01 AZ-900 Azure Fundamentals

AZ-900 gives you the language of Azure. Your career growth begins when you can use that language to understand, operate, secure, and explain cloud environments.

The Microsoft Certified: Azure Fundamentals — AZ-900 certification is a beginner-level credential designed to validate foundational knowledge of cloud concepts and Microsoft Azure.

Microsoft currently describes Azure Fundamentals as a common starting point for an Azure career journey. The certification focuses on three broad areas:

cloud concepts
Azure architecture and services
Azure management and governance

Microsoft also positions it as a beginner-level certification, rather than proof of administrator, engineer, or architect-level capability.

For cybersecurity learners, AZ-900 is useful because it establishes the Azure foundation needed before progressing into:

Azure administration
Azure security engineering
Microsoft Entra ID
security operations
Microsoft Sentinel
cloud architecture
Zero Trust
cloud governance

🎯 What Does AZ-900 Validate?

AZ-900 is primarily designed to answer:

Do you understand the basic concepts, architecture, services, management, and governance of Microsoft Azure?

Microsoft’s current certification page lists the assessed areas as:

Describe cloud concepts

Describe Azure architecture and services

Describe Azure management and governance

At this level, you are not expected to independently design a complex enterprise Azure environment.

You are building the foundation required to do that later.

👤 Who Should Take AZ-900?

AZ-900 is particularly suitable for:

students
fresh graduates
career switchers
IT beginners
cybersecurity beginners
business professionals working with Azure teams
IT professionals moving into cloud
security professionals who are new to Azure
learners preparing for AZ-104, AZ-500, or other Microsoft certifications

🌱 If You Are Completely New to Cloud

AZ-900 is a strong starting point.

You may initially encounter terms such as:

subscription
resource group
virtual network
availability zone
Microsoft Entra ID
Azure Resource Manager
Azure Policy
Azure Monitor

Do not try to memorize everything immediately.

Start by understanding Azure as a set of major capability areas.

Microsoft Azure
│
├── Compute
├── Networking
├── Storage
├── Databases
├── Identity
├── Security
├── Monitoring
└── Governance

Then gradually learn what problem each major service solves.

🎓 If You Are a Student or Fresher

Do not treat AZ-900 as:

I passed one Azure certification, therefore I am an Azure Engineer.

AZ-900 is the foundation.

A stronger progression is:

AZ-900
   ↓
Azure Hands-On Practice
   ↓
Networking + Identity
   ↓
Azure Administration
   ↓
Security / SOC / Identity Specialization
   ↓
Labs
   ↓
Projects
   ↓
Interview Preparation

Your objective should be to develop both:

knowledge

and:

evidence of practical capability.

🖥️ If You Already Work in IT

If you already understand:

networking
servers
virtualization
identity
storage
databases

AZ-900 helps translate those concepts into Azure terminology.

For example:

Traditional IT	Azure
Virtual Server	Azure Virtual Machine
Network	Azure Virtual Network
Firewall Rules	Network Security Groups
Identity Directory	Microsoft Entra ID
Object Storage	Blob Storage
Monitoring	Azure Monitor
Secrets / Keys	Azure Key Vault
Governance Policy	Azure Policy

Do not memorize Azure product names independently.

Always connect them back to the technology you already understand.

🛡️ If You Already Work in Cybersecurity

AZ-900 can help you translate existing security knowledge into Azure.

For example:

Least Privilege
→ Azure RBAC

Identity
→ Microsoft Entra ID

MFA
→ Entra authentication controls

Network Segmentation
→ VNets / Subnets / NSGs

Secrets
→ Azure Key Vault

Monitoring
→ Azure Monitor / Log Analytics

Security Posture
→ Microsoft Defender for Cloud

SIEM
→ Microsoft Sentinel

Your existing security knowledge gives you an advantage.

Your challenge is learning the Azure implementation.

📚 How AZ-900 Fits Into the GoHackersCloud Journey

Your recorded course should remain the main structured learning source.

Use this page as your:

certification guide
study strategy
career reference
job-readiness checklist
interview-preparation resource

Recommended workflow:

Recorded AZ-900 Course
        ↓
Understand Concepts
        ↓
Use Azure Hands-On
        ↓
Review Certification Objectives
        ↓
Practice Questions
        ↓
Identify Weak Areas
        ↓
Exam
        ↓
Return to Azure Labs
        ↓
Continue Career Path

🧭 Area 1 — Cloud Concepts

You should understand the fundamental ideas behind cloud computing.

Focus on concepts such as:

cloud computing
public cloud
private cloud
hybrid cloud
consumption-based models
scalability
elasticity
high availability
reliability
manageability

🧠 Understand the Concepts, Not Just Definitions

For example:

Scalability

Can the system support increasing workload demand?

Elasticity

Can capacity increase or decrease dynamically based on demand?

High Availability

Can the workload remain available despite infrastructure failure?

Hybrid Cloud

Can cloud and on-premises environments work together?

💡 Exam Preparation Tip

Whenever you learn a cloud concept, connect it to a business problem.

Example:

A retailer experiences significantly higher traffic during seasonal sales.

Ask:

Which cloud capability helps the organization increase and decrease capacity based on demand?

This converts definitions into scenario thinking.

☁️ Understand Cloud Service Models

Be comfortable with the broad concepts of:

IaaS
PaaS
SaaS

Do not memorize only the acronyms.

Understand how responsibility changes.

🧠 Security Connection

As the service becomes more managed, Microsoft typically takes on more responsibility for the underlying platform.

The customer still retains important responsibility around:

identity
access
data
configuration

This becomes increasingly important later in Azure security roles.

🏗️ Area 2 — Azure Architecture and Services

This area helps you understand how Azure is structured and what major services do.

Microsoft’s current certification overview specifically calls out Azure architectural components plus services such as compute, networking, and storage.

🌍 Azure Regions

Understand that Azure operates through geographic Regions.

Organizations may choose Regions based on:

latency
service availability
resilience
compliance
data residency
business requirements

🏢 Availability Zones

Understand why multiple Availability Zones can improve resilience.

Ask:

What happens if one datacenter location fails?

Cloud architecture should be designed around failure rather than assuming infrastructure never fails.

🗂️ Resource Groups

A resource group is a logical container for Azure resources.

Understand why resource groups help organize:

applications
environments
ownership
access
lifecycle

🧠 Important Career Concept

Resource groups become important later for:

RBAC
governance
cost management
security organization

💳 Subscriptions

Understand that Azure subscriptions are important boundaries for:

billing
resource organization
access
governance

Do not treat a subscription as simply:

an Azure account.

It is part of the broader Azure management hierarchy.

🏛️ Management Groups

Management groups help organizations govern multiple subscriptions.

Conceptually:

Management Group
      ↓
Subscriptions
      ↓
Resource Groups
      ↓
Resources

This becomes very important later in:

enterprise governance
Azure Policy
security architecture

🖥️ Compute

Understand the high-level purpose of services such as:

Azure Virtual Machines

Useful when you need virtualized compute and operating-system control.

App Services

Managed hosting for web applications.

Container Services

Azure provides services for running containers and Kubernetes-based workloads.

Serverless

Azure provides event-driven/serverless compute capabilities.

At AZ-900 level, focus on what type of workload fits which model.

🌐 Networking

Understand the purpose of:

Azure Virtual Network
subnets
Network Security Groups
VPN Gateway
load balancing
private connectivity concepts

Cybersecurity learners should pay particular attention to networking because it becomes critical later in:

AZ-104
AZ-500
security engineering
incident response
architecture

📦 Storage

Understand broad Azure storage concepts.

You should recognize common use cases such as:

object/blob storage
file storage
disk storage
archival storage

Ask:

What type of data is being stored?

and:

How does the application need to access it?

🗄️ Databases

At fundamentals level, understand that Azure provides both:

relational database options
NoSQL / globally distributed database capabilities

You are not expected to become a database architect through AZ-900.

Focus on identifying broad use cases.

🪪 Microsoft Entra ID

For cybersecurity learners, this is one of the most important areas.

Microsoft Entra ID provides cloud identity capabilities.

You should understand high-level concepts such as:

users
groups
authentication
MFA
identities
application access

🔐 Azure RBAC

Azure Role-Based Access Control answers:

Who can perform which actions at which Azure scope?

Understand the broad hierarchy:

Management Group
      ↓
Subscription
      ↓
Resource Group
      ↓
Resource

An RBAC assignment at a higher scope may affect resources beneath it.

This becomes critical later in AZ-104 and AZ-500.

🧠 Azure RBAC vs Entra ID

At fundamentals level, start recognizing the distinction:

Microsoft Entra ID

Identity and directory services.

Azure RBAC

Authorization for Azure resources.

This is a frequent source of confusion for beginners.

🔒 Azure Security Concepts

Be familiar with the purpose of technologies such as:

Microsoft Defender for Cloud
Azure Key Vault
Microsoft Sentinel
Network Security Groups
Azure Firewall concepts
identity security

At AZ-900 level, understand their purpose rather than advanced implementation.

🛡️ Microsoft Defender for Cloud

Think:

Cloud security posture and workload protection.

It helps organizations identify security recommendations and protect cloud workloads.

🔍 Microsoft Sentinel

Think:

SIEM and security operations.

It supports:

security monitoring
incident detection
investigation
analytics

You will go much deeper in the SC-200 path.

🔐 Azure Key Vault

Think:

Protect secrets, keys, and certificates.

Security professionals should understand why application secrets should not simply be stored:

in source code
configuration files
repositories

🏛️ Area 3 — Azure Management and Governance

Microsoft’s current AZ-900 certification scope explicitly includes Azure management and governance.

This area matters because enterprise cloud environments require:

governance
policy
cost control
resource organization
monitoring

🧱 Azure Policy

Azure Policy helps evaluate and enforce organizational requirements.

Think:

Are resources configured according to organizational rules?

Examples might involve:

permitted Regions
required tags
secure configurations
deployment restrictions

🧠 Azure Policy vs RBAC

This comparison is important.

Azure RBAC

Controls:

Who can perform actions?

Azure Policy

Controls/evaluates:

What configurations are allowed or required?

These solve different problems.

🔒 Resource Locks

Understand the purpose of resource locks.

They help reduce accidental:

deletion
modification

Do not confuse locks with security authorization.

📊 Azure Monitor

Azure Monitor provides monitoring capabilities across Azure.

Understand high-level concepts such as:

metrics
logs
alerts

🧠 Security Connection

Later, security professionals will use telemetry from:

Azure Monitor
Log Analytics
Sentinel
Defender

to investigate incidents.

💰 Cost Management

Cloud engineers and architects need cost awareness.

Understand broad concepts around:

consumption
resource usage
cost estimation
cost management
budgets

Do not assume security professionals can ignore cost.

Security architectures also need to be financially sustainable.

💡 AZ-900 Study Strategy

Use a structured method.

Phase 1
Complete the Recorded Course
        ↓
Phase 2
Review the Three Main Objective Areas
        ↓
Phase 3
Use Azure Portal Hands-On
        ↓
Phase 4
Build Comparison Notes
        ↓
Phase 5
Practice Questions
        ↓
Phase 6
Review Weak Areas
        ↓
Phase 7
Final Revision
        ↓
Exam

🧠 How to Take Better Notes

For each Azure concept, capture:

What?

What is it?

Why?

Why does it exist?

When?

When would it be useful?

Security?

What security consideration matters?

Example:

Azure RBAC

What:
Authorization system for Azure resources.

Why:
Controls who can perform actions.

Scope:
Management Group / Subscription / Resource Group / Resource.

Security:
Supports least privilege.

This style is far more useful than copying paragraphs.

💡 Certification Tip 1 — Learn Categories First

Do not memorize Azure alphabetically.

Think:

Compute
Networking
Storage
Identity
Security
Governance
Monitoring

Then attach services to categories.

💡 Certification Tip 2 — Use Comparisons

Be comfortable distinguishing:

Region vs Availability Zone
IaaS vs PaaS vs SaaS
Entra ID vs Azure RBAC
Azure Policy vs RBAC
Defender for Cloud vs Sentinel
public vs private cloud
scalability vs elasticity

💡 Certification Tip 3 — Use Azure Yourself

Even though AZ-900 is conceptual, portal familiarity improves understanding.

Practise:

viewing subscriptions
creating a resource group
exploring a VNet
exploring Entra ID
reviewing RBAC
viewing Azure Monitor

⚠️ Cost Safety for Beginners

Before creating Azure resources:

understand pricing
use approved learning subscriptions where available
monitor cost
delete resources after labs
avoid leaving VMs running unnecessarily

💡 Certification Tip 4 — Track Weak Areas

Use:

Strong
Comfortable
Needs Revision
Needs Hands-On Practice
Weak

If identity is weak:

return to identity.

If governance is weak:

review governance.

Do not compensate by repeatedly taking full practice exams.

💡 Certification Tip 5 — Explain Wrong Answers

When reviewing practice questions:

Why is the correct answer correct?

and:

Why are the other options incorrect?

That approach develops much deeper understanding.

🚫 Common AZ-900 Preparation Mistakes

Mistake 1 — Treating AZ-900 as Pure Memorization

Understand use cases.

Mistake 2 — Never Opening the Azure Portal

Even basic exploration helps.

Mistake 3 — Ignoring Governance

Learners often focus only on VMs and networking.

AZ-900 also evaluates management and governance concepts.

Mistake 4 — Confusing Identity With Authorization

Learn the distinction between:

Entra ID
Azure RBAC

early.

Mistake 5 — Studying Too Many Resources

Complete one structured course properly.

Mistake 6 — Assuming AZ-900 Makes You Job Ready by Itself

The certification is foundational.

Hands-on capability comes next.

🎯 When Are You Ready for AZ-900?

You should increasingly be able to explain without notes:

cloud computing
cloud service models
public/private/hybrid concepts
Azure Regions
Availability Zones
subscriptions
resource groups
management groups
core compute
networking
storage
Entra ID
Azure RBAC
Azure Policy
Azure Monitor
broad security and governance concepts

🧪 Practical Skills to Build Alongside AZ-900

Even at fundamentals level, practise a few basic activities.

Exercise 1 — Resource Hierarchy

Explore:

Subscription
   ↓
Resource Group
   ↓
Resource

Exercise 2 — Azure VNet

Create or inspect:

VNet
subnet
address space

Exercise 3 — RBAC

Review role assignments on a lab resource group.

Exercise 4 — Entra ID

Explore:

users
groups
authentication settings

Exercise 5 — Azure Monitor

Explore:

metrics
logs
alerts

💼 What Jobs Can AZ-900 Support?

AZ-900 can strengthen foundational knowledge for roles such as:

IT Support
Cloud Support Trainee
Junior Azure Support
Technical Support
Junior Infrastructure roles
entry-level SOC roles where cloud awareness helps

However, AZ-900 alone does not demonstrate that you can independently perform:

Azure administration
Azure security engineering
cloud architecture
advanced incident response

Those skills require deeper learning and practice.

🌱 What Employers May Expect From a Beginner

Be ready to discuss:

what Azure is
subscriptions
resource groups
Regions
Entra ID
RBAC basics
networking basics
security fundamentals
governance basics

Employers may also look for:

communication
troubleshooting mindset
networking fundamentals
Windows/Linux awareness
willingness to learn

🚀 Moving From AZ-900 to Job Readiness

Use:

AZ-900 Knowledge
      ↓
Azure Hands-On
      ↓
Networking
      ↓
Identity
      ↓
Administration
      ↓
Security Labs
      ↓
Projects
      ↓
Interview Preparation

🔐 For Cybersecurity Learners

Spend extra time on:

Entra ID
Azure RBAC
MFA
Conditional Access concepts
VNets
NSGs
Key Vault
Defender for Cloud
Sentinel
Azure Policy

These become foundational for almost every Microsoft cloud-security specialization.

🧪 Labs to Circle Back To

After completing your Azure certification courses, return to:

Azure RBAC
      ↓
Microsoft Entra ID Security
      ↓
Azure Network Security
      ↓
Microsoft Defender for Cloud
      ↓
Microsoft Sentinel

At AZ-900 level, these may initially feel advanced.

That is fine.

Return again after AZ-104, AZ-500, SC-200, or SC-300.

You will understand much more each time.

🎤 AZ-900 Interview Preparation

Even for beginner roles, expect questions that test whether you really understand Azure.

☁️ Cloud Fundamentals

1. What is cloud computing?

2. What is IaaS?

3. What is PaaS?

4. What is SaaS?

5. Public vs private vs hybrid cloud?

6. Scalability vs elasticity?

🌍 Azure Architecture

7. What is an Azure Region?

8. What is an Availability Zone?

9. Why would an organization use multiple Availability Zones?

10. What is a resource group?

11. What is an Azure subscription?

12. What is a management group?

🖥️ Azure Services

13. What is an Azure Virtual Machine?

14. What is Azure Virtual Network?

15. What is Azure Storage?

16. What is Microsoft Entra ID?

🔐 Security

17. What is Azure RBAC?

18. What is MFA?

19. What is Azure Key Vault?

20. What is Microsoft Defender for Cloud?

21. What is Microsoft Sentinel?

🏛️ Governance

22. What is Azure Policy?

23. Azure Policy vs Azure RBAC?

24. What are resource locks?

25. What is Azure Monitor?

🚨 Scenario Interview Question 1

A developer needs to manage resources in one application resource group but currently has broad permissions at subscription scope. What would you consider?

Discuss:

least privilege
narrower scope
appropriate RBAC role

🚨 Scenario Interview Question 2

A company wants policies applied consistently across multiple Azure subscriptions. Which Azure organizational concepts should you consider?

Think about:

management groups
Azure Policy

🚨 Scenario Interview Question 3

A company wants to store application secrets securely instead of placing them in source code.

Think:

Azure Key Vault

But explain why.

🚨 Scenario Interview Question 4

A company needs security event analysis and incident investigation across its environment.

At a high level, consider the role of:

Microsoft Sentinel

💬 How to Answer Beginner Interview Questions

Avoid one-word answers.

Instead of:

“Azure RBAC is permissions.”

say:

“Azure RBAC is Azure’s authorization system for controlling which identities can perform which actions at specific scopes such as subscriptions, resource groups, or individual resources.”

That demonstrates actual understanding.

🧠 What If You Don’t Know?

Do not invent an answer.

Say:

“I haven’t worked deeply with that service yet, but my current understanding is…”

Then explain what you know.

For a beginner, clear reasoning is more valuable than pretending to be an expert.

📁 Beginner Portfolio Ideas

Project 1 — Azure Resource Hierarchy Diagram

Create:

Management Group
      ↓
Subscription
      ↓
Resource Group
      ↓
Resources

Explain how:

access
governance
organization

fit into the hierarchy.

Project 2 — Basic Azure Network

Design:

VNet
├── Public / Frontend Subnet
└── Private / Application Subnet

Explain:

routing
segmentation
NSGs

Project 3 — Identity and RBAC Mapping

Create a small example showing:

User
 ↓
RBAC Role
 ↓
Resource Group
 ↓
Azure Resources

Project 4 — Azure Security Service Map

Compare:

Need	Azure / Microsoft Capability
Identity	Microsoft Entra ID
Authorization	Azure RBAC
Secrets	Key Vault
Security posture	Defender for Cloud
SIEM	Sentinel
Governance	Azure Policy

📝 How to Mention AZ-900 on Your Resume

Under certifications:

Microsoft Certified: Azure Fundamentals — AZ-900

Under skills, only list technologies you can genuinely explain.

Do not list every service you saw during the course.

A smaller list you understand well is much stronger.

⭐ What AZ-900 Should Give You

After completing AZ-900 preparation, you should be able to say:

I understand foundational cloud concepts.

I understand the basic structure of Microsoft Azure.

I understand major Azure service categories.

I understand foundational identity and authorization concepts.

I understand basic Azure management and governance.

I can confidently continue into deeper Azure learning.

That is a meaningful milestone.

But it is the beginning, not the end.

🚀 What Should You Do After Passing?

Do not immediately ask:

Which certificate can I collect next?

Ask:

Which technical skill should I develop next?

For learners pursuing technical Azure and cybersecurity careers, a strong progression is:

Pass AZ-900
     ↓
Use Azure
     ↓
Strengthen Networking
     ↓
Strengthen Identity
     ↓
Learn Azure Administration
     ↓
AZ-104

🎯 Recommended Next Certification

For learners moving toward:

Cloud Engineering
Cloud Security Engineering
Azure Administration

the next certification in this career path is:

AZ-104 — Azure Administrator

Why?

Because before you can secure Azure deeply, you need to understand how Azure environments are actually administered.

🏆 Final Advice

Do not underestimate AZ-900 because it is a fundamentals certification.

A weak foundation makes later topics much harder.

But do not overestimate it either.

AZ-900 helps you understand Azure.

Your technical career will eventually require you to:

configure
administer
troubleshoot
secure
monitor
investigate
design

Use AZ-900 to establish the foundation for those skills.

First understand Azure. Then operate it. Then secure it.

🚀 What’s Next?

You now understand where AZ-900 — Azure Fundamentals fits into your cloud and cybersecurity journey.

The next certification moves from broad Azure awareness into practical administration and operational capability.

➡️ Next: 02 — AZ-104 — Azure Administrator

In the next page, we will cover:

who should take AZ-104
why administration knowledge matters for cybersecurity
identity and governance
Azure storage
compute
virtual networking
monitoring
certification preparation strategy
hands-on skills
common preparation mistakes
Azure Administrator job expectations
Cloud Security Engineer relevance
technical interview questions
scenario-based troubleshooting