Guide

How to pass AZ-900 Azure Fundamentals

A plain-English route through Microsoft's entry-level Azure exam: what it actually asks of you, whether you need it at all, the three domains and their weights, a realistic three-week study plan, and where to go once you've passed.

Updated July 2026 · ~8 min read

The exam

What is AZ-900, and who is it for?

AZ-900 earns the Microsoft Certified: Azure Fundamentals credential. It is the entry point to every Microsoft Azure certification path, and unlike the exams above it, it does not expect you to have touched the Azure portal, let alone written a line of Azure CLI or PowerShell.

That makes it unusual among IT certifications. AZ-900 is sat by people who will never administer a cloud environment: account managers, sales engineers, project managers, and finance partners who need to speak the same language as the engineers around them. It is also the standard first step for anyone genuinely new to cloud computing who wants proof they understand the basics before committing to a harder, hands-on exam such as AZ-104.

The exam tests whether you can describe things, not configure them. You will be asked to explain cloud concepts such as the shared responsibility model, name the right Azure service for a scenario, and reason about cost, governance, and security at a conceptual level. Microsoft updated the AZ-900 skills outline on 14 January 2026, so anchor your study to the current version rather than an older syllabus you find online.

Before you start

Do you actually need AZ-900?

AZ-900 is not a formal prerequisite for any other Microsoft certification, including AZ-104. That surprises a lot of people who assume they have to start here. So the honest question is not "can I skip it" but "will it help me."

It helps if you are new to cloud computing and want a low-stakes way to confirm this is the right direction before investing months in an Associate-level exam, if you work in a non-technical role where the certification itself is the point, or if a job advert or Microsoft Partner Network requirement specifically lists AZ-900. In any of those cases, it is a worthwhile week or two of study that never expires.

It is safe to skip if you already work with Azure hands-on day to day. If you can already explain a resource group, a region pair, and the difference between a virtual network and a virtual machine without looking anything up, you are ready to go straight to AZ-104 and save yourself the study time. Not sure which describes you? The which Microsoft certification first guide walks through the decision in more detail.

Format & domains

Exam format and skills domains

AZ-900 is entirely multiple choice — no drag-and-drop ordering, no hotspot clicks, no case studies. That alone makes it more approachable than the exams above it. The trade-off is that questions can still be worded precisely, so read each one carefully rather than pattern-matching on keywords.

The exam fee changes from country to country and Microsoft occasionally runs free-voucher promotions around events such as Microsoft Build, so check Microsoft's certification page for the current price where you live. The three skills domains and their weights, from the official January 2026 outline, are below.

AZ-900 skills measured (January 2026 outline)
DomainWeight
Describe cloud concepts25–30%
Describe Azure architecture and services35–40%
Describe Azure management and governance30–35%

Notice there is no dedicated networking or compute domain the way there is on AZ-104. Those topics live inside "Azure architecture and services" alongside identity and storage, which is why that domain carries the heaviest weight. Cloud concepts is the smallest domain but underpins the vocabulary the other two rely on, so do not treat it as a warm-up you can skim.

Three-week study plan

A realistic three-week study plan

Most candidates with some general IT background pass after one to two weeks of focused study. If cloud computing is genuinely new to you, three to four weeks is more realistic. The plan below spreads three weeks across the three domains in order of weight, with the final days set aside for simulation.

  1. Cloud concepts

    Start with the vocabulary everything else depends on: the shared responsibility model, public versus private versus hybrid cloud, consumption-based pricing, serverless computing, and the three service models — IaaS, PaaS, and SaaS — with a concrete example of each. Do not rush this week; it is small in weight but it is the foundation the other two domains are written in terms of.

  2. Azure architecture and services

    The largest domain, so it gets a full week. Begin with the architectural hierarchy — regions, region pairs, availability zones, resource groups, subscriptions, and management groups — because almost every later question assumes you know where these sit relative to each other. Then compute and networking basics: virtual machines, scale sets, containers, Azure Functions, virtual networks, and the difference between a public and a private endpoint. Finish with storage tiers, then identity and security: Microsoft Entra ID, multi-factor authentication, Conditional Access, Azure RBAC, Zero Trust, and defence-in-depth.

  3. Management, governance, and exam simulation

    Cover cost management and the pricing calculator, Azure Policy and resource locks, the difference between the Azure portal, Cloud Shell, and the CLI, and monitoring tools such as Azure Advisor, Service Health, and Azure Monitor. Then switch to sharpening: run Focus Weak Spots drills daily against whatever is still shaky, and sit two full-length, timed practice exams before you book the real one. Review every wrong answer properly rather than just noting the score.

Where people lose marks

The hardest AZ-900 topics

AZ-900 is conceptual, so nothing on it is unfair, but a handful of areas trip up beginners in particular because the wording is subtle rather than the underlying idea being difficult. Give these extra attention.

Service model boundaries (IaaS, PaaS, SaaS)

Candidates can usually define the three models but struggle to classify a specific real-world scenario correctly. Practise reading a short description of a workload and deciding which model it fits and, crucially, where the shared responsibility line sits — who patches the operating system, who manages the underlying hardware, and who is responsible for the data.

Regions, availability zones, and region pairs

These three terms sound similar and questions rely on you telling them apart precisely. A region is a geographic area with one or more datacentres; an availability zone is a physically separate group of datacentres within a region that protects against local failure; a region pair is two regions in the same geography that Azure uses together for disaster recovery. Confusing these three is the single most common beginner mistake.

Identity and access terms

Microsoft Entra ID, multi-factor authentication, Conditional Access, and Azure RBAC all show up in the same domain and get blended together in memory. Learn what each one actually controls: Entra ID is the identity store, MFA proves who you are, Conditional Access decides when extra proof is required, and RBAC decides what an already-verified identity is allowed to do.

Governance tools: Policy, locks, and Purview

Azure Policy enforces rules about how resources can be configured; a resource lock stops a resource being deleted or changed regardless of who has permission; Microsoft Purview governs and catalogues data across the organisation. Questions often describe a requirement and expect you to pick the one tool built for that specific job rather than a plausible-sounding alternative.

Pricing and cost management factors

The exam expects you to know what actually drives an Azure bill — resource type, region, consumption tier, and bandwidth among them — and which tool answers which cost question. The pricing calculator estimates cost before you deploy anything; Azure Cost Management analyses and controls spend on resources you already have. Mixing those two up is an easy way to lose a mark that should be free.

How to practise

Practise the way the exam works

A course video leaves you able to recognise the right answer without being able to produce it, and AZ-900 asks you to produce it against the clock. Two habits close that gap on a concept-led exam. Lead with retrieval practice: commit to an answer from memory before the explanation appears, since the act of pulling the fact back is what makes it stick.

Second, spaced repetition. AZ-900 only has three domains, which makes it tempting to study each one once and move on. That is a mistake: the region-pairs fact you nailed in week one is exactly what fades by exam day if you never see it again. Revisit each domain a few days after you first cover it, not just once at the start.

Finally, run at least one full-length, timed simulation before you book the real exam. Forty-five minutes for 40 to 60 questions is roughly a minute each, which is comfortable if you keep moving, but the only way to know you can sustain that pace is to actually try it under the clock.

Build all three habits in one app

Azure Mastery is built around exactly this loop for AZ-900. Practise with over 300 exam-style questions mapped to the three January 2026 domains, get an on-device readiness score from the Exam IQ engine, follow an adaptive study plan that targets your weak spots, and let knowledge-decay alerts tell you what to revise before you forget it. The Practice tab adds a timed mock built to the exam's real length and question count, and none of it requires a network connection or a sign-in to get going.

Download Azure Mastery — free

After you pass

What's next after AZ-900?

AZ-900 does not lead anywhere by itself in career terms, and that is fine — it was never meant to. Its job is to confirm the conceptual map is in place and, for most people who work with technology, the natural next step is AZ-104 (Microsoft Azure Administrator), the hands-on Associate exam that most "Azure Administrator" job adverts actually ask for.

AZ-104 is a genuine step up. Where AZ-900 asks you to describe a virtual network, AZ-104 asks you to configure one, read a Bicep template, and predict what an Azure CLI command will do. Give yourself a real gap between the two — most people spend four to eight weeks on AZ-104 after passing AZ-900, not a weekend. The how to pass AZ-104 guide covers its own domains and a six-week study plan in the same format as this page.

If your interests point toward security or data rather than infrastructure, AZ-900 still applies: it feeds into the Security Engineer Associate path (via AZ-104 and then AZ-500) just as readily as it feeds into AZ-104 on its own. If you are still deciding which direction to take, the which Microsoft certification first guide compares the main starting points side by side.

Frequently asked

AZ-900 FAQs

Is AZ-900 hard for a complete beginner?

AZ-900 is the easiest Microsoft certification, but it is not trivial if cloud computing is genuinely new to you. It is entirely conceptual — no PowerShell, no Azure CLI, no hands-on configuration — but it still expects precise recall of terms such as region pairs, availability zones, and the shared responsibility model. Most people with some general IT background pass after one to two weeks; complete beginners should plan for three to four.

Do I need AZ-900 before other Azure certifications?

No, it is not a formal prerequisite for any Microsoft Azure certification, including AZ-104. It is optional but strongly recommended if you have less than six months of hands-on Azure experience, because it builds the conceptual map that every higher-level exam assumes you already have. If you already work with Azure day to day, you can skip straight to an Associate-level exam.

Is AZ-900 worth it if I am not a developer or engineer?

Yes — that is exactly who it is designed for. Account managers, project managers, sales engineers, and finance partners all sit AZ-900 to qualify for Microsoft Partner Network roles or simply to speak the same language as the engineers they work with. The exam never expects you to write a script; it expects you to explain concepts such as consumption-based pricing or defence-in-depth in plain terms.

What is the passing score for AZ-900?

You need 700 out of 1000 to pass. The score is scaled rather than a simple percentage of questions answered correctly, so it does not map to a fixed number of right answers. Treat 700 as a comfortable floor to clear rather than a target to scrape past.

Does the AZ-900 certification expire?

No. AZ-900 is a Fundamentals-level certification, and Fundamentals certifications do not expire. Once you pass, it is yours permanently. This is different from Associate and Expert certifications such as AZ-104, which require a free annual renewal assessment on Microsoft Learn.

How much does AZ-900 cost and can I retake it if I fail?

Exam pricing varies by country, so check Microsoft's exam page for the fee where you live rather than trusting a figure you read elsewhere. Fail it and you can rebook after 24 hours for the first retry; the next two retries each carry a 14-day wait, and Microsoft allows no more than five sittings within any 12 months. Every attempt is a fresh booking.

Ready to start on AZ-900?

Practise with over 300 exam-style AZ-900 questions across all three domains, with an on-device readiness score, an adaptive study plan, and a full-length simulator. Free to start, works offline.

Download Azure Mastery — free iPhone & iPad · Free to start · No account required