Guide

Which Microsoft certification should you get first?

There are dozens of Microsoft certifications, and the right first one depends on where you are heading rather than on some universal ranking. This guide sorts the entry points by role, explains why AZ-900 is the usual starting line, and shows you when to skip it and go straight to an associate exam.

Updated July 2026 · ~8 min read

The short answer

Start with AZ-900, unless you already know your track

If you want one safe recommendation, it is AZ-900 (Microsoft Azure Fundamentals). It teaches the shared vocabulary that every other Azure exam quietly assumes you already have: what a region and an availability zone are, how subscriptions and resource groups nest, and the difference between the services you will meet again and again. It does not expire, and most people can prepare for it in a couple of weeks. That makes it a cheap, permanent foundation and a low-pressure way to confirm cloud work actually suits you before you commit to a longer study run.

The one caveat is that AZ-900 is a starting point, not a career goal. On its own it will not get you an Azure job; it gets you ready for the associate certification that will. Think of it as the on-ramp rather than the destination.

If you already know the field you want, do not default to AZ-900 out of habit. Each track has its own Fundamentals exam that covers the same conceptual groundwork through the lens you care about: SC-900 for security, DP-900 for data, and AI-901 for artificial intelligence. And if you already administer Azure day to day, you can skip Fundamentals entirely and sit an associate exam first. The section below maps each starting point to a goal.

Decide by goal

Pick your first exam by where you are heading

Microsoft's role-based certifications are organised into tracks. The cleanest way to choose is to name the job you want, take that track's Fundamentals exam to build the map, then move to the associate that hiring managers actually recruit for. Here is the whole ladder at a glance.

Where to start, and where it leads, by goal
If you want to…Start withThen aim for
Run cloud infrastructure (IT ops, sysadmin)AZ-900AZ-104
Work in security, identity, and complianceSC-900SC-200 / SC-500
Work with data and databasesDP-900DP-300 / DP-700
Build with AI and machine learningAI-901AI-103
Analyse business data (low-code, reporting)PL-300PL-300
Write and ship code on AzureGH-900AI-200

IT operations and administration

This is the most common cloud entry path. Start with AZ-900 for the concepts, then move to AZ-104 (Azure Administrator), the associate that maps to real "Cloud Administrator (Azure)" roles. AZ-104 is hands-on: it expects you to manage identities and role-based access control, configure storage and virtual networks, and deploy virtual machines, rather than just describe them.

Security, identity, and compliance

Begin with SC-900, which covers Microsoft Entra, Microsoft Defender, and Microsoft Purview at a conceptual level. From there, SC-200 (Security Operations Analyst) suits a SOC or threat-hunting role, while SC-500 (Azure Security Engineer) is the successor to the retiring AZ-500 and suits engineers who secure Azure workloads directly.

Data and databases

Take DP-900 first for the relational, non-relational, and analytics concepts. Then choose by role: DP-300 (Database Administrator) if you run and tune Azure SQL and other managed databases, or DP-700 (Fabric Data Engineer) if you build data pipelines and analytics on Microsoft Fabric.

Artificial intelligence and machine learning

Start with AI-901 (Microsoft AI Fundamentals), which now includes a dedicated generative-AI domain. Its natural next step is AI-103 (AI App and Agent Developer Associate), which replaced the retired AI-102, for building generative AI apps and agents with Azure OpenAI and Azure AI Foundry, including retrieval-augmented generation over Azure AI Search.

Business analysis and low-code

If your goal is reporting and dashboards rather than infrastructure, PL-300 (Power BI Data Analyst) is a strong first certification in its own right. It is associate-level but approachable, and it maps directly to analyst roles, so many people take it without a Fundamentals exam first.

Software development

Developers new to the Microsoft ecosystem often start with GH-900 (GitHub Foundations) to cover source control and collaboration, then move toward AI-200, the successor to the retiring AZ-204 developer exam. Note that AZ-204 retires on 31 July 2026, so plan around AI-200 rather than starting AZ-204 now.

An honest take

What a Fundamentals cert does and does not get you

Fundamentals exams (the ones ending in 900, plus AI-901) are worth taking, but only if you are honest about what they are. Here is the useful version of the trade-off.

What they do get you

A shared mental model and the correct names for things, which makes every later exam and every real project easier to follow. A permanent credential, because Fundamentals certifications do not expire. A quick, cheap confidence check that the field suits you before you invest in a longer associate study run. And a genuine talking point for a first interview if you are changing careers with no prior cloud experience.

What they do not get you

They will not, by themselves, land you a cloud job. Hiring managers treat Fundamentals as a nice-to-have and look for an associate credential plus evidence you can actually do the work. They are not prerequisites either, so they cannot unlock anything you could not already book. And because they are conceptual, they do not prove hands-on skill: nobody deploys a virtual network by having passed AZ-900.

The practical rule: if you have less than six months of hands-on experience with the platform, a Fundamentals exam is time well spent. If you already work with it daily, skip straight to the associate and save your effort for the exam that changes your CV.

Side by side

The four Fundamentals entry points compared

AZ-900, SC-900, DP-900, and AI-901 share the same shape: multiple-choice questions, a 45-minute exam window, a 700-out-of-1000 pass mark, and no expiry. What differs is the subject matter and, because it is the broadest, how long AI-901 tends to take. The format facts below apply to all four.

What each Fundamentals exam covers, and roughly how long it takes to prepare
ExamSubject flavourTypical prep
AZ-900 Cloud concepts, Azure architecture and services, and Azure management and governance. The default first exam. ~2 weeks
SC-900 Security, compliance, and identity concepts, and the capabilities of Microsoft Entra, Microsoft security, and Microsoft compliance solutions. ~2 weeks
DP-900 Core data concepts plus relational, non-relational, and analytics workloads on Azure. ~2 weeks
AI-901 AI workloads, machine learning, computer vision, natural language processing, and a dedicated generative-AI domain. The broadest of the four. 3–4 weeks

Prep times assume a few evenings a week and some general IT familiarity; allow three to four weeks for the 900-series exams if the platform is genuinely new to you. Each exam page linked above has the full domain weights and a study plan built around them.

Once you have chosen

Prepare the way the exam works

Whichever exam you land on, the study method matters more than the badge. Courses and videos build the ability to recognise an answer, while Microsoft exams demand you recall one under time pressure. Two habits close that gap. First, retrieval practice: answer from memory before you reveal the explanation, because the effort of retrieving is what fixes the fact. Second, full-length simulation at real exam length, so the timer and the spread of question styles hold no surprises on the day.

Practise for any of these exams in one app

Azure Mastery covers all of these certifications, each with over 300 exam-style questions mapped to the current skills domains. You get an on-device readiness score from the Exam IQ engine, an adaptive study plan that targets your weak spots, knowledge-decay alerts that tell you what to revise before you forget it, and a Practice tab whose timed mock matches each exam's real length and question count. Everything runs offline, and you can start without an account.

Download Azure Mastery — free

Frequently asked

First-certification FAQs

Which Microsoft certification should I get first?

For most people the best first exam is AZ-900 (Microsoft Azure Fundamentals). It gives you the shared vocabulary the rest of the Azure catalogue assumes, it does not expire, and it is short enough to sit within a couple of weeks. If you already know which direction you are heading, start with the Fundamentals exam for that track instead: SC-900 for security, DP-900 for data, or AI-901 for artificial intelligence.

Should I take a Fundamentals exam or go straight to an associate?

If you already work with Azure day to day, you can skip Fundamentals and go straight to an associate exam such as AZ-104 (Azure Administrator), which is the credential most hiring managers actually look for. Take a Fundamentals exam first if the platform is new to you, if you want a low-pressure win to confirm the field is for you, or if you need the shared concepts before the deeper material makes sense.

Is AZ-900 worth it, or a waste of time?

AZ-900 is worth it as a starting point and a confidence builder, not as a career goal. It proves you understand cloud and Azure concepts, and it never expires, so it is a cheap, permanent foundation. It will not, on its own, get you an Azure job. Treat it as the on-ramp to an associate certification like AZ-104, not the destination.

Do I need to take the exams in order?

No. Microsoft Fundamentals exams are not formal prerequisites for the associate exams, so nothing stops you booking AZ-104 or SC-200 first. The recommended order exists because each Fundamentals exam builds the mental model its associate assumes. Skipping ahead is a question of your existing experience, not of the rules.

Which first certification is best for a career change into cloud?

Start with AZ-900 to confirm cloud work suits you and to build the vocabulary, then move to AZ-104 (Azure Administrator), which maps to real operations roles that hiring managers recruit for. If you are drawn to a specific field, swap the Fundamentals step for SC-900, DP-900, or AI-901 and follow that track's associate. Employers care far more about the associate credential and any hands-on evidence than about which Fundamentals badge you hold.

How much do the exams cost, and do they expire?

Exam pricing varies by country, so check Microsoft's certification page for the fee where you live rather than trusting a figure you read elsewhere. Fundamentals certifications such as AZ-900, SC-900, DP-900, and AI-901 do not expire. Associate and expert certifications expire annually, but renewal is free through a short online assessment on Microsoft Learn.

Chosen your first exam?

Azure Mastery covers AZ-900, SC-900, DP-900, AI-901, AZ-104 and more, each with over 300 exam-style questions, an on-device readiness score, an adaptive study plan, and a full-length simulator. Free to start, works offline.

Download Azure Mastery — free iPhone & iPad · Free to start · No account required