⭐ Trusted by 700+ Buyers  ·  4.7★ Star Seller on Etsy  ·  $9.99/exam  ·  Grab it now →
Home › Microsoft › AZ-900 study guide

Microsoft Azure Fundamentals (AZ-900) Practice Test & Study Guide

Everything you need to plan your AZ-900 prep: the exam format, what each domain covers, a week-by-week study plan, original practice questions, and what thousands of study-group comments reveal about where candidates slip up.

Last updated · By the NotJustExam team

About the Microsoft Azure Fundamentals (AZ-900) exam

Microsoft Azure Fundamentals (AZ-900) validates foundational knowledge of cloud computing concepts and how those concepts map onto Microsoft Azure specifically. It carries no prerequisites and is intentionally written to be accessible to people who are new to cloud technology, including candidates outside of a pure IT track.

The target candidate is a technology professional early in their Azure journey, or someone in an adjacent IT discipline such as infrastructure, database, or software development who wants a grounding in Azure architecture, services, and governance before going deeper into role-based certifications like AZ-104 (Administrator) or AZ-204 (Developer).

AZ-900 matters because it is the common on-ramp into the entire Microsoft Azure certification track. It establishes vocabulary and mental models — regions, resource groups, IaaS/PaaS/SaaS, the shared responsibility model — that every subsequent Azure exam assumes you already know.

Microsoft Azure Fundamentals (AZ-900) exam format at a glance

AttributeDetail (as of 2026, verify on the official page)
Exam codeAZ-900
Question timeApproximately 45 minutes of exam questions within the scheduled appointment (the full appointment also includes time for sign-in and instructions)
Question typesMultiple choice, multiple answer, drag-and-drop, and other Microsoft interactive item formats
Passing score700 on a scaled range of 100–1,000
CostList price is commonly around 99 USD for Fundamentals-level exams; the exact amount shown at registration varies by country, so confirm it on the official page before booking
LanguagesEnglish, Japanese, Chinese (Simplified and Traditional), Korean, Spanish, German, French, Indonesian, Arabic, Italian, Portuguese (Brazil), Russian
DeliveryPearson VUE (individual candidates) or Certiport (students and educators)
ValidityFundamentals certifications such as Azure Fundamentals do not expire and need no renewal (unlike Microsoft's role-based Associate and Expert certifications, which are renewed yearly through a free online assessment); Microsoft may retire an exam version, so check your status on your Microsoft Learn profile

Microsoft Azure Fundamentals (AZ-900) domains & what they cover

The skills measured are organized into three areas. The weightings below reflect the published AZ-900 study guide ranges; confirm current figures on the official page.

  • Describe cloud concepts (25–30%) — Cloud computing fundamentals, the shared responsibility model, public/private/hybrid deployment models, consumption-based pricing, and the differences between IaaS, PaaS, and SaaS.
  • Describe Azure architecture and services (35–40%) — The largest domain. Core building blocks like regions and resource groups, Azure compute and networking services, Azure storage options, and Azure identity, access, and security tooling such as Microsoft Entra ID and role-based access control.
  • Describe Azure management and governance (30–35%) — Cost management and the pricing calculator, governance tools like Azure Policy and resource locks, tools for managing and deploying resources such as the Azure portal and Azure Resource Manager, and monitoring tools like Azure Monitor.

How hard is Microsoft Azure Fundamentals (AZ-900)?

AZ-900 is genuinely entry-level and is widely considered one of the more approachable vendor certification exams available. That said, "easy" is relative: if you have never touched a cloud console before, the sheer number of Azure service names and what each one does can still feel overwhelming on a first pass.

The most common friction points are Azure architecture and services, simply because it is the largest domain and packs in compute, networking, storage, and identity together, and governance concepts like management groups and Azure Policy, which are unfamiliar to candidates without any operations background.

Someone with general IT exposure can often be ready in one to two weeks of focused study. Complete newcomers to cloud computing should plan for three to four weeks, with extra time spent clicking around a free-tier Azure account to make the terminology concrete.

How to prepare for Microsoft Azure Fundamentals (AZ-900): a study plan

Because the exam rewards recognition over deep hands-on skill, a short, layered plan is usually enough.

  1. Days 1–3: Cloud concepts first. Nail down the shared responsibility model, deployment models, and the IaaS/PaaS/SaaS distinction. These ideas are referenced constantly in the other two domains.
  2. Days 4–9: Tour Azure architecture and services. Work through regions and resource groups, then compute, networking, storage, and identity/security one at a time. Log into a free Azure account and look at the portal for each service you study — seeing the actual configuration screen makes the vocabulary stick.
  3. Days 10–13: Cover management and governance. Study the cost management tools, Azure Policy, resource locks, and the monitoring stack (Azure Monitor, Azure Advisor, Service Health).
  4. Final days: Drill with practice questions. Take timed practice sets across all three domains, read every explanation, and revisit any Azure service you are still unsure about.

Use practice questions to surface which service category is weakest, not as a way to memorize specific wording — Microsoft rewrites and reorders questions frequently, so understanding beats recall here.

Microsoft Azure Fundamentals (AZ-900) FAQ

How much does the AZ-900 exam cost?

Fundamentals-level Microsoft exams are commonly priced around 99 USD, but the exact figure depends on your country and is shown when you register. Always confirm it on the official Microsoft exam page before booking.

Do I need any prior experience to take AZ-900?

No. There are no prerequisites, and Microsoft designs this exam to be approachable for candidates who are new to cloud computing, including people moving into IT from adjacent fields.

What is the retake policy if I fail?

You can retake the exam 24 hours after a failed first attempt. The wait time increases for subsequent retakes, so check the official Microsoft exam retake policy for the current schedule before your next attempt.

Is the exam proctored?

Yes. AZ-900 is a proctored exam delivered through Pearson VUE, either at a physical test center or online with remote proctoring, or through Certiport for eligible students and educators.

What certification should I pursue after AZ-900?

Most candidates move into a role-based associate certification next, such as AZ-104 (Azure Administrator), AZ-204 (Azure Developer), or SC-900/AI-900 if their interests lean toward security or AI, depending on their career direction.

Is AZ-900 worth it if I am not planning a technical Azure role?

Generally yes. It gives non-technical roles like project managers, sales engineers, and business analysts enough shared vocabulary to work effectively with Azure technical teams, and it may qualify for ACE college credit depending on your institution.

Free AZ-900 practice questions

5 original questions written for NotJustExam from the public AZ-900 exam objectives and independently answer-checked. Try answering before you open the explanation.

Question 1

A company wants to deploy a web application without managing the underlying operating system, patching, or runtime environment, but it still wants some control over application configuration. Which cloud service model best fits this need?

  1. Infrastructure as a Service (IaaS)
  2. Platform as a Service (PaaS)
  3. Software as a Service (SaaS)
  4. On-premises virtualization
Show answer & explanation

Answer: B. PaaS abstracts away the operating system and runtime management while still letting the customer configure and deploy their own application code, which matches the requirement exactly. Option A is the tempting distractor because IaaS is also cloud-based, but IaaS still requires the customer to manage the operating system and patching themselves.

Source: official documentation

Question 2

An administrator needs to apply a single Azure Policy that automatically governs several subscriptions belonging to different departments in the same organization. Which Azure construct should be used to group these subscriptions for that purpose?

  1. A resource group
  2. An Availability Zone
  3. A region pair
  4. A management group
Show answer & explanation

Answer: D. Management groups sit above subscriptions in the hierarchy and let administrators apply policies and access controls across multiple subscriptions at once. Option A is the tempting distractor because resource groups also organize resources, but a resource group exists inside a single subscription and cannot span multiple subscriptions.

Source: official documentation

Question 3

An administrator wants to prevent a critical production virtual network from being accidentally deleted, while still allowing engineers to modify its configuration. Which Azure feature should be applied?

  1. A ReadOnly resource lock
  2. A CanNotDelete resource lock
  3. An Azure Policy that audits deletions after the fact
  4. Removing all engineers' contributor role assignments
Show answer & explanation

Answer: B. A CanNotDelete lock blocks deletion of a resource while still allowing configuration changes, which exactly matches the stated requirement. Option A is the tempting distractor because it is also a resource lock, but ReadOnly blocks both deletion and modification, which would prevent the engineers from making needed configuration changes.

Source: official documentation

Question 4

Under the shared responsibility model, as a customer moves from IaaS toward SaaS, what generally happens to the customer's security responsibilities?

  1. The customer's responsibility increases because SaaS providers manage less of the stack
  2. The customer's responsibility stays exactly the same across all service models
  3. The customer's responsibility decreases because the provider manages more of the underlying stack
  4. The customer becomes solely responsible for physical data center security in SaaS
Show answer & explanation

Answer: C. As you move from IaaS to PaaS to SaaS, the cloud provider takes on more of the stack, so the customer's operational and security responsibility shrinks, though the customer always retains responsibility for their own data and access management. Option A reverses the actual relationship and is the tempting distractor for someone who confuses which party manages more of the stack at each level.

Source: official documentation

Question 5

A company wants to require multi-factor authentication for a specific user only when they sign in from an unfamiliar location, while allowing simpler sign-in from trusted corporate networks. Which Azure feature enables this kind of adaptive policy?

  1. Microsoft Entra Conditional Access
  2. Azure role-based access control (RBAC)
  3. Azure Resource Manager (ARM) templates
  4. Azure Policy
Show answer & explanation

Answer: A. Conditional Access evaluates signals like location, device, and risk level to apply access controls such as requiring MFA only in specific conditions. Option B is the tempting distractor because RBAC also governs access, but RBAC controls what actions a user can perform on resources, not conditional sign-in requirements based on context like location.

Source: official documentation

What 7,703 study-group comments reveal about AZ-900

We summarised the public study-group discussion behind every question in our AZ-900 bank and compared it with an independent AI review. Where they disagree, a posted answer key alone is not enough to trust — which is why every question in the full bank shows the community vote, a discussion summary and a reasoned explanation side by side.

460practice questions reviewed
7,703study-group comments summarised from Q2 2019 – Q1 2026
7%of questions where the answer commonly posted online is disputed
16%of single-answer questions where the community vote is split

The AZ-900 traps that come up most

  • Governance scope differs: resource group vs. management group vs. policy — A resource group organizes resources within one subscription; a management group applies access and policy across multiple subscriptions; Azure Policy enforces compliance rules on the resources themselves.
  • Only higher support tiers include proactive architecture guidance — Basic and Developer support plans offer limited hours and no phone access; a paid plan with architectural guidance and configuration reviews is needed for proactive design advice, not just reactive ticket response.
  • Key Vault protects secrets; MFA protects sign-in — Azure Key Vault securely stores and encrypts secrets, keys, and certificates for applications, while multi-factor authentication is a separate control that verifies a user's identity at sign-in.
  • Availability Zones, Sets, and Scale Sets protect against different failures — Availability Zones guard against a whole datacenter failing, Availability Sets guard against rack-level hardware failure inside one datacenter, and Scale Sets exist for autoscaling rather than fault tolerance.
  • Classify a service by which layer is managed, not its product family — The IaaS, PaaS, or SaaS label depends on how much of the stack the customer still manages for that specific deployment; a virtual machine is IaaS even when it hosts a role usually associated with a platform service.

Inside the full AZ-900 practice bank

  • 456 practice questions in an interactive web app, plus a printable PDF
  • The community-voted answer and a summary of the study-group discussion for each question
  • A step-by-step AI explanation of why the right answer is right — and why the others are not
  • One-time $9.99, lifetime access, no subscription

More certification study guides

Independent study material. NotJustExam is not affiliated with, endorsed by, or sponsored by any certification body; all certification names, trademarks and exam codes belong to their owners and are used for descriptive purposes only. The sample questions on this page are original items written for NotJustExam from the publicly available exam objectives. Exam facts change — always confirm details on the official exam page before you register.