The AZ-900 Microsoft Azure Fundamentals exam is where most people start their Microsoft cloud certification journey. It's not a technical deep-dive โ it's a foundational assessment that validates you understand what cloud computing is, how Azure organizes its services, what Azure's core offerings do, and how Microsoft approaches identity, security, and governance in a cloud environment. You don't need to configure Azure services to pass AZ-900. But you do need to demonstrate genuine conceptual understanding of how cloud infrastructure works and where Azure fits into the broader cloud computing landscape.
Five domain areas make up the AZ-900 exam. Cloud Concepts (approximately 25% of the exam) covers the fundamental ideas: the consumption-based model of cloud pricing, the distinction between capital expenditure and operational expenditure, the three cloud delivery models (IaaS, PaaS, SaaS), and the three deployment models (public, private, hybrid cloud). Azure Architecture and Services is the largest domain (approximately 35-40%) and covers Azure regions and availability zones, resource groups and subscriptions, and the specific services Microsoft offers for compute, networking, storage, and databases. Scoring well on AZ-900 requires understanding not just that these services exist, but what problem each one is designed to solve and when you'd choose one over another. Building that conceptual fluency from the ground up requires solid prep โ the right place to start is building genuine domain understanding before moving to timed practice tests.
Azure identity and access management is a domain that trips up many AZ-900 candidates despite being conceptually straightforward. Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity platform, and AZ-900 tests your understanding of what it does: authenticate users, manage access through role-based access control (RBAC), support multi-factor authentication, and enable conditional access policies. The shared responsibility model โ which establishes what Microsoft manages versus what customers are responsible for across IaaS, PaaS, and SaaS โ appears on nearly every AZ-900 exam because it's fundamental to understanding cloud security posture. Microsoft Defender for Cloud, Azure Key Vault, and basic network security concepts round out the security portion. The az 900 security domain is one of the most consistently tested areas and deserves dedicated study time beyond just reviewing the definitions.
Cost management and governance covers Azure's pricing and service level agreement structure. Azure uses a consumption-based pricing model for most services โ you pay for what you use, measured by the second or hour depending on the service. Azure pricing calculators, cost alerts, and budgets help organizations manage cloud spend. From a governance perspective, Azure Policy enforces organizational rules across subscriptions, while management groups allow hierarchical policy application across multiple subscriptions. SLA (Service Level Agreement) percentages and what they mean in terms of monthly downtime is a tested concept โ a 99.9% SLA allows for approximately 43 minutes of downtime per month; a 99.99% SLA allows for approximately 4 minutes. These calculations appear directly on the exam. Candidates who've taken a full az 900 practice exam before their test date are significantly better prepared for the calculation-style questions that governance topics produce.
Azure's compute services form the core of the Azure Architecture and Services domain. Virtual Machines (VMs) represent the IaaS model โ you manage the OS and applications while Microsoft manages the underlying infrastructure. Azure App Service and Azure Functions represent PaaS models where you deploy applications without managing VMs. Azure Kubernetes Service (AKS) handles containerized workloads. Azure Virtual Desktop delivers desktop-as-a-service. The AZ-900 exam doesn't require you to deploy or configure these services โ it requires you to identify which service fits which scenario and understand the management responsibility differences between them. Practice with az-900 compute questions and answers focused on these distinctions prepares you for the scenario-based questions that make up a significant portion of AZ-900's compute coverage.
Storage and networking round out the Azure services domain. Azure Blob Storage handles unstructured data โ images, videos, backups, log files. Azure Files provides managed file shares accessible via SMB protocol. Azure Queue Storage handles message-based communication between application components. On the networking side, Azure Virtual Networks provide private network isolation, Network Security Groups filter traffic, and Azure Load Balancer distributes incoming traffic across VM instances. Azure Content Delivery Network (CDN) caches content geographically to reduce latency for end users. Understanding what each storage and networking service does โ and recognizing the use case that matches each service โ is exactly what the exam tests across this domain. Working through az-900 storage questions and answers helps candidates build the scenario-recognition speed needed to answer these questions efficiently within the 85-minute time limit.
Most AZ-900 candidates underestimate how the exam tests conceptual understanding and overestimate how many definition questions they'll face. The exam rarely asks "what does SaaS stand for?" โ it presents a scenario and asks which cloud service model best fits it. "A company wants to use email without managing servers or the email application itself โ which service model does this represent?" That's a SaaS question, but phrased in context rather than as a definition lookup. Building the mental model to answer scenario questions quickly requires practice with scenario-based questions, not just flashcard review of definitions.
Timed practice tests serve a specific function: they force you to develop a pace and decision-making rhythm under realistic conditions. At 85 minutes for 40โ60 questions, you have roughly 90 seconds to 2 minutes per question. That's enough time for most questions โ but only if you're not re-learning concepts during the exam. Candidates who enter AZ-900 feeling "pretty sure" about the material often run out of time because uncertain recall feels faster than it is. If you're taking 3โ4 minutes on any question, your conceptual understanding needs more preparation, not just more practice tests. The most effective preparation combines conceptual study (understand the service model, not just the name) with targeted practice tests that immediately explain why each answer is right or wrong.
Full practice tests matter more than topic-by-topic quizzing in the final two weeks before your exam date. Mixed-domain practice mirrors actual exam conditions and builds the mental switching speed needed to move from a cloud concepts question straight to an identity security question and then to a storage scenario โ which is exactly how the real exam presents material. It also surfaces knowledge gaps that you didn't realize existed when studying by topic. Many candidates discover they understand compute well but keep missing governance questions, or vice versa โ insights that only emerge from full mixed-domain practice sets. Taking two full 60-question practice tests under timed conditions in the week before your exam, reviewing every incorrect answer thoroughly, is more valuable than three additional weeks of casual reading.
Exam registration is straightforward through Pearson VUE, either at a test center or via online proctored delivery. Before you register, check your practice test scores against the 700/1000 threshold โ Microsoft's scoring is scaled, not raw, so you don't need to answer exactly 70% correctly. A well-rounded review of all five exam domains, combined with regular timed practice using a az 900 practice exam format, puts you in the best position to score well above the passing threshold on your first attempt. Most well-prepared candidates finish with room to spare on time, leaving minutes to review flagged questions before submitting.
Complete Microsoft's free AZ-900 learning paths on Microsoft Learn โ covers all five domains with interactive labs and knowledge checks
Work through practice questions by domain to identify weak areas โ focus extra time on Azure Architecture and Services (largest domain)
Take two full 60-question practice tests under 85-minute time limits โ review every wrong answer before moving on
Revisit any domain where you scored below 70% on practice tests โ re-read the Microsoft Learn module, then practice more questions
Register at Pearson VUE when scoring 80%+ consistently on practice tests โ arrive rested and read every question carefully before answering