Azure Cloud Fundamentals

What you will be able to do

• You will be able to navigate the Azure portal and run the equivalent commands in the Azure CLI, so you can operate Azure whether you are clicking or scripting.
• You will be able to organize resources with subscriptions and resource groups, and place each deployment in the right region and availability zone for latency and resilience.
• You will be able to design a virtual network with subnets and network security groups that isolates and protects the workloads inside it.
• You will be able to deploy a virtual machine into a subnet, connect to it securely, and reason about its size, disks, and running cost.
• You will be able to store unstructured data in Blob Storage using the right containers, access tiers, and redundancy options.
• You will be able to provision an Azure SQL database and connect to it through its firewall rules and connection string.
• You will be able to manage identities in Microsoft Entra ID with users and groups, and grant least-privilege access using role-based access control.
• You will be able to give a virtual machine a managed identity so it can reach Storage and Azure SQL without stored secrets.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   The Azure Platform and Global Footprint

   Before you deploy anything, you need to know how Azure is organized and how to drive it. This module walks the account hierarchy from tenant down to resource, covering subscriptions and resource groups, then shows the same tasks run side by side in the Azure portal and the Azure CLI. It closes with Azure's global shape: regions, region pairs, and availability zones, so you can choose where your resources physically live and how resilient they are.

   2 lessons · 5 quiz questions

2. 02

   Virtual Networks and Virtual Machines

   A workload runs on a network you design first, then on compute you place inside it. This module builds a virtual network from its address space and subnets up, filters that traffic with network security groups, then deploys a virtual machine into the network and connects to it safely. You do every step in both the Azure portal and the Azure CLI so the sequence sticks.

   2 lessons · 5 quiz questions · assignment

3. 03

   Storing Data: Blob Storage and Azure SQL

   Most applications need two kinds of storage: a place for files and a place for structured records. This module covers Azure Blob Storage for unstructured objects, including containers, access tiers, and redundancy choices, then Azure SQL as a fully managed relational database. You will see how each one is organized, how it is priced, and how an application actually reaches it over the network.

   2 lessons · 5 quiz questions

4. 04

   Identity and Access with Microsoft Entra ID

   Identity is the control plane for everything you built in the earlier modules. This module manages users and groups in Microsoft Entra ID, then grants least-privilege access with role-based access control scoped to subscriptions and resource groups. It ends with managed identities, so a virtual machine can reach Storage and Azure SQL with no stored secrets.

   2 lessons · 5 quiz questions · assignment