The AZ-900 has a reputation as an easy exam, and that reputation gets candidates failed. Microsoft designed it to reward business-reasoning over technical depth — a distinction that trips up experienced IT professionals more than beginners. The shared responsibility model, service use-case scenarios, and governance tooling distinctions are where prepared candidates separate from overconfident ones. Bottom line: IT professionals with cloud experience can pass in under 10 hours of focused study; non-technical candidates should plan 4–6 weeks. The one thing most people get wrong is underestimating Domain 3.
TL;DR
- The exam tests when to use Azure services, not how to configure them — scenario questions ask for the right tool given a business constraint, not a configuration procedure
- 45 minutes for 33–40 questions — time pressure is real; candidates who treat this as leisurely are regularly surprised on exam day
- Domain 3 (Management and Governance) accounts for 30–35% of the exam and is the most underestimated domain in candidate preparation
- The Microsoft Learn free practice assessment is significantly easier than the real exam — candidates who rely on it alone consistently report failing
- IT professionals with cloud experience report 3–10 hours of study; non-technical candidates report 20–50 hours — the range is wide depending on background
- The exam does not expire — Azure Fundamentals is valid for life with no renewal required
- Attending Microsoft's free Virtual Training Day qualifies you for a 50% exam discount — $49.50 instead of $99
What this exam is really about
AZ-900 is not a technical implementation exam. Microsoft designed it to validate that a candidate understands the cloud computing landscape, Azure's core services, and the business rationale behind cloud adoption decisions. Questions are scenario-based: given a company's requirements, which service applies, which pricing model makes sense, which governance tool solves the stated problem. The exam rewards candidates who can reason from a business or architectural constraint to a correct service selection — not candidates who have memorized what each service does in isolation.
This mental model matters because it changes how you study. Learning that Azure Policy "enforces rules on resources" is necessary but not sufficient. You need to understand why a company would use Azure Policy instead of RBAC in a given scenario, and what the difference is between enforcing a rule and restricting access. The AZ-900 is full of questions where two answers are superficially plausible, and the distinguishing factor is understanding what problem each service is specifically designed to solve.
Exam at a glance
| Item | Value |
|---|---|
| Cost | $99 USD (varies by country/region) |
| Duration | 45 minutes |
| Questions | 40–60 per official spec; community consistently reports 33–40 per session |
| Passing Score | 700/1000 (scaled score — not equivalent to 70% of questions correct) |
| Format | Multiple choice, multiple select, drag-and-drop, hotspot/scenario-based |
| Validity | Does not expire — valid for life, no renewal required |
| Testing | Online proctored (Pearson VUE OnVUE) or in-person Pearson VUE test center; Certiport available for students/educators |
| Retake Policy | 24 hours after first failed attempt; 14-day wait for subsequent retakes; maximum 5 attempts per 12-month period |
The 45-minute exam window surprises candidates who practiced without a strict timer. With community-reported session lengths of 33–40 questions, you have roughly 60–80 seconds per question — workable but not comfortable if you pause to second-guess yourself. The official exam page lists 40–60 questions, but candidates across 2025 and early 2026 have consistently reported lower counts, with 36 being the most frequently cited number. Microsoft likely draws from an adaptive question pool.
The passing score of 700/1000 is a scaled score, not a raw percentage. Scaled scoring means 700 does not equal answering 70% of questions correctly — the mapping between raw performance and scaled score depends on question difficulty weights. Community pass reports show scores ranging from exactly 700 to 984, with the modal range appearing to be 800–900. Aiming to pass is a reasonable bar; aiming for 85%+ on practice exams before scheduling gives you a meaningful buffer.
The exam was updated on January 14, 2026, with minor changes to the Azure identity, access, and security section and to the features and tools for managing and deploying Azure resources. The three-domain structure and domain weights are unchanged from prior versions. If you have older study materials, verify any identity or resource management content against the current official skills guide before your exam date.
Who should take this exam
AZ-900 is the right starting point for anyone entering the cloud space without a prior cloud certification. This includes IT support professionals, system administrators, business analysts, project managers, sales engineers, and non-technical professionals in organizations undergoing cloud transformation. It is also the standard first credential for developers and infrastructure engineers who work on-premises and want to validate foundational Azure knowledge before pursuing role-based certifications.
Experienced cloud practitioners from AWS or GCP who need to validate Azure equivalency for a new employer or project are a strong fit — many report passing with fewer than 10 hours of study by focusing on Azure-specific terminology and governance tooling. AZ-900 is also frequently listed as a preferred baseline credential before companies sponsor candidates for higher-level Azure Associate training. If you already hold AZ-104 or another Azure Associate certification, this exam is not a logical step — it is explicitly designed as the entry point, not a companion credential.
The 3 domains and what actually gets tested
Domain 1 — Describe Cloud Concepts (28%)28%
The official skills guide covers cloud computing definition, the shared responsibility model, public/private/hybrid cloud deployment models, the consumption-based pricing model, serverless computing, and the business benefits of cloud: high availability, scalability, reliability, predictability, security, governance, and manageability. Service types — IaaS, PaaS, and SaaS — are covered alongside appropriate use cases for each, and the CapEx versus OpEx cost model distinction is explicitly listed.
Community experience consistently identifies this as the easiest domain, particularly for candidates with any prior IT background. Candidates coming from AWS or GCP often find it trivially easy, since the underlying cloud computing concepts are vendor-neutral. The domain weight of 28% means it is a meaningful portion of the exam, but most candidates do not need to spend disproportionate time here.
The main trap in this domain catches technical people more than beginners: questions emphasize business value and rationale, not technical mechanics. A question about scalability is likely asking which cloud benefit a given scenario demonstrates — not how Auto Scaling works. Candidates who default to technical answers on conceptual questions lose points. The shared responsibility model is a near-certain exam topic; know precisely what the customer is responsible for in IaaS, PaaS, and SaaS environments, since the boundary shifts meaningfully across those three models.
IaaS, PaaS, and SaaS use-case scenarios appear frequently throughout the exam, not just in Domain 1 questions. Once you understand the conceptual distinction — and can identify which model a given scenario describes — these questions become reliable point sources. CapEx versus OpEx is another high-frequency topic; understand why moving from on-premises to cloud typically shifts capital expenditure to operational expenditure, and what business benefit that represents.
Domain 2 — Describe Azure Architecture and Services (38%)38%
According to the official AZ-900 skills guide, this domain covers Azure's physical infrastructure (regions, region pairs, availability zones, datacenters), organizational infrastructure (resources, resource groups, subscriptions, management groups), compute options (VMs, VM Scale Sets, Azure Virtual Desktop, containers, Azure Functions), application hosting options, networking (Azure Virtual Networks, VPN Gateway, ExpressRoute, DNS, peering, public and private endpoints), storage (services, tiers, redundancy options, account types, migration and file movement tools), and identity and access (Microsoft Entra ID, SSO, MFA, passwordless authentication, Conditional Access, RBAC, external identities, Zero Trust, defense-in-depth, Microsoft Defender for Cloud).
This is the largest domain at 35–40% of the exam and candidates consistently report it as the hardest. The breadth is the problem — it is not that individual topics are complex, but that the exam expects you to distinguish between many services that are superficially similar. The key service comparisons that generate questions include:
Azure Firewall vs. Network Security Group (NSG) vs. Application Gateway: Know the level at which each operates and the type of traffic each filters. NSGs operate at the subnet and NIC level for basic traffic filtering. Azure Firewall is a managed, stateful firewall for broader network protection. Application Gateway provides Layer 7 load balancing with WAF capabilities.
ExpressRoute vs. VPN Gateway: ExpressRoute is a private dedicated connection that does not traverse the public internet — this distinction is exam-critical. VPN Gateway creates encrypted tunnels over the public internet. Community candidates have reported a question asking which OSI layer ExpressRoute operates on; per Microsoft documentation, ExpressRoute operates at Layer 3.
Storage redundancy options: Know when to use LRS (Locally Redundant Storage), ZRS (Zone-Redundant Storage), GRS (Geo-Redundant Storage), and GZRS (Geo-Zone-Redundant Storage). The exam will give you a scenario — a stated requirement about regional outage protection or zone-level failure tolerance — and ask which option applies. GRS is the correct answer when a regional outage is a stated business requirement. ZRS protects against zone-level failures within a single region.
Availability zones vs. region pairs: Availability zones are physically separate datacenters within a single region — they protect against datacenter-level failures. Region pairs are geographically distant Azure regions — they protect against regional disasters. Candidates consistently report this distinction appearing more frequently than expected. Drawing this out visually during study significantly improves retention.
Microsoft Entra ID is another high-volume topic. Candidates report 4–6 questions covering SSO, MFA, Conditional Access, and external identities. Know what each feature does and under what circumstances you would enable it. The January 2026 update made minor changes to this section, so verify your study materials against the current skills guide.
Domain 3 — Describe Azure Management and Governance (33%)33%
The official skills guide covers cost management factors, the Azure Pricing Calculator, the TCO (Total Cost of Ownership) Calculator, Azure Cost Management capabilities, resource tags, Microsoft Purview for governance and compliance, Azure Policy, resource locks, deployment and management tools (Azure portal, Cloud Shell with CLI and PowerShell, Azure Arc, Infrastructure as Code concepts, ARM templates), and monitoring tools (Azure Advisor, Azure Service Health, Azure Monitor including Log Analytics, alerts, and Application Insights).
This domain accounts for 30–35% of the exam — nearly as much as Domain 2 — but candidates routinely underestimate it. Community failure post analysis repeatedly identifies Domain 3 as where under-prepared candidates lose the points that push them below 700. Expect 15 or more questions on governance and cost management combined.
The service distinction questions that most commonly generate errors:
Azure Policy vs. RBAC: Azure Policy enforces rules on resources — it defines what configurations are allowed or required. RBAC controls who can access and perform actions on resources. These are complementary but solve different problems. A scenario asking how to prevent resources from being created outside a specific region is an Azure Policy question, not an RBAC question.
Resource locks vs. Azure Policy: Resource locks prevent modification or deletion of specific resources regardless of permissions. Azure Policy enforces configuration rules broadly. Know when each is the appropriate tool: locks for protecting specific critical resources, policies for environment-wide governance rules.
Azure Advisor vs. Azure Monitor vs. Azure Service Health: Each has a distinct purpose. Azure Advisor provides proactive best-practice recommendations across cost, security, reliability, performance, and operational excellence. Azure Monitor collects and analyzes metrics and logs — it is the platform for alerts and application performance monitoring. Azure Service Health tracks the status of Azure services, planned maintenance, and outages affecting your specific resources. Questions will give you a monitoring requirement and ask which tool applies.
ARM templates vs. Azure CLI/PowerShell vs. Azure Arc: Understand these conceptually. ARM templates are declarative Infrastructure as Code. CLI and PowerShell are imperative scripting tools. Azure Arc extends Azure management to resources outside Azure (on-premises or other clouds). The exam does not test syntax — it tests conceptual understanding of what each tool is for and when you would use it.
Microsoft Purview is a newer addition to the skills guide that many candidates skip because it feels niche. It appears on the exam. Know that Microsoft Purview is a unified data governance and compliance service — it helps organizations manage, govern, and understand their data estate across on-premises, multi-cloud, and SaaS environments.
What trips candidates up
Relying solely on Microsoft Learn's free practice assessment. This is the single most documented failure pattern in community reports. The official practice assessment is significantly easier than the real exam — candidates who score 90–100% on it and walk into the exam unprepared are regularly surprised. One candidate scored 100% on the Microsoft Learn assessment and still failed the actual exam. Use the official assessment as a diagnostic to identify gaps, not as a benchmark for readiness.
Neglecting Domain 3. Candidates spend disproportionate time on Domain 2's long list of services and give Domain 3 only a surface-level review. Given that governance and cost management account for roughly a third of the exam, this imbalance directly costs points. Allocate study time proportional to domain weights: most time on Domain 2 (35–40%), meaningful time on Domain 3 (30–35%), then Domain 1 (25–30%).
Treating AZ-900 as trivially easy. Experienced IT professionals — particularly those with AWS or GCP backgrounds — sometimes underestimate the exam because cloud concepts feel familiar. The Azure-specific service distinctions, governance tooling, and identity terminology are not universal. Several candidates with GCP backgrounds have reported first-attempt failures after minimal Azure-specific preparation.
Confusing similar services without understanding the distinguishing use case. Knowing that Azure Policy and RBAC both relate to "control" is not enough. The exam gives you a scenario and expects you to select the precise tool that fits the stated requirement. Memorizing service descriptions without understanding the decision logic between similar services is the underlying cause of most wrong answers on scenario questions.
Not completing enough practice questions. Community candidates who pass consistently report completing 200 or more unique practice questions before scheduling. Those who complete only the Microsoft Learn path and fewer than 100 questions are substantially more likely to fail.
What NOT to study: Do not memorize specific CLI commands or PowerShell syntax — the exam tests conceptual knowledge of what these tools do, not exact commands. Do not study specific pricing numbers or exact SLA percentage values — know relative comparisons and concepts. Do not study Kubernetes internals or advanced container orchestration beyond basic AKS awareness. Do not study topics not listed in the official AZ-900 skills guide — only what appears there is in scope.
How to prepare
Foundation: The Microsoft Learn AZ-900 official learning path is the correct starting point. It covers all three domains through interactive modules with embedded Azure sandbox environments and knowledge checks, totaling roughly 8–10 hours of content. It is free, always current with the exam version, and aligned precisely to the skills guide. Its key weakness is that it is easier than the real exam — the knowledge checks and free practice assessment do not replicate the difficulty or scenario complexity of actual exam questions. Complete Microsoft Learn first, then supplement heavily with scenario-based practice.
Official study guide: The AZ-900 study guide on Microsoft Learn is the authoritative document listing every domain, weight, and bulleted subtopic. Use it as a checklist — every item listed should be covered before you schedule your exam. The current version was updated January 14, 2026.
Practice questions: CertCompanion's AZ-900 question bank is the recommended tool for scenario-based practice beyond the official assessment. The Microsoft Learn assessment tells you what you don't know; scenario-based practice builds the decision-making pattern recognition you need on exam day. Aim for 80–90% consistently on full-length practice sets before scheduling. If you are hitting 90%+ reliably, you are ready.
Official exam tools:
- Microsoft Learn Free Practice Assessment — use as an initial diagnostic; understand it is easier than the real exam
- Microsoft Exam Sandbox — practice with the actual Pearson VUE interface including drag-and-drop, hotspot, and multiple-select question types; eliminates interface-related anxiety on test day
- Azure Free Account — $200 credit for 30 days plus always-free tier; even 30–60 minutes exploring the Azure Portal makes scenario questions significantly more intuitive; community candidates consistently recommend this even for a theory-based exam
- Microsoft Virtual Training Day: Azure Fundamentals — free instructor-led online event (two half-day sessions); completing both sessions qualifies you for a 50% discount on the exam fee ($49.50 instead of $99); register with the same email as your Microsoft Learn profile
Study timeline by background
| Background | Estimated hours | Notes |
|---|---|---|
| IT professional with cloud experience (AWS, GCP, or Azure) | 3–10 hours | Some candidates with AWS/GCP backgrounds pass with a 3-day focused sprint. Focus preparation on Azure-specific terminology, governance tooling, and Microsoft Entra identity features — the areas most different from other cloud platforms. |
| IT professional without specific cloud experience | 10–25 hours | Typically 1–2 weeks of part-time study. The cloud concepts domain comes quickly; allocate extra time to Domain 2 service distinctions and Domain 3 governance tooling. |
| Non-IT background or complete cloud beginner | 20–50 hours | Plan 3–6 weeks at 1–2 hours per day. The Microsoft Learn path plus hands-on Azure Portal exploration are especially valuable at this level. Do not skip practice questions — conceptual familiarity alone is insufficient. |
Exam-day tactics
Scheduling: Book through Pearson VUE on the official Microsoft certification page. Online proctored (OnVUE) is convenient but requires a quiet room, working webcam, reliable internet, and no unauthorized items nearby. Run the OnVUE system check tool at least 24 hours before your exam. Many candidates prefer test centers specifically to avoid home environment issues — family interruptions, proctoring software technical problems, and background noise are documented in community reports as causes of online exam disruptions.
Registration detail: Register with your personal Microsoft Account (MSA), not a work or school account. Organizational accounts are tied to employer tenants — if you leave the organization, you can lose access to your certification records. Your name on your Microsoft certification profile must exactly match your government-issued ID or you may face check-in delays.
Time management: With roughly 33–40 questions in 45 minutes, you have approximately 60–80 seconds per question. Answer every question on the first pass — flag uncertain ones and return at the end. Do not get stuck on a single difficult question; the questions you know are worth the same points. There is no penalty for wrong answers, so never leave a question blank.
Scenario question strategy: For multi-service scenarios, eliminate answers that are definitionally wrong before choosing between the remaining options. The distinguishing factor between the two most plausible answers is usually the specific constraint stated in the question — a regional outage requirement points to GRS storage; a zone-level failure requirement points to ZRS. Read the constraint carefully before selecting.
After you submit: Results are displayed immediately on screen after submitting. Email confirmation arrives within hours. Your Microsoft Learn profile and Credly badge update almost instantly. If you passed, the badge is shareable immediately. If you did not pass, the retake window opens 24 hours later — review the score report's domain performance breakdown to focus your preparation before rescheduling.
Appointment length: Plan for 70–80 minutes total including check-in procedures, identity verification, and the NDA agreement — not just the 45-minute exam window.
After you pass
AZ-900 is a career signal, not a standalone salary lever. It demonstrates baseline Azure literacy and is increasingly listed as "preferred" on entry-level cloud job postings — particularly in finance, healthcare, government, and technology sectors. Its primary career value is as a prerequisite signal before employers sponsor candidates for higher-level role-based training, and as a differentiator for non-technical professionals moving into cloud-adjacent roles.
Entry-level roles where AZ-900 is commonly preferred include Cloud Support Associate (around $75,000), IT Support Specialist in cloud-focused environments (around $63,000), Junior Systems Administrator (around $98,000), Technical Account Manager, and Cloud Sales Specialist or Technical Sales Specialist (around $95,000). These figures come from a 2026 analysis of LinkedIn and Glassdoor data. ZipRecruiter reports an average of approximately $121,476 per year across all Azure Fundamentals professionals, but that figure reflects all experience levels across all Azure roles — not an entry-level AZ-900-specific salary. Treat it as a ceiling that reflects where an AZ-900 holder's career can go, not an immediate offer.
LinkedIn data shows more than 21,000 Azure job postings in the US in a single week, reflecting the scale of Azure adoption and ongoing demand for cloud-credentialed candidates. Microsoft Azure is the second-largest cloud platform globally.
The certification does not expire and requires no renewal — it is valid for life.
Logical next certifications:
- AZ-104 (Azure Administrator Associate) — the most common next step; validates hands-on Azure administration skills; significantly higher difficulty and salary potential; most candidates pursue it 1–3 months after AZ-900
- SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) — parallel fundamentals cert for security-focused professionals; widely paired with AZ-900
- AI-900 (Azure AI Fundamentals) — growing demand given AI/ML adoption; leads to AI/ML career paths
- DP-900 (Azure Data Fundamentals) — fundamentals-level cert for analytics and data career paths
- AZ-305 (Azure Solutions Architect Expert) — requires AZ-104 as a prerequisite; expert-level with high salary potential
Frequently Asked Questions
Is AZ-900 hard? For most IT professionals, no — with adequate preparation. For non-technical candidates, it requires genuine study effort over 3–6 weeks. The exam is harder than its "fundamentals" label implies because it uses scenario-based questions that require understanding when to use each service, not just what each service is. Overconfident candidates — especially experienced cloud practitioners from AWS or GCP — fail by underestimating Azure-specific content in Domains 2 and 3.
How many hours of study does AZ-900 require? It varies significantly by background. IT professionals with cloud experience typically report 3–10 hours. IT professionals without cloud experience report 10–25 hours. Non-technical candidates and complete beginners report 20–50 hours. These ranges come from community reports across dozens of exam pass and failure threads from 2025 and early 2026.
Does AZ-900 expire? No. Azure Fundamentals certifications are valid for life with no renewal required. This is explicitly stated on the official Microsoft certification page.
Are there prerequisites for AZ-900? No. Microsoft has no official prerequisites for AZ-900. It is designed as an entry-point certification with no required experience or prior certifications. However, general familiarity with basic IT concepts — networking, storage, compute — makes the content significantly easier to absorb.
What is the AZ-900 pass rate? Microsoft does not publish official pass rate data. Community estimates suggest approximately 70–75% first-attempt pass rate, though this figure comes from limited sources and should be treated as a rough indicator rather than a confirmed statistic. Candidates who complete the full Microsoft Learn path and practice with 200 or more questions report higher first-attempt success rates, though again this comes from community observation rather than official data.
What happens if I fail AZ-900? You can retake the exam 24 hours after your first failed attempt. Subsequent retakes require a 14-day wait. Microsoft allows a maximum of 5 attempts per 12-month period. Review the domain breakdown on your score report before rescheduling — it shows which areas cost you points.
Will AZ-900 help me get a job? AZ-900 is a signal of baseline cloud literacy and is increasingly listed as "preferred" on entry-level cloud job postings. It is most valuable as a credential that demonstrates commitment to cloud learning and as a prerequisite employers look for before sponsoring higher-level training. On its own, it is not a hiring decision driver — pair it with hands-on experience and role-based certifications for stronger job market outcomes.
Is the Microsoft Learn free practice assessment a reliable readiness indicator? No. Community candidates consistently report that the Microsoft Learn practice assessment is significantly easier than the real exam. Use it as a diagnostic tool to identify knowledge gaps, not as a benchmark for whether you are ready to schedule. Multiple candidates have scored 90–100% on the assessment and still failed the real exam.
The AZ-900 rewards candidates who invest genuine time in understanding Azure's service landscape and governance tooling — particularly the distinctions that scenario questions are designed to probe. Completing the Microsoft Learn path gives you the foundation. Practicing 200+ scenario-based questions closes the gap between recognizing services and choosing between them under exam conditions. Candidates who take the governance domain as seriously as the services domain pass more reliably. If you are ready to test that preparation, the CertCompanion AZ-900 question bank is built around exactly the scenario logic this exam rewards.
Start your AZ-900 preparation with the CertCompanion AZ-900 practice questions and aim for 85%+ before you schedule.