AZ-900 Azure Fundamentals: Study Guide & Exam Prep 2026

The AZ-900 Microsoft Azure Fundamentals certification is the entry point for cloud technology credentials from Microsoft. It's designed for people who are new to cloud computing—whether you're an IT professional pivoting toward cloud, a business analyst wanting to understand Azure, or someone just starting a tech career. You don't need a technical background to pass it, though a technical background helps you go deeper.

This guide covers what's on the AZ-900 exam, how to study effectively, what the credential actually signals to employers, and how it fits into the broader Microsoft certification path.

What Is the AZ-900 Exam?

AZ-900 (Microsoft Azure Fundamentals) is an entry-level certification exam that validates foundational knowledge of cloud concepts and Microsoft Azure services. It's not a role-based certification—you don't need to be an Azure administrator or developer to take it. It's designed to demonstrate that you understand what cloud computing is, what Azure offers, and the basic principles of pricing, security, and governance in the Azure environment.

The exam is administered by Pearson VUE. You can take it in-person at a testing center or online via proctored remote testing. The cost is $165 USD (pricing varies by region and may change). There's no prerequisite—no prior certification or experience is required before sitting for AZ-900.

Microsoft positions AZ-900 as appropriate for both technical and non-technical roles. Project managers, business decision-makers, IT administrators learning cloud, developers starting with Azure, and anyone in an organization evaluating or using Azure services can benefit from and pass AZ-900.

AZ-900 Exam Structure and Content Areas

The exam consists of 40-60 questions with a 45-minute time limit. Passing score is 700 out of 1000. Questions include multiple choice, multiple select, drag-and-drop, and scenario-based items. You'll know your score immediately after completing the exam.

The AZ-900 content is organized around six domain areas (Microsoft updates these percentages periodically; check the official exam page for current weights):

Describe cloud concepts (25-30%): This is foundational. What is cloud computing? What are the benefits—high availability, scalability, elasticity, agility, disaster recovery, security? What are the cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), SaaS (Software as a Service)? What are the cloud deployment models: public cloud, private cloud, hybrid cloud? Understand the shared responsibility model and how responsibility shifts between Microsoft and customers across service types.

Describe Azure architecture and services (35-40%): This is the heaviest domain. You need to know Azure's core architectural components—regions, availability zones, resource groups, subscriptions, management groups—and how they relate to each other. You should understand the major Azure service categories: compute (Virtual Machines, App Service, Container Instances, Azure Functions), networking (Virtual Network, Load Balancer, VPN Gateway, Azure DNS, ExpressRoute), storage (Blob storage, Azure Files, Queue storage, Table storage, Storage tiers), and identity and security (Azure Active Directory/Entra ID, role-based access control, Azure Defender, Key Vault).

Describe Azure management and governance (30-35%): Cost management tools (Azure Cost Management, Pricing Calculator, TCO Calculator), compliance and governance tools (Azure Policy, resource locks, tags, Microsoft Purview), Azure monitoring (Azure Monitor, Log Analytics, Azure Service Health), and deployment tools (Azure Portal, CLI, PowerShell, ARM templates, Azure Arc). You don't need to know how to use these tools hands-on at the depth an administrator would—you need to know what they're for and when to use which.

AZ-900 vs. AZ-104: Understanding the Path

A common question: what's the relationship between AZ-900 and AZ-104 (Microsoft Azure Administrator)?

AZ-900 is a foundational exam with no prerequisites, covering cloud and Azure concepts at a high level. AZ-104 is a role-based certification for Azure administrators that requires hands-on technical depth. AZ-900 is not a prerequisite for AZ-104—Microsoft doesn't require it—but the foundational knowledge from AZ-900 provides a useful conceptual framework before diving into AZ-104's more complex content.

Think of it this way: AZ-900 asks you to understand that Virtual Machines exist and what they're used for. AZ-104 asks you to deploy, configure, manage, and troubleshoot Virtual Machines. The knowledge depth is entirely different.

Many cloud professionals skip AZ-900 and go directly to role-based certifications. AZ-900 is most valuable for non-technical professionals, people entirely new to cloud, or those who want a credential that demonstrates basic Azure literacy while preparing for more advanced study.

How to Study for AZ-900

AZ-900 is one of the more approachable Microsoft certifications to prepare for. The content is genuinely foundational, and Microsoft provides substantial free study resources.

Microsoft Learn: Microsoft's free learning platform (learn.microsoft.com) has an official AZ-900 learning path covering all exam domains with modules, knowledge checks, and hands-on exercises using free Azure sandbox environments. This is the single best free resource and should be your starting point. The learning path typically takes 10-15 hours to complete.

Official Microsoft Study Guide: Microsoft publishes a free study guide on the exam page that maps topics to content. Reading this carefully ensures you haven't missed any coverage area.

Practice assessments: Microsoft's Learn platform includes free official practice assessments for AZ-900. These are representative of the question style and help you identify weak areas before the real exam.

John Savill's AZ-900 content on YouTube: John Savill, a Microsoft Technical Fellow, maintains popular free Azure certification content on YouTube. His AZ-900 materials are well-regarded and complement the Microsoft Learn path effectively.

Hands-on Azure experience: You can create a free Azure account with $200 in credits for 30 days and access to many services free for 12 months. While AZ-900 doesn't test deep hands-on skills, using Azure directly—creating resource groups, deploying a simple VM, exploring the Cost Management tool—builds the kind of intuitive understanding that helps with scenario-based exam questions.

Most candidates with no prior Azure experience can prepare for AZ-900 in 2-4 weeks of part-time study. Technical professionals who already understand cloud concepts may need only a week or less. The exam tests breadth of knowledge rather than depth, so systematic coverage of all domain areas is more important than intense focus on any single topic.

AZ-900 vs. AI-900: Which Should You Take?

Microsoft offers two fundamentals-level certifications that often get compared: AZ-900 (Azure Fundamentals) and AI-900 (Azure AI Fundamentals). They're different credentials with different content focus.

AZ-900 covers general cloud concepts and the broad Azure service catalog—compute, storage, networking, identity, governance. It's the foundational credential for Azure as a platform.

AI-900 focuses specifically on AI and machine learning concepts and Azure AI services—Azure Machine Learning, Cognitive Services (Vision, Speech, Language, Decision), Azure Bot Service. It's appropriate for people interested in AI development, data science, or business applications of AI rather than general cloud infrastructure.

If you're interested in cloud infrastructure, DevOps, administration, or development on Azure broadly, AZ-900 is the right starting point. If your interest is specifically in AI and machine learning, AI-900 may be more directly relevant. Many people take both—they're complementary and neither is a prerequisite for the other.

Azure Core Services: What AZ-900 Actually Tests

Let's get specific about the service knowledge required. AZ-900 doesn't require deep technical knowledge of any service, but it does require knowing what each major service is, what it does, and what category it falls into. Here's a condensed reference:

Compute: Azure Virtual Machines (IaaS compute), Azure App Service (PaaS for web apps), Azure Container Instances (serverless containers), Azure Kubernetes Service (AKS, managed Kubernetes), Azure Functions (serverless event-driven compute). Know the distinction between IaaS, PaaS, and serverless for each.

Networking: Azure Virtual Network (VNet, private network in Azure), Azure Load Balancer (distributes traffic across resources), Azure VPN Gateway (connects on-premises to Azure over VPN), Azure ExpressRoute (private dedicated connection to Azure, not over internet), Azure Content Delivery Network (CDN), Azure DNS.

Storage: Azure Blob Storage (unstructured object storage), Azure Disk Storage (VM managed disks), Azure Files (cloud-native file shares accessed via SMB), Azure Queue Storage (message queue service), Azure Table Storage (NoSQL key-value store). Know the storage tiers: Hot (frequently accessed), Cool (infrequently accessed), Cold (rarely accessed), Archive.

Identity: Azure Active Directory / Microsoft Entra ID (cloud-based identity and access management), Conditional Access (policy-based access control), Multi-Factor Authentication (MFA). Understand zero trust concepts and the principle of least privilege.

Databases: Azure SQL Database (managed relational SQL), Azure Cosmos DB (globally distributed multi-model NoSQL), Azure Database for MySQL/PostgreSQL, Azure Synapse Analytics (analytics platform).

AI and ML: Azure Machine Learning (platform for building ML models), Azure Cognitive Services (pre-built AI APIs for vision, speech, language, decision), Azure Bot Service.

Cloud Concepts You Must Know Cold

Cloud concepts questions often trip up candidates who focus too much on memorizing service names without understanding the underlying principles. These concepts appear throughout the exam in various forms:

Shared responsibility model: Who is responsible for what depends on the service type. In IaaS, Microsoft manages the physical infrastructure; you manage the operating system, applications, and data. In PaaS, Microsoft manages more; you manage data and applications. In SaaS, Microsoft manages everything; you manage access and data. This model is fundamental to Azure security discussions.

High availability vs. fault tolerance vs. disaster recovery: High availability means the system is designed to minimize downtime. Fault tolerance means the system continues operating despite component failures. Disaster recovery is the capability to recover after a catastrophic event. These are related but distinct concepts with different implementation requirements.

Capital expenditure (CapEx) vs. operational expenditure (OpEx): Traditional on-premises infrastructure is a CapEx model—large upfront investment. Cloud is primarily an OpEx model—pay for what you use as an operating expense. This financial distinction is a recurring theme in AZ-900.

Consumption-based pricing: Azure's pricing is generally consumption-based—you pay for what you use rather than reserving capacity. Understand the trade-offs between pay-as-you-go pricing, reserved capacity (1-year or 3-year reservations for discounts), and Azure Hybrid Benefit (using existing Windows Server and SQL Server licenses in Azure).

Azure Governance and Compliance

The governance and management domain is often where candidates are least prepared. These tools and concepts are less flashy than compute or AI services but appear consistently on AZ-900:

Azure Policy: Creates, assigns, and manages policies that enforce rules across Azure resources. Used to ensure resources stay compliant with organizational standards—for example, requiring all storage accounts to use HTTPS, or preventing resources from being created in unsupported regions.

Role-Based Access Control (RBAC): Manages who has access to Azure resources and what they can do. Built on three elements: security principal (who), role definition (what permissions), and scope (at what level). Common roles: Owner, Contributor, Reader. RBAC is the foundation of Azure access management.

Resource locks: Prevent accidental deletion or modification of resources. CanNotDelete allows read and modify but prevents deletion. ReadOnly prevents any modification. Locks can be applied at resource, resource group, or subscription scope.

Tags: Metadata attached to resources as name-value pairs. Used for cost allocation, resource organization, and automation. Tags on a resource group don't automatically apply to resources within it.

Azure Cost Management + Billing: The tool for analyzing and optimizing Azure spend. You'll be tested on what it does, not how to use it in depth. Know that it provides cost analysis, budgets, cost alerts, and recommendations for optimization.

The AZ-900 Certification and Your Career

What does AZ-900 actually signal to employers? The answer is nuanced.

For technical roles, AZ-900 alone doesn't move the needle much. Azure administrators, developers, and architects are evaluated on role-based certifications (AZ-104, AZ-204, AZ-305) that demonstrate actual technical skills. AZ-900 on a technical resume reads as a starting point, not a destination.

For non-technical roles—project managers, business analysts, sales engineers, IT managers making cloud decisions—AZ-900 is more valuable. It demonstrates genuine familiarity with Azure concepts and signals that you can participate meaningfully in cloud conversations. For these audiences, the credential is more impressive because it's unexpected.

For students and career changers, AZ-900 is a reasonable first certification that demonstrates you've started a cloud learning journey and can speak the language. Combined with a path toward a role-based certification, it provides a logical narrative about your transition.

AZ-900 is also sometimes required or encouraged by employers who've committed to Azure as their cloud platform and want all employees—technical and non-technical—to have baseline Azure literacy. In those contexts, the credential carries internal organizational weight even if it's less differentiating externally.

The AZ-900 certification guide covers the complete registration and exam process. The AZ-900 exam study tips page offers targeted preparation strategies. Practice tests for Azure AI and computer vision concepts round out AI-focused preparation.

After AZ-900: The Microsoft Certification Path

AZ-900 is a starting point, not a destination. Microsoft's certification framework beyond AZ-900 includes role-based paths for Administrators, Developers, Data Scientists, Security Engineers, and more.

Common next steps after AZ-900:

AZ-104 (Azure Administrator) if you're working in or transitioning toward cloud operations and infrastructure management. AZ-204 (Azure Developer) if you're building applications on Azure. AZ-305 (Azure Solutions Architect) if you have significant Azure experience and are designing architectures. AI-900 (Azure AI Fundamentals) if your focus is on AI and machine learning services. SC-900 (Security, Compliance, and Identity Fundamentals) if your focus is on Azure security and compliance.

Microsoft also offers Specialty certifications for Azure Virtual Desktop, Azure IoT Developer, and other focused areas. The certification ecosystem is substantial—building a thoughtful progression based on your actual career role is more valuable than collecting certifications without direction.

Ready to Pass AZ-900?

The AZ-900 exam is genuinely achievable with focused preparation. Microsoft has made the study materials free, the exam content is publicly documented, and the conceptual nature of the test rewards understanding over memorization.

Start with Microsoft Learn's official AZ-900 learning path. Supplement with hands-on Azure exploration using the free account. Take the official practice assessments to identify gaps. Review the six domain areas systematically, with extra attention to Azure architecture and services (the heaviest weighted domain) and governance tools (where many candidates underprep).

Walk into the exam knowing the cloud concepts cold—shared responsibility model, service models, deployment models, cloud benefits—and knowing the purpose of each major Azure service category. The scenario-based questions reward understanding over memorization: if you know why Azure Policy exists and what problems it solves, you'll answer questions about it correctly even when the exact wording is different from how you studied it.

The AZ-900 is the beginning of your Azure journey. Use the preparation well, pass with confidence, and map out where you want to go next on the Microsoft certification path.