Guide
Which Microsoft certification should you get first?
Match Azure, security, data, AI, analytics, or development to your role — then see the next credential on each path.
The short answer
Start with AZ-900, unless you already know your track
If you want one safe recommendation, it is AZ-900 (Microsoft Azure Fundamentals).
- It teaches the shared vocabulary every other Azure exam quietly assumes you already have: what a region and an availability zone are, how subscriptions and resource groups nest, and the services you'll meet again and again.
- It doesn't expire, and most people can prepare for it in a couple of weeks — a cheap, permanent foundation and a low-pressure way to confirm cloud work suits you before a longer study run.
- The one caveat: AZ-900 is a starting point, not a career goal. On its own it won't get you an Azure job; it gets you ready for the associate certification that will.
- Already know the field you want? Don't default to AZ-900 out of habit — each track has its own Fundamentals exam through the lens you care about: SC-900 for security, DP-900 for data, AI-901 for AI.
- Already administer Azure day to day? You can skip Fundamentals entirely and sit an associate exam first. The section below maps each starting point to a goal.
Decide by goal
Pick your first exam by where you are heading
Microsoft's role-based certifications are organised into tracks. The cleanest way to choose is to name the job you want, take that track's Fundamentals exam to build the map, then move to the associate that hiring managers actually recruit for. Here is the whole ladder at a glance.
| If you want to… | Start with | Then aim for |
|---|---|---|
| Run cloud infrastructure (IT ops, sysadmin) | AZ-900 | AZ-104 |
| Work in security, identity, and compliance | SC-900 | SC-200 / SC-500 |
| Work with data and databases | DP-900 | DP-300 / DP-700 |
| Build with AI and machine learning | AI-901 | AI-103 |
| Analyse business data (low-code, reporting) | PL-300 | PL-300 |
| Write and ship code on Azure | GH-900 | AI-200 |
IT operations and administration
- The most common cloud entry path: start with AZ-900 for the concepts, then move to AZ-104 (Azure Administrator), the associate that maps to real "Cloud Administrator" roles.
- AZ-104 is hands-on: managing identities and RBAC, configuring storage and virtual networks, and deploying VMs, rather than just describing them.
Security, identity, and compliance
- Begin with SC-900, which covers Microsoft Entra, Microsoft Defender, and Microsoft Purview at a conceptual level.
- From there, SC-200 (Security Operations Analyst) suits a SOC or threat-hunting role, while SC-500 (Azure Security Engineer) — the successor to the retired AZ-500 — suits engineers who secure Azure workloads directly.
Data and databases
- Take DP-900 first for the relational, non-relational, and analytics concepts.
- Then choose by role: DP-300 (Database Administrator) if you run and tune managed databases, or DP-700 (Fabric Data Engineer) if you build data pipelines on Microsoft Fabric.
Artificial intelligence and machine learning
- Start with AI-901 (Microsoft AI Fundamentals), which now includes a dedicated generative-AI domain.
- Its natural next step is AI-103 (AI App and Agent Developer Associate), which replaced the retired AI-102, for building generative AI apps and agents with Azure OpenAI and Azure AI Foundry, including retrieval-augmented generation over Azure AI Search.
Business analysis and low-code
- If your goal is reporting and dashboards rather than infrastructure, PL-300 (Power BI Data Analyst) is a strong first certification in its own right.
- Associate-level but approachable, and maps directly to analyst roles, so many people take it without a Fundamentals exam first.
Software development
- Developers new to the Microsoft ecosystem often start with GH-900 (GitHub Foundations) to cover source control and collaboration.
- From there, move toward AI-200, the successor to the retired AZ-204 developer exam. Note that AZ-204 retired on 31 July 2026, so plan around AI-200 rather than starting AZ-204 now.
What to expect
What a Fundamentals cert does and does not get you
A Fundamentals exam can give you a useful starting point. Here's what it prepares you for and where you'll need more experience.
What they do get you
- A shared mental model and the correct names for things, which makes every later exam and real project easier to follow.
- A permanent credential that never expires, a cheap confidence check before a longer study run, and a genuine talking point if you're changing careers with no prior cloud experience.
What they do not get you
- A Fundamentals certification alone doesn't demonstrate hands-on skill or guarantee a cloud job.
- Employers also look for practical experience and, often, an associate certification — Fundamentals exams are optional preparation, so you can book an associate exam directly if you're ready.
The practical rule: if you have less than six months of hands-on experience with the platform, a Fundamentals exam is time well spent. If you already work with it daily, skip straight to the associate and save your effort for the exam that changes your CV.
Side by side
The four Fundamentals entry points compared
AZ-900, SC-900, DP-900, and AI-901 share the same shape: multiple-choice questions, a 45-minute exam window, a 700-out-of-1000 pass mark, and no expiry. What differs is the subject matter and, because it is the broadest, how long AI-901 tends to take. The format facts below apply to all four.
- QuestionsTypically 35–50; varies
- Duration45 minutes (65 min seat)
- Pass score700 / 1000 (scaled)
- ValidityDoes not expire
- DeliveryOnline or a test centre
- FeeVaries by country
| Exam | Subject flavour | Typical prep |
|---|---|---|
| AZ-900 | Cloud concepts, Azure architecture and services, and Azure management and governance. The default first exam. | ~2 weeks |
| SC-900 | Security, compliance, and identity concepts, and the capabilities of Microsoft Entra, Microsoft security, and Microsoft compliance solutions. | ~2 weeks |
| DP-900 | Core data concepts plus relational, non-relational, and analytics workloads on Azure. | ~2 weeks |
| AI-901 | AI workloads, machine learning, computer vision, natural language processing, and a dedicated generative-AI domain. The broadest of the four. | 3–4 weeks |
Prep times assume a few evenings a week and some general IT familiarity; allow three to four weeks for the 900-series exams if the platform is genuinely new to you. Each exam page linked above has the full domain weights and a study plan built around them.
Once you have chosen
Prepare the way the exam works
Build two habits alongside courses and videos. First, answer practice questions from memory before reading the explanation. Second, complete a full-length timed practice test to get used to the pace and question formats. Both help you apply what you've learned under exam conditions.
Every track lives in the same download
Azure Mastery carries every certification on this page, each with a rationale for every option on every question. You get an on-device Exam IQ score with a confidence range, an adaptive plan that targets your weak spots, and a blueprint-weighted simulator for whichever exam you choose. Free to start, works offline.
Download Azure Mastery — freeFrequently asked
First-certification FAQs
Which Microsoft certification should I get first?
For most people, AZ-900 (Microsoft Azure Fundamentals). It gives you the shared vocabulary the rest of the catalogue assumes, never expires, and is short enough to sit within a couple of weeks. Already know your direction? Start with that track's Fundamentals exam instead: SC-900, DP-900, or AI-901.
Should I take a Fundamentals exam or go straight to an associate?
Already working with Azure day to day? Skip straight to an associate exam like AZ-104, the credential most hiring managers look for. Take Fundamentals first if the platform is new, if you want a low-pressure win, or if you need the shared concepts before the deeper material makes sense.
Is AZ-900 worth it, or a waste of time?
Worth it as a starting point and confidence builder, not as a career goal. It proves you understand cloud concepts and never expires, so it's a cheap, permanent foundation — but it won't get you an Azure job on its own. Treat it as the on-ramp to AZ-104, not the destination.
Do I need to take the exams in order?
No. Fundamentals exams are not formal prerequisites for the associate exams, so nothing stops you booking AZ-104 or SC-200 first. The recommended order exists because each Fundamentals exam builds the mental model its associate assumes — skipping ahead is about your experience, not the rules.
Which first certification is best for a career change into cloud?
Start with AZ-900 to confirm cloud work suits you, then move to AZ-104, which maps to real operations roles hiring managers recruit for. Drawn to a specific field? Swap in SC-900, DP-900, or AI-901 and follow that track's associate instead.
How much do the exams cost, and do they expire?
Pricing varies by country — check Microsoft's certification page for your local fee. Fundamentals certifications such as AZ-900, SC-900, DP-900, and AI-901 don't expire. Associate and expert certifications expire annually, with a free renewal assessment on Microsoft Learn.
Chosen your first exam?
Whatever track you land on — AZ-900, SC-900, DP-900, AI-901, AZ-104, and more are all in Azure Mastery already. Free to start, no account required.
Download Azure Mastery — free iPhone & iPad · Free to start · No account required