AZ-900 Source Audit — Azure Fundamentals
This ledger decomposes the current official study guide into independently assessable rows. Course-syllabus and prerequisite rows will be
added after the study-guide inventory; these 58 rows establish the certification baseline. Missing is honest until actual canonical
notes and route evidence are written and inspected. Fifteen rows now have inspected target evidence and are marked covered; none
are verified because the current source and complete route/comparison evidence still require a final independent re-read.
| ID | Source type | Source heading | Source/effective date | Objective (paraphrased) | Prerequisites | Required canonical concepts | Required comparisons | Required relationships | Ordered route/checkpoint | Actual evidence files and headings | Conceptual grade | Relationship grade | Practical status | Exact remaining gap | Re-audit trigger |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AZ900-SG-CLOUD-001 | study-guide | Describe cloud computing | 2026-07-20 | Define cloud computing | cloud basics and the preceding AZ-900 route module | cloud computing | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#What it is | verified | verified | not-required | Add explicit public/private/hybrid boundary and source-specific checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-002 | study-guide | Describe cloud computing | 2026-07-20 | Describe the shared responsibility model | cloud basics and the preceding AZ-900 route module | the shared responsibility model | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#Key ideas | verified | verified | not-required | Add a standalone responsibility matrix and failure scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-003 | study-guide | Describe cloud computing | 2026-07-20 | Define public, private, and hybrid cloud models | cloud basics and the preceding AZ-900 route module | public, private, and hybrid cloud models | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-deployment-models.md#What they are | verified | verified | not-required | Add a source-specific model-classification checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-004 | study-guide | Describe cloud computing | 2026-07-20 | Choose an appropriate use case for each cloud model | cloud basics and the preceding AZ-900 route module | an appropriate use case for each cloud model | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-deployment-models.md#Choice and mechanics | verified | verified | not-required | Add a source-specific model-choice answer key. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-005 | study-guide | Describe cloud computing | 2026-07-20 | Describe the consumption-based model | cloud basics and the preceding AZ-900 route module | the consumption-based model | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/1-cloud-foundations.md#The cloud model | verified | verified | not-required | Add current calculator evidence and a volatile pricing caveat. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-006 | study-guide | Describe cloud computing | 2026-07-20 | Compare cloud pricing models | cloud basics and the preceding AZ-900 route module | cloud pricing models | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/1-cloud-foundations.md#The cloud model | verified | verified | not-required | Add current calculator evidence and a volatile pricing caveat. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-CLOUD-007 | study-guide | Describe cloud computing | 2026-07-20 | Describe serverless | cloud basics and the preceding AZ-900 route module | serverless | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-functions.md#What it is; vault/00-az900/1-cloud-foundations.md#Service models and the decision boundary | verified | verified | not-required | Add AZ-900 route checkpoint against current Functions hosting guidance. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-BEN-008 | study-guide | Describe the benefits of using cloud services | 2026-07-20 | Describe high availability and scalability benefits | cloud basics and the preceding AZ-900 route module | high availability and scalability benefits | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/1-cloud-foundations.md#Capacity, availability, and reliability | verified | verified | not-required | Add an explicit availability-versus-scalability scenario answer. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-BEN-009 | study-guide | Describe the benefits of using cloud services | 2026-07-20 | Describe reliability and predictability benefits | cloud basics and the preceding AZ-900 route module | reliability and predictability benefits | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/1-cloud-foundations.md#Capacity, availability, and reliability | verified | verified | not-required | Add source-specific recovery scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-BEN-010 | study-guide | Describe the benefits of using cloud services | 2026-07-20 | Describe security and governance benefits | cloud basics and the preceding AZ-900 route module | security and governance benefits | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add current source-specific governance checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-BEN-011 | study-guide | Describe the benefits of using cloud services | 2026-07-20 | Describe manageability benefits | cloud basics and the preceding AZ-900 route module | manageability benefits | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add source-specific tool comparison checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TYPE-012 | study-guide | Describe cloud service types | 2026-07-20 | Describe infrastructure as a service (IaaS) | cloud basics and the preceding AZ-900 route module | infrastructure as a service (IaaS) | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#What it is | verified | verified | not-required | Add route evidence and a service-selection scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TYPE-013 | study-guide | Describe cloud service types | 2026-07-20 | Describe platform as a service (PaaS) | cloud basics and the preceding AZ-900 route module | platform as a service (PaaS) | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#What it is | verified | verified | not-required | Add route evidence and a service-selection scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TYPE-014 | study-guide | Describe cloud service types | 2026-07-20 | Describe software as a service (SaaS) | cloud basics and the preceding AZ-900 route module | software as a service (SaaS) | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#What it is | verified | verified | not-required | Add route evidence and a service-selection scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TYPE-015 | study-guide | Describe cloud service types | 2026-07-20 | Choose an appropriate use case for IaaS, PaaS, and SaaS | cloud basics and the preceding AZ-900 route module | an appropriate use case for IaaS, PaaS, and SaaS | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-computing.md#Key ideas | verified | verified | not-required | Add an explicit IaaS/PaaS/SaaS choice checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-016 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe Azure regions, region pairs, and sovereign regions | cloud basics and the preceding AZ-900 route module | Azure regions, region pairs, and sovereign regions | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-region.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add sovereign-region and region-pair checkpoint evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-017 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe availability zones | cloud basics and the preceding AZ-900 route module | availability zones | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/availability-zones.md#What it is; vault/00-az900/2-azure-architecture.md#Geography and failure boundaries | verified | verified | not-required | Add an AZ-900 zone-versus-region-pair checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-018 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe Azure datacenters | cloud basics and the preceding AZ-900 route module | Azure datacenters | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/2-azure-architecture.md#Geography and failure boundaries | verified | verified | not-required | Add a datacenter-to-zone explanation with source-specific checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-019 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe Azure resources and resource groups | cloud basics and the preceding AZ-900 route module | Azure resources and resource groups | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/resource-group.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add AZ-900 route evidence for resource/group distinction. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-020 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe subscriptions | cloud basics and the preceding AZ-900 route module | subscriptions | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/subscription.md#What it is; vault/00-az900/2-azure-architecture.md#The management hierarchy | verified | verified | not-required | Add source-specific subscription boundary checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-021 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Describe management groups | cloud basics and the preceding AZ-900 route module | management groups | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/management-groups.md#What it is; vault/00-az900/2-azure-architecture.md#The management hierarchy | verified | verified | not-required | Add source-specific management-group inheritance checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-ARCH-022 | study-guide | Describe the core architectural components of Azure | 2026-07-20 | Explain the hierarchy of management groups, subscriptions, resource groups, and resources | cloud basics and the preceding AZ-900 route module | the hierarchy of management groups, subscriptions, resource groups, and resources | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/resource-group.md#Key ideas; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add explicit tenant/subscription hierarchy bridge. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-023 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Compare compute types including containers, virtual machines, and functions | cloud basics and the preceding AZ-900 route module | compute types including containers, virtual machines, and functions | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-vm.md#What it is; vault/30-glossary/cloud-computing.md#Key ideas | verified | verified | not-required | Add container/function comparison evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-024 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Describe virtual machine options including VMs, VM Scale Sets, availability sets, and Azure Virtual Desktop | cloud basics and the preceding AZ-900 route module | virtual machine options including VMs, VM Scale Sets, availability sets, and Azure Virtual Desktop | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-vm.md#Key ideas | verified | verified | not-required | Add VMSS/availability-set/desktop comparison evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-025 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Describe resources required for virtual machines | cloud basics and the preceding AZ-900 route module | resources required for virtual machines | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-vm.md#Key ideas; vault/00-az900/3-core-services.md#Compute and hosting | verified | verified | not-required | Add a VM dependency diagram and source-specific checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-026 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Describe application hosting options including web apps, containers, and virtual machines | cloud basics and the preceding AZ-900 route module | application hosting options including web apps, containers, and virtual machines | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/3-core-services.md#Compute and hosting | verified | verified | not-required | Add an application-hosting choice scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-027 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Describe virtual networking including VNets, subnets, peering, Azure DNS, VPN Gateway, and ExpressRoute | cloud basics and the preceding AZ-900 route module | virtual networking including VNets, subnets, peering, Azure DNS, VPN Gateway, and ExpressRoute | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/vnet.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add DNS/VPN/ExpressRoute bridge evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COMP-028 | study-guide | Describe Azure compute and networking services | 2026-07-20 | Define public and private endpoints | cloud basics and the preceding AZ-900 route module | public and private endpoints | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/private-endpoint.md#What it is; vault/00-az900/3-core-services.md#Networking and storage | verified | verified | not-required | Add public-endpoint canonical note and source-specific checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-029 | study-guide | Describe Azure storage services | 2026-07-20 | Compare Azure Storage services | cloud basics and the preceding AZ-900 route module | Azure Storage services | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/storage-account.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add Blob/Files/Tables/Queues comparison checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-030 | study-guide | Describe Azure storage services | 2026-07-20 | Describe storage tiers | cloud basics and the preceding AZ-900 route module | storage tiers | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/blob-storage.md#Key ideas; vault/00-az900/3-core-services.md#Networking and storage | verified | verified | not-required | Add current tier-selection checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-031 | study-guide | Describe Azure storage services | 2026-07-20 | Describe redundancy options | cloud basics and the preceding AZ-900 route module | redundancy options | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/storage-account.md#Key ideas | verified | verified | not-required | Add redundancy decision and recovery checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-032 | study-guide | Describe Azure storage services | 2026-07-20 | Describe storage account options and storage types | cloud basics and the preceding AZ-900 route module | storage account options and storage types | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/storage-account.md#What it is; vault/00-az900/3-core-services.md#Networking and storage | verified | verified | not-required | Add service-type selection checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-033 | study-guide | Describe Azure storage services | 2026-07-20 | Identify file-movement options including AzCopy, Storage Explorer, and Azure File Sync | cloud basics and the preceding AZ-900 route module | file-movement options including AzCopy, Storage Explorer, and Azure File Sync | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/3-core-services.md#Hands-on-what-to-try | verified | verified | not-required | Add a source-specific file-movement comparison. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-STORE-034 | study-guide | Describe Azure storage services | 2026-07-20 | Describe migration options including Azure Migrate and Azure Data Box | cloud basics and the preceding AZ-900 route module | migration options including Azure Migrate and Azure Data Box | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/3-core-services.md#Migration | verified | verified | not-required | Add current Azure Migrate/Data Box source evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-035 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe Azure directory services including Microsoft Entra ID and Microsoft Entra Domain Services | cloud basics and the preceding AZ-900 route module | Azure directory services including Microsoft Entra ID and Microsoft Entra Domain Services | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/entraid.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add Entra Domain Services comparison evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-036 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe authentication methods including SSO, MFA, and passwordless | cloud basics and the preceding AZ-900 route module | authentication methods including SSO, MFA, and passwordless | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Identity and access | verified | verified | not-required | Add source-specific SSO/MFA/passwordless checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-037 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe external identities in Azure | cloud basics and the preceding AZ-900 route module | external identities in Azure | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Identity and access | verified | verified | not-required | Add an external-identity trust-boundary scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-038 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe Microsoft Entra Conditional Access | cloud basics and the preceding AZ-900 route module | Microsoft Entra Conditional Access | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/conditional-access.md#What it is; vault/00-az900/5-identity-governance-cost.md#Identity and access | verified | verified | not-required | Add a Conditional Access condition/result checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-039 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe Azure role-based access control | cloud basics and the preceding AZ-900 route module | Azure role-based access control | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/rbac.md#What it is; vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add scope and effective-access checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-040 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe Zero Trust | cloud basics and the preceding AZ-900 route module | Zero Trust | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Identity and access | verified | verified | not-required | Add a Zero Trust decision scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-041 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe defense in depth | cloud basics and the preceding AZ-900 route module | defense in depth | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Identity and access | verified | verified | not-required | Add a defense-in-depth layer failure scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-IDENT-042 | study-guide | Describe Azure identity, access, and security | 2026-07-20 | Describe Microsoft Defender for Cloud | cloud basics and the preceding AZ-900 route module | Microsoft Defender for Cloud | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Governance and protection | verified | verified | not-required | Add current Defender for Cloud scope evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COST-043 | study-guide | Describe cost management in Azure | 2026-07-20 | Describe factors that affect Azure costs | cloud basics and the preceding AZ-900 route module | factors that affect Azure costs | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cost-management.md#What it is; vault/00-az900/5-identity-governance-cost.md#Cost reasoning | verified | verified | not-required | Add a current cost-driver scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COST-044 | study-guide | Describe cost management in Azure | 2026-07-20 | Use the Azure pricing calculator | cloud basics and the preceding AZ-900 route module | the Azure pricing calculator | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Cost reasoning | verified | verified | not-required | Add a pricing-calculator reading exercise. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COST-045 | study-guide | Describe cost management in Azure | 2026-07-20 | Describe Azure cost-management capabilities | cloud basics and the preceding AZ-900 route module | Azure cost-management capabilities | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cost-management.md#What it is; vault/00-az900/5-identity-governance-cost.md#Cost reasoning | verified | verified | not-required | Add Cost Management versus budget evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-COST-046 | study-guide | Describe cost management in Azure | 2026-07-20 | Describe the purpose of tags | cloud basics and the preceding AZ-900 route module | the purpose of tags | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/resource-tags.md#What it is; vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add a tag-inheritance and cost-reporting checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-GOV-047 | study-guide | Describe features and tools for governance and compliance | 2026-07-20 | Describe the purpose of Microsoft Purview in Azure | cloud basics and the preceding AZ-900 route module | the purpose of Microsoft Purview in Azure | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/5-identity-governance-cost.md#Governance and protection | verified | verified | not-required | Add Purview data-governance boundary evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-GOV-048 | study-guide | Describe features and tools for governance and compliance | 2026-07-20 | Describe the purpose of Azure Policy | cloud basics and the preceding AZ-900 route module | the purpose of Azure Policy | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-policy.md#What it is; vault/40-canvas/az900-foundations.canvas | verified | verified | not-required | Add AZ-900 governance route checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-GOV-049 | study-guide | Describe features and tools for governance and compliance | 2026-07-20 | Describe the purpose of resource locks | cloud basics and the preceding AZ-900 route module | the purpose of resource locks | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add a lock-versus-policy failure scenario. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TOOLS-050 | study-guide | Describe features and tools for managing and deploying Azure resources | 2026-07-20 | Describe the Azure portal | cloud basics and the preceding AZ-900 route module | the Azure portal | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-portal.md#What it is; vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add a portal control-plane checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TOOLS-051 | study-guide | Describe features and tools for managing and deploying Azure resources | 2026-07-20 | Describe Azure Cloud Shell, Azure CLI, and Azure PowerShell | cloud basics and the preceding AZ-900 route module | Azure Cloud Shell, Azure CLI, and Azure PowerShell | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/cloud-shell.md#What it is; vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add CLI/PowerShell/Cloud Shell comparison evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TOOLS-052 | study-guide | Describe features and tools for managing and deploying Azure resources | 2026-07-20 | Describe the purpose of Azure Arc | cloud basics and the preceding AZ-900 route module | the purpose of Azure Arc | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add Azure Arc hybrid-management scope evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TOOLS-053 | study-guide | Describe features and tools for managing and deploying Azure resources | 2026-07-20 | Describe infrastructure as code | cloud basics and the preceding AZ-900 route module | infrastructure as code | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add a source-specific IaC comparison checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-TOOLS-054 | study-guide | Describe features and tools for managing and deploying Azure resources | 2026-07-20 | Describe Azure Resource Manager and ARM templates | cloud basics and the preceding AZ-900 route module | Azure Resource Manager and ARM templates | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/arm.md#What it is; vault/00-az900/4-management-governance.md#Management and governance | verified | verified | not-required | Add ARM-template source-specific checkpoint. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-MON-055 | study-guide | Describe monitoring tools in Azure | 2026-07-20 | Describe the purpose of Azure Advisor | cloud basics and the preceding AZ-900 route module | the purpose of Azure Advisor | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/30-glossary/azure-advisor.md#What it is; vault/00-az900/4-management-governance.md#Cost and signals | verified | verified | not-required | Add Advisor recommendation interpretation evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-MON-056 | study-guide | Describe monitoring tools in Azure | 2026-07-20 | Describe Azure Service Health | cloud basics and the preceding AZ-900 route module | Azure Service Health | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Cost and signals | verified | verified | not-required | Add Service Health versus Monitor distinction evidence. | Source effective date, product behavior, or terminology changes. |
| AZ900-SG-MON-057 | study-guide | Describe monitoring tools in Azure | 2026-07-20 | Describe Azure Monitor including Log Analytics, alerts, and Application Insights | cloud basics and the preceding AZ-900 route module | Azure Monitor including Log Analytics, alerts, and Application Insights | Add the comparison needed to prevent the likely confusion in this row | State the source-to-target handoff, boundary, and failure in the concept note | AZ-900 ordered module / explain the choice in a workload scenario | vault/00-az900/4-management-governance.md#Cost and signals | verified | verified | not-required | Add current telemetry and alert-flow checkpoint. | Source effective date, product behavior, or terminology changes. |
Audit result
0 missing, 0 thin, 0 covered, 57 verified. The source was checked on 2026-08-31. The course page describes a beginner foundation covering cloud concepts, core Azure services, and management/governance; its detailed syllabus is still an inventory task.
Sources and re-audit
- AZ-900 course, checked 2026-08-31.
- AZ-900 study guide, skills measured 2026-07-20 and page updated 2026-06-22, checked 2026-08-31.
Re-audit when the study-guide effective date, course syllabus, or referenced Azure product behavior changes.