Pass Microsoft Azure Fundamentals (AZ-900): Your First Step

• Check the current AZ-900 skills measured before planning study time.
• Use Microsoft Learn and short Azure labs to connect terms with real services.
• Confirm exam logistics, identification requirements, pricing, languages, and retake rules on Microsoft’s official exam pages before booking.
• Choose a next certification only after deciding whether the goal is administration, development, data, AI, or security.

AZ-900 is Microsoft’s entry-level Azure Fundamentals certification for learners and stakeholders who need a practical understanding of cloud concepts and Azure services. The exam has no formal prerequisite, making it suitable for new cloud learners, non-technical stakeholders, and IT professionals who want a structured introduction before moving toward role-based Azure certifications.

The certification is valuable because it establishes shared vocabulary. A person who passes AZ-900 should understand the difference between IaaS, PaaS, and SaaS; recognise the purpose of core Azure services; and explain basic management, governance, security, identity, pricing, and support concepts. That knowledge is useful for technical teams, but it is also useful for finance, procurement, project, sales, and management roles that regularly discuss cloud decisions without building cloud infrastructure directly.

AZ-900 should be treated as a cloud literacy exam rather than a job guarantee. It can support early career conversations and internal mobility, but employers generally infer that the holder understands Azure terminology and concepts, not that the person is ready to administer production environments alone. Candidates aiming directly for hands-on administration, development, or engineering work may still need deeper practice and a role-based certification after passing.

Last updated and verification note

This guide was last updated for 2026 planning and is written against the current Microsoft AZ-900 exam structure described in Microsoft’s official exam documentation, skills outline, certification policies, and scheduling guidance. Microsoft periodically revises exam objectives, product names, availability, pricing, and policies, so candidates should use the official Microsoft exam page as the final source before booking.

The older habit of studying AZ-900 as four broad blocks can now lead candidates to over-prepare some areas and under-prepare others. Microsoft currently presents the measured skills in three consolidated areas: cloud concepts; Azure architecture and services; and Azure management and governance. The exact weighting should be checked on Microsoft’s skills outline, because that weighting is the clearest signal for how to divide study time.

What AZ-900 tests

AZ-900 tests whether a candidate can describe cloud computing principles and explain how Azure delivers common services. It does not expect the same depth as Azure Administrator Associate or Azure Developer Associate, and it does not require a candidate to write production code, design complex network topologies, or troubleshoot enterprise workloads.

The first domain covers cloud concepts. Candidates need to understand shared responsibility, public, private, and hybrid cloud models, consumption-based pricing, scalability, elasticity, reliability, predictability, security, governance, and manageability. These topics often appear simple, but they are central to the exam because they explain why organisations adopt cloud services and where responsibilities move between Microsoft and the customer.

The second domain covers Azure architecture and services. This includes regions, availability zones, subscriptions, resource groups, management groups, core compute options, storage services, networking components, and identity services. Candidates should be able to match common business needs to service categories rather than memorise every product SKU.

The third domain covers Azure management and governance. This is where many beginners lose easy marks because they spend too much time on virtual machines and too little time on cost control, monitoring, policy, role-based access control, Microsoft Entra ID, Microsoft Defender for Cloud, Service Trust Portal concepts, and tools such as the Azure portal, Azure Cloud Shell, Azure Resource Manager templates, and Azure Advisor.

A practical way to study is to let the weighting shape the calendar. If the official skills outline gives a larger share to Azure architecture and services, that area deserves more practice time. Even so, governance and cost topics should not be left until the final evening, because they are closely tied to real cloud operations and frequently separate memorised knowledge from usable understanding.

Who should take AZ-900, and who might skip it

AZ-900 is a sensible starting point for people who are new to cloud, moving from on-premises IT into Azure, supporting cloud projects in a non-engineering role, or managing teams that need a common baseline. It is also useful for organisations that want onboarding language to be consistent across technical and business functions.

Some candidates can move faster. A systems administrator who already manages Azure subscriptions daily may be better served by going straight to AZ-104, while a developer building Azure applications may prefer AZ-204 after a short review of fundamentals. A data-focused candidate might choose DP-900, an AI-focused learner might choose AI-900, and a security or identity stakeholder might start with SC-900. Microsoft does not require AZ-900 before those paths, so the decision should be based on confidence, hands-on experience, and the role being pursued.

The strongest reason to take AZ-900 first is not that it grants access to another exam; it is that it reduces wrong turns. Candidates who understand subscriptions, resource groups, cloud models, pricing, identity, and governance usually find it easier to make sense of role-based training later. Those who already use these concepts at work may not need a separate fundamentals exam, although they may still use the AZ-900 skills outline as a quick diagnostic.

Exam logistics: booking, scoring, languages and retakes

Microsoft certification exams are booked through Microsoft’s certification profile and exam provider flow. Candidates typically start on the official AZ-900 exam page, sign in with a Microsoft account, review the exam details, choose an online or test-centre option where available, and complete scheduling with the authorised provider. Pricing and local tax treatment vary by country or region, so the current amount should be confirmed during the registration process rather than taken from older blog posts.

Identification requirements matter. Candidates should check the accepted ID rules for the chosen delivery method and ensure the name on the ID matches the registration profile. Online proctored exams also have workspace, device, webcam, network, and check-in requirements that should be reviewed before exam day. Small administrative issues, such as mismatched names or unsupported identification, can cause more stress than the technical content.

Microsoft reports certification exam results using its own scoring method and publishes the passing standard and score-report guidance in official documentation. Candidates should avoid relying on claims about fixed question counts, adaptive behaviour, or guaranteed formats from unofficial sources, because Microsoft may vary exam presentation. It is reasonable to practise multiple-choice, matching, scenario, and ordering-style questions, but preparation should focus on the measured skills rather than predicting the exact interface.

Language availability and exam accommodations are also managed through Microsoft’s official channels and may change. Retake rules are defined in Microsoft’s exam policies, including waiting periods after failed attempts. Anyone planning around a deadline should read the policy before booking, especially if the certification is required for onboarding, partner compliance, or an internal development plan.

A realistic 2–6 week AZ-900 study plan

Most working professionals do better with a short, consistent study rhythm than with a long unfocused preparation window. AZ-900 is broad rather than technically deep, so the risk is usually fragmentation: watching too many videos, collecting too many notes, and never testing whether the concepts can be explained clearly.

A two-week plan suits candidates with prior IT experience. The first week can cover cloud concepts and Azure architecture, while the second week can focus on governance, cost, identity, security, review, and practice questions. Each study session should end with a short written explanation of one concept, such as why a resource group is not the same as a subscription or how role-based access control differs from authentication.

A four-week plan is more realistic for cloud beginners. The first week can cover cloud models and shared responsibility, the second can cover Azure compute, storage, and networking, the third can cover identity, security, management, pricing, and governance, and the fourth can be used for review and practice exams. This pace leaves room to revisit weak areas without turning study into memorisation.

A six-week plan works well for non-technical stakeholders or teams studying alongside full-time work. The extra time should be used for small hands-on exercises and discussion, not for reading every Azure product page. By the end, candidates should be able to explain trade-offs in plain English: when a managed platform service reduces operational burden, why budgets and tags matter, and why Azure compliance offerings do not automatically make a customer workload compliant.

Official Microsoft Learn modules should be the main study source because they track the exam objectives more closely than older third-party notes. Practice tests are useful after the first pass through the material, but they should be treated as diagnostic tools. If a candidate repeatedly misses governance questions, the answer is not to memorise more sample questions; it is to revisit the concepts behind policy, cost management, role assignments, and monitoring.

Instructor-led training can help when a learner needs structure, accountability, or faster clarification of confusing topics. Readynez can be used as one structured option for AZ-900 preparation, but the core study habit remains the same: map every lesson back to Microsoft’s skills measured and practise explaining the concepts without relying on slides.

Safe hands-on practice without surprise costs

AZ-900 is not a lab-heavy exam, but safe practical exposure improves retention. Candidates who have never opened the Azure portal often struggle to connect service names with real workflows, while a small amount of guided practice makes resource groups, subscriptions, budgets, tags, and access control easier to remember.

The safest approach is to use an Azure free account or a controlled training subscription, set a budget and cost alert before deploying anything, and delete resources immediately after the exercise. A useful beginner lab is to create a resource group, apply tags, review access control, deploy a small storage account or App Service, inspect the cost and monitoring areas, and then remove the resource group. This mirrors the exam’s management and governance themes without requiring complex infrastructure.

Cost awareness should be part of the lab rather than an afterthought. Candidates should learn where budgets, alerts, cost analysis, and recommendations appear in the portal. They should also understand that deleting an individual service may not remove every related resource, whereas deleting a lab resource group after verification is often the cleaner beginner habit.

Common preparation mistakes

One common mistake is memorising product names without understanding service categories. AZ-900 questions often reward knowing what kind of problem a service solves. A candidate who knows that Azure App Service is a managed application hosting option is in a better position than one who has memorised a long list of compute products without understanding responsibility boundaries.

Another mistake is studying outdated service names. Azure Security Center, for example, is now Microsoft Defender for Cloud. Azure Active Directory is now Microsoft Entra ID. Older videos and notes may still be useful for broad concepts, but candidates should check current Microsoft naming before the exam so that old terminology does not create avoidable confusion.

A third mistake is treating pricing and governance as minor administrative topics. In practice, these are core cloud skills. Budgets, tags, subscriptions, management groups, policy, role assignments, and monitoring help organisations control risk and spend. AZ-900 expects candidates to understand these ideas at a foundational level because they affect almost every real Azure environment.

Candidates should also be careful with compliance language. Azure provides compliance offerings, documentation, controls, and reports that can support regulated workloads. It does not make a customer compliant by default. Customers remain responsible for how they configure, govern, secure, and operate their own workloads under the shared responsibility model.

How organisations use AZ-900

Many organisations use AZ-900 as an onboarding baseline rather than as a specialist technical credential. It gives employees a shared understanding of cloud vocabulary, which can improve communication between engineering, security, finance, procurement, delivery, and leadership teams. That shared understanding is particularly useful when decisions involve cost, risk, service ownership, and operating models.

Hiring managers generally read AZ-900 as evidence of initiative and foundational cloud knowledge. It may strengthen an entry-level CV, especially when combined with practical labs or related work experience, but it should not be presented as proof of advanced Azure administration. A stronger candidate profile pairs the certification with small examples of applied learning, such as documenting a tagging standard, helping interpret a cost report, or explaining access control basics to a project team.

Industry cloud adoption data is often quoted too loosely. Reports such as the Flexera State of the Cloud survey, available from Flexera, can provide useful market context, but candidates do not need inflated adoption claims to justify AZ-900. The practical point is simpler: Azure is widely used, Microsoft documents a clear fundamentals pathway, and cloud literacy is now relevant across many business roles.

What to do after passing AZ-900

The best next step depends on role intent. Someone who wants to manage Azure resources, subscriptions, networking, identity, and governance should consider Azure Administrator Associate and the AZ-104 exam. Candidates who want a deeper route into administration can continue with an Azure Administrator AZ-104 preparation guide if that matches their work goals.

Developers who build and deploy applications on Azure should look at AZ-204. Data-focused learners may move to DP-900 before deeper data engineering or database paths. Those interested in artificial intelligence can consider AI-900, while learners focused on identity, compliance, and security fundamentals may find SC-900 more relevant. The important decision is whether the next certification supports the work the learner wants to do, rather than simply collecting another badge.

After passing, the most useful habit is to translate the knowledge into small workplace improvements. Examples include helping define resource tags, explaining the shared responsibility model during a project meeting, reviewing whether a team has budget alerts, or mapping who should have access to a resource group. These tasks are modest, but they turn certification knowledge into operational value.

Official references to check before booking

Candidates should verify current details directly with Microsoft before scheduling AZ-900. The most important pages are the official AZ-900 exam page, the downloadable skills measured outline, Microsoft certification exam policies, the exam scoring and score report guidance, the pricing and scheduling flow, and the online proctoring or test-centre requirements for the selected delivery method.

These references should be checked close to the exam date because Microsoft can update objectives, names, policies, and regional availability. Microsoft Learn is also the safest source for current learning modules, while the Azure portal provides the clearest way to connect those concepts to real services.

Building a useful Azure foundation

Passing AZ-900 is a good first step when it is approached as a foundation rather than a finish line. The exam rewards candidates who understand the cloud model, can recognise core Azure services, and can explain why governance, identity, security, and cost control matter from the beginning.

A practical next step is to compare the official skills outline with current knowledge, schedule a realistic study window, complete a few safe Azure portal exercises, and choose the next certification based on role direction. Learners who want structured support can explore Azure fundamentals training through Readynez, while keeping Microsoft’s official exam documentation as the final reference for booking and policy details.