AZ-900 Microsoft Azure Fundamentals Exam

Describe cost management in Azure

Understanding how costs accumulate in Azure helps organizations plan their cloud spending and avoid unexpected bills. Several factors influence how much you pay, including the specific resource type, the location or region of your deployment, and whether you are transferring data out of an Azure datacenter. To plan ahead, users use the Pricing Calculator to estimate monthly costs for new deployments, while the Total Cost of Ownership (TCO) Calculator helps compare the costs of running on-premises infrastructure versus migrating to Azure.

Once services are running, Azure Cost Management provides tools to monitor, analyze, and optimize cloud spend. Within this service, you can set up budgets that trigger automated alerts when spending reaches a certain percentage of your limit, giving administrators time to adjust before costs spiral. To further lower bills, organizations can use decision criteria to choose Azure Reserved Instances for steady workloads or Azure Hybrid Benefit to reuse existing on-premises software licenses in the cloud.

Describe features and tools in Azure for governance and compliance

Governance tools ensure that resources deploy safely and align with an organization's internal standards and external regulatory compliance. The foundation of resource security begins with Azure Role-Based Access Control (RBAC), which controls who can access resources, what actions they can perform, and what areas they can manage. RBAC enforces the principle of least privilege, ensuring users only have the access necessary for their specific job roles.

To enforce rules across all resources, administrators use Azure Policy, which evaluates resources and flags or blocks those that do not comply with set standards. For instance, a policy might restrict deployments to a specific region or prevent the creation of expensive virtual machine sizes. When administrators need to prevent accidental deletion or modification of critical resources, they apply Resource Locks directly to those resources, resource groups, or subscriptions. To deploy standardized environments containing policies, resource groups, and RBAC assignments in a single step, organizations use Azure Blueprints to ensure new subscriptions match corporate standards from day one.

Describe features and tools for managing and deploying Azure resources

Azure provides multiple ways to interact with and deploy resources, allowing users to choose the tool that best fits their workflow. The Azure Portal offers a web-based, graphical user interface that is ideal for beginners and manual management tasks. For automation and scripting, administrators use Azure PowerShell or the Azure CLI, which run command-line instructions directly from local machines or through Azure Cloud Shell, a browser-accessible terminal.

No matter which tool you choose, every deployment request passes through the Azure Resource Manager (ARM), which acts as the central management plane. ARM ensures that all requests are authenticated and authorized before it creates, updates, or deletes any resources. To implement infrastructure as code, teams write ARM templates or Bicep files, which are declarative files that define the exact infrastructure needed for a deployment, making environments easy to replicate and scale without manual intervention.

Describe monitoring tools in Azure

Monitoring tools collect and analyze data from cloud environments to keep applications healthy, performant, and reliable. The core service for this task is Azure Monitor, which automatically starts collecting telemetry data the moment you create resources. Azure Monitor categorizes data into Metrics, which are numerical values representing system performance over time, and Logs, which contain timestamped records of events and system changes.

To analyze log data deeper, administrators query logs stored in a Log Analytics workspace to troubleshoot complex issues and identify trends. Additionally, Azure Service Health keeps users informed about the status of Azure services globally, notifying them of active outages, planned maintenance, and advisories that might impact their workloads. To tie cost, security, reliability, and performance together, Azure Advisor analyzes your overall deployment and provides personalized recommendations to help you follow cloud best practices.