What problem does it solve? Learners new to Azure infrastructure often struggle to connect networking concepts (VNets, subnets, NSGs) with a concrete, working deployment, and frequently rack up unexpected Azure bills by leaving VMs running. This Skill walks a learner through building a complete, secured Azure IaaS environment from scratch while teaching cost discipline. ## Core Features & Use Cases - Network-first Azure deployment: Create a resource group, VNet (10.20.0.0/16), subnet, and NSG with PowerShell Az module commands, with each concept explained as it is built. - Secure VM deployment with IIS: Deploy a Windows Server 2022 VM restricted to RDP from the learner's own IP, install IIS, and serve a custom page over HTTP to prove end-to-end connectivity. - Cost and cleanup discipline: Teaches the difference between "stopped" and "deallocated" VM states, dynamic vs static public IPs, and full teardown via resource group deletion. - Use Case: An MSSA student in the Server & Cloud Administration track completes their first Azure IaaS project, ending with a browser-reachable web server on infrastructure they built and a deallocated VM that stops billing. ## Quick Start Ask the mentor to start the sca-azure-vnet-vm project and walk you through building your first Azure virtual network and Windows VM step by step.