ExamFinch.com My Study

Cheat sheet

Azure AZ-900 Cheat Sheet

Practice this exam

Cloud Concepts

  • 25-30% of exam
  • Cloud Benefits Cloud Models Service Models Responsibility Scale vs Elasticity

Architecture + Services

  • 35-40% of exam
  • Azure Hierarchy Compute Networking Storage Identity + Security Service Picker

Management + Governance

  • 30-35% of exam
  • Cost + Governance Operate Cost Picker Monitoring Picker Policy vs Lock

Quick Facts

  • Exam AZ-900
  • Credential Azure Fundamentals
  • Time 45 min
  • Pass 700 scaled; maximum 1000
  • Level Foundational
  • Skill Match service
  • Blueprint Jul 20 2026

Responsibility CL

  • IaaS > PaaS > SaaS
  • IaaS: most yours PaaS: app/data SaaS: config/users

Scale vs Elasticity CL

Scalability

  • Add capacity
  • Up/out
  • Planned growth

Elasticity

  • Autoscale
  • Demand spikes
  • Dynamic capacity
  • Can grow vs auto-grow

Cloud Benefits CL

  • HA Uptime SLA
  • Scalability Add capacity
  • Elasticity Autoscale demand
  • Reliability Recover failures
  • Predictability Forecast cost/perf
  • Governance Rules at scale
  • Manageability Tools + automation

Cloud Models CL

  • Public Shared provider cloud
  • Private Dedicated organization cloud
  • Hybrid Public + private
  • Multicloud Multiple providers
  • CapEx Upfront spend
  • OpEx Pay as used

Service Models CL

  • IaaS You manage OS
  • PaaS You deploy app
  • SaaS You configure users
  • Serverless Infrastructure managed by provider
  • VM Classic IaaS
  • App Service Classic PaaS

Storage Redundancy AR

  • LRS=Local | ZRS=Zone | GRS=Geo
  • LRS: datacenter ZRS: zones GRS: paired region GZRS: zone+geo

Entra ID vs RBAC AR

Entra ID

  • Authenticate
  • Users/groups
  • SSO/MFA

RBAC

  • Authorize
  • Azure resources
  • Role assignments
  • Sign in vs do

Service Picker AR

  • Need OS control → VM ( IaaS )
  • Managed web/API → App Service ( PaaS )
  • Event trigger → Functions ( Serverless )
  • Quick container → ACI ( No orchestration )
  • Need Kubernetes orchestration → AKS ( Kubernetes )
  • Cloud desktops → AVD ( VDI )
  • Unstructured files → Blob ( Object store )
  • Private network → VNet ( Isolation )

Azure Hierarchy AR

  • MG Subscription governance
  • Subscription Billing + access
  • Resource group Lifecycle bundle
  • Resource Service instance
  • Region Geography location
  • Zone Datacenter isolation

Access Tiers AR

  • Hot -> Cool -> Cold -> Archive
  • Hot: frequent access Cool: infrequent access Cold: rare access Archive: offline; rehydrate first

VPN vs ExpressRoute AR

VPN

  • Encrypted internet
  • Site-to-site
  • Lower cost

ExpressRoute

  • Private circuit
  • Provider link
  • Predictable latency
  • Internet vs private

Compute AR

  • VM OS control
  • VMSS Autoscaling VM groups
  • Availability set Rack/update spread
  • Availability zone Datacenter spread
  • AVD Cloud desktops
  • Functions Event code
  • ACI Quick container
  • AKS Kubernetes orchestration

Networking AR

  • VNet Private network
  • Subnet VNet segment
  • Peering VNet to VNet
  • DNS Name resolution
  • VPN Gateway Encrypted internet
  • ExpressRoute Private circuit
  • Public endpoint Public address; access restrictions apply
  • Private endpoint Private Link IP

Storage AR

  • Blob Objects/files/media
  • Files SMB/NFS shares
  • Queues Simple messages
  • Tables Key-value NoSQL
  • Managed disks VM block storage
  • AzCopy CLI transfer
  • Storage Explorer Desktop GUI
  • Data Box Offline transfer

Identity + Security AR

  • Entra ID Cloud identity
  • SSO One login
  • MFA Extra factor
  • Passwordless No password
  • Conditional Access Signal-based if-then rules
  • RBAC Resource authorization
  • Zero Trust Verify explicitly
  • Defender for Cloud Posture management; workload protection

Governance Stack GO

  • MG -> Sub -> RG -> Resource
  • MG: hierarchy Sub: billing RG: lifecycle Resource: instance

Policy vs Lock GO

Policy

  • Allow/deny
  • Audit rules
  • Required tags

Lock

  • CanNotDelete: blocks deletion
  • ReadOnly: blocks changes/deletion
  • Data-plane operations unaffected
  • Standard vs protection

Cost Picker GO

  • Estimate Azure → Pricing Calc
  • Consistent eligible resource usage → Reservations ( Matching usage receives billing discounts )
  • Track spend → Cost Mgmt
  • Group charges → Tags
  • Alert spend → Budgets
  • Optimize resources → Advisor

Cost + Governance GO

  • Pricing Calc Future Azure cost
  • Reservations Commitment-based billing discounts
  • Cost Mgmt Actual spend
  • Budgets Spend alerts
  • Tags Cost metadata
  • Policy Enforce rules
  • Locks Control-plane change protection
  • Purview Data governance

Service Health vs Monitor GO

Service Health

  • Azure incidents
  • Region issues
  • Maintenance

Azure Monitor

  • Your metrics
  • Logs/alerts
  • Telemetry
  • Provider vs workload

Monitoring Picker GO

  • Azure outage → Service Health
  • Resource metrics → Azure Monitor
  • Query logs → Log Analytics
  • App telemetry → App Insights
  • Recommendations → Advisor

Operate GO

  • Portal Browser UI
  • Cloud Shell Browser shell
  • CLI az commands
  • PowerShell Az cmdlets
  • ARM Control plane
  • ARM template JSON IaC
  • Azure Arc Hybrid manage
  • Advisor Best practices

Pricing vs Cost Management GO

Pricing

  • Azure estimate
  • Service choices
  • Future spend

Cost Management

  • Actual spending
  • Cost analysis
  • Budget alerts
  • Estimate vs track

Common Traps

Identity vs permission

  • Entra signs in ≠ RBAC grants actions

Rules vs locks

  • Policy enforces rules ≠ Locks protect control-plane changes

Estimate vs track

  • Pricing Calculator estimates ≠ Cost Mgmt tracks

Outage vs telemetry

  • Health is Azure ≠ Monitor is yours

Tier vs redundancy

  • Tier is access ≠ Redundancy is copies

Private vs encrypted

  • ExpressRoute private ≠ VPN encrypted internet

Last Minute

  • 1. Cloud 25–30%; services 35–40%; governance 30–35%
  • 2. IaaS = OS control
  • 3. PaaS = deploy app
  • 4. SaaS = configure users
  • 5. Entra = login; RBAC = permissions
  • 6. Policy = rules; Locks = protection
  • 7. Pricing = estimate; Cost Mgmt = actuals
  • 8. Monitor = workloads; Health = Azure
  • 9. VPN = internet; ExpressRoute = private
  • 10. Tiers = access; redundancy = copies