Microsoft 365 Certified Fundamentals (MS-900) Guide

The MS-900: Microsoft 365 Fundamentals exam earns you the Microsoft 365 Certified: Fundamentals credential — Microsoft's entry-level certification for the Microsoft 365 ecosystem. It's the right starting point if you're new to cloud services, Microsoft 365 specifically, or tech certifications in general. It's also a practical credential for business professionals who work with Microsoft 365 daily and want something official that reflects that knowledge.

This guide covers what MS-900 tests, how to study for it, and what the certification does for your career.

What Is the MS-900 Exam?

MS-900 is a foundational exam from Microsoft that validates understanding of cloud concepts and Microsoft 365 services. Unlike more advanced Microsoft certifications — the AZ-900 for Azure, the SC-900 for security compliance, or the associate-level role-based exams — MS-900 doesn't require technical hands-on experience. It tests conceptual understanding, not the ability to configure or deploy.

That said, "fundamentals" doesn't mean trivial. The exam expects you to genuinely understand what Microsoft 365 is, how it works, what its components do, and how it compares to on-premises and hybrid deployment models. Candidates who approach it casually without studying often find themselves surprised by the specificity of the questions.

MS-900 Exam Domains and What They Cover

Microsoft updates exam objectives periodically. The current MS-900 covers these core areas:

Cloud Concepts

This domain tests your understanding of cloud computing fundamentals — not Microsoft-specific, but the broader concepts. What's the difference between IaaS, PaaS, and SaaS? What does "high availability" mean in a cloud context? What are the trade-offs between public, private, and hybrid clouds?

Practice with MS-900 Cloud Computing Concepts questions to solidify this foundation. Even if you've heard these terms before, the exam tests precision — knowing the definition isn't enough if you can't apply it to a scenario.

Microsoft 365 Productivity and Collaboration Capabilities

This is typically the largest domain. It covers the core Microsoft 365 apps and services: Exchange Online (email), SharePoint Online (document management and intranets), Teams (messaging, calls, meetings), OneDrive (personal file storage and sharing), and Microsoft 365 Apps (the Office suite — Word, Excel, PowerPoint, etc.).

For each service, you should understand what it does, who uses it, and how it fits into the broader Microsoft 365 ecosystem. The exam often asks you to identify which service is appropriate for a given business scenario — understanding use cases matters as much as knowing product names.

Work through MS-900 Productivity and Collaboration Tools practice questions to test this knowledge, and also try the Productivity and Collaboration Tools 2 set for additional coverage.

Microsoft 365 Security, Compliance, Privacy, and Trust

This domain covers how Microsoft 365 addresses security and regulatory compliance needs. You'll need to understand Microsoft Defender services, the Microsoft Purview compliance portal, data governance concepts, and how Microsoft handles customer data privacy.

Key topics include zero trust security principles, Microsoft Secure Score, sensitivity labels, data loss prevention (DLP) policies, and the shared responsibility model for cloud security.

Study with MS-900 Security Solutions and Compliance and Trust Principles practice sets to make sure you understand both the concepts and the Microsoft-specific tools.

Microsoft 365 Pricing, Licensing, and Support

The exam includes questions about how Microsoft 365 is sold and supported. You'll need to understand subscription tiers — Microsoft 365 Business Basic, Business Standard, Business Premium, and the enterprise E3/E5 plans — and which features are included in each.

You should also understand billing concepts: per-user per-month pricing, annual versus monthly commitments, and how organizations manage licenses. The MS-900 Pricing and Support practice test covers this domain specifically.

Modern Device and Endpoint Management

This domain covers how organizations manage devices in a Microsoft 365 environment. Microsoft Intune is central here — it's Microsoft's cloud-based endpoint management solution for enrolling, configuring, and securing devices. You'll also need to understand Windows Autopilot (automated device provisioning) and Azure Active Directory (now Microsoft Entra ID) for identity management.

The conceptual question is: how does a modern organization manage employee devices without an on-premises server infrastructure? Microsoft 365 provides tools to do this in a cloud-first or hybrid way, and the exam tests whether you understand the landscape.

Practice with MS-900 Modern Device and Endpoint Management questions to test your grasp of these tools and scenarios.

Identity and Access Management

Azure Active Directory (Microsoft Entra ID) is the identity foundation of Microsoft 365. This domain tests understanding of authentication methods (passwords, MFA, passwordless), conditional access policies, and the difference between cloud-only, synchronized, and federated identity models.

You don't need to be able to configure these systems for MS-900 — you need to understand what they do and why organizations choose different approaches. Practice with MS-900 Identity and Access Management questions to build this conceptual grounding.

MS-900 Exam Format

The MS-900 is a 40–60 question exam administered by Pearson VUE or through Microsoft's online proctoring. You have 60 minutes. The passing score is 700 on a 1000-point scale. Questions are primarily multiple choice, though Microsoft sometimes includes other formats like case studies, drag-and-drop, and hot-area questions for more advanced exams.

The exam is available in multiple languages and can be taken at a Pearson VUE testing center or online from home with a webcam-based proctor.

Who Should Take MS-900?

MS-900 is a good fit for several types of candidates:

IT professionals new to cloud technology who need foundational Microsoft 365 knowledge before moving to role-based certifications. MS-900 is not required to pursue the associate-level Microsoft 365 certifications, but it provides context that makes those exams easier.

Business professionals who use Microsoft 365 daily — salespeople, project managers, HR professionals, marketers — who want a credential that formalizes their practical knowledge. The exam validates understanding that many power users already have from daily work with Teams, SharePoint, and Outlook.

Students starting IT certification paths. MS-900, along with AZ-900 and SC-900, is one of the recommended starting points for the Microsoft certification landscape. It provides vocabulary and conceptual grounding for more advanced exams.

IT decision-makers and procurement teams who evaluate and purchase Microsoft 365 for organizations. Understanding the product landscape, licensing tiers, and compliance capabilities is directly relevant to buying decisions.

MS-900 vs. AZ-900: Which One First?

AZ-900 (Azure Fundamentals) is the other common entry-level Microsoft certification. The two exams overlap — both cover cloud concepts — but focus on different services. AZ-900 is Azure-focused: virtual machines, storage, networking, Azure-specific services. MS-900 is Microsoft 365-focused: productivity apps, Teams, SharePoint, compliance, identity management.

If your work involves Microsoft 365 — Office apps, Teams, Exchange Online — MS-900 is the more directly relevant choice. If you work in cloud infrastructure or want to move toward Azure-based technical roles, AZ-900 is the better starting point. Many people who work in Microsoft-heavy environments eventually take both.

How to Study for MS-900

Four to six weeks of structured study is typical for most candidates. The right approach depends on your existing familiarity with Microsoft 365.

Microsoft Learn (free): Microsoft provides free learning paths specifically aligned to MS-900 on their learn.microsoft.com platform. These are the official study materials, and the exam is built from the same objective framework. Working through the MS-900 learning path gives you complete coverage of the tested domains.

Practice questions: Microsoft Learn provides a few official practice questions, but the free practice tests on this site cover all exam domains with detailed explanations. The explanation behind each answer is where the real learning happens — don't just check whether you got it right, read why the correct answer is correct.

Hands-on exploration: If you don't already use Microsoft 365 at work, consider setting up a free Microsoft 365 trial or using the free tier of services. Actually clicking through the admin center, Teams, SharePoint, and Intune (even briefly) makes abstract concepts concrete in a way that reading alone doesn't.

Exam practice: Take at least two full timed practice tests before scheduling your exam. Identify domains where you're still below 80% accuracy. Focus your remaining study time on those areas.

MS-900 Certification Cost

The MS-900 exam costs $165 USD in the United States (pricing varies by region). Microsoft offers discounts for students through the ESI (Education Student Incentive) program, and some employer training budgets cover certification exam fees.

Unlike some certifications, there's no annual renewal requirement for MS-900. The credential doesn't expire, though Microsoft does update the exam objectives periodically. If you take MS-900 and a significant update occurs, you won't need to retake the exam — but the knowledge reflected in the credential may not match the current version of the exam.

After MS-900: Where to Go Next

MS-900 is a starting point. After passing, you have several paths depending on your interests:

Microsoft 365 Certified: Endpoint Administrator Associate (MD-102): For IT professionals who manage Windows devices and Microsoft 365 deployments.

Microsoft 365 Certified: Messaging Administrator Associate (MS-203): For those managing Exchange Online and Teams messaging.

Microsoft 365 Certified: Teams Administrator Associate (MS-700): For Teams-focused IT roles.

Microsoft Security, Compliance, and Identity certifications: SC-900 (Security Fundamentals) and SC-300 (Identity and Access Administrator) are natural next steps if the security and compliance domain in MS-900 was interesting to you.

The Microsoft certification ecosystem is well-structured — each role-based exam builds on foundational concepts you've already covered. MS-900 gives you the vocabulary and context that makes the next level of study less daunting.

Common MS-900 Mistakes to Avoid

Candidates who struggle on MS-900 tend to fall into predictable patterns.

Treating it as too easy. MS-900 is a fundamentals exam, but Microsoft writes questions designed to distinguish people who actually understand the content from those who've just heard the vocabulary. Scenario-based questions catch candidates who know terms but can't apply them.

Memorizing product names without understanding what they do. Knowing that "Microsoft Purview" is a compliance tool isn't enough — the exam asks which Purview feature would address a specific compliance scenario. Understanding use cases, not just names, is what the exam tests.

Ignoring the pricing and licensing domain. Candidates who work with Microsoft 365 technically often underestimate the licensing questions. Knowing which features are in Business Premium versus Business Standard, and the trade-offs between annual and monthly subscriptions, is testable content that requires specific study.

Not reading answer explanations. If you're using practice tests just to check your score, you're missing most of the value. The explanation for why each answer is correct (and why the wrong answers are wrong) is where the learning happens.

Skipping hands-on exploration. The Microsoft 365 admin center, Teams admin center, and Intune portal look and behave in specific ways. If you've never seen them, exam questions that reference the interface or workflow can be confusing. A free trial or work access, even limited, helps.

Is MS-900 Worth It?

For professionals already working in Microsoft 365 environments, MS-900 formalizes and validates knowledge you've likely already accumulated. The exam prep process often fills in gaps — you'll learn things about how the system works that weren't obvious from daily use.

For IT professionals starting their career, MS-900 provides a foundational credential that signals basic cloud knowledge to employers. It's widely recognized and respected as a starting point, even if it's not the most impressive item on a resume on its own.

The return on investment is high relative to the study time required — typically four to six weeks of part-time prep for a credential that carries genuine market recognition. The $165 exam fee is modest compared to other certifications. And unlike some credentials that require renewal, MS-900 doesn't have ongoing maintenance requirements.

If Microsoft 365 is part of your work environment or career path, the certification is worth the investment.