How long does it take to prepare for the AZ-900 exam?
Most candidates with basic IT familiarity need 20-40 hours of study to pass the AZ-900. Candidates with no cloud background should plan for 40-60 hours. Microsoft provides free learning paths on Microsoft Learn that cover all exam objectives, and many candidates supplement these with John Savill's free YouTube study guides.
The Azure Fundamentals certification, earned by passing the AZ-900 exam, is Microsoft's entry point into cloud certification and one of the most popular IT credentials in the world. With no prerequisites, a $165 exam fee, and a curriculum that covers essential cloud concepts alongside Azure-specific services, it serves as a launching pad for cloud careers and a useful baseline credential for non-technical professionals working in Azure environments.
Microsoft's certification program has evolved significantly since 2018 when it introduced the current fundamentals tier. The AZ-900 now functions as a recognized benchmark across industries -- from finance and healthcare to manufacturing and government -- as organizations accelerate their Azure adoption. According to Microsoft's Skills Challenge data, over 3 million people have passed the AZ-900 since it launched, making it one of the most widely held cloud credentials globally.
This guide covers everything you need to know: what the exam tests, how to prepare efficiently, which resources actually work, and how to position the credential in your career plan.
AZ-900 Exam Overview
The AZ-900 exam contains 40-60 questions across five domains. The passing score is 700 out of 1000. Candidates receive 60 minutes to complete the exam, though additional time is granted for non-native English speakers in English-language testing regions.
| Domain | Approximate Weight |
|---|---|
| Describe cloud concepts | 25-30% |
| Describe Azure architecture and services | 35-40% |
| Describe Azure management and governance | 30-35% |
Note: Microsoft restructured the exam objectives in 2023. Always verify current objectives at learn.microsoft.com/certifications/azure-fundamentals before scheduling.
Question formats include multiple choice (single answer), multiple choice (multiple answers), drag-and-drop matching, ordering scenarios, and yes/no style questions embedded within case studies. There are no simulation-based or lab questions on the AZ-900 -- all questions are knowledge-based.
The exam is administered through Pearson VUE, either at a testing center or online with remote proctoring. Online delivery requires a webcam, microphone, and a clean workspace free of secondary monitors and prohibited materials.
Domain 1: Cloud Concepts (25-30%)
This domain tests whether you understand the fundamental principles of cloud computing, independent of any specific vendor. Many candidates underestimate it because the concepts seem obvious. Do not make that mistake -- this domain contains nuanced questions that trip up overconfident candidates.
Core Cloud Definitions
Cloud computing -- the delivery of computing services (servers, storage, databases, networking, software, analytics, and intelligence) over the internet to offer faster innovation, flexible resources, and economies of scale, with payment based on actual usage rather than upfront capital investment.
Shared responsibility model -- the division of security and operational responsibilities between a cloud provider (Microsoft Azure) and its customers. The provider is always responsible for physical security and the underlying infrastructure. The customer is always responsible for their data and access management. What falls in between depends on the service type: IaaS, PaaS, or SaaS.
The Service Models
| Model | Full Name | Customer Manages | Azure Manages |
|---|---|---|---|
| IaaS | Infrastructure as a Service | OS, apps, data, runtime | Virtualization, servers, storage, networking |
| PaaS | Platform as a Service | Apps, data | Everything below the app layer |
| SaaS | Software as a Service | Data configuration | Everything else |
Azure Virtual Machines (Azure VMs) represent the primary IaaS offering -- you get raw compute but must manage the operating system, patches, and software. Azure App Service is a PaaS offering -- you deploy code and Azure handles the runtime environment. Microsoft 365 is a SaaS offering -- you configure settings but Azure manages all underlying infrastructure.
Cloud Deployment Models
- Public cloud: All infrastructure owned and operated by Azure, shared across multiple customers (multi-tenancy)
- Private cloud: Dedicated infrastructure run for a single organization, either on-premises or hosted
- Hybrid cloud: Combination of public cloud and private infrastructure with orchestration between them
- Multi-cloud: Using services from two or more cloud providers simultaneously (e.g., Azure plus AWS)
"The question I get asked most often is whether hybrid cloud is just a temporary state before full cloud migration. The answer is no -- for regulated industries especially, hybrid architectures are a permanent operating model, not a halfway house." -- Mark Russinovich, CTO of Microsoft Azure, at Microsoft Ignite 2023
Domain 2: Azure Architecture and Services (35-40%)
This is the largest and most content-heavy domain. It covers Azure's global infrastructure, core compute and storage services, networking, and databases.
Azure Global Infrastructure
Azure regions -- geographic locations containing one or more datacenters connected through a low-latency network. As of 2024, Azure operates in more than 60 regions across 140 countries, giving it the largest global footprint of any cloud provider.
Availability Zones -- physically separate datacenters within a single region, each with independent power, cooling, and networking. Deploying resources across availability zones protects against datacenter-level failures. Not all regions support availability zones.
Region pairs -- most Azure regions are paired with another region at least 300 miles away within the same geography. During platform maintenance, updates are deployed to one region in a pair at a time. For some outage types, recovery prioritizes one region in a pair.
Compute Services
Azure Virtual Machines provide full control over the operating system and are appropriate for lift-and-shift migrations, custom software requiring specific OS configurations, and workloads that cannot run on PaaS offerings.
Azure App Service hosts web apps, REST APIs, and mobile backends. Microsoft manages scaling, patching, and load balancing. Developers deploy code in languages including Python, Node.js, .NET, Java, and PHP.
Azure Container Instances (ACI) -- the fastest way to run a container in Azure without managing virtual machines or orchestrators, suitable for short-lived workloads and development testing.
Azure Kubernetes Service (AKS) -- managed Kubernetes for production container orchestration, handling cluster upgrades, node scaling, and monitoring integration.
Azure Functions -- serverless compute that executes code in response to events without requiring provisioned infrastructure. Billed per execution with the first 1 million executions free each month.
Storage Services
Azure Blob Storage -- object storage for unstructured data including documents, images, videos, and backups. The four access tiers reflect usage patterns:
- Hot: Frequently accessed data, highest storage cost, lowest access cost
- Cool: Infrequently accessed data stored for at least 30 days
- Cold: Rarely accessed data stored for at least 90 days (added in 2023)
- Archive: Long-term retention data, lowest storage cost, highest retrieval cost with hour-scale rehydration time
Azure File Storage -- managed file shares accessible via SMB and NFS protocols, suitable for replacing or extending on-premises file servers and enabling persistent storage for containerized applications.
Azure Disk Storage -- managed persistent disks attached to Azure VMs, available in HDD (Standard), SSD (Standard SSD), and NVMe SSD (Ultra Disk) configurations.
Networking Services
Azure Virtual Network (VNet) -- the fundamental building block for private networking in Azure. Resources within a VNet can communicate with each other, with on-premises networks (via VPN or ExpressRoute), and with the internet.
Azure VPN Gateway -- sends encrypted traffic between Azure VNet and on-premises locations over the public internet. Appropriate for moderate bandwidth requirements and when dedicated connectivity is not required.
Azure ExpressRoute -- dedicated private connectivity between on-premises networks and Azure, bypassing the public internet entirely. Used by organizations with high bandwidth requirements, low latency needs, or strict compliance requirements around data transit.
Azure Load Balancer -- distributes inbound traffic across multiple virtual machines at Layer 4 (TCP/UDP). For HTTP/HTTPS traffic with path-based routing, Azure Application Gateway operates at Layer 7 with additional web application firewall capabilities.
"The shift from on-premises networking to Azure networking requires a mental model change. You are no longer buying physical hardware with fixed capacity -- you are configuring software-defined infrastructure that scales automatically. That abstraction is both the power and the learning curve." -- Scott Guthrie, Executive Vice President, Cloud + AI Group at Microsoft
Domain 3: Azure Management and Governance (30-35%)
Cost Management
Understanding Azure costs is a core exam topic. Azure costs are determined by:
- Resource type: VMs cost more than storage; GPU-enabled VMs cost more than CPU-only
- Region: Resources in North America and Western Europe are generally more expensive than in other regions
- Bandwidth: Ingress (data coming into Azure) is typically free; egress (data leaving Azure) is charged
- Reservation: Pre-committing to 1-year or 3-year reservations saves 30-65% versus pay-as-you-go
Azure Cost Management + Billing -- a free tool within the Azure portal that provides cost analysis, budget alerts, and recommendations for reducing spending through right-sizing and reserved instances.
Azure Advisor -- a personalized cloud consultant that analyzes Azure usage and provides recommendations across five categories: cost, security, reliability, operational excellence, and performance.
Azure Pricing Calculator (azure.microsoft.com/pricing/calculator) -- estimates the cost of Azure services before deployment by selecting specific services, regions, and configurations.
Total Cost of Ownership Calculator (azure.microsoft.com/tco/calculator) -- compares the cost of running workloads on-premises versus on Azure, accounting for hardware, power, cooling, labor, and licensing.
Azure Management Tools
Azure portal -- a web-based interface for managing all Azure resources. Suitable for one-off operations, visual exploration, and monitoring.
Azure CLI -- a cross-platform command-line tool (az commands) for scripting and automation. Available on Windows, macOS, and Linux.
Azure PowerShell -- PowerShell module for managing Azure resources using Azure-specific cmdlets (Az module). Preferred by Windows administrators familiar with PowerShell.
Azure Resource Manager (ARM) -- the management layer that processes all Azure management requests. Every tool (portal, CLI, PowerShell, REST API) ultimately communicates with ARM.
ARM Templates -- JSON-based declarative configuration files that define the infrastructure and configuration for Azure deployments. Enable repeatable, consistent deployments through infrastructure-as-code.
Azure Bicep -- a domain-specific language for Azure infrastructure-as-code that compiles to ARM templates. Simpler syntax than raw JSON ARM templates with better tooling support.
Governance and Compliance
Azure Policy -- enforces organizational standards by auditing and preventing non-compliant resource configurations. Examples: require all storage accounts to use private endpoints, require specific VM SKUs in a region.
Azure Blueprints (now integrating with Azure Deployment Environments) -- packages role assignments, policy assignments, and resource templates for consistent environment creation that meets organizational standards.
Microsoft Purview -- unified data governance platform for discovering, classifying, and managing data across on-premises, multi-cloud, and SaaS environments.
Azure Compliance Manager -- helps organizations assess compliance posture against regulatory frameworks including ISO 27001, SOC 2, GDPR, HIPAA, and FedRAMP.
"Governance is not a post-deployment consideration. The organizations that succeed in the cloud are those that build policy and compliance into their provisioning pipeline from day one." -- Corey Sanders, Corporate Vice President of Azure at Microsoft Build 2022
Monitoring Tools
Azure Monitor -- collects, analyzes, and acts on telemetry from Azure and on-premises environments. Sources include metrics (numerical performance data), logs (activity and diagnostic records), and distributed traces.
Azure Service Health -- personalized alerts and guidance when Azure service issues affect your resources, including planned maintenance notifications.
Azure Resource Health -- reports on the current and historical health of individual Azure resources, helping distinguish between Azure platform issues and configuration problems.
How to Study for AZ-900
Official Microsoft Learn Path
Microsoft provides a free, structured learning path on learn.microsoft.com covering all three exam domains. The path includes interactive modules, knowledge checks, and sandbox environments where you can practice Azure commands without a paid subscription. Total estimated time: 10-15 hours for the structured content.
John Savill's AZ-900 Study Guide
John Savill's YouTube channel ("John Savill's Technical Training") offers one of the most comprehensive free resources for AZ-900 preparation. His "AZ-900 Azure Fundamentals Certification Course" video runs approximately 3 hours and covers all exam objectives with clear diagrams and explanations. Savill updates his content regularly following exam objective changes.
Practice Exams
Practice exams from MeasureUp (the official Microsoft practice test provider), Whizlabs, and ExamTopics are commonly used. Be cautious: some third-party practice exams contain outdated questions or inaccurate answers. Cross-reference any answer you are uncertain about against the official Microsoft documentation.
Hands-On Practice
The AZ-900 does not test hands-on skills directly, but interacting with the Azure portal cements conceptual understanding. Microsoft offers a 30-day free trial with $200 in credits, and Microsoft Learn provides free sandbox environments for specific exercises.
| Resource | Cost | Best For |
|---|---|---|
| Microsoft Learn (official) | Free | Structured learning, all objectives |
| John Savill YouTube | Free | Video learners, concept reinforcement |
| MeasureUp Practice Tests | ~$99 | Exam simulation, question patterns |
| Azure Free Trial | Free (limited) | Hands-on exploration |
| A Cloud Guru / Pluralsight | Subscription | Comprehensive video courses |
AZ-900 Career Value and Next Steps
The AZ-900 is genuinely valuable for non-technical professionals who interact with Azure environments -- account managers, IT procurement specialists, project managers overseeing cloud migrations, and compliance professionals auditing cloud environments. For technical professionals, it provides structured Azure vocabulary and a documented baseline credential.
Certification Progression After AZ-900
| Career Path | Next Certification | Exam Code |
|---|---|---|
| Cloud administration | Azure Administrator Associate | AZ-104 |
| Cloud development | Azure Developer Associate | AZ-204 |
| Data engineering | Azure Data Engineer Associate | DP-203 |
| Security | Azure Security Engineer Associate | AZ-500 |
| AI/ML | Azure AI Engineer Associate | AI-102 |
The AZ-900 never expires. Unlike Microsoft's role-based certifications (which require annual renewal via free assessments), the fundamentals credential remains on your transcript permanently. This is worth considering when evaluating its long-term value relative to the 20-40 hours of preparation time.
A 2023 Global Knowledge IT Skills and Salary survey found that Azure certifications at the associate level and above correlated with salary premiums averaging $15,000 per year in North America. The AZ-900 alone does not produce that premium, but it forms the foundation upon which those higher-value credentials are built.
Frequently Asked Questions
Is the AZ-900 worth it for someone already working in IT?
For experienced IT professionals, the AZ-900 is worth it as a structured introduction to Azure concepts, especially if you are transitioning from on-premises infrastructure to cloud roles. It is not a substitute for associate-level certifications that validate hands-on skills. Use it as a launchpad to AZ-104 or AZ-204, not as a terminal credential.
Can you pass AZ-900 with no cloud experience?
Yes. The exam is designed for people with no prior cloud experience. Microsoft's free learning paths on Microsoft Learn are sufficient preparation. The key is understanding concepts rather than memorizing product names -- questions often describe a scenario and ask which Azure service addresses it.
How many times can you retake the AZ-900 if you fail?
Microsoft allows you to retake the exam after 24 hours on the first retake. A second retake requires a 14-day wait. Subsequent retakes also require 14-day waiting periods. There is no limit on the total number of attempts, but each attempt requires payment of the full exam fee.
References
- Microsoft. "Exam AZ-900: Microsoft Azure Fundamentals." Microsoft Learn, 2024.
- Savill, John. "AZ-900 Azure Fundamentals Study Guide." John Savill's Technical Training, YouTube, 2024.
- Global Knowledge. "IT Skills and Salary Report 2023." Global Knowledge, 2023.
- Microsoft. "Azure Documentation: Cloud Concepts." Microsoft Learn, 2024.
- Microsoft. "Azure Pricing Calculator." azure.microsoft.com/pricing/calculator, 2024.
- Microsoft. "Microsoft Digital Defense Report 2024." Microsoft Security, 2024.
- Russinovich, Mark. "Azure Architecture Update." Microsoft Ignite 2023 keynote, November 2023.