The AZ-900 Microsoft Azure Fundamentals exam is where most people start their Microsoft cloud certification journey. It's not a technical deep-dive — it's a foundational assessment that validates you understand what cloud computing is, how Azure organizes its services, what Azure's core offerings do, and how Microsoft approaches identity, security, and governance in a cloud environment. You don't need to configure Azure services to pass AZ-900. But you do need to demonstrate genuine conceptual understanding of how cloud infrastructure works and where Azure fits into the broader cloud computing landscape. Practice with the free AZ-900 practice test on PracticeTestGeeks (300+ questions with answer explanations).
Five domain areas make up the AZ-900 exam. Cloud Concepts (approximately 25% of the exam) covers the fundamental ideas: the consumption-based model of cloud pricing, the distinction between capital expenditure and operational expenditure, the three cloud delivery models (IaaS, PaaS, SaaS), and the three deployment models (public, private, hybrid cloud). Azure Architecture and Services is the largest domain (approximately 35-40%) and covers Azure regions and availability zones, resource groups and subscriptions, and the specific services Microsoft offers for compute, networking, storage, and databases. Scoring well on AZ-900 requires understanding not just that these services exist, but what problem each one is designed to solve and when you'd choose one over another. Building that conceptual fluency from the ground up requires solid prep — the right place to start is building genuine domain understanding before moving to timed practice tests.
Azure identity and access management is a domain that trips up many AZ-900 candidates despite being conceptually straightforward. Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity platform, and AZ-900 tests your understanding of what it does: authenticate users, manage access through role-based access control (RBAC), support multi-factor authentication, and enable conditional access policies. The shared responsibility model — which establishes what Microsoft manages versus what customers are responsible for across IaaS, PaaS, and SaaS — appears on nearly every AZ-900 exam because it's fundamental to understanding cloud security posture. Microsoft Defender for Cloud, Azure Key Vault, and basic network security concepts round out the security portion. The az 900 security domain is one of the most consistently tested areas and deserves dedicated study time beyond just reviewing the definitions.
Cost management and governance covers Azure's pricing and service level agreement structure. Azure uses a consumption-based pricing model for most services — you pay for what you use, measured by the second or hour depending on the service. Azure pricing calculators, cost alerts, and budgets help organizations manage cloud spend. From a governance perspective, Azure Policy enforces organizational rules across subscriptions, while management groups allow hierarchical policy application across multiple subscriptions. SLA (Service Level Agreement) percentages and what they mean in terms of monthly downtime is a tested concept — a 99.9% SLA allows for approximately 43 minutes of downtime per month; a 99.99% SLA allows for approximately 4 minutes. These calculations appear directly on the exam. Candidates who've taken a full az 900 practice exam before their test date are significantly better prepared for the calculation-style questions that governance topics produce.
Azure's compute services form the core of the Azure Architecture and Services domain. Virtual Machines (VMs) represent the IaaS model — you manage the OS and applications while Microsoft manages the underlying infrastructure. Azure App Service and Azure Functions represent PaaS models where you deploy applications without managing VMs. Azure Kubernetes Service (AKS) handles containerized workloads. Azure Virtual Desktop delivers desktop-as-a-service. The AZ-900 exam doesn't require you to deploy or configure these services — it requires you to identify which service fits which scenario and understand the management responsibility differences between them. Practice with az-900 compute questions and answers focused on these distinctions prepares you for the scenario-based questions that make up a significant portion of AZ-900's compute coverage.
Storage and networking round out the Azure services domain. Azure Blob Storage handles unstructured data — images, videos, backups, log files. Azure Files provides managed file shares accessible via SMB protocol. Azure Queue Storage handles message-based communication between application components. On the networking side, Azure Virtual Networks provide private network isolation, Network Security Groups filter traffic, and Azure Load Balancer distributes incoming traffic across VM instances. Azure Content Delivery Network (CDN) caches content geographically to reduce latency for end users. Understanding what each storage and networking service does — and recognizing the use case that matches each service — is exactly what the exam tests across this domain. Working through az-900 storage questions and answers helps candidates build the scenario-recognition speed needed to answer these questions efficiently within the 85-minute time limit.
You can continue preparing with the microsoft az 900 practice test, which includes answer explanations for every question.
You can continue preparing with the az 900 exam, which includes answer explanations for every question.
You can continue preparing with the az 900 pdf, which includes answer explanations for every question.
Facts verified Oct 17, 2026 against Microsoft. Dates that have passed are removed automatically.
Facts verified Oct 17, 2026 against Microsoft. Dates that have passed are removed automatically.
| Item | Detail | Official source |
|---|---|---|
| Number of questions | Variable; no confirmed AZ-900-specific count | Microsoft |
| Time limit | 45-minute exam; 65-minute appointment | Microsoft |
| Passing score | 700 on a scaled score of 1–1,000 | Microsoft |
| Retake fee | Payment required when applicable | Microsoft |
| Retake policy | 24 hours after first failure; then 14 days; maximum five attempts | Microsoft |
| Validity | Does not expire | Microsoft |
| Renewal | No periodic renewal required | Microsoft |
| Delivery | Test center or online proctored appointment | Microsoft |
| Eligibility | IT skills and experience recommended | Microsoft |
| Score release | Usually within minutes; profile within 24 hours | Microsoft |
| Registration opens | Booking up to 90 days ahead | Microsoft |
Facts verified Oct 17, 2026 against Microsoft. Dates that have passed are removed automatically.
Interactive AZ-900 resources on PracticeTestGeeks, free to start:
Most AZ-900 candidates underestimate how the exam tests conceptual understanding and overestimate how many definition questions they'll face. The exam rarely asks "what does SaaS stand for?" — it presents a scenario and asks which cloud service model best fits it. "A company wants to use email without managing servers or the email application itself — which service model does this represent?" That's a SaaS question, but phrased in context rather than as a definition lookup. Building the mental model to answer scenario questions quickly requires practice with scenario-based questions, not just flashcard review of definitions.
Timed practice tests serve a specific function: they force you to develop a pace and decision-making rhythm under realistic conditions. At 45 minutes for 40–60 questions, you have roughly 90 seconds to 2 minutes per question. That's enough time for most questions — but only if you're not re-learning concepts during the exam. Candidates who enter AZ-900 feeling "pretty sure" about the material often run out of time because uncertain recall feels faster than it is. If you're taking 3–4 minutes on any question, your conceptual understanding needs more preparation, not just more practice tests. The most effective preparation combines conceptual study (understand the service model, not just the name) with targeted practice tests that immediately explain why each answer is right or wrong.
Full practice tests matter more than topic-by-topic quizzing in the final two weeks before your exam date. Mixed-domain practice mirrors actual exam conditions and builds the mental switching speed needed to move from a cloud concepts question straight to an identity security question and then to a storage scenario — which is exactly how the real exam presents material. It also surfaces knowledge gaps that you didn't realize existed when studying by topic. Many candidates discover they understand compute well but keep missing governance questions, or vice versa — insights that only emerge from full mixed-domain practice sets. Taking two full 60-question practice tests under timed conditions in the week before your exam, reviewing every incorrect answer thoroughly, is more valuable than three additional weeks of casual reading.
Exam registration is straightforward through Pearson VUE, either at a test center or via online proctored delivery. Before you register, check your practice test scores against the 700/1000 threshold — Microsoft's scoring is scaled, not raw, so you don't need to answer exactly 70% correctly. A well-rounded review of all five exam domains, combined with regular timed practice using a az 900 practice exam format, puts you in the best position to score well above the passing threshold on your first attempt. Most well-prepared candidates finish with room to spare on time, leaving minutes to review flagged questions before submitting.
Try these questions from our free AZ-900 practice tests. The correct answer and an explanation follow each question.
What is the primary role of Azure Active Directory (Azure AD) in the Microsoft Azure ecosystem?
Answer: B. Providing cloud-based identity and access management
Azure Active Directory is Microsoft's cloud-based identity and access management service. It enables employees to sign in and access resources, and allows administrators to control access to applications and data using policies and multi-factor authentication.
Which Azure service category includes tools like Azure DevOps, Azure Monitor, and Azure Automation for managing and operating Azure deployments?
Answer: A. Azure management and governance tools
Azure management and governance tools include services for monitoring, automating, and governing Azure deployments, such as Azure Monitor, Azure Automation, Azure Policy, and Azure DevOps.
A company plans to move all of its resources and data to Azure. Only Platform as a Service (PaaS) solutions must be used in Azure, according to the migration plan specified. John has been asked to set up an Azure environment that complies with the migration plan's requirements. John proposes setting up Azure SQL databases and an Azure App Service. Does the proposed remedy satisfy the demand?
Answer: A. Elasticity
Azure SQL databases and Azure App Service are both examples of Platform as a Service (PaaS) solutions. A key characteristic and benefit of PaaS offerings is elasticity, which means they can automatically scale resources up or down based on demand. This inherent ability to adapt to varying workloads without manual intervention directly satisfies the requirement for using PaaS solutions in the migration plan.
Which Azure identity service is used to manage user identities and provide authentication for Azure resources and Microsoft 365?
Answer: A. Microsoft Entra ID (Azure Active Directory)
Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud-based identity and access management service, providing authentication and authorization for Azure and Microsoft 365.