AZ-900 Microsoft Azure Fundamentals [Updated for 2026]

After this lecture, you will be able to define cloud computing and list core services such as compute, storage, databases, and networking, including why scale and pay-as-you-go matter.

After this lecture, you will be able to find Azure compute, networking, storage, and database services in the Azure portal All services view.

After this lecture, you will be able to contrast traditional on-premises responsibility with the shared model and explain that IaaS, PaaS, and SaaS shift work between you and the provider.

After this lecture, you will be able to describe private, public, hybrid, and multi-cloud deployments and recognize when each model is a fit.

After this lecture, you will be able to distinguish CapEx from OpEx and explain why cloud consumption is treated as operational expenditure.

After this lecture, you will be able to locate Azure Virtual Machine and App Service pricing pages and relate listed prices to consumption-based cloud billing.

After this lecture, you will be able to explain what an SLA is, how uptime percentages map to service credits, and how SLAs apply to common Azure services.

After this lecture, you will be able to open Microsoft SLA documentation and find uptime commitments for Virtual Machines and App Service.

After this lecture, you will be able to identify Availability Zones, availability sets, and virtual machine scale sets when you create a VM for high availability.

After this lecture, you will be able to describe reliability in Azure and contrast performance predictability with cost predictability using autoscaling, load balancing, and cost tools.

After this lecture, you will be able to name Azure security and governance capabilities such as DDoS Protection, Firewall, Security Center, Policy, and Blueprints.

After this lecture, you will be able to distinguish managing cloud resources from managing the cloud environment using Monitor, Service Health, Advisor, the portal, API, CLI, and PowerShell.

After this lecture, you will be able to explain IaaS shared responsibility and when to use it for lift-and-shift, testing, and consistent development environments.

After this lecture, you will be able to describe PaaS shared responsibility and when it fits development frameworks and analytics workloads.

After this lecture, you will be able to create a new Azure App Service in Azure using the portal.

After this lecture, you will be able to describe SaaS shared responsibility and typical uses such as email, messaging, and productivity apps.

After this lecture, you will be able to locate Azure DevOps as a Microsoft cloud product used for software delivery on Azure.

After this lecture, you will be able to separate Azure physical infrastructure from management infrastructure and list the building blocks of each.

After this lecture, you will be able to explain datacenters, regions, and region pairs, including why pairs improve resilience and that you cannot choose your own pair.

After this lecture, you will be able to identify example Azure regions and region pairs using Microsoft datacenter and pairing documentation.

After this lecture, you will be able to describe availability zones, zonal versus zone-redundant services, and why not every region offers zones.

After this lecture, you will be able to explain why sovereign regions exist for compliance and give examples for US government and China.

After this lecture, you will be able to define an Azure geography and relate it to data residency, compliance, service availability, and pricing.

After this lecture, you will be able to describe Azure resources and resource groups, including that a resource lives in one group and groups help with access and environments.

After this lecture, you will be able to explain Azure subscriptions as billing and access boundaries and how one account can hold multiple subscriptions.

After this lecture, you will be able to describe management groups as a scope above subscriptions for governance, including hierarchy limits.

After this lecture, you will be able to describe Azure VMs as IaaS, when to use them, and how scale sets and availability sets improve scale and resilience.

After this lecture, you will be able to create a virtual machine in Azure using the portal.

After this lecture, you will be able to describe Azure Virtual Desktop, its identity and MFA security options, and Windows multi-session hosting.

After this lecture, you will be able to contrast containers with VMs and name Azure container options including Container Apps, Container Instances, and AKS.

After this lecture, you will be able to describe Azure Functions as event-driven serverless compute that scales automatically and can be stateless or durable.

After this lecture, you will be able to create a new Azure Function in Azure using the portal.

After this lecture, you will be able to explain App Service hosting for web apps, APIs, WebJobs, and mobile backends, including scaling and language support.

After this lecture, you will be able to describe Azure virtual networks, public and private endpoints, VPN and ExpressRoute options, NSGs, peering, and user-defined routes.

After this lecture, you will be able to describe storage account types, supported redundancy, naming rules, and the service-specific endpoint URLs.

After this lecture, you will be able to compare LRS, ZRS, GRS, GZRS, and read-access variants and explain when data in a secondary region is readable.

After this lecture, you will be able to recall exam-focused points on Azure storage redundancy so you can distinguish options on AZ-900 questions.

After this lecture, you will be able to distinguish Blob, Files, Queue, and Disk storage and match each to common workload needs.

After this lecture, you will be able to choose Hot, Cool, Cold, or Archive blob tiers based on access frequency, minimum retention, and early-deletion penalties.

After this lecture, you will be able to describe Azure Migrate, Data Box, AzCopy, Storage Explorer, and Azure File Sync for assessment, bulk transfer, and file movement.

After this lecture, you will be able to explore how Azure Migrate supports a TCO and business-case conversation for moving workloads to Azure.

After this lecture, you will be able to compare Microsoft Entra ID, Entra Connect, and Entra Domain Services and describe what each is used for.

After this lecture, you will be able to contrast passwords, SSO, MFA, and passwordless options such as Windows Hello, Authenticator, and FIDO2.

After this lecture, you will be able to describe Entra External ID, B2B collaboration, B2B direct connect, and B2C for guests and consumers.

After this lecture, you will be able to explain how Conditional Access uses sign-in signals to allow, block, or require MFA based on location, device, and app.

After this lecture, you will be able to describe Azure RBAC roles, scopes, the allow model, and least-privilege access to resources.

After this lecture, you will be able to explain Zero Trust principles and the defense-in-depth layers from physical security through data.

After this lecture, you will be able to describe Defender for Cloud posture and threat protection across Azure, hybrid, and other clouds.

After this lecture, you will be able to list factors that affect Azure cost and use Cost Management analysis, alerts, budgets, and resource tags.

After this lecture, you will be able to explain how the Pricing Calculator estimates the cost of Azure resources you plan to provision.

After this lecture, you will be able to open the Azure Pricing Calculator and build an estimate for resources you intend to use.

After this lecture, you will be able to explain how the TCO Calculator compares on-premises infrastructure cost with an equivalent Azure environment.

After this lecture, you will be able to open the Azure TCO Calculator and compare current datacenter costs with Azure.

After this lecture, you will be able to describe Azure Blueprints, artifacts such as policies and templates, and how assignments help standardize environments.

After this lecture, you will be able to explain Azure Policy for standards and compliance, give example definitions, and contrast policies with initiatives.

After this lecture, you will be able to recognize Azure Policy and Azure Blueprint in the portal as tools for enforcing standards at scale.

After this lecture, you will be able to distinguish Delete and ReadOnly resource locks and explain that locks apply even when RBAC would otherwise allow a change.

After this lecture, you will be able to use the Service Trust Portal to find Microsoft security, privacy, and compliance documents and pin them in My Library.