AZ-900: Microsoft Azure Fundamentals + FULL Practice Exam!

Explore Azure fundamentals, including cloud computing concepts, deployment and service models, advantages of Azure, Azure regions and availability zones, and Asia region pairs, plus management interfaces, exam hints, and quizzes.

Explore what cloud computing means as renting computing resources such as servers, storage, and databases over the internet with pay-as-you-go pricing, enabling elastic, scalable infrastructure on Azure.

Explore cloud deployment models, including public, private, and hybrid, and how data location and on-premises needs guide choices for running apps. Learn pay-as-you-go benefits, security considerations, and hybrid flexibility.

Understand the three cloud service models—IaaS, PaaS, and SaaS—and how ownership, flexibility, and pricing shape business needs, with examples like App Services and Gmail.

Explore the advantages of Azure cloud computing, including pay-as-you-go cost efficiency, elasticity, scalable resources, global reach, secure and reliable infrastructure with automatic redundancy.

Discover Azure global infrastructure, including regions, geographies, and availability zones, with a focus on Asia and data residency. See how region pairs enable business continuity and disaster recovery across regions.

Explore Azure management interfaces, including the Azure portal, Azure CLI, Azure PowerShell, Cloud Shell, Azure SDKs, and the Azure mobile app, to interact with and manage Azure resources.

Define cloud computing and explain pay-as-you-go pricing, deployment models, and service types (IaaS, PaaS, SaaS). Highlight Azure benefits such as scalability, economies of scale, global reach, and security.

Explore Azure core services and virtual machines in Asia, covering networking, high availability, and security groups. Learn about load balancers, Traffic Manager, and hands-on labs, with quizzes and exam hints.

Explore the Azure portal navigation, cloud shell options, and subscription management to create resources and monitor usage. Customize dashboards, access marketplace, and manage resources such as resource groups and users.

Create a monthly budget in Azure cost management and configure a 100% alert to email you when the budget is reached.

Discover azure virtual machines as infrastructure as a service, with details on vm sizes, families, storage options, and managed disks. Understand IOPS and throughput for choosing the right disk types.

Discover Azure VMs networking and high availability, including Asia region virtual networks, subnets, private/public IPs, availability zones, availability sets with fault and update domains, plus load balancers and Azure batch.

Launch a Linux virtual machine in Azure using the portal, create a resource group, select Ubuntu Server, choose B-1s, enable SSH, and assign a public IP for web server setup.

Learn how to connect to an Azure Linux VM from macOS or Linux using SSH with a public IP on port 22, including fingerprint acceptance.

Install the PuTTY client on a Windows PC, connect to the Azure Linux VM using the public IP and SSH, then save the connection and log in as admin.

Configure an Ubuntu VM on Azure as a web server by updating packages, installing Apache two, creating a new index.html, and verifying the page loads.

Learn how Azure network security groups function as virtual firewalls with prioritized inbound and outbound rules, and how application security groups simplify traffic rules for linked virtual machines.

Modify the network security group inbound rules to permit http traffic to the web server. Add a port 80 inbound rule with priority 100 from any source.

Learn how public and internal load balancers distribute traffic to a backend pool of web servers, using health probes and load balancing rules in a virtual network.

Create a standard Azure load balancer in the Azure portal, configure a back-end pool and a health probe on TCP port 80, and set up a load balancing rule.

Configure two web servers and test load balancing, including a zone redundant public ip and load balancer back-end pool, then verify traffic is distributed between servers.

Asia traffic manager uses a DNS based traffic load balancer to route users to the closest or most available endpoints, ensuring low latency and high availability in hybrid cloud deployments.

Explore Azure virtual machines, sizes, storage, virtual networks, and network and application security groups, plus availability zones, VM scale sets, and load balancers with health probes.

Explore Azure compute options, Azure containers fundamentals, and serverless computing with Azure Functions and Logic Apps in Asia, plus Azure App Service for PaaS, enhanced by hands-on labs.

Explore Azure compute options, including virtual machines, containers, App Service, and serverless, highlighting on-demand resources, host vs guest operating systems, and scalable cloud infrastructure.

Compare containers to virtual machines to show how containers run on a host OS with a Docker daemon and container images, while previewing Azure Container Instances and Azure Kubernetes Service.

Deploy a container instance via the Azure portal, configure resource group and image, set a DNS name label for a public IP, and verify deployment with a reachable FQDN.

Explore Azure App Service fundamentals, including app service plans, regions, VM counts and sizes, and pricing tiers from free to isolated, and host web apps, API apps, and containers.

Deploy a static HTML website via Azure Cloud Shell and App Service, demonstrating PaaS by cloning from GitHub, creating index.html, and running the app in West Europe.

Discover how Azure serverless computing abstracts servers and runs code on triggers. Learn about Azure Functions and Logic Apps, with event-driven execution and pay only for the runtime.

Create a hello world app using an Azure function app with an http triggered function, including resource setup, storage account linkage, net core runtime, and testing the function url.

Create a first Azure Logic Apps workflow in the Azure portal using an RSS feed trigger to email updates via Gmail, then test, run, and delete the logic app.

Conclude module four by summarizing Asia compute options, including containers (ACI, AKS, container orchestration), app service, and serverless (functions and logic apps), plus exam hints.

Explore Asia core storage options, including Asia blob storage fundamentals, Asia manage disks, Asia file storage, Asia queue storage, and Asia table storage, with hands-on labs and exam hints.

Explore Azure storage options including blob, files, queues, and tables, with hands-on labs on creating storage accounts, containers, file shares, and testing access.

Explore Azure blob storage fundamentals, including unstructured data, access tiers hot, cool, archive, encryption options, and replication with locally redundant storage, zone redundant storage, read access geo-redundant storage.

Create an Azure storage account in the portal by selecting subscription and resource group, choosing a unique name, storage v2 general purpose, and configuring replication and public access.

Create a storage container in Azure, upload photos and videos, set public anonymous access, and generate a SAS URL to share the uploaded blobs securely.

Learn Azure managed disks fundamentals, including OS disk, temporal disk, and data disk, disk types from standard to ultra, and how availability sets, zones, and granular access control protect data.

Launch two Windows Server 2016 Data Center VMs in Azure portal, select North Europe, use B-2s, attach disks, enable inbound 3389 with a public IP, and apply tags.

Learn to connect to a Windows virtual machine from Mac or Linux using Microsoft Remote Desktop or Romina, download the remote desktop file, and access the drives.

Connect to a Windows VM from a Windows PC using the pre-installed remote desktop connection, download the RDP file, and sign in with the provided credentials.

Attach a managed data disk to a Windows VM for persistent data, then create a 32 GB standard HDD disk, attach via the Azure portal, and initialize and format it.

Explore Azure file storage fundamentals, including SMB-based file shares and cross-platform mounting on Windows, Mac, and Linux. Learn lift-and-shift to cloud and always-on, highly available file shares.

Create an Azure file share in the AC 900 storage account, upload a test file, and map the share to Windows VMs using a network drive.

Explore Azure queues: a storage account hosts queues - like incoming orders, outgoing orders, and returns - that store messages for components, synchronous messaging, and auto scaling with Azure functions.

Explore Azure table storage fundamentals as a scalable, cheap NoSQL service for structured data in the cloud. Learn table entities with partition key and row key and to query fast.

Explore Azure core storage features: blob and data lake storage generation two, files, queues, and tables, with hot/cool/archive tiers, lifecycle policies, and encryption and replication options.

Explore Asia core services databases in Asia, including Cosmos database, Ezekial database, MySchool, and PostgreSQL engines, plus the Asia Database Migration Service, with hands-on labs and module six quiz hints.

Discover how Azure Cosmos DB stores data as JSON documents in a globally distributed, low-latency database. Explore features like elastic scale, regional presence, request units, logical partitions, and multiple APIs.

Perform a hands-on lab to create an Azure Cosmos DB in the Asia portal, then create a database and container, upload items, and run queries to view results and costs.

Explore Azure SQL database as a managed relational service with single, elastic pool, and managed instance deployment, plus server administration and DTU, vCore, and serverless pricing.

Create an Azure SQL database in the Azure portal by configuring the server, admin, location, compute and storage, then deploy, load sample data, and run a query.

Explore the Asia database for my school basics, a relational service with pay-as-you-go pricing, rapid scaling, data security, automatic backups, 35-day point-in-time restoration, and enterprise-grade security and compliance.

Provision a MySQL server in the Asia portal to create the Asia database for my school and apply a firewall rule. Connect with MySQL Workbench to verify the connection.

Learn Asia database for PostgreSQL basics, covering single server and hyperscale deployments, 99.99% availability, data security in transit and at rest, automatic backups up to 35 days, and pricing tiers.

Create an Azure database for PostgreSQL in the Asia portal with a single server, set admin credentials, region, and basic pricing, then connect via pgAdmin and apply a firewall rule.

Explore the Asia Database Migration Service, a fully managed tool for offline and online migrations from on-premises to Asia Cloud, with online sync and various migration scenarios.

Explore Asia core databases, including Asia Cosmos Database, Asia database for MySQL, PostgreSQL, and the Asia Database Migration Service, with deployment models and built-in security, backups, and high availability.

Provide a high-level overview of Azure core services beyond the basics, covering networking, IoT, big data analytics, AI and machine learning, DevOps, plus VMs, containers, App Service, storage, and databases.

Explore Azure networking fundamentals, including virtual networks, VNet peering, and load balancers. Learn connectivity options such as VPN gateway and express route, plus CDN and application gateway for delivery.

Explore how Azure IoT Hub enables bidirectional communication between devices and cloud applications, and how IoT Central provides a managed platform to build enterprise-grade IoT solutions.

Explore big data and real-time analytics in azure cloud basics, using IoT data to drive insights, engagement, revenue, and cost reduction with Azure Databricks and HD Insight.

Explore artificial intelligence and machine learning basics in Azure, including training models and AI capabilities, with Azure Machine Learning Studio Classic and the designer for no-code, drag-and-drop workflows.

Define devops in azure as a union of people, process, and products enabling continuous delivery, lead time reduction, and change failures, with boards, pipelines, test plans, repos, and DevTest Labs.

Explore module seven's high level overview of core services, covering Asia Vinit Virtual Network, vnet peering, load balancer, vpn gateway, express route, CDN, application gateway, and IoT services.

Explore Asia Resource Manager policies and ARM templates, then cover resource groups and Asia tax fundamentals, with hands-on labs to reinforce concepts in the Asia portal.

Learn how the Asia Resource Manager authenticates and authorizes requests, uses resource groups and providers, and deploys infrastructure as code with ARM templates for automated, ordered deployments and tagging.

Explore how resource groups act as logical containers for azure resources, enable moving resources between groups, and require a region to store resource metadata, with naming and structure best practices.

Master Azure tags fundamentals by using name-value pairs to label resources and resource groups with environment and cost center. Enforce tagging policies and automate start-stop to manage costs.

Organize Azure resources and resource groups by applying and managing tags, such as departments like marketing or human resources, using filters and the tags column.

Understand Azure policy fundamentals by creating policy definitions with conditions and effects, assigning them to specific scopes, and using initiatives to group policies for consistent, compliant resource deployments.

Configure azure policies, including Asia policies, to enforce guidelines by defining and assigning policies to scopes such as subscriptions or resource groups, with required tags and remediation.

Explore Azure logs fundamentals, comparing delete and read-only options, and learn how permissions flow from resource to resource group to subscription (and management groups), with inheritance across scopes.

Explore hands-on labs with Azure locks to prevent accidental changes, using delete and read-only log types, scopes, and policies to protect virtual machines.

Deploy infrastructure declaratively with arm templates, manage resources via Asia Resource Manager, organize with resource groups and tags, enforce policies and initiatives, and protect assets with locks and logs.

Learn Azure compliance regulations and standards, plus Azure blueprint and Azure Advisor fundamentals, to master governance in the cloud and monitoring with Azure Monitor and Azure Service Health.

Explore Azure compliance regulations and standards, including gdpr, hipaa, and csf frameworks, with 90+ offerings across regions and industries like government, health, finance, education, manufacturing, and media.

Explore how Azure blueprints deploy and update cloud environments in a repeatable, declarative way using composable artifacts such as ARM templates, policy assignments, and RBAC, with auditing and subscription upgrades.

Participate in a hands-on Azure blueprints lab to create, publish, and assign a blueprint, exploring blueprint definitions and artifacts such as policy assignment, role assignment, arm templates, and resource groups.

Explore how Asia Advisor guides deployments and optimizes resources by providing recommendations across five categories: cost, performance, high availability, security, and operational excellence, acting as your private Asia Cloud consultant.

Explore Azure Advisor's best practices across high availability, security, performance, operational excellence, and cost. Review recommendations, monitor alerts, and inspect impacted resources like virtual machines and availability sets.

Explore Asia Monitor, Asia Service Health, and Asia Resource Health to collect telemetry, analyze performance, and alert on cloud and on-prem issues with dashboards and log analytics.

Explore Azure Monitor with a hands-on lab: view the activity log, filter events by resource group and virtual machines, and create alert rules and admin email notifications.

Master Azure service health with a hands-on lab on Asia service health and personalized views. Configure health alerts and review root causes, planned maintenance, and advisories for your resources.

Summarize module nine monitoring and compliance in Azure cloud, covering GDPR, HIPAA, ISO, and NIST CSF; Azure Blueprints, Advisor, Monitor, and Service Health with logs, insights, and dashboards.

Explore the shared responsibility model and Asia cloud security services, including Asia Security Center, MFA, role-based access control, Asia Key Vault, Asia Information Protection, Asia Advanced Threat Protection.

Explore the Azure shared responsibility model across on-premises, IaaS, PaaS, and SaaS, and apply multi-layer security for data, identities, and compute in cloud and hybrid environments.

Strengthen security posture and protect against threats with Azure Security Center, accelerate secure configurations across cloud and on-premises, and compare free versus standard tiers.

Enable Azure Security Center in the Azure portal, upgrade from free to standard to install monitoring agents and enable advanced threat detection, and review recommendations and pricing settings.

Explore Azure identity services fundamentals, including authentication and authorization, and learn how Azure AD centralizes access with single sign-on, conditional access, device management, and privileged identity management with time-based activation.

In this hands-on Azure Active Directory lab, create users and groups, assign roles and permissions, and explore built-in versus custom roles to manage access.

Define multi-factor authentication fundamentals and explore how Azure MFA strengthens identity security by requiring two or more factors. Learn examples like passwords, OTP in apps, smartphone-based prompts, and biometrics.

Enable multi-factor authentication for test user one in the Azure portal, verify access with the Microsoft Authenticator app via notifications and verification codes, and enforce MFA.

Master Azure RBAC by defining security principals, role definitions, and scopes, then assign roles at subscription, resource group, or resource to grant minimal access to VMs, databases, and other resources.

In this hands-on lab, grant a new user the virtual machine contributor role in a resource group, then resize, delete, and attempt to create VMs in Azure.

Azure firewall provides inbound and outbound filtering with IP address rules to protect virtual network resources. DDoS protection offers basic and standard tiers, defending against volumetric, protocol, and application-layer attacks.

Explore encryption fundamentals, including symmetric and asymmetric schemes with public and private keys, and how encryption at rest and in transit is protected by Azure Key Vault and secrets management.

Explore Asia advanced threat protection and Asia information protection, including the ATP sensor on controllers, the ATP portal, and labeling and rights management to classify, protect, and govern data.

Explains the Asia cloud share responsibility model and security concepts, including Asia Security Center capabilities, authentication and authorization, PIM, MFA, RBAC, encryption, ATP, and information protection.