Microsoft AZ-900 Azure Fundamentals Exam: Complete Beginner's Guide 2026

The Microsoft AZ-900 Azure Fundamentals certification is the most accessible entry point into the Microsoft Azure certification ecosystem. It requires no technical prerequisites, no prior cloud experience, and no programming knowledge — making it the ideal first certification for project managers, sales professionals, business analysts, executives, students, and anyone who works with or supports cloud technology without being directly responsible for building it. At the same time, it is a meaningful technical stepping stone for IT professionals who want a structured introduction to Azure services before pursuing associate-level certifications like the AZ-104 or AZ-204. This complete 2026 guide gives you everything you need to understand the exam, prepare efficiently, and pass on your first attempt.

Why AZ-900 Is the Best First Azure Certification

Before investing weeks of study time, it is worth understanding exactly why the AZ-900 exists and why it consistently ranks as one of the most popular IT certifications in the world:

No Prerequisites Means No Barriers

Most technical certifications require prior credentials, work experience, or deep domain knowledge. The AZ-900 has none of those requirements. Microsoft designed it to be the broadest possible introduction to cloud computing concepts and Azure services. You could begin studying today with no prior IT knowledge and pass the exam in 2–4 weeks of focused study.

It Validates Business-Critical Cloud Knowledge

As organizations migrate to Azure, business roles — procurement, sales, finance, legal, project management — increasingly need to understand cloud concepts to make informed decisions. What does "pay-as-you-go" really mean for a budget forecast? What is the difference between IaaS and PaaS in terms of who maintains the operating system? How does Azure's global network of regions affect data residency compliance? The AZ-900 answers all of these questions in a structured, vendor-validated way.

Microsoft Recognition and Career Value

The AZ-900 badge is recognized globally by Microsoft partners, enterprise employers, and government agencies. For technical professionals, it signals that you have a verified baseline understanding of Azure before pursuing higher-level certifications. Microsoft's certification ecosystem is cumulative — knowledge from AZ-900 directly supports every Azure associate exam you take afterward.

Cost-Effective and Time-Efficient

At $165, the AZ-900 is one of the most affordable Microsoft certifications. Combined with Microsoft's free learning paths (discussed later in this guide), the total cost to prepare and pass can be kept extremely low — or even zero if your employer subsidizes the exam voucher through Microsoft's workplace learning programs.

Exam Format and What to Expect

One of the most reassuring aspects of the AZ-900 is that it never expires. Unlike associate and expert-level Azure certifications that require renewal every year, the AZ-900 (and all Microsoft Fundamentals certifications) is a permanent credential. Once you earn it, you hold it for life.

The Three Domains Explained Simply

The AZ-900 exam covers three content areas. Understanding what each domain covers helps you study the right things — and recognize that this exam rewards conceptual understanding over memorizing service names.

Domain 1: Describe Cloud Concepts — 25–30%

This domain asks the most fundamental questions: What is cloud computing? Why do organizations use it? What are the different models for consuming cloud services?

Key topics include:

• Cloud computing benefits: High availability, scalability, elasticity, agility, geo-distribution, disaster recovery, and the shift from capital expenditure (CapEx) to operational expenditure (OpEx)
• Cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service) — what the cloud provider manages vs what the customer manages in each model
• Cloud deployment models: Public cloud (Azure), private cloud (on-premises), hybrid cloud (connected on-premises and public cloud), and multi-cloud
• Shared responsibility model: Understanding which security and operational responsibilities belong to Microsoft vs the customer at each service level

A simple mental model for service models: IaaS is renting the building (you manage everything inside), PaaS is renting a furnished apartment (you manage your belongings, not the building), SaaS is staying in a hotel room (you just show up and use it).

Domain 2: Describe Azure Architecture and Services — 35–40%

This is the largest domain and covers the core Azure service catalog. You do not need to know how to configure services — you need to know what each service does and which scenario it is appropriate for.

Key service categories to understand:

• Compute: Azure Virtual Machines (IaaS), Azure App Service (PaaS for web apps), Azure Functions (serverless), Azure Container Instances, Azure Kubernetes Service (AKS)
• Networking: Azure Virtual Networks, Azure Load Balancer, Azure Application Gateway, Azure VPN Gateway, Azure ExpressRoute, Azure DNS, Azure CDN
• Storage: Azure Blob Storage, Azure Files, Azure Disk Storage, Azure Queue Storage — know the difference between hot, cool, and cold access tiers
• Databases: Azure SQL Database, Azure Cosmos DB, Azure Database for PostgreSQL/MySQL — know when each is appropriate
• AI and Machine Learning: Azure Machine Learning, Azure Cognitive Services (now Azure AI Services), Azure Bot Service
• DevOps: Azure DevOps, GitHub Actions (Microsoft owns GitHub), Azure DevTest Labs

Also critical for this domain: understand Azure regions, availability zones (physically separate datacenters within a region), and availability sets (for VM redundancy within a datacenter). Know that resources are grouped into resource groups, which exist inside Azure subscriptions, which can be organized into management groups.

Domain 3: Describe Azure Management and Governance — 30–35%

This domain is increasingly important as organizations mature their Azure usage. It covers how to manage, monitor, secure, and control costs in Azure:

• Cost management: Factors that affect Azure costs (resource type, region, consumption), Azure Pricing Calculator, Azure Total Cost of Ownership (TCO) Calculator, Azure Cost Management + Billing
• Governance and compliance: Azure Policy (enforcing rules across resources), Azure Blueprints, Microsoft Purview (data governance), resource locks (preventing accidental deletion), Azure Advisor
• Identity and security: Microsoft Entra ID (formerly Azure Active Directory), multi-factor authentication, Conditional Access, Azure Role-Based Access Control (RBAC), Zero Trust principles, Microsoft Defender for Cloud
• Management tools: Azure portal, Azure CLI, Azure PowerShell, Azure Cloud Shell, Azure Arc (managing non-Azure resources), Azure Resource Manager (ARM) templates and Bicep
• Monitoring: Azure Monitor, Azure Service Health, Azure Advisor

Who the AZ-900 Is For

Understanding your motivation for taking the AZ-900 helps you calibrate the depth of study you need and set realistic expectations for how the credential will serve your career.

3 Sample Questions with Explanations

These questions reflect the style of the actual AZ-900 exam. The exam focuses on conceptual understanding and scenario matching — not configuration steps or command syntax.

Question 1

A company is planning to move its on-premises web application to Azure. The operations team wants to avoid managing the underlying operating system, middleware, and runtime. The development team wants to continue deploying their code via Git pushes. Which Azure service BEST meets these requirements?

• A. Azure Virtual Machines
• B. Azure App Service
• C. Azure Container Instances
• D. Azure Kubernetes Service

Correct Answer: B

Explanation: Azure App Service is a fully managed PaaS (Platform as a Service) offering for web applications. The operations team does not manage the OS, middleware, or runtime — Microsoft handles all of that. The development team can deploy directly via Git push, ZIP deploy, or CI/CD pipelines with no additional configuration. Azure Virtual Machines (A) are IaaS — the operations team would still manage the OS and everything installed on it. Azure Container Instances (C) and Azure Kubernetes Service (D) are container-based and require containerizing the application, which introduces additional complexity not suggested in the scenario.

Question 2

Your organization needs to ensure that no Azure resources can be deployed outside of the UK South and UK West regions due to data residency requirements. Which Azure feature should be used to enforce this restriction?

• A. Azure RBAC
• B. Azure Resource Locks
• C. Azure Policy
• D. Conditional Access

Correct Answer: C

Explanation: Azure Policy is specifically designed to enforce organizational rules and evaluate resources for compliance. A built-in policy definition called "Allowed locations" can be assigned at the management group, subscription, or resource group level to restrict where resources can be deployed. Azure RBAC (A) controls who can perform actions, not where resources can be deployed. Azure Resource Locks (B) prevent modification or deletion of existing resources but do not restrict where new resources are created. Conditional Access (D) controls user sign-in conditions and application access — it does not govern resource deployment geography.

Question 3

Which cloud service model gives the customer the MOST control over the operating system, storage, and network configuration?

• A. Software as a Service (SaaS)
• B. Platform as a Service (PaaS)
• C. Infrastructure as a Service (IaaS)
• D. Function as a Service (FaaS)

Correct Answer: C

Explanation: In the IaaS model, the cloud provider manages the physical hardware, datacenter, and hypervisor, but the customer is responsible for and has full control over the virtual machine's operating system, middleware, runtime, storage configuration, and networking. This is the highest level of customer control among cloud service models. PaaS (B) abstracts the OS and runtime away — customers control their application and data but not the underlying platform. SaaS (A) gives customers the least control — they only configure the application's settings, not any infrastructure. FaaS (D) is a subset of PaaS, focusing on executing code functions with even less customer control over the execution environment.

Free Microsoft Learn Resources

One of the AZ-900's greatest strengths is that Microsoft provides high-quality, fully free preparation materials. You can pass this exam spending zero dollars on study materials:

Microsoft Learn — Official Free Learning Paths

Microsoft Learn (learn.microsoft.com) offers three official learning paths that map directly to the AZ-900 exam objectives:

• "Microsoft Azure Fundamentals: Describe cloud concepts" — approximately 3 hours, covers Domain 1
• "Microsoft Azure Fundamentals: Describe Azure architecture and services" — approximately 8 hours, covers Domain 2
• "Microsoft Azure Fundamentals: Describe Azure management and governance" — approximately 5 hours, covers Domain 3

Total study time through official Microsoft Learn paths: approximately 16 hours of guided learning. Each module includes knowledge checks (mini quizzes) that immediately reinforce what you just read. This is the single most efficient free resource available.

Microsoft Learn — Free Practice Assessment

Microsoft offers a free official practice assessment for AZ-900 at learn.microsoft.com. This assessment includes 50 questions, immediate feedback with explanations, and performance tracking by domain. It is the closest available approximation of the real exam question style and is regularly updated. Complete this assessment at least twice before your exam — use the first attempt to identify weak areas and the second attempt to confirm you have addressed them.

Azure Free Account

Microsoft offers a free Azure account with $200 in credits for the first 30 days, plus permanently free tiers for many services. For AZ-900, hands-on exploration of the Azure portal is not strictly required (the exam tests conceptual understanding, not configuration skills), but browsing the portal and clicking through service menus significantly improves your ability to answer questions about what services look like and what settings are available.

What to Take After AZ-900

The AZ-900 opens doors to every Azure certification path. The right next step depends entirely on your role and career goals:

The Recommended Path for Most People

If you are unsure which direction to go, the AZ-104 (Azure Administrator) is the most logical next step for the majority of IT professionals. It is the most widely held associate-level Azure certification, it covers Azure's core services in operational depth, and it serves as a prerequisite (or strong recommended foundation) for both the AZ-305 (Architect) and AZ-500 (Security) expert-level exams. Plan for 3–4 months of focused study to move from AZ-900 to AZ-104.

For non-technical professionals who took the AZ-900 to validate business understanding, consider the Microsoft 365 Fundamentals (MS-900) or the Security, Compliance, and Identity Fundamentals (SC-900) as accessible follow-on certifications that continue building your Microsoft cloud credential portfolio without requiring deep technical skills.

Recommended Study Plan for AZ-900