AZ-900 Guide: Top 25 Topics You Must Know in 2026

AZ-900-Microsoft-Azure-Fundamentals

Are you planning to take the Microsoft Azure Fundamentals (AZ-900) certification? Then you’re making a smart career move. This entry-level certification opens doors in cloud computing. Plus, it validates your Azure knowledge to potential employers.

In this guide, you’ll discover the 25 most searched exam topics. We’ve analyzed current exam patterns and candidate feedback. As a result, you’ll know exactly what to study for success.

What is the AZ-900 Exam?

First, let’s look at the exam basics. You’ll face 40-60 questions in 85 minutes. Additionally, you need a score of 700 out of 1000 to pass. The exam costs $99 USD.

Here are the four main exam domains:

  • Cloud Concepts (25-30%)
  • Azure Architecture and Services (35-40%)
  • Azure Management and Governance (30-35%)
  • Azure Security and Compliance (10-15%)

Now, let’s dive into the topics you need to master.

Top 25 AZ-900 Topics Explained

1. What is Cloud Computing?

Cloud computing delivers IT services over the internet. This includes servers, storage, and databases. Instead of owning physical hardware, you rent computing power.

There are three main benefits. First, you save money with pay-as-you-go pricing. Second, you can scale globally in minutes. Third, you get regular updates and improvements.

Think of it like streaming music instead of buying CDs. You access what you need when you need it. Similarly, cloud computing gives you resources on demand.

2. Cloud Deployment Models

Azure supports three deployment types. Each one serves different business needs.

Public Cloud means Microsoft owns the infrastructure. You share resources with other customers. However, your data stays separate and secure.

Private Cloud gives you dedicated resources. Only your organization uses them. This option costs more but offers greater control.

Hybrid Cloud combines both approaches. For example, you can keep sensitive data on-premises. Meanwhile, you use the public cloud for other workloads.

3. IaaS, PaaS, and SaaS Explained

These three service models offer different control levels.

IaaS (Infrastructure as a Service) gives you virtual machines and networks. You control the operating system and applications. Azure Virtual Machines are a perfect example.

PaaS (Platform as a Service) manages more for you. You focus on your code and data. Meanwhile, Azure handles servers and updates. Azure App Service works this way.

SaaS (Software as a Service) provides ready-to-use applications. Microsoft 365 is a common example. You simply log in and start working.

4. Understanding Shared Responsibility

Security is a shared job in the cloud. Microsoft handles some parts. You handle others.

Microsoft always manages physical security. This includes datacenters and network hardware. They also maintain the host infrastructure.

You always control your data and user access. Additionally, you manage accounts and passwords.

The middle layer depends on your service model. With IaaS, you manage more. With SaaS, Microsoft manages more. Therefore, understanding this split is crucial.

5. CapEx vs OpEx in Cloud Computing

Traditional IT requires big upfront spending. This is called Capital Expenditure (CapEx). You buy servers, networking gear, and datacenter space.

Cloud computing changes this approach. Instead, you use Operational Expenditure (OpEx). You pay monthly for what you use.

This shift helps your business in several ways. First, you preserve cash for other investments. Second, you avoid technology becoming outdated. Third, you can scale spending with business growth.

6. Azure Regions and Availability Zones

Azure operates in over 60 regions worldwide. Each region is a geographic area with datacenters. Choosing the right region affects your application performance.

Availability Zones provide extra protection. These are separate datacenters within a region. Each zone has its own power and cooling. Therefore, if one zone fails, others keep running.

Not every region has Availability Zones. This is an important exam detail to remember.

7. Organizing with Resource Groups

Resource groups are containers for your Azure resources. They help you organize related items together.

For instance, you might group all resources for one application. Alternatively, you could organize by environment like development or production.

Here’s an important rule: deleting a resource group deletes everything inside. Therefore, be careful when removing resource groups.

8. Managing Azure Subscriptions

A subscription is your billing agreement with Microsoft. Most organizations have multiple subscriptions.

You might separate subscriptions by department. For example, Marketing has one subscription while IT has another. This makes cost tracking easier.

Subscriptions also provide spending limits. Furthermore, they help you organize resources at a high level.

9. Working with Virtual Machines

Virtual Machines (VMs) give you complete control. You choose the operating system and install any software.

VMs work well for several scenarios. First, they’re great for migrating existing applications. Second, they suit custom software needs. Third, they provide isolated environments for testing.

However, you’re responsible for maintenance. This includes updates, patches, and backups.

10. Building Apps with App Service

App Service is a platform for web applications. It supports many programming languages like Python, Java, and .NET.

The key advantage is simplicity. You upload your code and App Service handles the rest. Microsoft manages servers, updates, and scaling.

Additionally, App Service includes useful features. These include custom domains, SSL certificates, and deployment slots.

11. Going Serverless with Azure Functions

Azure Functions take simplicity even further. You write small pieces of code that run on demand.

For example, you might process uploaded images. Or you could send scheduled reports. Functions run only when triggered.

The pricing model is attractive. You pay only for execution time. Therefore, Functions are perfect for occasional tasks.

12. Storing Data in Azure Storage

Azure Storage offers four services for different needs.

Blob Storage handles files like photos and videos. Think of it as cloud file storage.

File Storage provides network file shares. These work like traditional network drives.

Queue Storage enables messaging between applications. Messages wait in a queue for processing.

Table Storage offers simple NoSQL databases. It stores structured data without complex schemas.

13. Connecting with Virtual Networks

Virtual Networks (VNets) create private networks in Azure. Your resources communicate securely within these networks.

You can divide VNets into subnets. This helps organize resources by function or security level.

VNets also connect to on-premises networks. Therefore, you can build hybrid solutions seamlessly.

14. Managing Identity with Azure AD

Azure Active Directory controls who accesses what. It’s your cloud identity service.

Azure AD works differently from traditional Active Directory. However, it can sync with your on-premises directory.

Key features include single sign-on and multi-factor authentication. These improve both security and user experience.

15. Controlling Access with RBAC

Role-Based Access Control (RBAC) assigns permissions to users. Instead of giving everyone full access, you assign specific roles.

Azure provides built-in roles. For instance, the Reader role allows viewing but not changing resources. Meanwhile, the Contributor role allows most actions except access management.

Always follow the principle of least privilege. Give users only the permissions they absolutely need.

16. Enforcing Standards with Azure Policy

Azure Policy helps maintain compliance. You create rules about how resources should be configured.

For example, you might require all resources to have tags. Or you could restrict resource creation to specific regions.

Policies apply automatically. Therefore, they prevent configuration mistakes before they happen.

17. Protecting Resources with Locks

Resource locks prevent accidental changes. They’re like safety switches for important resources.

Two lock types exist. CanNotDelete locks prevent deletion but allow modifications. ReadOnly locks prevent all changes.

Even account owners must remove locks before deleting resources. This provides strong protection.

18. Estimating Costs with Pricing Calculator

The Pricing Calculator helps you plan expenses. You add services and configure options. Then it shows estimated monthly costs.

Several factors affect pricing. These include your chosen region and resource size. Usage patterns also matter significantly.

Use this tool before deploying resources. It prevents billing surprises later.

19. Comparing Costs with TCO Calculator

The Total Cost of Ownership (TCO) Calculator compares cloud versus on-premises costs. It considers hardware, electricity, and labor.

Many organizations underestimate on-premises costs. They forget about cooling, physical security, and maintenance staff.

The TCO Calculator reveals the true comparison. Often, cloud costs are lower than expected.

20. Monitoring Spending with Cost Management

Cost Management tracks your Azure spending. It shows where money goes each month.

You can set budgets with automatic alerts. For instance, get notified at 80% of your budget. This prevents overspending.

Additionally, Cost Management suggests ways to save money. Recommendations include resizing underused resources.

21. Understanding Service Level Agreements

Service Level Agreements (SLAs) are Microsoft’s uptime promises. Most Azure services guarantee 99.9% or higher availability.

When combining services, you calculate composite SLAs. Multiply individual SLAs together. For example, two 99.9% services together give 99.8% composite SLA.

Your architecture choices affect availability. Using multiple regions or zones improves SLAs.

22. Choosing Azure Support Plans

Azure offers five support plans with different features.

Basic comes free with every account. However, it only includes billing support.

Developer costs $29 monthly. It suits non-production environments.

Standard costs $100 monthly. This works for production workloads.

Professional Direct costs $1000 monthly. It includes faster response times.

Premier offers custom pricing for enterprises.

23. Securing Networks with NSGs

Network Security Groups (NSGs) filter network traffic. They contain rules that allow or deny connections.

Each rule specifies source, destination, and port. Rules have priority numbers. Lower numbers get checked first.

You can apply NSGs to subnets or individual network interfaces. This provides flexible security control.

24. Tracking Performance with Azure Monitor

Azure Monitor collects data about your resources. It gathers two types of information.

Metrics are numerical values over time. For example, CPU usage or memory consumption.

Logs record specific events. These provide detailed troubleshooting information.

You can create alerts based on metrics or logs. Alerts notify you when problems occur.

25. Getting Recommendations from Azure Advisor

Azure Advisor analyzes your resources. Then it suggests improvements in five areas.

Reliability recommendations improve availability. Security suggestions protect against threats. Performance tips speed up applications. Cost advice reduces spending. Operational Excellence guidance improves management.

Following these recommendations optimizes your Azure environment. Many suggestions require just a few clicks to implement.

How to Study for AZ-900 Success

Now you know the key topics. Here’s how to prepare effectively.

Get Hands-On Experience

Create a free Azure account today. Experiment with the services we’ve discussed. Practical experience beats reading alone. Try creating VMs, storage accounts, and virtual networks.

Use Microsoft Learn

Microsoft provides free training modules. These interactive lessons include practice exercises. Knowledge checks test your understanding throughout.

Take Practice Tests

Practice exams reveal your weak areas. They also familiarize you with question formats. Take several practice tests before the real exam.

Understand Concepts Deeply

Don’t just memorize facts. Understand when to use each service. Know why one option is better than another. The exam tests decision-making skills.

Compare Similar Services

Many questions ask you to choose between options. Learn the differences between VMs and App Service. Understand when to use Blob versus File storage. Service comparisons appear frequently.

Plan Your Study Time

Most people need 20-30 hours of study. Spread this over 2-4 weeks. Create a schedule covering all exam domains. Focus extra time on your weaker areas.

Start Your Cloud Journey Today

The AZ-900 certification proves your cloud knowledge. It opens career opportunities in a growing field. By mastering these 25 topics, you’re ready for exam success.

Remember that Azure constantly evolves. Stay current with Microsoft documentation. Check for service updates regularly.

This certification is just your first step. Consider it a foundation for advanced certifications. Next, you might pursue AZ-104 or AZ-204.

Begin your preparation with hands-on practice. Use Microsoft’s free resources extensively. Approach the exam with confidence.

Your cloud computing journey starts now. Good luck with your certification!

Leave a Comment

Your email address will not be published. Required fields are marked *