Microsoft Azure Fundamentals (AZ-900)

Explore Azure geography and regions, learn how region pairing provides redundancy, and see how availability zones with multiple data centers safeguard data residency and compliance standards.

Discover how resource groups in Azure organize resources for a project, enable policies and permissions management, and how Azure Resource Manager provisions them via portal, PowerShell, or Azure CLI.

Learn how Azure subscriptions fit a consumption-based model and what an Azure tenant is. Discover how management groups create a hierarchical framework to manage subscriptions with least privilege.

Explore Azure compute services, including virtual machines, containers, virtual desktop, and app services. Learn how VM scale sets, availability sets, and Azure Kubernetes Service enable scalable, fault-tolerant deployments.

Explore Azure networking services, including virtual networks, VNet peering, VPN gateways, ExpressRoute, and Azure DNS, and learn how they enable secure hybrid connectivity and cloud DNS management.

Explore Azure storage types—blob storage for unstructured data with containers, file shares, and block storage for disks—and learn hot, cool, and archive tiers with SMB and UNC access.

Explore how traditional Active Directory translates to the cloud with Azure Active Directory, AD DS, and external identities, including hybrid sync, Azure Active Directory domain services, and zero trust.

Explore how conditional access uses location, IP, and risk signals to grant or deny access in Azure, apply MFA, and enable single sign-on with federation for cross-domain trust.

Explain defense in depth for Azure resources by layering confidentiality, integrity, and availability across identity and access, perimeter, network, compute, applications, and data encryption at rest and in transit.

Explore Microsoft Defender for Cloud to manage security posture and protect workloads across Azure, AWS, and GCP from a centralized platform that shows a secure score.

Discover defense-in-depth security in azure by using dedicated hosts for isolated hardware, network security groups, Azure Firewall, and Azure Sentinel to monitor and protect resources.

Plan and manage Azure cloud costs by evaluating cost factors and using the pricing calculator, TCO calculator, cost management, and insights on spot and reserved instances and hybrid benefit.

Use Azure policy to enforce compliance on individual resources, Azure blueprints to deploy compliant, scalable environments, and resource locks to prevent changes, ensuring governance at scale.

Learn how Azure role-based access control uses predefined roles to grant the least privilege access to users or groups for Azure resources, including billing administrator and virtual machine administrator.

Learn how the Service Trust Portal enables compliance with reports and standards such as ISO 27001, HIPAA, PCI DSS, and NIST. See how Compliance Manager tracks scores and organizes documents.

Explore how the Azure portal unifies management for Azure and non-Azure resources, and how Azure Arc enables hybrid and multi-cloud governance.

Explore ARM templates (Azure Resource Manager templates) to deploy resources with infrastructure as code, enabling consistent, repeatable deployments across production and development environments using JSON templates in the Azure portal.

Explore how Azure PowerShell, Azure CLI, and Cloud Shell streamline deployments by scripting resource creation, enabling automation with CSV imports, and ensuring consistent, scalable configurations.

Azure advisor and service health act as a cloud consultant, guiding optimization across cost, security, reliability, operational excellence, and performance, with centralized recommendations and service health alerts.

Explore Azure Monitor to collect metrics and logs, set alerts with action groups and runbooks, and use Log Analytics and Insights to detect, diagnose, and resolve issues across Azure solutions.