AZ-900: Microsoft Azure Fundamentals + FULL Practice Exam!

Explore what cloud computing means as renting computing resources such as servers, storage, and databases over the internet with pay-as-you-go pricing, enabling elastic, scalable infrastructure on Azure.

Understand the three cloud service models—IaaS, PaaS, and SaaS—and how ownership, flexibility, and pricing shape business needs, with examples like App Services and Gmail.

Explore the advantages of Azure cloud computing, including pay-as-you-go cost efficiency, elasticity, scalable resources, global reach, secure and reliable infrastructure with automatic redundancy.

Discover Azure global infrastructure, including regions, geographies, and availability zones, with a focus on Asia and data residency. See how region pairs enable business continuity and disaster recovery across regions.

Explore Azure management interfaces, including the Azure portal, Azure CLI, Azure PowerShell, Cloud Shell, Azure SDKs, and the Azure mobile app, to interact with and manage Azure resources.

Define cloud computing and explain pay-as-you-go pricing, deployment models, and service types (IaaS, PaaS, SaaS). Highlight Azure benefits such as scalability, economies of scale, global reach, and security.

Explore Azure core services and virtual machines in Asia, covering networking, high availability, and security groups. Learn about load balancers, Traffic Manager, and hands-on labs, with quizzes and exam hints.

Launch a Linux virtual machine in Azure using the portal, create a resource group, select Ubuntu Server, choose B-1s, enable SSH, and assign a public IP for web server setup.

Learn how to connect to an Azure Linux VM from macOS or Linux using SSH with a public IP on port 22, including fingerprint acceptance.

Install the PuTTY client on a Windows PC, connect to the Azure Linux VM using the public IP and SSH, then save the connection and log in as admin.

Configure an Ubuntu VM on Azure as a web server by updating packages, installing Apache two, creating a new index.html, and verifying the page loads.

Learn how Azure network security groups function as virtual firewalls with prioritized inbound and outbound rules, and how application security groups simplify traffic rules for linked virtual machines.

Modify the network security group inbound rules to permit http traffic to the web server. Add a port 80 inbound rule with priority 100 from any source.

Create a standard Azure load balancer in the Azure portal, configure a back-end pool and a health probe on TCP port 80, and set up a load balancing rule.

Configure two web servers and test load balancing, including a zone redundant public ip and load balancer back-end pool, then verify traffic is distributed between servers.

Explore Azure compute options, Azure containers fundamentals, and serverless computing with Azure Functions and Logic Apps in Asia, plus Azure App Service for PaaS, enhanced by hands-on labs.

Explore Azure App Service fundamentals, including app service plans, regions, VM counts and sizes, and pricing tiers from free to isolated, and host web apps, API apps, and containers.

Discover how Azure serverless computing abstracts servers and runs code on triggers. Learn about Azure Functions and Logic Apps, with event-driven execution and pay only for the runtime.

Create a hello world app using an Azure function app with an http triggered function, including resource setup, storage account linkage, net core runtime, and testing the function url.

Create a first Azure Logic Apps workflow in the Azure portal using an RSS feed trigger to email updates via Gmail, then test, run, and delete the logic app.

Explore Azure storage options including blob, files, queues, and tables, with hands-on labs on creating storage accounts, containers, file shares, and testing access.

Explore Azure blob storage fundamentals, including unstructured data, access tiers hot, cool, archive, encryption options, and replication with locally redundant storage, zone redundant storage, read access geo-redundant storage.

Create a storage container in Azure, upload photos and videos, set public anonymous access, and generate a SAS URL to share the uploaded blobs securely.

Learn Azure managed disks fundamentals, including OS disk, temporal disk, and data disk, disk types from standard to ultra, and how availability sets, zones, and granular access control protect data.

Launch two Windows Server 2016 Data Center VMs in Azure portal, select North Europe, use B-2s, attach disks, enable inbound 3389 with a public IP, and apply tags.

Learn to connect to a Windows virtual machine from Mac or Linux using Microsoft Remote Desktop or Romina, download the remote desktop file, and access the drives.

Connect to a Windows VM from a Windows PC using the pre-installed remote desktop connection, download the RDP file, and sign in with the provided credentials.

Attach a managed data disk to a Windows VM for persistent data, then create a 32 GB standard HDD disk, attach via the Azure portal, and initialize and format it.

Explore Azure file storage fundamentals, including SMB-based file shares and cross-platform mounting on Windows, Mac, and Linux. Learn lift-and-shift to cloud and always-on, highly available file shares.

Explore Azure table storage fundamentals as a scalable, cheap NoSQL service for structured data in the cloud. Learn table entities with partition key and row key and to query fast.

Explore Asia core services databases in Asia, including Cosmos database, Ezekial database, MySchool, and PostgreSQL engines, plus the Asia Database Migration Service, with hands-on labs and module six quiz hints.

Discover how Azure Cosmos DB stores data as JSON documents in a globally distributed, low-latency database. Explore features like elastic scale, regional presence, request units, logical partitions, and multiple APIs.

Explore the Asia database for my school basics, a relational service with pay-as-you-go pricing, rapid scaling, data security, automatic backups, 35-day point-in-time restoration, and enterprise-grade security and compliance.

Provision a MySQL server in the Asia portal to create the Asia database for my school and apply a firewall rule. Connect with MySQL Workbench to verify the connection.

Learn Asia database for PostgreSQL basics, covering single server and hyperscale deployments, 99.99% availability, data security in transit and at rest, automatic backups up to 35 days, and pricing tiers.

Create an Azure database for PostgreSQL in the Asia portal with a single server, set admin credentials, region, and basic pricing, then connect via pgAdmin and apply a firewall rule.

Explore Asia core databases, including Asia Cosmos Database, Asia database for MySQL, PostgreSQL, and the Asia Database Migration Service, with deployment models and built-in security, backups, and high availability.

Provide a high-level overview of Azure core services beyond the basics, covering networking, IoT, big data analytics, AI and machine learning, DevOps, plus VMs, containers, App Service, storage, and databases.

Explore Azure networking fundamentals, including virtual networks, VNet peering, and load balancers. Learn connectivity options such as VPN gateway and express route, plus CDN and application gateway for delivery.

Explore how Azure IoT Hub enables bidirectional communication between devices and cloud applications, and how IoT Central provides a managed platform to build enterprise-grade IoT solutions.

Explore big data and real-time analytics in azure cloud basics, using IoT data to drive insights, engagement, revenue, and cost reduction with Azure Databricks and HD Insight.

Explore artificial intelligence and machine learning basics in Azure, including training models and AI capabilities, with Azure Machine Learning Studio Classic and the designer for no-code, drag-and-drop workflows.

Define devops in azure as a union of people, process, and products enabling continuous delivery, lead time reduction, and change failures, with boards, pipelines, test plans, repos, and DevTest Labs.

Explore module seven's high level overview of core services, covering Asia Vinit Virtual Network, vnet peering, load balancer, vpn gateway, express route, CDN, application gateway, and IoT services.

Explore Asia Resource Manager policies and ARM templates, then cover resource groups and Asia tax fundamentals, with hands-on labs to reinforce concepts in the Asia portal.

Learn how the Asia Resource Manager authenticates and authorizes requests, uses resource groups and providers, and deploys infrastructure as code with ARM templates for automated, ordered deployments and tagging.

Explore how resource groups act as logical containers for azure resources, enable moving resources between groups, and require a region to store resource metadata, with naming and structure best practices.

Master Azure tags fundamentals by using name-value pairs to label resources and resource groups with environment and cost center. Enforce tagging policies and automate start-stop to manage costs.

Organize Azure resources and resource groups by applying and managing tags, such as departments like marketing or human resources, using filters and the tags column.

Understand Azure policy fundamentals by creating policy definitions with conditions and effects, assigning them to specific scopes, and using initiatives to group policies for consistent, compliant resource deployments.

Configure azure policies, including Asia policies, to enforce guidelines by defining and assigning policies to scopes such as subscriptions or resource groups, with required tags and remediation.

Explore hands-on labs with Azure locks to prevent accidental changes, using delete and read-only log types, scopes, and policies to protect virtual machines.

Deploy infrastructure declaratively with arm templates, manage resources via Asia Resource Manager, organize with resource groups and tags, enforce policies and initiatives, and protect assets with locks and logs.

Learn Azure compliance regulations and standards, plus Azure blueprint and Azure Advisor fundamentals, to master governance in the cloud and monitoring with Azure Monitor and Azure Service Health.

Explore Azure compliance regulations and standards, including gdpr, hipaa, and csf frameworks, with 90+ offerings across regions and industries like government, health, finance, education, manufacturing, and media.

Participate in a hands-on Azure blueprints lab to create, publish, and assign a blueprint, exploring blueprint definitions and artifacts such as policy assignment, role assignment, arm templates, and resource groups.

Explore Azure Advisor's best practices across high availability, security, performance, operational excellence, and cost. Review recommendations, monitor alerts, and inspect impacted resources like virtual machines and availability sets.

Explore Asia Monitor, Asia Service Health, and Asia Resource Health to collect telemetry, analyze performance, and alert on cloud and on-prem issues with dashboards and log analytics.

Master Azure service health with a hands-on lab on Asia service health and personalized views. Configure health alerts and review root causes, planned maintenance, and advisories for your resources.

Explore the shared responsibility model and Asia cloud security services, including Asia Security Center, MFA, role-based access control, Asia Key Vault, Asia Information Protection, Asia Advanced Threat Protection.

Explore the Azure shared responsibility model across on-premises, IaaS, PaaS, and SaaS, and apply multi-layer security for data, identities, and compute in cloud and hybrid environments.

In this hands-on Azure Active Directory lab, create users and groups, assign roles and permissions, and explore built-in versus custom roles to manage access.

Define multi-factor authentication fundamentals and explore how Azure MFA strengthens identity security by requiring two or more factors. Learn examples like passwords, OTP in apps, smartphone-based prompts, and biometrics.

Enable multi-factor authentication for test user one in the Azure portal, verify access with the Microsoft Authenticator app via notifications and verification codes, and enforce MFA.

Master Azure RBAC by defining security principals, role definitions, and scopes, then assign roles at subscription, resource group, or resource to grant minimal access to VMs, databases, and other resources.

Azure firewall provides inbound and outbound filtering with IP address rules to protect virtual network resources. DDoS protection offers basic and standard tiers, defending against volumetric, protocol, and application-layer attacks.

Explore encryption fundamentals, including symmetric and asymmetric schemes with public and private keys, and how encryption at rest and in transit is protected by Azure Key Vault and secrets management.

Explains the Asia cloud share responsibility model and security concepts, including Asia Security Center capabilities, authentication and authorization, PIM, MFA, RBAC, encryption, ATP, and information protection.