AZ-900

Identify the benefits and considerations of using cloud services

• identify the benefits of cloud computing, such as High Availability, Scalability, Elasticity, Agility, and Disaster Recovery

• identify the differences between Capital Expenditure (CapEx) and Operational Expenditure (OpEx)

• describe the consumption-based model

Describe the differences between categories of cloud services

• describe the shared responsibility model

• describe Infrastructure-as-a-Service (IaaS),

• describe Platform-as-a-Service (PaaS)

• describe serverless computing

• describe Software-as-a-Service (SaaS)

• identify a service type based on a use case

Describe the differences between types of cloud computing

• define cloud computing

• describe Public cloud

• describe Private cloud

• describe Hybrid cloud

• compare and contrast the three types of cloud computing

確定使用雲服務的好處和注意事項

• 確定雲計算的優勢，例如高可用性、可擴展性、彈性、敏捷性和災難恢復

• 確定資本支出 (CapEx) 和運營支出 (OpEx) 之間的差異

• 描述基於消費的模型

描述雲服務類別之間的差異

• 描述共享責任模型

• 描述基礎設施即服務 (IaaS)，

• 描述平台即服務 (PaaS)

• 描述無服務器計算

• 描述軟件即服務 (SaaS)

• 根據用例識別服務類型

描述雲計算類型之間的差異

• 定義雲計算

• 描述公有云

• 描述私有云

• 描述混合雲

• 比較和對比三種雲計算

Describe the core Azure architectural components

• describe the benefits and usage of Regions and Region Pairs

• describe the benefits and usage of Availability Zones

• describe the benefits and usage of Resource Groups

• describe the benefits and usage of Subscriptions

• describe the benefits and usage of Management Groups

• describe the benefits and usage of Azure Resource Manager

• explain Azure resources

Describe core resources available in Azure

• describe the benefits and usage of Virtual Machines, Azure App Services, Azure Container Instances (ACI), Azure Kubernetes Service (AKS), and Azure Virtual Desktop

• describe the benefits and usage of Virtual Networks, VPN Gateway, Virtual Network peering, and ExpressRoute

• describe the benefits and usage of Container (Blob) Storage, Disk Storage, File Storage, and storage tiers

• describe the benefits and usage of Cosmos DB, Azure SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL, and Azure SQL Managed Instance

• describe the benefits and usage of Azure Marketplace

描述核心 Azure 架構組件

• 描述區域和區域對的好處和使用

• 描述可用區的好處和用途

• 描述資源組的好處和使用

• 描述訂閱的好處和用途

• 描述管理組的好處和用途

• 描述 Azure 資源管理器的優勢和用途

• 解釋 Azure 資源

描述 Azure 中可用的核心資源

• 描述虛擬機、Azure 應用服務、Azure 容器實例 (ACI)、Azure Kubernetes 服務 (AKS) 和 Azure 虛擬桌面的優勢和用途

• 描述虛擬網絡、VPN 網關、虛擬網絡對等互連和 ExpressRoute 的優勢和用途

• 描述容器 (Blob) 存儲、磁盤存儲、文件存儲和存儲層的優勢和用途

• 描述 Cosmos DB、Azure SQL 數據庫、Azure Database for MySQL、Azure Database for PostgreSQL 和 Azure SQL 託管實例的優勢和用途

• 描述 Azure Marketplace 的優勢和用途

Describe core solutions available in Azure

• describe the benefits and usage of Internet of Things (IoT) Hub, IoT Central, and Azure Sphere

• describe the benefits and usage of Azure Synapse Analytics, HDInsight, and Azure Databricks

• describe the benefits and usage of Azure Machine Learning, Cognitive Services and Azure Bot Service

• describe the benefits and usage of serverless computing solutions that include Azure Functions and Logic Apps

• describe the benefits and usage of Azure DevOps, GitHub, GitHub Actions, and Azure DevTest Labs

Describe Azure management tools

• describe the functionality and usage of the Azure Portal, Azure PowerShell, Azure CLI, Cloud Shell, and Azure Mobile App

• describe the functionality and usage of Azure Advisor

• describe the functionality and usage of Azure Resource Manager (ARM) templates

• describe the functionality and usage of Azure Monitor

• describe the functionality and usage of Azure Service Health

描述 Azure 中可用的核心解決方案

• 描述物聯網 (IoT) 中心、IoT Central 和 Azure Sphere 的優勢和用途

• 描述 Azure Synapse Analytics、HDInsight 和 Azure Databricks 的優勢和用途

• 描述 Azure 機器學習、認知服務和 Azure 機器人服務的優勢和用途

• 描述包含 Azure Functions 和邏輯應用程序的無服務器計算解決方案的優勢和用途

• 描述 Azure DevOps、GitHub、GitHub Actions 和 Azure DevTest Labs 的優勢和用途

描述 Azure 管理工具

• 描述 Azure 門戶、Azure PowerShell、Azure CLI、Cloud Shell 和 Azure 移動應用程序的功能和用法

• 描述 Azure 顧問的功能和用法

• 描述 Azure 資源管理器 (ARM) 模板的功能和用法

• 描述 Azure Monitor 的功能和用法

• 描述 Azure 服務運行狀況的功能和用法

Describe Azure security features

• describe basic features of Azure Security Center, including policy compliance, security

• alerts, secure score, and resource hygiene

• describe the functionality and usage of Azure Key Vault

• describe the functionality and usage of Azure Sentinel

• describe the functionality and usage of Azure Dedicated Hosts

Describe Azure network security

• describe the concept of defense in depth

• describe the functionality and usage of Network Security Groups (NSG)

• describe the functionality and usage of Azure Firewall

• describe the functionality and usage of Azure DDoS protection

描述 Azure 安全功能

• 描述 Azure 安全中心的基本功能，包括策略合規性、安全性

• 警報、安全分數和資源衛生

• 描述 Azure Key Vault 的功能和用法

• 描述 Azure Sentinel 的功能和用法

• 描述 Azure 專用主機的功能和用法

描述 Azure 網絡安全

• 深入描述防禦的概念

• 描述網絡安全組 (NSG) 的功能和使用

• 描述 Azure 防火牆的功能和用法

• 描述 Azure DDoS 保護的功能和用法

Describe core Azure identity services

• explain the difference between authentication and authorization

• define Azure Active Directory

• describe the functionality and usage of Azure Active Directory

• describe the functionality and usage of Conditional Access, Multi-Factor Authentication (MFA), and Single Sign-On (SSO)

Describe Azure governance features

• describe the functionality and usage of Role-Based Access Control (RBAC)

• describe the functionality and usage of resource locks

• describe the functionality and usage of tags

• describe the functionality and usage of Azure Policy

• describe the functionality and usage of Azure Blueprints

• describe the Cloud Adoption Framework for Azure

Describe privacy and compliance resources

• describe the Microsoft core tenets of Security, Privacy, and Compliance

• describe the purpose of the Microsoft Privacy Statement, Online Services Terms (OST) and Data Protection Amendment (DPA)

• describe the purpose of the Trust Center

• describe the purpose of the Azure compliance documentation

• describe the purpose of Azure Sovereign Regions (Azure Government cloud services and Azure China cloud services)

描述核心 Azure 身份服務

• 解釋認證和授權的區別

• 定義 Azure Active Directory

• 描述 Azure Active Directory 的功能和用法

• 描述條件訪問、多重身份驗證 (MFA) 和單點登錄 (SSO) 的功能和用法

描述 Azure 治理功能

• 描述基於角色的訪問控制 (RBAC) 的功能和用法

• 描述資源鎖的功能和使用

• 描述標籤的功能和用法

• 描述 Azure Policy 的功能和用法

• 描述 Azure 藍圖的功能和用法

• 描述 Azure 的雲採用框架

描述隱私和合規性資源

• 描述 Microsoft 的安全、隱私和合規性核心原則

• 描述 Microsoft 隱私聲明、在線服務條款 (OST) 和數據保護修正案 (DPA) 的目的

• 描述信任中心的目的

• 描述 Azure 合規性文檔的目的

• 描述 Azure Sovereign Regions（Azure 政府雲服務和 Azure 中國雲服務）的目的

Describe methods for planning and managing costs

• identify factors that can affect costs (resource types, services, locations, ingress and egress traffic)

• identify factors that can reduce costs (reserved instances, reserved capacity, hybrid use benefit, spot pricing)

• describe the functionality and usage of the Pricing calculator and the Total Cost of Ownership (TCO) calculator

• describe the functionality and usage of Azure Cost Management

Describe Azure Service Level Agreements (SLAs) and service lifecycles

• describe the purpose of an Azure Service Level Agreement (SLA)

• identify actions that can impact an SLA (i.e. Availability Zones)

• describe the service lifecycle in Azure (Public Preview and General Availability)

描述計劃和管理成本的方法

• 確定可能影響成本的因素（資源類型、服務、位置、入口和出口流量）

• 確定可以降低成本的因素（預留實例、預留容量、混合使用優勢、現貨定價）

• 描述定價計算器和總擁有成本 (TCO) 計算器的功能和用法

• 描述 Azure 成本管理的功能和用法

描述 Azure 服務級別協議 (SLA) 和服務生命週期

• 描述 Azure 服務級別協議 (SLA) 的目的

• 識別可能影響 SLA 的操作（即可用區）

• 描述 Azure 中的服務生命週期（公共預覽版和一般可用性）

Describe cloud computing

• define cloud computing

• describe the shared responsibility model

• define cloud models, including public, private, and hybrid

• identify appropriate use cases for each cloud model

• describe the consumption-based model

• compare cloud pricing models

Describe the benefits of using cloud services

• describe the benefits of high availability and scalability in the cloud

• describe the benefits of reliability and predictability in the cloud

• describe the benefits of security and governance in the cloud

• describe the benefits of manageability in the cloud

Describe cloud service types

• describe infrastructure as a service (IaaS)

• describe platform as a service (PaaS)

• describe software as a service (SaaS)

• identify appropriate use cases for each cloud service (IaaS, PaaS, SaaS)

描述雲計算

• 定義雲計算

• 描述共享責任模型

• 定義雲模型，包括公共、私有和混合

• 為每個雲模型確定適當的用例

• 描述基於消費的模型

• 比較雲定價模型

描述使用雲服務的好處

• 描述雲中高可用性和可擴展性的好處

• 描述雲中可靠性和可預測性的好處

• 描述雲中安全和治理的好處

• 描述雲中可管理性的好處

描述雲服務類型

• 描述基礎設施即服務 (IaaS)

• 描述平台即服務 (PaaS)

• 描述軟件即服務 (SaaS)

• 為每個雲服務（IaaS、PaaS、SaaS）確定合適的用例

Describe the core architectural components of Azure

• describe Azure regional, regional pairs, and sovereign regions

• describe availability zones

• describe Azure datacenters

• describe Azure resources and resource groups

• describe subscriptions

• describe management groups

• describe the hierarchy of resource groups, subscriptions, and management groups

Describe Azure compute and networking services

• compare compute types, including container instances, virtual machines (VMs), and functions

• describe VM options, including Azure Virtual Machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop

• describe resources required for virtual machines

• describe application hosting options, including the Web Apps feature of Azure App Service, containers, and virtual machines

• describe virtual networking, including the purpose of Azure Virtual Networks, Azure virtual subnets, peering, Azure DNS, Azure VPN Gateway, and Azure ExpressRoute define public and private endpoints

Describe Azure storage services

• compare Azure storage services

• describe storage tiers

• describe redundancy options

• describe storage account options and storage types

• identify options for moving files, including AzCopy, Azure Storage Explorer, and Azure File Sync

• describe migration options, including Azure Migrate and Azure Data Box

Describe Azure identity, access, and security

• describe directory services in Azure, including Azure Active Directory (Azure AD) and Azure Active Directory Domain Services (Azure AD DS)

• describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication, and passwordless

• describe external identities and guest access in Azure

• describe Azure AD Conditional Access

• describe Azure role-based access control (RBAC)

• describe the concept of Zero Trust

• describe the purpose of the defense in depth model

• describe the purpose of Microsoft Defender for Cloud

描述 Azure 的核心架構組件

• 描述 Azure 區域、區域對和主權區域

• 描述可用區

• 描述 Azure 數據中心

• 描述 Azure 資源和資源組

• 描述訂閱

• 描述管理組

• 描述資源組、訂閱和管理組的層次結構

描述 Azure 計算和網絡服務

• 比較計算類型，包括容器實例、虛擬機 (VM) 和函數

• 描述 VM 選項，包括 Azure 虛擬機、Azure 虛擬機規模集、可用性集和 Azure 虛擬桌面

• 描述虛擬機所需的資源

• 描述應用程序託管選項，包括 Azure 應用服務、容器和虛擬機的 Web 應用功能

• 描述虛擬網絡，包括 Azure 虛擬網絡、Azure 虛擬子網、對等互連、Azure DNS、Azure VPN 網關和 Azure ExpressRoute 的用途 定義公共和專用終結點

描述 Azure 存儲服務

• 比較 Azure 存儲服務

• 描述存儲層

• 描述冗餘選項

• 描述存儲帳戶選項和存儲類型

• 確定移動文件的選項，包括 AzCopy、Azure 存儲資源管理器和 Azure 文件同步

• 描述遷移選項，包括 Azure Migrate 和 Azure Data Box

描述 Azure 標識、訪問權限和安全性

• 描述 Azure 中的目錄服務，包括 Azure Active Directory (Azure AD) 和 Azure Active Directory Domain Services (Azure AD DS)

• 描述 Azure 中的身份驗證方法，包括單點登錄 (SSO)、多因素身份驗證和無密碼

• 描述 Azure 中的外部身份和來賓訪問

• 描述 Azure AD 條件訪問

• 描述 Azure 基於角色的訪問控制 (RBAC)

• 描述零信任的概念

• 描述深度防禦模型的目的

• 描述 Microsoft Defender for Cloud 的用途

Describe cost management in Azure

• describe factors that can affect costs in Azure

• compare the Pricing calculator and the Total Cost of Ownership (TCO) calculator describe the Azure Cost Management and Billing tool

• describe the purpose of tags

Describe features and tools in Azure for governance and compliance

• describe the purpose of Azure Blueprints

• describe the purpose of Azure Policy

• describe the purpose of resource locks

• describe the purpose of the Service Trust Portal

Describe features and tools for managing and deploying Azure resources

• describe the Azure portal

• describe Azure Cloud Shell, including Azure CLI and Azure PowerShell describe the purpose of Azure Arc

• describe Azure Resource Manager and Azure Resource Manager templates (ARM templates)

Describe monitoring tools in Azure

• describe the purpose of Azure Advisor

• describe Azure Service Health

• describe Azure Monitor, including Log Analytics, Azure Monitor alerts, and Application Insights

描述 Azure 中的成本管理

• 描述可能影響 Azure 成本的因素

• 比較定價計算器和總擁有成本 (TCO) 計算器描述 Azure 成本管理和計費工具

• 描述標籤的用途

描述 Azure 中用於治理和合規性的功能和工具

• 描述 Azure 藍圖的用途

• 描述 Azure Policy 的目的

• 描述資源鎖的用途

• 描述服務信任門戶的目的

描述用於管理和部署 Azure 資源的功能和工具

• 描述 Azure 門戶

• 描述 Azure Cloud Shell，包括 Azure CLI 和 Azure PowerShell 描述 Azure Arc 的用途

• 描述 Azure 資源管理器和 Azure 資源管理器模板（ARM 模板）

描述 Azure 中的監視工具

• 描述 Azure 顧問的目的

• 描述 Azure 服務運行狀況

• 描述 Azure Monitor，包括 Log Analytics、Azure Monitor 警報和 Application Insights