The Microsoft Azure Fundamentals (AZ-900) is the entry point for anyone starting with Azure. It validates foundational knowledge of cloud computing, core Azure services, and how Microsoft organizes pricing and governance tools. No prior Azure experience is required, which makes it genuinely accessible to developers, IT pros, and business decision-makers alike. If you want to understand what cloud computing is and how Azure fits into it, this is where you start.
This guide covers what the exam tests, how to study efficiently, and what to watch out for on test day.
Exam Overview
| Detail | Value |
|---|---|
| Exam code | AZ-900 |
| Questions | 40-60 (multiple choice, multiple select, drag-and-drop) |
| Time limit | 45 minutes |
| Passing score | 700 / 1000 (scaled) |
| Format | Multiple choice, multiple select, interactive |
| Cost | $165 USD |
| Prerequisites | None |
The 45-minute time limit is generous for most candidates. The questions test conceptual understanding, not hands-on configuration. You won't be asked to write PowerShell commands or configure a virtual network in the portal. The focus is on recognizing what each service does and how Azure's pricing and governance models work.
Exam Domains
| Domain | Weight |
|---|---|
| Describe Cloud Concepts | 27% |
| Describe Azure Architecture and Services | 42% |
| Describe Azure Management and Governance | 31% |
Azure Architecture and Services carries the most weight at 42%. It covers the broadest surface area, including compute, networking, storage, identity, and security. Don't neglect Management and Governance at 31%. Candidates often under-study cost management and Azure Policy, and it shows up on the exam more than expected.
Core Concepts to Master
Cloud Concepts
This domain builds the foundation. You need to understand cloud computing well enough to explain why organizations move to the cloud and what trade-offs come with different models.
- Shared responsibility model: Microsoft manages the physical infrastructure. You manage your data, identities, and applications. The split depends on whether you're using IaaS, PaaS, or SaaS.
- Cloud service types: IaaS (you manage the OS and up), PaaS (Microsoft manages infrastructure, you manage the app), SaaS (Microsoft manages everything, like Microsoft 365).
- Cloud deployment models: Public cloud (Azure's shared infrastructure), private cloud (your own datacenter), and hybrid cloud (a mix of both).
- Cloud benefits: High availability, scalability, elasticity, agility, disaster recovery, global reach. Know the difference between vertical scaling (bigger machines) and horizontal scaling (more machines).
Azure Architecture and Services
This is the biggest domain and covers the core building blocks of Azure.
Compute services: Virtual Machines are the IaaS option where you control the OS. Azure App Service is a PaaS option for web apps without managing infrastructure. Azure Functions handle event-driven serverless workloads. Azure Container Instances and Azure Kubernetes Service handle containers. For AZ-900, you just need to know what each service is for, not how to configure them.
Networking: Virtual Networks (VNets) are private networks in Azure. Azure VPN Gateway connects on-premises networks to Azure. ExpressRoute is the dedicated private connection option. Azure DNS manages domain name resolution. Azure Content Delivery Network (CDN) distributes content globally for better performance.
Storage: Azure Blob Storage handles unstructured data like images and backups. Azure Files provides SMB file shares. Azure Queue Storage handles message queuing. Azure Disk Storage attaches block storage to VMs. Know the storage tiers: hot (frequent access), cool (infrequent access), archive (rare access, cheapest).
Identity and security: Microsoft Entra ID (formerly Azure Active Directory) is the identity platform. Multi-factor authentication (MFA) adds a second verification layer. Azure Key Vault stores secrets, certificates, and encryption keys. Microsoft Defender for Cloud monitors security posture across your resources.
Azure Management and Governance
This domain covers how you control costs, enforce policies, and monitor your Azure environment.
- Cost management: Azure Cost Management and Billing lets you track spending and set budgets. Azure Pricing Calculator estimates costs before you deploy. Azure Total Cost of Ownership (TCO) Calculator compares on-premises vs. cloud costs.
- Azure Policy: Create rules that enforce or audit compliance across your resources. For example, you can require all VMs to use a specific region or tagging standard.
- Resource organization: Management groups contain subscriptions. Subscriptions contain resource groups. Resource groups contain resources. Tags let you label resources for cost tracking and organization.
- Azure Arc: Extends Azure management to on-premises and multi-cloud environments. You can manage non-Azure servers through the Azure portal using Arc.
- Monitoring: Azure Monitor collects metrics and logs. Azure Service Health shows the status of Azure services in your region. Azure Advisor gives personalized recommendations for reliability, security, performance, and cost.
Common Exam Traps
IaaS vs. PaaS confusion: A common trap is misidentifying services. Azure App Service is PaaS, not IaaS, even though you can deploy code to it. Virtual Machines are IaaS. Azure SQL Database is PaaS. Know which category each service belongs to.
Shared responsibility model boundaries: On SaaS, you're responsible for your data and account access but nothing else. On IaaS, you're responsible for everything from the OS up. The exam tests where the line falls in each model.
CapEx vs. OpEx: On-premises infrastructure is capital expenditure (you buy it upfront). Cloud services are operational expenditure (you pay as you go). The AZ-900 exam expects you to explain why OpEx is often preferred and what it means for budgeting.
High availability vs. fault tolerance vs. disaster recovery: These are related but different. High availability means systems stay online during planned or unplanned downtime. Fault tolerance means systems continue functioning even when components fail. Disaster recovery is the process of restoring systems after a major failure. Know the distinctions.
Azure regions and availability zones: Regions are geographic locations with datacenters. Availability zones are physically separate datacenters within a region. They protect against datacenter-level failures, not regional failures. A region pair is a second region used for disaster recovery.
Study Plan
| Week | Focus |
|---|---|
| 1 | Cloud Concepts: service models, deployment types, cloud benefits, shared responsibility |
| 2 | Azure Architecture: compute, networking, storage |
| 3 | Azure Architecture: identity, security services |
| 4 | Management and Governance: cost tools, Policy, monitoring, resource organization |
Most candidates with an IT background can complete AZ-900 in 2-3 weeks. If you're brand new to cloud concepts, give yourself 4-5 weeks. The material isn't deep, but there's a lot of terminology to get comfortable with.
Recommended Resources
- Microsoft Learn: The free AZ-900 learning path walks through all three domains with modules and knowledge checks.
- Official study guide: Microsoft publishes an AZ-900 study guide that maps content to exam objectives.
- Azure free account: You can sign up for a free Azure account with $200 credit. For AZ-900, you don't need to configure much, but browsing the portal builds familiarity.
- Practice exams: Multiple sets of questions across all domains are the most efficient way to find gaps in your knowledge.
Final Thoughts
AZ-900 is a solid foundation for anyone entering the Azure ecosystem. The concepts you learn here, from the shared responsibility model to Azure's core service categories, come up again in every advanced Azure certification. It's worth understanding this material deeply rather than memorizing answers.
Once you've completed a study pass, work through practice questions to identify where you're uncertain. The exam rewards understanding over memorization.
Ready to test your knowledge? Try our AZ-900 practice exams and see where you stand before exam day.