AZURE AZ-900

Azure Regions ,Regions pairs and Sovereign regions Availability Zones ,Data Centers Azure Resources, Resource Groups, Subscriptions and Management Groups Compute Types-Container Instances, Virtual Machines and Azure Functions VM options –Azure VMs, VMSS, Availability Sets and Azure Virtual Desktop Application hosting options App service, Containers and VMs Virtual Networking-Virtual Networks, Virtual Subnets, Peering, Azure DNS, Azure VPN Gateway and Azure Express Route, Public and Private Endpoints Azure Storage Services, Types, Account options Storage tiers and Redundancy options Identify options-AZ Copy, Storage Explorer and Azure File sync Create Blob Storage Directory services-Microsoft Entra ID and Microsoft entra id ADDS Authentication Methods-SSO, Multifactor Authentication and password less External Identities and Guest access RBAC and Concept of Zero trust Purpose of Microsoft Defender Describe Azure management and governance (30–35%) Pricing Calculator and TCO (Total Cost of Ownership) Cost Management and Billing Tool Purpose of Tags Azure Portal, Azure Cloud shell including Azure CLI and Azure PowerShell, Azure Arc, ARM and ARM templates Purpose of Azure advisor, Azure Service health Azure Monitor including Log Analytics, Monitor Alerts and Application insights

Microsoft Entra ID ,Users and Groups, SSPR Subscriptions and Accounts, Azure Policy , Role-based Access Control Manage built-in Azure roles Assign roles at different scope Implement and manage Azure PolicyAzure Advisor recommendations Configure resource locks Apply and manage tags on resources Manage resource groups Manage costs by using alerts, budgets, and  Configure management groups

Configure Azure Storage firewalls and virtual networks Create and use shared access signature (SAS) tokens Manage access keys Configure identity-based access for Azure Files Create and configure storage accounts Configure Azure Storage redundancy Configure object replication. Storage Account Encryption Manage data by using Azure Storage Explorer and AzCopy Create and configure a file share in Azure Storage Create and configure a container in Blob Storage, storage tiers, snapshots and soft delete for Azure Files

Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files Create and configure virtual machines Create and manage an Azure container registry, Azure container instances, Azure Container apps Create and configure Azure App Service

Configure and manage virtual networks in Azure Create and configure network security groups (NSGs) and application security groups Implement Azure Bastion Configure name resolution and load balancing

Configure log settings, Query and analyze logs in Azure Monitor Set up alert rules, action groups, and alert processing rules in Azure Monitor Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights Use Azure Network Watcher and Connection Monitor Create a Recovery Services vault Create an Azure Backup vault Create and configure a backup policy Perform backup and restore operations by using Azure Backup Configure Azure Site Recovery for Azure resources Perform a failover to a secondary region by using Site Recovery