FREE · AZ-900 · QUICK REFERENCE

AZ-900 Cheat Sheet

I spent about 3 weeks preparing for AZ-900 and honestly, the hardest part wasn't the actual concepts — it was keeping all the service names straight. This page is basically the reference I was looking for.

~45 questions·45 minutes·Pass: 700/1000

Domain 1

Cloud Concepts (25–30%)

This domain is mostly definitions and mental models. If you understand why companies move to cloud (OpEx vs CapEx, no upfront hardware) and can explain IaaS/PaaS/SaaS with examples, you'll be fine here.

TermWhat it meansAzure example or exam note
IaaSYou manage OS, runtime and up — cloud manages physical hardwareAzure Virtual Machines
PaaSYou manage just your app and data, everything else is handledApp Service, Azure SQL Database
SaaSYou just use the software, nothing to manageMicrosoft 365, Dynamics 365
Public cloudInfrastructure owned and operated by a cloud provider, shared across customersAzure is a public cloud
Private cloudCloud infrastructure used exclusively by one organizationOn-premises datacenter or Azure Stack
Hybrid cloudCombination of public and private cloudMost enterprises use this model
CapExCapital expenditure — large upfront hardware investmentsTraditional on-premises model
OpExOperational expenditure — pay as you go, no big upfront costCloud model
High availabilitySystem stays up even if one component fails, via redundancy99.9% SLA on most Azure services
ScalabilityAbility to handle increased load (vertical = bigger machine, horizontal = more machines)Scale up vs scale out
ElasticityAutomatically adjusts capacity based on actual demandAzure Autoscale
Fault toleranceSystem continues functioning despite individual failuresAvailability Zones
Shared responsibilityMicrosoft manages physical infra, you manage data and appsResponsibility shifts with IaaS→PaaS→SaaS

Domain 2

Azure Architecture & Services (35–40%)

This is the biggest chunk of the exam and where most people lose points. There are a lot of services and they all sound similar. The trick is to group them by category and learn when you'd use one vs another — not just what they are.

Compute

ServiceTypeWhen to use it
Azure Virtual MachinesIaaSFull OS control, lift-and-shift, legacy apps
Azure App ServicePaaSWeb apps and APIs without managing servers
Azure FunctionsServerlessShort event-driven tasks, pay only when running
Azure Container Instances (ACI)PaaSQuick container deployment, no orchestration needed
Azure Kubernetes Service (AKS)PaaSContainer orchestration at scale
Azure Virtual DesktopDaaSWindows desktop and apps delivered from the cloud

Storage

ServiceUse it for
Blob StorageUnstructured data: images, videos, backups, logs
Azure FilesShared file system (SMB/NFS) — like a network drive in the cloud
Azure DiskPersistent disks attached to virtual machines
Azure Queue StorageMessage queuing between application components
Azure Table StorageNoSQL key-value store for semi-structured data

Networking

ServicePurpose
Virtual Network (VNet)Your private network in Azure — resources communicate inside it
SubnetLogical division within a VNet for organizing and securing resources
Network Security Group (NSG)Firewall rules controlling inbound and outbound traffic
Azure Load BalancerDistributes network traffic across multiple VMs (Layer 4)
Azure Application GatewayHTTP(S) load balancer with routing rules and WAF (Layer 7)
Azure DNSHost your DNS domains and records in Azure
VPN GatewayEncrypted tunnel from your on-premises network to Azure (over internet)
ExpressRoutePrivate dedicated connection from on-premises to Azure — no public internet
Azure CDNDeliver content from edge nodes close to your users

Domain 3

Management & Governance (30–35%)

This domain trips people up because it's about the meta-layer of Azure — how you organize, control costs, set policy and monitor things. Spend extra time on RBAC and the organizational hierarchy (Management Groups → Subscriptions → Resource Groups → Resources).

ConceptWhat it does
Management GroupContainer for organizing multiple subscriptions — apply policy at scale
SubscriptionBilling boundary and access management container — everything lives inside one
Resource GroupLogical container for related resources that share the same lifecycle
Azure Resource Manager (ARM)The management layer for all Azure deployments — handles all API calls
RBACRole-based access control — grant least-privilege access to who needs what
Azure PolicyDefine and enforce compliance rules across resources (e.g. allowed regions)
Resource TagsKey-value metadata on resources for cost tracking and organization
Azure Cost ManagementMonitor, allocate and optimize Azure spending
Azure Pricing CalculatorEstimate monthly costs before you deploy
TCO CalculatorCompare cost of on-premises infrastructure vs moving to Azure
Azure MonitorCollect metrics and logs from your resources, set alerts
Azure Service HealthReal-time status of Azure services in your regions
Azure AdvisorPersonalized recommendations for reliability, security, cost, performance
Microsoft Defender for CloudUnified security posture management and threat protection
Azure ArcManage non-Azure resources (on-premises servers, other clouds) through Azure

Want to actually use all of this?

Azure 30 walks you through 30 days of real Cloud Shell tasks, one per day. Each maps to an AZ-900 exam topic. Days 1–5 are completely free — no credit card.