Which Microsoft certification should you get first?
There are dozens of Microsoft certifications, and the right first one depends on where you are heading rather than on some universal ranking. This guide sorts the entry points by role, explains why AZ-900 is the usual starting line, and shows you when to skip it and go straight to an associate exam.
Updated July 2026·~8 min read
The short answer
Start with AZ-900, unless you already know your track
If you want one safe recommendation, it is AZ-900 (Microsoft Azure Fundamentals). It teaches the shared vocabulary that every other Azure exam quietly assumes you already have: what a region and an availability zone are, how subscriptions and resource groups nest, and the difference between the services you will meet again and again. It does not expire, and most people can prepare for it in a couple of weeks. That makes it a cheap, permanent foundation and a low-pressure way to confirm cloud work actually suits you before you commit to a longer study run.
The one caveat is that AZ-900 is a starting point, not a career goal. On its own it will not get you an Azure job; it gets you ready for the associate certification that will. Think of it as the on-ramp rather than the destination.
If you already know the field you want, do not default to AZ-900 out of habit. Each track has its own Fundamentals exam that covers the same conceptual groundwork through the lens you care about: SC-900 for security, DP-900 for data, and AI-901 for artificial intelligence. And if you already administer Azure day to day, you can skip Fundamentals entirely and sit an associate exam first. The section below maps each starting point to a goal.
Decide by goal
Pick your first exam by where you are heading
Microsoft's role-based certifications are organised into tracks. The cleanest way to choose is to name the job you want, take that track's Fundamentals exam to build the map, then move to the associate that hiring managers actually recruit for. Here is the whole ladder at a glance.
Where to start, and where it leads, by goal
If you want to…
Start with
Then aim for
Run cloud infrastructure (IT ops, sysadmin)
AZ-900
AZ-104
Work in security, identity, and compliance
SC-900
SC-200 / SC-500
Work with data and databases
DP-900
DP-300 / DP-700
Build with AI and machine learning
AI-901
AI-103
Analyse business data (low-code, reporting)
PL-300
PL-300
Write and ship code on Azure
GH-900
AI-200
IT operations and administration
This is the most common cloud entry path. Start with AZ-900 for the concepts, then move to AZ-104 (Azure Administrator), the associate that maps to real "Cloud Administrator (Azure)" roles. AZ-104 is hands-on: it expects you to manage identities and role-based access control, configure storage and virtual networks, and deploy virtual machines, rather than just describe them.
Security, identity, and compliance
Begin with SC-900, which covers Microsoft Entra, Microsoft Defender, and Microsoft Purview at a conceptual level. From there, SC-200 (Security Operations Analyst) suits a SOC or threat-hunting role, while SC-500 (Azure Security Engineer) is the successor to the retiring AZ-500 and suits engineers who secure Azure workloads directly.
Data and databases
Take DP-900 first for the relational, non-relational, and analytics concepts. Then choose by role: DP-300 (Database Administrator) if you run and tune Azure SQL and other managed databases, or DP-700 (Fabric Data Engineer) if you build data pipelines and analytics on Microsoft Fabric.
Artificial intelligence and machine learning
Start with AI-901 (Microsoft AI Fundamentals), which now includes a dedicated generative-AI domain. Its natural next step is AI-103 (AI App and Agent Developer Associate), which replaced the retired AI-102, for building generative AI apps and agents with Azure OpenAI and Azure AI Foundry, including retrieval-augmented generation over Azure AI Search.
Business analysis and low-code
If your goal is reporting and dashboards rather than infrastructure, PL-300 (Power BI Data Analyst) is a strong first certification in its own right. It is associate-level but approachable, and it maps directly to analyst roles, so many people take it without a Fundamentals exam first.
Software development
Developers new to the Microsoft ecosystem often start with GH-900 (GitHub Foundations) to cover source control and collaboration, then move toward AI-200, the successor to the retiring AZ-204 developer exam. Note that AZ-204 retires on 31 July 2026, so plan around AI-200 rather than starting AZ-204 now.
An honest take
What a Fundamentals cert does and does not get you
Fundamentals exams (the ones ending in 900, plus AI-901) are worth taking, but only if you are honest about what they are. Here is the useful version of the trade-off.
What they do get you
A shared mental model and the correct names for things, which makes every later exam and every real project easier to follow. A permanent credential, because Fundamentals certifications do not expire. A quick, cheap confidence check that the field suits you before you invest in a longer associate study run. And a genuine talking point for a first interview if you are changing careers with no prior cloud experience.
What they do not get you
They will not, by themselves, land you a cloud job. Hiring managers treat Fundamentals as a nice-to-have and look for an associate credential plus evidence you can actually do the work. They are not prerequisites either, so they cannot unlock anything you could not already book. And because they are conceptual, they do not prove hands-on skill: nobody deploys a virtual network by having passed AZ-900.
The practical rule: if you have less than six months of hands-on experience with the platform, a Fundamentals exam is time well spent. If you already work with it daily, skip straight to the associate and save your effort for the exam that changes your CV.
Side by side
The four Fundamentals entry points compared
AZ-900, SC-900, DP-900, and AI-901 share the same shape: multiple-choice questions, a 45-minute exam window, a 700-out-of-1000 pass mark, and no expiry. What differs is the subject matter and, because it is the broadest, how long AI-901 tends to take. The format facts below apply to all four.
Questions40–60 multiple choice
Duration45 minutes (65 min seat)
Pass score700 / 1000 (scaled)
ValidityDoes not expire
DeliveryOnline or a test centre
FeeVaries by country
What each Fundamentals exam covers, and roughly how long it takes to prepare
Exam
Subject flavour
Typical prep
AZ-900
Cloud concepts, Azure architecture and services, and Azure management and governance. The default first exam.
~2 weeks
SC-900
Security, compliance, and identity concepts, and the capabilities of Microsoft Entra, Microsoft security, and Microsoft compliance solutions.
~2 weeks
DP-900
Core data concepts plus relational, non-relational, and analytics workloads on Azure.
~2 weeks
AI-901
AI workloads, machine learning, computer vision, natural language processing, and a dedicated generative-AI domain. The broadest of the four.
3–4 weeks
Prep times assume a few evenings a week and some general IT familiarity; allow three to four weeks for the 900-series exams if the platform is genuinely new to you. Each exam page linked above has the full domain weights and a study plan built around them.
Once you have chosen
Prepare the way the exam works
Whichever exam you land on, the study method matters more than the badge. Courses and videos build the ability to recognise an answer, while Microsoft exams demand you recall one under time pressure. Two habits close that gap. First, retrieval practice: answer from memory before you reveal the explanation, because the effort of retrieving is what fixes the fact. Second, full-length simulation at real exam length, so the timer and the spread of question styles hold no surprises on the day.
Practise for any of these exams in one app
Azure Mastery covers all of these certifications, each with over 300 exam-style questions mapped to the current skills domains. You get an on-device readiness score from the Exam IQ engine, an adaptive study plan that targets your weak spots, knowledge-decay alerts that tell you what to revise before you forget it, and a Practice tab whose timed mock matches each exam's real length and question count. Everything runs offline, and you can start without an account.
For most people the best first exam is AZ-900 (Microsoft Azure Fundamentals). It gives you the shared vocabulary the rest of the Azure catalogue assumes, it does not expire, and it is short enough to sit within a couple of weeks. If you already know which direction you are heading, start with the Fundamentals exam for that track instead: SC-900 for security, DP-900 for data, or AI-901 for artificial intelligence.
Should I take a Fundamentals exam or go straight to an associate?
If you already work with Azure day to day, you can skip Fundamentals and go straight to an associate exam such as AZ-104 (Azure Administrator), which is the credential most hiring managers actually look for. Take a Fundamentals exam first if the platform is new to you, if you want a low-pressure win to confirm the field is for you, or if you need the shared concepts before the deeper material makes sense.
Is AZ-900 worth it, or a waste of time?
AZ-900 is worth it as a starting point and a confidence builder, not as a career goal. It proves you understand cloud and Azure concepts, and it never expires, so it is a cheap, permanent foundation. It will not, on its own, get you an Azure job. Treat it as the on-ramp to an associate certification like AZ-104, not the destination.
Do I need to take the exams in order?
No. Microsoft Fundamentals exams are not formal prerequisites for the associate exams, so nothing stops you booking AZ-104 or SC-200 first. The recommended order exists because each Fundamentals exam builds the mental model its associate assumes. Skipping ahead is a question of your existing experience, not of the rules.
Which first certification is best for a career change into cloud?
Start with AZ-900 to confirm cloud work suits you and to build the vocabulary, then move to AZ-104 (Azure Administrator), which maps to real operations roles that hiring managers recruit for. If you are drawn to a specific field, swap the Fundamentals step for SC-900, DP-900, or AI-901 and follow that track's associate. Employers care far more about the associate credential and any hands-on evidence than about which Fundamentals badge you hold.
How much do the exams cost, and do they expire?
Exam pricing varies by country, so check Microsoft's certification page for the fee where you live rather than trusting a figure you read elsewhere. Fundamentals certifications such as AZ-900, SC-900, DP-900, and AI-901 do not expire. Associate and expert certifications expire annually, but renewal is free through a short online assessment on Microsoft Learn.
Keep reading
Related guides
Once you have picked a first exam, these guides take you into the detail: how to pass each Fundamentals exam, and the head-to-head comparisons for the two decisions people agonise over most.
Azure Mastery covers AZ-900, SC-900, DP-900, AI-901, AZ-104 and more, each with over 300 exam-style questions, an on-device readiness score, an adaptive study plan, and a full-length simulator. Free to start, works offline.