Chapter 2 of 3 · Microsoft AZ-900

Describe Azure Architecture and Services

Core components, compute and networking, storage, and identity and security.

  • 4topics
  • 22 minfast track
  • 3diagrams and exhibits
  • 35–40%of the exam

Topics in this chapter

Take them in order, or jump to the one you need.

  1. 1Core Architectural Components of AzureAZ-900 Azure architecture: regions, region pairs, sovereign regions, availability zones, datacenters, resource groups…Diagram5 min
  2. 2Compute and Networking ServicesAZ-900 compute and networking: containers, VMs, functions, scale sets, availability sets, Virtual Desktop, VNets, peering, VPN…Diagram6 min
  3. 3Azure Storage ServicesAZ-900 Azure storage: Blob, Files, Queue, Table and disks, access tiers, LRS, ZRS, GRS and GZRS redundancy, AzCopy, File Sync…Diagram6 min
  4. 4Identity, Access and SecurityAZ-900 identity and security: Microsoft Entra ID, SSO, MFA, passwordless, external identities, Conditional Access, RBAC, Zero…5 min

About this chapter

What this chapter covers

This is the largest domain on the exam. It explains how Azure is organised physically and logically, and then walks through the main service families: compute, networking, storage, and identity and security.

Most questions ask you to match a need to the right service, so the aim is to know what each service is for and what it is not for.

How the topics fit together

The pages go from the structure that holds everything, to what runs and connects, to where data lives, and finally to who can reach it.

Architectureregions, zones, subscriptionsCompute and networkingrun and connectStoragekeep dataIdentity and securitycontrol access
  • Core architectural components covers regions, availability zones, resource groups, subscriptions and management groups.
  • Compute and networking covers virtual machines, containers, functions, virtual networks, VPN Gateway and ExpressRoute.
  • Storage services covers storage types, tiers, redundancy, file transfer tools and migration options.
  • Identity, access and security covers Microsoft Entra ID, authentication, Conditional Access, RBAC, Zero Trust and Defender for Cloud.
Exam tip

Build a one page table of services with a short job description for each. Most questions in this domain are "which service does this?".

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

  • What it is: the idea in plain words.
  • How it works: the mechanism, with diagrams and tables.
  • What to remember for the exam: the facts to memorise.
  • Common mistakes: the classic traps.
  • Check yourself: three questions to test your understanding.

Ready for more practice?

The full Microsoft AZ-900 question bank has 500 questions, with timed practice exams and an explanation for every answer.

This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.