Free · 2 imports included
code📚 AZ-900 Microsoft Azure Fundamentals ├── 📖 Chapter 1: Cloud Computing Fundamentals │ ├── 🔹 Cloud Deployment Models │ ├── 🔹 Cloud Service Models (IaaS, PaaS, SaaS) │ └── 🔹 Economic Benefits (CapEx vs OpEx) ├── 📖 Chapter 2: Azure Architectural Components │ ├── 🔹 Regions and Availability Zones │ └── 🔹 Resource Organization Hierarchy ├── 📖 Chapter 3: Azure Identity, Security, and Governance │ ├── 🔹 Identity and Access Management │ ├── 🔹 Network Security and Traffic Filtering │ └── 🔹 Governance and Compliance └── 📖 Chapter 4: Azure Management and Cost Tools ├── 🔹 Monitoring and Alerts └── 🔹 Cost Management and Optimization
What this chapter covers: This chapter defines the core cloud computing paradigms. It explores how deployment models determine infrastructure ownership, how service models define the shared responsibility between the provider and the user, and the financial transition from capital to operational expenditure.
| Concept | Definition | Use Case | Quick Check |
|---|---|---|---|
| CapEx | Upfront hardware investment | Data center builds | Fixed asset costs |
| OpEx | Pay-as-you-go consumption | Cloud subscriptions | Variable monthly costs |
| IaaS | Infrastructure control | Virtual Machines | User manages OS |
| SaaS | Software delivery | Microsoft 365 | Provider manages all |
Type A: Service Model Identification
Setup: "When you encounter a scenario requiring the selection of a deployment model based on control requirements."
Method: Evaluate the level of abstraction. If the user manages the OS, it is IaaS. If the user only manages data and application code, it is PaaS. If the user only manages user access, it is SaaS.
Example: A company needs to migrate a legacy app requiring specific OS patches.
"✅Solution: IaaS.
Type B: Economic Model Analysis
Setup: "If presented with a business case comparing on-premises hardware costs versus cloud subscription costs."
Method: Identify if the expense is a one-time capital investment (CapEx) or a recurring operational expense (OpEx).
Example: Converting server hardware purchase to monthly Azure VM billing.
"✅Solution: Shift from CapEx to OpEx.
Problem: A business wants to minimize administrative overhead by using a service where the provider manages the OS, middleware, and runtime. Which model is this?
Steps:
"✅Answer: PaaS (Platform as a Service).
What this chapter covers: This chapter focuses on the physical and logical structure of Azure. It covers the global distribution of datacenters and the hierarchical management structure used to organize resources, enforce policies, and manage billing.
| Concept | Definition | Use Case | Quick Check |
|---|---|---|---|
| Region | Set of datacenters | Global deployment | Latency requirements |
| Avail. Zone | Physically separate DC | High Availability | Fault tolerance |
| Resource Group | Logical container | Lifecycle management | Grouped deletion |
| Mgmt Group | Governance scope | Enterprise scale | Hierarchy enforcement |
Type A: High Availability Selection
Setup: "When you encounter a requirement for datacenter failure protection."
Method: Use Availability Zones to ensure resources are physically separated within a region.
Example: Protecting a SQL database from a single datacenter power failure.
"✅Solution: Deploy across Availability Zones.
Problem: You need to apply a policy to multiple subscriptions simultaneously. What is the highest level in the hierarchy?
Steps:
"✅Answer: Management Group.
What this chapter covers: This chapter details the security framework of Azure. It covers identity verification, network perimeter security, and the implementation of automated governance to ensure compliance across the environment.
| Concept | Definition | Use Case | Quick Check |
|---|---|---|---|
| Azure AD | Identity Provider | User authentication | MFA enforcement |
| NSG | Traffic filter | Subnet security | Port blocking |
| Azure Policy | Compliance rule | Standard enforcement | Deny non-compliant |
| Resource Lock | Deletion prevention | Critical resources | ReadOnly/NoDelete |
Type A: Network Traffic Filtering
Setup: "If presented with a requirement to restrict traffic to a specific VM port."
Method: Apply a Network Security Group (NSG) rule to the subnet or the network interface.
Example: Blocking HTTP traffic on port 80.
"✅Solution: Create an inbound NSG Deny rule for port 80.
Problem: How to prevent an administrator from accidentally deleting a production database?
Steps:
"✅Answer: Apply a CanNotDelete resource lock to the database.
Create a free account to import and read the full study notes — all 5 sections.
No credit card · 2 free imports included