Learn by objective, then practice the decision.

Start here fundamentals 55 min

Azure CLI Command Atlas Foundations

Learn how to move from Azure concepts to safe command-line discovery, provisioning, configuration, and cleanup.

For New Azure builders and operators who need the control-plane vocabulary before they touch production.

You will understand Understand the Azure scope ladder, control plane, resource organization, and basic command safety model.

Azure CLI Azure subscription Resource group Azure Resource Manager Tags

Command paths az account show az group list az resource list

Compare decisions Diagnostic setting vs Activity Log Management group vs Subscription Resource group vs Resource

Guided runbooks Check Current Account And Subscription Switch Azure Subscription Safely Inventory Resource Groups And Resources

Resource Graph discovery Review Front Door WAF policy and origin exposure Investigate Data Factory trigger, pipeline, and integration runtime before rerun Resource group tag and resource inventory

Preview in search Practice related ideas az account Show sidecar Mark reviewed

Start here fundamentals 45 min

Azure Foundations

Start with tenant, subscription, resource groups, ARM, regions, tags, RBAC, and CLI context.

For New Azure builders and operators who need the control-plane vocabulary before they touch production.

You will understand Understand the Azure scope ladder, control plane, resource organization, and basic command safety model.

Azure tenant Azure subscription Management group Resource group Azure Resource Manager

Command paths az account show az group list az resource list

Compare decisions Management group vs Subscription Key Vault RBAC vs Access Policy Azure RBAC vs Azure Policy

Guided runbooks Check Current Account And Subscription Switch Azure Subscription Safely Inventory Resource Groups And Resources

Resource Graph discovery Review Front Door WAF policy and origin exposure Resource groups with missing owner tags Subscriptions visible to Resource Graph

Preview in search Practice related ideas az account Show sidecar Mark reviewed

Start here intermediate 65 min

Core Platform Governance

Management groups, scopes, Resource Manager, policy, locks, tags, and guardrails for enterprise Azure foundations.

For New Azure builders and operators who need the control-plane vocabulary before they touch production.

You will understand Understand the Azure scope ladder, control plane, resource organization, and basic command safety model.

Azure tenant Root management group Management group hierarchy Management group scope Azure subscription

Command paths az account show az group list az resource list

Compare decisions Management group vs Subscription Azure Policy vs Management Locks Control Plane vs Data Plane

Guided runbooks Check Current Account And Subscription Switch Azure Subscription Safely Inventory Resource Groups And Resources

Resource Graph discovery Review Front Door WAF policy and origin exposure Management groups Missing Owner/CostCenter tags

Preview in search Practice related ideas az account Show sidecar Mark reviewed

Deep dive intermediate 70 min

Infrastructure as Code with Bicep

Move from ARM and Resource Manager basics into Bicep modules, target scopes, what-if, deployment history, and safe rollout patterns.

For New Azure builders and operators who need the control-plane vocabulary before they touch production.

You will understand Understand the Azure scope ladder, control plane, resource organization, and basic command safety model.

ARM template Bicep Bicep target scope Bicep module Bicep parameter file

Command paths az account show az group list az resource list

Compare decisions Incremental vs Complete Deployment Mode Bicep vs ARM Template App Service slot swap vs direct production deployment

Guided runbooks Check Current Account And Subscription Switch Azure Subscription Safely Inventory Resource Groups And Resources

Resource Graph discovery Inventory every resource in the target resource group Resources inside target group Find locks in the target resource group

Preview in search Practice related ideas az account Show sidecar Mark reviewed

Exam path fundamentals 190 min

AI-901 Azure AI Fundamentals path

A complete beginner-focused AI-901 path for responsible AI, workload recognition, Microsoft Foundry basics, generative AI apps, agents, RAG, AI Search, text, speech, vision, information extraction, and safe evidence labs.

For Beginners preparing for Azure AI Fundamentals or moving from AI-900-era material toward AI-901.

You will understand Understand the vocabulary of Azure AI workloads, search/RAG, model deployment, content safety, and responsible use boundaries.

Azure AI services Azure OpenAI Service Azure AI Search Content Safety Document Intelligence

Command paths az account show --output table az cognitiveservices account list --resource-group <resource-group> --output table az cognitiveservices account show --name <account-name> --resource-group <resource-group>

Compare decisions AI Foundry project vs Azure AI services resource Model catalog vs model deployment Foundry agent vs chat completion

Guided runbooks Review Ai Search Index And Data Source Review Ai Search Indexers Keys And Scale Before Reindex Review Ai Services Keys Network And Openai Deployments Before Release

AI-901 Microsoft Azure AI Fundamentals Official Microsoft Learn page

Exam objective map Identify AI concepts and responsibilities Implement AI solutions by using Microsoft Foundry

Study modules Responsible AI principles: fairness, safety, privacy, transparency, and accountability Generative AI model basics, prompts, tokens, and deployment configuration AI workload recognition: generative, agentic, text, speech, vision, and information extraction Model selection and deployment options in Microsoft Foundry Case studies AI-901 case 1: Choose responsible AI controls for a student support chatbot AI-901 case 2: Recognize when RAG is better than fine-tuning for policy answers AI-901 case 3: Pick Foundry project vs Azure AI services resource Practice drills AI-901 decision drill: Foundry project vs AI Services resource AI-901 decision drill: Azure AI Search vs Azure OpenAI AI-901 decision drill: Foundry agent vs chat completion

Resource Graph discovery

Preview in search Practice objective az cognitiveservices account Show sidecar Mark reviewed

Exam case study fundamentals 190 min

AI-901 case study: Responsible AI workload choice

A complete beginner-focused AI-901 path for responsible AI, workload recognition, Microsoft Foundry basics, generative AI apps, agents, RAG, AI Search, text, speech, vision, information extraction, and safe evidence labs.

For AI-901 candidates who need foundational AI scenario practice with Azure AI services and responsible AI concepts.

You will understand Explain AI workload types, service boundaries, and responsible AI controls without jumping into production changes too early.

Azure AI services Azure OpenAI Service Azure AI Search Responsible AI Azure AI Vision

Command paths az account show --output table az cognitiveservices account list --resource-group <resource-group> --output table az cognitiveservices account show --name <account-name> --resource-group <resource-group>

Compare decisions AI Foundry project vs Azure AI services resource Model catalog vs model deployment Foundry agent vs chat completion

Guided runbooks Review Ai Search Index And Data Source Review Ai Search Indexers Keys And Scale Before Reindex Review Ai Services Keys Network And Openai Deployments Before Release

AI-901 Microsoft Azure AI Fundamentals Official Microsoft Learn page

Exam objective map Identify AI concepts and responsibilities Implement AI solutions by using Microsoft Foundry

Study modules Responsible AI principles: fairness, safety, privacy, transparency, and accountability Generative AI model basics, prompts, tokens, and deployment configuration AI workload recognition: generative, agentic, text, speech, vision, and information extraction Model selection and deployment options in Microsoft Foundry Case studies AI-901 case 1: Choose responsible AI controls for a student support chatbot AI-901 case 2: Recognize when RAG is better than fine-tuning for policy answers AI-901 case 3: Pick Foundry project vs Azure AI services resource Practice drills AI-901 decision drill: Foundry project vs AI Services resource AI-901 decision drill: Azure AI Search vs Azure OpenAI AI-901 decision drill: Foundry agent vs chat completion

Resource Graph discovery

Preview in search Practice objective az cognitiveservices account Show sidecar Mark reviewed

Exam path fundamentals 240 min

AZ-900 Azure Fundamentals exam readiness path

A two-pass beginner AZ-900 path for cloud concepts, Azure architecture/services, management/governance, scenario drills, confidence routes, safe labs, and mistake repair.

For Beginners, students, career changers, and non-admin technologists preparing for Azure Fundamentals.

You will understand Understand the Azure scope model, core service categories, management/governance tools, and cost/monitoring language before moving into role-based exams.

Azure subscription Resource group Cost Management Budget Azure Resource Manager

Command paths az account show az account list az account list-locations

Compare decisions Tenant vs subscription Management group vs Subscription Resource group vs Resource

Guided runbooks Check Current Account And Subscription Inventory Resource Groups And Resources Review Tags And Ownership

AZ-900 Microsoft Azure Fundamentals Official Microsoft Learn page

Exam objective map Describe cloud concepts (25-30%) Describe Azure architecture and services (35-40%) Describe Azure management and governance (30-35%)

Study modules Cloud computing, shared responsibility, cloud models, and consumption pricing Cloud benefits: availability, scalability, reliability, security, governance, and manageability Service types and responsibility: IaaS, PaaS, SaaS, and serverless Azure global architecture: regions, zones, datacenters, subscriptions, management groups, and resource groups Case studies AZ-900 beginner case 1: Pick public, private, or hybrid cloud for a small company AZ-900 beginner case 2: Separate customer responsibility from Microsoft responsibility AZ-900 beginner case 3: Choose availability zones, scale, and a basic reliability story Practice drills A prompt mentions identity directory, billing boundary, and deployed resources. Decide whether the answer is tenant, subscription, or resource group. A company needs governance across many subscriptions. Decide when a management group is the better scope than a single subscription. A prompt asks where related Azure resources are organized. Decide when the answer is resource group instead of an individual resource.

Resource Graph discovery Subscription inventory Resources by region Resource types in use

Preview in search Practice objective az account Show sidecar Mark reviewed

Exam case study fundamentals 240 min

AZ-900 case study: Startup Azure landing zone

A two-pass beginner AZ-900 path for cloud concepts, Azure architecture/services, management/governance, scenario drills, confidence routes, safe labs, and mistake repair.

For New Azure learners preparing for AZ-900 who need scenario context instead of definitions only.

You will understand Explain basic Azure cloud value, service categories, identity, governance, and pricing decisions in scenario language.

Azure subscription Resource group Cost Management Budget Azure Resource Manager

Command paths az account show az account list az account list-locations

Compare decisions Tenant vs subscription Management group vs Subscription Resource group vs Resource

Guided runbooks Check Current Account And Subscription Inventory Resource Groups And Resources Review Tags And Ownership

AZ-900 Microsoft Azure Fundamentals Official Microsoft Learn page

Exam objective map Describe cloud concepts (25-30%) Describe Azure architecture and services (35-40%) Describe Azure management and governance (30-35%)

Study modules Cloud computing, shared responsibility, cloud models, and consumption pricing Cloud benefits: availability, scalability, reliability, security, governance, and manageability Service types and responsibility: IaaS, PaaS, SaaS, and serverless Azure global architecture: regions, zones, datacenters, subscriptions, management groups, and resource groups Case studies AZ-900 beginner case 1: Pick public, private, or hybrid cloud for a small company AZ-900 beginner case 2: Separate customer responsibility from Microsoft responsibility AZ-900 beginner case 3: Choose availability zones, scale, and a basic reliability story Practice drills A prompt mentions identity directory, billing boundary, and deployed resources. Decide whether the answer is tenant, subscription, or resource group. A company needs governance across many subscriptions. Decide when a management group is the better scope than a single subscription. A prompt asks where related Azure resources are organized. Decide when the answer is resource group instead of an individual resource.

Resource Graph discovery Subscription inventory Resources by region Resource types in use

Preview in search Practice objective az account Show sidecar Mark reviewed

Exam path fundamentals 80 min

DP-900 Azure Data Fundamentals path

DP-900 Data Fundamentals two-pass path with objective modules, platform-choice cases, analytics/security scenarios, Compare drills, safe labs, glossary repair, and confidence review.

For Beginners preparing for Azure Data Fundamentals or trying to understand Azure data service categories.

You will understand Classify data shape and workload type, choose the right Azure data service family, explain distractors, and collect safe read-only evidence.

Azure SQL Database Storage account Data Lake Storage Gen2 Synapse workspace Data Factory

Command paths az storage account list az storage account show az storage container list

Compare decisions Azure SQL vs Cosmos DB Azure SQL Database vs SQL Managed Instance Blob Storage vs Data Lake Storage Gen2

Guided runbooks Review Storage Account Security Review Sql Server Firewall And Private Access Review Sql Database Performance And Size

DP-900 Microsoft Azure Data Fundamentals Official Microsoft Learn page

Exam objective map describe core data concepts identify considerations for relational data on Azure describe non-relational data services describe analytics workloads on Azure

Study modules Represent data: structured, semi-structured, and unstructured Transactional vs analytical workloads Data roles: DBA, data engineer, and data analyst Relational concepts: tables, keys, normalization, and SQL Case studies DP-900 case 1: Classify a customer data set before picking storage DP-900 case 2: Separate OLTP order entry from analytics reporting DP-900 case 3: Pick the relational Azure service for a migration Practice drills Azure SQL vs Cosmos DB for app data Azure SQL Database vs SQL Managed Instance Relational constraints vs NoSQL document scale

Resource Graph discovery Sql Databases Inventory 3647806D Storage Public Network And Blob Access 7569536B Cosmos Db Accounts 13Ce0Cf3

Preview in search Practice objective az sql db Show sidecar Mark reviewed

Exam case study fundamentals 80 min

DP-900 case study: Data platform choice

DP-900 Data Fundamentals two-pass path with objective modules, platform-choice cases, analytics/security scenarios, Compare drills, safe labs, glossary repair, and confidence review.

For DP-900 candidates who need to recognize data workload types and Azure data service tradeoffs.

You will understand Classify data shape and workload type, choose the right Azure data service family, explain distractors, and collect safe read-only evidence.

Azure SQL Database Azure Cosmos DB Blob Storage Data Lake Storage Gen2 Event Hubs

Command paths az storage account list az storage account show az storage container list

Compare decisions Azure SQL vs Cosmos DB Azure SQL Database vs SQL Managed Instance Blob Storage vs Data Lake Storage Gen2

Guided runbooks Review Storage Account Security Review Sql Server Firewall And Private Access Review Sql Database Performance And Size

DP-900 Microsoft Azure Data Fundamentals Official Microsoft Learn page

Exam objective map Describe core data concepts Identify considerations for relational data on Azure Describe non-relational data on Azure Describe analytics workloads on Azure

Study modules Represent data: structured, semi-structured, and unstructured Transactional vs analytical workloads Data roles: DBA, data engineer, and data analyst Relational concepts: tables, keys, normalization, and SQL Case studies DP-900 case 1: Classify a customer data set before picking storage DP-900 case 2: Separate OLTP order entry from analytics reporting DP-900 case 3: Pick the relational Azure service for a migration Practice drills Azure SQL vs Cosmos DB for app data Azure SQL Database vs SQL Managed Instance Relational constraints vs NoSQL document scale

Resource Graph discovery Sql Databases Inventory 3647806D Storage Public Network And Blob Access 7569536B Cosmos Db Accounts 13Ce0Cf3

Preview in search Practice objective az sql db Show sidecar Mark reviewed

Exam case study fundamentals 210 min

SC-900 case study: Zero Trust identity and governance

A security fundamentals case study for identity, access, compliance, governance, Defender/Sentinel concepts, and Zero Trust reasoning.

For SC-900 candidates who need to connect identity and security terminology to Azure/Microsoft security decisions.

You will understand Explain identity, governance, compliance, and monitoring choices in beginner-safe scenario language.

Zero Trust Microsoft Entra ID Microsoft Entra group Device identity Conditional Access

Command paths az account tenant list --output table az ad user list --output table az ad group list --output table

Compare decisions Azure RBAC vs Azure Policy Delegated vs Application Permission Group-based RBAC vs Direct user role assignment

Guided runbooks Review Rbac Assignments Review Inherited Rbac Scope Safely Review Policy Compliance

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Official Microsoft Learn page

Exam objective map Describe security, compliance, and identity concepts Describe Microsoft Entra capabilities Describe Microsoft security solutions Describe Microsoft compliance solutions

Study modules Security, compliance, identity, and shared responsibility concepts Zero Trust, defense-in-depth, encryption, hashing, and GRC clues Microsoft Entra ID tenants, users, groups, devices, and hybrid identity Authentication, MFA, password protection, and Conditional Access Case studies SC-900 case 1: Shared responsibility model under SaaS, PaaS, and IaaS wording SC-900 case 2: Zero Trust access decision with MFA and Conditional Access SC-900 case 3: Least privilege assignment with groups, PIM, and access reviews Practice drills Rbac Vs Policy Delegated Vs Application Permission Group Based Rbac Vs Direct User Assignment

Resource Graph discovery Broad role assignments Find role assignments at high-level scopes Policy compliance states

Preview in search Practice objective az role assignment Show sidecar Mark reviewed

Exam path fundamentals 210 min

SC-900 Security, Compliance, and Identity fundamentals path

A fundamentals path for identity, security, compliance, Entra, governance, and Defender/Purview vocabulary that overlaps Azure readiness.

For Students and early-career technologists who want security, compliance, and identity language before Azure role-based exams.

You will understand Understand core identity, access, compliance, security posture, and audit evidence concepts that support Azure exam scenarios.

Zero Trust Microsoft Entra ID Microsoft Entra group Device identity Conditional Access

Command paths az account tenant list --output table az ad user list --output table az ad group list --output table

Compare decisions Azure RBAC vs Azure Policy Delegated vs Application Permission Group-based RBAC vs Direct user role assignment

Guided runbooks Review Rbac Assignments Review Inherited Rbac Scope Safely Review Policy Compliance

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Official Microsoft Learn page

Exam objective map security compliance and identity concepts Microsoft Entra capabilities Microsoft security solutions Microsoft compliance solutions

Study modules Security, compliance, identity, and shared responsibility concepts Zero Trust, defense-in-depth, encryption, hashing, and GRC clues Microsoft Entra ID tenants, users, groups, devices, and hybrid identity Authentication, MFA, password protection, and Conditional Access Case studies SC-900 case 1: Shared responsibility model under SaaS, PaaS, and IaaS wording SC-900 case 2: Zero Trust access decision with MFA and Conditional Access SC-900 case 3: Least privilege assignment with groups, PIM, and access reviews Practice drills Rbac Vs Policy Delegated Vs Application Permission Group Based Rbac Vs Direct User Assignment

Resource Graph discovery Broad role assignments Find role assignments at high-level scopes Policy compliance states

Preview in search Practice objective az role assignment Show sidecar Mark reviewed

Exam path intermediate 390 min

AI-102 Azure AI Engineer Associate path

A completed two-pass transitional AI-102 Azure AI Engineer path with advanced service-selection, RAG/Search, agents, Vision, Speech, Language, Document Intelligence, safety, identity, private access, monitoring, and AI-103 bridge guidance.

For Developers and AI engineers preparing for AI-102 while it remains available, or bridging older AI-102 material into the newer Foundry/agent-focused AI exam direction.

You will understand Use AI-102 as a retirement-aware transitional Azure AI Engineer path and carry Foundry, agents, RAG, evaluation, safety, identity, private access, and production support into AI-103.

Azure AI Foundry Azure AI Foundry project Azure OpenAI Service Azure OpenAI deployment Azure AI Search

Command paths az cognitiveservices account list az cognitiveservices account deployment list az search service list

Compare decisions Azure AI Search vs Azure OpenAI RAG with vector search vs fine-tuning Azure AI Content Safety vs Prompt Shields

Guided runbooks Review Ai Services Keys Network And Openai Deployments Before Release Review Ai Search Indexers Keys And Scale Before Reindex Review Azure Ai Services Account Network And Keys

AI-102 Microsoft Certified: Azure AI Engineer Associate Official Microsoft Learn page

Exam objective map Plan and manage an Azure AI solution (20-25%) Implement generative AI solutions (15-20%) Implement an agentic solution (5-10%) Implement computer vision solutions (10-15%)

Study modules Plan AI solution scope, service boundaries, and AI-103 transition Provision and secure Azure AI Services resources Build generative AI solutions with deployments and prompts Ground generative AI with RAG and Azure AI Search Case studies AI-102 case 1: Select the AI service portfolio for a support assistant AI-102 case 2: Build a RAG assistant over private documents AI-102 case 3: Deploy and operate an Azure OpenAI model safely Practice drills A scenario asks whether to organize a solution around a Foundry project or a general AI Services resource. Name the clue that decides the boundary. A support bot must answer from private documents and generate fluent responses. Explain why AI Search and Azure OpenAI solve different jobs. Policy documents change weekly. Decide why RAG beats fine-tuning as the first answer.

Resource Graph discovery Cosmos DB accounts Event Hubs namespaces Event Hubs namespaces

Preview in search Practice objective az cognitiveservices account Show sidecar Mark reviewed

Exam case study intermediate 390 min

AI-102 case study: RAG and agent production support

A completed two-pass transitional AI-102 Azure AI Engineer path with advanced service-selection, RAG/Search, agents, Vision, Speech, Language, Document Intelligence, safety, identity, private access, monitoring, and AI-103 bridge guidance.

For AI-102 and AI-103 candidates who want a realistic AI app scenario rather than isolated AI service definitions.

You will understand Use AI-102 as a retirement-aware transitional Azure AI Engineer path and carry Foundry, agents, RAG, evaluation, safety, identity, private access, and production support into AI-103.

Azure AI Foundry Azure AI Foundry project Azure OpenAI Service Azure OpenAI deployment Azure AI Search

Command paths az search service show az cognitiveservices account deployment list az network private-endpoint list

Compare decisions RAG with vector search vs fine-tuning Foundry agent vs chat completion API key vs managed identity for AI service access

Guided runbooks Review Ai Search Indexers Keys And Scale Before Reindex Review Ai Services Keys Network And Openai Deployments Before Release Review Private Access Before Disabling Public Access

AI-102 Microsoft Certified: Azure AI Engineer Associate Official Microsoft Learn page

Exam objective map Plan and manage an Azure AI solution (20-25%) Implement generative AI solutions (15-20%) Implement an agentic solution (5-10%) Implement computer vision solutions (10-15%)

Study modules Plan AI solution scope, service boundaries, and AI-103 transition Provision and secure Azure AI Services resources Build generative AI solutions with deployments and prompts Ground generative AI with RAG and Azure AI Search Case studies AI-102 case 1: Select the AI service portfolio for a support assistant AI-102 case 2: Build a RAG assistant over private documents AI-102 case 3: Deploy and operate an Azure OpenAI model safely Practice drills A scenario asks whether to organize a solution around a Foundry project or a general AI Services resource. Name the clue that decides the boundary. A support bot must answer from private documents and generate fluent responses. Explain why AI Search and Azure OpenAI solve different jobs. Policy documents change weekly. Decide why RAG beats fine-tuning as the first answer.

Resource Graph discovery Cosmos DB accounts Event Hubs namespaces Event Hubs namespaces

Preview in search Practice objective az search service Show sidecar Mark reviewed

Exam path intermediate 420 min

AI-103 Azure AI Apps and Agents Developer path

A complete two-pass AI-103 path for Microsoft Foundry, agents, RAG, Azure AI Search, multimodal AI, information extraction, evaluations, safety, identity, private networking, observability, and production readiness.

For AI app developers who want the newer Foundry, agents, and Python-oriented exam route rather than only older AI-102 material.

You will understand Prepare for AI-103 by making production-grade decisions about Foundry projects, agents, RAG, AI Search, safety, modalities, extraction, identity, private access, observability, and release evidence.

Azure AI Foundry Azure AI Foundry project Azure OpenAI Service Azure OpenAI deployment Azure AI Search

Command paths az ml workspace list az ml workspace show az cognitiveservices account list

Compare decisions AI Foundry project vs Azure AI services resource Model catalog vs model deployment Foundry agent vs chat completion

Guided runbooks Review Ai Services Keys Network And Openai Deployments Before Release Review Azure Ai Services Account Network And Keys Review Ai Search Index And Data Source

AI-103 Microsoft Certified: Azure AI Apps and Agents Developer Associate Official Microsoft Learn page

Exam objective map Plan and manage Azure AI solutions Implement generative AI and agentic solutions Implement computer vision solutions Implement text analysis solutions

Study modules Plan the Foundry solution: projects, hubs, resources, models, quotas, and cost Set up Foundry infrastructure and connect a Python AI application safely Design Foundry agents: roles, goals, memory, tool schemas, and knowledge sources Build agentic workflows with safeguards, approval gates, and multi-step reasoning Case studies AI-103 case 1: Pick the Foundry boundary before choosing model or code AI-103 case 2: Design a policy-search agent that cannot change resources without approval AI-103 case 3: Choose RAG over fine-tuning for changing private documents Practice drills A scenario mentions a Foundry project, shared AI resource, and app connection boundary. Decide when the project is the workspace boundary and when the AI services resource is the underlying service container. A learner sees a model listed in a catalog and a deployment consumed by an app. Decide which one is discoverable inventory and which one serves requests. A workload needs tools, memory, retrieval, and approval boundaries. Decide when a Foundry agent is stronger than a direct chat completion call.

Resource Graph discovery Find Azure AI services accounts Review AI Services keys, network, and OpenAI deployments before release Find AI Search services

Preview in search Practice objective az cognitiveservices account project Show sidecar Mark reviewed

Exam path intermediate 130 min

AZ-104 Azure Administrator core operations path

A role-based path for identity, governance, storage, compute, virtual networking, backup, and monitoring scenarios that administrators must understand.

For Hands-on admins preparing for Azure Administrator Associate who need scenario practice beyond definitions.

You will understand Understand how administrator exam scenarios connect scope, RBAC, storage, compute, networking, monitoring, and backup decisions.

Azure subscription Resource group RBAC Managed identity Azure Policy

Command paths az role assignment list az storage account list az vm list

Compare decisions Group-based RBAC vs Direct user role assignment Route table vs Network Security Group Recovery point vs Snapshot

Guided runbooks Review Rbac Assignments Review Storage Account Security Review Vm Networking And Effective Routes

AZ-104 Microsoft Azure Administrator Associate Official Microsoft Learn page

Exam objective map Manage Azure identities and governance Implement and manage storage Deploy and manage Azure compute resources Implement and manage virtual networking

Study modules Scope first: tenants, subscriptions, management groups, and resource groups Microsoft Entra users, groups, guests, and password recovery boundaries Access control and governance: RBAC, Policy, locks, tags, budgets, and Advisor Storage access: firewalls, virtual networks, SAS, stored access policies, keys, and identity Case studies AZ-104 case 1: Remove broad access without breaking operations AZ-104 case 2: Enforce required tags without blocking emergency remediation AZ-104 case 3: Share blob data without exposing the storage account Practice drills In an AZ-104 scenario, decide when tenant vs subscription is the better choice, then state the scope, risk, and one evidence check. In an AZ-104 scenario, decide when management group vs subscription is the better choice, then state the scope, risk, and one evidence check. In an AZ-104 scenario, decide when resource group vs resource is the better choice, then state the scope, risk, and one evidence check.

Resource Graph discovery Broad role assignments Find broad role assignments Find locks in the target resource group

Preview in search Practice objective az role assignment Show sidecar Mark reviewed

Exam case study intermediate 95 min

AZ-104 case study: Governance and cost cleanup

An administrator case study for RBAC, policy, locks, tags, budgets, diagnostics, and safe cleanup before production changes.

For AZ-104 candidates who need administrator scenario practice with governance, monitoring, and cost controls.

You will understand Connect administrator objectives to safe discovery, evidence collection, and least-privilege remediation decisions.

RBAC Azure Policy Resource lock Tags Budget

Command paths az role assignment list az policy assignment list az lock list

Compare decisions Resource lock vs Azure Policy deny Diagnostic settings vs data collection rule Group-based RBAC vs Direct user role assignment

Guided runbooks Review Rbac Assignments Review Azure Policy Assignments And Exemptions Review Resource Locks Before Changes

AZ-104 Microsoft Azure Administrator Official Microsoft Learn page

Exam objective map Manage Azure identities and governance Implement and manage storage Deploy and manage Azure compute resources Implement and manage virtual networking

Study modules Scope first: tenants, subscriptions, management groups, and resource groups Microsoft Entra users, groups, guests, and password recovery boundaries Access control and governance: RBAC, Policy, locks, tags, budgets, and Advisor Storage access: firewalls, virtual networks, SAS, stored access policies, keys, and identity Case studies AZ-104 case 1: Remove broad access without breaking operations AZ-104 case 2: Enforce required tags without blocking emergency remediation AZ-104 case 3: Share blob data without exposing the storage account Practice drills In an AZ-104 scenario, decide when tenant vs subscription is the better choice, then state the scope, risk, and one evidence check. In an AZ-104 scenario, decide when management group vs subscription is the better choice, then state the scope, risk, and one evidence check. In an AZ-104 scenario, decide when resource group vs resource is the better choice, then state the scope, risk, and one evidence check.

Resource Graph discovery Broad role assignments Container Apps secret/image review Container Web App inventory

Preview in search Practice objective az role assignment Show sidecar Mark reviewed

Exam path intermediate 115 min

AZ-204 Azure Developer application path

A developer path for compute, App Service, Functions, storage, identity, API integration, monitoring, and deployment decisions.

For Developers preparing for Azure Developer Associate who need to connect code-facing services to deployment and operations choices.

You will understand Understand the Azure developer services, app identity model, data connections, API exposure, storage choices, and monitoring signals that appear in scenario questions.

App Service App Service Plan Deployment slot App Service app setting App Service diagnostics

Command paths az webapp list az webapp show az webapp deployment slot list

Compare decisions App Service vs Azure Functions App Service plan vs Functions hosting plan App Service slot swap vs direct production deployment

Guided runbooks Review App Service Configuration Review App Service Slot Swap Readiness Review Function App Configuration And Logs

AZ-204 Developing Solutions for Microsoft Azure Official Microsoft Learn page

Exam objective map Develop Azure compute solutions (25-30%) Develop for Azure storage (15-20%) Implement Azure security (15-20%) Monitor, troubleshoot, and optimize Azure solutions (5-10%)

Study modules Implement App Service Web Apps Implement Azure Functions triggers, bindings, and plans Implement containerized solutions with ACR and Container Apps Develop Blob Storage solutions from code Case studies AZ-204 case 1: Release a web API with zero-downtime rollback AZ-204 case 2: Pick the right compute for an event-driven order processor AZ-204 case 3: Publish a container app from a private registry Practice drills A web API needs long-running HTTP endpoints, deployment slots, and steady hosting. Decide whether App Service or Functions fits the developer requirement. A scenario asks about cost, scale, and execution model. Separate App Service plan from Functions hosting plan before selecting compute. A team wants no-downtime release and rollback. Choose slot swap instead of direct production deployment when the constraints demand it.

Resource Graph discovery App Service inventory Function App inventory Container Apps and environments

Preview in search Practice objective az webapp Show sidecar Mark reviewed

Exam case study intermediate 90 min

AZ-204 case study: Secretless app release

A developer case study for App Service, Functions, managed identity, Key Vault, deployment slots, monitoring, and safe release decisions.

For AZ-204 candidates who need app-development scenario practice with identity, configuration, monitoring, and deployment.

You will understand Design and explain a secure Azure app release path using identity, configuration, telemetry, and rollback evidence.

App Service App Service Plan Deployment slot App Service app setting App Service diagnostics

Command paths az webapp list az webapp show az webapp deployment slot list

Compare decisions App Service vs Azure Functions App Service plan vs Functions hosting plan App Service slot swap vs direct production deployment

Guided runbooks Review App Service Configuration Review App Service Slot Swap Readiness Review Function App Configuration And Logs

AZ-204 Developing Solutions for Microsoft Azure Official Microsoft Learn page

Exam objective map Develop Azure compute solutions (25-30%) Develop for Azure storage (15-20%) Implement Azure security (15-20%) Monitor, troubleshoot, and optimize Azure solutions (5-10%)

Study modules Implement App Service Web Apps Implement Azure Functions triggers, bindings, and plans Implement containerized solutions with ACR and Container Apps Develop Blob Storage solutions from code Case studies AZ-204 case 1: Release a web API with zero-downtime rollback AZ-204 case 2: Pick the right compute for an event-driven order processor AZ-204 case 3: Publish a container app from a private registry Practice drills A web API needs long-running HTTP endpoints, deployment slots, and steady hosting. Decide whether App Service or Functions fits the developer requirement. A scenario asks about cost, scale, and execution model. Separate App Service plan from Functions hosting plan before selecting compute. A team wants no-downtime release and rollback. Choose slot swap instead of direct production deployment when the constraints demand it.

Resource Graph discovery App Service inventory Function App inventory Container Apps and environments

Preview in search Practice objective az webapp Show sidecar Mark reviewed

Exam path intermediate 95 min

Safe Azure lab scenario drills for exam practice

A hands-on practice path that turns exam-style prompts into safe read-only checks, Compare decisions, and runbook evidence collection.

For Exam candidates who understand concepts but need to practice scenario reasoning without breaking a real Azure environment.

You will understand Learn how to translate exam prompts into scope, affected resource, decision, command, evidence, and safe next step.

Azure CLI Azure Resource Graph Resource group RBAC Network Security Group

Command paths az account show az graph query az resource list

Compare decisions Control Plane vs Data Plane Route table vs Network Security Group Policy definition vs Policy initiative

Guided runbooks Check Current Account And Subscription Inventory Resource Groups And Resources Investigate Activity Log Changes Around Cost Or Outage

LAB Azure exam scenario lab practice Official Microsoft Learn page

Exam objective map scope identification read-only discovery decision justification safe operational evidence

Study modules Official objective review Concept vocabulary map Compare decision drills Safe lab and evidence review Case studies LAB scenario: choose the right Azure service under constraints. LAB scenario: explain the safe check before making the change. Practice drills Preview related glossary terms. Open related Compare cards. Run read-only command/resource discovery where appropriate.

Resource Graph discovery Broad role assignments Find broad role assignments Find locks in the target resource group

Preview in search Practice objective az account Show sidecar Mark reviewed

Exam path advanced 145 min

AZ-305 Azure Solutions Architect decision path

AZ-305 advanced architect path with objective mapping, complex architecture cases, decision boards, safe evidence labs, and Focus Plan loops.

For Administrators and architects preparing for Azure Solutions Architect Expert design scenarios.

You will understand Defend Azure architecture choices by ranking constraints, rejecting distractors, and proving design assumptions with safe evidence.

Azure Monitor Log Analytics workspace Activity Log Diagnostic settings policy Management group

Command paths az monitor diagnostic-settings list az monitor log-analytics workspace list az policy assignment list

Compare decisions Azure Monitor metrics vs logs Diagnostic setting vs Activity Log Metric alert vs Log alert

Guided runbooks Review Diagnostic Settings Coverage For Governance Review Diagnostic Settings Before Enabling Costly Logs Review Management Groups And Policy Scope

AZ-305 Designing Microsoft Azure Infrastructure Solutions Official Microsoft Learn page

Exam objective map design identity governance and monitoring solutions design data storage solutions design business continuity solutions design infrastructure solutions

Study modules Design logging, monitoring, and operational evidence Design authentication, authorization, and secret management Design governance hierarchy, compliance, and tagging Design relational data storage for scale, tier, and protection Case studies AZ-305 case 1: Design monitoring for a regulated multi-subscription platform AZ-305 case 2: Design the landing-zone governance hierarchy AZ-305 case 3: Choose the relational data service for legacy SQL features Practice drills A stakeholder says only approved regions and SKUs can be used, but another asks who can deploy. Separate Policy from RBAC. A design must prevent noncompliant deployment and also protect a few resources from deletion. Decide which control handles each requirement. A security standard contains many related controls. Choose definition versus initiative for management at scale.

Resource Graph discovery Diagnostic settings inventory Resources by type for diagnostic coverage Summarize policy assignments by scope

Preview in search Practice objective az monitor diagnostic-settings Show sidecar Mark reviewed

Exam case study advanced 120 min

AZ-305 case study: Global architecture decision

AZ-305 advanced architect path with objective mapping, complex architecture cases, decision boards, safe evidence labs, and Focus Plan loops.

For AZ-305 candidates who need architecture scenario practice across resiliency, security, data, and operations.

You will understand Defend Azure architecture choices by ranking constraints, rejecting distractors, and proving design assumptions with safe evidence.

Azure Monitor Log Analytics workspace Activity Log Diagnostic settings policy Management group

Command paths az monitor diagnostic-settings list az monitor log-analytics workspace list az policy assignment list

Compare decisions Azure Monitor metrics vs logs Diagnostic setting vs Activity Log Metric alert vs Log alert

Guided runbooks Review Diagnostic Settings Coverage For Governance Review Diagnostic Settings Before Enabling Costly Logs Review Management Groups And Policy Scope

AZ-305 Designing Microsoft Azure Infrastructure Solutions Official Microsoft Learn page

Exam objective map Design identity, governance, and monitoring solutions Design data storage solutions Design business continuity solutions Design infrastructure solutions

Study modules Design logging, monitoring, and operational evidence Design authentication, authorization, and secret management Design governance hierarchy, compliance, and tagging Design relational data storage for scale, tier, and protection Case studies AZ-305 case 1: Design monitoring for a regulated multi-subscription platform AZ-305 case 2: Design the landing-zone governance hierarchy AZ-305 case 3: Choose the relational data service for legacy SQL features Practice drills A stakeholder says only approved regions and SKUs can be used, but another asks who can deploy. Separate Policy from RBAC. A design must prevent noncompliant deployment and also protect a few resources from deletion. Decide which control handles each requirement. A security standard contains many related controls. Choose definition versus initiative for management at scale.

Resource Graph discovery Diagnostic settings inventory Resources by type for diagnostic coverage Summarize policy assignments by scope

Preview in search Practice objective az monitor diagnostic-settings Show sidecar Mark reviewed

Exam case study advanced 210 min

AZ-400 case study: Deployment governance and release safety

AZ-400 DevOps advanced path with release-safety scenarios, failed-deployment triage, secretless identity, artifact provenance, governance gates, instrumentation, and Focus Plan loops.

For AZ-400 candidates who need DevOps scenario practice connecting delivery automation with Azure governance and operations.

You will understand Design release flows that are secure, observable, policy-aware, and recoverable.

Bicep Deployment slot GitHub Actions for Azure Azure Policy Managed identity

Command paths az acr manifest list-metadata az acr repository list az acr repository show-tags

Compare decisions ACR admin user vs managed identity pull ACR tag vs digest Azure Advisor recommendation vs Policy compliance

Guided runbooks Review Acr Repositories And Authentication Review App Service Github Actions Deployment Link Review App Service Managed Identity Secretless Access

AZ-400 Microsoft DevOps Engineer Expert Official Microsoft Learn page

Exam objective map Configure processes and communications Design and implement source control Design and implement build/release pipelines Develop security and compliance plans

Study modules Flow of work, traceability, dashboards, and feedback loops Communication integrations, release notes, webhooks, and collaboration evidence Branching strategy, pull request policy, repository permissions, and recovery Package feeds, versioning, artifacts, tags, and container image provenance Case studies az-400-case-01 az-400-case-02 az-400-case-03 Practice drills az-400-compare-01 az-400-compare-02 az-400-compare-03

Resource Graph discovery Activity Log alert inventory Activity Log alerts Advisor recommendations

Preview in search Practice objective az deployment group Show sidecar Mark reviewed

Exam path advanced 210 min

AZ-400 DevOps Engineer delivery path

AZ-400 DevOps advanced path with release-safety scenarios, failed-deployment triage, secretless identity, artifact provenance, governance gates, instrumentation, and Focus Plan loops.

For Developers, administrators, and DevOps engineers preparing for the DevOps Engineer Expert exam.

You will understand Understand release patterns, pipeline health, infrastructure as code, rollout safety, secrets, observability, and compliance handoffs.

Bicep ARM template Deployment slot App Service Container Apps revision

Command paths az acr manifest list-metadata az acr repository list az acr repository show-tags

Compare decisions ACR admin user vs managed identity pull ACR tag vs digest Azure Advisor recommendation vs Policy compliance

Guided runbooks Review Acr Repositories And Authentication Review App Service Github Actions Deployment Link Review App Service Managed Identity Secretless Access

AZ-400 Designing and Implementing Microsoft DevOps Solutions Official Microsoft Learn page

Exam objective map design and implement processes and communications design and implement source control design and implement build and release pipelines develop a security and compliance plan

Study modules Flow of work, traceability, dashboards, and feedback loops Communication integrations, release notes, webhooks, and collaboration evidence Branching strategy, pull request policy, repository permissions, and recovery Package feeds, versioning, artifacts, tags, and container image provenance Case studies az-400-case-01 az-400-case-02 az-400-case-03 Practice drills az-400-compare-01 az-400-compare-02 az-400-compare-03

Resource Graph discovery App Service resources for CI/CD review Apps with deployment slots Container Apps secret/image review

Preview in search Practice objective az deployment group Show sidecar Mark reviewed

Exam path advanced 230 min

AZ-700 Azure Network Engineer path

Advanced AZ-700 network engineer study path with incident-style path/DNS/route/firewall/private-access/application-delivery cases, read-only evidence labs, and final review board.

For Network engineers and administrators preparing for Azure Network Engineer Associate.

You will understand Understand the difference between connectivity, routing, name resolution, private access, edge delivery, and traffic filtering.

Application Gateway Application Gateway listener Application Gateway routing rule Application Gateway WAF policy Application security group

Command paths az network vnet list az network vnet show az network vnet subnet list

Compare decisions VNet peering vs VPN Gateway ExpressRoute vs Site-to-site VPN Private Endpoint vs Service Endpoint

Guided runbooks Review Vnet Peering And Subnets Review Vnet Peering Transit And Forwarded Traffic Review Private Dns Zone Records And Vnet Links

AZ-700 Microsoft Azure Network Engineer Associate Official Microsoft Learn page

Exam objective map Design and implement core networking infrastructure Design, implement, and manage connectivity services Design and implement application delivery services Design and implement private access to Azure services

Study modules Plan VNet address space, subnets, public IPs, and delegation Design public DNS, private DNS zones, and VNet links Design VNet connectivity, peering, UDRs, NAT, and route evidence Monitor network health with Network Watcher, flow logs, DDoS, and diagnostics Case studies AZ-700 case 1: Plan VNet and subnet boundaries for platform services AZ-700 case 2: Fix private endpoint name resolution without opening public access AZ-700 case 3: Diagnose a spoke-to-spoke routing failure Practice drills Two Azure VNets need private connectivity; another clue mentions on-premises connectivity. Choose peering or VPN Gateway from the boundary crossed. A hybrid design lists bandwidth, redundancy, lead time, and cost. Decide whether ExpressRoute or site-to-site VPN fits. A PaaS service must be reachable from a VNet. Choose Private Endpoint or service endpoint from private IP, DNS, and public exposure clues.

Resource Graph discovery Azure Firewall and policies Inventory load balancers and probes Investigate DNS resolution and CNAME routing

Preview in search Practice objective az network vnet Show sidecar Mark reviewed

Exam case study advanced 230 min

AZ-700 case study: Private networking and hub-spoke access

Advanced AZ-700 network engineer study path with incident-style path/DNS/route/firewall/private-access/application-delivery cases, read-only evidence labs, and final review board.

For AZ-700 candidates who need network scenario practice with private access and route/exposure troubleshooting.

You will understand Explain how private connectivity, DNS, routing, firewall policy, and exposure controls interact.

Application Gateway Application Gateway listener Application Gateway routing rule Application Gateway WAF policy Application security group

Command paths az network vnet list az network vnet show az network vnet subnet list

Compare decisions VNet peering vs VPN Gateway ExpressRoute vs Site-to-site VPN Private Endpoint vs Service Endpoint

Guided runbooks Review Vnet Peering And Subnets Review Vnet Peering Transit And Forwarded Traffic Review Private Dns Zone Records And Vnet Links

AZ-700 Microsoft Azure Network Engineer Associate Official Microsoft Learn page

Exam objective map Design and implement core networking infrastructure Design, implement, and manage connectivity services Design and implement application delivery services Design and implement private access to Azure services

Study modules Plan VNet address space, subnets, public IPs, and delegation Design public DNS, private DNS zones, and VNet links Design VNet connectivity, peering, UDRs, NAT, and route evidence Monitor network health with Network Watcher, flow logs, DDoS, and diagnostics Case studies AZ-700 case 1: Plan VNet and subnet boundaries for platform services AZ-700 case 2: Fix private endpoint name resolution without opening public access AZ-700 case 3: Diagnose a spoke-to-spoke routing failure Practice drills Two Azure VNets need private connectivity; another clue mentions on-premises connectivity. Choose peering or VPN Gateway from the boundary crossed. A hybrid design lists bandwidth, redundancy, lead time, and cost. Decide whether ExpressRoute or site-to-site VPN fits. A PaaS service must be reachable from a VNet. Choose Private Endpoint or service endpoint from private IP, DNS, and public exposure clues.

Resource Graph discovery Azure Firewall and policies Inventory load balancers and probes Investigate DNS resolution and CNAME routing

Preview in search Practice objective az network vnet Show sidecar Mark reviewed

Start here fundamentals 55 min

Identity and Access

Move through Entra, app identities, managed identity, RBAC, Conditional Access, and least privilege.

For Cloud admins, platform owners, and security reviewers trying to reason about access, scope, and governance.

You will understand Understand how Azure access, policies, locks, management groups, identities, and evidence fit together.

Microsoft Entra ID Azure tenant User Group App registration

Command paths az role assignment list az policy assignment list az lock list

Compare decisions System-assigned vs User-assigned managed identity Managed Identity vs Service Principal ACR admin user vs managed identity pull

Guided runbooks Review Rbac Assignments Review Subscription Level Role Assignments Review Azure Policy Assignments And Exemptions

Resource Graph discovery Resources with managed identities Find user-assigned managed identities Role assignments for app identities

Preview in search Practice related ideas az role assignment Show sidecar Mark reviewed

Operator path intermediate 70 min

CLI Safety and Live Operations

Understand command safety classes, destructive operations, security-impacting commands, and production guardrails.

For Cloud admins, platform owners, and security reviewers trying to reason about access, scope, and governance.

You will understand Understand how Azure access, policies, locks, management groups, identities, and evidence fit together.

RBAC App role assignment Managed identity Resource lock Azure Policy

Command paths az role assignment list az policy assignment list az lock list

Compare decisions Azure Policy vs Management Locks Azure RBAC vs Azure Policy ACR admin user vs managed identity pull

Guided runbooks Review Rbac Assignments Review Subscription Level Role Assignments Review Azure Policy Assignments And Exemptions

Resource Graph discovery List role assignments by scope signal Broad role assignments Management group resource count

Preview in search Practice related ideas az role assignment Show sidecar Mark reviewed

Operator path advanced 70 min

Identity Governance for Azure Admins

Directory roles, groups, consent, workload federation, PIM, access packages, and break-glass planning for Azure operators.

For Cloud admins, platform owners, and security reviewers trying to reason about access, scope, and governance.

You will understand Understand how Azure access, policies, locks, management groups, identities, and evidence fit together.

Azure tenant Directory Directory role Global Administrator Privileged Role Administrator

Command paths az role assignment list az policy assignment list az lock list

Compare decisions Delegated vs Application Permission ACR admin user vs managed identity pull Azure AI Search vs Azure OpenAI

Guided runbooks Review Rbac Assignments Review Subscription Level Role Assignments Review Azure Policy Assignments And Exemptions

Resource Graph discovery Role assignments for app identities Management group resource count Management groups

Preview in search Practice related ideas az role assignment Show sidecar Mark reviewed

Operator path advanced 75 min

Policy, Compliance, and Remediation

Learn how Azure Policy definitions, initiatives, effects, assignments, exemptions, states, and remediation tasks fit together.

For Cloud admins, platform owners, and security reviewers trying to reason about access, scope, and governance.

You will understand Understand how Azure access, policies, locks, management groups, identities, and evidence fit together.

Policy definition Policy initiative Initiative definition Policy assignment Policy assignment scope

Command paths az role assignment list az policy assignment list az lock list

Compare decisions Azure RBAC vs Azure Policy Azure AI Search vs Azure OpenAI App Service vs Azure Functions

Guided runbooks Review Rbac Assignments Review Subscription Level Role Assignments Review Azure Policy Assignments And Exemptions

Resource Graph discovery Management groups Policy compliance states Subscriptions visible to Resource Graph

Preview in search Practice related ideas az role assignment Show sidecar Mark reviewed

Operator path advanced 90 min

Security and Governance

Tie together Policy, Defender for Cloud, Key Vault, Sentinel, locks, budgets, and least privilege.

For Cloud admins, platform owners, and security reviewers trying to reason about access, scope, and governance.

You will understand Understand how Azure access, policies, locks, management groups, identities, and evidence fit together.

Azure Policy Policy definition Policy assignment Policy initiative Resource lock

Command paths az role assignment list az policy assignment list az lock list

Compare decisions Azure Policy vs Management Locks Azure RBAC vs Azure Policy Key Vault RBAC vs Access Policy

Guided runbooks Review Rbac Assignments Review Subscription Level Role Assignments Review Azure Policy Assignments And Exemptions

Resource Graph discovery Find resources missing owner tags Management groups Resource group tag and resource inventory

Preview in search Practice related ideas az role assignment Show sidecar Mark reviewed

Deep dive intermediate 70 min

Networking and Private Access

Learn virtual networks, subnets, NSGs, private endpoints, DNS, egress, and application delivery.

For Engineers and operators checking how traffic enters, leaves, and stays private inside Azure.

You will understand Understand private access, DNS, ingress, routing, firewalls, WAFs, and public exposure boundaries.

Virtual network Subnet Network Security Group Route table Private Link

Command paths az network private-endpoint list az network nsg list az network public-ip list

Compare decisions Application Gateway vs Front Door Front Door WAF vs Application Gateway WAF Private Endpoint vs Service Endpoint

Guided runbooks Inspect Private Endpoints And Dns Review Private Dns Zone Records And Vnet Links Find Public Exposure

Resource Graph discovery Find resources using private endpoints Inventory public IP resources List private endpoints and connection state

Preview in search Practice related ideas az network private-endpoint Show sidecar Mark reviewed

Operator path advanced 110 min

App delivery, edge, and API gateway path

Load Balancer, Application Gateway, Front Door, WAF policy, API Management gateway, policies, operations, and route behavior.

For Engineers and operators checking how traffic enters, leaves, and stays private inside Azure.

You will understand Understand private access, DNS, ingress, routing, firewalls, WAFs, and public exposure boundaries.

Load Balancer Load balancer health probe Application Gateway Application Gateway listener Application Gateway WAF policy

Command paths az network private-endpoint list az network nsg list az network public-ip list

Compare decisions API Management vs Application Gateway Front Door WAF vs Application Gateway WAF Load Balancer vs Application Gateway

Guided runbooks Inspect Private Endpoints And Dns Review Private Dns Zone Records And Vnet Links Find Public Exposure

Resource Graph discovery Find resources using private endpoints Inventory public IP resources Front Door profiles

Preview in search Practice related ideas az network private-endpoint Show sidecar Mark reviewed

Start here intermediate 95 min

Azure Functions foundation

Triggers, bindings, keys, runtime configuration, Durable Functions, plans, cold start, and managed identity.

For App teams that need to understand hosting choices, release safety, runtime settings, and deployment evidence.

You will understand Understand App Service, Functions, Container Apps, API gateways, slots, custom domains, and runtime configuration.

Function App HTTP trigger Timer trigger Queue trigger Input binding

Command paths az webapp show az functionapp show az containerapp show

Compare decisions Functions Consumption vs Premium App Service vs Azure Functions ACR admin user vs managed identity pull

Guided runbooks Review App Service Configuration Review App Service Slot Swap Readiness Investigate App Service Deployment Failure From Logs

Resource Graph discovery Function apps for key review Find Function Apps Function plan inventory

Preview in search Practice related ideas az webapp Show sidecar Mark reviewed

Deep dive intermediate 105 min

Build and operate Azure web apps

App Service plans, web apps, deployment slots, configuration, custom domains, TLS, diagnostics, and scale.

For App teams that need to understand hosting choices, release safety, runtime settings, and deployment evidence.

You will understand Understand App Service, Functions, Container Apps, API gateways, slots, custom domains, and runtime configuration.

App Service Web App App Service Plan App Service app setting App Service connection string

Command paths az webapp show az functionapp show az containerapp show

Compare decisions App Service slot swap vs direct production deployment App Service vs Azure Functions App Service vs Static Web Apps

Guided runbooks Review App Service Configuration Review App Service Slot Swap Readiness Investigate App Service Deployment Failure From Logs

Resource Graph discovery App Service inventory Web apps with tags and plan IDs Inventory web, function, and app resources

Preview in search Practice related ideas az webapp Show sidecar Mark reviewed

Deep dive advanced 115 min

Azure Container Apps and Dapr

Managed environments, revisions, ingress, traffic split, scale rules, workload profiles, jobs, and Dapr building blocks.

For App teams that need to understand hosting choices, release safety, runtime settings, and deployment evidence.

You will understand Understand App Service, Functions, Container Apps, API gateways, slots, custom domains, and runtime configuration.

Container Apps Container Apps managed environment Container Apps revision Container Apps ingress Container Apps traffic split

Command paths az webapp show az functionapp show az containerapp show

Compare decisions Container Apps vs Container Instances Container Apps vs AKS ACR admin user vs managed identity pull

Guided runbooks Review App Service Configuration Review App Service Slot Swap Readiness Investigate App Service Deployment Failure From Logs

Resource Graph discovery Container Apps revisions candidates Container Apps and environments Container Apps ingress and revisions

Preview in search Practice related ideas az webapp Show sidecar Mark reviewed

Deep dive intermediate 75 min

App Platform Builder

Understand App Service, Functions, Container Apps, AKS, deployment slots, identities, monitoring, and configuration.

For Platform engineers and Kubernetes operators working with AKS, container registries, identity, and cluster changes.

You will understand Understand AKS cluster shape, node pools, ingress, identity, image pull paths, upgrades, and safety checks.

App Service Web App App Service Plan Deployment slot Function App

Command paths az aks show az aks nodepool list az acr show

Compare decisions App Service vs Azure Functions Container Apps vs AKS Log Analytics workspace vs Application Insights

Guided runbooks Review Aks Cluster Context And Credentials Safely Review Aks Kubernetes Version And Upgrade Path Review Aks Cluster Safety Before Production Change

Resource Graph discovery Inventory AKS clusters and Container Apps environments Production AKS cluster safety inventory AKS monitoring inventory

Preview in search Practice related ideas az aks Show sidecar Mark reviewed

Operator path advanced 135 min

AKS operator path

Control plane, node pools, identities, network plugin, autoscale, upgrades, policy, GitOps, and container monitoring.

For Platform engineers and Kubernetes operators working with AKS, container registries, identity, and cluster changes.

You will understand Understand AKS cluster shape, node pools, ingress, identity, image pull paths, upgrades, and safety checks.

Azure Kubernetes Service AKS cluster AKS control plane AKS node System node pool

Command paths az aks show az aks nodepool list az acr show

Compare decisions Container Apps vs AKS AKS system vs user node pool ACR admin user vs managed identity pull

Guided runbooks Review Aks Cluster Context And Credentials Safely Review Aks Kubernetes Version And Upgrade Path Review Aks Cluster Safety Before Production Change

Resource Graph discovery Production AKS cluster safety inventory AKS upgrade readiness inventory AKS version inventory

Preview in search Practice related ideas az aks Show sidecar Mark reviewed

Start here intermediate 80 min

Messaging and Streaming Foundations

Learn Queue Storage, Service Bus, Event Hubs, Event Grid, sessions, dead-letter queues, partitions, consumer groups, and event subscriptions.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Queue Storage Storage queue Service Bus Service Bus queue Service Bus topic

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Event Hubs vs Service Bus Storage Queue vs Service Bus Queue Event Hubs vs Service Bus vs Event Grid

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Event Grid topics Inventory Service Bus namespaces Review Event Grid filters, retry, and dead-letter before change

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Start here intermediate 80 min

Storage and Data Lake Foundations

Learn storage accounts, Blob Storage, Data Lake Storage Gen2, redundancy, SAS, immutability, and file shares.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Blob Storage General-purpose v2 storage account Storage redundancy Hierarchical namespace

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Blob Storage vs Data Lake Storage Gen2 Blob Storage vs Azure Files Service SAS vs User Delegation SAS

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Storage account redundancy and failover readiness Find storage accounts with public network access enabled Storage public network and blob access

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 95 min

Azure SQL and Relational Data

Learn Azure SQL, SQL Managed Instance, PostgreSQL flexible server, MySQL flexible server, backup, HA, private access, and tuning concepts.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure SQL Database Azure SQL logical server Azure SQL elastic pool Azure SQL hyperscale Azure SQL failover group

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure SQL Database vs SQL Managed Instance Azure SQL vs Cosmos DB ACR admin user vs managed identity pull

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Inventory Cosmos DB accounts PostgreSQL flexible servers Review SQL performance tier, elastic pool, and auditing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 125 min

Azure Storage and Data Lake path

Storage accounts, redundancy, Blob access tiers, lifecycle, SAS, Private Link, Azure Files, and Data Lake Storage Gen2 ACLs.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Storage account redundancy Locally redundant storage Zone-redundant storage Geo-redundant storage

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions LRS vs ZRS vs GRS Blob Storage vs Data Lake Storage Gen2 Blob Storage vs Azure Files

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Storage account redundancy and failover readiness Find resources with public network access settings Find storage accounts with public network access enabled

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 80 min

Data and Storage Core

Cover storage accounts, blobs, files, SQL, Cosmos DB, PostgreSQL, MySQL, Redis, and private access.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Blob Storage Blob container Blob Azure Files

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Blob Storage vs Azure Files Azure SQL Database vs SQL Managed Instance Blob Storage vs Data Lake Storage Gen2

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Inventory Cosmos DB accounts Find storage accounts with public network access enabled

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 120 min

Eventing, messaging, and streaming path

Event Hubs, Service Bus, Event Grid, Stream Analytics, consumer offsets, checkpoints, sessions, filters, and dead-letter handling.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Event Hubs Event Hubs namespace Event Hubs partition Event Hubs capture Consumer group

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Event Hubs vs Service Bus Event Grid vs Event Hubs Event Hubs vs Service Bus vs Event Grid

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Event Grid filters, retry, and dead-letter before change Review Service Bus dead-letter and topic filter routing Event Hubs namespaces

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 95 min

Messaging and Eventing Architect

Compare Event Hubs, Service Bus, Event Grid, queues, topics, subscriptions, partitions, consumer groups, and dead-letter patterns.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Event Hubs Event Hubs namespace Event Hubs partition Consumer group Event Hubs capture

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Event Grid vs Event Hubs Event Hubs vs Service Bus Event Hubs vs Service Bus vs Event Grid

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Event Grid topics Inventory Service Bus namespaces Review Event Hubs throughput, Capture, and consumer lag

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 85 min

Messaging, Eventing, and Streaming

Learn how Service Bus, Event Hubs, and Event Grid differ and how they connect data platforms.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Service Bus Service Bus namespace Service Bus session Dead-letter queue Event Hubs

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Event Hubs vs Service Bus Event Hubs vs Service Bus vs Event Grid Storage Queue vs Service Bus Queue

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Event Grid filters, retry, and dead-letter before change Find Event Grid topics Inventory Service Bus namespaces

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path intermediate 85 min

Storage and Data Lake Operations

Learn storage accounts, Blob Storage, Data Lake Storage Gen2, access tiers, lifecycle management, SAS, and file systems.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Blob Storage Blob container Block blob Hot access tier

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Blob Storage vs Data Lake Storage Gen2 Hot vs Cool vs Archive Blob Tiers Blob Storage vs Azure Files

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Inventory Cosmos DB accounts Review Blob container public access and SAS before sharing Cosmos DB accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive intermediate 80 min

Storage and Data Protection

Learn storage accounts, blobs, files, queues, tables, Data Lake Storage, lifecycle rules, private endpoints, and backup patterns.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Blob Storage Blob container Blob access tier Storage lifecycle management

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Blob Storage vs Data Lake Storage Gen2 Blob Storage vs Azure Files Backup vault vs Recovery Services vault

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Inventory Cosmos DB accounts Review Azure Files share quota, protocol, and snapshot before change Cosmos DB accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 95 min

AI and Data Platform

Learn Azure OpenAI, AI Search, ML workspace, Data Factory, Synapse, Databricks, and data lake concepts.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure OpenAI Service Model deployment Prompt Content Safety Azure AI Search

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure AI Search vs Azure OpenAI Vector Search vs Semantic Ranker Data Factory vs Synapse Pipelines

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Find AI Search services Find resources with public network access settings

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 130 min

AI Application Platform

Learn Foundry, Azure OpenAI, AI Search, RAG, embeddings, model deployments, content safety, agents, and evaluation.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure AI Foundry Foundry project Azure OpenAI Service Model deployment Chat completions

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure AI Search vs Azure OpenAI Vector Search vs Semantic Ranker Search indexer vs Skillset

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Find AI Search services Find resources with public network access settings

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 115 min

AI Foundry and Model Operations

Learn Foundry projects, model deployments, responsible AI, agents, content safety, evaluations, and model endpoints.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure AI Foundry Azure AI Foundry project Model catalog Model deployment Provisioned throughput

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure AI Search vs Azure OpenAI App Service slot swap vs direct production deployment App Service vs Azure Functions

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Inventory Cosmos DB accounts Review Cosmos DB throughput, partition key, and indexing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 170 min

Azure AI, RAG, and Search path

Azure AI Foundry, Azure OpenAI, model deployments, embeddings, RAG, vector search, semantic ranking, hybrid search, and AI Search operations.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure AI Foundry Azure AI Foundry project Azure OpenAI Service Model deployment Embedding model

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Vector Search vs Semantic Ranker Azure AI Search vs Azure OpenAI Search indexer vs Skillset

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Find AI Search services Find resources with public network access settings

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 150 min

Azure database operator path

Azure SQL, Managed Instance, Cosmos DB, PostgreSQL, MySQL, Redis, backups, HA, private endpoints, query operations, and throughput.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure SQL Database SQL logical server SQL firewall rule SQL private endpoint SQL failover group

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure SQL Database vs SQL Managed Instance Cosmos DB manual vs autoscale throughput Cosmos DB logical vs physical partition

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Redis public network access and private endpoints PostgreSQL flexible servers Cosmos DB accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 95 min

CLI Data Platform Operations

Practice data-platform command lanes across storage, SQL, Cosmos DB, analytics, messaging, AI Search, and Azure OpenAI-adjacent services.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Storage account Blob Storage Data Lake Storage Gen2 Azure SQL Database Azure Cosmos DB

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Blob Storage vs Data Lake Storage Gen2 Azure SQL vs Cosmos DB Azure AI Search vs Azure OpenAI

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Inventory Cosmos DB accounts Review Cosmos DB throughput, partition key, and indexing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 100 min

Cosmos DB Design and Operations

Learn Cosmos DB accounts, databases, containers, partition keys, request units, consistency, indexing, TTL, change feed, backup, and vector search.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Cosmos DB account Cosmos DB database Cosmos DB container Cosmos DB partition key Request Unit

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Cosmos DB database vs container Cosmos DB manual vs autoscale throughput Azure SQL vs Cosmos DB

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Inventory Cosmos DB accounts Review Cosmos DB throughput, partition key, and indexing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 110 min

Data Integration and Analytics Platform

Learn Data Factory, Synapse, Databricks, Stream Analytics, Event Hubs, Lakehouse layers, and pipeline operations.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Data Factory Data Factory pipeline Copy activity Integration runtime Synapse workspace

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Data Factory vs Synapse Pipelines Dedicated SQL Pool vs Serverless SQL Pool Azure SQL Database vs SQL Managed Instance

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Data Factory resources Cosmos DB accounts Event Hubs namespaces

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 110 min

Database Platform Operator

Follow the managed database path across Azure SQL, Cosmos DB, PostgreSQL, MySQL, Redis, backup, private access, and monitoring.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure SQL Database Azure SQL logical server Elastic pool SQL failover group SQL private endpoint

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure SQL vs Cosmos DB Azure SQL Database vs SQL Managed Instance Cosmos DB manual vs autoscale throughput

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Inventory Cosmos DB accounts Cosmos DB accounts Review Cosmos DB throughput, partition key, and indexing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 145 min

Machine Learning and Document AI path

ML workspaces, compute, data assets, jobs, model registry, online and batch endpoints, Document Intelligence, custom models, and responsible AI.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Machine Learning workspace Machine Learning compute instance Machine Learning environment Machine Learning data asset Machine Learning model registry

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Online endpoint vs Batch endpoint Prebuilt vs Custom Document Intelligence model ACR admin user vs managed identity pull

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find resources with public network access settings Cosmos DB accounts Find Azure AI services accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 115 min

Machine Learning Operations

Understand ML workspaces, compute, jobs, experiments, model registry, online endpoints, batch endpoints, monitoring, and drift.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure Machine Learning Machine Learning workspace ML compute cluster Compute instance ML job

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Online endpoint vs Batch endpoint ACR admin user vs managed identity pull Azure AI Search vs Azure OpenAI

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find resources with public network access settings Cosmos DB accounts Find Azure AI services accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path advanced 95 min

Relational Database Operations

Learn Azure SQL, SQL Managed Instance, PostgreSQL, MySQL, backups, replicas, private access, and tuning concepts.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure SQL Database Azure SQL logical server SQL private endpoint SQL Query Store SQL long-term retention

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure SQL Database vs SQL Managed Instance Azure SQL vs Cosmos DB ACR admin user vs managed identity pull

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery PostgreSQL flexible servers Find resources with public network access settings Review SQL server public and private network access

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 115 min

AI Search and Generative AI

Learn Azure AI Search, vector search, semantic ranker, Azure OpenAI deployments, embeddings, RAG, content filters, and responsible AI controls.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure AI Search Search index Search indexer Semantic ranker Vector search

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure AI Search vs Azure OpenAI Vector Search vs Semantic Ranker Search indexer vs Skillset

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find AI Search services Review AI Search indexers, keys, and scale before reindex Cosmos DB accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 110 min

AI Search and RAG

Learn Azure AI Search, vector indexing, hybrid search, semantic ranking, chunking, and grounded generation.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Azure AI Search Azure AI Search service Azure AI Search index Vector embedding Chunking

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Azure AI Search vs Azure OpenAI Vector Search vs Semantic Ranker App Service slot swap vs direct production deployment

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Review Cosmos DB throughput, partition key, and indexing before scale Cosmos DB accounts Find AI Search services

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 120 min

Analytics Engineer Path

Move from ingestion and transformation to lakehouse, stream processing, Data Explorer, and Synapse analytics.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Data Factory Data Factory pipeline Copy activity Integration runtime Data Lake Storage Gen2

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Data Factory vs Synapse Pipelines Dedicated SQL Pool vs Serverless SQL Pool Blob Storage vs Data Lake Storage Gen2

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Data Factory resources Review Event Hubs throughput, Capture, and consumer lag Cosmos DB accounts

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 120 min

Analytics Engineering Pipeline

Learn Data Factory, Synapse, Databricks, Stream Analytics, and Data Explorer as one connected analytics system.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Data Factory Integration runtime Copy activity Mapping data flow Synapse workspace

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Data Factory vs Synapse Pipelines Dedicated SQL Pool vs Serverless SQL Pool Azure AI Search vs Azure OpenAI

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Data Factory resources Cosmos DB accounts Find resources with public network access settings

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 90 min

Cosmos DB Distributed Data

Learn Cosmos DB APIs, partitioning, consistency, throughput, backup, multi-region writes, and change feed patterns.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Cosmos DB account Azure Cosmos DB for NoSQL Cosmos DB logical partition Cosmos DB physical partition Request Unit

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Cosmos DB manual vs autoscale throughput Azure SQL vs Cosmos DB Azure AI Search vs Azure OpenAI

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Cosmos DB accounts Inventory Cosmos DB accounts Review Cosmos DB throughput, partition key, and indexing before scale

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Deep dive advanced 165 min

Data engineering and analytics path

Data Factory, integration runtimes, copy activity, mapping data flows, pipeline runs, Synapse, Databricks, Delta, and streaming analytics.

For Data engineers, app teams, and AI builders mapping storage, databases, integration, messaging, analytics, and AI services.

You will understand Understand how Azure data stores, pipelines, eventing, search, AI services, and recovery controls fit together.

Data Factory Integration runtime Self-hosted integration runtime Copy activity Mapping data flow

Command paths az storage account show az sql db show az cosmosdb show

Compare decisions Data Factory vs Synapse Pipelines Dedicated SQL Pool vs Serverless SQL Pool App Service slot swap vs direct production deployment

Guided runbooks Review Storage Account Security Review Sql Database Restore Point And Geo Replica Before Failover Review Cosmos Db Continuous Backup And Point In Time Restore

Resource Graph discovery Find Data Factory resources Cosmos DB accounts Find resources with public network access settings

Preview in search Practice related ideas az storage account Show sidecar Mark reviewed

Operator path intermediate 55 min

Cost, Hygiene, and Ownership

Connect tags, budgets, Advisor recommendations, Resource Graph, stale resources, and cost allocation into an operating rhythm.

For Operators and team leads who need to explain cost, health, telemetry, ownership, and operational risk.

You will understand Understand cost controls, monitoring signals, diagnostic settings, ownership hygiene, backup visibility, and operational triage.

Tags Tagging strategy Owner tag Environment tag Cost center tag

Command paths az monitor metrics list az monitor diagnostic-settings list az advisor recommendation list

Compare decisions ACR tag vs digest Azure AI Search vs Azure OpenAI App Service vs Azure Functions

Guided runbooks Check Cost And Budget Setup Review Log Analytics Ingestion Retention And Table Cost Investigate Activity Log Changes Around Cost Or Outage

Resource Graph discovery Resources with monitoring-related extensions Find diagnostic settings resources Budget resources

Preview in search Practice related ideas az monitor metrics Show sidecar Mark reviewed

Operator path intermediate 85 min

Observability and Incident Response

Go from telemetry collection to KQL, workbooks, alerts, action groups, Application Insights, and Sentinel.

For Operators and team leads who need to explain cost, health, telemetry, ownership, and operational risk.

You will understand Understand cost controls, monitoring signals, diagnostic settings, ownership hygiene, backup visibility, and operational triage.

Azure Monitor Platform metrics Metric namespace Log Analytics workspace Log Analytics table

Command paths az monitor metrics list az monitor diagnostic-settings list az advisor recommendation list

Compare decisions Azure Monitor metrics vs logs Metric alert vs Log alert Diagnostic setting vs Activity Log

Guided runbooks Check Cost And Budget Setup Review Log Analytics Ingestion Retention And Table Cost Investigate Activity Log Changes Around Cost Or Outage

Resource Graph discovery Diagnostic settings resources Resources with monitoring-related extensions Find diagnostic settings resources

Preview in search Practice related ideas az monitor metrics Show sidecar Mark reviewed

Operator path intermediate 120 min

Virtual machine operations

VM state, resize, redeploy, managed disks, images, identities, run command, patching, diagnostics, and scale sets.

For Operators and team leads who need to explain cost, health, telemetry, ownership, and operational risk.

You will understand Understand cost controls, monitoring signals, diagnostic settings, ownership hygiene, backup visibility, and operational triage.

Virtual machine VM power state Deallocated VM VM resize operation VM redeploy operation

Command paths az monitor metrics list az monitor diagnostic-settings list az advisor recommendation list

Compare decisions Generalized vs specialized VM image ACR admin user vs managed identity pull Azure AI Search vs Azure OpenAI

Guided runbooks Check Cost And Budget Setup Review Log Analytics Ingestion Retention And Table Cost Investigate Activity Log Changes Around Cost Or Outage

Resource Graph discovery Find unattached managed disks Unattached managed disks Virtual machines for disk context

Preview in search Practice related ideas az monitor metrics Show sidecar Mark reviewed