Azure Fundamentals AZ-900 Guide: What to Expect and How to Pass
The Azure Fundamentals certification (AZ-900) is Microsoft’s broadest Azure credential. It tests that you understand cloud computing concepts and Azure services at a high level — not the ability to configure or deploy, but the ability to explain what services exist, what they do, and how Azure is structured as a platform.
If you are new to Azure or cloud in general, it is a sensible starting point. If you already have cloud experience, the question of whether to take AZ-900 first or go straight to AZ-104 is worth thinking through carefully — and this guide addresses that directly.
What the AZ-900 actually covers#
The exam covers cloud and Azure concepts at a definitional and conceptual level. No hands-on configuration is required.
Exam domains:
| Domain | Approximate weighting |
|---|---|
| Describe cloud concepts | 25–30% |
| Describe Azure architecture and services | 35–40% |
| Describe Azure management and governance | 30–35% |
Format: 40–60 questions, 60 minutes, passing score 700/1000, approximately $165. This certification does not expire.
Cloud concepts domain#
This section covers the foundational ideas behind cloud computing:
- Shared responsibility model: what the cloud provider manages vs the customer
- Cloud models: public, private, hybrid — definitions and trade-offs
- Cloud service types: IaaS (infrastructure as a service), PaaS (platform as a service), SaaS (software as a service)
- The consumption-based model: how cloud pricing differs from on-premises capital expenditure
- Benefits of cloud: high availability, scalability, elasticity, reliability, security, governance
Azure architecture and services#
This is the largest domain. It covers:
Core infrastructure:
- Azure regions and availability zones: what they are, how they relate, why they matter for resilience
- Azure subscriptions and management groups: how Azure organises resources
- Resource groups: why all Azure resources belong to one, how they work
- Azure Resource Manager (ARM): the management layer behind the portal, CLI, and APIs
Compute services:
- Azure Virtual Machines: on-demand compute, similar to physical hardware
- Azure App Service: managed platform for web apps and APIs
- Azure Functions: serverless compute
- Azure Kubernetes Service (AKS): managed Kubernetes
- Azure Container Instances: simpler container hosting without Kubernetes
Networking services:
- Azure Virtual Networks (VNets): private networking in Azure
- Azure DNS, Azure Load Balancer, Azure VPN Gateway, Azure ExpressRoute
- Azure Content Delivery Network (CDN)
- Azure Private Link
Storage services:
- Azure Blob Storage: unstructured object storage
- Azure Files: managed file shares
- Azure Queue Storage, Azure Table Storage
- Azure managed disks: block storage for VMs
- Storage tiers: Hot, Cool, Cold, Archive
Database services:
- Azure SQL Database: managed SQL Server
- Azure Cosmos DB: multi-model NoSQL database
- Azure Database for PostgreSQL, MySQL, MariaDB
- Azure SQL Managed Instance
AI and other services:
- Azure Cognitive Services: pre-built AI APIs
- Azure Machine Learning: ML model training and deployment
- Azure IoT Hub, DevOps, Monitor — at a high level
Management and governance#
- Azure Cost Management and billing: subscriptions, budgets, pricing calculator, total cost of ownership calculator
- Azure Policy: enforcing rules across resources
- Azure Blueprints: packaging policies, RBAC, and resource templates for environments
- Azure Arc: managing non-Azure resources through Azure
- Azure Advisor: recommendations for cost, security, and performance
- Azure Service Health and Azure Monitor
Security and compliance:
- Azure Defender (now part of Microsoft Defender for Cloud): threat protection
- Azure Sentinel: SIEM and SOAR
- Azure Key Vault: secrets, certificates, and keys
- Role-Based Access Control (RBAC): controlling who can do what to which resources
- Azure Active Directory (now Microsoft Entra ID): identity and access management
- Multi-factor authentication (MFA), Conditional Access
How hard is AZ-900?#
AZ-900 is one of the most accessible cloud certifications available. The questions are definitional and conceptual rather than scenario-based or configuration-specific.
A typical question: “Which Azure service provides a managed relational database based on SQL Server?” Answer: Azure SQL Database.
Candidates with existing cloud experience (particularly AWS or GCP) often find AZ-900 straightforward because the underlying concepts are familiar — only the terminology and service names differ.
Candidates with no cloud experience find it more challenging because they are learning cloud computing concepts at the same time as Azure specifics. For this group, AZ-900 serves as a genuinely useful introduction.
Realistic preparation time:
- No cloud background: 2–4 weeks at 5–10 hours/week
- Some cloud experience (AWS/GCP): 1–2 weeks of focused study on Azure-specific terminology
- Regular Azure user: a few days of review is sufficient
Should you take AZ-900 before AZ-104?#
This is the most common question for engineers approaching Azure certifications.
Take AZ-900 first if:
- You have no cloud experience at all
- You are new to Microsoft’s cloud ecosystem and want a structured introduction
- Your employer or a job requirement specifically asks for AZ-900
- You want to understand the full Azure service landscape before narrowing your study
Go directly to AZ-104 if:
- You already have hands-on cloud experience (on any platform)
- You understand IaaS, PaaS, networking, and IAM concepts from prior work
- You want to reach a technical certification as quickly as possible
- You are self-teaching and find the AZ-900 material obvious from your existing knowledge
A useful test: take a free AZ-900 practice exam without studying. If you score 70%+ based on existing knowledge, your time is better spent on AZ-104 directly.
What AZ-900 is worth on a CV#
AZ-900 signals that you have completed a structured introduction to Azure and understand the platform at a conceptual level. For technical roles, this matters less than AZ-104 or higher-level credentials.
Where AZ-900 matters most:
- Entry-level applications where the role asks for it explicitly
- Non-technical or semi-technical roles (project managers, business analysts, account managers) where platform awareness is valued
- As a prerequisite signal before pursuing AZ-104 in interviews
AZ-900 alone on a technical CV is weak signal. It should be followed up with technical work experience or AZ-104 preparation to have meaningful impact.
Study resources#
Microsoft provides free learning paths for AZ-900 on Microsoft Learn. These cover every domain with explanations, knowledge checks, and interactive modules. The official Microsoft documentation is also structured clearly around the AZ-900 domains.
Microsoft Learn paths are genuinely good for AZ-900 — more so than for more advanced certifications. The content is well-organised and covers the exam material systematically without requiring external resources.
Practice exams are still useful: use them to identify weak areas in the last week before your exam. You do not need to score 90%+ on practice questions to pass — the real exam is accessible to candidates who have covered the material carefully.
After AZ-900: what comes next#
AZ-900 is the foundation, not the destination. After passing it:
- Most infrastructure engineers move to AZ-104 Azure Administrator
- Developers move to AZ-204 Azure Developer
- Data professionals explore DP-900 (if not already done) then DP-203
See the Azure Administrator guide for the next step in the technical path.
Summary#
- AZ-900 covers cloud concepts and Azure services at a conceptual, definitional level — no hands-on configuration tested
- It does not expire, which makes it a long-lasting base credential
- Preparation time ranges from a few days (experienced cloud engineers) to 3–4 weeks (complete beginners)
- Engineers with cloud experience can often skip AZ-900 and go directly to AZ-104
- AZ-900 alone carries limited weight for technical roles; follow it with AZ-104 or relevant experience