AZ-900: Microsoft Azure Fundamentals — prep for the 20 July 2026 skills outline (in Russian)
Exam-focused preparation for AZ-900: Microsoft Azure Fundamentals, built strictly against the skills measured as of 20 July 2026. Nineteen required units cover all three domains at their official weights: cloud concepts, Azure architecture and services, management and governance. Every service is taught as pain, then solution, then cost — because the exam asks which option fits a constraint, not what a service is called. A dedicated unit untangles the pairs candidates confuse most: Advisor and Monitor and Service Health, VPN Gateway and ExpressRoute, RBAC and Policy and resource locks, Cool and Archive, availability zones and region pairs. Three optional units cover databases, traffic delivery and secrets — useful at work, explicitly out of exam scope. Course text is in Russian; Azure service names stay in English, as you will meet them on the exam and in the portal.
Your lesson is in your language: your assistant leads it.
- Material: Russian
- Exam: Russian — taken on the site, not translated
How it works
Your assistant takes the course material from our server and leads the lesson in your language.
The exam is taken on the site, without an assistant. Exam questions are not translated: this is decided for every course.
Path through the course
· 22 unitsthe order is free · the steps below are the order the author suggests, not a conditionView: map · steps
Stage 1
~2 h
Stage 2
~7.5 h
by the author’s design, after “What the cloud is and what you pay for”
Stage 3
~8 h
6 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Azure geography: regions, region pairs, availability zones”
Virtual machines: sizes, availability sets, scale sets, AVD
~2 h
9 · by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Management hierarchy: resource, resource group, subscription, management group”
Storage: services, access tiers, redundancy
~2 h
11 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Management hierarchy: resource, resource group, subscription, management group”
Identity: Entra ID, MFA, SSO, Conditional Access
~2 h
20 · optional · by the author’s design, after “IaaS, PaaS, SaaS, serverless and the responsibility boundary”
Not on the exam: databases — SQL Database, Managed Instance, Cosmos DB
~2 h
Stage 4
~10 h
7 · by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Where an application should live: App Service, containers, Functions
~2 h
8 · by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints
~2.5 h
10 · by the author’s design, after “Storage: services, access tiers, redundancy”
Moving data: AzCopy, Storage Explorer, File Sync, Migrate, Data Box
~1.5 h
12 · by the author’s design, after “Identity: Entra ID, MFA, SSO, Conditional Access”
Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud
~2 h
13 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Virtual machines: sizes, availability sets, scale sets, AVD”
Cost: what affects it, the calculator, Cost Management, tags
~2 h
Stage 5
~9 h
14 · by the author’s design, after “Cost: what affects it, the calculator, Cost Management, tags”
How to pay less: reservations, savings plans, Hybrid Benefit, Spot
~2 h
15 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”
Compliance and control: Azure Policy, resource locks, Purview
~2 h
17 · by the author’s design, after any one of these: “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Cost: what affects it, the calculator, Cost Management, tags”
Monitoring: Advisor, Service Health, Monitor and Application Insights
~2 h
21 · optional · by the author’s design, after “Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints”
Not on the exam: traffic balancing — Load Balancer, App Gateway, Front Door, CDN
~1.5 h
22 · optional · by the author’s design, after any one of these: “Identity: Entra ID, MFA, SSO, Conditional Access”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”
Not on the exam: secrets and the perimeter — Key Vault, DDoS Protection, WAF
~1.5 h
Stage 6
~4 h
16 · by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Compliance and control: Azure Policy, resource locks, Purview”
Management tools: portal, CLI, Cloud Shell, Arc, IaC and ARM
~2 h
18 · by the author’s design, after 2 of these: “Why move to the cloud: six benefits and the cost of each”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Monitoring: Advisor, Service Health, Monitor and Application Insights”
Untangling confusions: what to tell apart on the exam
~2 h
Stage 7
~1.5 h
19 · by the author’s design, after “Untangling confusions: what to tell apart on the exam”
The exam: format, tactics, discounts, proctoring
~1.5 h
Exam
closed · enrol on the course
final · in the browser, without the assistant
Exam
The path in words
- Stage 1 · What the cloud is and what you pay for — ~2 h
- Stage 2 · IaaS, PaaS, SaaS, serverless and the responsibility boundary — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 2 · Why move to the cloud: six benefits and the cost of each — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 2 · Azure geography: regions, region pairs, availability zones — by the author’s design, after “What the cloud is and what you pay for”; ~1.5 h
- Stage 2 · Management hierarchy: resource, resource group, subscription, management group — by the author’s design, after “What the cloud is and what you pay for”; ~2 h
- Stage 3 · Virtual machines: sizes, availability sets, scale sets, AVD — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Azure geography: regions, region pairs, availability zones”; ~2 h
- Stage 3 · Storage: services, access tiers, redundancy — by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Management hierarchy: resource, resource group, subscription, management group”; ~2 h
- Stage 3 · Identity: Entra ID, MFA, SSO, Conditional Access — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Management hierarchy: resource, resource group, subscription, management group”; ~2 h
- Stage 3 · Not on the exam: databases — SQL Database, Managed Instance, Cosmos DB — by the author’s design, after “IaaS, PaaS, SaaS, serverless and the responsibility boundary”; optional; ~2 h
- Stage 4 · Where an application should live: App Service, containers, Functions — by the author’s design, after any one of these: “IaaS, PaaS, SaaS, serverless and the responsibility boundary”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2 h
- Stage 4 · Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints — by the author’s design, after any one of these: “Azure geography: regions, region pairs, availability zones”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2.5 h
- Stage 4 · Moving data: AzCopy, Storage Explorer, File Sync, Migrate, Data Box — by the author’s design, after “Storage: services, access tiers, redundancy”; ~1.5 h
- Stage 4 · Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud — by the author’s design, after “Identity: Entra ID, MFA, SSO, Conditional Access”; ~2 h
- Stage 4 · Cost: what affects it, the calculator, Cost Management, tags — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Virtual machines: sizes, availability sets, scale sets, AVD”; ~2 h
- Stage 5 · How to pay less: reservations, savings plans, Hybrid Benefit, Spot — by the author’s design, after “Cost: what affects it, the calculator, Cost Management, tags”; ~2 h
- Stage 5 · Compliance and control: Azure Policy, resource locks, Purview — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”; ~2 h
- Stage 5 · Monitoring: Advisor, Service Health, Monitor and Application Insights — by the author’s design, after any one of these: “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Cost: what affects it, the calculator, Cost Management, tags”; ~2 h
- Stage 5 · Not on the exam: traffic balancing — Load Balancer, App Gateway, Front Door, CDN — by the author’s design, after “Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints”; optional; ~1.5 h
- Stage 5 · Not on the exam: secrets and the perimeter — Key Vault, DDoS Protection, WAF — by the author’s design, after any one of these: “Identity: Entra ID, MFA, SSO, Conditional Access”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”; optional; ~1.5 h
- Stage 6 · Management tools: portal, CLI, Cloud Shell, Arc, IaC and ARM — by the author’s design, after any one of these: “Management hierarchy: resource, resource group, subscription, management group”, “Compliance and control: Azure Policy, resource locks, Purview”; ~2 h
- Stage 6 · Untangling confusions: what to tell apart on the exam — by the author’s design, after 2 of these: “Why move to the cloud: six benefits and the cost of each”, “Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud”, “Monitoring: Advisor, Service Health, Monitor and Application Insights”; ~2 h
- Stage 7 · The exam: format, tactics, discounts, proctoring — by the author’s design, after “Untangling confusions: what to tell apart on the exam”; ~1.5 h
Programme · 22 units
| 1 | What the cloud is and what you pay for Explain how cloud computing differs from renting someone else's server | ~2 h |
| 2 | IaaS, PaaS, SaaS, serverless and the responsibility boundary Distinguish IaaS, PaaS and SaaS by where the responsibility boundary lies | ~2 h |
| 3 | Why move to the cloud: six benefits and the cost of each Distinguish high availability, scalability and elasticity | ~2 h |
| 4 | Azure geography: regions, region pairs, availability zones Distinguish a datacenter, an availability zone, a region, a region pair and a geography | ~1.5 h |
| 5 | Management hierarchy: resource, resource group, subscription, management group Name the four levels of the Azure hierarchy and the job of each | ~2 h |
| 6 | Virtual machines: sizes, availability sets, scale sets, AVD Name the resources a virtual machine requires | ~2 h |
| 7 | Where an application should live: App Service, containers, Functions Choose a hosting option for the given constraints of a scenario | ~2 h |
| 8 | Networking: VNet, subnets, peering, VPN and ExpressRoute, DNS, endpoints Explain the purpose of a virtual network, a subnet and an NSG | ~2.5 h |
| 9 | Storage: services, access tiers, redundancy Choose between Blob Storage, Azure Files and Azure Disks for a scenario | ~2 h |
| 10 | Moving data: AzCopy, Storage Explorer, File Sync, Migrate, Data Box Choose a data transfer tool based on data volume and link bandwidth | ~1.5 h |
| 11 | Identity: Entra ID, MFA, SSO, Conditional Access Explain the role of Microsoft Entra ID and how it differs from on-premises Active Directory | ~2 h |
| 12 | Access and protection: RBAC, Zero Trust, defense in depth, Defender for Cloud Describe RBAC through the triple who, what is allowed, where | ~2 h |
| 13 | Cost: what affects it, the calculator, Cost Management, tags Name the factors that affect the cost of resources in Azure | ~2 h |
| 14 | How to pay less: reservations, savings plans, Hybrid Benefit, Spot Choose a cost optimization tool for a given workload profile | ~2 h |
| 15 | Compliance and control: Azure Policy, resource locks, Purview Explain what Azure Policy does and how it differs from RBAC | ~2 h |
| 16 | Management tools: portal, CLI, Cloud Shell, Arc, IaC and ARM Choose a management tool for the task: portal, CLI, PowerShell or Cloud Shell | ~2 h |
| 17 | Monitoring: Advisor, Service Health, Monitor and Application Insights Separate Azure Advisor, Service Health and Monitor by the questions they answer | ~2 h |
| 18 | Untangling confusions: what to tell apart on the exam Separate the services most often confused by a single decisive feature | ~2 h |
| 19 | The exam: format, tactics, discounts, proctoring Describe how the exam is structured: time, passing score, domain weights, question formats | ~1.5 h |
| 20 | Not on the exam: databases — SQL Database, Managed Instance, Cosmos DB Choose between SQL Server on a VM, SQL Managed Instance and Azure SQL Database | ~2 h |
| 21 | Not on the exam: traffic balancing — Load Balancer, App Gateway, Front Door, CDN Distinguish Load Balancer, Application Gateway, Front Door and CDN by layer and scope | ~1.5 h |
| 22 | Not on the exam: secrets and the perimeter — Key Vault, DDoS Protection, WAF Explain the purpose of Azure Key Vault and the three types of its contents | ~1.5 h |
