MS-900 Cheat Sheet

Key concepts

• ✓IaaS, PaaS and SaaS responsibilities and real-world examples.
• ✓Public, private, hybrid and community cloud deployment models.
• ✓CapEx vs OpEx trade-offs and the economic case for cloud.
• ✓The shared responsibility model between Microsoft and the customer.

Watch out for

• ⚠IaaS gives you infrastructure control; SaaS gives you only the application.
• ⚠Hybrid cloud combines on-premises and public cloud — not two public clouds.
• ⚠The customer is always responsible for data and identity even in SaaS.
• ⚠CapEx is upfront spend; OpEx is ongoing spend — cloud shifts most costs to OpEx.

Key concepts

• ✓Core Describe security, compliance, privacy, and trust in Microsoft 365 concepts and how they apply in real-world cloud scenarios.
• ✓How to deploy describe security, compliance, privacy, and trust in microsoft 365 correctly and verify the outcome.
• ✓Troubleshooting describe security, compliance, privacy, and trust in microsoft 365 issues by interpreting error output and system state.
• ✓Cloud best practices and Describe security, compliance, privacy, and trust in Microsoft 365 design trade-offs tested by this certification.

Watch out for

• ⚠Selecting the most expensive service when a simpler managed option meets the requirement.
• ⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
• ⚠Choosing a global service fix when the issue is region-specific.
• ⚠Overlooking cost implications of cross-region data transfer in architecture questions.