Azure Study Hub

Azure

Build a strong Azure foundation

Start with core cloud concepts, Azure services, subscription structures, and management tools. Use guided topics and interactive exercises to retain what matters most.

Study at a glance

0/6

Topics Reviewed

0/15

Flashcards Studied

0%

Quiz Accuracy

0

Study Sessions

What is Azure?

Microsoft's cloud platform with compute, storage, networking, and app services.
Supports IaaS, PaaS, and SaaS models.
Offers global scale via regions and Availability Zones.

Core Azure services

Azure Virtual Machines, App Service, Azure SQL, Azure Storage.
Networking services like VNet, Load Balancer, Firewall.
Identity and access with Azure AD and RBAC.

How to use this site

Review guided sections for administration, governance, and security.
Study flashcards to memorize key Azure concepts.
Take the quiz to test your knowledge and track progress.

Azure Administration

Discover how to manage Azure subscriptions, resources, identity, and operational tooling for cloud deployments.

Subscription structure

Subscriptions contain resource groups and resources.
Use Management Groups for large-scale organization.
Track billing, quotas, and costs by subscription.

Resource management

Deploy resources with ARM templates, Bicep, or Terraform.
Organize with tags, resource groups, and naming conventions.
Use Azure Portal, CLI, and PowerShell for management.

Identity and access

Azure AD is the identity service for users and apps.
RBAC roles control access to Azure resources.
Use Privileged Identity Management for elevated access.

Monitoring and logging

Azure Monitor collects metrics and logs.
Use Log Analytics and Alerts for operational visibility.
Track health with Service Health and Resource Graph.

Backup and disaster recovery

Azure Backup protects VMs, files, and SQL databases.
Use Azure Site Recovery for failover planning.
Design for high availability and business continuity.

Azure Governance

Learn best practices to enforce policy, manage cost, and align Azure resources with enterprise standards.

Azure Policy

Define rules to enforce resource compliance.
Evaluate assignments across subscriptions and resource groups.
Use built-in policies for security, networking, and tagging.

Cost management

Monitor spending with Cost Management and Budgets.
Tag resources to allocate costs accurately.
Use reservations and Azure Hybrid Benefit to optimize costs.

Management groups

Structure subscriptions into a hierarchy.
Apply policies and access controls at scale.
Group by function, environment, or business unit.

Governance checklist

Define standards for naming, tags, and resource placement.
Use policies to block insecure or unmanaged resources.
Review cost and security reports regularly.

Governance differences

Azure Policy enforces rules on resources in real time and reports compliance.
Management Groups organize subscriptions and inherit policies at scale.
Blueprints package policies, role assignments, and resources into reusable deployments.
RBAC controls who can access resources, while policy controls what can be deployed.
Cost Management focuses on consumption and budget controls, not resource configuration.

Azure Cheat Sheet

Fast reference for governance concepts and the most common Azure commands across PowerShell, Azure CLI, and Bastion.

Governance comparison

Policy - Rules that audit or deny resource deployments to ensure compliance.
Blueprint - A repeatable environment definition combining policies, RBAC, and resource templates.
Management Group - A container for subscriptions, enabling hierarchical policy and access management.
RBAC - Access control mechanism for assigning roles to users, groups, and service principals.
Tagging - Metadata for cost tracking, automation, and governance classification.

PowerShell commands

                                Connect-AzAccount

                                Get-AzSubscription

                                Select-AzSubscription -SubscriptionName "Contoso-SUB1"

                                Get-AzResourceGroup

                                New-AzResourceGroup -Name RG-Admin -Location eastus

                                Get-AzVM

                                New-AzPolicyDefinition -Name "require-tag" -DisplayName "Require Tag" -Policy "{...}"

                                New-AzPolicyAssignment -Name "require-tag-assignment" -PolicyDefinition $policyDef -Scope "/subscriptions/"

                                New-AzRoleAssignment -ObjectId  -RoleDefinitionName "Reader" -Scope "/subscriptions/"

                                New-AzManagementGroup -GroupName ContosoMgmtGroup -DisplayName "Contoso Management Group"

                                Get-AzPolicyAssignment

Azure CLI / Command Line / Command Line commands

az login
az account show
az account set --subscription "Contoso-SUB1"
az group list
az group create --name RG-Admin --location eastus
az vm list --resource-group RG-Admin
az policy definition create --name require-tag --rules require-tag.json --mode Indexed
az policy assignment create --name require-tag-assignment --policy require-tag --scope /subscriptions/
az role assignment create --assignee [email protected] --role Reader --scope /subscriptions/
az network bastion list --resource-group RG-Admin

Bastion and remote access

                                az network bastion create --resource-group RG-Admin --name BastionHost01 --public-ip-address BastionPIP --vnet-name VNet-Prod

                                az network bastion ssh --name BastionHost01 --resource-group RG-Admin --target-resource-id /subscriptions//resourceGroups/RG-Admin/providers/Microsoft.Compute/virtualMachines/VM01

                                az network bastion rdp --name BastionHost01 --resource-group RG-Admin --target-resource-id /subscriptions//resourceGroups/RG-Admin/providers/Microsoft.Compute/virtualMachines/VM01

                                az network bastion tunnel --name BastionHost01 --resource-group RG-Admin --target-resource-id /subscriptions//resourceGroups/RG-Admin/providers/Microsoft.Compute/virtualMachines/VM01 --resource-port 3389

                                az network public-ip create --resource-group RG-Admin --name BastionPIP --sku Standard --location eastus

Azure Security

Understand the controls and services that protect identity, data, and infrastructure in Azure.

Identity protection

Enable MFA to secure user sign-ins.
Use Conditional Access to enforce policies.
Review sign-in risk detection and reports.

Network security

Protect VNets with Network Security Groups and Firewalls.
Use private endpoints to limit public exposure.
Segment traffic with subnets and service endpoints.

Data protection

Encrypt storage with Azure Storage Service Encryption.
Use Key Vault to secure secrets and keys.
Enable Storage and SQL threat detection.

Azure Flashcards

Flip cards to study core Azure ideas, commands, and service definitions.

Click card to see the answer

What is Azure Resource Manager?

Knowledge Check Quiz

Choose the best answer and check your Azure understanding.

Filter by topic

Select a topic to start the quiz.

Quiz Progress

Answer questions to see your score.

Azure Resources

Use these links to deepen your Azure practical knowledge and exam readiness.

Microsoft Learn

Official guided learning paths for Azure fundamentals, administration, and governance.

Open resource →

Azure Architecture Center

Learn design patterns, best practices, and cloud architecture guidance for Azure workloads.

Open resource →

Azure Governance Docs

Understand policy, management groups, cost control, and compliance in Azure governance.

Open resource →

Azure Security Center

Explore security management, threat protection, and security posture improvement for Azure.

Open resource →