Microsoft β’ AZ-900
Validates foundational knowledge of cloud concepts and Azure services, architecture, and management.
Questions
382
Duration
45 minutes
Passing Score
700/1000
Difficulty
FoundationalLast Updated
Jan 2025
The Microsoft Azure Fundamentals certification (AZ-900) is an entry-level credential that validates foundational knowledge of cloud computing concepts and Microsoft Azure services. It covers three core domains: cloud concepts such as the shared responsibility model, cloud service types (IaaS, PaaS, SaaS), and consumption-based pricing; Azure architecture and services including compute (virtual machines, containers, Azure Functions), networking (virtual networks, VPN Gateway, ExpressRoute), storage tiers and redundancy, and identity and security tools such as Microsoft Entra ID, RBAC, and Microsoft Defender for Cloud; and Azure management and governance covering cost management, Azure Policy, Microsoft Purview, resource locks, Azure Resource Manager, and monitoring tools like Azure Advisor and Azure Monitor.
Last updated on January 14, 2026, the exam reflects current Azure capabilities including infrastructure as code (IaC), Azure Arc, and the expanded role of Azure Policy in organizational governance. Candidates who pass AZ-900 may also be eligible for ACE college credit. The certification is delivered as a single exam and carries the 'Microsoft Certified: Azure Fundamentals' badge upon passing.
AZ-900 is designed for technology professionals who want to demonstrate baseline familiarity with cloud services and Azure, regardless of whether they come from a technical or non-technical background. Suitable roles include IT support technicians, help desk staff, sales and business professionals who work alongside Azure teams, and junior administrators beginning a cloud career. It is also commonly pursued by experienced IT professionals in infrastructure management, database administration, or software development who are transitioning into cloud-focused roles and want to formalize their foundational Azure knowledge.
Because no prior cloud or Azure experience is required, the exam also serves students and educators, who can schedule through Certiport at academic pricing. For technical practitioners, AZ-900 is typically the first step on a path toward associate-level certifications such as AZ-104 (Azure Administrator) or AZ-204 (Azure Developer).
Microsoft lists no formal prerequisites for AZ-900. There is no required prior certification, and no specific years of experience are mandated before registering. The exam is explicitly designed to be accessible to candidates without hands-on Azure experience.
That said, Microsoft recommends that candidates have some background working within an area of IT β such as infrastructure management, database administration, or software development β to contextualize the cloud and Azure concepts tested. Familiarity with basic IT concepts (networking, storage, operating systems) will make the study material more approachable. No scripting or programming skills are required, and the official instructor-led course AZ-900T00-A: Introduction to Cloud Infrastructure is structured to require none.
AZ-900 consists of between 40 and 60 scored questions and must be completed within 45 minutes (as stated on the official exam page). Question types include multiple-choice, multiple-select, drag-and-drop, and scenario-based questions; the exam may also include interactive components. The exam is delivered online via Pearson VUE proctoring or in-person at a Pearson VUE test center; students and educators may also schedule through Certiport. The exam is available in 13 languages including English, Japanese, Chinese (Simplified and Traditional), Korean, Spanish, German, French, Indonesian, Arabic, Italian, Portuguese (Brazil), and Russian β candidates whose preferred language is unavailable may request an additional 30 minutes.
Scoring uses Microsoft's scaled system where 700 out of 1000 is required to pass; this does not equate directly to 70% of questions answered correctly. There is no penalty for incorrect answers, and results are displayed immediately upon completion. The exam costs $99 USD (price varies by country/region). Retakes are permitted after 24 hours following the first failed attempt; subsequent retakes require a 14-day waiting period, with a maximum of five attempts per year.
AZ-900 serves primarily as a gateway credential rather than a standalone career differentiator, but it provides meaningful value as a foundation for the broader Azure certification path. Holding the certification demonstrates verified familiarity with Azure to employers and is often listed as a preferred or required baseline for entry-level cloud roles such as Junior Cloud Administrator, Cloud Support Associate, Azure Support Engineer, and IT Help Desk Technician with cloud responsibilities. For sales engineers and technical account managers, it provides the vocabulary and conceptual grounding needed to discuss Azure solutions with customers credibly.
The certification is a recognized prerequisite β formal or de facto β for pursuing associate-level Azure certifications including AZ-104 (Azure Administrator Associate), AZ-204 (Azure Developer Associate), and DP-900 (Azure Data Fundamentals). According to ZipRecruiter, Azure Fundamentals-certified professionals in the U.S. report average salaries around $121,000β$125,000 annually, though these figures reflect broader Azure roles rather than the entry-level positions AZ-900 alone qualifies candidates for. Microsoft's own data shows certified professionals generally earn 20β25% more than non-certified peers in equivalent roles. As organizations continue large-scale Azure adoption, foundational cloud literacy credentials are increasingly valued even in non-engineering roles such as project management, procurement, and compliance.
5 sample questions with correct answers and explanations. Start a practice session to test yourself across all 382 questions.
1. When you provision a new Azure resource, like a virtual machine, Azure begins tracking its usage (e.g., how many hours it runs). This tracking generates a record that is used to calculate your bill. What is the Azure component that performs this tracking called?
Explanation
This component is called a usage meter. When you create an Azure resource, one or more meter instances are created for it. These meters are responsible for tracking the usage of the resource. At the end of the billing cycle, the usage records from all meters are used to calculate your final bill.
2. What is the primary purpose of asymmetric encryption?
Explanation
The primary purpose of asymmetric encryption is to use a public/private key pair. The public key can be shared freely to encrypt data, but that data can only be decrypted by the holder of the corresponding private key. This system enables secure communication over an insecure channel without having to share a secret key beforehand. It is also the basis for digital signatures.
3. A developer needs to run a small piece of code that automatically resizes an image every time a new image is uploaded to an Azure Storage account. They want a solution where they pay only for the time the code is actually running, down to the second. Which Azure compute service is the best fit?
Explanation
Azure Functions is the perfect service for this scenario. It is a serverless compute service that allows you to run small pieces of code, or functions, in response to events, such as a file upload. Its consumption-based pricing model means you pay only for the compute time you consume when your function runs, making it extremely cost-effective for event-driven tasks. The other services would require running a full server or container, which would be more expensive and complex for this simple task.
4. A company has a Windows Server Standard Edition license with active Software Assurance. They use it for an on-premise server. According to the Azure Hybrid Benefit rules, can they use this same license for an Azure VM at the same time as the on-premise server?
Explanation
No, this is a key rule for the Azure Hybrid Benefit. A Windows Server Standard Edition license can be assigned to either an on-premise server or an Azure VM, but it cannot be used for both simultaneously. To use a license in both locations at the same time, you would need a Datacenter Edition license.
5. A development team uses containers for all of their applications. They need a private, secure location in Azure to store and manage their custom container images, which will be used by Azure Kubernetes Service (AKS) for deployments. Which service should they use?
Explanation
Azure Container Registry (ACR) is the correct service. ACR is a managed, private Docker registry service based on the open-source Docker Registry 2.0. It is used to store and manage private container images and artifacts. It integrates seamlessly with container orchestration tools like AKS, making it the standard place to store images for Azure container workflows. Azure Repos is for source code, not compiled container images.
One-time access to this exam