The Microsoft 365 Fundamentals (MS-900) exam is an entry-level Microsoft certification exam that validates foundational knowledge of Microsoft 365 cloud services, licensing, identity, security, compliance, and collaboration capabilities.
The exam is designed for people who need to understand what Microsoft 365 does and how its services fit together, rather than for administrators who already configure every workload in depth. It is a good fit for IT support staff, junior administrators, business power users, project managers, sales and pre-sales roles, career-changers, and managers who need a common vocabulary for Microsoft 365 decisions.
MS-900 is often misunderstood as an exam about using Word, Excel, Outlook, or Teams. In practice, it is broader than that. Candidates are expected to understand concepts such as cloud service models, Microsoft 365 subscriptions, Entra ID identity, collaboration services, endpoint and device concepts, and the purpose of security and compliance features. The exam rewards candidates who can reason through business scenarios, such as choosing between Business and Enterprise plans or explaining why retention, sensitivity labels, and identity controls matter.
What the MS-900 exam covers
Microsoft publishes the current skills measured for MS-900 on Microsoft Learn, and candidates should always check that page before finalising a study plan. Microsoft certification exams are updated periodically, and small changes in product naming, feature coverage, or objective weighting can affect what should be reviewed first.
At a high level, MS-900 covers four broad areas. Candidates need to understand cloud concepts, including the differences between public, private, hybrid, and Software as a Service models. They also need to recognise the main Microsoft 365 services, including Microsoft Teams, SharePoint, OneDrive, Exchange Online, Microsoft 365 Apps, and administration concepts. The exam then moves into security, compliance, privacy, and trust, where identity, access, data protection, and governance concepts become important. Finally, candidates must understand Microsoft 365 pricing, licensing, support, and service lifecycle ideas well enough to compare options in business terms.
This breadth is the main challenge. The exam does not usually require the same click-by-click administration depth as role-based certifications, but it does expect candidates to understand how the pieces relate. Someone who memorises application names without understanding service plans, identity types, data residency, or compliance positioning is likely to find the scenario-based questions harder than expected.
Exam logistics: registration, delivery, scoring, and policies
Registration is handled through the official Microsoft exam page, where candidates sign in with a Microsoft account, select the MS-900 exam, and choose a delivery option. Microsoft typically offers online proctored delivery and test-centre delivery through its exam provider, but availability can vary by country, language, and scheduling window.
Pricing also varies by country or region, so candidates should rely on the Microsoft exam registration page for the current fee rather than using a figure from an article or training provider. The same applies to rescheduling, cancellation, identification requirements, online proctoring rules, and retake policies. These policies can change, and candidates should review the Microsoft certification exam policies before booking.
Microsoft certification exams use scaled scoring. For many Microsoft exams, a score of 700 is the published passing score, but candidates should verify the current MS-900 scoring information on Microsoft Learn when they register. The score report is intended to show performance by skill area; it should be used as a diagnostic tool if a retake is needed, rather than as a precise measure of how many questions were answered correctly.
Who should take MS-900
MS-900 is most useful for people who need Microsoft 365 literacy across productivity, collaboration, identity, security, compliance, and licensing. It can help a service desk analyst understand what users are asking about, a junior administrator build vocabulary before moving into tenant administration, or a business stakeholder evaluate Microsoft 365 capabilities during a rollout.
It is also relevant for non-technical roles that work around Microsoft 365 projects. A project coordinator involved in a Teams migration, for example, may not configure Exchange Online mail flow, but still needs to understand tenant concepts, user identity, collaboration controls, and the difference between consumer and enterprise cloud services.
Hiring teams generally treat MS-900 as a signal of foundational cloud literacy rather than proof of deep operational skill. Candidates who want the credential to support a career move should pair it with visible hands-on practice, helpdesk experience, project involvement, or a small portfolio of lab notes. Being able to explain how a tenant is structured, how users sign in, and why a licence unlocks certain services is more convincing than listing the certification alone.
MS-900 vs AZ-900 vs SC-900
MS-900, AZ-900, and SC-900 are all Microsoft fundamentals exams, and none is a prerequisite for the others. The better choice depends on the platform and role direction the candidate wants to emphasise.
| Exam |
Best fit |
Main focus |
| MS-900 |
Microsoft 365 support, business users, junior tenant administrators, managers involved in workplace projects |
Microsoft 365 services, collaboration, subscriptions, identity, security, compliance, and support concepts |
| AZ-900 |
Candidates moving toward Azure administration, infrastructure, data, development, or cloud architecture |
Azure cloud concepts, core Azure services, pricing, governance, and support |
| SC-900 |
Candidates interested in identity, security, compliance, risk, or governance roles |
Security, compliance, and identity concepts across Microsoft cloud services |
A practical way to decide is to start with the environment the candidate expects to work in first. If the work is mainly about Teams, SharePoint, Exchange Online, users, licences, and Microsoft 365 adoption, MS-900 is the natural starting point. If the work is about virtual machines, Azure networking, storage, and cloud infrastructure, AZ-900 is more relevant. If the work is mainly about identity protection, governance, compliance, and security operations, SC-900 may be the better first exam.
How to study for MS-900
A strong MS-900 study plan starts with the official Microsoft Learn exam outline, then turns each objective into a practical question. Instead of simply reading that Microsoft Teams is a collaboration tool, candidates should ask when Teams, SharePoint, OneDrive, and Exchange Online each play a role. Instead of memorising the name of a compliance feature, they should understand the type of business problem it helps address.
The most productive preparation usually combines reading, short videos or instructor-led explanation, and hands-on exploration in a Microsoft 365 trial tenant. A trial tenant gives candidates a safe place to look at the Microsoft 365 admin center, Entra admin center, Teams admin center, licensing pages, user settings, collaboration controls, and compliance-related concepts. The goal is not to become a full administrator before taking MS-900. The goal is to connect exam terminology to the places where those concepts appear in the product.
Common weak spots include licensing and identity. Candidates often spend time learning app features but avoid the harder questions around Business versus Enterprise plans, E3 and E5 positioning, cloud-only users, synced identities, federated identities, multifactor authentication, and the relationship between Microsoft 365 and Entra ID. Compliance is another area where conceptual clarity matters. Retention, sensitivity labels, audit, eDiscovery, and data loss prevention should be understood as governance and risk-management capabilities, not isolated menu items.
Structured training can help when a candidate needs a guided route through the objectives rather than self-study alone. Readynez offers an MS-900 Microsoft 365 Fundamentals course, and candidates planning several Microsoft exams may also want to review broader Microsoft training options or Unlimited Microsoft Training as part of a longer certification plan.
A practical two-to-four week study plan
The right timeline depends on prior experience. Someone who uses Microsoft 365 daily in a business environment may need less time than someone new to cloud services, but most candidates benefit from spreading study across several weeks rather than cramming product names before the exam.
- Read the current MS-900 skills measured page on Microsoft Learn and mark unfamiliar terms.
- Review cloud concepts, SaaS, shared responsibility, availability, and the difference between cloud and on-premises services.
- Explore a Microsoft 365 trial tenant and identify where users, groups, licences, Teams, SharePoint, OneDrive, and Exchange Online appear.
- Study Entra ID concepts, sign-in methods, multifactor authentication, conditional access at a conceptual level, and identity types.
- Review Microsoft 365 security and compliance concepts, including retention, sensitivity labels, audit, eDiscovery, and data loss prevention.
- Practise licensing scenarios, such as comparing a small business subscription with an Enterprise plan for a regulated organisation.
- Use practice questions to identify weak areas, then return to Microsoft Learn rather than memorising answer patterns.
A two-week plan can work for candidates with everyday Microsoft 365 exposure. The first week should focus on cloud, services, and identity, while the second week should cover security, compliance, licensing, and practice review. A four-week plan gives more room for hands-on exploration and is better for candidates coming from a non-technical background or from an on-premises environment.
The most useful lab work is simple. Create test users, assign and remove licences, review available admin centers, look at Teams and SharePoint settings, and observe where security and compliance features are surfaced. Candidates should avoid making risky configuration changes in a production tenant; a trial tenant or sandbox is the safer place to learn.
What to do after passing MS-900
MS-900 can stand on its own as proof of foundational Microsoft 365 knowledge, but it is often more valuable as the first step toward a role-based path. The next choice should follow the candidate’s work direction rather than a generic certification ladder.
For Microsoft 365 tenant administration, MS-102 is a logical progression because it moves from broad concepts into administrator responsibilities. For device management and endpoint administration, MD-102 is more relevant. For Teams-focused collaboration roles, MS-700 provides a more specialised path. For security and identity roles, SC-200 or SC-300 may be more appropriate, depending on whether the candidate is moving toward security operations or identity administration.
Business users and managers may not need another exam immediately. In many cases, the better next step is to apply the knowledge to a live project, such as improving Teams governance, reviewing licence usage, documenting user onboarding, or helping a department understand data protection responsibilities.
Preparing with the right expectations
MS-900 is a fundamentals exam, but that does not make it trivial. It asks candidates to understand the Microsoft 365 platform as a connected cloud service, including how productivity tools, identity, licensing, security, compliance, and support concepts work together. The strongest preparation links Microsoft Learn objectives with hands-on tenant exploration and practical business scenarios.
Readynez can support candidates who prefer instructor-led preparation, but the credential has the most value when it is paired with real understanding and practical exposure. A sensible next step is to verify the current Microsoft Learn exam outline, choose a study window, and, if guided training would help, contact Readynez to discuss the MS-900 path.
FAQ
What is the Microsoft 365 Fundamentals exam?
The Microsoft 365 Fundamentals exam, or MS-900, is an entry-level Microsoft certification exam covering Microsoft 365 cloud concepts, services, identity, security, compliance, licensing, and support. It is intended to validate breadth of understanding rather than advanced administration skills.
Are there prerequisites for MS-900?
Microsoft does not require candidates to hold another certification before taking MS-900. Familiarity with business productivity tools, cloud services, and basic IT concepts is helpful, especially for candidates who are new to Microsoft 365 administration.
How should candidates prepare for MS-900?
Candidates should start with the current skills measured page on Microsoft Learn, then study each topic through documentation, learning paths, practice questions, and hands-on exploration in a Microsoft 365 trial tenant. Particular attention should be given to Entra ID, licensing, Microsoft 365 services, and compliance concepts.
Is MS-900 better than AZ-900?
Neither exam is generally better; they serve different goals. MS-900 is the better fit for Microsoft 365 productivity, collaboration, tenant, and licensing concepts, while AZ-900 is more suitable for candidates focused on Azure infrastructure and cloud platform services.
Does MS-900 help with getting a job?
MS-900 can support entry-level applications by showing foundational Microsoft 365 knowledge, but it should not be treated as a job guarantee. Candidates stand out more when they combine the certification with hands-on practice, support experience, project work, or a clear next certification path.
