AZ-900 Master Guide 2026

What Azure Fundamentals certifies

Microsoft Azure Fundamentals is a beginner-level certification that demonstrates foundational knowledge of cloud computing and Microsoft Azure. It is a common starting point for people exploring Azure services, cloud administration, software development, data, or business roles that involve cloud decisions. The exam tests whether a candidate can describe concepts and services at a foundational level; it does not certify that someone can administer a production Azure environment independently.

The official skills measured include cloud concepts, Azure architecture and services, and Azure management and governance. Candidates should know why an organization might use cloud services, how common Azure components fit together, and what tools can help secure, govern, monitor, and manage resources. The emphasis is on recognition and explanation of concepts, not deep implementation procedures expected of an administrator-level role exam.

AZ-900 is separate from an Azure job qualification. A hiring team may value it as evidence of foundational study, but it does not guarantee a role, salary, or promotion. It is not a government license. Practical experience, communication, and role-specific skills remain important. A candidate seeking hands-on administration should consider whether an associate-level path such as Azure Administrator better matches the intended work after establishing a foundation.

Who can take it and who benefits

Microsoft does not list a formal prerequisite certification, degree, or required work tenure for Azure Fundamentals. The certification page describes a beginner level and recommends that candidates have skills or experience in an IT area such as infrastructure management, databases, or software development. That background can help candidates connect concepts to real systems, but it is not stated as a permission-to-sit requirement.

The exam can be useful for IT professionals who need a common cloud vocabulary, business analysts who participate in cloud purchasing, students exploring Azure, or managers who need to understand service and cost choices. A person without technical experience can still prepare, but should take time to learn basic infrastructure terms. Knowing the difference between compute, storage, networking, identity, and an application helps the Azure service names make sense.

A candidate already working with Azure may find the service names familiar but still need to study the full outline. Daily use of one product does not necessarily cover cloud pricing, shared responsibility, resource hierarchy, governance, or monitoring. Someone who has only studied cloud concepts may need more attention on Azure's actual service categories and management tools. Use a diagnostic rather than assuming that job title alone shows readiness.

Current exam format and timing

Microsoft gives candidates 45 minutes to complete the AZ-900 exam and lists 65 minutes of seat time for a fundamentals exam. Seat time includes instructions, the candidate agreement, exam questions, and the opportunity to provide comments. The exam is proctored. Microsoft says exams typically contain 40 to 60 questions, but the number varies; it does not promise a fixed AZ-900 question count.

Microsoft does not disclose the precise question types or composition in advance. The exam details page notes that interactive components may be included. The exam sandbox demonstrates interface types that candidates may encounter across Microsoft exams, but it does not promise that every demonstrated format will appear on AZ-900. Familiarize yourself with navigation and how to respond, then focus preparation on the skills outline rather than trying to predict a question mix.

The 45-minute exam duration is shorter than the 65-minute appointment. Plan to be available for the full seat time and follow the check-in instructions for the delivery option you choose. Microsoft offers proctored scheduling through Pearson VUE and also points students or educators to Certiport. The exact delivery choices depend on the candidate and location; use the scheduling page to see available appointments.

AZ-900 is a fundamentals exam, so Microsoft Learn access during the exam is not available. Microsoft Learn access is limited to eligible associate and expert role-based exams. Do not plan to look up service documentation while answering AZ-900 questions. Build recall and understanding before the appointment.

The active AZ-900 domains

Microsoft's study guide says its skills are measured as of July 20, 2026. The domain ranges are Cloud concepts, 25 to 30%; Azure architecture and services, 35 to 40%; and Azure management and governance, 30 to 35%. The range totals are not a candidate-specific question allocation. Microsoft can vary the form and does not publish a guaranteed count for a particular sitting.

Cloud concepts asks you to understand cloud computing and why organizations use it. Learn public, private, and hybrid cloud models; use cases; consumption-based pricing; and how cloud service types divide responsibility. Understand high availability, scalability, reliability, predictability, security, governance, and manageability as benefits with practical meaning. Serverless is a way to run application logic without managing the underlying server infrastructure in the same way as a virtual machine.

Azure architecture and services is the largest domain range. Understand regions, region pairs, sovereign regions, availability zones, and datacenters. Know how resources, resource groups, subscriptions, and management groups relate. Compare virtual machines, containers, and functions; know what virtual machine scale sets, availability sets, and Azure Virtual Desktop are for. For networking, learn virtual networks, subnets, peering, DNS, VPN Gateway, ExpressRoute, and public versus private endpoints at a descriptive level.

Storage coverage includes comparing Azure Storage services, storage tiers and redundancy, storage accounts and storage types. Learn what AzCopy, Azure Storage Explorer, and Azure File Sync help move, and distinguish Azure Migrate from Azure Data Box. Identity and security includes Microsoft Entra ID, Entra Domain Services, single sign-on, multifactor authentication, passwordless methods, external identities, Conditional Access, Azure role-based access control, Zero Trust, defense in depth, and Microsoft Defender for Cloud.

Management and governance covers cost factors, the pricing calculator and cost management capabilities, and tags. Know the purpose of Microsoft Purview, Azure Policy, and resource locks. Compare the Azure portal, Cloud Shell, Azure CLI, and Azure PowerShell; understand Azure Arc, infrastructure as code, Azure Resource Manager, and ARM templates. Monitoring topics include Azure Advisor, Azure Service Health, Azure Monitor, Log Analytics, alerts, and Application Insights.

Understand cloud models and service models

A public cloud provider owns and operates the underlying cloud infrastructure and offers services to customers. A private cloud is dedicated to an organization or its use. Hybrid cloud connects environments such as on-premises infrastructure and public cloud. The right model depends on requirements such as control, connectivity, compliance, existing investments, and the workload. ‘Cloud is always cheaper’ is not a reliable conclusion; cost depends on usage, architecture, and management.

Infrastructure as a service provides more control over virtualized infrastructure, while the customer remains responsible for more of the operating system and workload management than in higher-level services. Platform as a service lets customers deploy application code on a managed platform, reducing the need to operate underlying infrastructure. Software as a service provides a complete application for use, with the provider managing more of the stack. These models are useful when you can describe who manages what and what the customer still controls.

Shared responsibility changes with the service model. A customer using a virtual machine has more responsibility for operating-system updates than a customer using a managed application platform. SaaS reduces infrastructure administration, but customers still manage identities, data, access, configuration, and appropriate use. Do not interpret ‘cloud provider manages the servers’ to mean the customer has no security responsibility.

Consumption-based pricing means costs are tied to resources used under the service's billing model. This can make capacity more flexible and avoid some upfront hardware purchases. It also means that unused, oversized, or forgotten resources can create charges. Cost awareness is part of cloud governance, not a benefit that happens automatically.

Azure architecture, identity, and security at a high level

Azure resources are organized for management and billing. A resource group is a logical container for related resources; a subscription provides a management and billing boundary; management groups can organize subscriptions. A candidate should understand the hierarchy and which scope is useful for applying administration or governance. Do not confuse a resource group with a physical datacenter or assume resources in one group must share the same lifecycle in every design.

Regions and availability zones relate to where and how services run. A region is a geographic area containing Azure datacenters. Availability zones are separate physical locations within a region designed to provide resilience for supported services. Region pairs and sovereign regions have distinct roles. A higher-level fundamentals answer should match the resilience or location need to the correct concept rather than treating every Azure geography term as interchangeable.

Microsoft Entra ID is Microsoft's cloud identity and access management service. Authentication establishes who a user or workload is; authorization determines what that identity can do. Multifactor authentication adds another proof of identity, and Conditional Access can make access decisions based on conditions. Azure RBAC assigns Azure resource permissions at appropriate scopes. Zero Trust emphasizes verifying access explicitly, using least privilege, and assuming that a breach can occur. These ideas reinforce one another but are not synonyms.

Defense in depth uses multiple protective layers, so one failed control does not expose everything. Microsoft Defender for Cloud helps improve security posture and provide threat protection for supported cloud resources. Azure Policy can enforce or audit organizational rules; a resource lock can help prevent deletion or modification at a scope. Each tool addresses a different control need. A lock is not a substitute for backups, and a policy is not the same as role permission.

A worked Azure decision example

A small company runs an internal scheduling application on a virtual machine in its own datacenter. It wants to move quickly to Azure while keeping the application largely unchanged. An Azure virtual machine may be a straightforward first hosting choice because it preserves more control over the operating system and application environment. The team still needs to plan networking, identity, updates, backups, and cost. Moving the workload does not transfer every operating responsibility to Microsoft.

If the company can modify the application and wants the provider to manage more of the hosting platform, a PaaS option may reduce infrastructure administration. If it only needs an existing business application, a SaaS product could avoid managing the application stack altogether. Those alternatives may require different migration work or features. The decision turns on control, compatibility, operations, and business requirements, not on a simplistic rule that one service model is always best.

Now add a governance requirement: a team must prevent accidental deletion of a production database. A resource lock may help protect the resource from deletion, while access control determines which identities can manage it and backup strategy supports recovery. The controls solve related but distinct problems. A candidate who chooses only a lock has not answered how the company will recover from corruption or misuse.

Scoring and certification

Microsoft lists a passing score of 700 or greater on a 1,000-point scale. The score is a scaled score, not a simple percentage of questions correct. Do not convert a practice quiz percentage directly into an expected official result. The exam can use items with different characteristics, and Microsoft does not publish a fixed number of correct answers that guarantees a pass.

Microsoft exam results and score reports appear through the certification profile after completion, with the delivery and timing depending on the exam and proctoring process. Review the official score report for domain-level feedback if you do not pass. Use it to direct further study rather than retaking the same practice test until the answers are memorized.

Azure Fundamentals does not expire. It is a fundamentals certification, unlike eligible role-based and specialty certifications that may require renewal. Confirm the current Microsoft credential maintenance rules for a specific credential before assuming that its maintenance policy matches AZ-900.

Registration, cost, and exam day

Connect your certification profile to a personal Microsoft account. Microsoft strongly recommends a personal account rather than a work or school account because exam records can be lost and unrecoverable if you leave the organization tied to that account. Use your profile to schedule the exam and manage credentials. Students and educators may have a Certiport scheduling route; other candidates are directed to Pearson VUE.

Exam price depends on the country or region where the exam is proctored. Microsoft does not publish one universal amount in the certification overview. The scheduler shows the current price and available dates for the candidate's location. If an employer pays, check whether it reimburses the exam, any retake, or only a passed attempt. Training, practice subscriptions, equipment, and travel are separate budget items.

For remote or test-center appointments, follow the actual provider instructions for identification, check-in, system requirements, and rescheduling. These logistics can vary by delivery method. If you need an accommodation, submit the request through Microsoft's process before the appointment and allow time for review. Do not assume an assistive device or extra time is available without approval.

How to prepare effectively

Begin with Microsoft's current study guide, which identifies the July 20, 2026 skills outline. Make a checklist for every bullet and mark whether you can explain it, distinguish it from a neighboring concept, and apply it in an example. Prioritize the 35 to 40% architecture-and-services range, but do not ignore cloud concepts or management and governance. The outline's ranges are relative coverage estimates, not guaranteed question counts.

Build a service map instead of memorizing product names alone. For each named service, write what problem it addresses, what it is commonly compared with, and what the exam expects you to describe. For example, contrast Azure Advisor's recommendations with Azure Service Health's information about Azure service issues, and distinguish both from Azure Monitor's monitoring capabilities. A comparison table exposes confusing neighbors faster than a long list of isolated definitions.

Use Microsoft's free Practice Assessment to become familiar with the style and identify knowledge gaps. Microsoft states that the practice assessment is not the same as the real exam and is not illustrative of exam length or complexity. Use it as a learning aid rather than a guarantee. Microsoft's exam sandbox gives candidates a chance to see the interface and navigation. Neither resource replaces understanding the services and concepts.

Study actively. After reading about a service, explain it without notes, then answer a new scenario. If you confuse Azure Policy with RBAC, write what each controls and apply both to a simple resource. If you confuse regions with availability zones, draw a deployment and ask which outage each design choice is intended to address. Correct the underlying mental model rather than just memorizing an answer.

In the last review period, revisit missed topics and practice careful reading. The exam is short enough that spending too long on one uncertain item can affect the remaining questions. Do not rush simply because the clock is visible. Identify the service or concept the item describes, remove options that solve another problem, and choose the best fit. Microsoft does not disclose exact item formats in advance, so pair content preparation with familiarity in the sandbox.

An efficient readiness check

You are in a stronger position when you can explain the three domains in plain language, distinguish services that sound similar, and use the current skills outline to find and correct gaps. Try a mixed set after several days away from the material. A high score achieved only on questions you have repeated is weak evidence; unseen examples test whether you can transfer the concept.

Use three kinds of practice. Recall practice checks whether you can define a concept without choices. Comparison practice asks you to distinguish closely related services. Scenario practice asks which option fits a stated need and why. Fundamentals questions reward clear conceptual boundaries: virtual machines offer more customer control than a managed platform; an identity service authenticates users while an access role grants permissions; monitoring differs from service-health notices.

A candidate does not need to build every Azure service to study AZ-900. Some hands-on exploration can make the concepts concrete, but this is a fundamentals exam, not a lab-based administration assessment. Keep practice within a personal or authorized environment and monitor any cloud costs. You can learn the purpose of a resource or policy without deploying a large environment.

After passing

After Microsoft confirms the exam result, the certification appears in the candidate's Microsoft Learn profile. The profile lets you view and share credentials. Keep access to the personal account used for registration and maintain accurate profile information. If you used an organizational account and later lose access, Microsoft warns that records may be unrecoverable, which is why account choice matters before the exam.

Use Azure Fundamentals as a foundation for a next step that fits your goal. Someone interested in administration can explore role-based administrator learning; a developer may move toward Azure development; a cloud decision-maker may deepen architecture or cost knowledge. The certificate alone does not demonstrate the hands-on depth of those roles. Build practical experience and use the relevant role-specific skills outline before choosing another exam.

The main value of the exam is a structured understanding of cloud and Azure vocabulary. That foundation helps candidates ask better questions about responsibility, resilience, security, service choice, governance, and cost. It should lead to more informed technical or business decisions, not an assumption that every Azure deployment works the same way.