AZ-900 Microsoft Azure Fundamentals lessons
Work through the guides and lessons behind this exam, then take the assessment to locate the weak areas still costing you points.
Published AZ-900 lessons
Describe Cloud Concepts
Learn the delivery, demand, and cost cues that define cloud computing for Azure Fundamentals.
Learn who owns data, identity, OS, network, and platform tasks across IaaS, PaaS, and SaaS for AZ-900.
Use ownership, access, control, cost, and placement cues to pick the right cloud model.
Use ownership, timing, and demand cues to separate CapEx, OpEx, and pay-as-you-go cloud pricing.
Learn the serverless cue for AZ-900: event-driven code with reduced server management while customer code and access responsibilities remain.
Use AZ-900 scenario cues to separate uptime, capacity growth, and demand-responsive scaling.
Use scenario cues to separate failure recovery, steady performance, and planned spending.
Learn when AZ-900 asks about cloud security benefits, customer responsibility, governance guardrails, and manageability traps.
Learn the AZ-900 cloud manageability cues for automation, templates, management channels, monitoring, and adjacent tool traps.
Spot IaaS on AZ-900 by control, responsibility, lift-and-shift, dev/test, and PaaS or SaaS boundary cues.
Learn the AZ-900 cue for choosing PaaS when a scenario needs custom app or database capability without managing the platform stack.
Learn the AZ-900 cue for choosing SaaS when a scenario needs a complete ready-made app with low customer technical management.
Describe Azure Architecture and Services
Use scenario cues to choose between region, geography, region pair, and sovereign cloud answers.
Learn when Azure availability zones solve datacenter-level failure scenarios and when region, residency, or cross-region cues point elsewhere.
Learn when Azure resource groups fit lifecycle, access, deletion, region, tag, and hierarchy scenarios for Azure Fundamentals.
Learn when AZ-900 expects an Azure subscription boundary versus a management group for inherited governance across subscriptions.
Learn how to choose management group, subscription, resource group, or resource scope for AZ-900 hierarchy questions.
Learn when AZ-900 scenarios point to Azure VMs, containers, or functions by using workload shape, management burden, and common traps.
Learn when to choose Azure VMs, scale sets, availability sets, zones, or Azure Virtual Desktop from fundamentals-level scenario cues.
Learn when AZ-900 scenarios point to App Service, Azure Container Apps, or virtual machines from workload shape and control cues.
Learn when AZ-900 scenarios point to containers, AKS, or Azure Functions by using packaging, orchestration, and event triggers.
Learn when to choose an Azure VNet, subnet, or VNet peering from fundamentals-level networking scenario cues.
Learn when AZ-900 scenarios point to VPN Gateway, site-to-site or point-to-site VPN, ExpressRoute, or an adjacent networking service.
Learn when to choose Azure Public DNS, Azure Private DNS, or a networking boundary for AZ-900 name-resolution questions.
Learn when to choose public endpoints, private endpoints, Private Link, and DNS-to-private-IP resolution for AZ-900 scenarios.
Learn when AZ-900 scenarios point to Blob Storage, Azure Files, Queue Storage, or Table Storage.
Learn how to choose hot, cool, cold, or archive tiers from AZ-900 storage access-pattern and retrieval-latency cues.
Learn when to choose LRS, ZRS, GRS, GZRS, RA-GRS, or RA-GZRS by matching Azure Storage redundancy to the failure scope.
Learn when to choose AzCopy, Storage Explorer, File Sync, Azure Migrate, or Data Box from fundamentals-level scenario cues.
Learn when to choose Microsoft Entra ID or Microsoft Entra Domain Services for Azure directory-service scenarios on the AZ-900 exam.
Learn when to choose SSO, MFA, passwordless authentication, or external identities from Azure Fundamentals identity scenario cues.
Learn when AZ-900 scenarios point to Conditional Access, Azure RBAC, authentication, authorization, or an adjacent governance distractor.
Learn when AZ-900 scenarios point to Zero Trust, defense in depth, or Microsoft Defender for Cloud by reading the security cue.
Describe Azure Management and Governance
Learn how resource type, usage, location, and bandwidth change Azure costs, and how to avoid confusing drivers with tools.
Learn when AZ-900 scenarios need Azure pricing calculator versus TCO calculator for cost estimates and migration comparisons.
Learn AZ-900 Cost Management cues for cost analysis, budgets, alerts, and nearby distractors without overteaching billing setup.
Learn when AZ-900 scenarios are asking for Azure tags, how tags support cost attribution, and where resource groups, RBAC, budgets, and policy differ.
Learn when AZ-900 scenarios point to Microsoft Purview instead of Azure Policy for data catalog, discovery, classification, lineage, and compliance.
Learn when to choose Azure Policy, initiatives, RBAC, resource locks, or Purview for Azure Fundamentals governance questions.
Learn when AZ-900 scenarios call for delete locks, read-only locks, or Azure Policy instead.
Use AZ-900 scenario cues to separate Azure portal, Cloud Shell, Azure CLI, and Azure PowerShell.
Learn when Azure Arc fits hybrid and multicloud management scenarios, and when AZ-900 wants portal, CLI, ARM templates, IaC, or migration instead.
Use repeatable deployment cues to choose IaC, ARM templates, or Bicep context in AZ-900 questions.
Use recommendation and telemetry cues to choose Azure Advisor, Azure Monitor, or service-health tools in AZ-900 scenarios.
Use scope and event cues to choose Azure Service Health or Azure Status on AZ-900.
Separate Azure Monitor metrics, logs, alerts, Advisor, and Service Health cues for AZ-900 scenarios.
Choose Application Insights for app telemetry and Log Analytics for KQL/log query scenarios in Azure Monitor.