ERW CommandPMO

AZ-900 CERTIFICATION BOOTCAMP

Microsoft Azure Fundamentals — Know the cloud. Name it exactly.

← Course home
20 sessions · 30 minutes each · 4 weeks at your own pace · Track A or Track B, chosen at enrolment
WEEK 1 OF 4 · CLOUD CONCEPTS · SESSIONS 1–5
This week’s assessments: Pop Quiz 1 — Cloud Basics after Session 3 · Practice Exam 1 — Cloud Concepts after Session 5
Every session: the exact names Microsoft uses · one assignment marked against a published rubric · pass mark 70 · Certificate: capstone at 70+ and the marked Final at 700+
A · Describe cloud concepts · 25–30%SESSION 1
What cloud computing is, and who is responsible for what
Session 1 of 20 · 30-minute session
Skills measured — Microsoft’s wording
  • Define cloud computing
  • Describe the shared responsibility model

Why This Matters

Every AZ-900 question rests on two ideas you meet today: what cloud computing is, in Microsoft's own words, and the shared responsibility model, which says who looks after what once a workload leaves your building. I have watched candidates lose easy marks by assuming the cloud hands everything to Microsoft. It does not. Your data, devices and accounts stay yours in every model. At work, this is how you answer a manager who asks, "If we move payroll to the cloud, who patches it?" You will also learn how this course works and how I mark it.

The 30-Minute Session
5:00 – 10:00
What cloud computing is
  • An analogy: most organisations draw electricity from the grid and pay for what they use, rather than running a power station. Cloud computing does the same for IT.
  • Learn's definition is short, and worth learning exactly.
  • THE EXAM LINE

    Cloud computing is the delivery of computing services over the internet. Learn's examples: virtual machines, storage, databases and networking, plus IoT, machine learning and AI.

  • In Learn's example, a retail team adds capacity for a seasonal launch and scales down afterwards, instead of buying servers months ahead: on-demand provisioning replaces long procurement cycles.
If an answer defines cloud computing as buying hardware, it is wrong.
18:00 – 26:00
Hands-on: the safety net goes up first
  • House rule: Track A creates nothing until a budget alert exists.
  • TRACK A · YOUR AZURE ACCOUNT
    • Get a subscription. Use Try Azure for free on Azure's account page (it asks for a phone number, a non-prepaid card, and a Microsoft or GitHub account), or a subscription you already control, never an employer's without written permission. A new Azure free account has a spending limit on by default.
    • Create a budget. Search for Subscriptions, select yours, then select Budgets and Add. In Create budget, confirm the scope, name the budget, choose a reset period such as Monthly, set an expiration date and a small amount, then select Next. Add thresholds (% of budget) with your email, using Type to create one Actual and one Forecasted alert, and finish. Take a screenshot.
    • Know its limits. Learn says resources aren't affected and consumption isn't stopped when a threshold is exceeded. At the time of writing, Learn also says a new subscription can wait up to 48 hours for all Cost Management features, and lists Azure for Students as unsupported. If Budgets is unavailable, create nothing and tell me the same day.
    TRACK B · NO PAYMENT CARD
    • Open the Learn unit Describe the shared responsibility model and screenshot its diagram with the page address visible.
    • Read the responsibility matrix on Microsoft's Shared responsibility in the cloud page.
    • Read Learn's Create and manage budgets tutorial: a budget alerts rather than stops spending. You cannot create one without a subscription, so do not pretend to.
  • Budgets belong to Microsoft Cost Management, Microsoft's suite of FinOps tools, which you reach through the portal's Cost Management + Billing area. Week 3 covers both properly.
Set the alert while nothing is running, because the day you need it is the day you would have forgotten.

The exact names

As Microsoft prints them — the exam and the marker both expect these, letter for letter.
cloud computingconceptDelivery of computing services over the internet.Learn →
shared responsibility modelconceptHow duties are divided between the cloud provider and the customer.Learn →
on-premises datacenterconceptA datacenter you own and run, where the whole stack is yours.Learn →
infrastructure as a service (IaaS)conceptService type with the most customer control and responsibility.Learn →
platform as a service (PaaS)conceptMiddle service type; the provider also runs the platform.Learn →
software as a service (SaaS)conceptFinished applications; the provider carries most responsibility.Learn →
Azure free accountfeatureSign-up offer with 12 months of some free services plus always-free services.Learn →
spending limitfeatureStops spending beyond your credit amount; on by default for free accounts.Learn →
Microsoft Cost ManagementserviceMicrosoft's suite of FinOps tools for analysing and optimising cloud costs.Learn →
Cost Management + BillingportalPortal area for billing accounts and cost tools.Learn →
BudgetsportalMenu item on a scope, such as a subscription, for creating budgets.Learn →
forecasted budget alertsfeatureAlerts when projected cost is likely to exceed your threshold.Learn →
Every name in the course is on one printable page: download the AZ-900 cheat sheet (PDF).
Key Terms

Shared responsibility model

The split of duties between provider and customer, which changes with the service type.

Budget alert

An email sent when actual or forecasted cost reaches your threshold. It does not stop spending.

Self-Check — Before You Submit
1. Which responsibility stays with the customer in every cloud service type?
  • A. The physical network
  • B. Operating system patching
  • C. The information and data stored in the cloud
  • D. The physical hosts
C. The information and data stored in the cloud — Learn lists data, devices, and accounts and identities as always the customer's. Operating system patching is tempting, but it moves to the provider under PaaS and SaaS.
2. A hospital moves staff email to a SaaS product. Its IT manager says the provider now fully controls which devices may connect. Is that right?
  • A. Yes, SaaS makes the provider responsible for everything
  • B. No, devices allowed to connect remain the customer's responsibility
  • C. Yes, but only for mobile phones
  • D. No, devices are only the customer's concern under IaaS
B. No, devices allowed to connect remain the customer's responsibility — Learn lists devices allowed to connect as always the customer's. Microsoft's matrix shows client devices as shared under SaaS, but endpoint protection stays with the customer.
3. Which definition of cloud computing matches Microsoft Learn?
  • A. The delivery of computing services over the internet
  • B. Buying servers and housing them in a partner's building
  • C. Running virtual machines on hardware you own
  • D. Renting software licences for office computers
A. The delivery of computing services over the internet — Learn defines cloud computing as the delivery of computing services over the internet. Servers you bought, wherever they are housed, are still your own infrastructure.

Today’s Assignment

Build a responsibility matrix for three real workloads at an organisation you know, and explain who is responsible for what.
  • Describe three workloads at an organisation you know, marking any assumptions.
  • Classify each as on-premises datacenter, infrastructure as a service (IaaS), platform as a service (PaaS) or software as a service (SaaS), with one sentence of reasoning.
  • Build a matrix with the workloads as columns and these rows: customer data; identities and users; client devices; applications; network controls; operating system; physical hosts, network and datacenter. In each cell write Customer, Provider or Shared, following Microsoft's matrix.
  • Explain which responsibilities the organisation keeps under the shared responsibility model whatever it chooses, and one risk it would face if it assumed the provider covered one of them.
  • Say which workload you would move first and how its split would change. Write 300–700 words, using the exact names from the names box.
Evidence to include
  • Track A: a screenshot of your budget showing its amount, reset period and actual and forecasted alerts.
  • Track B: a screenshot of the Learn shared responsibility diagram with the page address visible.
Names your answer must use exactly
shared responsibility model on-premises datacenter infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)
Track B
Track B students build the same matrix from the Learn diagram and Microsoft's Shared responsibility in the cloud page, and submit the diagram screenshot in place of the budget.
How this is marked — the rubric
Every matrix cell matches Microsoft's responsibility matrix for the model chosen35
Each model is justified, and the always-customer responsibilities and the risk are correct25
Uses the exact names from the names box, spelled and capitalised as Microsoft prints them20
Evidence: the screenshot shows the budget and alerts (A) or the Learn diagram with its address (B)20
Total · pass mark 70100
Submitting session 1
Write your answer in Word or Google Docs, with your screenshots pasted in. The top of the document must carry the line Session: 1 (the template has it ready, under the Course line), or the submission is refused. Upload the Word file (.docx), or switch to the Google Doc tab and paste your document’s share link.
Marked against the rubric above and returned as a written letter by email; the mark appears on your progress page. Do the self-check above before you submit.
Skills Covered
Define cloud computingShared responsibility modelIaaS, PaaS, SaaS splitBudget alert firstHow marking works
Tick it once you have submitted.Next: Session 2 →
A · Describe cloud concepts · 25–30%SESSION 2
Public, private and hybrid cloud, and when to use each
Session 2 of 20 · 30-minute session
Skills measured — Microsoft’s wording
  • Define cloud models, including public, private, and hybrid
  • Identify appropriate use cases for each cloud model

Why This Matters

Microsoft tests cloud models through short scenarios: an organisation with a rule, a constraint or a spike in demand. The definitions are simple, and the traps are in the detail. A private cloud does not have to sit in your own building, and a hybrid cloud is more than having some things in the cloud, because its parts are connected. At work, this is the first question in almost any migration plan: what can go public, what must stay private, and how will the two connect? Today you learn Microsoft's definitions, compare them, and practise choosing.

The 30-Minute Session
7:00 – 14:00
Comparing them side by side
  • ModelStrengths Learn listsLimits Learn lists
    Public cloudNo capital expenditures to scale up; quick provisioning and deprovisioning; you pay only for what you useYou don't have complete control over resources and security
    Private cloudComplete control over resources and security; data isn't collocated with other tenants' dataHardware must be purchased; you maintain and update it
    Hybrid cloudThe most flexibility; you decide where applications run; you control security, compliance and legal requirementsNone listed. My note: you run two environments and the link between them
  • Read it as trade-offs. Public cloud trades control for speed and no up-front hardware. Private cloud trades cost for control. Hybrid lets each workload sit where it fits best.
  • Learn names two uses for hybrid. A private cloud can surge into public cloud resources for increased, temporary demand. And hybrid adds a layer of security, because you choose which services stay in the public cloud and which go to private infrastructure.
  • THE EXAM LINE

    Hybrid means public and private clouds in an inter-connected environment. Learn's two uses: surging into public resources for temporary demand, and choosing which services stay private.

A temporary spike on top of existing private infrastructure usually means hybrid.
19:00 – 26:00
Hands-on: choosing a model
  • Scenario (illustrative)ModelDeciding Learn wording
    A logistics start-up with no hardware wants to launch in weeks and pay only for usePublicNo capital expenditures to scale up
    A Lagos bank must keep one system's data apart from other organisations' data, with full security controlPrivateData isn't collocated with other tenants' data
    A manufacturer's datacenter copes all year except for a two-week peakHybridSurge for increased, temporary demand
    A retailer uses one public provider and is migrating from anotherMulticloudMultiple public cloud providers
  • Cover the last two columns and decide each scenario yourself first. Then write one line per scenario naming the phrase that pointed you to the model.
  • TRACK A · YOUR AZURE ACCOUNT
    • In the portal, select Resource groups, then Create, and open the Region list: these are Azure locations in Microsoft's public cloud. Screenshot it and close the page without creating anything.
    • Search for Azure Arc and open the page Learn calls Machines - Azure Arc. It will be empty; this is where connected servers from outside Azure would appear. Screenshot it, and do not onboard anything.
    TRACK B · NO PAYMENT CARD
    • Screenshot the comparison table in the Learn unit Define cloud models, with the address visible.
    • Read Learn's What is Azure Arc-enabled servers?, which describes managing machines hosted outside of Azure, on your corporate network or with another cloud provider. Write that idea in one sentence.
Underline the constraint first. The constraint, not the industry, decides the model.

The exact names

As Microsoft prints them — the exam and the marker both expect these, letter for letter.
public cloudconceptThird-party cloud that anyone can buy services from.Learn →
private cloudconceptCloud used by a single entity, on-site or offsite.Learn →
hybrid cloudconceptPublic and private clouds in an inter-connected environment.Learn →
multicloudconceptUsing two or more public cloud providers.Learn →
Azure ArcserviceTechnologies for managing resources across Azure, on-premises and other clouds.Learn →
Azure VMware SolutionserviceRuns VMware workloads in Azure.Learn →
Azure Arc-enabled serversfeatureManages Windows and Linux machines hosted outside Azure.Learn →
Resource groupsportalPortal page for listing and creating resource groups.Learn →
RegionsettingThe Azure location chosen when creating a resource group.Learn →
Every name in the course is on one printable page: download the AZ-900 cheat sheet (PDF).
Key Terms

Tenant

One customer of a shared cloud. In a private cloud, your data isn't collocated with other tenants' data.

Multicloud

Using more than one public cloud provider at the same time.

Self-Check — Before You Submit
1. A hospital runs patient systems in its own private cloud. For a six-week campaign, demand triples, and it wants extra capacity connected to existing systems for that period only. Which model fits?
  • A. Private cloud, by buying servers
  • B. Public cloud only
  • C. Hybrid cloud
  • D. Multicloud
C. Hybrid cloud — Learn says hybrid lets a private cloud surge into public resources for temporary demand. Multicloud is tempting, but it means several public providers, not public plus private.
2. Which statement about a private cloud matches Learn?
  • A. It can be hosted offsite, even by a third party
  • B. It must be in the organisation's own building
  • C. Anyone can buy services from it
  • D. It needs no hardware purchase
A. It can be hosted offsite, even by a third party — Learn says a private cloud may be hosted on-site or offsite, potentially by a third party. What makes it private is use by a single entity.
3. What does Learn call a key difference between public and private clouds?
  • A. The price per hour
  • B. The general public availability
  • C. The number of regions
  • D. Whether virtual machines are used
B. The general public availability — Learn names general public availability as a key difference. Price and regions vary between providers but do not define the model.

Today’s Assignment

Classify one real need at each of five organisations you know to a cloud model, and justify each with Learn's wording.
  • Choose five organisations you know, from at least three sectors, and describe one real IT need at each in two or three sentences. Mark any assumptions.
  • Classify each need as public cloud, private cloud or hybrid cloud. You may use multicloud once, if that organisation really uses several public providers.
  • Justify each in three to five sentences, quoting Learn's definitions or comparison table and naming the constraint that decided it.
  • Explain your closest call and what would change it. Where managing machines outside Azure matters, say how Azure Arc would help.
  • Write 300–700 words, using the exact names from the names box.
Evidence to include
  • Track A: screenshots of the portal Region list and the empty Azure Arc machines page.
  • Track B: a screenshot of the Learn comparison table with the address visible.
  • Both tracks: a summary table showing each organisation, need, model and the Learn phrase you used.
Names your answer must use exactly
public cloud private cloud hybrid cloud multicloud Azure Arc
Track B
Track B students do the same classification from the Learn unit and the Azure Arc-enabled servers page, and submit the comparison-table screenshot.
How this is marked — the rubric
Each need is classified to the model that best fits Microsoft's definitions35
Each justification quotes Learn and names the deciding constraint; the closest call is explained25
Uses the exact names from the names box, spelled and capitalised as Microsoft prints them20
Evidence: the screenshots and the summary table are present and legible20
Total · pass mark 70100
Submitting session 2
Write your answer in Word or Google Docs, with your screenshots pasted in. The top of the document must carry the line Session: 2 (the template has it ready, under the Course line), or the submission is refused. Upload the Word file (.docx), or switch to the Google Doc tab and paste your document’s share link.
Marked against the rubric above and returned as a written letter by email; the mark appears on your progress page. Do the self-check above before you submit.
Skills Covered
Public, private, hybridChoose a cloud modelMulticloud vs hybridRecognise Azure Arc
Tick it once you have submitted.Next: Session 3 →
A · Describe cloud concepts · 25–30%SESSION 3
Paying for cloud: consumption-based model, pricing models, serverless
Session 3 of 20 · 30-minute session
Skills measured — Microsoft’s wording
  • Describe the consumption-based model
  • Compare cloud pricing models
  • Describe serverless

Why This Matters

Money drives cloud decisions, and it is a steady source of AZ-900 questions. Today you learn why cloud spending is an operational expense, how Azure's main pricing options differ, and what serverless really means. I have seen candidates mix up a reservation and a savings plan and lose a mark they understood in principle. At work, you will be asked which option saves money, and you should answer with an estimate rather than a guess. So today you build one in Microsoft's public pricing calculator. This session also opens your first short paper.

The 30-Minute Session
6:00 – 14:00
Comparing cloud pricing models
  • Learn's unit names pay-as-you-go: you typically pay only for the services you consume. Azure's pricing page and Learn's billing documentation describe the other options you should be able to compare.
  • OptionHow it works, per MicrosoftFits when
    Pay-as-you-goPay for what you consume, with no commitmentUsage is new, short or unpredictable
    Azure ReservationsA one-year or three-year commitment that gives a billing discount on matching resources; you pay up front or monthlyA specific resource, size and region runs steadily
    Savings plan for computeA fixed hourly spend commitment for one or three years, applied automatically to eligible usage across services and regionsSpend is steady, but sizes, services or regions change
    Azure Spot Virtual MachinesUnused Azure capacity at a significant saving; the VM can be evicted when Azure needs the capacity back, and there is no SLAThe work tolerates interruption, such as batch jobs or dev/test
  • Learn says reservations and savings plans are billing offers that don't affect the runtime state of your resources. With a savings plan, any commitment you don't use in an hour expires and does not roll over.
  • THE EXAM LINE

    Reservations tie a discount to a specific resource, size and region. Savings plans commit to an hourly spend across eligible services and regions. Spot VMs can be evicted and have no SLA.

  • The pricing page also lists Azure Hybrid Benefit, which applies existing Windows Server or SQL Server licences or a Linux subscription, and dev/test pricing. Recognise both names. Trap: Spot sounds cheapest, and it is wrong for any workload that must not be interrupted.
Ask whether the workload runs steadily and whether it can be interrupted; those two answers usually decide the option.
19:00 – 26:00
Hands-on: price one workload two ways
  • Both tracks use the public Azure pricing calculator. Learn says it shows retail costs, and that logging in also shows your negotiated prices.
  • Pick a workload you know that could run on a virtual machine. In the product picker, add Virtual Machines and set the region, operating system and size. Record the pay-as-you-go estimate, switch the same configuration to a reservation, and record it again, noting any upfront and monthly split.
  • Use Export to download an Excel file or Share to create a link. Screenshot both configurations with their totals.
  • TRACK A · YOUR AZURE ACCOUNT
    • Run the calculator while logged in. Then open Budgets and confirm your Session 1 budget is still there and has not alerted. Take a screenshot.
    TRACK B · NO PAYMENT CARD
    • Run the calculator without logging in; retail prices are exactly what you need. Then read the purchase options on Azure's public Linux Virtual Machines pricing page and screenshot it with the address visible.
Change one setting at a time so you know what moved the number.

The exact names

As Microsoft prints them — the exam and the marker both expect these, letter for letter.
consumption-based modelconceptPay for the IT resources you use, and nothing more.Learn →
capital expenditure (CapEx)conceptUp-front spending on physical infrastructure.Learn →
operational expenditure (OpEx)conceptOngoing spending on services; how cloud is classified.Learn →
pay-as-you-goconceptPay only for the services you consume.Learn →
Azure ReservationsfeatureOne- or three-year commitment for a billing discount.Learn →
Savings plan for computefeatureHourly spend commitment discounting eligible compute usage.Learn →
Azure Spot Virtual MachinesserviceDiscounted unused capacity that Azure can evict.Learn →
serverless computingconceptRunning code without managing servers.Learn →
Azure FunctionsserviceEvent-driven, serverless compute.Learn →
Flex Consumption plantierRecommended Functions plan with pay-as-you-go billing.Learn →
Azure pricing calculatortoolTurns anticipated usage into an estimated cost.Learn →
Every name in the course is on one printable page: download the AZ-900 cheat sheet (PDF).
Key Terms

OpEx

Ongoing spending on services. Cloud computing is classified as OpEx.

Estimate

A collection of products in the pricing calculator, similar to a shopping cart.

Self-Check — Before You Submit
1. A logistics firm runs its routing database on the same VM size in one region around the clock and expects to for three years. Which option discounts that specific resource?
  • A. Azure Spot Virtual Machines
  • B. Pay-as-you-go
  • C. Azure Functions
  • D. Azure Reservations
D. Azure Reservations — Reservations tie a discount to a specific resource, size and region and suit steady use. Spot is tempting on price, but a live database cannot risk eviction.
2. Why does Learn classify cloud computing as an operational expense?
  • A. You pay for cloud services as you consume them
  • B. Cloud servers are leased for three years
  • C. The provider buys hardware for you and invoices once
  • D. Cloud services cannot be budgeted
A. You pay for cloud services as you consume them — Learn says that because you pay for cloud services as you consume them, cloud computing is an operational expense rather than up-front capital spending.
3. Which statement about serverless computing is correct?
  • A. No servers are involved at all
  • B. You manage the VMs but not the operating system
  • C. You don't manage servers; events trigger code and you pay for what runs
  • D. It requires a three-year commitment
C. You don't manage servers; events trigger code and you pay for what runs — Serverless removes the need to manage servers, not the servers themselves. Learn says Azure Functions runs when triggered and charges only for CPU time used.

Today’s Assignment

Compare the cost of one real workload under two Azure pricing models using the Azure pricing calculator, and recommend one.
  • Describe a workload at an organisation you know that could run on a virtual machine: what it does, when it runs, and whether it can tolerate interruption.
  • Estimate it in the Azure pricing calculator twice: once at pay-as-you-go, and once with Azure Reservations or a Savings plan for compute, if offered. Record the settings and figures exactly as shown, with the date.
  • Explain the difference and what the organisation would commit to. Say whether Azure Spot Virtual Machines would suit the workload, using Learn's description of eviction.
  • Recommend an option, give one risk, and explain in two sentences how the consumption-based model applies. Write 300–700 words using the exact names, and do not invent any figures.
Evidence to include
  • Screenshots of both calculator configurations, showing settings, totals and the date.
  • The exported Excel file or the share link.
  • Track A: the Budgets screenshot. Track B: the public pricing page screenshot.
Names your answer must use exactly
Azure pricing calculator pay-as-you-go Azure Reservations Savings plan for compute Azure Spot Virtual Machines consumption-based model
Track B
Track B students run the same comparison in the public calculator without logging in, and submit the pricing page screenshot instead of the Budgets screenshot.
How this is marked — the rubric
Both estimates use the same configuration, are recorded accurately, and the difference is explained correctly35
The recommendation and the Spot judgement follow from the workload's pattern and tolerance for interruption25
Uses the exact names from the names box, spelled and capitalised as Microsoft prints them20
Evidence: the screenshots show both configurations and totals, with the export or link attached20
Total · pass mark 70100
Submitting session 3
Write your answer in Word or Google Docs, with your screenshots pasted in. The top of the document must carry the line Session: 3 (the template has it ready, under the Course line), or the submission is refused. Upload the Word file (.docx), or switch to the Google Doc tab and paste your document’s share link.
Marked against the rubric above and returned as a written letter by email; the mark appears on your progress page. Do the self-check above before you submit.
ASSESSMENT NOW OPEN

Pop Quiz 1 — Cloud Basics opens now. Sit it before the next session. It is how you find out what has stuck, and practice papers may be resat as often as you like.

5 questions · 8 minutes · covers Sessions 1–3 · pass mark 70
Sit Pop Quiz 1 →Closed book, no notes, and Coach Ritchie switches himself off while you sit it.
Skills Covered
Consumption-based modelCapEx vs OpExCompare pricing modelsDescribe serverlessPricing calculator
Tick it once you have submitted.Next: Session 4 →
A · Describe cloud concepts · 25–30%SESSION 4
Why cloud: availability, scalability, reliability, predictability, security, governance, manageability
Session 4 of 20 · 30-minute session
Skills measured — Microsoft’s wording
  • Describe the benefits of high availability and scalability in the cloud
  • Describe the benefits of reliability and predictability in the cloud
  • Describe the benefits of security and governance in the cloud
  • Describe the benefits of manageability in the cloud

Why This Matters

Organisations move to the cloud for the benefits you study today: staying up, scaling with demand, recovering from failure, predictable performance and cost, security and governance, and easier management. The exam groups these benefits in a set way and expects Microsoft's vocabulary. Scaling up is not scaling out, and management of the cloud is not management in the cloud. I have watched strong candidates confuse those pairs under time pressure. At work, these are the words you use to justify a cloud decision, so give each one a real example.

IN YOUR SUBSCRIPTION
Creates
Track A only: a resource group with an App Service plan on the Free F1 pricing plan and one App Service web app.
Cost
Learn says that, except for the Free tier, an App Service plan carries a charge. Confirm the plan shows Free F1 before you create it. For any other plan, check the pricing calculator first.
Clean-up
Open the app's resource group, select Delete resource group, type its name, and select Delete.
The 30-Minute Session
6:00 – 12:00
Scalability: vertical and horizontal
  • Scalability is the ability to adjust resources to meet demand. On a consumption-based model, scaling down also cuts cost.
  • AspectVertical scalingHorizontal scaling
    What changesA resource's capabilitiesThe number of resources
    Up or outScale up: add CPUs or RAMScale out: add VMs or containers
    Down or inScale down: reduce CPU or RAMScale in: remove resources
    In App ServiceChange the plan's pricing tierAdd VM instances running the app
  • THE EXAM LINE

    Vertical scaling changes a resource's capabilities (up or down). Horizontal scaling changes the number of resources (out or in), automatically or manually.

  • Learn adds that in the Free and Shared App Service tiers, an app can't scale out. Track A will see this shortly.
Up and down change the size; out and in change the count.
18:00 – 26:00
Security, governance, manageability, then hands-on
  • Security and governance: templates help resources meet your standards and regulations, cloud-based auditing flags anything out of compliance, and patches may be applied automatically. IaaS gives the most security control, while PaaS or SaaS can take patching off your hands. Providers are typically well suited to handling distributed denial of service (DDoS) attacks.
  • Management of the cloud covers autoscaling, template deployment, health monitoring with replacement of failing resources, and metric alerts. Management in the cloud is how you do it: a web portal, a command line interface, APIs or PowerShell.
  • THE EXAM LINE

    Management of the cloud is what you do to resources: autoscale, deploy templates, monitor, alert. Management in the cloud is how: portal, command line, APIs, PowerShell.

  • TRACK A · YOUR AZURE ACCOUNT
    • From Learn's How to read a service-level agreement (SLA), open the SLAs for online services and screenshot one Azure service's section.
    • Follow Learn's App Service quickstart in the portal: Create new for the resource group and plan, then choose Free F1 under Pricing plan. Check it, then select Review + create and Create.
    • In the app, open Scale up and view the tiers without selecting one. Then open the scale-out page, which Learn labels Scale-out (App Service plan). Screenshot both, then follow the lab clean-up.
    TRACK B · NO PAYMENT CARD
    • From Learn's How to read a service-level agreement (SLA), open the SLAs for online services and screenshot them with the address visible.
    • Read Learn's Scale up an app in Azure App Service and Azure App Service plans pages, noting which tiers can't scale out. You are reading about what Track A sees, not doing it.
A screenshot of the Scale up page tells me more than a paragraph about it.

The exact names

As Microsoft prints them — the exam and the marker both expect these, letter for letter.
high availabilityconceptKeeping resources available despite disruptions.Learn →
scalabilityconceptAdjusting resources to meet demand.Learn →
service-level agreements (SLAs)conceptMicrosoft's formal uptime commitments, which vary by service.Learn →
vertical scalingconceptChanging a resource's CPU or RAM (up or down).Learn →
horizontal scalingconceptChanging the number of resources (out or in).Learn →
service creditsconceptThe usual compensation when an SLA target is missed.Learn →
reliabilityconceptRecovering from failures and continuing to function.Learn →
predictabilityconceptConfidence in performance and cost.Learn →
Microsoft Azure Well-Architected FrameworkconceptMicrosoft's architecture guidance, with reliability as a pillar.Learn →
autoscalingfeatureAdding and removing resources automatically as demand changes.Learn →
distributed denial of service (DDoS)conceptA flooding attack that providers are well suited to handle.Learn →
Management of the cloudconceptManaging resources: autoscale, templates, monitoring, alerts.Learn →
Management in the cloudconceptManaging through a portal, command line, APIs or PowerShell.Learn →
Scale upportalApp Service page for changing the plan's pricing tier.Learn →
Every name in the course is on one printable page: download the AZ-900 cheat sheet (PDF).
Key Terms

Scale out or in

Changing the number of resources, such as VMs.

Cloud-based auditing

Flagging resources that fall outside your compliance baseline.

Self-Check — Before You Submit
1. An online retailer's web tier is overwhelmed every payday. The team adds virtual machines for the rush and removes them afterwards. What is this?
  • A. Vertical scaling
  • B. Horizontal scaling
  • C. High availability
  • D. Management in the cloud
B. Horizontal scaling — Adding and removing virtual machines changes the number of resources, which is horizontal scaling. Vertical scaling changes one resource's CPU or RAM instead.
2. Which is an example of management in the cloud, as Learn defines it?
  • A. Automatically replacing failing resources
  • B. Deploying from a preconfigured template
  • C. Managing resources through a command line interface
  • D. Alerts based on configured metrics
C. Managing resources through a command line interface — Management in the cloud is how you manage: portal, command line, APIs or PowerShell. The other options are Learn's examples of management of the cloud.
3. How does Learn define reliability?
  • A. Adjusting resources to meet demand
  • B. Forecasting cloud spend
  • C. Contracted uptime
  • D. The ability of a system to recover from failures and continue to function
D. The ability of a system to recover from failures and continue to function — Learn defines reliability as recovering from failures and continuing to function. Adjusting to demand is scalability, and contracted uptime belongs to the SLA.

Today’s Assignment

Map each cloud benefit in this session to one concrete example from systems you use at an organisation you know.
  • Pick one to three cloud systems you know well, such as email, a booking site or a finance tool, and describe each briefly.
  • Give one example for each benefit: high availability; scalability, stating whether it is vertical scaling or horizontal scaling; reliability; predictability, stating whether it concerns performance or cost; security and governance; and manageability, stating whether it is management of or in the cloud.
  • For high availability, quote what the service-level agreements (SLAs) commit to for a service the system uses, or a comparable Azure service, and what happens if a target is missed.
  • Where a benefit isn't visible, say so. Finish with the benefit that matters most to that organisation. Write 300–700 words, using the exact names.
Evidence to include
  • A screenshot of the SLA section you quote.
  • Track A: screenshots of the Scale up and scale-out pages and of the deletion. Track B: screenshots of the two Learn pages with their addresses visible.
Names your answer must use exactly
high availability scalability vertical scaling horizontal scaling reliability predictability service-level agreements (SLAs)
Track B
Track B students do the same mapping, read the SLA from the public SLAs for online services, and submit the Learn page screenshots instead of the portal ones.
How this is marked — the rubric
Each benefit has a concrete example, correctly classified as vertical or horizontal and of or in35
The SLA is quoted accurately and interpreted correctly20
Uses the exact names from the names box, spelled and capitalised as Microsoft prints them20
Evidence: the screenshots show the SLA, plus the scaling pages and deletion (A) or the Learn pages (B)25
Total · pass mark 70100
Submitting session 4
Write your answer in Word or Google Docs, with your screenshots pasted in. The top of the document must carry the line Session: 4 (the template has it ready, under the Course line), or the submission is refused. Upload the Word file (.docx), or switch to the Google Doc tab and paste your document’s share link.
Marked against the rubric above and returned as a written letter by email; the mark appears on your progress page. Do the self-check above before you submit.
Skills Covered
High availability and SLAsVertical vs horizontalReliability, predictabilitySecurity and governanceManagement of vs in
Tick it once you have submitted.Next: Session 5 →
A · Describe cloud concepts · 25–30%SESSION 5
IaaS, PaaS and SaaS, and choosing between them
Session 5 of 20 · 30-minute session
Skills measured — Microsoft’s wording
  • Describe infrastructure as a service (IaaS)
  • Describe platform as a service (PaaS)
  • Describe software as a service (SaaS)
  • Identify appropriate use cases for each cloud service type (IaaS, PaaS, and SaaS)

Why This Matters

IaaS, PaaS and SaaS run through the whole exam. Every service you meet later belongs to one of the three, and the type tells you who patches what. Microsoft tests them through use cases: a lift-and-shift migration, developers who want no servers to look after, a department that just needs email. Today you learn the three types as Learn defines them, look at what creating each involves, and practise choosing between them. This session closes Week 1 and opens your first full practice paper, so it also pulls the week together.

The 30-Minute Session
6:00 – 12:00
Platform as a service
  • Learn describes platform as a service (PaaS) as a middle ground between renting datacenter space and buying a complete, deployed solution. The provider also maintains the operating systems, middleware, development tools and analytics services, so you don't license or patch operating systems and databases. You focus on your code, data and access controls.
  • Learn's scenarios are Development framework, where you build on provided components with scalability and high availability included, and Analytics or business intelligence, where you analyse data with tools provided as a service.
  • Microsoft's examples include Azure App Service, which its product page calls a fully managed platform as a service, along with Azure Functions and Azure SQL Database. A web app runs on an App Service plan.
  • THE EXAM LINE

    In PaaS, the provider runs the operating system, middleware and development tools. You manage your application, data and access.

If the team wants to write code rather than look after servers, the answer is PaaS.
17:00 – 26:00
Choosing a type, with the create flows in view
  • QuestionIaaSPaaSSaaS
    Who manages the OS?YouProviderProvider
    You mainly manageOS, network, storage and database configurationCode, data, accessData, identity and access, devices
    Learn's use casesLift-and-shift; testing and developmentDevelopment framework; analyticsEmail, productivity, finance
    ExampleAzure Virtual MachinesAzure App ServiceMicrosoft 365
  • TRACK A · YOUR AZURE ACCOUNT
    • Open Virtual machines, then select Create and Virtual machine. Note the decisions you would own: Image, Administrator account and Inbound port rules. Screenshot the page and close it without selecting Review + create.
    • Open the web app create page from Session 4. Note the decisions here: runtime stack, operating system, region and pricing plan. Which decisions have moved to Microsoft? Screenshot it and close it.
    • If you use Microsoft 365, list what you manage (data, access, devices) and what you never touch.
    TRACK B · NO PAYMENT CARD
    • Open the public product pages for Azure Virtual Machines and Azure App Service, and Microsoft's Shared responsibility in the cloud page.
    • Compare the decisions in Learn's Windows virtual machine portal quickstart and its Node.js web app quickstart. Screenshot one step from each. You are reading these flows, not running them.
  • Illustrative practice: a manufacturer moving an old server unchanged needs IaaS. Bank developers building a portal without managing servers need PaaS. An agency needing staff email next month needs SaaS.
  • THE EXAM LINE

    Lift-and-shift and dev/test suggest IaaS; development frameworks and analytics suggest PaaS; email and productivity tools suggest SaaS.

Choose the type that leaves the customer least to manage while still meeting every requirement.

The exact names

As Microsoft prints them — the exam and the marker both expect these, letter for letter.
infrastructure as a service (IaaS)conceptYou manage VMs, operating systems and applications.Learn →
platform as a service (PaaS)conceptYou deploy apps without managing VMs or operating systems.Learn →
software as a service (SaaS)conceptYou use ready-made applications.Learn →
Azure Virtual MachinesserviceMicrosoft's IaaS example.Learn →
Azure App ServiceserviceMicrosoft's PaaS example for web apps.Learn →
Microsoft 365serviceMicrosoft's SaaS productivity example.Learn →
Dynamics 365serviceMicrosoft's SaaS business-application example.Learn →
App Service planconceptThe compute resources a web app runs on.Learn →
Lift-and-shift migrationconceptIaaS use case: move workloads largely unchanged.Learn →
Testing and developmentconceptIaaS use case: quickly replicate environments.Learn →
Development frameworkconceptPaaS use case: build on provided components.Learn →
Analytics or business intelligenceconceptPaaS use case: analyse data with provided tools.Learn →
Every name in the course is on one printable page: download the AZ-900 cheat sheet (PDF).
Key Terms

Middleware

Software between the operating system and applications; the provider maintains it in PaaS.

Runtime stack

The language and version a web app runs on.

Self-Check — Before You Submit
1. A manufacturer must move a legacy stock application to Azure unchanged within a month and wants full control of the operating system. Which type fits?
  • A. SaaS
  • B. PaaS
  • C. IaaS
  • D. Serverless
C. IaaS — Learn names lift-and-shift migration as an IaaS scenario, and under IaaS you manage the operating system. PaaS is tempting, but there the provider manages the OS.
2. Under PaaS, which does the cloud provider maintain?
  • A. The operating system and middleware
  • B. The application code
  • C. Which users have access
  • D. The data you store
A. The operating system and middleware — Learn says that under PaaS the provider maintains operating systems, middleware and development tools. Code, data and access controls stay with the customer.
3. Which statement about SaaS matches Learn?
  • A. It is the most flexible type
  • B. It may be the least flexible, but it is the easiest to get running
  • C. You patch the operating system
  • D. It removes all responsibility for data
B. It may be the least flexible, but it is the easiest to get running — Learn says SaaS may be the least flexible but is the easiest to get running. IaaS is the most flexible, and data always stays the customer's responsibility.

Today’s Assignment

Choose and defend a cloud service type for four real scenarios at an organisation you know.
  • Describe four IT needs at an organisation you know, including at least one existing system and one new requirement.
  • For each, choose infrastructure as a service (IaaS), platform as a service (PaaS) or software as a service (SaaS), and name a fitting example such as Azure Virtual Machines, Azure App Service or Microsoft 365.
  • Defend each choice in four to six sentences: the Learn use case it matches, what the organisation still manages, and why the other types fit less well.
  • Explain your closest call and what would change it. Write 300–700 words, using the exact names.
Evidence to include
  • Track A: screenshots of the VM and web app create pages, and of your Resource groups list afterwards.
  • Track B: screenshots of the Learn quickstart steps and product pages, with the addresses visible.
  • Both tracks: a summary table of each scenario, type, example and use case.
Names your answer must use exactly
infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS) Azure Virtual Machines Azure App Service Microsoft 365
Track B
Track B students make the same choices using the public product pages, Learn's quickstarts and the shared responsibility page, and submit screenshots of those pages.
How this is marked — the rubric
Each scenario is matched to the type that best fits Learn's definitions and use cases35
Each defence states what the customer still manages and why the alternatives fit less well25
Uses the exact names from the names box, spelled and capitalised as Microsoft prints them20
Evidence: the screenshots and summary table are present and match the track20
Total · pass mark 70100
Submitting session 5
Write your answer in Word or Google Docs, with your screenshots pasted in. The top of the document must carry the line Session: 5 (the template has it ready, under the Course line), or the submission is refused. Upload the Word file (.docx), or switch to the Google Doc tab and paste your document’s share link.
Marked against the rubric above and returned as a written letter by email; the mark appears on your progress page. Do the self-check above before you submit.
ASSESSMENT NOW OPEN

Practice Exam 1 — Cloud Concepts opens now. Sit it before the next session. It is how you find out what has stuck, and practice papers may be resat as often as you like.

15 questions · 18 minutes · covers Sessions 1–5 · pass mark 70
Sit Practice Exam 1 →Closed book, no notes, and Coach Ritchie switches himself off while you sit it.
Skills Covered
Describe IaaSDescribe PaaSDescribe SaaSMatch use cases to typesCompare create flows
Tick it once you have submitted.Next: Session 6 →
← Back to course home