Microsoft Azure Fundamentals (AZ-900) Course + Practice Test

Explore cloud service types—IaaS, PaaS, and SaaS—and the shared responsibility model across Azure. Learn when to use each for control, development, and productivity.

Master Azure consumption-based pricing, CapEx to OpEx shift, pay-as-you-go metering, and cost control with reserved instances, Spot VMs, tagging, and the cost management tools.

Understand service level agreements as Microsoft's uptime guarantees for Azure services, interpret 99.9% to 99.99% availability, and learn how composite SLAs multiply and improve through redundancy across availability zones.

Explore serverless computing and containers on Azure, including Functions, Logic Apps, container instances, and AKS, with consumption-based pricing and code-first versus workflow-first approaches.

Explore Azure regions, availability zones, and region pairs to optimize resilience, performance, and cost. Learn how data residency, cross-region transfers, and service availability shape architecture.

Learn how Azure datacenters and sovereign regions provide physical and logical isolation, separate portals and compliance for Azure government, Azure China, and sensitive workloads, and how to plan cross-cloud deployments.

Learn how Azure resources fit into resource groups, logical containers used to manage cost, security, and automation, with RBAC, policies, and tags not automatically inherited at the group level.

Explore Azure virtual machines from size and image to region and pricing, focusing on uptime with availability sets and zones, plus spot VMs and VMSS for scalable workloads.

Explore the three Azure compute types—VMs, containers, and functions—and learn when to choose each for event-driven, scalable deployments using ACI, AKS, and serverless functions.

Explore how VMSS automatically scales identical VMs for reliable, scalable workloads, while availability sets provide redundancy, and Azure Virtual Desktop supports remote work from any device.

Discover Azure App Service as a platform for hosting web apps and APIs, compare it with VMs, containers, and functions, and learn about deployment slots and autoscale.

Select the right VM size, storage type, and cost model based on CPU, memory, and storage needs to optimize performance and cost in Azure.

Explore Azure hybrid connectivity with VPN gateway, Azure Bastion, and ExpressRoute; compare site-to-site and point-to-site VPNs and learn secure VM management without public IPs.

Explore Azure load balancing services to ensure high availability and responsive apps. Identify when to use load balancer, application gateway, Traffic Manager, and Front Door, plus health checks and WAF.

Learn how NSGs and ASGs secure Azure traffic with priority-based rules and scalable grouping. Compare NSGs with Azure Firewall and use Network Watcher to test and apply defense in depth.

Explore Azure storage account types and services, including blob, files, queue, and table storage, disc storage for VMs, performance tiers standard and premium, and Data Lake storage Gen2.

Explore Azure storage redundancy options to keep data available during hardware failures and regional outages. Understand LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS for different durability and region pair scenarios.

Explore securing storage access in Azure with keys, SAS, and Microsoft Entra ID RBAC; learn encryption in rest and in transit, firewalls, private endpoints, and Defender for storage.

Explore Azure file transfer tools: AzCopy for automated bulk transfers, Storage Explorer for management, Portal for quick uploads, File Sync for on-prem to Azure synchronization, and Databox for offline migrations.

Discover Microsoft Entra ID, a cloud-based identity and access manager with single sign-on for users, groups, devices, and apps, and Entra Domain Services for legacy LDAP/NTLM in the cloud.

Explore how azure external identities enable secure collaboration with partners and customers using b2b and b2c. Learn when to use each, how guest access works, and how conditional access applies.

Explore zero trust and conditional access in Azure, where every access request is verified, MFA is enforced, and device compliance is checked by Intune and Entra ID protection.

Explore defense in depth in Azure, the seven layers—physical, identity, perimeter, network, compute, application, data—and how Defender for Cloud, secure score, and the compliance dashboard monitor and improve security.

Explore how Microsoft Defender for Cloud provides a centralized view of security across Azure, hybrid, and multi-cloud environments, using security posture management, threat protection, and compliance tracking to protect resources.

Explore how to monitor and optimize Azure costs with cost management and billing, cost analysis, budgets, and Azure Advisor to reduce always-on resources, over provisioning, and data egress.

Estimate Azure costs before deployment with the pricing calculator and compare on-prem costs using the TCO calculator to plan migrations. Track spending with Azure Cost Management, budgets, and alerts.

Choose the right Azure support plan from basic to premier to balance cost, 24/7 response times, and architecture guidance within your Azure budget.

Apply Azure resource tags to organize resources for cost attribution and governance, and use read-only and delete locks to protect resources from changes or deletions.

Azure policy acts as the governance engine that automatically enforces compliance rules across your environment, using definitions and assignments to apply effects like audit, deny, or deployIfNotExists.

Explore Azure Cloud Shell to automate resources using CLI and PowerShell, compare tools, and leverage persistent storage and built-in editor for repeatable tasks.

Discover how Azure Monitor collects, analyzes, and automates responses and alerts to telemetry across Azure, on-prem, and multi-cloud environments, using metrics, logs, activity log, log analytics, and application insights.

Review the three core domains of the AZ-900 exam—cloud concepts, Azure architecture and services, and Azure management and governance—and prepare with diagnostic practice tests to achieve a passing score.