Azure AZ-900 Complete Review Guide 2026–2027
Every exam topic in a 19-page Arabic PDF, ordered from the heaviest unit to the lightest. The first three chapters alone cover about 100% of the exam questions.
- 19Pages
- 52Key points
- 18Common mistakes
- 24Flashcards
Guide map
Each chapter is one exam unit, ordered by its weight in the real exam.
| Chapter | Unit | Weight | Exam questions | Key points |
|---|---|---|---|---|
| 1 | Describe Azure architecture and services | 38% | 17 | 19 |
| 2 | Describe Azure management and governance | 33% | 15 | 17 |
| 3 | Describe cloud concepts | 28% | 13 | 16 |
Chapter 1 in full: Describe Azure architecture and services
38% of the exam, about 17 questions. These are its key points, as in the guide.
- A region is a set of datacenters in a geographic area; region pairs are in the same geography and support disaster recovery with staged updates.
- Availability zones are physically separate datacenters in a region with independent power, cooling and networking.
- Sovereign regions such as Azure Government and Azure China are isolated for compliance.
The rest of chapter 1, on this page
- Hierarchy: management groups contain subscriptions; subscriptions contain resource groups; resource groups contain resources.
- A resource belongs to exactly one resource group; resource groups cannot be nested, and deleting a group deletes its resources.
- Azure Virtual Machines give full control; virtual machine scale sets add automatic scaling; availability sets and zones protect against failures.
- Containers: Azure Container Instances run containers quickly; Azure Kubernetes Service orchestrates them; Azure App Service hosts web apps and APIs.
- Azure Virtual Desktop delivers desktops and apps from the cloud; Azure Functions runs event-driven code.
- A virtual network connects resources privately; subnets segment it; network security groups filter traffic; peering connects virtual networks.
- VPN Gateway sends encrypted traffic over the internet; ExpressRoute is a private connection that does not use the public internet.
- Azure Load Balancer works at layer 4; Application Gateway at layer 7 with web firewall options; Azure DNS hosts domains; Azure Firewall filters traffic centrally.
- Storage account services: Blob (objects), Files (file shares), Queue (messages), Table (NoSQL) and Disk (VM disks).
- Redundancy: LRS keeps three copies in one datacenter, ZRS across zones, GRS replicates to a secondary region, GZRS combines zones and a second region.
- Blob access tiers: hot, cool, cold and archive; archive is cheapest to store but needs rehydration to read.
- Migration tools: Azure Migrate for servers, Data Box for offline transfer, AzCopy for command-line copying and Azure File Sync for on-premises file servers.
- Microsoft Entra ID is the cloud identity service supporting single sign-on, multifactor authentication and passwordless sign-in; Conditional Access applies policies at sign-in.
- Azure role-based access control assigns roles at a scope (management group, subscription, resource group or resource) and inherits downward.
- Zero Trust principles: verify explicitly, use least privilege access, assume breach; defense in depth layers security from physical to data.
- Microsoft Defender for Cloud assesses security posture and protects workloads across Azure, hybrid and multicloud.
Common mistakes in this chapter
- A subscription is a billing and access boundary; a resource group is not.
- Resource groups cannot be nested.
- ExpressRoute is not over the public internet; VPN is.
- Entra ID is not the same as on-premises Active Directory Domain Services.
- LRS does not protect against datacenter loss.
- Authentication proves identity; authorization decides what that identity may do.
The other chapters are in the full guide
One purchase · lifetime access · review guide included
7-day review plan
The chapters are spread over 6 days by weight so each day carries a similar load. Day 7 is a full exam.
Day 1 · 38% of the exam
Chapter 1: Describe Azure architecture and services
Day 2 · 33% of the exam
Chapter 2: Describe Azure management and governance
Day 3 · 28% of the exam
Chapter 3: Describe cloud concepts
Before you read: see your score today
10 free questions from the main units, no sign-up. Then you know which chapter to start with.
Try 10 free questions and see your levelA look at each chapter
The first three key points of each chapter, as they appear in the guide (in Arabic in the PDF).
Chapter 1: Describe Azure architecture and services
- A region is a set of datacenters in a geographic area; region pairs are…
- Availability zones are physically separate datacenters in a region with independent power, cooling and…
- Sovereign regions such as Azure Government and Azure China are isolated for compliance.
Chapter 2: Describe Azure management and governance
- Cost factors
- Inbound data transfer is generally free; outbound data transfer is charged.
- The Pricing Calculator estimates the cost of Azure services before deployment; the Total Cost…
Chapter 3: Describe cloud concepts
- Cloud computing delivers computing services over the internet on demand; you pay for what…
- Shared responsibility
- Responsibility for the operating system, network controls and applications shifts toward the provider as…
The full guide comes with lifetime access
The full guide (19 pages) is included with lifetime access to this exam, together with every question and full mock exam. Chapter 1 is free for everyone.
Questions about the guide
Is the guide free?
Chapter 1 is free to read on the guide page. The full guide comes with lifetime access to this exam; 7-day access does not include it.
Is it up to date for 2026–2027?
Yes. Unit weights and exam facts follow what the exam body last published, and the last check date is printed in the guide. If the standards change we update the file and buyers download the new version.
Does the guide have questions?
No. The guide covers key points and common mistakes; scoring, weak-area practice and full mock exams are on the site.
Can I read it on my phone?
Yes. A5 pages in a single column, with chapters linked from the contents.
- Pages
- 19
- Edition
- 1448 AH · 2026–2027
- Language
- Arabic
- Last updated
Buy this exam
Pick the access that lasts until your test date.
Included
- Timed supplementary practice sessions: 45 questions in 45 minutes
- 500 questions, every option explained with its source
- Practice that starts with your weakest units, plus a review of your mistakes
- Complete Review Guide 2026–2027 (PDF), with lifetime access only
Continue with your Google account and you go straight to the payment page.
You pay on the Waffo Pancake checkout page (in English). The amount is in US dollars and your bank converts it to riyals. One payment with no automatic renewal, by Visa, Mastercard (a mada card with either logo works too), Apple Pay or Google Pay. Your statement shows "WAFFO". Purchases are not refundable.