← Azure fundamentals AZ 900 Level One Β· Lesson 1 of 4

Course Outline

πŸ“– Every lesson in this course is free to read right here, no account needed. Create a free account to track your progress, take the exam, and earn your certificate.
1

Course Outline

Azure Fundamentals AZ-900 Β· Course outline for beginners

Azure Fundamentals AZ-900

for beginners
85 min Β· 40–60 Q 700 / 1000 to pass No prerequisites official domains
1

Cloud Concepts

25–30%
  • Cloud computing & shared responsibility
  • Public, private, hybrid cloud
  • Benefits: scalability, elasticity, agility, HA
  • IaaS Β· PaaS Β· SaaS use cases
  • Consumption-based pricing
foundation
2

Architecture & Services

35–40%
  • Regions, region pairs, Availability Zones
  • Resource groups, subscriptions, management groups
  • Compute: VMs, VMSS, Azure Virtual Desktop
  • App Services, containers, Functions
  • Networking: VNet, VPN, ExpressRoute, DNS
  • Storage: Blob, File, Disk, Queue Β· redundancy tiers
  • Migration: Azure Migrate, Data Box
largest section
3

Management & Governance

30–35%
  • Cost management Β· Pricing & TCO calculators
  • Resource tags, Azure Policy, resource locks
  • Azure Portal, Cloud Shell (CLI/PowerShell)
  • ARM templates Β· Azure Arc
  • Microsoft Entra ID (Azure AD) Β· RBAC, MFA
  • Azure Monitor, Service Health, Defender for Cloud
  • Zero Trust & defense-in-depth
governance & security

How to use this outline

  • Microsoft Learn – free, self-paced modules mapped to these domains
  • Get hands‑on – try the Azure portal with a free account (labs in AZ-900T00)
  • Practice assessment – official Microsoft practice test
  • Focus on Module 2 (largest weight) and Module 3

Exam logistics

Audience Β· IT pros (infra, DB, dev) – no formal prerequisites

Duration Β· 85 minutes

Questions Β· 40–60, multiple choice & case studies

Passing score Β· 700 / 1000

Azure subscription Β· not required, but recommended for practice

100% beginner friendly
2

Module One

Module 1 Β· Cloud Concepts Β· Azure AZ-900 for Beginners

☁️ Module 1: Cloud Concepts – The Big Picture

Welcome, young explorer! 🌍 This module is your very first step into the world of cloud computing. We will learn what the cloud is, why it is so useful, and how it helps people and businesses every day. You don't need to know anything about computers – we start from the very beginning.

🎯 Learning Objectives

  • Explain what β€œthe cloud” means in simple words.
  • Tell the difference between public, private, and hybrid clouds.
  • Name three big benefits of using the cloud.
  • Understand IaaS, PaaS, and SaaS like a pro.
  • Know why cloud pricing is like paying for electricity.

πŸ“– Warm-up Story: The Magic Library

Imagine you have a magic library that lives in the sky. πŸ“šβœ¨ You don't need to build shelves or buy books. Whenever you want a book, you just ask, and it appears. When you finish, it goes back. You never run out of space. You can share books with your friends in Lagos, London, or even on the Moon! πŸŒ™

This magic library is like the cloud. The cloud is not really a fluffy thing in the sky – it is a huge network of computers in big buildings called data centers. But we call it β€œthe cloud” because we can reach it from anywhere, just like magic!

πŸ“˜ Main Lessons

1. What is the Cloud?

Definition: The cloud is a way to use computers and storage over the internet, without owning them.

Why important: You can use powerful computers without buying them.

Simple: It's like renting a bicycle instead of buying one. You only pay when you ride.

Real-life: Watching Netflix – the movies are stored in the cloud.

School: Your teacher saves homework on Google Drive – that's cloud storage.

Home: Your family uses iCloud to back up photos.

Nigerian: A small shop in Surulere uses a cloud app to track sales without buying a server.

    Cloud = Computers you use over the Internet
    

βœ… Summary: The cloud is like a big computer centre that we use online.


2. Why do we call it β€œcloud”?

Definition: The symbol for the internet is often a cloud ☁️, so we use that name.

Why important: It helps us imagine that the technology is β€œout there” and we don't need to worry about it.

Simple: When you see a cloud icon, it means β€œsomething on the internet”.

Real-life: Weather apps get data from the cloud.

School: Your school's online portal is hosted in the cloud.

Home: Smart speakers like Alexa use the cloud to answer questions.

Nigerian: Many banks in Nigeria use the cloud to keep customer records safe.

    Internet  β†’  ☁️  β†’  Servers (big computers)
    

βœ… Summary: The cloud is just a nickname for internet-based computer services.


3. Three Cloud Models: Public, Private, Hybrid

Definition: These are the three main ways to set up a cloud.

Why important: Different needs need different clouds.

Public cloud: Shared by everyone. Like a public swimming pool. (Example: Microsoft Azure, AWS)

Private cloud: Only one organisation uses it. Like a private swimming pool in your backyard.

Hybrid cloud: A mix of both. Like having a pool but sometimes you also go to the public pool.

School example: Public cloud = library books everyone can borrow. Private = your personal notebook.

Home: Public cloud = YouTube. Private = your family's external hard drive.

Nigerian: A big company like MTN uses a private cloud for internal data, but also uses public cloud for customer apps.

TypeWho uses it?Example
PublicEveryoneMicrosoft Azure, Google Drive
PrivateOne companyBank's internal system
HybridBothGov. office + public portal

βœ… Summary: Public cloud is shared, private is for one, hybrid is both.


4. IaaS – Infrastructure as a Service

Definition: You rent the basic building blocks: virtual computers, storage, and network.

Why important: You don't need to buy physical servers.

Simple: It's like renting an empty shop – you bring your own shelves and goods.

Real-life: A gaming company rents virtual servers to host their game.

School: Your IT teacher creates a virtual lab for students to practice.

Home: You rent a virtual computer to run a Minecraft server.

Nigerian: A startup in Yaba uses IaaS to host their website without buying hardware.

    IaaS = Rent computer + storage + network
    You install your own software (like Windows, games, etc.)
    

βœ… Summary: IaaS gives you virtual hardware – you do the rest.


5. PaaS – Platform as a Service

Definition: You rent a platform to build and run your apps. The provider manages the underlying hardware.

Why important: You focus only on your app, not on updates or security patches.

Simple: Like renting a kitchen with all the pots and pans – you just cook your meal.

Real-life: A developer builds a website using Azure App Service.

School: Students use an online coding platform to create games.

Home: You use a website builder like Wix – that's PaaS.

Nigerian: A fintech company uses a PaaS to quickly build a mobile banking app.

    PaaS = Platform ready for you to build apps
    No need to manage the servers.
    

βœ… Summary: PaaS is like a workshop where you build your project.


6. SaaS – Software as a Service

Definition: You use a finished software over the internet. You don't install anything.

Why important: No maintenance, updates are done automatically.

Simple: Like ordering a pizza – you eat it, you don't need to make the dough.

Real-life: Microsoft Office 365, Google Docs, Gmail.

School: Students use Google Classroom – that's SaaS.

Home: Your parents use Zoom for meetings.

Nigerian: A shop uses a cloud POS (Point of Sale) software like Kippa.

ServiceYou manageProvider manages
IaaSOS, apps, dataHardware, network
PaaSYour app, dataOS, hardware, updates
SaaSYour dataEverything else

βœ… Summary: SaaS is ready-to-use software, like Gmail.


7. Scalability – grow up or grow down

Definition: You can easily add or remove resources (like memory or storage) based on need.

Why important: You don't pay for what you don't use.

Simple: Like a rubber band – you can stretch it when you need more.

Real-life: A website gets many visitors on Black Friday, so it scales up.

School: During exam week, the school website gets more traffic, so they scale up.

Home: Your family shares a cloud storage plan; you can upgrade if you need more space.

Nigerian: A news website in Lagos scales up during election results.

    Demand ↑  β†’  Scale up (add more power)
    Demand ↓  β†’  Scale down (save money)
    

βœ… Summary: Scalability means the cloud can grow or shrink as needed.


8. Elasticity – automatic scaling

Definition: The cloud can automatically add or remove resources based on real-time demand.

Why important: It happens without human help, like magic.

Simple: Think of a balloon that expands when you blow air, and shrinks when you let air out.

Real-life: During peak hours, a streaming service like Netflix automatically adds servers.

School: An online quiz platform scales automatically when all classes take a test at once.

Home: Your online game doesn't lag because the cloud adds power instantly.

Nigerian: A mobile money service handles increased transactions on payday.

βœ… Summary: Elasticity is like a smart balloon that knows when to expand.


9. High Availability – always on

Definition: The cloud is designed to be available almost all the time (99.9% or more).

Why important: You don't want your app to go down.

Simple: It's like a 24/7 store – always open.

Real-life: Google Search is always available.

School: The school's online portal should be available even at midnight.

Home: Your smart TV keeps working because the cloud is reliable.

Nigerian: A hospital in Abuja uses the cloud to keep patient records available 24/7.

βœ… Summary: High availability means the cloud is always ready.


10. Disaster recovery – backup in another place

Definition: The cloud can copy your data to a different location, so if one place fails, you have another.

Why important: Prevents losing data due to fire, flood, or power outage.

Simple: Like keeping a spare key at your neighbour's house.

Real-life: Microsoft Azure has data centres in many regions.

School: The school's exam results are backed up in two different cities.

Home: Your photos are backed up in the cloud, so you don't lose them if your phone breaks.

Nigerian: A bank in Lagos has a backup in another region (e.g., Kano) using Azure.

βœ… Summary: Disaster recovery keeps your data safe by making copies far away.


11. Pay-as-you-go – like electricity

Definition: You only pay for the cloud resources you use, by the hour or second.

Why important: No huge upfront costs.

Simple: Like paying for water – you pay for what comes out of the tap.

Real-life: You rent a virtual machine for 2 hours and pay only for that time.

School: The school rents cloud storage only for the term.

Home: You pay for extra iCloud storage only if you need it.

Nigerian: A small business uses cloud services and pays only for what they use each month.

    Pay-as-you-go = pay per unit (like ₦ per GB or per hour)
    

βœ… Summary: You pay only for what you consume, like a utility bill.


12. Shared responsibility – who does what?

Definition: The cloud provider is responsible for some things, and you (the customer) are responsible for others.

Why important: So you know your duties.

Simple: Like school – teachers teach (provider) and students do homework (you).

Real-life: Microsoft ensures the servers run; you ensure your passwords are safe.

School: The cloud provider keeps the servers cool; you manage your files.

Home: The cloud backs up your photos; you choose which photos to upload.

Nigerian: A cloud provider maintains the network; the bank manages customer data.

ResponsibilityCloud providerCustomer
Physical securityβœ…βŒ
Network uptimeβœ…βŒ
Data accessβŒβœ…
App configurationβŒβœ…

βœ… Summary: The provider secures the cloud, you secure your data.


13. Regions & Availability Zones – physical locations

Definition: A region is a geographical area (like South Africa, US East). An Availability Zone is a separate data centre within a region.

Why important: This makes the cloud reliable and fast.

Simple: Imagine a country (region) and cities (zones) in that country.

Real-life: Azure has a region in South Africa (Johannesburg).

School: Your school has a main building and a backup building in another part of town.

Home: You keep your toys in two different boxes in different rooms.

Nigerian: Azure has a region in South Africa, which serves Nigeria and West Africa.

    Region = big area (e.g., Africa)
    Availability Zone = separate building within that area
    

βœ… Summary: Regions are big locations; zones are backup data centres inside them.


14. Resource groups & subscriptions – organising your cloud

Definition: A resource group is a container for related cloud resources (like a folder). A subscription is a way to group resource groups for billing and access.

Why important: Helps you stay organised and manage costs.

Simple: Resource group = a school bag (holds books, pens, etc.). Subscription = the whole school year.

Real-life: A company has a resource group for HR, another for Finance.

School: One resource group for maths files, another for science files.

Home: One folder for photos, another for documents.

Nigerian: A company in Abuja has subscriptions for different departments.

βœ… Summary: Resource groups organise resources; subscriptions manage billing.


15. Management groups – managing many subscriptions

Definition: A way to manage multiple subscriptions at once, apply policies and access.

Why important: Large organisations need to govern many subscriptions.

Simple: Like a school principal who oversees many classrooms (subscriptions).

Real-life: A global company with many country offices uses management groups.

School: The principal manages all class groups.

Home: Parents manage all family accounts.

Nigerian: A large bank with many branches uses management groups to oversee all subscriptions.

βœ… Summary: Management groups help you manage multiple subscriptions easily.


πŸ“š Key Vocabulary

  • Cloud: Computers and services you use over the internet.
  • Data centre: A building with many servers.
  • Server: A powerful computer that stores and processes data.
  • IaaS: Rent basic hardware (virtual machines).
  • PaaS: Rent a platform to build apps.
  • SaaS: Use ready-made software over the internet.
  • Scalability: Ability to increase or decrease resources.
  • Elasticity: Automatic scaling based on demand.
  • High availability: The service is almost always up.
  • Disaster recovery: Backing up data to a different location.
  • Pay-as-you-go: Pay only for what you use.
  • Region: A geographic area where data centres are located.
  • Availability Zone: A separate data centre within a region.
  • Resource group: A folder for related cloud resources.
  • Subscription: A billing and management unit for Azure.

🧠 Important Concepts

  • Cloud is like a utility: Just like water or electricity, you use it when you need it.
  • No upfront cost: You don't need to buy expensive servers.
  • Global reach: The cloud is everywhere, so you can work from anywhere.
  • Security: Cloud providers like Microsoft invest heavily in security.
  • Innovation: You can try new ideas quickly because you can rent resources for a short time.

πŸ”’ Step-by-step: How to start using the cloud

  1. Decide what you need: Storage? A virtual computer? A website?
  2. Choose a cloud provider: For this course, we use Microsoft Azure.
  3. Create an account: Azure offers a free account with credits.
  4. Create a resource group: To organise your resources.
  5. Create a resource: For example, a virtual machine or storage account.
  6. Use it: Connect to your resource and start working.
  7. Monitor and manage: Check your usage and costs.
  8. Delete when done: To avoid extra charges.

🌍 Real-life Examples

  • Netflix: Uses the cloud to stream movies to millions of people.
  • Spotify: Stores music in the cloud and streams it to your phone.
  • Zoom: Uses cloud to handle video calls during the pandemic.
  • Instagram: Stores photos and videos in the cloud.
  • Microsoft Teams: Uses cloud for collaboration.

πŸ‡³πŸ‡¬ Nigerian Examples

  • Chipper Cash: Uses cloud to process money transfers across Africa.
  • Flutterwave: Cloud helps them handle online payments.
  • Kuda Bank: A digital bank that runs entirely on the cloud.
  • Paystack: Uses cloud to scale its payment infrastructure.
  • Farmcrowdy: Cloud helps farmers get data and connect to investors.

🎈 Fun Examples for Kids

  • Online games: Games like Roblox use the cloud so you can play with friends.
  • YouTube: Videos are stored in the cloud, so you can watch them anytime.
  • Google Classroom: Your teacher sends assignments through the cloud.
  • Netflix: Cartoons and movies come from the cloud.
  • Duolingo: Uses the cloud to save your language learning progress.

🏠 Everyday Examples

  • Email: Gmail and Outlook are cloud-based.
  • Cloud storage: iCloud, Google Drive, OneDrive.
  • Smartphones: Your phone backs up photos to the cloud.
  • Smart home: Alexa and Google Home use the cloud.
  • Maps: Google Maps gets traffic data from the cloud.

πŸ‘©β€πŸ« Teacher Notes

  • Encourage students to think of the cloud as β€œsomeone else's computer”.
  • Use the library analogy to explain sharing and renting.
  • Relate to Nigerian context: use local services like Paystack, Flutterwave.
  • Emphasise that the cloud is not magic – it's real computers in data centres.
  • Group activities help: let them draw a cloud and label the parts.

πŸ§‘β€πŸ€β€πŸ§‘ Parent Tips

  • Discuss with your child what they use the cloud for (games, homework).
  • Explain that you pay for cloud services like electricity.
  • Use family examples: storing photos, online banking, streaming.
  • Reassure them that the cloud is safe, but we must use strong passwords.
  • Encourage them to ask questions about technology they use daily.

πŸ’‘ Interesting Facts

  • There are over 200 data centres owned by Microsoft worldwide.
  • The first cloud storage service was launched in 2006.
  • More than 90% of companies use some form of cloud computing.
  • Azure has data centres in more than 60 regions.
  • The cloud uses less energy than traditional data centres because of efficiency.

πŸ€” Did You Know?

  • You can rent a supercomputer in the cloud for just a few dollars an hour.
  • NASA uses the cloud to store images from space telescopes.
  • Your favourite mobile game might be hosted on Azure.
  • Cloud providers have underwater data centres to cool servers naturally.
  • Some cloud data centres use renewable energy like solar and wind.

🧾 Remember This

  • The cloud is just computers on the internet.
  • You can rent compute, storage, or complete apps.
  • Pay only for what you use.
  • Scalability and elasticity help you adjust resources.
  • Regions and zones keep your data safe and fast.

⚠️ Common Mistakes

  • Mistake: Thinking the cloud is only for big companies.
    Truth: Even individuals and small businesses use it.
  • Mistake: Cloud is always cheaper.
    Truth: It can be expensive if you don't manage resources.
  • Mistake: The cloud is not secure.
    Truth: Cloud providers have strong security, but you must also protect your accounts.
  • Mistake: Cloud means no physical hardware.
    Truth: There is still hardware, but it's in data centres.
  • Mistake: All clouds are the same.
    Truth: Public, private, hybrid have different uses.

🌟 Best Practices

  • Always use strong passwords and multi-factor authentication.
  • Monitor your usage to avoid unexpected bills.
  • Use resource groups to keep resources organised.
  • Choose the right region for speed and compliance.
  • Use tags to label resources (e.g., β€œproject”, β€œowner”).

πŸ“Š ASCII Illustrations

Cloud models

    Public Cloud  (shared by many)
    +-----------------------+
    |   Tenant A   Tenant B |
    |   Tenant C   Tenant D |
    +-----------------------+

    Private Cloud (one organisation)
    +-----------------------+
    |   Only your company   |
    +-----------------------+

    Hybrid (mix)
    +----------+  +---------+
    | Private  |  | Public  |
    | (internal)|  | (external)|
    +----------+  +---------+
    

Pay-as-you-go timeline

    Start β†’ Use 2 hours β†’ Stop β†’ Pay for 2 hours only
    

Shared responsibility

    Provider:   [Security OF the cloud]
    Customer:   [Security IN the cloud]
    

πŸ“‹ Comparison tables

IaaS vs PaaS vs SaaS

FeatureIaaSPaaSSaaS
ControlHighMediumLow
Management effortHighMediumLow
ExampleAzure VMAzure App ServiceMicrosoft 365

Public vs Private vs Hybrid

AspectPublicPrivateHybrid
CostLow upfrontHigh upfrontMixed
ScalabilityVery highLimitedHigh
SecuritySharedHigher controlFlexible

πŸ“Œ End-of-module Summary

In this module, we explored the wonderful world of cloud computing. We learned:

  • The cloud is a network of computers we use over the internet.
  • There are three types of cloud: public, private, and hybrid.
  • Three service models: IaaS (rent hardware), PaaS (rent a platform), SaaS (use ready software).
  • Benefits: scalability, elasticity, high availability, disaster recovery, and pay-as-you-go.
  • Important concepts: regions, availability zones, resource groups, subscriptions, and management groups.
  • We also saw how Nigerians are using the cloud to innovate.

You now have a solid foundation to understand how the cloud works. In the next module, we will dive into Azure architecture and services – the actual building blocks of Microsoft Azure.

❓ Frequently Asked Questions

  1. What is the cloud? – Computers and services you use over the internet.
  2. Is the cloud safe? – Yes, but you must also protect your passwords.
  3. Do I need to know programming to use the cloud? – No, many cloud services are point-and-click.
  4. How much does the cloud cost? – It depends on what you use; you pay only for what you consume.
  5. Can I use the cloud for free? – Yes, Azure offers a free account with limited credits.
  6. What is a data centre? – A big building filled with servers.
  7. What is the difference between scalability and elasticity? – Scalability is manual or planned; elasticity is automatic.
  8. Where is my data stored? – In data centres located in regions around the world.
  9. Can I move my data from one cloud to another? – Yes, but it may require planning.
  10. Why do companies use the cloud? – To save money, be flexible, and innovate quickly.

πŸ“ Review Questions

  1. What is the cloud in simple terms?
  2. Name the three cloud service models.
  3. What does IaaS stand for?
  4. Give an example of SaaS.
  5. What is scalability?
  6. What is elasticity?
  7. Why is high availability important?
  8. What is a region in Azure?
  9. What is a resource group?
  10. What is the pay-as-you-go model?
  11. What is the difference between public and private cloud?
  12. What is disaster recovery?
  13. What does a cloud provider manage in IaaS?
  14. What is a management group?
  15. Give a Nigerian example of cloud usage.

✏️ Fill-in-the-Blank

  1. The cloud is a network of ___________ you use over the internet. (computers)
  2. IaaS stands for ___________ as a Service. (Infrastructure)
  3. ___________ allows you to automatically add or remove resources. (Elasticity)
  4. A ___________ is a geographical area where data centres are located. (region)
  5. In the ___________ model, you pay only for what you use. (pay-as-you-go)
  6. A ___________ group is a container for related resources. (resource)
  7. ___________ cloud is shared by many organisations. (Public)
  8. ___________ provides ready-to-use software over the internet. (SaaS)
  9. An ___________ zone is a separate data centre within a region. (availability)
  10. The ___________ responsibility model divides duties between provider and customer. (shared)

βœ… True or False

  1. The cloud is only for big companies. (False)
  2. PaaS allows you to build apps without managing servers. (True)
  3. Scalability and elasticity mean the same thing. (False)
  4. Azure has data centres only in the US. (False)
  5. You can use the cloud for free with Azure's free account. (True)
  6. Private cloud is shared by everyone. (False)
  7. Disaster recovery protects your data from loss. (True)
  8. In SaaS, you manage the operating system. (False)
  9. Resource groups help organise Azure resources. (True)
  10. Pay-as-you-go means you pay a fixed monthly fee. (False)

πŸ§ͺ Multiple Choice Questions

  1. Which cloud model is shared by many organisations?
    a) Private b) Public c) Hybrid d) Community
    Answer: b
  2. What does IaaS provide?
    a) Software b) Platform c) Hardware d) Apps
    Answer: c
  3. Which service is an example of SaaS?
    a) Azure VM b) Gmail c) Azure App Service d) SQL Database
    Answer: b
  4. What is the ability to increase or decrease resources called?
    a) Elasticity b) Scalability c) Availability d) Recovery
    Answer: b
  5. Which term refers to automatic scaling?
    a) Scalability b) Elasticity c) Agility d) Reliability
    Answer: b
  6. What is a region?
    a) A data centre b) A geographical area c) A virtual machine d) A resource
    Answer: b
  7. What is a resource group?
    a) A billing unit b) A container for resources c) A virtual network d) A server
    Answer: b
  8. Which model requires you to manage the OS?
    a) SaaS b) PaaS c) IaaS d) All
    Answer: c
  9. What is high availability?
    a) Service is always fast b) Service is always available c) Service is always cheap d) Service is always secure
    Answer: b
  10. Which Nigerian company uses cloud for payments?
    a) Dangote b) Flutterwave c) NNPC d) MTN
    Answer: b
  11. What is a subscription in Azure?
    a) A resource b) A billing unit c) A region d) A virtual machine
    Answer: b
  12. What is disaster recovery?
    a) Fixing broken servers b) Backing up to another location c) Deleting old data d) Updating software
    Answer: b
  13. Which cloud model is a mix of public and private?
    a) Hybrid b) Community c) Multi-cloud d) None
    Answer: a
  14. Who is responsible for physical security in the cloud?
    a) Customer b) Provider c) Both d) Neither
    Answer: b
  15. What does PaaS stand for?
    a) Program as a Service b) Platform as a Service c) Process as a Service d) Product as a Service
    Answer: b

πŸ”— Matching Exercises

Match the term on the left with its correct description on the right.

TermDescription
IaaSRent basic hardware
PaaSRent a platform to build apps
SaaSUse ready-made software
Public cloudShared by many
Private cloudUsed by one organisation

✍️ Short Answer Questions

  1. Explain the cloud in your own words.
  2. What is the difference between IaaS and PaaS?
  3. Give two benefits of cloud computing.
  4. Why is disaster recovery important?
  5. How does pay-as-you-go help small businesses?

🧩 Scenario-based Exercises

Scenario 1: A school in Lagos wants to store student records and exam results online. They want to pay only for what they use and not worry about servers. Which cloud service model is best for them? Why?

Scenario 2: A game developer wants to create a mobile game that can handle 1 million players instantly. They need to scale automatically. Which cloud concept helps them? Explain.

Scenario 3: A bank wants to keep customer data very secure and also use public cloud for its website. Which cloud model should they choose? Why?

πŸ‘₯ Group Activity

In groups of 3-4, discuss how a local business in your area could benefit from the cloud. Think about a small shop, a restaurant, or a school. Present your ideas to the class.

πŸ§‘ Individual Activity

Draw a picture of a cloud and label the following: IaaS, PaaS, SaaS, region, availability zone, resource group. Write one sentence for each term.

πŸ’¬ Classroom Discussion Questions

  1. Do you think the cloud is the future? Why or why not?
  2. What are some concerns people might have about the cloud?
  3. How has the cloud changed the way we watch movies or listen to music?
  4. Would you trust the cloud to store your family photos? Why?
  5. How can Nigerian entrepreneurs use the cloud to grow their businesses?

πŸ› οΈ Mini Project

Cloud Expo: Create a poster or a slideshow about a real Nigerian business that uses the cloud. Explain how they use it and what benefits they get. Present it to the class.

πŸ’» Practical Assignment

If you have access to Azure (free account), create a resource group and a storage account. Upload a simple text file and share it with a classmate. If you don't have access, write down the steps you would follow.

πŸ† Challenge Exercise

Research and compare Azure with another cloud provider (like AWS or Google Cloud). Write down three similarities and three differences. Discuss with your classmates.

πŸ”‘ Quiz Answers (Multiple Choice)

  1. b
  2. c
  3. b
  4. b
  5. b
  6. b
  7. b
  8. c
  9. b
  10. b
  11. b
  12. b
  13. a
  14. b
  15. b

🎁 Key Takeaways

  • The cloud is a collection of computers and services accessible over the internet.
  • There are three main service models: IaaS, PaaS, and SaaS.
  • Cloud models include public, private, and hybrid.
  • Scalability, elasticity, high availability, and disaster recovery are major benefits.
  • Pay-as-you-go pricing helps manage costs.
  • Regions and availability zones make the cloud reliable.
  • Resource groups, subscriptions, and management groups keep things organised.
  • Nigerian businesses and individuals are increasingly adopting the cloud.

πŸš€ Preparation for Module 2

In the next module, we will explore Azure Architecture and Services. You will learn about virtual machines, storage, networking, and more. Get ready to build your first virtual machine in the cloud!

Before that, review the concepts of IaaS, PaaS, and SaaS. They will help you understand the different services Azure offers.


πŸŽ‰ Congratulations! You have completed Module 1. Keep exploring the cloud! ☁️

3

Module Two

Module 2 Β· Azure Architecture & Services Β· AZ-900 for Beginners

πŸ—οΈ Module 2: Azure Architecture & Services – The Building Blocks

Now that we know what the cloud is, let's explore the actual pieces that make up Microsoft Azure. Think of Azure like a giant Lego set 🧱 – it has many different bricks (services) you can snap together to build almost anything. In this module, we will learn about virtual machines, storage, networking, and many more cool tools.

🎯 Learning Objectives

  • Explain what Azure regions and availability zones are.
  • Describe the main compute services: Virtual Machines, App Services, and Functions.
  • Understand storage options: Blob, File, Disk, and Queue.
  • Learn about networking: Virtual Network, VPN, and ExpressRoute.
  • Know how to organise resources with resource groups and subscriptions.

πŸ“– Warm-up Story: The Giant Workshop

Imagine you have a giant workshop with many rooms. Each room has a different tool:

  • One room has computers (that's like Azure Virtual Machines).
  • Another room has shelves for storing things (that's Azure Storage).
  • There is a room with maps and roads to connect everything (that's Azure Networking).
  • And a special room where you can build apps without worrying about the machines (that's Azure App Service).

This workshop is Azure! You can use any room you need, and you can even add more rooms when you need them.

πŸ“˜ Main Lessons

1. Azure Regions – Where is your data?

Definition: A region is a specific geographical location where Azure has data centres. For example, "South Africa North" is a region.

Why important: You choose a region to keep your data close to your users, so it's fast.

Simple: A region is like a city where Azure has a big computer warehouse.

Real-life: If you are in Nigeria, using the South Africa region is faster than using a region in the USA.

School: Your school has a computer lab in a specific building – that's like a region.

Home: Your family might store photos on a cloud server in a region close to you.

Nigerian: Many Nigerian companies use the South Africa region because it's the closest.

    Region = a place on the map (e.g., South Africa, Europe, US)
    

βœ… Summary: Regions are physical locations of Azure data centres.


2. Availability Zones – Backup inside a region

Definition: An availability zone is a separate data centre within a region. Each zone has its own power, cooling, and networking.

Why important: If one zone fails, another zone can keep your app running.

Simple: Imagine a city has three different power stations. If one goes down, the others still work.

Real-life: Banks use zones to keep customer data safe.

School: Your school has two buildings; if one has a power cut, you can move to the other.

Home: You keep a spare key at a neighbour's house – that's like a backup zone.

Nigerian: A Lagos bank uses two zones in South Africa for redundancy.

    Region
    β”œβ”€β”€ Zone 1 (data centre A)
    β”œβ”€β”€ Zone 2 (data centre B)
    └── Zone 3 (data centre C)
    

βœ… Summary: Zones are separate data centres inside a region for extra reliability.


3. Resource Groups – The organisers

Definition: A resource group is a container that holds related Azure resources (like virtual machines, storage, and networks).

Why important: It helps you manage everything together – like a folder for a project.

Simple: A resource group is like a school bag that holds all the books for one subject.

Real-life: A company has a resource group for its website and another for its mobile app.

School: One resource group for maths assignments, another for science.

Home: A folder for family photos, another for school documents.

Nigerian: A fintech startup uses a resource group for their payment system.

    Resource Group "Project X"
    β”œβ”€β”€ Virtual Machine
    β”œβ”€β”€ Storage Account
    └── Virtual Network
    

βœ… Summary: Resource groups help you organise your cloud resources.


4. Subscriptions – The billing and access unit

Definition: A subscription is a way to group resources for billing and access control. You can have multiple subscriptions.

Why important: It helps you separate projects and track costs.

Simple: A subscription is like a wallet – you use it to pay for your resources.

Real-life: A company has one subscription for development and another for production.

School: The school has a subscription for the IT department and another for the science department.

Home: You might have a free trial subscription to try Azure.

Nigerian: A large bank has separate subscriptions for each branch.

βœ… Summary: Subscriptions manage billing and who can access resources.


5. Virtual Machines – The workhorses

Definition: A virtual machine (VM) is a computer inside a computer. It runs an operating system like Windows or Linux.

Why important: You can have many VMs without buying physical hardware.

Simple: It's like having a pretend computer that lives in the cloud.

Real-life: A company uses VMs to host websites and databases.

School: Your IT class uses VMs to practise without breaking real computers.

Home: You can create a VM to run a game server.

Nigerian: A software company in Lagos rents VMs to test their apps.

    Physical Server
    β”œβ”€β”€ VM1 (Windows)
    β”œβ”€β”€ VM2 (Linux)
    └── VM3 (Windows)
    

βœ… Summary: VMs are virtual computers you can rent by the hour.


6. Azure App Service – Build websites and apps easily

Definition: App Service is a PaaS (Platform as a Service) that lets you host web apps, REST APIs, and mobile backends.

Why important: You don't need to manage the server – just upload your code.

Simple: It's like a magic oven – you put in your recipe (code) and it bakes a website.

Real-life: Many companies host their public websites on App Service.

School: Your school's online portal might be hosted on App Service.

Home: You can create a simple blog using App Service.

Nigerian: A restaurant in Abuja uses App Service for their online menu.

βœ… Summary: App Service lets you host websites without managing servers.


7. Azure Functions – Run code on demand

Definition: Azure Functions is a serverless service – you write code that runs only when triggered.

Why important: You pay only when the code runs, not for idle time.

Simple: Like a vending machine – it only works when you press a button.

Real-life: A photo app uses a function to resize images when you upload them.

School: A function could send a notification when a teacher posts homework.

Home: A function could turn on your smart lights when you arrive home.

Nigerian: A delivery app uses a function to calculate shipping costs.

    Trigger (e.g., upload photo) β†’ Function runs β†’ Done (resized photo)
    

βœ… Summary: Functions run code only when needed, saving money.


8. Azure Storage – Where data lives

Definition: Azure Storage is a set of services for storing files, messages, and data. It includes Blob, File, Disk, and Queue.

Why important: You need a place to keep your data permanently.

Simple: Storage is like a giant digital warehouse.

Real-life: Photos, videos, and backups are stored in Azure Storage.

School: Your school stores exam papers in a storage account.

Home: Your family's cloud backup uses Azure Storage.

Nigerian: A music streaming service stores songs in Azure Storage.

Storage typeWhat it's forExample
BlobUnstructured data (files, images, videos)Photos, backups
FileShared network drivesTeam folders
DiskVirtual hard drives for VMsOS disk
QueueMessage queue for communicationOrder processing

βœ… Summary: Azure Storage is a family of services to keep your data safe.


9. Storage Tiers – Hot, Cool, Archive

Definition: These are different pricing levels based on how often you access data.

Why important: You can save money by storing old data in cheaper tiers.

Simple: Like a wardrobe – everyday clothes are easy to reach (hot), winter clothes are harder (cool), and old clothes are stored in the attic (archive).

Real-life: Active project files are in Hot tier; old backups are in Archive.

School: Current assignments are Hot; last year's records are Cool.

Home: Family photos from this year are Hot; old videos are Archive.

Nigerian: A bank stores recent transactions in Hot, older ones in Cool.

    Hot   β†’ frequently used  (expensive but fast)
    Cool  β†’ less often       (cheaper)
    Archive β†’ rarely used    (cheapest, but slow to retrieve)
    

βœ… Summary: Storage tiers help balance cost and access speed.


10. Azure Networking – Connecting everything

Definition: Azure Virtual Network (VNet) lets you create a private network in the cloud, just like your home Wi-Fi.

Why important: It connects your VMs and other services securely.

Simple: A VNet is like a private road system for your cloud resources.

Real-life: A company uses VNet to connect its web server to its database securely.

School: The school network connects all computers – VNet does the same in Azure.

Home: Your home Wi-Fi connects your phone, laptop, and TV – VNet does the same in the cloud.

Nigerian: A healthcare provider uses VNet to connect patient records safely.

    VNet = private cloud network
    β”œβ”€β”€ Subnet A (Web servers)
    β”œβ”€β”€ Subnet B (Database servers)
    └── Subnet C (Application servers)
    

βœ… Summary: VNet creates a private network for your Azure resources.


11. VPN Gateway – Secure tunnel to the cloud

Definition: VPN Gateway is a service that connects your on-premises network to Azure securely over the internet.

Why important: It's like a secure tunnel between your office and the cloud.

Simple: A VPN is like a secret passage that only your family knows.

Real-life: A company connects its office network to Azure using VPN Gateway.

School: Teachers connect from home to the school's network through a VPN.

Home: You might use a VPN to access your home files from school.

Nigerian: A bank connects its branches to Azure via VPN.

βœ… Summary: VPN Gateway creates a secure connection from your network to Azure.


12. ExpressRoute – Private, high-speed connection

Definition: ExpressRoute is a dedicated private connection from your data centre to Azure – it doesn't go over the public internet.

Why important: It's faster and more reliable than a VPN.

Simple: Think of it as a private highway just for your data.

Real-life: Large companies use ExpressRoute for mission-critical applications.

School: A university might use ExpressRoute to connect its research lab to Azure.

Home: Not for home use – it's for big businesses.

Nigerian: A telecommunications company uses ExpressRoute for its core systems.

βœ… Summary: ExpressRoute is a private, fast link to Azure.


13. Azure DNS – The phonebook of the internet

Definition: Azure DNS is a service that translates domain names (like example.com) to IP addresses (like 192.168.1.1).

Why important: You don't need to remember numbers – just names.

Simple: Like a phonebook for websites.

Real-life: When you type google.com, DNS finds the server's IP address.

School: Your school's website uses DNS so you can find it by name.

Home: Your router uses DNS to connect you to the internet.

Nigerian: A news portal uses Azure DNS to make its site accessible.

βœ… Summary: Azure DNS translates website names into numbers.


14. Azure Migrate – Moving to the cloud

Definition: Azure Migrate helps you discover, assess, and move your on-premises servers to Azure.

Why important: Moving to the cloud can be complex – this tool makes it easier.

Simple: It's like a moving company for your digital belongings.

Real-life: A company uses Azure Migrate to move its old servers to Azure.

School: A school moves its old computer system to the cloud using Azure Migrate.

Home: Not used by individuals.

Nigerian: A government agency uses Azure Migrate to digitise records.

βœ… Summary: Azure Migrate helps move existing systems to Azure.


15. Azure Data Box – Ship your data

Definition: Data Box is a physical device (like a hard drive) that you can ship to Microsoft to transfer large amounts of data.

Why important: For very large data, it's faster than sending over the internet.

Simple: It's like mailing a big suitcase of data instead of sending it bit by bit.

Real-life: A media company ships video files using Data Box.

School: A research lab sends terabytes of data using Data Box.

Home: Not for home use – it's for huge data.

Nigerian: A geological survey company uses Data Box to send survey data.

βœ… Summary: Data Box is a physical device for moving huge data to Azure.


πŸ“š Key Vocabulary

  • Region: A geographical area with data centres.
  • Availability Zone: Separate data centre within a region.
  • Resource Group: A container for related resources.
  • Subscription: A billing and management unit.
  • Virtual Machine (VM): A virtual computer in the cloud.
  • App Service: A platform to host web apps.
  • Azure Functions: Code that runs on demand.
  • Storage: Services for storing data (Blob, File, Disk, Queue).
  • Storage Tier: Pricing level based on access frequency.
  • Virtual Network (VNet): A private network in Azure.
  • VPN Gateway: Secure connection from on-premises to Azure.
  • ExpressRoute: Private, dedicated connection to Azure.
  • Azure DNS: Name to IP address translation.
  • Azure Migrate: Tool to move on-premises servers to Azure.
  • Data Box: Physical device for transferring large data.

🧠 Important Concepts

  • Regions and Zones: Keep your data close and redundant.
  • Resource organisation: Use resource groups and subscriptions to stay tidy.
  • Compute options: Choose between VMs (full control), App Service (managed), or Functions (serverless).
  • Storage: Pick the right storage type and tier for your data.
  • Networking: VNet, VPN, and ExpressRoute provide connectivity and security.

πŸ”’ Step-by-step: Creating a Virtual Machine

  1. Sign in to the Azure portal.
  2. Create a resource group (e.g., "MyVMResourceGroup").
  3. Click "Create a resource" and search for "Virtual Machine".
  4. Choose a region (e.g., South Africa North).
  5. Select an image (e.g., Windows Server or Ubuntu).
  6. Provide a username and password (or SSH key).
  7. Choose a size (e.g., Standard B1s – small and cheap).
  8. Configure networking (default VNet is fine).
  9. Review and create – wait a few minutes for deployment.
  10. Connect to your VM using RDP (Windows) or SSH (Linux).

🌍 Real-life Examples

  • Netflix: Uses VMs and storage to stream movies.
  • Adobe: Uses App Service for creative cloud apps.
  • BP (oil company): Uses ExpressRoute for reliable global connections.
  • E-Trade: Uses Functions for event-driven trading tasks.
  • Nike: Uses Azure Storage for customer photos.

πŸ‡³πŸ‡¬ Nigerian Examples

  • Flutterwave: Uses VMs to scale payment processing.
  • Kuda Bank: Uses App Service for their mobile banking app.
  • Paystack: Uses Storage to store transaction logs.
  • Farmcrowdy: Uses Functions to send farmer alerts.
  • Chipper Cash: Uses VNet to securely connect services.

🎈 Fun Examples for Kids

  • Roblox: Uses VMs to host game servers.
  • Minecraft: You can use a VM to host your own world.
  • TikTok: Uses storage for all the videos.
  • Zoom: Uses App Service for the website.
  • Google Classroom: Uses functions to send notifications.

🏠 Everyday Examples

  • Backing up photos: Using Azure Blob Storage.
  • Hosting a blog: Using Azure App Service.
  • Family calendar: Using Azure Functions to send reminders.
  • Smart home: Connecting devices via VNet.
  • Online shopping: Using storage for product images.

πŸ‘©β€πŸ« Teacher Notes

  • Emphasise that Azure is a toolbox – you pick what you need.
  • Use Lego bricks as an analogy for services.
  • Encourage students to think about which service they would use for different projects.
  • Relate to Nigerian context: use local examples like Flutterwave, Paystack.
  • If possible, show the Azure portal in a live demo.

πŸ§‘β€πŸ€β€πŸ§‘ Parent Tips

  • Discuss with your child what services they use (e.g., cloud storage, apps).
  • Explain that Azure is like a big library of computer services.
  • You can try Azure's free account together to create a simple virtual machine.
  • Encourage them to think about how businesses use these services.
  • Ask: "Which service would you use to build a game?"

πŸ’‘ Interesting Facts

  • Azure has over 60 regions worldwide, more than any other cloud provider.
  • Azure was launched in 2010 – it's over 14 years old!
  • Microsoft invests over $1 billion per year in Azure security.
  • Azure supports both Windows and Linux VMs.
  • Many governments use Azure for their cloud needs.

πŸ€” Did You Know?

  • You can run a supercomputer in Azure for research.
  • Azure has a service for AI and machine learning.
  • You can use Azure to build a blockchain network.
  • Azure has a service called "Cosmos DB" for global databases.
  • Microsoft has underwater data centres to cool servers.

🧾 Remember This

  • Regions are physical locations; zones are redundant data centres inside them.
  • Resource groups organise resources; subscriptions manage billing.
  • VMs are virtual computers; App Service is for web apps; Functions are on-demand code.
  • Storage includes Blob, File, Disk, and Queue.
  • VNet is a private network; VPN and ExpressRoute connect to on-premises.

⚠️ Common Mistakes

  • Mistake: Leaving a VM running and forgetting to stop it, wasting money.
    Fix: Always stop or delete resources when not in use.
  • Mistake: Choosing a region far from users, causing slowness.
    Fix: Choose the closest region to your users.
  • Mistake: Using the wrong storage tier – storing frequently used data in Archive.
    Fix: Use Hot tier for active data, Archive for old data.
  • Mistake: Not using resource groups – resources become messy.
    Fix: Always put resources in meaningful resource groups.
  • Mistake: Not securing VMs with strong passwords.
    Fix: Use complex passwords and enable multi-factor authentication.

🌟 Best Practices

  • Use resource groups to organise by project or environment (e.g., Dev, Test, Prod).
  • Tag resources with metadata (e.g., owner, cost centre).
  • Monitor usage and costs regularly.
  • Use managed disks for VMs – they are easier to manage.
  • Enable backup and disaster recovery for critical data.

πŸ“Š ASCII Illustrations

Region and Zones

    Region (e.g., South Africa)
    +------------------------------------+
    |  Zone 1  |  Zone 2  |  Zone 3     |
    |  (DC A)  |  (DC B)  |  (DC C)     |
    +------------------------------------+
    

Resource Group structure

    Resource Group: "ProjectX"
    β”œβ”€β”€ VM (web)
    β”œβ”€β”€ VM (database)
    β”œβ”€β”€ Storage Account
    └── Virtual Network
    

Storage tiers

    Hot   (frequent access)   β†’  $$$
    Cool  (infrequent)        β†’  $$
    Archive (rarely)          β†’  $
    

πŸ“‹ Comparison tables

Compute services comparison

ServiceTypeUse case
Virtual MachinesIaaSFull control, custom OS
App ServicePaaSWeb apps, APIs
FunctionsServerlessEvent-driven, short tasks

Storage types comparison

TypeBest for
BlobFiles, images, backups
FileShared network drives
DiskVM operating system disks
QueueMessage queuing between apps

πŸ“Œ End-of-module Summary

In this module, we explored the main building blocks of Azure. We learned:

  • Regions and availability zones – where data centres are located and how they provide redundancy.
  • Resource groups and subscriptions – how to organise and manage resources.
  • Compute services – VMs (full control), App Service (managed web apps), and Functions (serverless).
  • Storage – Blob, File, Disk, Queue, and storage tiers (Hot, Cool, Archive).
  • Networking – VNet (private network), VPN Gateway (secure tunnel), ExpressRoute (private link).
  • Other services – Azure DNS, Azure Migrate, Data Box.
  • Nigerian examples – how local companies like Flutterwave and Kuda use these services.

You now have a good understanding of the core Azure services. In the next module, we will learn about Azure Management and Governance – how to manage costs, secure your resources, and monitor your cloud environment.

❓ Frequently Asked Questions

  1. What is a region? – A geographical location with Azure data centres.
  2. What is an availability zone? – A separate data centre within a region.
  3. What is a resource group? – A container for related resources.
  4. What is a Virtual Machine? – A virtual computer in the cloud.
  5. What is App Service? – A platform to host web apps without managing servers.
  6. What are Azure Functions? – Code that runs on demand in a serverless environment.
  7. What is Blob storage? – For storing files like images and videos.
  8. What is a VNet? – A private network in the cloud.
  9. What is VPN Gateway? – A secure tunnel from your network to Azure.
  10. What is ExpressRoute? – A private, high-speed connection to Azure.

πŸ“ Review Questions

  1. What is the difference between a region and an availability zone?
  2. Why do we use resource groups?
  3. What are the three main compute services in Azure?
  4. What is App Service used for?
  5. Name two storage types in Azure.
  6. What is a storage tier?
  7. What is a Virtual Network (VNet)?
  8. When would you use VPN Gateway?
  9. How is ExpressRoute different from VPN?
  10. What does Azure DNS do?
  11. What is Azure Migrate?
  12. When would you use Data Box?
  13. What is a subscription in Azure?
  14. Give a Nigerian example of using Azure VMs.
  15. Why should you choose a region close to your users?

✏️ Fill-in-the-Blank

  1. A ___________ is a geographical area with data centres. (region)
  2. An ___________ zone is a separate data centre within a region. (availability)
  3. A ___________ group holds related Azure resources. (resource)
  4. ___________ is a virtual computer in the cloud. (Virtual Machine)
  5. ___________ is a platform for hosting web apps. (App Service)
  6. ___________ runs code on demand without managing servers. (Functions)
  7. ___________ storage is for unstructured data like files and images. (Blob)
  8. A ___________ is a private network in Azure. (Virtual Network / VNet)
  9. ___________ Gateway connects your network to Azure securely. (VPN)
  10. ___________ is a private, dedicated connection to Azure. (ExpressRoute)

βœ… True or False

  1. A region is a data centre. (False – it's a location with multiple data centres)
  2. Availability zones provide redundancy. (True)
  3. You can only have one resource group per subscription. (False)
  4. Virtual Machines are a PaaS service. (False – they are IaaS)
  5. App Service is used for hosting web applications. (True)
  6. Azure Functions run only when triggered. (True)
  7. Blob storage is used for virtual machine disks. (False – that's Disk storage)
  8. Storage tiers help reduce costs. (True)
  9. VNet is the same as the public internet. (False – it's private)
  10. ExpressRoute is a public internet connection. (False – it's private)

πŸ§ͺ Multiple Choice Questions

  1. Which Azure service is a virtual computer?
    a) App Service b) Virtual Machine c) Functions d) Storage
    Answer: b
  2. Which service is used for hosting web apps?
    a) VMs b) App Service c) Functions d) VNet
    Answer: b
  3. What is a region?
    a) A data centre b) A geographical area c) A virtual machine d) A storage account
    Answer: b
  4. What is an availability zone?
    a) A region b) A separate data centre c) A virtual network d) A resource group
    Answer: b
  5. Which storage type is used for VM disks?
    a) Blob b) File c) Disk d) Queue
    Answer: c
  6. Which storage tier is best for frequently accessed data?
    a) Hot b) Cool c) Archive d) Frozen
    Answer: a
  7. What does VNet stand for?
    a) Virtual Network b) Very Network c) Virtual Node d) Voice Network
    Answer: a
  8. Which service provides a secure tunnel from on-premises to Azure?
    a) ExpressRoute b) VPN Gateway c) VNet d) DNS
    Answer: b
  9. What is ExpressRoute?
    a) A public internet connection b) A private dedicated connection c) A virtual machine d) A storage service
    Answer: b
  10. Which service translates domain names to IP addresses?
    a) VNet b) DNS c) VPN d) Storage
    Answer: b
  11. What is Azure Migrate?
    a) A storage service b) A tool for moving to Azure c) A virtual machine d) A network service
    Answer: b
  12. What is Data Box?
    a) A virtual machine b) A physical device for data transfer c) A storage account d) A network service
    Answer: b
  13. What is a subscription used for?
    a) Storage b) Billing and access c) Virtual machines d) Networking
    Answer: b
  14. Which Nigerian company uses Azure VMs?
    a) Dangote b) Flutterwave c) NNPC d) MTN
    Answer: b
  15. Which service would you use to send notifications when a file is uploaded?
    a) App Service b) Functions c) VMs d) Storage
    Answer: b

πŸ”— Matching Exercises

Match the service with its description.

ServiceDescription
Virtual MachineA virtual computer
App ServiceHost web apps
FunctionsRun code on demand
Blob StorageStore files and images
VNetPrivate network
VPN GatewaySecure tunnel
ExpressRoutePrivate dedicated link

✍️ Short Answer Questions

  1. Explain the difference between a region and an availability zone.
  2. Why would you use App Service instead of a Virtual Machine?
  3. Describe three types of Azure storage.
  4. What is a Virtual Network and why is it important?
  5. Give an example of how Azure Functions can be used.

🧩 Scenario-based Exercises

Scenario 1: A school in Lagos wants to host a website for students and parents. They don't want to manage servers. Which Azure service should they use? Why?

Scenario 2: A company needs to store large videos for training. They will access them often. Which storage type and tier should they use?

Scenario 3: A bank wants to connect its head office in Abuja to Azure securely and quickly. Which service should they use? Why?

πŸ‘₯ Group Activity

In groups, design a small cloud solution for a Nigerian business of your choice. Decide which Azure services you would use (VM, App Service, Storage, etc.) and present your design.

πŸ§‘ Individual Activity

Draw a diagram of a resource group containing a VM, a storage account, and a VNet. Label each part.

πŸ’¬ Classroom Discussion Questions

  1. Which Azure service do you think is most useful? Why?
  2. How would you use Azure to help a local business?
  3. What are the advantages of using App Service over VMs?
  4. Why is it important to choose the right region?
  5. How can Azure help Nigerian startups grow faster?

πŸ› οΈ Mini Project

Cloud Architecture Design: Design a cloud architecture for a mobile app that lets users upload and share photos. Specify which Azure services you would use for compute, storage, and networking. Draw a diagram and explain your choices.

πŸ’» Practical Assignment

If you have an Azure free account, create a resource group and a storage account. Upload a sample file and share it with a classmate. Write down the steps you followed.

πŸ† Challenge Exercise

Research how to deploy a simple website to Azure App Service. Write a short guide on how to do it. Then, try it if you have access to Azure.

πŸ”‘ Quiz Answers (Multiple Choice)

  1. b
  2. b
  3. b
  4. b
  5. c
  6. a
  7. a
  8. b
  9. b
  10. b
  11. b
  12. b
  13. b
  14. b
  15. b

🎁 Key Takeaways

  • Azure regions and availability zones provide global reach and redundancy.
  • Resource groups and subscriptions help organise and manage resources.
  • Compute services: VMs (IaaS), App Service (PaaS), Functions (serverless).
  • Storage: Blob, File, Disk, Queue with Hot, Cool, Archive tiers.
  • Networking: VNet (private), VPN Gateway (secure tunnel), ExpressRoute (private link).
  • Azure DNS, Migrate, and Data Box are additional helpful services.
  • Nigerian businesses actively use these services to innovate.

πŸš€ Preparation for Module 3

In the next module, we will learn about Azure Management and Governance. We'll cover:

  • Cost management and the pricing calculator.
  • Security and identity with Microsoft Entra ID (Azure AD).
  • Monitoring tools like Azure Monitor and Service Health.
  • Governance with Azure Policy and resource locks.
  • Management tools like Azure Portal, CLI, and ARM templates.

Review the concepts of subscriptions and resource groups – they will be very important in Module 3.


πŸŽ‰ Congratulations! You have completed Module 2. On to the next adventure! πŸš€

4

Module Three

Module 3 Β· Management & Governance Β· AZ-900 for Beginners

πŸ“Š Module 3: Azure Management & Governance – Taking Control

You have learned about the cloud and its building blocks. But how do you manage it all? How do you control costs, keep things secure, and make sure everything runs smoothly? This module is all about management and governance – the tools that help you stay organised, safe, and within budget. Think of it like being the captain of a ship – you need to steer, watch the weather, and make sure you don't run out of fuel.

🎯 Learning Objectives

  • Understand how to estimate and manage costs in Azure.
  • Learn about identity and access control with Microsoft Entra ID (Azure AD).
  • Know how to monitor your resources with Azure Monitor and Service Health.
  • Apply governance using Azure Policy, resource locks, and tags.
  • Discover management tools like Azure Portal, CLI, PowerShell, and ARM templates.

πŸ“– Warm-up Story: Captain Azure's Ship

Imagine you are the captain of a big ship called "The Azure Explorer". 🚒

  • You have a crew (that's your team).
  • You have a treasure chest (your budget).
  • You have a map (your resources).
  • You have lookouts (monitoring tools) to watch for storms.
  • You have rules (policies) to keep everyone safe.

In this module, you will learn how to be the best captain – managing costs, keeping the ship secure, and making sure everything is in order.

πŸ“˜ Main Lessons

1. Cost Management – Don't overspend!

Definition: Cost management is the process of planning, tracking, and controlling how much you spend on Azure.

Why important: You don't want a big surprise at the end of the month.

Simple: Like keeping a shopping list and checking prices.

Real-life: A company uses Azure Cost Management to see which departments spend the most.

School: The school tracks how much it spends on cloud storage.

Home: Your family checks the electricity bill to see if you used too much.

Nigerian: A Lagos startup uses Cost Management to keep their cloud budget under ₦500,000 per month.

    Plan β†’ Use β†’ Track β†’ Adjust
    

βœ… Summary: Cost Management helps you stay within your budget.


2. Pricing Calculator – Estimate costs

Definition: The Pricing Calculator is a free tool on the Azure website that helps you estimate how much a service will cost.

Why important: You can plan before you spend.

Simple: Like using a calculator to add up your shopping list.

Real-life: A company calculates the cost of running a VM for a year.

School: The IT teacher estimates the cost of hosting the school website.

Home: You can use it to see how much it would cost to store your family photos.

Nigerian: A fintech startup uses the calculator before launching a new service.

    Pricing Calculator
    β”œβ”€β”€ Choose service (e.g., VM)
    β”œβ”€β”€ Set options (size, region, hours)
    └── Get estimated cost
    

βœ… Summary: The Pricing Calculator helps you estimate your Azure costs.


3. Total Cost of Ownership (TCO) Calculator

Definition: The TCO calculator compares the cost of running your own servers (on-premises) versus using the cloud.

Why important: It helps you decide if moving to the cloud saves money.

Simple: Like comparing the cost of buying a car vs. renting one.

Real-life: A company uses TCO to decide whether to move to Azure.

School: A school compares the cost of a physical server room vs. cloud.

Home: Not usually used by individuals.

Nigerian: A bank uses the TCO calculator to justify moving to the cloud.

AspectOn-premisesCloud (Azure)
Hardware costHigh upfrontPay as you go
MaintenanceYou manageMicrosoft manages
ElectricityYou payIncluded
ScalabilityHardEasy

βœ… Summary: TCO calculator shows the total cost of on-premises vs. cloud.


4. Azure Cost Management + Billing – Track spending

Definition: A tool in the Azure portal that shows you exactly how much you're spending and on what.

Why important: You need to see where your money is going.

Simple: Like a bank statement for your cloud usage.

Real-life: A manager checks Cost Management to see if a project is over budget.

School: The school's finance officer tracks cloud spending monthly.

Home: You can see how much your free trial is using.

Nigerian: A company in Abuja reviews Cost Management every week.

    Cost Management
    β”œβ”€β”€ View spending by resource
    β”œβ”€β”€ Set budgets & alerts
    └── Recommendations to save money
    

βœ… Summary: Cost Management + Billing helps you track and control spending.


5. Resource Tags – Labels for organisation

Definition: Tags are key-value pairs (like "Project: Website" or "CostCenter: Marketing") that you add to resources.

Why important: They help you organise, track costs, and manage resources.

Simple: Like putting sticky notes on your belongings to know what they are for.

Real-life: A company tags resources by project, department, and environment (Dev/Prod).

School: Tags can show which class uses which resource.

Home: You might tag photos with names and dates.

Nigerian: A startup tags resources by region (Lagos, Abuja).

    Tag: Environment = Production
    Tag: Department = Finance
    Tag: Project = PayrollApp
    

βœ… Summary: Tags are labels that help you organise and track resources.


6. Azure Policy – Enforce rules

Definition: Azure Policy is a service that lets you create rules to enforce standards across your resources.

Why important: It prevents people from making mistakes, like creating VMs in the wrong region.

Simple: Like school rules – you can't run in the hallway.

Real-life: A company uses a policy to only allow VMs in a specific region.

School: A policy ensures all school resources use the same naming convention.

Home: Not used at home.

Nigerian: A bank uses policies to ensure all VMs are in South Africa.

    Policy: Allowed locations = South Africa, Europe
    If VM created in US β†’ Policy denies it
    

βœ… Summary: Azure Policy enforces rules to keep things consistent.


7. Resource Locks – Prevent deletion

Definition: A lock prevents a resource from being deleted or changed accidentally.

Why important: You don't want someone to delete your important VM.

Simple: Like putting a child-proof lock on a cabinet.

Real-life: A company locks its production database so no one can delete it.

School: The school locks the server that stores exam results.

Home: You lock your diary so no one reads it.

Nigerian: A hospital locks patient records to prevent accidental deletion.

    Lock Types:
    - CanNotDelete (prevents deletion)
    - ReadOnly (prevents changes)
    

βœ… Summary: Resource locks protect important resources from being deleted or changed.


8. Microsoft Entra ID (formerly Azure AD) – The identity service

Definition: Microsoft Entra ID is a cloud-based identity and access management service.

Why important: It controls who can access your Azure resources.

Simple: Like a school ID card – only students with a card can enter.

Real-life: Employees use their Entra ID credentials to log in to Azure.

School: Teachers and students have different access levels.

Home: You have a Microsoft account to log in to Azure.

Nigerian: A company uses Entra ID to give employees access to cloud apps.

    Microsoft Entra ID = User directory
    β”œβ”€β”€ Users (people)
    β”œβ”€β”€ Groups (teams)
    └── Applications (apps they can use)
    

βœ… Summary: Microsoft Entra ID is the identity service that manages users and access.


9. Single Sign-On (SSO) – One login for many apps

Definition: SSO lets users log in once with one set of credentials to access multiple applications.

Why important: You don't need to remember many passwords.

Simple: Like a master key that opens all doors in your house.

Real-life: Employees log in once to access email, HR system, and cloud apps.

School: Students use one login for the school portal and online library.

Home: You use your Google account to log in to YouTube, Gmail, and Drive.

Nigerian: A bank uses SSO for its employees to access multiple internal apps.

βœ… Summary: SSO means one login for many apps.


10. Multi-Factor Authentication (MFA) – Extra security

Definition: MFA requires two or more verification methods to log in. For example, a password + a code sent to your phone.

Why important: It makes it much harder for hackers to break in.

Simple: Like a bank vault that needs a key and a combination.

Real-life: Your online banking uses MFA.

School: Teachers use MFA to access student records.

Home: You can enable MFA on your Microsoft account.

Nigerian: Many Nigerian banks use MFA for online banking.

    Login:
    Step 1: Enter password
    Step 2: Enter code from phone
    βœ… Access granted!
    

βœ… Summary: MFA adds an extra layer of security to your login.


11. Role-Based Access Control (RBAC) – Who can do what?

Definition: RBAC assigns permissions to users, groups, or applications based on their roles.

Why important: You give people only the permissions they need.

Simple: Like a school where teachers can grade, but students can only view.

Real-life: An admin can create VMs, a reader can only view them.

School: The principal can change settings, but the librarian can only view.

Home: Parents have full control, children have limited access.

Nigerian: A company gives developers "contributor" rights but not "owner".

RolePermissions
OwnerCan do everything
ContributorCan create/manage resources but not give access
ReaderCan only view resources

βœ… Summary: RBAC gives permissions based on roles.


12. Azure Monitor – Watch your resources

Definition: Azure Monitor collects data from your resources (like performance, logs, and metrics) and helps you understand what's happening.

Why important: You need to know if your app is running well.

Simple: Like a doctor's check-up for your cloud resources.

Real-life: A developer uses Azure Monitor to see if a VM is running out of memory.

School: The IT team monitors the school's website to see if it's fast.

Home: Not used at home.

Nigerian: A fintech uses Monitor to track transaction processing times.

    Azure Monitor
    β”œβ”€β”€ Metrics (CPU, memory, etc.)
    β”œβ”€β”€ Logs (detailed records)
    └── Alerts (notify when something is wrong)
    

βœ… Summary: Azure Monitor helps you see how your resources are performing.


13. Azure Service Health – Is Azure okay?

Definition: Service Health shows the status of Azure services across regions and alerts you about outages or planned maintenance.

Why important: If Azure has a problem, you need to know.

Simple: Like a weather report for the cloud.

Real-life: A company checks Service Health before blaming their app for slowness.

School: The school checks if Azure is down before calling IT.

Home: You might check if Xbox Live is down.

Nigerian: A startup checks Service Health to know if Azure is having issues.

βœ… Summary: Service Health tells you the status of Azure services.


14. Azure Portal, CLI, PowerShell – Management tools

Definition: These are ways to interact with Azure: Portal (web interface), CLI (command line), and PowerShell (scripting).

Why important: You can manage Azure in different ways.

Simple: Like using a car, bicycle, or walking to get somewhere – different tools for different needs.

Real-life: A developer uses CLI for automation, and the Portal for visual tasks.

School: The IT teacher uses the Portal for easy management.

Home: You can use the Portal to create a free account.

Nigerian: A sysadmin in Lagos uses PowerShell to automate backups.

ToolTypeBest for
PortalGraphical (GUI)Beginners, visual tasks
CLI (Azure CLI)Command lineAutomation, scripts
PowerShellCommand line (Windows-oriented)Windows automation

βœ… Summary: Portal, CLI, and PowerShell are tools to manage Azure.


15. ARM Templates – Infrastructure as Code

Definition: ARM (Azure Resource Manager) templates are JSON files that define your infrastructure in code.

Why important: You can deploy the same environment over and over consistently.

Simple: Like a recipe – follow it to bake the same cake every time.

Real-life: A company uses ARM templates to deploy its production and test environments.

School: The school uses a template to set up a lab for students.

Home: Not used at home.

Nigerian: A startup uses ARM templates to deploy their app in multiple regions.

    ARM Template
    β”œβ”€β”€ VM
    β”œβ”€β”€ Storage
    β”œβ”€β”€ VNet
    └── Deploy β†’ Creates all resources together
    

βœ… Summary: ARM templates let you define your infrastructure as code for repeatable deployments.


πŸ“š Key Vocabulary

  • Cost Management: Tracking and controlling spending.
  • Pricing Calculator: Tool to estimate costs.
  • TCO Calculator: Compares on-premises vs. cloud costs.
  • Tags: Labels to organise resources.
  • Azure Policy: Enforces rules on resources.
  • Resource Lock: Prevents deletion or changes.
  • Microsoft Entra ID: Identity service.
  • SSO: One login for many apps.
  • MFA: Extra security layer.
  • RBAC: Role-based permissions.
  • Azure Monitor: Performance monitoring.
  • Service Health: Status of Azure services.
  • Azure Portal: Web-based management.
  • CLI: Command-line management.
  • PowerShell: Scripting tool.
  • ARM Template: Infrastructure as code.

🧠 Important Concepts

  • Cost control: Use calculators, budgets, and monitoring.
  • Identity and access: Entra ID, SSO, MFA, RBAC.
  • Governance: Policies, locks, tags.
  • Monitoring: Azure Monitor and Service Health.
  • Management: Portal, CLI, PowerShell, ARM templates.

πŸ”’ Step-by-step: Setting up a budget alert

  1. Go to Azure Portal.
  2. Navigate to "Cost Management + Billing".
  3. Select "Budgets".
  4. Click "Add budget".
  5. Set a name and an amount (e.g., ₦100,000 per month).
  6. Set an alert threshold (e.g., 80% of budget).
  7. Add an email to receive alerts.
  8. Create the budget – now you'll get an email if spending goes too high.

🌍 Real-life Examples

  • Cost Management: A retail company uses budgets to avoid overspending.
  • Entra ID: A university uses Entra ID to manage student and staff logins.
  • RBAC: A hospital gives nurses "reader" access and doctors "contributor" access.
  • Azure Monitor: An e-commerce site uses Monitor to track website performance.
  • ARM Templates: A software company uses templates to deploy its app in multiple regions.

πŸ‡³πŸ‡¬ Nigerian Examples

  • Cost Management: A Lagos startup tracks costs with Azure budgets.
  • Entra ID: A Nigerian bank uses Entra ID for employee access.
  • RBAC: A fintech uses RBAC to control who can change payment settings.
  • Azure Monitor: An edtech company monitors its exam platform.
  • ARM Templates: A health tech uses templates to deploy in multiple regions.

🎈 Fun Examples for Kids

  • Budget: Like your pocket money – you need to spend wisely.
  • MFA: Like having a secret code and a password.
  • RBAC: Like in a game – admins have more powers than players.
  • Monitor: Like a fitness tracker for your cloud.
  • Locks: Like locking your bike so no one takes it.

🏠 Everyday Examples

  • Budgeting: Your parents have a monthly budget for food.
  • Tags: You have labels on your school folders.
  • SSO: You use one Google login for many apps.
  • MFA: Your bank sends a code to your phone.
  • Locks: You lock your diary.

πŸ‘©β€πŸ« Teacher Notes

  • Emphasise that management is as important as the technology.
  • Use the captain analogy throughout the module.
  • Relate to Nigerian context: use local examples of budgets and security.
  • Encourage students to think about how they would manage their own cloud.
  • Consider showing the Azure Portal in a live demo.

πŸ§‘β€πŸ€β€πŸ§‘ Parent Tips

  • Discuss with your child how you manage money at home.
  • Explain that Azure has tools to help you stay on budget.
  • Talk about online safety – MFA and strong passwords are important.
  • Ask: "How would you keep your cloud resources safe?"
  • Encourage them to explore Azure's free tools with you.

πŸ’‘ Interesting Facts

  • Azure processes more than 1 trillion requests per day!
  • Microsoft Entra ID has over 500 million active users.
  • Azure Monitor can collect data from on-premises servers too.
  • Some Azure customers save up to 40% with cost management.
  • ARM templates can be shared and reused across teams.

πŸ€” Did You Know?

  • You can set Azure to automatically shut down VMs at night to save money.
  • Azure Policy can block the creation of expensive resources.
  • You can use Azure Monitor to get alerts on your phone.
  • Microsoft Entra ID supports guest users from other companies.
  • You can manage Azure with a mobile app!

🧾 Remember This

  • Plan your budget using the Pricing and TCO calculators.
  • Use tags, policies, and locks to stay organised and secure.
  • Entra ID, SSO, MFA, and RBAC protect your identity and access.
  • Monitor your resources with Azure Monitor and Service Health.
  • Use Portal, CLI, PowerShell, or ARM templates to manage Azure.

⚠️ Common Mistakes

  • Mistake: Not setting a budget and getting a surprise bill.
    Fix: Always set a budget and alert.
  • Mistake: Sharing admin access with everyone.
    Fix: Use RBAC to give minimum permissions.
  • Mistake: Forgetting to enable MFA.
    Fix: Always enable MFA for important accounts.
  • Mistake: Not monitoring resources.
    Fix: Set up Azure Monitor alerts.
  • Mistake: Deleting resources accidentally.
    Fix: Use resource locks.

🌟 Best Practices

  • Set budgets and alerts for all subscriptions.
  • Use tags for organisation and cost allocation.
  • Apply Azure Policy to enforce standards.
  • Lock critical resources.
  • Enable MFA for all users.
  • Monitor performance and set alerts.
  • Use ARM templates for repeatable deployments.
  • Regularly review access with RBAC.

πŸ“Š ASCII Illustrations

Cost management process

    Plan budget β†’ Use resources β†’ Track spending β†’ Adjust
    

RBAC roles

    Owner     β†’  Full control
    Contributor β†’  Can create/update resources
    Reader    β†’  Can only view
    

MFA flow

    Enter password β†’ Enter code from phone β†’ Access granted βœ…
    

πŸ“‹ Comparison tables

Management tools comparison

ToolUser interfaceBest for
PortalGraphicalVisual, beginners
Azure CLICommand lineScripts, automation
PowerShellCommand lineWindows automation
ARM templatesJSON codeRepeatable deployments

Cost calculators comparison

CalculatorPurpose
Pricing CalculatorEstimate cost of Azure services
TCO CalculatorCompare on-premises vs. cloud costs

πŸ“Œ End-of-module Summary

In this module, we learned about the key tools and practices for managing and governing Azure. We covered:

  • Cost Management: Using calculators, budgets, and Cost Management + Billing to control spending.
  • Identity and Access: Microsoft Entra ID, SSO, MFA, and RBAC to secure your resources.
  • Governance: Tags, Azure Policy, and resource locks to enforce rules and protect resources.
  • Monitoring: Azure Monitor and Service Health to watch performance and status.
  • Management Tools: Portal, CLI, PowerShell, and ARM templates to manage your Azure environment.
  • Nigerian examples: We saw how local businesses use these tools.

You now have a complete understanding of how to manage and govern Azure. This is the final module of the AZ-900 course – you are ready to take the exam!

Review all three modules, practice with the tools, and you'll be a cloud expert in no time. Good luck! πŸŽ‰

❓ Frequently Asked Questions

  1. How do I estimate my Azure costs? – Use the Pricing Calculator.
  2. What is the TCO calculator? – It compares on-premises vs. cloud costs.
  3. How can I track my spending? – Use Cost Management + Billing.
  4. What are tags? – Labels to organise resources.
  5. What is Azure Policy? – A service to enforce rules on resources.
  6. What is a resource lock? – Prevents deletion or changes.
  7. What is Microsoft Entra ID? – The identity service for Azure.
  8. What is MFA? – Multi-Factor Authentication adds extra security.
  9. What is RBAC? – Role-Based Access Control assigns permissions.
  10. What is an ARM template? – Code that defines your infrastructure.

πŸ“ Review Questions

  1. What is the purpose of the Pricing Calculator?
  2. What does the TCO calculator compare?
  3. How do tags help with cost management?
  4. What is Azure Policy used for?
  5. What is the difference between a resource lock and a policy?
  6. What is Microsoft Entra ID?
  7. What does SSO stand for and what does it do?
  8. Why is MFA important?
  9. What are the three built-in RBAC roles?
  10. What does Azure Monitor do?
  11. What is Service Health?
  12. Name three tools to manage Azure.
  13. What is an ARM template?
  14. Give a Nigerian example of using Azure Policy.
  15. Why should you set a budget in Azure?

✏️ Fill-in-the-Blank

  1. ___________ helps you estimate costs before using a service. (Pricing Calculator)
  2. The ___________ calculator compares on-premises and cloud costs. (TCO)
  3. ___________ are labels you add to resources for organisation. (Tags)
  4. ___________ enforces rules on your resources. (Azure Policy)
  5. A ___________ lock prevents deletion of a resource. (resource)
  6. ___________ is the identity service in Azure. (Microsoft Entra ID)
  7. ___________ lets you log in once to many apps. (SSO)
  8. ___________ adds an extra security layer to logins. (MFA)
  9. ___________ assigns permissions based on roles. (RBAC)
  10. ___________ is a tool that collects performance data from resources. (Azure Monitor)

βœ… True or False

  1. The Pricing Calculator is used to track spending. (False – it's for estimating)
  2. Tags help organise resources. (True)
  3. Azure Policy allows you to delete resources. (False – it enforces rules)
  4. Resource locks prevent accidental deletion. (True)
  5. Microsoft Entra ID is only for Azure resources. (False – it can be used for other apps too)
  6. SSO means you need multiple passwords. (False – it's one login)
  7. MFA is optional for all accounts. (True – but recommended)
  8. RBAC gives permissions based on roles. (True)
  9. Azure Monitor is a cost management tool. (False – it monitors performance)
  10. ARM templates are used for manual deployments. (False – they are for automated/repeatable deployments)

πŸ§ͺ Multiple Choice Questions

  1. Which tool estimates the cost of Azure services?
    a) TCO calculator b) Pricing Calculator c) Cost Management d) Azure Monitor
    Answer: b
  2. What does TCO stand for?
    a) Total Cost Overview b) Total Cost of Ownership c) Total Cloud Optimisation d) True Cost Operations
    Answer: b
  3. Which of these is a label for organising resources?
    a) Policy b) Lock c) Tag d) Role
    Answer: c
  4. Which service enforces rules on resources?
    a) Azure Policy b) Azure Monitor c) Cost Management d) Entra ID
    Answer: a
  5. What does a resource lock do?
    a) Prevents deletion b) Enforces a rule c) Monitors performance d) Tags resources
    Answer: a
  6. What is Microsoft Entra ID?
    a) A storage service b) An identity service c) A monitoring tool d) A cost calculator
    Answer: b
  7. What does SSO allow?
    a) One login for many apps b) Multiple passwords c) Extra security d) Role assignment
    Answer: a
  8. Which adds an extra security layer to logins?
    a) SSO b) MFA c) RBAC d) Policy
    Answer: b
  9. What are the three built-in RBAC roles?
    a) Admin, User, Guest b) Owner, Contributor, Reader c) Creator, Editor, Viewer d) Manager, Developer, Tester
    Answer: b
  10. Which tool monitors performance?
    a) Azure Monitor b) Service Health c) Cost Management d) Pricing Calculator
    Answer: a
  11. What does Service Health show?
    a) Your spending b) Status of Azure services c) Your VM performance d) Your user roles
    Answer: b
  12. Which is a command-line tool to manage Azure?
    a) Portal b) CLI c) ARM template d) Monitor
    Answer: b
  13. What is an ARM template?
    a) A monitoring tool b) A cost calculator c) Infrastructure as code d) An identity service
    Answer: c
  14. Which Nigerian company uses Azure for fintech?
    a) Dangote b) Flutterwave c) NNPC d) Airtel
    Answer: b
  15. Why should you set a budget in Azure?
    a) To monitor performance b) To avoid overspending c) To enforce rules d) To lock resources
    Answer: b

πŸ”— Matching Exercises

Match the tool/service with its purpose.

Tool/ServicePurpose
Pricing CalculatorEstimate costs
Cost ManagementTrack spending
TagsOrganise resources
Azure PolicyEnforce rules
Resource LockPrevent deletion
Entra IDManage identities
RBACAssign permissions
Azure MonitorMonitor performance
Service HealthShow service status
ARM TemplateInfrastructure as code

✍️ Short Answer Questions

  1. Explain how the Pricing Calculator helps you.
  2. What is the difference between Azure Policy and a resource lock?
  3. Why is MFA important for cloud security?
  4. Describe how RBAC works in Azure.
  5. What is the benefit of using ARM templates?

🧩 Scenario-based Exercises

Scenario 1: A Nigerian company wants to move to Azure but is worried about costs. Which tools would you recommend to help them plan and track spending?

Scenario 2: A school wants to make sure that only teachers can create resources, and students can only view them. Which Azure service would you use?

Scenario 3: A bank has a critical database and wants to ensure it is never deleted by mistake. What should they use?

πŸ‘₯ Group Activity

In groups, design a governance plan for a Nigerian company using Azure. Include:

  • How you would manage costs.
  • How you would handle identity and access.
  • What policies and locks you would use.
  • How you would monitor the environment.

πŸ§‘ Individual Activity

Write down a list of tags you would use for a cloud project. Include tags for project, department, environment, and cost centre.

πŸ’¬ Classroom Discussion Questions

  1. Why is it important to manage costs in the cloud?
  2. How would you explain MFA to a grandparent?
  3. What would happen if a company didn't use RBAC?
  4. How can Azure Monitor help a business?
  5. Why is governance important for Nigerian companies?

πŸ› οΈ Mini Project

Governance Plan: Create a governance plan for a fictional company. Include cost management, identity and access, policies, monitoring, and a management strategy. Present your plan to the class.

πŸ’» Practical Assignment

If you have an Azure account, try the following:

  1. Set up a budget alert.
  2. Add tags to a resource group.
  3. Create a simple Azure Policy (e.g., allowed regions).
  4. Enable MFA on your account (if possible).

πŸ† Challenge Exercise

Research how to create an ARM template for a simple VM deployment. Write a basic JSON template and share it with the class.

πŸ”‘ Quiz Answers (Multiple Choice)

  1. b
  2. b
  3. c
  4. a
  5. a
  6. b
  7. a
  8. b
  9. b
  10. a
  11. b
  12. b
  13. c
  14. b
  15. b

🎁 Key Takeaways

  • Cost Management: Use calculators, budgets, and monitoring.
  • Identity: Entra ID, SSO, MFA, and RBAC are essential for security.
  • Governance: Tags, policies, and locks keep things in order.
  • Monitoring: Azure Monitor and Service Health help you stay informed.
  • Management: Portal, CLI, PowerShell, and ARM templates give you flexibility.
  • These tools are used by Nigerian companies to succeed in the cloud.

πŸš€ What's Next?

Congratulations! πŸŽ‰ You have completed all three modules of the Azure Fundamentals AZ-900 course.

You are now ready to take the AZ-900 exam. Here's how to prepare:

  • Review all three modules – there are three main exam domains.
  • Practice with the official Microsoft Learn modules.
  • Take practice exams to test your knowledge.
  • Try hands-on labs in Azure (free account).
  • Focus on areas where you feel less confident.

Good luck, future cloud expert! β˜οΈπŸš€


πŸ† You have completed the AZ-900 course! Keep learning and exploring the cloud. 🌟

πŸ† Get Certified

πŸ”’

Earn this certificate

Every lesson is already free to read. Sign up, pass the exam, and unlock Practice Tools plus a verified certificate with your name on it β€” ₦4,000/month.

πŸŽ“ Sign Up & Unlock for ₦4,000/month
πŸ› οΈ Practice Tools
Hands-on simulators & labs - subscription required.
β†’
🎯 Internship Tasks
Real-world tasks to build your portfolio - try them free for 7 days, no card required.
β†’