All certifications / Azure Fundamentals / Lessons
Azure Fundamentals AZ-900 lessons
Study Azure Fundamentals for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Azure Fundamentals study planA week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Domain 1: Describe cloud concepts
- What cloud computing is, and the shared responsibility model across on-premises, IaaS, PaaS and SaaS
- Cloud models: public, private and hybrid cloud, plus multicloud and where Azure Arc fits
- The consumption-based model and pay-as-you-go pricing compared with buying hardware
- Capital expenditure (CapEx) vs operational expenditure (OpEx) and how the cloud shifts spending
- High availability, service-level agreements (SLAs) and composite availability
- Scalability and elasticity: scaling up vs scaling out, manual vs automatic
- Reliability and predictability of performance and cost in the cloud
- Security, governance and manageability benefits of the cloud (management of the cloud vs in the cloud)
- Infrastructure as a service (IaaS): what you manage and typical use cases such as lift-and-shift
- Platform as a service (PaaS) and serverless: what the provider manages and typical use cases
- Software as a service (SaaS) and choosing between IaaS, PaaS and SaaS for a scenario
Domain 2: Describe Azure architecture and services
- Azure regions, region pairs and sovereign regions (Azure Government, Azure operated by 21Vianet in China)
- Availability zones and datacenters: zonal vs zone-redundant services
- Azure resources, resource groups, subscriptions and management groups: the hierarchy and what each is for
- Compute: virtual machines, VM scale sets, availability sets and Azure Virtual Desktop
- Containers and serverless compute: Container Instances, Container Apps, AKS, Azure Functions and App Service
- Virtual networks, subnets, peering, Azure DNS, and public vs private endpoints
- Hybrid connectivity: VPN Gateway (site-to-site, point-to-site) vs ExpressRoute
- Azure Storage services (Blob, Files, Queue, Table, Disks), storage account types and access tiers (Hot, Cool, Cold, Archive)
- Storage redundancy: LRS, ZRS, GRS, GZRS and read-access secondary options
- Moving data and migrating: AzCopy, Storage Explorer, Azure File Sync, Azure Migrate and Azure Data Box
- Microsoft Entra ID and Entra Domain Services; authentication methods: SSO, MFA and passwordless
- External identities (B2B and customer identity) and Conditional Access
- Azure role-based access control (RBAC), Zero Trust, defense in depth and Microsoft Defender for Cloud
Domain 3: Describe Azure management and governance
- Factors that affect cost in Azure: resource type, consumption, region, bandwidth, reservations and Azure Hybrid Benefit
- The Pricing Calculator vs the Total Cost of Ownership (TCO) Calculator
- Microsoft Cost Management: cost analysis, budgets and alerts, and using tags to track spending
- Microsoft Purview for data governance, and the Service Trust Portal for compliance reports
- Azure Policy: definitions, initiatives, assignments and compliance
- Resource locks: CanNotDelete vs ReadOnly and how they inherit
- Tools for interacting with Azure: the portal, Azure Cloud Shell, Azure CLI and Azure PowerShell
- Azure Arc for managing on-premises and multicloud resources
- Azure Resource Manager and infrastructure as code with ARM templates and Bicep
- Azure Advisor recommendations and Azure Service Health (Azure status, Service Health, Resource Health)
- Azure Monitor: metrics, Log Analytics, alerts and Application Insights