Microsoft Azure Fundamentals AZ-900 Exam Prep Study Guide 

Complete AZ-900 Exam Prep, 100 Practice Questions & Azure Service Selection Cheat Sheets

Instant PDF Download — $16.97

Preparing for the Microsoft Azure Fundamentals AZ-900 certification exam?

Start building your cloud knowledge with the Noble Exam Prep Microsoft Azure Fundamentals AZ-900 Study Guide — an affordable, beginner-friendly digital resource covering cloud concepts, Azure architecture and services, security and identity, management, governance, monitoring, and cost management.

This guide combines complete AZ-900 domain review, 100 original practice questions with detailed explanations, Azure service-selection tables, commonly confused service comparisons, memorization resources, and a structured three-week study plan.

No previous Azure certification or IT experience is required to start.

Only $16.97

One-Time Purchase • Instant Digital PDF Download

Get the Microsoft Azure Fundamentals AZ-900 Study Guide →

What's Included?

Your AZ-900 exam prep PDF includes:

• Complete AZ-900 domain review

• All three current exam domains

• 100 original practice questions

• Detailed answer explanations

• Azure service-selection tables

• Commonly confused Azure services compared

• Current Microsoft Entra ID terminology

• Shared Responsibility Model

• IaaS vs. PaaS vs. SaaS

• Azure regions & availability zones

• Azure management hierarchy

• Azure compute services

• Azure networking

• Azure storage

• Identity & security

• Microsoft Entra ID

• Azure RBAC

• Azure Policy

• Resource locks

• Microsoft Defender for Cloud

• Azure cost-management tools

• Azure Advisor vs. Service Health vs. Monitor

• ARM & Bicep fundamentals

• Azure Arc

• Service-selection reference sheets

• Numbers and lists to memorize

• Three-week study plan

• Test-day checklist

The guide progresses through all three domains before providing a complete 100-question practice exam, detailed explanations, and final service-selection reference sheets.

Built Around the Current AZ-900 Skills Outline

One challenge with AZ-900 is that the exam code itself doesn't tell you whether study material is current.

Microsoft doesn't continually change AZ-900 to AZ-901, AZ-902, and so forth.

Instead, Microsoft keeps the AZ-900 designation while updating the official skills outline.

That means older material can still say “AZ-900” on the cover.

This guide identifies three warning signs of potentially outdated material:

• It lists four exam domains instead of the current three-domain structure

• It still refers to Microsoft Entra ID primarily by the former Azure Active Directory name

• It presents claimed exam-outline changes without checking them against Microsoft's actual published skills outline

The guide recommends verifying the current official Microsoft Learn AZ-900 study guide and change log before testing.

Current Microsoft Entra ID Terminology

Not Outdated “Azure AD” Material

One concrete differentiator is that this guide uses Microsoft Entra ID terminology.

Microsoft's cloud identity and access-management service formerly known as Azure Active Directory was renamed Microsoft Entra ID.

That matters because candidates using older courses and study guides may continue encountering legacy names that differ from current terminology.

The guide specifically incorporates the newer naming throughout its identity and security material.

Complete AZ-900 Domain Review

The study guide covers the current three-domain structure:

1.0 Describe Cloud Concepts — 25–30%

Understand cloud models, service types, shared responsibility, scalability, elasticity, reliability, high availability, governance, manageability, and cloud economics.

2.0 Describe Azure Architecture & Services — 35–40%

Review Azure regions, availability, management hierarchy, compute, networking, storage, identity, and security services.

3.0 Describe Azure Management & Governance — 30–35%

Study cost management, governance, policies, locks, deployment tools, Azure Arc, monitoring, Service Health, Advisor, and related Azure-specific services.

The guide distributes its 100 practice questions using the midpoint of Microsoft's published weighting ranges.

100 Microsoft AZ-900 Practice Questions

Turn passive reading into active exam preparation.

The guide contains 100 original AZ-900 practice questions, distributed across all three domains:

• 27 Cloud Concepts questions

• 38 Azure Architecture & Services questions

• 35 Azure Management & Governance questions

The guide recommends completing the questions before checking the answers and using your results to identify weaker domains for further review.

Detailed Answers & Explanations

This isn't simply a list of questions followed by an A-B-C-D answer key.

The practice section includes explanations designed to help you understand why an answer is correct and distinguish it from plausible distractors.

That is especially useful for AZ-900 because many questions test whether you can distinguish between Azure services that seem similar at first glance.

For example:

Azure Advisor or Azure Monitor?

Azure Policy or Azure RBAC?

Application Gateway or Front Door?

VPN Gateway or ExpressRoute?

Availability Set or Availability Zone?

Pricing Calculator or Cost Management?

Those distinctions are where focused practice becomes especially valuable.

Cloud Concepts Exam Prep

The first domain establishes the fundamentals of cloud computing.

Review concepts such as:

• Public cloud

• Private cloud

• Hybrid cloud

• Multicloud

• IaaS

• PaaS

• SaaS

• Serverless

• High availability

• Reliability

• Scalability

• Elasticity

• Predictability

• Governance

• Manageability

• CapEx vs. OpEx

The guide emphasizes Microsoft's terminology so you're learning concepts in the same conceptual framework used throughout the material.

IaaS vs. PaaS vs. SaaS

Understand Who Manages What

This is a fundamental cloud certification concept.

Infrastructure as a Service — IaaS

Choose IaaS when you need operating-system-level control or want to migrate an existing server with relatively few changes.

Platform as a Service — PaaS

Use PaaS when you want to deploy an application without managing the underlying operating system and server infrastructure.

Software as a Service — SaaS

Use SaaS when you want the completed application with minimal infrastructure administration.

Serverless

Use serverless for event-driven workloads where the cloud provider manages the underlying infrastructure.

The guide's shared-responsibility table also demonstrates how responsibilities change as you move from IaaS toward SaaS.

Microsoft Shared Responsibility Model

A simple principle from the guide helps clarify many shared-responsibility questions:

Your data and identities remain your responsibility.

The physical infrastructure remains Microsoft's responsibility.

Responsibilities between those layers change depending on whether you're using:

• IaaS

• PaaS

• SaaS

Understanding this spectrum is more useful than attempting to memorize isolated scenarios.

Azure Management Hierarchy

Memorize This Order

The guide identifies the Azure management hierarchy as:

Management Groups → Subscriptions → Resource Groups → Resources

Understanding the hierarchy helps answer questions involving:

• Governance

• Policy inheritance

• Role assignments

• Billing

• Resource organization

• Lifecycle management

For example, management groups can provide governance across multiple subscriptions, while resources themselves reside within resource groups.

Azure Regions, Zones & Availability

Learn the differences between:

Azure Region

A geographic area containing Azure datacenters.

Availability Zone

A physically separate datacenter within a region with independent infrastructure.

Region Pair

A paired Azure region used in broader resiliency and platform-update strategies.

Availability Set

Uses fault domains and update domains to provide protection within a datacenter.

A useful distinction from the guide is:

Availability Set → Protection within a datacenter

Availability Zone → Protection across datacenters within a region

Region Pair → Protection across regions

Azure Compute Services

Know which Azure compute service best fits the requirement.

Azure Virtual Machines

Choose when you need complete OS-level control.

Virtual Machine Scale Sets

Deploy and autoscale groups of similar virtual machines.

Azure App Service

Host web applications and APIs without managing the underlying servers.

Azure Functions

Run event-driven serverless code.

Azure Container Instances

A straightforward option for running individual containers without full orchestration.

Azure Container Apps

Serverless container workloads with built-in scaling.

Azure Kubernetes Service — AKS

Managed Kubernetes orchestration.

Azure Virtual Desktop

Deliver virtual desktops and applications to users.

Azure Networking Exam Prep

Learn the Services Candidates Commonly Confuse

Azure Load Balancer

Layer 4 • Regional

Routes based on IP address and port.

Application Gateway

Layer 7 • Regional

Supports URL routing, SSL termination, and optional web application firewall capabilities.

Azure Front Door

Layer 7 • Global

Provides global routing, acceleration, caching, and WAF functionality at the edge.

Traffic Manager

DNS-Based • Global

Directs users toward endpoints but does not itself proxy application traffic.

The guide places these services together in a comparison table to make the differences easier to recognize.

VPN Gateway vs. ExpressRoute

Another useful networking distinction:

VPN Gateway

Provides an encrypted tunnel over the public internet.

Think:

Faster setup • Lower cost

ExpressRoute

Provides a dedicated private connection that doesn't travel across the public internet.

Think:

Private • Predictable • Higher cost • Longer setup

Which one is correct depends on the business requirements presented in the scenario.

Azure Bastion & Private Endpoints

Azure Bastion

Allows administrators to use RDP or SSH through the Azure portal without requiring a public IP directly on the virtual machine.

Private Endpoint

Allows an Azure resource to reach supported PaaS services through a private IP inside a VNet.

These services solve different private-connectivity requirements and shouldn't be confused.

Azure Storage Exam Prep

Review Azure storage redundancy options:

LRS — Locally Redundant Storage

Three copies inside one datacenter.

ZRS — Zone-Redundant Storage

Copies across availability zones in the same region.

GRS — Geo-Redundant Storage

Local redundancy plus replication to the paired region.

GZRS — Geo-Zone-Redundant Storage

Zone redundancy locally plus a copy in the paired region.

RA-GRS / RA-GZRS

Adds read access to the secondary copy.

The correct selection depends on the failure scenario the question asks you to protect against.

Blob, Files, Queue & Table Storage

Review the major Azure Storage options:

Blob Storage
Unstructured objects such as images, videos, backups, and logs.

Azure Files
Managed SMB/NFS file shares.

Queue Storage
Messaging between application components.

Table Storage
NoSQL key-value data.

You'll also review Blob access tiers:

Hot → Cool → Cold → Archive

with Archive intended for data that can tolerate offline storage and rehydration.

Microsoft Entra ID & Azure Security

Review cloud identity and security concepts involving:

• Microsoft Entra ID

• Entra Domain Services

• External ID

• MFA

• Single Sign-On

• Conditional Access

• Azure RBAC

• Zero Trust

• Defense in Depth

• Microsoft Defender for Cloud

Conditional Access vs. RBAC

These tools address different questions.

Conditional Access

Evaluates signals such as:

• Location

• Device

• Risk

and decides whether a particular sign-in should be allowed, blocked, or subjected to additional requirements.

Azure RBAC

Determines:

What is this user permitted to do with this Azure resource?

The guide includes roles such as:

• Owner

• Contributor

• Reader

• User Access Administrator

Zero Trust & Defense in Depth

Prepare for foundational security concepts such as:

Zero Trust

• Verify explicitly

• Use least privilege

• Assume breach

Defense in Depth

Apply multiple independent security layers across:

Physical → Identity → Perimeter → Network → Compute → Application → Data

These concepts connect cloud architecture with modern security principles.

Azure Management & Governance

Don't Underestimate Domain 3

One of the guide's most useful observations is that Azure Management & Governance can account for up to 35% of the exam, yet candidates may devote too little study time to it.

Unlike general cloud terminology, many services in this section are uniquely Azure-specific.

That means previous IT experience doesn't necessarily tell you whether the answer should be:

Policy

RBAC

Resource Lock

Advisor

Service Health

or

Monitor

You have to know the Azure tool.

Azure Pricing Calculator vs. TCO Calculator vs. Cost Management

Before, Compare, After

The guide gives you a simple framework:

Azure Pricing Calculator

Before you build

Estimate the expected cost of an Azure configuration.

TCO Calculator

Compare

Compare the cost of running workloads on-premises versus Azure.

Microsoft Cost Management

After you spend

Analyze actual costs, create budgets, and configure alerts.

This “before, compare, after” distinction can make these tools much easier to remember.

Azure Cost Optimization

Review Azure cost factors such as:

• Resource type

• Resource size

• Consumption

• Region

• Outbound network traffic

• Subscription type

• Marketplace software

You'll also review common savings options:

Azure Reservations

Discounts for predictable workloads with one- or three-year commitments.

Azure Spot Virtual Machines

Deep discounts for interruptible workloads.

Azure Hybrid Benefit

Use eligible existing Windows Server or SQL Server licenses to reduce Azure costs.

Azure RBAC vs. Policy vs. Resource Locks

One of the Most Important AZ-900 Comparisons

These three governance tools are easy to confuse.

Azure RBAC

Controls:

What can this USER do?

Azure Policy

Controls:

What can this RESOURCE be?

Examples:

• Allowed regions

• Required tags

• Permitted SKUs

Resource Locks

Protect resources from modification or deletion.

CanNotDelete prevents deletion.

ReadOnly prevents both modification and deletion.

These tools can work together rather than acting as alternatives.

Azure Resource Manager, Bicep & Cloud Shell

Review deployment and management technologies including:

Azure Portal

Graphical interface for Azure.

Azure Cloud Shell

Browser-based command-line environment supporting Azure CLI and PowerShell.

Azure Resource Manager — ARM

The Azure resource-management and deployment layer.

ARM Templates / Bicep

Infrastructure as Code.

The guide describes Bicep as a simpler declarative language that compiles to ARM JSON.

Azure Arc

Extends Azure management to resources outside Azure, including servers and Kubernetes.

These concepts connect management, automation, hybrid cloud, and governance.

Advisor vs. Service Health vs. Monitor

Know Which Azure Service Answers Which Question

This is another excellent service-confusion table from the guide.

Azure Advisor

What should I improve?

Provides recommendations involving:

• Cost

• Reliability

• Security

• Performance

• Operational excellence

Azure Service Health

Is Azure having a problem?

Shows:

• Platform incidents

• Planned maintenance

• Health advisories

Azure Monitor

How are MY resources performing?

Collects:

• Metrics

• Logs

• Alerts

The guide's memory hook is:

Advisor advises you.

Service Health is Microsoft's health.

Monitor is your resources' health.

Azure Monitor, Log Analytics & Application Insights

Within the monitoring ecosystem:

Azure Monitor

Collects telemetry, metrics, logs, and alerts.

Log Analytics

Lets you query collected log information.

Application Insights

Focuses on application performance, including:

• Requests

• Failures

• Dependencies

• Availability testing

Understanding their relationships can make monitoring questions easier to solve.

Microsoft Purview & Service Trust Portal

Review another useful distinction:

Microsoft Purview

Think:

Your organization's data governance

Including:

• Discovery

• Classification

• Lineage

Service Trust Portal

Think:

Microsoft's compliance documentation

This is where customers can access Microsoft's own audit reports and certifications.

The guide summarizes the distinction simply:

Purview looks at your data.

Service Trust Portal gives you Microsoft's certifications.

Three-Week AZ-900 Study Plan

The guide includes a focused preparation schedule.

Week 1 — Cloud Concepts

Review:

• Shared responsibility

• Cloud models

• IaaS

• PaaS

• SaaS

• Serverless

• Cloud benefits

Week 2 — Azure Architecture & Services

Study:

• Regions

• Zones

• Management hierarchy

• Compute

• Networking

• Storage

• Microsoft Entra ID

• Security

Week 3 — Management & Governance

Review:

• Cost tools

• RBAC

• Azure Policy

• Resource locks

• Azure Advisor

• Service Health

• Azure Monitor

Then complete the full practice exam and review weak areas.

The guide suggests targeting at least 85% overall with no domain below 80% on its practice set before scheduling.

Who Is This AZ-900 Study Guide For?

The Microsoft Azure Fundamentals certification can be relevant to both technical and non-technical professionals.

This guide may be useful for:

• IT beginners

• Cloud computing beginners

• Career changers

• Help desk professionals

• IT support specialists

• Students

• Project managers

• Business analysts

• Sales professionals working with technology

• Technical account professionals

• Junior cloud professionals

• AWS users learning Azure

• Professionals working in Microsoft environments

• Anyone preparing for AZ-900

The guide identifies no prerequisite and specifically notes that AZ-900 is designed for non-technical roles as well as technical candidates.

A Beginner-Friendly Microsoft Cloud Certification

AZ-900 can be a useful starting point if you want to learn Microsoft Azure without immediately jumping into a role-specific administrator, developer, architect, or security certification.

It provides foundational exposure to:

Cloud Computing

↓

Azure Architecture

↓

Azure Services

↓

Identity & Security

↓

Cost Management

↓

Governance & Monitoring

That foundation can make more specialized Microsoft certification material easier to understand later.

Get the Microsoft Azure Fundamentals AZ-900 Study Guide

Complete Beginner-Friendly Azure Exam Prep PDF

Only $16.97

Your instant digital download includes:

✓ Complete AZ-900 domain review
✓ All three current domains
✓ 100 original practice questions
✓ Detailed answer explanations
✓ Current Microsoft Entra ID terminology
✓ Service-selection tables
✓ Shared Responsibility Model
✓ IaaS / PaaS / SaaS comparisons
✓ Azure regions & availability
✓ Azure management hierarchy
✓ Compute service comparisons
✓ Azure networking
✓ Storage redundancy
✓ Identity & security
✓ Microsoft Entra ID
✓ Azure cost-management tools
✓ RBAC vs. Policy vs. Resource Locks
✓ Azure Advisor vs. Service Health vs. Monitor
✓ Microsoft Purview
✓ ARM & Bicep fundamentals
✓ Three-week study plan
✓ Memorization sheets
✓ Test-day checklist

$16.97 — One-Time Purchase

Instant PDF Download

Don't Just Memorize Azure Service Names — Learn Which One Fits

The difference between passing a fundamentals exam and getting tripped up can come down to distinguishing similar services.

Need global Layer 7 web delivery? → Front Door

Need regional Layer 7 application routing? → Application Gateway

Need Layer 4 load balancing? → Azure Load Balancer

Need dedicated private connectivity? → ExpressRoute

Need to restrict where resources can be created? → Azure Policy

Need to control what a user can do? → Azure RBAC

Need to prevent deletion? → Resource Lock

Need Azure improvement recommendations? → Advisor

Need Microsoft's platform health? → Service Health

Need your resource metrics and logs? → Azure Monitor

That is why the service-selection and confusion tables are one of the strongest selling points of this guide.

Digital Product Information

Product: Microsoft Azure Fundamentals Exam Prep Study Guide
Exam: AZ-900
Format: Digital PDF
Length: 43 pages
Practice Questions: 100
Answer Explanations: Included
Service Selection Sheets: Included
Price: $16.97
Delivery: Instant Digital Download
Publisher: Noble Exam Prep

This is a digital product. No physical book will be shipped.

Frequently Asked Questions

Which Microsoft Azure exam does this guide cover?

The guide covers Microsoft Azure Fundamentals AZ-900 and is organized around the current three-domain skills-outline structure described in the material.

Does the guide include practice questions?

Yes. It contains 100 original practice questions distributed across all three domains, followed by detailed explanations.

Does it use Microsoft Entra ID terminology?

Yes. The guide uses the current Microsoft Entra ID name and specifically explains the change from the previous Azure Active Directory terminology.

Do I need previous IT experience?

No formal prerequisite is identified in the guide. AZ-900 is presented as suitable for both technical and non-technical candidates.

Does the guide cover Azure governance?

Yes. It includes Azure Policy, RBAC, resource locks, management groups, cost tools, Azure Resource Manager, Bicep, Azure Arc, monitoring, and other management/governance concepts.

Does it include Azure security?

Yes. Topics include Microsoft Entra ID, MFA, Conditional Access, RBAC, Zero Trust, Defense in Depth, and Microsoft Defender for Cloud.

Is AZ-900 a lifetime certification?

The uploaded guide states that Microsoft Fundamentals certifications do not expire.

Is this a physical textbook?

No. This is an instant-download digital PDF.

How much does it cost?

The complete AZ-900 study guide is $16.97 as a one-time purchase.

Is this an official Microsoft product?

No. This is independently developed educational material from Noble Exam Prep and is not affiliated with, authorized by, endorsed by, or sponsored by Microsoft.

Important Disclaimer

This study guide is independently developed by Noble Exam Prep for supplemental educational and exam-preparation purposes.

ExamPrepStudyGuides.com and Noble Exam Prep are not affiliated with, authorized by, endorsed by, or sponsored by Microsoft Corporation. Microsoft, Azure, and Entra are trademarks of the Microsoft group of companies.

This product does not contain or claim to contain confidential, recalled, leaked, or proprietary Microsoft certification examination questions. Practice questions are independently created educational materials.

Use of this study guide does not guarantee a passing score, certification, employment, promotion, salary, or any other professional outcome.

Microsoft can revise the AZ-900 skills outline, services, terminology, exam policies, pricing, and certification requirements without changing the AZ-900 exam code. Candidates should therefore verify the current official AZ-900 skills outline with Microsoft before scheduling their examination.