AZ-900 Microsoft Azure Fundamentals: 2025 Study Plan and Key Topics
The Microsoft AZ-900: Azure Fundamentals certification is designed for individuals starting their journey into cloud computing. A major portion of the exam revolves around understanding cloud concepts – what cloud computing is, its deployment models, service models, and the economic and operational benefits it offers.
This foundational knowledge provides context for why businesses adopt cloud services and how Azure delivers its solutions. Whether you’re a student, IT generalist, or business stakeholder, mastering these core ideas will support your broader understanding of Microsoft Azure.
Cloud computing is the delivery of computing services – including storage, servers, networking, databases, analytics, and software – over the internet. Instead of building and maintaining physical servers, users access services on demand from a cloud provider like Microsoft Azure.
Cloud computing enables scalability, flexibility, and cost-efficiency by allowing organizations to pay only for the services they use and scale resources up or down based on demand.
Cloud platforms like Azure are built on global infrastructure that ensures high availability. This means services are operational and accessible even in the face of hardware failures or network disruptions.
Cloud resources can be scaled vertically (upgrading existing resources) or horizontally (adding more instances) to meet changing demand. This ensures optimal performance without over-provisioning.
Cloud environments automatically adjust resources to handle sudden changes in workload. Elasticity is especially valuable for applications with fluctuating usage patterns.
Cloud computing allows organizations to quickly deploy and iterate solutions without waiting for hardware procurement or infrastructure setup.
Cloud services are designed with redundancy and replication in mind. Systems can continue functioning correctly even when components fail.
Azure provides built-in tools for backup and recovery, enabling organizations to recover from data loss or service outages quickly and with minimal disruption.
Azure operates in multiple regions worldwide. Customers can deploy applications close to their users for lower latency and regional compliance.
Understanding the three core service models is essential for the AZ-900 exam. These models define the level of control and responsibility shared between the cloud provider and the user.
IaaS provides fundamental building blocks like virtual machines, storage, and networks.
User responsibilities include managing:
Azure services offering IaaS include:
PaaS abstracts infrastructure management, enabling users to focus on application development.
User responsibilities include managing:
Azure services offering PaaS include:
SaaS delivers fully functional applications accessible through web browsers or APIs.
User responsibilities include:
Examples of SaaS:
Cloud deployment models describe how cloud services are made available. Each model has distinct advantages and is suitable for specific use cases.
Services are hosted on shared infrastructure managed by a third-party provider. This model provides cost efficiency and minimal management overhead.
Azure is a public cloud platform.
Private cloud environments are dedicated to a single organization. They can be hosted on-premises or by a third-party provider, but offer more control and customization.
Private clouds are often used in highly regulated industries.
The hybrid cloud combines public and private environments. This model supports legacy applications, data residency requirements, and flexible resource scaling.
Azure supports hybrid deployments with tools like:
Cloud security is a shared responsibility between the provider and the customer.
The degree of responsibility varies depending on the service model used. SaaS requires less customer management than IaaS.
Understanding cost models is crucial in cloud economics and business decision-making.
CapEx refers to upfront costs to purchase and own physical assets like servers, storage, and networking equipment.
OpEx covers ongoing costs related to using services. In cloud computing, resources are rented and paid for monthly, aligning better with actual usage.
The cloud model shifts most IT spending from CapEx to OpEx, offering:
In the cloud, you typically only pay for what you use. Azure’s consumption-based model is cost-efficient because
Large-scale cloud providers like Microsoft can purchase hardware in bulk and optimize infrastructure more efficiently than most enterprises. These cost savings are passed on to customers through lower prices for compute, storage, and bandwidth.
The AZ-900 exam emphasizes the following key characteristics:
Systems are accessible and operational with minimal downtime.
Services scale based on demand automatically or manually.
Resources expand or contract dynamically with workload changes.
Quick deployment of services and updates.
Services continue to function even when components fail.
Recovery strategies and backup mechanisms for data continuity.
Serverless computing allows developers to run code without managing servers. It is ideal for short-running tasks, event-driven automation, and reducing infrastructure overhead.
Azure offers serverless services like:
These services scale automatically and are billed based on actual execution time.
Understanding Azure’s architecture and core services is essential for passing the AZ-900 exam. This section covers how Azure is structured, the fundamental building blocks of the platform, and the most commonly used services across compute, networking, storage, and identity management.
Microsoft Azure is more than just virtual machines and databases – it’s a global infrastructure supporting a wide range of solutions, from small web applications to enterprise-scale systems. Knowing how these services fit into Azure’s architecture helps you choose the right tools and technologies for specific business needs.
A region is a geographical area containing at least one, but often multiple, data centers. Azure has more regions than any other cloud provider, enabling customers to deploy services close to users for better latency and data sovereignty.
Each region is associated with:
Availability zones are physically separate locations within a region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking.
Zones support high availability by distributing workloads across multiple locations. Key services like Azure Virtual Machines and Azure Kubernetes Service can be deployed across zones for fault tolerance.
Resource groups are logical containers for Azure resources. They help organize and manage resources like VMs, storage accounts, and databases as a single unit.
Resource groups enable
A subscription is an agreement with Microsoft to use Azure services. It groups resources for billing and access control.
Multiple subscriptions can be used to:
Management groups help organize subscriptions into hierarchies for governance and policy enforcement across large organizations.
They allow you to:
The AZ-900 exam requires familiarity with commonly used Azure services across major categories such as compute, storage, networking, and identity. These services are the foundation for most Azure deployments.
Azure offers several services to run and manage computing workloads.
VMs are IaaS offerings that allow you to run Windows or Linux instances in the cloud. You choose the VM size, OS, and configuration.
Use cases:
App Service is a PaaS offering to host web apps, REST APIs, and mobile backends. It simplifies deployment and management, with built-in scaling and DevOps support.
Use cases:
Functions provide serverless compute, letting you run code in response to events or triggers without managing infrastructure. They scale automatically and charge only for execution time.
Use cases:
Azure supports containerized applications through
Use cases:
Azure includes several networking tools to securely connect, route, and distribute traffic within and outside the Azure platform.
VNets are private, isolated networks in Azure that enable communication between Azure resources. They support features like:
Use cases:
A Layer 4 (TCP/UDP) load balancer for high availability and performance. It distributes traffic across multiple virtual machines.
Use cases:
A Layer 7 load balancer with web application firewall (WAF) capabilities. It supports HTTP/HTTPS traffic and SSL termination.
Use cases:
A VPN Gateway enables secure connections between Azure VNets and on-premises networks through IPsec/IKE tunnels.
Use cases:
ExpressRoute offers a dedicated, private connection between on-premises infrastructure and Azure datacenters. It provides higher speed and more security than public internet connections.
Use cases:
Storage is a core Azure component used for files, databases, logs, backups, and media. Azure offers highly scalable, durable, and cost-effective storage options.
Object storage for unstructured data such as images, videos, and documents. It is highly scalable and accessible via HTTPS/S.
Use cases:
Provides persistent storage for Azure VMs. Each VM can have one or more attached disks.
Use cases:
Offers fully managed file shares accessible via SMB protocol. It allows for lift-and-shift migrations of legacy applications using shared drives.
Use cases:
Designed for long-term retention or infrequent access. Cool and Archive tiers reduce storage costs for cold data.
Use cases:
Azure provides various database options based on workload and application needs.
A managed relational database service based on Microsoft SQL Server. It offers high availability, scaling, and automated backups.
Use cases:
A globally distributed, multi-model NoSQL database designed for low-latency access.
Use cases:
Managed open-source relational databases. They provide backup, scaling, and high availability.
Use cases:
Azure includes integrated tools for managing users, authentication, and access control.
A cloud-based identity and access management service. It enables:
Use cases:
RBAC allows fine-grained access control by assigning roles to users, groups, or services at different scopes (subscription, resource group, resource).
Use cases:
Policies that enforce access controls based on conditions like location, device state, and user behavior.
Use cases:
Monitoring helps ensure application performance and system health.
Provides metrics, logs, and alerts across Azure services.
Use cases:
Provides personalized recommendations on cost savings, security, and performance optimization.
Use cases:
Notifies users of Azure service outages and planned maintenance events.
Use cases:
Azure Marketplace is an online store with pre-built solutions, services, and applications that can be integrated into Azure environments.
Examples include:
Use cases:
Understanding governance, compliance, and cost management is critical for maintaining control over cloud resources, ensuring regulatory alignment, and optimizing budgets. In this part of the AZ-900 study guide, we explore the key tools and services Azure offers to help manage permissions, enforce policies, maintain security, and monitor costs effectively.
These concepts are essential not just for IT professionals but also for business and financial stakeholders responsible for accountability, legal compliance, and strategic planning within cloud environments.
Azure governance refers to the mechanisms that organizations use to manage their cloud environments effectively and securely.
Role-Based Access Control enables precise control over who can perform what actions on specific Azure resources. RBAC is based on three main components:
Examples of built-in roles:
RBAC supports the principle of least privilege, ensuring users have only the access they need.
Azure Policy is a service that enforces standards and assesses compliance at scale.
Key capabilities:
Common policy scenarios:
Policies are grouped into initiatives for broader compliance scenarios (e.g., ISO 27001, NIST, or GDPR).
Azure Blueprints help define and repeatably deploy a governed environment that includes:
Blueprints are especially useful in enterprise and multi-environment deployments where consistency is critical.
Example use case:
Resource Locks prevent accidental deletion or modification of critical resources.
Two types:
Locks are often applied to production environments, resource groups, or mission-critical services.
Azure Resource Graph is a query tool that lets you explore and analyze resources across subscriptions using the Kusto Query Language (KQL).
Use cases:
It provides visibility into all resources and their properties across large environments.
Azure compliance tools and features help organizations meet regulatory, legal, and internal standards across industries and regions.
Azure supports compliance with numerous international standards, including:
Azure’s compliance portfolio is one of the most comprehensive in the cloud industry.
Microsoft Purview helps manage compliance requirements through
It provides insights into how well an organization complies with standards like NIST or GDPR and suggests improvement actions.
The Microsoft Trust Center provides detailed information on
This is an essential resource for governance professionals and auditors.
One of the most critical concerns for cloud users is controlling and forecasting costs. Azure provides tools to help plan, monitor, and manage cloud spending effectively.
The Azure Pricing Calculator is a free tool that allows you to estimate the cost of Azure services based on your planned configurations and usage patterns.
Features include:
It’s commonly used in project planning, forecasting, and proposal development.
The TCO Calculator estimates the cost savings of moving on-premises workloads to Azure. It helps compare:
It’s a strategic tool for financial and business decision-makers.
Azure Cost Management is a suite of tools integrated into the Azure portal that helps monitor usage and control expenses.
Key features:
This tool can be used by account administrators and cost managers to stay within financial targets.
Azure allows you to set spending thresholds for:
When a budget limit is approached or exceeded, alerts are triggered via email or automation actions (e.g., scaling down services).
Example scenario:
Tags are name-value pairs that are assigned to resources for categorization and cost tracking.
Examples of tags:
Tags make it easier to:
Tags can be applied manually or automatically through ARM templates or policies.
Management tools in Azure help monitor, configure, and respond to resource health and performance issues.
Azure Monitor collects metrics, logs, and diagnostics for all Azure services. It helps visualize performance and set alerts.
Components:
Service Health informs users of outages, planned maintenance, or other changes affecting Azure services.
Features:
It helps organizations respond to platform-wide issues proactively.
Azure Advisor is a recommendation engine that suggests best practices for
Example recommendations:
Azure AD offers tools to manage identity lifecycle and access policies.
Conditional Access policies evaluate conditions such as:
These policies enforce:
Azure AD Premium includes governance tools for:
Hands-on labs and practice exams are especially helpful for mastering this part of the exam. Focus on the purpose of each governance and management tool, when to use it, and what business problems it solves.
The final area of the AZ-900 exam explores Microsoft Azure’s customer support offerings, service lifecycle policies, and commitment to continuous improvement and innovation. Understanding how Azure maintains service reliability, responds to incidents, and supports your workloads with defined guarantees and structured plans is crucial, especially for professionals in governance, management, and procurement roles.
This section helps you identify appropriate support plans, interpret SLAs, and understand how Microsoft keeps its platform up-to-date with evolving technology demands.
Azure provides a range of support plans to meet the needs of organizations at different stages of cloud adoption. Each plan includes different levels of technical support, response times, and proactive services.
There are five main support plans:
o Azure documentation
o Community support forums
o Azure status dashboard
o Limited billing and subscription support
o Business hours access via email
o Support for one user
o 8-hour response time for low-severity issues (Severity C)
o 24/7 technical support for critical issues
o Response time:
o All Standard features
o Fast-track support for Severity A
o Access to ProDirect Delivery Manager
o Advisory and operational reviews
o Custom agreements
o Engineering support
o Onboarding assistance
o Deep architecture reviews
Choosing the right support plan depends on the criticality of your workloads and the internal resources available for issue resolution.
Azure provides multiple self-service and guided resources for learning and issue resolution.
The official product documentation for every Azure service, including tutorials, conceptual overviews, and quickstarts.
Interactive learning platform offering:
It’s a free and recommended study source for AZ-900.
Public dashboard showing real-time information on the health of Azure services across regions.
An SLA (Service Level Agreement) defines Microsoft’s uptime guarantee for Azure services. Understanding SLAs helps organizations plan for availability and understand risk levels.
Each Azure service includes an SLA that outlines:
When combining multiple services, overall availability must be calculated based on the joint probability of each service’s uptime.
Example:
If two services each have a 99.9% SLA:
Understanding combined SLA helps estimate total system availability.
Azure follows a structured lifecycle for launching, supporting, and retiring services. This ensures clarity around support timelines and technology changes.
Previews allow customers to test new features and provide feedback but should not be used in production.
Planning for lifecycle changes ensures operational continuity and compliance with organizational standards.
Azure is constantly evolving, with Microsoft investing in:
Microsoft publishes new releases and changes via:
Staying current with these changes helps IT professionals, developers, and architects align their strategies with Azure’s capabilities.
Azure places strong emphasis on security, compliance, and customer trust.
Microsoft adheres to global privacy laws and provides transparency regarding:
Azure enables customers to encrypt, classify, and protect data using tools like:
Azure adopts a Zero Trust model, requiring
Services like Azure Active Directory Conditional Access, Microsoft Defender for Cloud, and Azure Policy are used to implement this model.
Azure support, SLAs, and lifecycle policies ensure that customers can trust Azure to run mission-critical workloads. These services, combined with Microsoft’s commitment to innovation and security, make Azure a reliable and forward-looking cloud platform.
For the AZ-900 exam, you should focus on understanding:
Now that you’ve completed all four parts of this guide, you have a comprehensive understanding of the AZ-900 exam domains. Combine your reading with practice tests and hands-on Azure experience to reinforce your learning and boost your confidence.
The Microsoft AZ-900: Azure Fundamentals certification is an ideal starting point for individuals looking to build foundational knowledge of cloud computing and Microsoft Azure. Whether you’re a student, business professional, or transitioning into a technical role, AZ-900 offers a clear and accessible path into the world of cloud services. The exam covers essential topics such as cloud concepts, core Azure services, governance and compliance, pricing, and support structures – all designed to give you a well-rounded understanding without requiring prior technical expertise. Preparation involves combining theoretical study through resources like Microsoft Learn with hands-on experience using Azure’s free tools. Practice tests help reinforce knowledge and improve confidence with real-world scenarios and exam-style questions. Once certified, candidates gain not only a credential recognized by employers but also a strong foundation for advancing to more specialized Microsoft certifications. By approaching AZ-900 with a structured study plan, practical labs, and clear focus on core concepts, you can confidently take your first step into cloud technology and the broader Microsoft ecosystem.
Popular posts
Recent Posts