Study guide for Exam AZ-900: Microsoft Azure

Fundamentals
Skills at a glance

 Describe cloud concepts (25–30%)

 Describe Azure architecture and services (35–40%)

 Describe Azure management and governance (30–35%)

Describe cloud concepts (25–30%)

Describe cloud computing

 Define cloud computing

 Describe the shared responsibility model

 Define cloud models, including public, private, and hybrid

 Identify appropriate use cases for each cloud model

 Describe the consumption-based model

 Compare cloud pricing models

 Describe serverless

Describe the benefits of using cloud services

 Describe the benefits of high availability and scalability in the cloud

 Describe the benefits of reliability and predictability in the cloud

 Describe the benefits of security and governance in the cloud

 Describe the benefits of manageability in the cloud

Describe cloud service types

 Describe infrastructure as a service (IaaS)

 Describe platform as a service (PaaS)

 Describe software as a service (SaaS)

 Identify appropriate use cases for each cloud service type (IaaS, PaaS, and SaaS)

Describe Azure architecture and services (35–40%)

Describe the core architectural components of Azure

 Describe Azure regions, region pairs, and sovereign regions

 Describe availability zones

 Describe Azure datacenters

 Describe Azure resources and resource groups

 Describe subscriptions

 Describe management groups

  Describe the hierarchy of resource groups, subscriptions, and management
groups

Describe Azure compute and networking services

 Compare compute types, including containers, virtual machines, and functions

 Describe virtual machine options, including Azure virtual machines, Azure Virtual
Machine Scale Sets, availability sets, and Azure Virtual Desktop

 Describe the resources required for virtual machines

 Describe application hosting options, including web apps, containers, and virtual
machines

 Describe virtual networking, including the purpose of Azure virtual networks,

Azure virtual subnets, peering, Azure DNS, Azure VPN Gateway, and ExpressRoute

 Define public and private endpoints

Describe Azure storage services

 Compare Azure Storage services

 Describe storage tiers

 Describe redundancy options

 Describe storage account options and storage types

 Identify options for moving files, including AzCopy, Azure Storage Explorer, and
Azure File Sync

 Describe migration options, including Azure Migrate and Azure Data Box

Describe Azure identity, access, and security

 Describe directory services in Azure, including Microsoft Entra ID and Microsoft

Entra Domain Services

 Describe authentication methods in Azure, including single sign-on (SSO), multi-

factor authentication (MFA), and passwordless

 Describe external identities in Azure, including business-to-business (B2B) and

business-to-customer (B2C)

 Describe Microsoft Entra Conditional Access

 Describe Azure role-based access control (RBAC)

 Describe the concept of Zero Trust

 Describe the purpose of the defense-in-depth model

 Describe the purpose of Microsoft Defender for Cloud

Describe Azure management and governance (30–35%)

Describe cost management in Azure

 Describe factors that can affect costs in Azure

 Compare the pricing calculator and the Total Cost of Ownership (TCO) Calculator

 Describe cost management capabilities in Azure

  Describe the purpose of tags

Describe features and tools in Azure for governance and compliance

 Describe the purpose of Microsoft Purview in Azure

 Describe the purpose of Azure Policy

 Describe the purpose of resource locks

Describe features and tools for managing and deploying Azure resources

 Describe the Azure portal

 Describe Azure Cloud Shell, including Azure Command-Line Interface (CLI) and
Azure PowerShell

 Describe the purpose of Azure Arc

 Describe infrastructure as code (IaC)

 Describe Azure Resource Manager (ARM) and ARM templates

Describe monitoring tools in Azure

 Describe the purpose of Azure Advisor

 Describe Azure Service Health

 Describe Azure Monitor, including Log Analytics, Azure Monitor alerts, and
Application Insights
Azure Fundamentals - AZ 900

Target Audience : Sales and Management , developer (familiar cloud concepts) , QA / BA-
Great first Azure CertificationTime Required : 8 hours ( for dev / QA )Where to take exam :
Pearson Vue , Home or Office

What does it take to pass

: Read Notes ( MS Official) , Do hands on , Online ExamExam Guide : Content Outline-

Cloud Concepts-Azure Core Services-Security , Privacy , compliance , Trust-PricingPass :
700 / 1000Format : Multiple choice , answer , drag and drop , hot areaExam time : 60
minsSeat Time : 90 mins

Module 1 : Describe Cloud Concepts

1.1 What is cloud :-https://learn.microsoft.com/en-us/certifications/azure-fundamentals/

You only run , managedby someone else-Dedicated server : physical machine to a single
business-Virtual Private Server : One physical machine but divided into sub machine-
Shared Hosting : mUltiple hosting sharing single machine-Cloud Hosting : multiple
machine and multiple businessCommon Cloud Services-Compute-Storage-Networking-
DatabasesWhat is Microsoft ? best known for OS Azure : Cloud provided service , Azure
means bright blue colour of cloudless sky

1.2 Benefits of Cloud

1.Cost Effective : share with other

2.Global : launch anywhere in world

3.Security and Governance

4. Reliable and Predictable

5.High Availability and high Scalablity

6.Elastic : Automate

7.Managebility : Pre configure templates

Benefits :1.High Availability : remain available , no single point of failure

2.High Scalability : increase your capacitya.Vertical : upgrade bigger server b.Horizontal :

scaling out , Add more server of same size

3.High Elasticity : increase , decrease your capacity based on current demand of traffic

4.High Durability : recover from Disaster , Disaster Recovery

1.3 Type of Cloud Computing

1.SaaS : Software as Service

a.Information and data

b.Devices

c.Accounts and Identities

d.E.g : email and messaging , business productivity apps

i.Finance and app tracking

2.PaaS : Platform as service : Google app engine , for dev

a.Identity and directory infrastructure

b.Applications

c.Network Control

d.E.g : Development Framework : develop cloud based app worrying without server load
etc

i.Analytics and Business Intelligence : Analyze and mine data , find

insights ,pattern and predicting outcome.

3.IaaS : Infrastructure as Service : for Networking , ex

Azure , AWS , For Admins , Hardware

a.Operating system (Licence and Patching)

b.E.g : Lift and Shift migrations : on prem to cloud

i.Testing and dev : different environment ( servers)

ii.Virtual Machines comes under this

4.On Premises

a.Physical host

b.Physical network

c.Physical datacenter

Azure Deployment Model ( Cloud Model )

1.Public cloud :

2.Private cloud : on Premises of org

3.Hybrid : both on prem and cloud ( can be public or private)

a.Public cloud is a part of hybrid , vice versa not true

Multi Cloud : Using multiple cloud partners

Azure Arc : set of technology that helps manage your cloud env in any formation

Total Cost of Ownership

1.On Prem : More cost

2.Azure : Cost Effective

Consumption based Model :

Capital vs Operational Expenditure

1.CAPEX : spending money upfront on Physical infra

a.Reserved instances are CapEx

2.Operational Expenditure : Pay as you go , rent

a.Cloud computing

Module 2 : Azure Architecture and Services

2.1 Core Architecture component of Azure

Regions , AZ , Data centre , Subscriptions and Management Group

Azure Accounts > Subscriptions > Resource Group > Resources

Azure CLI , Azure Portal

Physical Infrastructure

Regions

Availability Zone

Data Center

Region Pair : nearest region for backup

Sovereign Region

US Gov : only US government , agencies and partner

China : via 21vianet , microsoft doesn’t directly maintain the DataCenter

Resource Group :

-A resource in only one resource group

-can’t be nested-can be moved to different group

-Any action on RG is applied on each and every resource

-Delete a RG : all resources deleted

Azure Subscription

-Locally organise your RG and facilitate billing

Management Group :

-To create hierarchy

-User access to multiple subscription

2.2 : Azure compute and networking services

Virtual Machines (VMs)