalability, simplified management, and integration with Azure services.

discover Azure virtual network (VNet) and its ability to create private, isolated networks with CIDR blocks, subnets, and VNet peering, plus on-prem connectivity.

Create an Azure virtual network in your subscription using the Virtual Network Console, assign a resource group and region, configure IP address space and a subnet, then review and create.

In this demo, create two subnets in an Azure virtual network—a public subnet and a private subnet—using a /20 address range, with default routing and no NAT gateway.

Master azure network security groups to control inbound and outbound traffic with rules by source, destination, ports, and protocols on subnets or network interfaces, including default rules and priority.

Create an azure network security group to filter traffic in and out of a subnet. Learn to configure inbound and outbound rules and add new rules with lower priority numbers.

Attach a network security group to a subnet within an Azure virtual network to filter inbound and outbound traffic using a chosen NSG and its rules.

Create an inbound rule in the network security group to allow RDP access. Configure it with source any, destination any, TCP 3389, priority 200, named AllowRDPAccess, internet exposure is discouraged.

Discover how the Azure storage account provides a unique global namespace, secure, highly available, durable, and scalable storage with redundancy options like LRS and GRS.

Create an Azure storage account by selecting subscription, resource group, and a unique name, then review and create with region and LRS default settings.

Learn how to create a container in an Azure storage account and upload blobs. Discover how to choose blob type, adjust size, set access, and organize blobs into folders.

Create a static website on an Azure storage account by enabling static website, configuring index.html and error.html, uploading files to the dollar web container, and testing the primary endpoint.

Learn about Azure storage account services and the different types, including Azure blobs, Azure files, Azure queues, Azure disk, and Azure tables, designed for scalability, durability, and high availability.

Explore Azure Blob Storage, its block, page, and append blob types, and learn how hot, cool, cold, and archive tiers optimize cost for unstructured data while enabling global access.

Explore Azure queues, a cloud-based messaging service that stores large numbers of messages and enables asynchronous, decoupled communication across applications, with scalable, fault-tolerant processing and integration with other Azure services.

Explore Azure Table Storage, a cloud-based NoSQL store for storing large amounts of structured data, with entities, properties, and partition key and row key for scalable, cost-effective queries.

Learn about Azure disk storage, a block-level, managed storage for VMs, with standard and premium disks (premium uses SSD), offering scalable sizes, attachment to VMs, and snapshots for backups.

Discover Azure storage account endpoints and the URL formats for blob, data lake, files, queues, and tables, noting the common core.windows.net base and the storage account name in each URL.

Explore Azure Storage redundancy and its options, including LRS, ZRS, GRS, GZRS, RAGRS, and RAGZRS, to protect data from hardware or network failures and disasters.

Learn about locally redundant storage (LRS), which replicates data three times in a single data center, offers at least 11 nines of durability, and is the lowest cost option.

Learn how zone-redundant storage (zrs) replicates data synchronously across three availability zones in the primary region. It ensures read-write access during zone failures and supports data governance by restricting replication.

Understand geo redundant storage (grs): synchronously copy data three times in the primary region using lrs, then asynchronously replicate to a secondary region for durability of at least 16 nines.

Explore geo-zone redundant storage (GZRS), combining ZRS and GRS to protect data from zone and region failures by triple primary-zone copies, asynchronous secondary-region replication, and at least 16 nines durability.

Explore Azure AD's cloud-based identity and access management, featuring single sign-on, MFA, conditional access, identity protection, PIM, app integration, on-prem sync, and B2B/B2C with auditing.

Explore Azure role-based access control (RBAC) and its main components: security principles, role definitions, scopes, and role assignments, plus how overlapping and deny assignments affect permissions.

Learn how Azure conditional access evaluates signals—devices, location, risk—in real time to grant access or require MFA, using configurable conditions and session controls.

Explore the zero trust model, its core principles and components, and learn how continuous monitoring, verify identity, least privilege, network segmentation, encryption, and IAM drive secure access in modern environments.

Explore how to manage Azure costs by monitoring usage and applying governance, and understand factors affecting pricing including resource usage, resource types, region, provisioning, availability, licensing, and subscriptions.

Explore the Azure pricing calculator to estimate costs for resource selections such as virtual machines, databases, storage, and networking, with real-time estimates, what-if scenarios, and detailed cost breakdowns.

Explore how the Azure pricing calculator lets you customize virtual machine configurations, view cost breakdowns, switch currency, export to csv, and save or share estimates for stakeholder approvals.

Learn how the Azure total cost of ownership calculator estimates migration costs, compares on-prem and Azure costs, and analyzes ROI, operational efficiency, and scenario modeling.

Learn how Azure resource tags—default and user-defined key-value labels for resources—support environment tagging and benefits like resource grouping, cost allocation, discovery, policy enforcement, automation, security, monitoring, compliance, and cleanup.