AZ-900 is the Azure Fundamentals exam for connecting core cloud concepts with practical decisions about identity, governance, cost, security, and service selection. That focus matters because the exam now rewards candidates who can apply cloud awareness to everyday business and technical choices.
AZ-900, officially Microsoft Azure Fundamentals, is an entry-level certification exam for people who need a working understanding of cloud concepts and Microsoft Azure services. It suits career starters, IT support staff, helpdesk teams, sales and procurement professionals, managers, and technical learners who want a foundation before moving into role-based Azure certifications.
The exam has no formal prerequisites, but that does not make it trivial. Many questions test why a service, pricing model, governance feature, or responsibility boundary fits a scenario. Candidates who study only service names often struggle when the wording asks them to choose the most appropriate option for a business outcome, such as reducing operational effort, controlling spend, or improving access control.
Where AZ-900 Fits in the Microsoft Certification Path
AZ-900 is best understood as an Azure literacy exam rather than an administrator, developer, or architect credential. It confirms that a candidate understands cloud principles, core Azure services, security and governance basics, and Azure pricing and support concepts. Microsoft publishes the official certification details on the Microsoft Azure Fundamentals certification page, and candidates should use that page to verify exam availability, scheduling policies, languages, and other current parameters before booking.
It is also useful to distinguish AZ-900 from the other fundamentals exams. AZ-900 focuses on Azure cloud services and platform concepts. SC-900 is centred on security, compliance, and identity fundamentals; DP-900 covers Azure data fundamentals; and AI-900 introduces Azure AI fundamentals. All are entry-level exams with no prerequisites, but they lead to different next steps. Someone who needs a broad Azure platform foundation should usually start with AZ-900, while someone whose immediate work is identity, compliance, analytics, or AI may find another fundamentals exam more directly relevant.
After AZ-900, the next credential should be chosen by role rather than by perceived difficulty. Administrators commonly move toward AZ-104, developers toward AZ-204, data engineers toward DP-203, security operations learners toward SC-200, and identity and access learners toward SC-300. AZ-900 is optional for those paths, but it can make the transition easier because it gives learners a shared vocabulary for subscriptions, resource groups, networking, identity, governance, and cost.
What the AZ-900 Exam Covers
The official AZ-900 study guide should be the source of truth for skills measured because Microsoft can update exam objectives. At a high level, candidates should expect questions on cloud concepts, Azure architecture and services, security and governance, and pricing, service-level agreements, and lifecycle topics. The exam is not designed to make candidates configure advanced production workloads, but it does expect them to recognise the right concept or service for a given need.
Cloud concepts include ideas such as high availability, scalability, elasticity, fault tolerance, disaster recovery, capital expenditure, operational expenditure, and consumption-based pricing. A candidate should be able to explain why cloud resources can be provisioned quickly, why elasticity matters for variable demand, and how shared infrastructure can change cost planning.
Azure architecture topics include regions, region pairs, availability zones, subscriptions, management groups, resource groups, and Azure Resource Manager. These components often appear in scenario questions because they define how Azure environments are organised and governed. For example, a question may describe a company that wants to apply policies across multiple subscriptions, and the answer depends on understanding hierarchy rather than memorising a single product name.
| Service model | What the customer manages | Typical AZ-900 clue |
|---|
| IaaS | Operating system, applications, data, and more configuration responsibility | A virtual machine is needed because the organisation wants operating system-level control. |
| PaaS | Applications and data, with less infrastructure administration | A managed app or database platform is preferred to reduce patching and server maintenance. |
| SaaS | User access, data, and configuration within the application | A finished cloud application is consumed rather than built or hosted by the customer. |
The shared responsibility model is another recurring theme. The exact responsibility split depends on whether a workload uses IaaS, PaaS, or SaaS. In practice, the customer always retains responsibility for data, identities, access decisions, and correct configuration, while Microsoft takes more responsibility for the underlying platform as the service model becomes more managed.
Security and governance topics include Microsoft Entra ID, role-based access control, resource locks, Azure Policy, Microsoft Defender for Cloud concepts, network security basics, and compliance resources. At the fundamentals level, the important skill is recognising purpose. RBAC helps define who can do what, Azure Policy helps enforce organisational rules, and resource locks help prevent accidental deletion or modification.
Pricing and support questions usually test whether a candidate understands cost drivers and planning tools. Candidates should know that usage, region, service tier, reserved capacity, and data movement can all influence cost. They should also be comfortable with the idea of estimating workloads before deployment and monitoring spend after deployment. Microsoft’s Azure updates page is useful for tracking service changes, and candidates can follow Azure updates when they want to understand how the platform is changing beyond the exam outline.
Exam Parameters and Policies to Check Before Booking
AZ-900 delivery details can change, so candidates should avoid relying on an old blog post, forum answer, or training slide for scheduling information. The official Microsoft exam page should be checked close to the booking date for the current exam duration, delivery options, supported languages, regional pricing, identification requirements, rescheduling rules, cancellation rules, and retake policy.
This is especially important for candidates booking through an employer, a training provider, or a voucher programme. The policy that matters is the one shown during the official scheduling flow and on Microsoft’s certification pages at the time of booking. Candidates should also make sure the name on their exam profile matches their identification document, because identity mismatch is a common avoidable problem on exam day.
A Practical 2–4 Week AZ-900 Study Plan
A useful AZ-900 plan starts with concepts before tools. Candidates retain more when they first understand why cloud computing changes deployment and cost models, then learn how Azure organises identity, governance, compute, storage, networking, security, and pricing. Reading alone is rarely enough, but labbing without a conceptual frame can become random clicking in the portal.
Safe lab practice should be deliberately small. Candidates can use the Azure free account information to understand available free services, but they should still create short-lived resource groups, delete practice resources after use, configure cost alerts where available, and avoid deploying services they do not understand. This habit is valuable beyond the exam because cost awareness is part of responsible cloud work.
| Study window | Focus | Practical milestone |
|---|
| Days 1–3 | Cloud concepts, service models, public cloud, private cloud, hybrid cloud, and consumption-based pricing. | Explain IaaS, PaaS, and SaaS using one workplace example for each. |
| Days 4–7 | Azure architecture: regions, availability zones, subscriptions, management groups, resource groups, and Resource Manager. | Create a practice resource group, apply tags, inspect the activity log, and delete the group when finished. |
| Week 2 | Identity, access, governance, and security: Microsoft Entra ID, RBAC, Azure Policy, locks, and shared responsibility. | Review role assignments in the portal and describe when RBAC, Policy, and locks solve different problems. |
| Week 3 | Compute, storage, networking, databases, monitoring, and management tools. | Map common business requirements to broad service categories rather than memorising every service name. |
| Week 4 | Pricing, SLAs, lifecycle, support, practice assessments, and weak-area review. | Use pricing and total cost concepts to explain why a workload estimate can change by region, size, and service tier. |
Some learners can finish in two weeks if they already work in IT or have used cloud services before. Others benefit from the full four weeks, especially if terms such as tenant, subscription, region, virtual network, and role assignment are new. The goal is not to rush through modules; it is to become comfortable translating a short scenario into the Azure concept being tested.
Practice assessments are most useful after the first full pass through the objectives. A low score at the start can be discouraging and does not teach much unless the learner has enough context to understand the feedback. Later in preparation, missed questions should be grouped by theme: cloud concepts, architecture, identity, governance, services, pricing, or support. This makes revision more targeted.
How AZ-900 Questions Usually Test Understanding
AZ-900 questions often contain distractors that sound plausible. A question about preventing accidental deletion might include security, identity, and governance options, but the correct answer depends on noticing that the problem is accidental change control rather than authentication. This is why candidates should practise identifying the purpose of each Azure feature.
The following sample questions are not exam dumps and should not be treated as predictions. They illustrate the style of reasoning that helps candidates prepare ethically and effectively.
| Sample question | Answer and explanation |
|---|
| A company wants to run a virtual machine and manage the operating system itself. Which cloud service model is most appropriate? | IaaS. A virtual machine gives the customer more control over the operating system than PaaS or SaaS. |
| A team wants to stop users from accidentally deleting a production resource group. Which Azure feature is the closest match? | A resource lock. RBAC controls permissions, but a lock is specifically designed to help prevent deletion or modification. |
| An organisation wants to enforce that all new resources include a department tag. Which service helps apply this rule? | Azure Policy. It is used to evaluate and enforce organisational standards across Azure resources. |
| A finance manager asks why the monthly bill changed after a workload moved to a larger size in a different region. What concept is being tested? | Cost drivers. Azure pricing can vary based on service, size, region, usage, and configuration choices. |
| In a SaaS application, who is generally responsible for managing user access? | The customer. Microsoft manages more of the underlying service, but the customer still manages identities, access, and data decisions. |
| A company wants resources to remain available if a datacenter in a region has an outage. Which concept should the candidate recognise? | Availability zones. They are designed to improve resilience within supported regions. |
| A helpdesk analyst needs read-only visibility into Azure resources but should not make changes. What should be considered? | An appropriate RBAC role with read permissions. The principle is to grant only the access needed for the task. |
| A business wants to estimate cloud costs before deploying a workload. Which type of tool or activity is relevant? | Pricing estimation. Candidates should understand that planned usage, service tier, and region need to be considered before deployment. |
A strong answer strategy is to identify the business problem first, then eliminate services that solve a different problem. If the scenario is about governance, identity tools may be distractors. If it is about cost estimation, monitoring tools used after deployment may not be the best answer. This method is more reliable than trying to remember isolated product descriptions.
Turning Exam Topics into Portal Practice
AZ-900 is a fundamentals exam, but portal familiarity makes the concepts less abstract. Candidates do not need to build a complex architecture. They benefit more from small, intentional tasks that connect directly to the exam domains.
Creating a resource group shows how Azure organises resources for lifecycle management. Adding tags demonstrates how organisations support cost allocation and governance. Reviewing RBAC assignments clarifies the difference between authentication and authorisation. Looking at policies and locks helps candidates see that governance is applied through controls, not just written standards.
Cost practice should include more than reading definitions. A candidate who changes a region, service tier, or instance size in an estimate can see why cloud pricing depends on choices made before deployment. That kind of practical connection makes pricing and SLA questions easier because the numbers become part of a decision process rather than a separate topic.
There is also value in reading Azure update notes selectively. AZ-900 candidates do not need to track every preview feature, but they should recognise that cloud platforms change continuously. This is one reason the official study guide and certification page should be checked during preparation, particularly if a candidate is using older videos or notes.
When Instructor-Led Preparation Helps
Self-study works well for many AZ-900 candidates, especially when they combine Microsoft Learn modules, portal practice, and official practice assessments. Instructor-led preparation becomes more useful when learners need structure, have limited study time, or are preparing as part of a team that needs a consistent vocabulary for Azure projects. A structured Azure Fundamentals course can help connect exam objectives to examples, labs, and discussion without replacing the need to review Microsoft’s official pages.
Another option is a curated learning platform such as Readynez365, particularly when AZ-900 is part of a broader cloud learning plan rather than a one-off exam. The important point is to keep the study path aligned to the current skills measured and to avoid materials that promise shortcuts, leaked questions, or guaranteed results.
Applying AZ-900 Knowledge at Work
The practical value of AZ-900 appears when someone can participate more confidently in cloud conversations. A procurement specialist can ask better questions about pricing models and support plans. A manager can understand why governance should be planned before teams deploy resources. A helpdesk analyst can recognise the difference between a sign-in problem, a role assignment issue, and a resource configuration issue.
In technical teams, AZ-900 knowledge helps reduce miscommunication. When an administrator talks about subscriptions and management groups, or when a security colleague explains RBAC and policy, a fundamentals-trained colleague can follow the conversation and ask more precise questions. This does not make the person an Azure engineer, but it shortens the distance between business requirements and technical implementation.
Cost control is one of the most useful workplace applications. Even basic habits such as tagging resources, deleting unused test environments, reviewing access, and checking estimates before deployment can prevent confusion later. These habits also prepare candidates for role-based certifications where governance and operational responsibility become more hands-on.
Keeping AZ-900 Preparation Current
Good AZ-900 preparation in 2026 is less about memorising a fixed list and more about understanding how Azure decisions are made. Candidates should know the official objectives, verify current exam policies, practise safely in the portal, and connect each topic to a real use case. The strongest preparation usually combines reading, short labs, practice questions, and review of mistakes by topic.
The most effective next step is to decide why AZ-900 is being taken. If the goal is general cloud literacy, the certification may be enough. If the goal is a technical Azure role, AZ-900 should become the foundation for a role-based path. Learners who want ongoing access to structured Microsoft training can explore Readynez Unlimited Training after they have mapped the certification path to their job goals.
FAQ
What is the typical format of the AZ-900 exam?
AZ-900 commonly uses question formats such as multiple choice, matching, drag-and-drop, and scenario-based items. Candidates should verify the current format and policies on Microsoft’s official exam page before scheduling because delivery details can change.
Can AZ-900 be retaken if a candidate does not pass?
Yes, Microsoft allows retakes, but waiting periods and attempt rules are governed by Microsoft’s current exam policy. Candidates should check the official certification page and scheduling flow rather than relying on older guidance.
Are there prerequisites for Azure Fundamentals?
There are no formal prerequisites for AZ-900. The exam is designed for both technical and non-technical candidates who want foundational knowledge of cloud concepts and Microsoft Azure.
Is AZ-900 enough for an Azure administrator role?
AZ-900 is a foundation, not a role-based administrator credential. Candidates aiming for Azure administration typically use AZ-900 as preparation before moving toward AZ-104, where the skills become more operational and hands-on.
How should candidates avoid billing surprises while practising?
Practice should be limited to small, short-lived exercises. Candidates should understand free account terms, create separate practice resource groups, delete resources after labs, and use available budget or alerting features where appropriate.
