AZ-900: Microsoft Azure Fundamentals

Audience Profile

As a candidate for this exam, you’re a technology professional who wants to demonstrate foundational knowledge of cloud concepts in general and Microsoft Azure in particular. This exam is a common starting point in a journey towards a career in Azure.

You can describe Azure architectural components and Azure services, such as:

• Compute

• Networking

• Storage

You can also describe features and tools to secure, govern, and administer Azure.

You should have skills and experience working with an area of IT, such as:

• Infrastructure management

• Database management

• Software development

Skills at a Glance

• Describe cloud concepts (25–30%)

• Describe Azure architecture and services (35–40%)

• Describe Azure management and governance (30–35%)

---

Detailed Study Guides

1. Describe cloud concepts (25–30%)

2. Describe Azure architecture and services (35–40%)

3. Describe Azure management and governance (30–35%)

---

Describe Cloud Computing

• Define cloud computing

• Describe the shared responsibility model

• Define cloud models, including:

  • public

  • private

  • hybrid

• Identify appropriate use cases for each cloud model

• Describe the consumption-based model

• Compare cloud pricing models

• Describe serverless

Describe the Benefits of Using Cloud Services

• Describe the benefits of high availability in the cloud

• Describe the benefits of scalability in the cloud

• Describe the benefits of reliability and predictability in the cloud

• Describe the benefits of security and governance in the cloud

• Describe the benefits of manageability in the cloud

Describe Cloud Service Types

• Describe Infrastructure as a Service (IaaS)

• Describe Platform as a Service (PaaS)

• Describe Software as a Service (SaaS)

• Identify appropriate use cases for each cloud service type (IaaS, PaaS, and SaaS)

---

Describe the Core Architectural Components of Azure

• Describe Azure regions

• Describe region pairs

• Describe sovereign regions

• Describe Availability Zones

• Describe Azure datacenters

• Describe Azure resources

• Describe Resource Groups

• Describe Subscriptions

• Describe Management Groups

• Describe the hierarchy of Resource Groups, Subscriptions, and Management Groups

Describe Azure Compute and Networking Services

• Compare compute types, including:

  • Containers

  • Virtual Machines

  • Azure Functions

• Describe virtual machine options, including:

  • Azure Virtual Machines

  • Azure Virtual Machine Scale Sets

  • Availability Sets

  • Azure Virtual Desktop

• Describe the resources required for virtual machines

• Describe application hosting options, including:

  • Web Apps

  • Containers

  • Virtual Machines

• Describe virtual networking, including the purpose of:

  • Azure Virtual Networks (VNets)

  • Azure Virtual Subnets

  • Peering

  • Azure DNS

  • Azure VPN Gateway

  • Azure ExpressRoute

• Define public endpoints

• Define private endpoints

Describe Azure Storage Services

• Compare Azure Storage services

• Describe storage tiers

• Describe redundancy options

• Describe storage account options and storage types

• Identify options for moving files, including:

  • AzCopy

  • Azure Storage Explorer

  • Azure File Sync

• Describe migration options, including:

  • Azure Migrate

  • Azure Data Box

Describe Azure Identity, Access, and Security

• Describe directory services in Azure, including:

  • Microsoft Entra ID

  • Microsoft Entra Domain Services

• Describe Authentication methods in Azure, including:

  • Single Sign-On (SSO)

  • Multi-Factor Authentication (MFA)

  • Passwordless

• Describe Microsoft Entra External Identities in Azure, including:

  • Business-to-Business (B2B)

  • Business-to-Customer (B2C)

• Describe Microsoft Entra Conditional Access

• Describe Azure Role-Based Access Control (RBAC)

• Describe the concept of Zero Trust

• Describe the purpose of the defense-in-depth model | PDF

• Describe the purpose of Microsoft Defender for Cloud

---

Describe Cost Management in Azure

• Describe factors that can affect costs in Azure

• Compare the Pricing Calculator and the Total Cost of Ownership (TCO) Calculator

• Describe Cost Management capabilities in Azure

• Describe the purpose of Tags

Describe Features and Tools in Azure for Governance and Compliance

• Describe the purpose of Microsoft Purview in Azure

• Describe the purpose of Azure Policy

• Describe the purpose of resource Locks

Describe Features and Tools for Managing and Deploying Azure Resources

• Describe the Azure portal

• Describe Azure Cloud Shell, including:

  • Azure Command-Line Interface (CLI)

  • Azure PowerShell

• Describe the purpose of Azure Arc

• Describe Infrastructure as Code (IaC)

• Describe Azure Resource Manager (ARM)

• Describe ARM templates

Describe Monitoring Tools in Azure

• Describe the purpose of Azure Advisor

• Describe Azure Service Health

• Describe Azure Monitor, including:

  • Log Analytics

  • Azure Monitor alerts

  • Application Insights

---

Azure Training and Badges

These hands-on study materials at Microsoft Learn will help you understand various Azure concepts and services. By completing these learning paths, you can earn badges that demonstrate your knowledge and skills in Azure.

• Describe cloud concepts: Learn the basics of cloud computing, key cloud concepts, and core Azure services.

• Describe Azure architecture and services: Understand Azure architecture, key services, and solutions for various workloads.

• Describe Azure management and governance: Gain knowledge on managing and governing your Azure environment effectively.

By completing these modules, you can earn badges to showcase your Azure skills and knowledge.