Azure Fundamentals
Microsoft Azure Fundamentals: AZ-900
EXAM DESIGN
Audience Profile
Candidates for this exam should have foundational knowledge of cloud services and how those services are provided
with Microsoft Azure. The exam is intended for candidates who are just beginning to work with cloud-based solutions
and services or are new to Azure.
Azure Fundamentals exam is an opportunity to prove knowledge of cloud concepts, Azure services, Azure workloads,
security and privacy in Azure, as well as Azure pricing and support. Candidates should be familiar with the general
technology concepts, including concepts of networking, storage, compute, application support, and application
development.
Azure Fundamentals can be used to prepare for other Azure role-based or specialty certifications, but it is not a
prerequisite for any of them.
Objective Domains
SKILLS MEASURED
• NOTE: The bullets that appear below each of the skills measured are intended to
illustrate how we are assessing that skill. This list is not definitive or exhaustive.
• NOTE: In most cases, exams do NOT cover preview features, and some features
will only be added to an exam when they are GA (General Availability).
Describe Cloud Concepts (20-25%)
Identify the benefits and considerations of using cloud services
• Identify the benefits of cloud computing, such as High Availability, Scalability,
Elasticity, Agility, and Disaster Recovery
• Identify the differences between Capital Expenditure (CapEx) and Operational
Expenditure (OpEx)
• Describe the consumption-based model
Describe the differences between categories of cloud services
• Describe the shared responsibility model
• Describe Infrastructure-as-a-Service (IaaS),
• Describe Platform-as-a-Service (PaaS)
• Describe serverless computing
• Describe Software-as-a-Service (SaaS)
• Identify a service type based on a use case
Describe the differences between types of cloud computing
• Define cloud computing
© 2020-21 Certiport, Inc. Certiport and the Certiport logo are registered trademarks of Certiport Inc. All other trademarks and registered trademarks are the property of their respective holders.
Azure Fundamentals
• Describe Public cloud • Describe the functionality and usage of Azure Monitor
• Describe Private cloud • Describe the functionality and usage of Azure Service Health
• Describe Hybrid cloud
• Compare and contrast the three types of cloud computing Describe general security and network
security features (10-15%)
Describe Core Azure Services (15-20%) Describe Azure security features
Describe the core Azure architectural components • Describe the concept of defense in depth
• Describe the benefits and usage of Regions and Region Pairs • Describe the functionality and usage of Network Security
Groups (NSG)
• Describe the benefits and usage of Availability Zones
• Describe the functionality and usage of Azure Firewall
• Describe the benefits and usage of Resource Groups
• Describe the functionality and usage of Azure DDoS
• Describe the benefits and usage of Subscriptions
protection
• Describe the benefits and usage of Management Groups
• Describe the benefits and usage of Azure Resource Manager Describe Azure network security
• Describe the concept of defense in depth
• Explain Azure resources
• Describe the functionality and usage of Network Security
Describe core resources available in Azure Groups (NSG)
• Describe the benefits and usage of Virtual Machines, Azure • Describe the functionality and usage of Azure Firewall
App Services, Azure Container Instances (ACI), Azure
• Describe the functionality and usage of Azure DDoS
Kubernetes Service (AKS), and Azure Virtual Desktop
protection
• Describe the benefits and usage of Virtual Networks, VPN
Gateway, Virtual Network peering, and ExpressRoute
• Describe the benefits and usage of Container (Blob) Storage,
Describe identity, governance, privacy, and
Disk Storage, File Storage, and storage tiers compliance features (20-25%)
• Describe the benefits and usage of Cosmos DB, Azure SQL Describe core Azure identity services
Database, Azure Database for MySQL, Azure Database for • Explain the difference between authentication and
PostgreSQL, and SQL Managed Instance authorization
• Describe the benefits and usage of Azure Marketplace • Define Azure Active Directory
• Describe the functionality and usage of Azure Active
Describe core solutions and management Directory
tools on Azure (10-15%) • Describe the functionality and usage of Conditional Access,
Multi-Factor Authentication (MFA), and Single Sign-On (SSO)
Describe core solutions available in Azure
• Describe the benefits and usage of Internet of Things (IoT) Describe Azure governance features
Hub, IoT Central, and Azure Sphere • Describe the functionality and usage of Role-Based Access
• Describe the benefits and usage of Azure Synapse Analytics, Control (RBAC)
HDInsight, and Azure Databricks • Describe the functionality and usage of resource locks
• Describe the benefits and usage of Azure Machine Learning, • Describe the functionality and usage of tags
Cognitive Services and Azure Bot Service
• Describe the functionality and usage of Azure Policy
• Describe the benefits and usage of serverless computing
solutions that include Azure Functions and Logic Apps • Describe the functionality and usage of Azure Blueprints
• Describe the benefits and usage of Azure DevOps, GitHub, • Describe the Cloud Adoption Framework for Azure
GitHub Actions, and Azure DevTest Labs
Describe privacy and compliance resources
Describe Azure management tools • Describe the Microsoft core tenets of Security, Privacy, and
• Describe the functionality and usage of the Azure Portal, Compliance
Azure PowerShell, Azure CLI, Cloud Shell, and Azure Mobile • Describe the purpose of the Microsoft Privacy Statement,
App Online Services Terms (OST) and Data Protection Amendment
• Describe the functionality and usage of Azure Advisor (DPA)
• Describe the functionality and usage of Azure Resource • Describe the purpose of the Trust Center
Manager (ARM) templates
© 2020-21 Certiport, Inc. Certiport and the Certiport logo are registered trademarks of Certiport Inc. All other trademarks and registered trademarks are the property of their respective holders.
Azure Fundamentals
• Describe the purpose of the Azure compliance
documentation
• Describe the purpose of Azure Sovereign Regions (Azure
Government cloud services and Azure China cloud services)
Describe Azure cost management and
Service Level Agreements (10-15%)
Describe methods for planning and managing costs
• Identify factors that can affect costs (resource types, services,
locations, ingress and egress traffic)
• Identify factors that can reduce costs (reserved instances,
reserved capacity, hybrid use benefit, spot pricing)
• Describe the functionality and usage of the Pricing calculator
and the Total Cost of Ownership (TCO) calculator
• Describe the functionality and usage of Azure Cost
Management
Describe Azure Service Level Agreements (SLAs) and
service lifecycles
• Describe the purpose of an Azure Service Level Agreement
(SLA)
• Identify actions that can impact an SLA (i.e. Availability Zones)
• Describe the service lifecycle in Azure (Public Preview and
General Availability)
© 2020-21 Certiport, Inc. Certiport and the Certiport logo are registered trademarks of Certiport Inc. All other trademarks and registered trademarks are the property of their respective holders.
