Pick a practical learning path or Microsoft exam-readiness route, then move from concepts into Azure CLI command paths, Compare decisions, Resource Graph discovery, and safe-first Guided Azure Runbooks. Learn is the calm first layer before you operate or sit for an exam.
Each exam path is designed to connect Microsoft Learn objectives to AzureGlossary terms, Compare decisions, command-safe paths, Resource Graph discovery, and Guided Azure Runbooks. The goal is not flashcards alone; it is scenario fluency.
1Learn the objectiveStart with the official Microsoft Learn page and the linked glossary concepts.2Practice the decisionUse Compare cards to answer “which Azure option should I use?” in exam wording.3Run safe discoveryUse Resource Graph and read-only CLI checks before any hands-on lab.4Prove with casesUse scenario case studies to connect concepts, constraints, commands, and runbook evidence.
Exam study mode
Choose an exam, then study through Learn, Drill, Lab, and Review.
Exam cards should feel worth paying for: objective modules, scenario case studies, Compare decision drills, safe command paths, Resource Graph discovery, runbook labs, and a missed-question repair loop.
Pick an exam card.The study workspace will show the four modes, modules, drills, safe labs, and review loop for that exam.
Scenario case studies
Practice like the exam is a real Azure decision.
These case studies are compact by design: they reuse the existing glossary, Compare, command, Resource Graph, and runbook layers instead of duplicating long textbook chapters inside the ZIP.
Exam objective mapAI workloads and Azure AI servicesgenerative AI conceptsresponsible AI conceptsfoundational technical skills for AI solutions
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesAI-901 scenario: choose the right Azure service under constraints.AI-901 scenario: explain the safe check before making the change.AI-901 case 1: Design a grounded AI assistantPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
An AI fundamentals case study for choosing AI workloads, responsible AI controls, generative AI, search/RAG, Vision, Speech, Language, and Document Intelligence.
ForAI-901 candidates who need foundational AI scenario practice with Azure AI services and responsible AI concepts.
You will understandExplain AI workload types, service boundaries, and responsible AI controls without jumping into production changes too early.
Exam objective mapAI workloads and considerationsMachine learning on AzureComputer vision workloadsNatural language processing workloads
Study modulesAI workload categoriesAzure AI service selectionResponsible AI, content safety, and generative AI basicsAI workload categories and Azure AI service selectionCase studiesChoose service for document extraction vs image OCR.Explain why RAG and model generation are different responsibilities.AI-901 case 1: Design a grounded AI assistantPractice drillsMap an AI app into retrieval, generation, safety, and monitoring parts.Compare prompt shields and content safety.Preview az cognitiveservices account list, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
A two-pass beginner AZ-900 path for cloud concepts, Azure architecture/services, management/governance, scenario drills, confidence routes, safe labs, and mistake repair.
ForBeginners, students, career changers, and non-admin technologists preparing for Azure Fundamentals.
You will understandUnderstand the Azure scope model, core service categories, management/governance tools, and cost/monitoring language before moving into role-based exams.
Exam objective mapDescribe cloud concepts (25-30%)Describe Azure architecture and services (35-40%)Describe Azure management and governance (30-35%)
Study modulesCloud computing, shared responsibility, cloud models, and consumption pricingCloud benefits: availability, scalability, reliability, security, governance, and manageabilityService types and responsibility: IaaS, PaaS, SaaS, and serverlessAzure global architecture: regions, zones, datacenters, subscriptions, management groups, and resource groupsCase studiesAZ-900 beginner case 1: Pick public, private, or hybrid cloud for a small companyAZ-900 beginner case 2: Separate customer responsibility from Microsoft responsibilityAZ-900 beginner case 3: Choose availability zones, scale, and a basic reliability storyPractice drillsA prompt mentions identity directory, billing boundary, and deployed resources. Decide whether the answer is tenant, subscription, or resource group.A company needs governance across many subscriptions. Decide when a management group is the better scope than a single subscription.A prompt asks where related Azure resources are organized. Decide when the answer is resource group instead of an individual resource.
Exam objective mapDescribe cloud concepts (25-30%)Describe Azure architecture and services (35-40%)Describe Azure management and governance (30-35%)
Study modulesCloud computing, shared responsibility, cloud models, and consumption pricingCloud benefits: availability, scalability, reliability, security, governance, and manageabilityService types and responsibility: IaaS, PaaS, SaaS, and serverlessAzure global architecture: regions, zones, datacenters, subscriptions, management groups, and resource groupsCase studiesAZ-900 beginner case 1: Pick public, private, or hybrid cloud for a small companyAZ-900 beginner case 2: Separate customer responsibility from Microsoft responsibilityAZ-900 beginner case 3: Choose availability zones, scale, and a basic reliability storyPractice drillsA prompt mentions identity directory, billing boundary, and deployed resources. Decide whether the answer is tenant, subscription, or resource group.A company needs governance across many subscriptions. Decide when a management group is the better scope than a single subscription.A prompt asks where related Azure resources are organized. Decide when the answer is resource group instead of an individual resource.
Exam objective mapdescribe core data conceptsidentify considerations for relational data on Azuredescribe non-relational data servicesdescribe analytics workloads on Azure
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesDP-900 scenario: choose the right Azure service under constraints.DP-900 scenario: explain the safe check before making the change.DP-900 case 1: Choose the right service under constraintsPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
Exam objective mapDescribe core data conceptsIdentify considerations for relational data on AzureDescribe non-relational data on AzureDescribe analytics workloads on Azure
Study modulesRelational vs nonrelational dataStorage, analytics, and eventing servicesBasic operations, security, and cost considerationsCore data concepts, transactional vs analytical workloadsCase studiesChoose between Azure SQL and Cosmos DB for an app workload.Choose between Blob/Data Lake storage for analytics.DP-900 case 1: Choose the right service under constraintsPractice drillsUse Compare to classify the workload before choosing a service.List storage and database resources read-only.Preview az storage account list, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
Exam objective mapDescribe security, compliance, and identity conceptsDescribe Microsoft Entra capabilitiesDescribe Microsoft security solutionsDescribe Microsoft compliance solutions
Study modulesIdentity and access conceptsGovernance and compliance controlsSecurity monitoring and posture conceptsSecurity, compliance, identity, and shared responsibility conceptsCase studiesExplain group assignment vs direct role assignment.Use Sentinel/Defender terms without making production changes.SC-900 case 1: Choose the right service under constraintsPractice drillsList RBAC assignments read-only.Compare policy deny and locks.Preview az ad user list, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesSC-900 scenario: choose the right Azure service under constraints.SC-900 scenario: explain the safe check before making the change.SC-900 case 1: Choose the right service under constraintsPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
A role-based AI Engineer path for planning Azure AI solutions, implementing generative AI and agents, computer vision, NLP, knowledge mining, and secure AI operations. Includes a transition warning because AI-102 is scheduled to retire.
ForDevelopers and AI engineers preparing for AI-102 while it remains available, or bridging older AI-102 material into the newer Foundry/agent-focused AI exam direction.
You will understandUnderstand how Azure AI services, Azure OpenAI, AI Search, agents, prompt safety, Document Intelligence, Vision, Speech, Language, and secure deployment decisions fit together.
Exam objective mapPlan and manage an Azure AI solutionImplement generative AI solutionsImplement an agentic solutionImplement computer vision solutions
Study modulesAI solution planning and resource boundariesGenerative AI and RAG implementationAgentic solution design and tool riskVision, Speech, Language, and Document Intelligence workloadsCase studiesBuild a support knowledge bot: choose AI Search + Azure OpenAI, then explain grounding, citations, and prompt-safety controls.Automate invoice extraction: choose Document Intelligence layout/prebuilt/custom model and explain confidence/evidence checks.Secure an AI app release: compare API keys, managed identity, private endpoint, diagnostics, and content safety.Practice drillsPreview az cognitiveservices account deployments and metrics before changing model capacity.Map a RAG flow from data source to index, vector field, semantic ranker, model deployment, and app identity.Use Compare to explain why RAG solves private knowledge and fine-tuning solves behavior/pattern adaptation.
AI-102 case study: RAG and agent production support
A hands-on AI Engineer scenario that connects AI Search, Azure OpenAI, Foundry agents, prompt safety, managed identity, private endpoints, monitoring, and evidence collection.
ForAI-102 and AI-103 candidates who want a realistic AI app scenario rather than isolated AI service definitions.
You will understandDesign and defend a safe RAG/agent architecture with grounding, retrieval quality, identity, network boundaries, monitoring, and rollback evidence.
Exam objective mapGenerative AI and RAGAgentic solution implementationAI service security and monitoringKnowledge mining and information extraction
Study modulesRAG architecture and retrieval qualityAgent tool boundaries and approval gatesAI service identity, network, telemetry, and safetyPlan and manage Azure AI resources and service boundariesCase studiesSupport assistant must answer only from approved policy documents.Agent can search incidents but must not change Azure resources without approval.AI-102 case 1: Design a grounded AI assistantPractice drillsList index, deployment, and private endpoint evidence before release.Use Compare to pick RAG vs fine-tuning and agent vs chat completion.Preview az cognitiveservices account show, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
A forward-looking AI apps and agents path for Microsoft Foundry, Python app development, generative AI, agentic solutions, computer vision, text analysis, and information extraction.
ForAI app developers who want the newer Foundry, agents, and Python-oriented exam route rather than only older AI-102 material.
You will understandUnderstand how Azure AI Foundry, agents, generative AI apps, evaluation, tool use, text/image/document workloads, and production security fit together.
Exam objective mapPlan and manage Azure AI solutionsImplement generative AI and agentic solutionsImplement computer vision solutionsImplement text analysis solutions
Study modulesFoundry projects, model deployments, and agent architecturePrompt flow, evaluation, and code-first app orchestrationRAG, vector search, indexing, and groundingVision, language, speech, and document extraction workloadsCase studiesDesign an agent that can search policies but cannot change resources without approval.Create a RAG assistant with AI Search retrieval and explain when not to fine-tune.Choose between prompt flow and code-first orchestration for a production Python AI app.Practice drillsList model deployments and monitoring signals before changing app behavior.Explain every tool an agent can call, what identity it uses, and what data it can reach.Compare prompt shields, content safety, and human review for adversarial input.
A role-based path for identity, governance, storage, compute, virtual networking, backup, and monitoring scenarios that administrators must understand.
ForHands-on admins preparing for Azure Administrator Associate who need scenario practice beyond definitions.
You will understandUnderstand how administrator exam scenarios connect scope, RBAC, storage, compute, networking, monitoring, and backup decisions.
Exam objective mapManage Azure identities and governanceImplement and manage storageDeploy and manage Azure compute resourcesImplement and manage virtual networking
Study modulesScope first: tenants, subscriptions, management groups, and resource groupsMicrosoft Entra users, groups, guests, and password recovery boundariesAccess control and governance: RBAC, Policy, locks, tags, budgets, and AdvisorStorage access: firewalls, virtual networks, SAS, stored access policies, keys, and identityCase studiesAZ-104 case 1: Remove broad access without breaking operationsAZ-104 case 2: Enforce required tags without blocking emergency remediationAZ-104 case 3: Share blob data without exposing the storage accountPractice drillsIn an AZ-104 scenario, decide when tenant vs subscription is the better choice, then state the scope, risk, and one evidence check.In an AZ-104 scenario, decide when management group vs subscription is the better choice, then state the scope, risk, and one evidence check.In an AZ-104 scenario, decide when resource group vs resource is the better choice, then state the scope, risk, and one evidence check.
Exam objective mapManage Azure identities and governanceImplement and manage storageDeploy and manage Azure compute resourcesImplement and manage virtual networking
Study modulesScope first: tenants, subscriptions, management groups, and resource groupsMicrosoft Entra users, groups, guests, and password recovery boundariesAccess control and governance: RBAC, Policy, locks, tags, budgets, and AdvisorStorage access: firewalls, virtual networks, SAS, stored access policies, keys, and identityCase studiesAZ-104 case 1: Remove broad access without breaking operationsAZ-104 case 2: Enforce required tags without blocking emergency remediationAZ-104 case 3: Share blob data without exposing the storage accountPractice drillsIn an AZ-104 scenario, decide when tenant vs subscription is the better choice, then state the scope, risk, and one evidence check.In an AZ-104 scenario, decide when management group vs subscription is the better choice, then state the scope, risk, and one evidence check.In an AZ-104 scenario, decide when resource group vs resource is the better choice, then state the scope, risk, and one evidence check.
A developer path for compute, App Service, Functions, storage, identity, API integration, monitoring, and deployment decisions.
ForDevelopers preparing for Azure Developer Associate who need to connect code-facing services to deployment and operations choices.
You will understandUnderstand the Azure developer services, app identity model, data connections, API exposure, storage choices, and monitoring signals that appear in scenario questions.
Exam objective mapdevelop Azure compute solutionsdevelop for Azure storageimplement Azure securitymonitor and troubleshoot Azure solutions
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesAZ-204 scenario: choose the right Azure service under constraints.AZ-204 scenario: explain the safe check before making the change.AZ-204 case 1: Choose the right service under constraintsPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
Exam objective mapDevelop Azure compute solutionsDevelop for Azure storageImplement Azure securityMonitor and troubleshoot Azure solutions
Study modulesCompute and hosting choicesIdentity and secretless app accessMonitoring, diagnostics, and deployment safetyApp Service, Functions, Container Apps, and hosting tradeoffsCase studiesMove a connection string from app settings to Key Vault-backed configuration.Choose between slot swap and direct deployment.AZ-204 case 1: Choose the right service under constraintsPractice drillsCheck app identity and Key Vault access before release.Read App Insights errors before changing code.Preview az webapp show, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesLAB scenario: choose the right Azure service under constraints.LAB scenario: explain the safe check before making the change.Practice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
An architect path for identity/governance, monitoring, data storage, business continuity, and infrastructure design tradeoffs.
ForAdministrators and architects preparing for Azure Solutions Architect Expert design scenarios.
You will understandUnderstand how AZ-305 design questions force tradeoffs around governance, monitoring, storage, resiliency, networking, and infrastructure patterns.
Exam objective mapdesign identity governance and monitoring solutionsdesign data storage solutionsdesign business continuity solutionsdesign infrastructure solutions
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesAZ-305 scenario: choose the right Azure service under constraints.AZ-305 scenario: explain the safe check before making the change.AZ-305 case 1: Choose the right service under constraintsPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
Exam objective mapDesign identity, governance, and monitoring solutionsDesign data storage solutionsDesign business continuity solutionsDesign infrastructure solutions
Study modulesGlobal ingress and resiliencyData platform choice and availabilityGovernance, monitoring, and cost constraintsDesign identity, governance, and monitoring solutionsCase studiesDesign a public web app with global routing and private backend access.Choose Cosmos DB consistency/throughput for a global workload.AZ-305 case 1: Choose the right service under constraintsPractice drillsCompare Front Door WAF and Application Gateway WAF.Use Resource Graph to inventory exposure before a design review.Preview az account show, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
Exam objective mapConfigure processes and communicationsDesign and implement source controlDesign and implement build/release pipelinesDevelop security and compliance plans
Study modulesIaC and deployment modesPipeline identity and secretless releaseMonitoring, rollback, and governance gatesProcesses, communication, boards, repos, and governanceCase studiesA pipeline needs to deploy without storing a client secret.A complete-mode deployment would remove unmanaged resources.AZ-400 case 1: Design a release gatePractice drillsRun what-if before deployment.Map federated credential vs service principal secret tradeoffs.Preview az deployment group what-if, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
A DevOps path for deployment strategies, pipelines, infrastructure as code, release safety, monitoring, and security/compliance planning.
ForDevelopers, administrators, and DevOps engineers preparing for the DevOps Engineer Expert exam.
You will understandUnderstand release patterns, pipeline health, infrastructure as code, rollout safety, secrets, observability, and compliance handoffs.
Exam objective mapdesign and implement processes and communicationsdesign and implement source controldesign and implement build and release pipelinesdevelop a security and compliance plan
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesAZ-400 scenario: choose the right Azure service under constraints.AZ-400 scenario: explain the safe check before making the change.AZ-400 case 1: Design a release gatePractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
Exam objective mapdesign and implement core networking infrastructuredesign and implement hybrid connectivitydesign application delivery servicesdesign private access to Azure services
Study modulesOfficial objective reviewConcept vocabulary mapCompare decision drillsSafe lab and evidence reviewCase studiesAZ-700 scenario: choose the right Azure service under constraints.AZ-700 scenario: explain the safe check before making the change.AZ-700 case 1: Trace traffic path and DNS resolutionPractice drillsPreview related glossary terms.Open related Compare cards.Run read-only command/resource discovery where appropriate.
Exam objective mapDesign and implement core networking infrastructureDesign and implement connectivity servicesDesign and implement application delivery servicesDesign and implement private access to Azure services
Study modulesCore networking and routingPrivate access and DNSFirewall, WAF, ingress, and hybrid connectivityCore VNet, subnet, IP, routing, and name-resolution patternsCase studiesA private endpoint works by IP but fails by hostname.A spoke VNet cannot reach a shared service through the hub.AZ-700 case 1: Trace traffic path and DNS resolutionPractice drillsCheck private DNS records before changing network rules.Compare route tables and NSGs when troubleshooting connectivity.Preview az network vnet list, identify whether it is read-only or review-needed, and copy the safe path before running any lab command.
When a learning path turns into real operational work, use Azure Resource Graph first. It gives you read-only inventory and evidence before you open a runbook or copy a risky Azure CLI command.