AZ-900: Microsoft Azure Fundamentals — prep for the 20 July 2026 skills outline (in Russian)
Exam-focused preparation for AZ-900: Microsoft Azure Fundamentals, built strictly against the skills measured as of 20 July 2026. Nineteen required units cover all three domains at their official weights: cloud concepts, Azure architecture and services, management and governance. Every service is taught as pain, then solution, then cost — because the exam asks which option fits a constraint, not what a service is called. A dedicated unit untangles the pairs candidates confuse most: Advisor and Monitor and Service Health, VPN Gateway and ExpressRoute, RBAC and Policy and resource locks, Cool and Archive, availability zones and region pairs. Three optional units cover databases, traffic delivery and secrets — useful at work, explicitly out of exam scope. Course text is in Russian; Azure service names stay in English, as you will meet them on the exam and in the portal.
Your lesson is in your language: your assistant leads it.
- Material: Russian
- Exam: Russian — taken on the site, not translated
How it works
Your assistant takes the course material from our server and leads the lesson in your language.
The exam is taken on the site, without an assistant. Exam questions are not translated: this is decided for every course.
Path through the course
· 22 unitsthe order is free · the steps below are the order the author suggests, not a conditionView: map · steps
Stage 1
~2 h
Stage 2
~7.5 h
by the author’s design, after “What the cloud is and what you pay for”
Stage 3
~8 h
6 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Azure geography: regions, region pairs, availability zones”
Virtual machines: sizes, availability sets, scale sets, AVD
~2 h
9 · by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Management hierarchy: resource, resource group, subscription, management group”
Storage: services, access tiers, redundancy
~2 h
11 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Management hierarchy: resource, resource group, subscription, management group”
Identity: Entra ID, MFA, SSO, Conditional Access
~2 h
20 · optional · by the author’s design, after “IaaS, PaaS, SaaS, serverless and the responsibility boundary”
Not on the exam: databases — SQL Database, Managed Instance, Cosmos DB
~2 h
Stage 4
~10 h
7 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Where an application should live: App Service, containers, Functions
~2 h
8 · by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints
~2.5 h
10 · by the author’s design, after “Storage: services, access tiers, redundancy”
Moving data: AzCopy, Storage Explorer, File Sync, Migrate, Data Box
~1.5 h
12 · by the author’s design, after “Identity: Entra ID, MFA, SSO, Conditional Access”
Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud
~2 h
13 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Cost: what affects it, the calculator, Cost Management, tags
~2 h
Stage 5
~9 h
14 · by the author’s design, after “Cost: what affects it, the calculator, Cost Management, tags”
How to pay less: reservations, savings plans, Hybrid Benefit, Spot
~2 h
15 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”
Compliance and control: Azure Policy, resource locks, Purview
~2 h
17 · by the author’s design, after any one of these: “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Cost: what affects it, the calculator, Cost Management, tags”
Monitoring: Advisor, Service Health, Monitor and Application Insights
~2 h
21 · optional · by the author’s design, after “Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints”
Not on the exam: traffic balancing — Load Balancer, App Gateway, Front Door, CDN
~1.5 h
22 · optional · by the author’s design, after any one of these: “Identity: Entra ID, MFA, SSO, Conditional Access”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”
Not on the exam: secrets and the perimeter — Key Vault, DDoS Protection, WAF
~1.5 h
Stage 6
~4 h
16 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Compliance and control: Azure Policy, resource locks, Purview”
Management tools: portal, CLI, Cloud Shell, Arc, IaC and ARM
~2 h
18 · by the author’s design, after 2 of these: “Why move to the cloud: six benefits and the cost of each”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Monitoring: Advisor, Service Health, Monitor and Application Insights”
Untangling confusions: what to tell apart on the exam
~2 h
Stage 7
~1.5 h
19 · by the author’s design, after “Untangling confusions: what to tell apart on the exam”
The exam: format, tactics, discounts, proctoring
~1.5 h
Exam
closed · enrol on the course
final · in the browser, without the assistant
Exam
The path in words
- Stage 1 · What the cloud is and what you pay for — ~2 h
- Stage 2 · IaaS, PaaS, SaaS, serverless and the responsibility boundary — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 2 · Why move to the cloud: six benefits and the cost of each — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 2 · Azure geography: regions, region pairs, availability zones — by the author’s design, after “What the cloud is and what you pay for”; ~1.5 h
- Stage 2 · Management hierarchy: resource, resource group, subscription, management group — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 3 · Virtual machines: sizes, availability sets, scale sets, AVD — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Azure geography: regions, region pairs, availability zones”; ~2 h
- Stage 3 · Storage: services, access tiers, redundancy — by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Management hierarchy: resource, resource group, subscription, management group”; ~2 h
- Stage 3 · Identity: Entra ID, MFA, SSO, Conditional Access — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Management hierarchy: resource, resource group, subscription, management group”; ~2 h
- Stage 3 · Not on the exam: databases — SQL Database, Managed Instance, Cosmos DB — by the author’s design, after “IaaS, PaaS, SaaS, serverless and the responsibility boundary”; optional; ~2 h
- Stage 4 · Where an application should live: App Service, containers, Functions — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2 h
- Stage 4 · Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints — by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2.5 h
- Stage 4 · Moving data: AzCopy, Storage Explorer, File Sync, Migrate, Data Box — by the author’s design, after “Storage: services, access tiers, redundancy”; ~1.5 h
- Stage 4 · Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud — by the author’s design, after “Identity: Entra ID, MFA, SSO, Conditional Access”; ~2 h
- Stage 4 · Cost: what affects it, the calculator, Cost Management, tags — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2 h
- Stage 5 · How to pay less: reservations, savings plans, Hybrid Benefit, Spot — by the author’s design, after “Cost: what affects it, the calculator, Cost Management, tags”; ~2 h
- Stage 5 · Compliance and control: Azure Policy, resource locks, Purview — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”; ~2 h
- Stage 5 · Monitoring: Advisor, Service Health, Monitor and Application Insights — by the author’s design, after any one of these: “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Cost: what affects it, the calculator, Cost Management, tags”; ~2 h
- Stage 5 · Not on the exam: traffic balancing — Load Balancer, App Gateway, Front Door, CDN — by the author’s design, after “Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints”; optional; ~1.5 h
- Stage 5 · Not on the exam: secrets and the perimeter — Key Vault, DDoS Protection, WAF — by the author’s design, after any one of these: “Identity: Entra ID, MFA, SSO, Conditional Access”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”; optional; ~1.5 h
- Stage 6 · Management tools: portal, CLI, Cloud Shell, Arc, IaC and ARM — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Compliance and control: Azure Policy, resource locks, Purview”; ~2 h
- Stage 6 · Untangling confusions: what to tell apart on the exam — by the author’s design, after 2 of these: “Why move to the cloud: six benefits and the cost of each”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Monitoring: Advisor, Service Health, Monitor and Application Insights”; ~2 h
- Stage 7 · The exam: format, tactics, discounts, proctoring — by the author’s design, after “Untangling confusions: what to tell apart on the exam”; ~1.5 h
Programme · 22 units
| 1 | What the cloud is and what you pay for Explain how cloud computing differs from renting someone else's server | ~2 h |
| 2 | IaaS, PaaS, SaaS, serverless and the responsibility boundary Distinguish IaaS, PaaS and SaaS by where the responsibility boundary lies | ~2 h |
| 3 | Why move to the cloud: six benefits and the cost of each Distinguish high availability, scalability and elasticity | ~2 h |
| 4 | Azure geography: regions, region pairs, availability zones Distinguish a datacenter, an availability zone, a region, a region pair and a geography | ~1.5 h |
| 5 | Management hierarchy: resource, resource group, subscription, management group Name the four levels of the Azure hierarchy and the job of each | ~2 h |
| 6 | Virtual machines: sizes, availability sets, scale sets, AVD Name the resources a virtual machine requires | ~2 h |
| 7 | Where an application should live: App Service, containers, Functions Choose a hosting option for the given constraints of a scenario | ~2 h |
| 8 | Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints Explain the purpose of a virtual network, a subnet and an NSG | ~2.5 h |
