AZ-900T00: Introduction to Cloud Infrastructure Training

Instructor-led Microsoft training for IT professionals, administrators, business users, technical decision makers, students, cloud beginners, and project stakeholders who need a practical introduction to Microsoft Azure and cloud infrastructure. This course introduces cloud concepts, Azure architecture, Azure compute, Azure networking, Azure storage, identity, access, security, cost management, governance, deployment tools, monitoring, and hands-on Azure portal activities.

Dynamics Edge delivers AZ-900T00 as a practical, instructor-led course for learners who are new to Azure and want to understand cloud infrastructure before moving into role-based Azure administration, security, architecture, AI, data, or developer training. The course is designed to build confidence with Azure terminology, Azure services, Azure portal navigation, command-line concepts, and foundational cloud decision-making.

Why choose Dynamics Edge for AZ-900T00 training?

Dynamics Edge turns Microsoft course topics into practical instructor-led training for learners who need cloud fluency, Azure awareness, certification preparation, and project-ready understanding. This course can be delivered as a public class, private team class, government training, or customized cloud readiness workshop.

• Learn foundational Azure and cloud infrastructure concepts from a Microsoft-focused training provider.
• Understand public cloud, private cloud, hybrid cloud, multicloud, IaaS, PaaS, SaaS, and serverless computing.
• Explore Azure compute, networking, storage, identity, security, governance, cost management, and monitoring.
• Build confidence using Azure portal, Azure Cloud Shell, Azure CLI, Azure PowerShell, Azure Resource Manager, ARM templates, and Bicep.
• Prepare for the Microsoft Certified: Azure Fundamentals certification path.
• Support cloud adoption, Azure migration planning, governance readiness, and infrastructure modernization.

What will you learn in AZ-900T00 training?

This course helps learners understand cloud infrastructure concepts and the Microsoft Azure services used to create, secure, govern, monitor, and manage cloud solutions. Students learn through instructor explanation, demonstrations, guided discussion, knowledge checks, and hands-on labs.

• Define cloud computing and the shared responsibility model.
• Compare public, private, hybrid, and multicloud deployment models.
• Explain consumption-based pricing, capital expenditure, operational expenditure, and cloud cost models.
• Describe IaaS, PaaS, SaaS, and serverless computing.
• Explain high availability, scalability, elasticity, reliability, predictability, security, governance, manageability, and sustainability.
• Describe Azure regions, region pairs, sovereign regions, availability zones, datacenters, resources, resource groups, subscriptions, and management groups.
• Compare Azure compute options including virtual machines, containers, Azure Functions, App Service, Azure Virtual Desktop, and scale sets.
• Describe Azure networking including virtual networks, subnets, peering, VPN Gateway, ExpressRoute, Azure DNS, public endpoints, and private endpoints.
• Describe Azure storage including blob storage, file storage, disk storage, queues, tables, redundancy, tiers, migration tools, and file movement tools.
• Understand Microsoft Entra ID, authentication, SSO, MFA, passwordless, external identities, Conditional Access, RBAC, Zero Trust, defense in depth, and Microsoft Defender for Cloud.
• Describe Azure cost management, budgets, alerts, tags, reservations, savings plans, pricing calculator, and TCO concepts.
• Explain Azure governance and compliance tools including Azure Policy, initiatives, resource locks, Microsoft Purview, and the Service Trust Portal.
• Use Azure management tools including Azure portal, Cloud Shell, Azure CLI, Azure PowerShell, Azure Arc, ARM templates, and Bicep.
• Understand Azure monitoring tools including Azure Advisor, Azure Service Health, Azure Monitor, Log Analytics, alerts, and Application Insights.

Microsoft AZ-900T00 Course Outline

Module 1: Describe cloud computing

Students begin by learning what cloud computing is and why organizations use cloud services to deliver faster innovation, flexible resources, and economies of scale. The module introduces the shared responsibility model and explains how responsibility changes depending on whether a service is on-premises, IaaS, PaaS, or SaaS.

Students also compare cloud deployment models and pricing approaches. Learners review public cloud, private cloud, hybrid cloud, multicloud, consumption-based pricing, capital expenditure, operational expenditure, and serverless computing.

Topics include:

• What cloud computing is.
• Delivery of computing services over the internet.
• Compute, storage, networking, databases, analytics, and AI services.
• Shared responsibility model.
• Customer responsibilities.
• Cloud provider responsibilities.
• Public cloud.
• Private cloud.
• Hybrid cloud.
• Multicloud.
• Consumption-based model.
• Capital expenditure and operational expenditure.
• Cloud pricing models.
• Pay-as-you-go.
• Serverless computing.
• Cloud use cases.

Module 2: Describe the benefits of using cloud services

Students learn the business and technical benefits of cloud computing. The module explains high availability, scalability, elasticity, reliability, predictability, security, governance, manageability, and sustainability. Learners connect these benefits to real infrastructure planning decisions, including application uptime, disaster recovery, cost planning, performance expectations, and operational control.

Topics include:

• High availability.
• Scalability.
• Vertical scaling.
• Horizontal scaling.
• Elasticity.
• Reliability.
• Predictability.
• Performance predictability.
• Cost predictability.
• Security benefits.
• Governance benefits.
• Compliance support.
• Cloud manageability.
• Management of the cloud.
• Management in the cloud.
• Sustainability considerations.
• Business value of cloud services.

Module 3: Describe cloud service types

Students learn how cloud service types define the level of control, responsibility, and management required from the customer. The module compares infrastructure as a service, platform as a service, software as a service, and serverless models. Learners identify which service type fits common scenarios such as virtual machines, web applications, managed databases, productivity applications, and event-driven workloads.

Topics include:

• Infrastructure as a service.
• Platform as a service.
• Software as a service.
• Serverless.
• Use cases for IaaS.
• Use cases for PaaS.
• Use cases for SaaS.
• Responsibility differences by service model.
• Control versus management tradeoffs.
• Cloud service selection.

Learning Path 2: Azure Architecture and Services

Module 4: Describe the core architectural components of Azure

Students learn the major architectural building blocks of Microsoft Azure. The module introduces Azure regions, region pairs, sovereign regions, availability zones, datacenters, resources, resource groups, subscriptions, management groups, and the Azure resource hierarchy. Learners understand how Azure organizes resources and how organizations use subscriptions and management groups to control scale, access, billing, and governance.

Topics include:

• Microsoft Azure overview.
• Azure accounts.
• Azure subscriptions.
• Azure resources.
• Resource groups.
• Azure regions.
• Region pairs.
• Sovereign regions.
• Availability zones.
• Azure datacenters.
• Management groups.
• Resource hierarchy.
• Scope inheritance.
• Subscription design basics.
• Organizing Azure environments.

Lab: Create an Azure resource
Students create an Azure resource in the Azure portal and review how resources are organized into resource groups and subscriptions. This lab helps learners understand the relationship between Azure services, resource groups, locations, and configuration settings.

Module 5: Describe Azure compute services

Students learn how Azure compute services run applications and workloads in the cloud. The module compares virtual machines, containers, Azure Functions, App Service, Azure Virtual Desktop, Azure Virtual Machine Scale Sets, availability sets, AI and machine learning services, and IoT or edge compute options. Learners review which compute option fits common scenarios such as lift-and-shift migrations, web applications, microservices, batch processing, and event-driven automation.

Topics include:

• Azure compute overview.
• Virtual machines.
• Virtual Machine Scale Sets.
• Availability sets.
• Azure Virtual Desktop.
• Containers.
• Azure Container Instances.
• Azure Kubernetes Service.
• Azure Functions.
• Serverless compute.
• Azure App Service.
• Web apps.
• Application hosting options.
• AI and machine learning compute.
• IoT and edge compute.
• Choosing compute services.

Lab: Create a virtual machine and configure it as a web host
Students create a virtual machine, connect to it, configure it for web hosting, and test access to the hosted content. This lab reinforces virtual machine provisioning, networking basics, resource configuration, and common infrastructure administration tasks.

Module 6: Describe Azure networking services

Students learn how Azure networking connects resources, users, applications, and on-premises environments. The module introduces virtual networks, subnets, virtual network peering, public and private endpoints, Azure DNS, VPN Gateway, ExpressRoute, and basic network access controls. Learners understand how cloud networking supports secure application connectivity and hybrid cloud architecture.

Topics include:

• Azure Virtual Network.
• Subnets.
• IP addressing concepts.
• Public endpoints.
• Private endpoints.
• Virtual network peering.
• Azure DNS.
• Network security groups.
• VPN Gateway.
• Site-to-site VPN.
• Point-to-site VPN.
• ExpressRoute.
• Hybrid connectivity.
• Network access control basics.
• Common Azure networking scenarios.

Module 7: Describe Azure storage services

Students learn how Azure storage supports structured, semi-structured, and unstructured data. The module compares Azure Blob Storage, Azure Files, Azure Queue Storage, Azure Table Storage, and Azure Disk Storage. Learners also review storage account types, access tiers, redundancy options, Azure Storage Explorer, AzCopy, Azure File Sync, Azure Migrate, and Azure Data Box.

Topics include:

• Azure Storage overview.
• Storage accounts.
• Blob storage.
• File storage.
• Queue storage.
• Table storage.
• Disk storage.
• Storage tiers.
• Hot, cool, cold, and archive access tiers.
• Redundancy options.
• Locally redundant storage.
• Zone-redundant storage.
• Geo-redundant storage.
• Geo-zone-redundant storage.
• Storage account options.
• AzCopy.
• Azure Storage Explorer.
• Azure File Sync.
• Azure Migrate.
• Azure Data Box.

Lab: Create a storage blob
Students create a storage account, create a container, upload blob content, and review access behavior. This lab helps learners understand how Azure Blob Storage supports unstructured content and how storage resources are configured in the Azure portal.

Module 8: Describe Azure identity, access, and security

Students learn how Azure identity and security services protect cloud resources. The module introduces Microsoft Entra ID, Microsoft Entra Domain Services, authentication, authorization, SSO, MFA, passwordless authentication, external identities, Conditional Access, Azure role-based access control, Zero Trust, defense in depth, encryption, and Microsoft Defender for Cloud.

Topics include:

• Microsoft Entra ID.
• Microsoft Entra Domain Services.
• Authentication.
• Authorization.
• Single sign-on.
• Multifactor authentication.
• Passwordless authentication.
• External identities.
• Conditional Access.
• Azure role-based access control.
• Management scope.
• Least privilege.
• Zero Trust.
• Defense in depth.
• Encryption.
• Microsoft Defender for Cloud.
• Cloud security posture management.
• Security recommendations.

Learning Path 3: Azure Management and Governance

Module 9: Describe cost management in Azure

Students learn how Azure costs are estimated, monitored, optimized, and controlled. The module explains factors that affect cost, the Azure Pricing Calculator, Total Cost of Ownership Calculator, Cost Management, budgets, alerts, tags, reservations, savings plans, Spot pricing, and cost optimization recommendations. Learners connect Azure cost tools to real-world budget planning and governance scenarios.

Topics include:

• Factors that affect Azure costs.
• Resource type.
• Services.
• Locations.
• Bandwidth.
• Reserved capacity.
• Azure Pricing Calculator.
• Total Cost of Ownership Calculator.
• Microsoft Cost Management.
• Budgets.
• Cost alerts.
• Cost analysis.
• Tags for cost tracking.
• Azure reservations.
• Azure savings plans.
• Spot pricing.
• Cost optimization with Azure Advisor.

Lab: Estimate workload costs by using the Pricing Calculator
Students use the Azure Pricing Calculator to estimate the cost of an example workload. This lab helps learners understand cost drivers, regional pricing, service configuration, and the importance of cost estimation before deployment.

Module 10: Describe features and tools for governance and compliance

Students learn how Azure governance and compliance tools help organizations apply standards, reduce risk, and manage resources consistently. The module introduces Microsoft Purview, Azure Policy, initiatives, resource locks, the Service Trust Portal, compliance documentation, and governance controls for cloud environments.

Topics include:

• Governance in Azure.
• Compliance in Azure.
• Microsoft Purview.
• Azure Policy.
• Policy definitions.
• Policy assignments.
• Initiatives.
• Compliance evaluation.
• Resource locks.
• Delete locks.
• Read-only locks.
• Service Trust Portal.
• Regulatory documentation.
• Governance at scale.
• Preventing accidental resource changes.

Lab: Configure resource locks
Students apply a resource lock to protect an Azure resource from accidental deletion and then test the lock behavior. This lab reinforces governance controls and shows how locks can prevent unintended changes.

Module 11: Describe features and tools for managing and deploying Azure resources

Students learn how administrators manage and deploy Azure resources. The module introduces Azure portal, Azure Cloud Shell, Azure CLI, Azure PowerShell, Azure Arc, Azure Resource Manager, ARM templates, Bicep, and infrastructure as code. Learners compare graphical, command-line, and declarative deployment approaches.

Topics include:

• Azure portal.
• Azure Cloud Shell.
• Azure CLI.
• Azure PowerShell.
• Azure Arc.
• Hybrid and multicloud management.
• Azure Resource Manager.
• ARM templates.
• Bicep.
• Infrastructure as code.
• Deployment automation.
• Resource deployment consistency.
• Management tool selection.
• Command-line resource management.

Module 12: Describe monitoring tools in Azure

Students learn how Azure monitoring tools help administrators understand platform health, resource performance, application behavior, and operational risk. The module introduces Azure Advisor, Azure Service Health, Azure Monitor, Log Analytics, Azure Monitor alerts, Activity Log alerts, and Application Insights.

Topics include:

• Azure Advisor.
• Advisor recommendation categories.
• Cost recommendations.
• Security recommendations.
• Reliability recommendations.
• Operational excellence recommendations.
• Performance recommendations.
• Azure Service Health.
• Service issues.
• Planned maintenance.
• Health advisories.
• Azure Monitor.
• Metrics.
• Logs.
• Log Analytics.
• Alerts.
• Activity Log alerts.
• Application Insights.
• Monitoring and troubleshooting scenarios.

Learning Path 4: Apply Azure Skills in Guided Projects

Module 13: Deploy a static website with Azure Blob Storage

Students apply Azure storage skills by deploying a simple static website without provisioning virtual machines or web servers. The guided project reinforces storage account creation, static website hosting, blob upload, endpoint testing, and content updates.

Topics include:

• Storage account creation.
• Static website hosting.
• HTML content upload.
• Public endpoint verification.
• Content update testing.
• Simple web publishing without server management.

Module 14: Organize and protect resources with tags and locks

Students apply governance concepts by creating resources, applying tags, and using resource locks. The guided project reinforces resource organization, cost tracking, accidental deletion prevention, and governance testing.

Topics include:

• Resource creation.
• Tagging strategy.
• Cost tracking tags.
• Delete locks.
• Lock enforcement testing.
• Removing locks safely.

Module 15: Build a simple website endpoint with Azure Functions

Students apply serverless compute concepts by creating an Azure Function App and deploying an HTTP-triggered function. The guided project reinforces event-driven compute, endpoint testing, Cloud Shell usage, basic security considerations, and log review.

Topics include:

• Function App creation.
• Flex Consumption plan.
• HTTP-triggered functions.
• Cloud Shell deployment.
• Endpoint behavior testing.
• Security review.
• Function logs.

Module 16: Set up new employee access with Microsoft Entra ID and RBAC

Students apply identity and access concepts by creating a user and group in Microsoft Entra ID and assigning Azure RBAC permissions at the resource group scope. The guided project reinforces group-based access, least privilege, and scope-based permissions.

Topics include:

• Microsoft Entra user creation.
• Security group creation.
• Group membership.
• Azure RBAC assignment.
• Resource group scope.
• Access validation.
• Least privilege access.

Module 17: Share files securely

Students apply storage security concepts by creating blob storage and generating policy-based shared access signature links. The guided project reinforces secure file sharing, SAS validation, policy-based revocation, and lifecycle management.

Topics include:

• Blob storage creation.
• Stored access policies.
• Shared access signatures.
• Secure sharing links.
• SAS access validation.
• Revocation by policy deletion.
• Lifecycle management rules.
• Automated cleanup.

Module 18: Set up cost guardrails in Azure

Students apply cost management and governance concepts by tagging resources, creating budget alerts, and assigning policy controls. The guided project reinforces early spend visibility and compliance enforcement.

Topics include:

• Consistent resource tagging.
• Cost tracking.
• Budget alerts.
• Early spend visibility.
• Azure Policy assignment.
• Policy compliance testing.
• Cost governance controls.

Module 19: Monitor Azure with Service Health and Activity Log alerts

Students apply monitoring concepts by creating action groups, Service Health alerts, and Activity Log alerts. The guided project reinforces incident awareness, maintenance notifications, resource deletion monitoring, and operational alerting.

Topics include:

• Action groups.
• Email notifications.
• Service Health alerts.
• Platform incident monitoring.
• Planned maintenance alerts.
• Activity Log alerts.
• Resource deletion monitoring.
• Operational response.

Module 20: Manage Azure resources with Cloud Shell and the Azure CLI

Students apply command-line management concepts by using Cloud Shell and Azure CLI commands to create, list, tag, and query Azure resources. The guided project reinforces practical administration skills and introduces learners to scriptable Azure management.

Topics include:

• Azure Cloud Shell.
• Bash environment.
• Azure CLI commands.
• Resource creation.
• Resource listing.
• Tagging resources.
• Querying resources.
• Output formatting.
• Command-line administration basics.

Course Review

At the end of the course, students review the major Azure cloud infrastructure concepts covered during class. The review connects cloud concepts, shared responsibility, deployment models, service types, Azure architecture, compute, networking, storage, identity, access, security, cost management, governance, deployment, and monitoring.

Students should be able to explain how Azure resources are organized, how common Azure services are selected, how cloud costs are estimated and governed, and how administrators use Azure tools to deploy, secure, monitor, and manage cloud infrastructure. The course provides a foundation for deeper Azure Administrator, Azure Security, Azure Architect, Azure AI, Azure Data, and DevOps training.

Certification Exam Review

AZ-900T00 aligns with the Microsoft Certified: Azure Fundamentals certification path. The AZ-900 exam validates foundational knowledge of cloud concepts, Azure architecture, Azure services, management, governance, security, identity, pricing, and support.

Exam AZ-900 skills measured

Describe cloud concepts

Students should understand cloud computing, the shared responsibility model, public cloud, private cloud, hybrid cloud, cloud pricing models, serverless computing, high availability, scalability, reliability, predictability, security, governance, manageability, IaaS, PaaS, and SaaS.

Describe Azure architecture and services

Students should understand Azure regions, region pairs, sovereign regions, availability zones, datacenters, resources, resource groups, subscriptions, management groups, compute options, virtual machines, containers, functions, application hosting, virtual networking, Azure DNS, VPN Gateway, ExpressRoute, storage services, redundancy, migration tools, identity, access, and security.

Describe Azure management and governance

Students should understand cost management, pricing tools, tags, Microsoft Purview, Azure Policy, resource locks, Azure portal, Azure Cloud Shell, Azure CLI, Azure PowerShell, Azure Arc, infrastructure as code, Azure Resource Manager, ARM templates, Azure Advisor, Azure Service Health, Azure Monitor, Log Analytics, alerts, and Application Insights.

Recommended next-step training

AZ-900T00 is a strong starting point for learners who are new to Microsoft Azure, cloud infrastructure, and Azure certification. Recommended next steps may include:

• AZ-104T00: Microsoft Azure Administrator.
• AZ-305T00: Designing Microsoft Azure Infrastructure Solutions.
• AZ-500T00: Secure Cloud Resources with Microsoft Security Technologies.
• SC-900T00: Microsoft Security, Compliance, and Identity Fundamentals.
• AI-901T00: Introduction to AI in Azure.
• DP-900T00: Introduction to Microsoft Azure Data.
• Private team workshops for Azure migration readiness, cloud governance, Azure cost management, secure infrastructure, and hybrid cloud planning.