AZ-900 Coverage Matrix
Every official exam skill is mapped to at least one challenge. Use this matrix to ensure complete coverage.
Domain 1: Describe cloud concepts (25-30%)
Describe cloud computing
| Skill | Challenge(s) |
|---|---|
| Define cloud computing | 01 |
| Describe the shared responsibility model | 01 |
| Define cloud models (public, private, hybrid) | 01 |
| Identify appropriate use cases for each cloud model | 01 |
| Describe the consumption-based model | 03 |
| Compare cloud pricing models (CapEx vs OpEx) | 03 |
| Describe serverless | 03, 10 |
Describe the benefits of using cloud services
| Skill | Challenge(s) |
|---|---|
| Describe the benefits of high availability and scalability in the cloud | 02 |
| Describe the benefits of reliability and predictability in the cloud | 02 |
| Describe the benefits of security and governance in the cloud | 02 |
| Describe the benefits of manageability in the cloud | 02 |
Describe cloud service types
| Skill | Challenge(s) |
|---|---|
| Describe Infrastructure as a Service (IaaS) | 04 |
| Describe Platform as a Service (PaaS) | 05 |
| Describe Software as a Service (SaaS) | 06 |
| Identify appropriate use cases for each cloud service type (IaaS, PaaS, and SaaS) | 04, 05, 06 |
Domain 2: Describe Azure architecture and services (35-40%)
Describe the core architectural components of Azure
| Skill | Challenge(s) |
|---|---|
| Describe Azure regions, region pairs, and sovereign regions | 07 |
| Describe availability zones | 07 |
| Describe Azure datacenters | 07 |
| Describe Azure resources and resource groups | 08 |
| Describe subscriptions | 08 |
| Describe management groups | 08 |
| Describe the hierarchy of resource groups, subscriptions, and management groups | 08 |
Describe Azure compute and networking services
| Skill | Challenge(s) |
|---|---|
| Compare compute types (containers, VMs, functions) | 09, 10 |
| Describe VM options (Azure VMs, VM Scale Sets, availability sets, Azure Virtual Desktop) | 09 |
| Describe resources required for VMs | 09 |
| Describe application hosting options (web apps, containers, VMs) | 10 |
| Describe virtual networking (VNets, subnets, peering, Azure DNS, VPN Gateway, ExpressRoute) | 11, 12 |
| Define public and private endpoints | 11 |
Describe Azure storage services
| Skill | Challenge(s) |
|---|---|
| Compare Azure storage services (Blob, File, Queue, Table) | 13 |
| Describe storage tiers (hot, cool, cold, archive) | 14 |
| Describe redundancy options (LRS, ZRS, GRS, RA-GRS) | 14 |
| Describe storage account options and storage types | 13 |
| Identify options for moving files (AzCopy, Storage Explorer, Azure File Sync) | 15 |
| Describe migration options (Azure Migrate, Azure Data Box) | 15 |
Describe Azure identity, access, and security
| Skill | Challenge(s) |
|---|---|
| Describe directory services (Microsoft Entra ID, Entra Domain Services) | 16 |
| Describe authentication methods (SSO, MFA, passwordless) | 16 |
| Describe external identities in Azure | 17 |
| Describe Microsoft Entra Conditional Access | 17 |
| Describe Azure role-based access control (RBAC) | 17 |
| Describe the concept of Zero Trust | 18 |
| Describe the purpose of the defense-in-depth model | 18 |
| Describe the purpose of Microsoft Defender for Cloud | 18 |
Domain 3: Describe Azure management and governance (30-35%)
Describe cost management in Azure
| Skill | Challenge(s) |
|---|---|
| Describe factors that can affect costs in Azure | 19 |
| Compare the Pricing Calculator and the Total Cost of Ownership (TCO) Calculator | 19 |
| Describe cost management capabilities in Azure | 19 |
| Describe the purpose of tags | 19 |
Describe features and tools for governance and compliance
| Skill | Challenge(s) |
|---|---|
| Describe the purpose of Microsoft Purview in Azure | 20 |
| Describe the purpose of Azure Policy | 20 |
| Describe the purpose of resource locks | 20 |
Describe features and tools for managing and deploying Azure resources
| Skill | Challenge(s) |
|---|---|
| Describe the Azure portal | 21 |
| Describe Azure Cloud Shell, including Azure CLI and Azure PowerShell | 21 |
| Describe the purpose of Azure Arc | 22 |
| Describe infrastructure as code (IaC) | 22 |
| Describe Azure Resource Manager (ARM) and ARM templates | 22 |
Describe monitoring tools in Azure
| Skill | Challenge(s) |
|---|---|
| Describe the purpose of Azure Advisor | 23 |
| Describe Azure Service Health | 23 |
| Describe Azure Monitor (including Log Analytics, Azure Monitor Alerts, Application Insights) | 24 |
Coverage summary
| Domain | Skills | Challenges | Coverage |
|---|---|---|---|
| 1. Cloud Concepts | 15 | 01–06 | ✅ 100% |
| 2. Azure Architecture & Services | 27 | 07–18 | ✅ 100% |
| 3. Management & Governance | 15 | 19–24 | ✅ 100% |
| Total | 57 | 24 | ✅ 100% |