Reading documentation and watching video courses builds conceptual awareness, but actually deploying resources in a live Azure environment transforms that awareness into genuine understanding. The AZ-900 exam tests foundational knowledge across cloud concepts, core Azure services, security, compliance, pricing, and support. While the exam does not require deep technical configuration skills, candidates who have touched the services they are reading about consistently demonstrate better retention and perform more confidently when exam questions reference specific service behaviors or portal workflows.
Hands-on practice also addresses one of the most common challenges AZ-900 candidates face, which is distinguishing between similar services that appear interchangeable when described in text but feel distinctly different once deployed. The difference between Azure Blob Storage and Azure File Storage, for example, becomes immediately intuitive after you have uploaded files to both and observed how each presents its interface and access patterns. No amount of reading produces that same clarity as quickly as fifteen minutes of direct experimentation in the Azure portal.
Setting Up Your Free Azure Account for Lab Practice
The first practical step every AZ-900 candidate should take is creating a free Azure account at azure.microsoft.com. Microsoft provides new account holders with a credit for exploration during the first thirty days, twelve months of popular services at no charge, and a set of always-free services that never expire regardless of how long the account has been active. This combination gives candidates ample resources to complete every lab exercise relevant to AZ-900 preparation without incurring meaningful costs.
During account creation you will need a Microsoft account, a valid phone number for identity verification, and a credit card for billing verification purposes. Microsoft does not charge the card unless you explicitly upgrade to a paid subscription after the free period ends. Once the account is active, spend a few minutes familiarizing yourself with the Azure portal layout before beginning any labs. Understanding where the search bar is, how to navigate between resources and resource groups, and where to find billing and subscription information saves time during every subsequent lab session.
Exploring the Azure Portal and Resource Organization
One of the most valuable early lab exercises for AZ-900 candidates is simply spending time navigating the Azure portal and understanding how resources are organized. Begin by locating the All Services menu and browsing through the service categories including compute, networking, storage, databases, and security. Notice how services are grouped and read the brief descriptions provided for each one. This orientation exercise builds the mental map of the Azure service landscape that the exam assumes you have.
Create your first resource group by navigating to Resource Groups and clicking Create. Give it a descriptive name, select a region, and add a tag with a name and value of your choosing. This simple exercise introduces three concepts that appear throughout the exam: resource groups as logical containers for related resources, regions as the geographic locations where Azure resources are deployed, and tags as metadata that supports organization and cost management. Understanding these organizational primitives is foundational to everything else in the Azure platform.
Deploying Your First Virtual Machine Step by Step
Virtual machines are one of the most commonly referenced services in the AZ-900 exam and deploying one manually through the portal is an essential lab exercise. Navigate to Virtual Machines and click Create. Work through each configuration tab including Basics, Disks, Networking, Management, and Monitoring without necessarily changing every default setting. Reading each option as you encounter it and understanding what it controls builds familiarity with VM configuration concepts that exam questions reference.
During the Basics tab, observe the available VM sizes and notice how CPU count, memory, and cost vary across the size families. Select a small, inexpensive size like B1s for your test deployment to minimize cost. On the Networking tab, observe that Azure automatically creates a virtual network, subnet, and network security group when you deploy a VM, which illustrates the relationship between these networking components. After deployment completes, connect to the VM using RDP or SSH, then delete the entire resource group containing the VM and its associated resources to stop incurring charges. This delete exercise also demonstrates that resource groups serve as a convenient unit of management and cleanup.
Working With Azure Storage Services in the Lab
Azure Storage is a significant topic in the AZ-900 exam and hands-on exploration of its components builds clarity that text descriptions rarely achieve. Create a storage account through the portal and observe the configuration options including redundancy levels such as LRS, ZRS, GRS, and GZRS. Understanding what each redundancy option means for data durability and availability is testable knowledge, and seeing these options in context during deployment helps the concepts stick more effectively than reading definitions in isolation.
After creating the storage account, explore each storage service within it. Navigate to Containers and create a blob container, then upload a file and observe the access tier options including hot, cool, and archive. Navigate to File Shares and create a share, which presents a different interface oriented toward shared file access rather than object storage. Explore Tables and Queues briefly to understand their purpose even if you do not interact with them deeply. This exploration exercise directly maps to exam questions that ask you to identify the appropriate Azure Storage service for a given scenario based on the data type and access pattern described.
Hands-On Practice With Azure Networking Components
Networking fundamentals covered in AZ-900 become significantly clearer after you have created and connected basic networking components in the portal. Create a virtual network with a custom address space and add two subnets with non-overlapping ranges within that space. This exercise reinforces the relationship between virtual networks and subnets and builds intuition for IP address planning that the exam tests conceptually.
After creating the virtual network, navigate to Network Security Groups and create one. Observe the default inbound and outbound rules that Azure creates automatically and understand what traffic they allow and deny. Add a custom inbound rule that allows RDP traffic on port 3389 from a specific source IP address and observe how the priority number determines rule evaluation order. Associate the NSG with one of your subnets and observe that it now controls traffic entering and leaving that subnet. This hands-on sequence makes NSG concepts concrete in a way that directly improves performance on networking questions in the AZ-900 exam.
Experimenting With Azure App Service and Web Apps
Azure App Service is a platform-as-a-service compute option that appears regularly in AZ-900 exam questions about the differences between IaaS, PaaS, and SaaS service models. Creating a Web App through App Service gives you direct experience with what PaaS actually means in practice. Navigate to App Services and create a new Web App. During configuration, observe that you do not select an operating system version, patch level, or server configuration. You select a runtime stack, a pricing tier, and a region, and Azure handles everything below that level automatically.
Once the Web App is deployed, navigate to its URL and observe the default landing page confirming that the service is running. Explore the App Service Plan settings to understand how the plan represents the underlying compute capacity that one or more web apps share. Look at the Scale Up and Scale Out options within the plan to understand the difference between vertical scaling, adding more resources to existing instances, and horizontal scaling, adding more instances. These scaling concepts appear in AZ-900 questions and having observed them in the portal makes the distinction immediately clear.
Using Azure SQL Database for Database Fundamentals
Database services are covered in the AZ-900 exam at a conceptual level, and creating an Azure SQL Database gives you practical exposure to what a managed database service looks like compared to running SQL Server on a virtual machine. Navigate to SQL Databases and create a new database. During configuration, observe the server creation step where you define an admin login and select the region. Notice the compute and storage configuration options and the serverless tier that automatically pauses the database during periods of inactivity, which is a useful cost management feature worth understanding for the exam.
After the database is created, navigate to the Query Editor in the portal and connect using the admin credentials you created. Run a simple SQL statement to create a table and insert a row. This brief interaction demonstrates that Azure SQL Database provides full SQL Server functionality through a managed service without requiring you to install, patch, or maintain the underlying server infrastructure. The contrast between this experience and managing a SQL Server installation on a virtual machine illustrates the IaaS versus PaaS distinction more vividly than any written explanation.
Practicing With Azure Active Directory and Identity
Identity management is a foundational topic in AZ-900 and hands-on practice with Azure Active Directory, now called Microsoft Entra ID, builds familiarity with concepts that the exam tests regularly. Navigate to Microsoft Entra ID in the portal and explore the Users section. Create a new user account, assign it a role such as Global Reader, and observe the license assignment options. This sequence introduces the relationship between user accounts, role assignments, and licensing that underlies identity management across the Microsoft cloud platform.
Explore the Groups section and create both a security group and a Microsoft 365 group to understand the difference between them. Add your test user to one of the groups and observe how group membership can be used for role assignments and application access. Navigate to the Enterprise Applications section and browse the pre-integrated application gallery to understand the scale of the single sign-on ecosystem that Azure AD supports. These explorations build the conceptual foundation for AZ-900 identity questions without requiring the depth of configuration knowledge that higher-level certifications demand.
Exploring Azure Cost Management and Pricing Tools
Pricing, billing, and cost management represent a meaningful portion of the AZ-900 exam and hands-on familiarity with Azure’s cost tools provides an advantage that candidates who only study pricing concepts from documentation often lack. Navigate to Cost Management and Billing in the portal and explore the Cost Analysis view. Even with minimal resources deployed in a free account, the cost analysis interface demonstrates how costs can be filtered by service, resource group, tag, and time period. Understanding this interface helps you answer exam questions about how organizations monitor and control their Azure spending.
Open the Azure Pricing Calculator at azure.microsoft.com/pricing/calculator in a separate tab and build a cost estimate for a simple architecture including a virtual machine, a storage account, and an Azure SQL Database. Observe how changing the region, VM size, redundancy option, and reservation commitment affects the estimated monthly cost. Then open the Total Cost of Ownership Calculator and work through a scenario comparing on-premises infrastructure costs to equivalent Azure services. Both tools appear by name in AZ-900 exam questions and using them directly ensures you understand their purpose and how to navigate them confidently.
Understanding Azure Compliance and Trust Center Resources
Compliance and trust are covered in the AZ-900 exam and while this topic area does not lend itself to the same kind of hands-on deployment practice as compute or networking, there are practical exploration exercises that build genuine familiarity. Navigate to the Microsoft Service Trust Portal at servicetrust.microsoft.com and browse the available compliance documentation categories including audit reports, data protection resources, and compliance guides. Understanding what types of documentation Microsoft makes available to customers and how to find them is testable knowledge in the AZ-900 context.
Within the Azure portal, navigate to Microsoft Defender for Cloud and explore the Regulatory Compliance dashboard even if no policies are actively enforced in your free account. Observe the compliance frameworks listed and how Azure maps its built-in policies to regulatory controls within those frameworks. Navigate to Azure Policy and browse the built-in policy definitions to understand how policies enforce configuration standards across Azure resources. These explorations build awareness of Azure’s governance and compliance capabilities without requiring a complex environment to observe them meaningfully.
Hands-On Labs Through Microsoft Learn Sandbox Environments
Microsoft Learn provides free sandbox environments that allow candidates to complete guided lab exercises without using their own Azure subscription or incurring any costs. These sandboxes spin up temporary Azure environments pre-configured for specific exercises and expire automatically after the session ends. For AZ-900 candidates who prefer structured guidance over open-ended exploration, Microsoft Learn sandboxes offer an excellent balance of hands-on practice and instructional context.
Navigate to learn.microsoft.com and search for the AZ-900 learning path. Each module within the path includes at least one exercise unit that uses a sandbox environment or provides portal-based instructions. Working through every exercise in the official learning path covers all exam domains with hands-on reinforcement and takes most candidates between ten and fifteen hours to complete depending on their prior experience. The sandbox environments are particularly valuable for candidates who are cautious about deploying resources in their personal subscription and want guaranteed cost protection during their lab practice.
Using Azure Cloud Shell for Command-Line Familiarity
While AZ-900 does not test deep command-line skills, basic familiarity with Azure Cloud Shell introduces candidates to the scripting and automation dimension of Azure management that the exam references conceptually. Azure Cloud Shell is a browser-based command-line environment accessible directly from the Azure portal that provides both PowerShell and Bash interfaces with the Azure CLI and Azure PowerShell modules pre-installed. No local software installation is required.
Open Cloud Shell from the portal toolbar and select either PowerShell or Bash. Run a simple command such as az account show to display information about your current subscription, or az group list to list your resource groups. Try creating a resource group using az group create and observe that the result appears in the portal immediately. This brief exercise illustrates that everything you can do in the portal can also be done through code, which is the foundation of infrastructure automation that the exam mentions in the context of management tools. The familiarity built here makes exam questions about Azure CLI, Azure PowerShell, and ARM templates significantly more intuitive.
Practice Labs for Understanding Azure Monitor and Diagnostics
Monitoring concepts appear in the AZ-900 exam within the management tools and governance domain. Hands-on exploration of Azure Monitor builds familiarity with the platform’s observability capabilities that exam questions reference. Navigate to Azure Monitor in the portal and explore the Metrics section. Select a resource from your subscription such as a storage account or virtual machine if you have one running, and browse the available metrics for that resource. Observe how you can plot multiple metrics on the same chart and set time ranges for the data displayed.
Navigate to the Alerts section within Azure Monitor and create a simple alert rule that would trigger if a metric on one of your resources exceeded a threshold. Walk through the configuration including the condition, the action group that defines who gets notified and how, and the alert rule details. You do not need to save and activate the alert to benefit from the exercise. Simply working through the configuration interface builds understanding of how Azure’s alerting system functions at a conceptual level that directly supports AZ-900 exam questions about monitoring and management capabilities.
Simulating Real-World Scenarios With Multi-Service Labs
The most advanced lab exercises for AZ-900 preparation involve combining multiple services into simple multi-component scenarios that reflect how Azure services work together in practice. A straightforward example is deploying a web application architecture consisting of an App Service for the application tier and an Azure SQL Database for data storage, then observing how the application connects to the database using a connection string stored as an application setting. This simple two-tier architecture illustrates service integration patterns that the exam references in questions about Azure compute and database services.
Another valuable multi-service exercise involves setting up basic governance across your free subscription by creating a resource group naming convention, applying tags to all resources, creating a budget alert in Cost Management, and reviewing the Azure Advisor recommendations generated for your account. Working through these governance activities in sequence mirrors the kind of operational responsibility that Azure administrators carry and builds awareness of Azure’s management and governance capabilities across several exam topic areas simultaneously. Candidates who complete exercises like these arrive at the AZ-900 exam with an integrated understanding of how Azure works as a platform rather than a fragmented collection of individual service facts.
Building a Personal Study Lab Schedule That Drives Results
Consistent lab practice spread across several weeks produces better retention than intensive sessions concentrated into a short period before the exam. A practical study schedule for AZ-900 preparation might allocate three to four weeks of daily thirty-minute lab sessions alongside video or documentation study. In the first week, focus on portal navigation, resource group creation, and virtual machine deployment. In the second week, explore storage, networking, and App Service. In the third week, cover identity, cost management, compliance tools, and monitoring. In the final week, combine services in multi-component exercises and review any areas where hands-on practice revealed gaps in your understanding.
Keeping a simple lab journal where you note what you deployed, what you observed, and any questions that arose during each session creates a reference document that is valuable for final review before the exam. Writing down observations in your own words rather than copying documentation language forces active processing of the material that strengthens retention. Candidates who approach AZ-900 preparation with this combination of structured lab practice, documentation study, and personal reflection consistently find the exam less intimidating than those who rely on passive study methods alone, because the portal and services feel familiar rather than abstract when they encounter them described in exam questions.
ConclusionÂ
The final dimension of effective hands-on preparation is developing the habit of connecting your lab observations directly to the types of questions the exam asks. After each lab session, spend five to ten minutes thinking about what questions could be written about the service or feature you just explored. What are the key differences between the options you saw during configuration? What scenarios would make you choose one option over another? What would happen if a specific setting were changed? This reflective practice bridges the gap between knowing how to use a service and being able to answer scenario-based exam questions about it.
AZ-900 questions frequently ask candidates to identify the most appropriate Azure service for a described scenario or to select the correct statement about how a service or feature behaves. Candidates who have deployed and explored the services being described can approach these questions from a position of genuine familiarity rather than purely theoretical knowledge. The hands-on labs described throughout this guide collectively cover every major service category in the AZ-900 exam and provide the experiential foundation that transforms a well-studied candidate into a confident one who approaches the exam knowing that the services and concepts being tested are not abstract ideas but familiar tools that they have actually used and observed in a real Azure environment.