Microsoft Certified: Azure Fundamentals (AZ-900) is the first gate you meet in the Azure certification lineup. It is not a test of writing code or memorizing commands. It is a Fundamentals-level certification that checks whether you can explain why a company moves to the cloud and which Azure service solves which problem, so you can take it on even if you are not a developer.
This post is the guide to our 14-part AZ-900 domain deep-dive series. Before getting into individual topics, it maps out the exam structure, who should take it, and where this certification sits on the Azure career path.
---
Who Is AZ-900 For?
AZ-900 does not ask whether you can build an Azure environment yourself. It asks whether you can explain why the cloud is needed and which service fits which situation. You do not have to be a train driver to reach your destination, as long as you can read the subway map.
This certification is a particularly good fit for the following people.
| Target Audience | Why It Fits | |------|------| | Non-technical roles (sales, marketing, planning, finance, procurement) | Speak the same language as the IT team in cloud adoption and cost discussions | | IT newcomers, students, and job seekers | A first cloud certification you can attempt with no work experience | | On-premises infrastructure and systems engineers | A starting point for mapping server and network knowledge onto Azure terms, and groundwork before AZ-104 | | People with AWS or Google Cloud experience | Quickly map concepts you already know onto Azure service names and structure | | Managers, team leads, and decision makers | Understand cost models, the shared responsibility model, and governance tools well enough to justify adoption decisions |
There are no prerequisite certifications or required courses. Fundamentals certifications do not expire, so once you earn it there is nothing to renew. That said, memorizing service names alone tends to fail you on questions that describe a situation and ask for the right service, so set aside time to click through the Azure portal yourself a few times.
---
Exam at a Glance
| Item | Detail | |------|------| | Exam Code | AZ-900 | | Full Name | Microsoft Certified: Azure Fundamentals | | Level | Fundamentals (beginner) | | Passing Score | 700 (out of 1,000) | | Duration | 45 minutes (65 minutes of seat time including instructions and agreements) | | Questions | Varies (Microsoft does not publish an exact question count) | | Exam Fee | Varies by country ($99 USD in the United States) | | Validity | Does not expire (no renewal needed) | | Languages | 13 languages, including English | | Delivery | Pearson VUE test center or online proctored exam | | Prerequisites | None |
With only 45 minutes, you cannot afford to linger on any single question. The safe approach is to mark a confusing question for review, move on, and come back at the end. If you fail, you can retake the exam after 24 hours; every attempt after that requires a 14-day wait, with a maximum of five attempts in a 12-month period.
---
Domain Breakdown
AZ-900 is made up of three domains, and the weight of each is published as a range. The breakdown below follows the official skills outline as revised on July 20, 2026.
| Domain | Topic | Weight | Deep dives | |------|------|------|------| | Domain 1 | Describe cloud concepts | 25–30% | 3 posts | | Domain 2 | Describe Azure architecture and services | 35–40% | 7 posts | | Domain 3 | Describe Azure management and governance | 30–35% | 4 posts |
Domain 2 carries the most weight at 35–40%. It also has the widest scope, covering compute, networking, and storage plus identity and security, so it deserves the largest share of your study time. Still, the three domains are close enough in weight that you cannot skip any of them, which is what characterizes AZ-900.
!AZ-900 exam domain weight breakdown across 3 domains
Domain 1: Describe cloud concepts (25–30%)
This domain covers what the cloud is and why organizations use it. Telling concepts and terms apart precisely matters more here than knowing Azure service names.
Key topics: The shared responsibility model; public, private, and hybrid cloud; the consumption-based model and CapEx vs. OpEx; serverless; high availability, scalability, reliability, and predictability; the differences between IaaS, PaaS, and SaaS and the right use cases for each.
Exam tip: "Who is responsible for patching the operating system?" → The customer in IaaS, Microsoft in PaaS and SaaS. Solve service-model questions by asking "how far down do I manage it myself?"
Related posts: Cloud Computing Concepts, Benefits of Cloud Services, Cloud Service Types
Domain 2: Describe Azure architecture and services (35–40%)
This domain covers how Azure is structured and which services it offers. Remember that identity, access, and security belong here, not in the "management" domain.
Key topics: Regions, region pairs, and availability zones; the resource → resource group → subscription → management group hierarchy; comparing Virtual Machines, containers, and Azure Functions; Virtual Network, VPN Gateway, and ExpressRoute; storage tiers and redundancy options; Microsoft Entra ID, MFA, Conditional Access, RBAC, and Zero Trust.
Exam tip: "A dedicated private connection that does not go over the public internet" → ExpressRoute. "An encrypted tunnel over the internet" → VPN Gateway. The two tend to show up as options in the same question, so be able to state the difference in one sentence.
Related posts: Azure Core Architecture, Compute and Networking, Azure Virtual Machines Explained, Public Endpoints vs Private Endpoints, Storage Services, Identity, Access, and Security, Defense in Depth and Advanced Entra ID Concepts
Domain 3: Describe Azure management and governance (30–35%)
This domain covers how to keep an Azure environment under control in terms of cost, rules, and health. Many of the tools sound alike, so the key is knowing what each one is for.
Key topics: Factors that affect cost; the pricing calculator and Cost Management; tags; Microsoft Purview, Azure Policy, and resource locks; the Azure portal, Cloud Shell, Azure CLI, and Azure PowerShell; Azure Arc; ARM templates and infrastructure as code (IaC); Azure Advisor, Service Health, and Azure Monitor.
Exam tip: "Prevent accidental deletion" → resource locks. "Prevent creating resources that break the rules" → Azure Policy. "Decide who can do what" → RBAC. Have a one-sentence distinction ready for all three.
Related posts: Cost Management Fundamentals, Governance and Compliance, Resource Deployment and Management, Monitoring and Service Health
---
Where AZ-900 Fits in the Azure Certification Path
Azure certifications climb from Fundamentals to Associate to Expert. AZ-900 is the starting point.
| Category | AZ-900 | AZ-104 | AZ-305 | |------|------|------|------| | Level | Fundamentals | Associate | Expert | | Full Name | Azure Fundamentals | Azure Administrator Associate | Azure Solutions Architect Expert | | Main Audience | Any role, including non-technical | Administrators who build and operate Azure environments | Architects who turn requirements into Azure designs | | Hands-on Experience | Not required | Experience with the portal, CLI, and PowerShell | Advanced IT operations and design experience | | Prerequisite Certification | None | None | Azure Administrator Associate (AZ-104) required | | Validity | Does not expire | 1 year (free online renewal) | 1 year (free online renewal) |
The concepts you pick up in AZ-900, such as regions, resource groups, the shared responsibility model, and RBAC, are assumed knowledge in the higher-level certifications. If you want to grow into an engineer who operates Azure environments, continue with the AZ-104 complete guide; if you are aiming at architecture design on top of that, move on to the AZ-305 complete guide. To broaden your fundamentals toward security or data, the SC-900 guide and the DP-900 guide sit at the same Fundamentals level and are good choices too.
---
Study Roadmap for Beginners
A step-by-step study order for people learning the cloud for the first time.
Step 1 (Week 1): Get the cloud concepts down. Lock in Domain 1's shared responsibility model and IaaS, PaaS, and SaaS first. The AZ-900 learning path on Microsoft Learn is a good place to start.
Step 2 (Weeks 2–3): Learn Azure's structure and services. Sign in to the Azure portal, create and delete a resource group, and see for yourself how regions, subscriptions, and resource groups relate. Then organize the services in order: compute, networking, storage, identity.
Step 3 (Week 4): Sort out management and governance. Build a table that separates the easily confused tools line by line: Azure Policy, resource locks, and RBAC, as well as Advisor, Service Health, and Monitor. The most commonly confused pairs are collected in AZ-900 Look-Alike Services: A Side-by-Side Comparison.
Step 4 (3–5 days): Practice questions and review. Get used to the question format with the Practice Assessment on Microsoft Learn, then regroup your wrong answers by domain.
The most common mistake is memorizing service names without ever opening the portal. A short exercise of creating and deleting one resource group makes the concepts stick far longer.
---
Exam Day Checklist
You book the exam through Pearson VUE and choose between a test center and an online proctored session. Try the exam sandbox on Microsoft Learn before you book, so that on exam day you do not spend time figuring out the interface. Question types, scoring, and the online exam process are covered in detail in the AZ-900 Exam Day Guide.
Register with a personal Microsoft account, not a work or school account (your exam records can be lost if you leave the organization) Choose your exam language when you book; if it is not offered in your language you can request an extra 30 minutes You may tak