Microsoft AZ-900 (Azure Fundamentals): how hard, what's actually tested

If you have a technical background — any technical background — AZ-900 is probably the easiest cloud cert you'll ever take. I've watched product managers, recruiters, sales engineers, and bored backend developers pass it with two weekends of prep. Some of them passed with one weekend. The exam is a vocabulary check more than a skills check, and Microsoft prices it accordingly: $99 (sometimes free with a "Get Certified" challenge voucher), 60-ish multiple-choice questions, 45 minutes plus a tutorial buffer, and a 700-of-1000 passing score.

That doesn't mean it's worthless. It's just that the difficulty isn't where most candidates expect.

The actual difficulty

Most online "AZ-900 study guide" pages will tell you it takes 30-40 hours. That's overstated for anyone who's used a cloud before. If you've deployed a single VM to AWS, GCP, or even DigitalOcean, you already know 60% of what AZ-900 tests. Service names change. Concepts don't.

Where AZ-900 gets people:

• Pricing and SLA questions. Microsoft really, really wants you to know the difference between CapEx and OpEx, what a "consumption-based" pricing model means, and which tier of support gets you a 15-minute response time. None of this is technically hard. It's just memorization, and it doesn't show up on real engineering work, so candidates skip it and lose 8-10% on the exam.
• Compliance vocabulary. Microsoft Purview, Azure Policy, Microsoft Defender for Cloud, Service Trust Portal — what's the difference? You need to know. Compliance is a real Microsoft selling point and the exam reflects that.
• The shared responsibility model, restated four ways. They'll ask it as IaaS vs PaaS vs SaaS, then again as "who patches the OS in Azure SQL Database vs Azure SQL Managed Instance vs SQL Server in a VM." Same concept, different framing. Get the table memorized.

The exam itself is not tricky. Microsoft's distractors are usually obvious if you've studied. Time pressure is non-existent — most people finish in 25 minutes.

What's actually tested

The current AZ-900 skills outline (last meaningfully updated in 2023, with small refreshes since) breaks into four domains:

1. Cloud concepts (~25%). High availability, scalability, elasticity, agility, disaster recovery, fault tolerance. Public/private/hybrid cloud. CapEx vs OpEx. Consumption-based model.
2. Azure architecture and services (~35%). Regions, region pairs, availability zones, resource groups, subscriptions, management groups. Then the service catalog: Azure VMs, App Service, AKS, Functions, Container Instances, Virtual Networks, Storage accounts, SQL Database, Cosmos DB. Plus the IoT and big-data marketing names you'll mostly forget after the exam.
3. Azure management and governance (~30%). Cost Management, Azure Advisor, Service Health, Azure Monitor, Log Analytics, Azure Policy, role-based access control, resource locks, tags, Azure Blueprints (still on the exam even though it's deprecated as of mid-2026 — Microsoft Learn hasn't fully caught up).
4. Security, compliance, identity, and privacy was its own domain in older versions but has been folded into the other three since the 2023 refresh. Expect Microsoft Entra ID (formerly Azure Active Directory — the rename happened in 2023 and the exam uses "Entra ID" now), MFA, conditional access, Defender for Cloud, Sentinel.

If you see a study guide referencing "Azure Active Directory" without mentioning Entra ID, it's outdated. Move on.

How to prepare in 2-3 weeks

This is what I'd actually do, working a normal job, with maybe an hour a night plus weekends:

Week 1: Microsoft Learn paths. Microsoft offers free official learning paths for AZ-900 at learn.microsoft.com/training/courses/az-900t00. They're dry but accurate, and the exam is built from them. Skim the modules, do the knowledge checks, and don't bother with the videos — read instead. You can finish the entire path in 8-12 hours if you don't drift.

Week 2: Practice questions. This is where most people under-invest. Take a practice exam cold, see what you bomb, then go back to the relevant Microsoft Learn module. CertLabPro has a free AZ-900 question bank — browse it here or run a timed mock exam. Tim Warner's Pluralsight course is dated but solid for fundamentals. Skip the Udemy courses with 200,000 students unless you're a complete beginner — the production value is high but the depth is shallow.

Week 3 (optional): The Azure portal. Spin up a free-tier Azure account and click around. Create a resource group, deploy a VM, look at the cost view. You don't need to build anything real. The point is to see the names of the services in the portal so they stop being abstract. If you've used AWS, half a day of clicking around makes the rest of the cert click.

If you've never touched a cloud before, double these timelines. If you have years of cloud experience, one focused weekend is enough.

John Savill's videos

Worth a separate mention. John Savill maintains a free AZ-900 study cram on YouTube — not affiliated with Microsoft, just a community resource that's been kept current. It's dense, single-take, and aimed at people who want to pass quickly. If reading puts you to sleep, his cram videos are the antidote. He also has a Patreon if you want full courses, but the free YouTube content is more than enough for AZ-900.

What "never expires" actually means

AZ-900 is one of four Microsoft fundamentals certs that never expire (the others: AI-900, DP-900, SC-900). You pass once, you have it forever. That's genuinely useful for resume optics — there's no maintenance burden — but it's also a tell. If a recruiter sees AZ-900 dated 2019 and nothing else, it doesn't carry the same weight as a recent role-based cert. The "never expires" benefit cuts both ways: low maintenance, low signal of recency.

For people early in their cloud journey: take AZ-900, but don't stop there. The fundamentals cert is a starting point. Recruiters use it as a checkbox; hiring managers want to see at least one role-based cert (AZ-104, AZ-204, AZ-500, AI-102, etc.) layered on top.

When AZ-900 is genuinely worth your time

• Career pivot. You're moving from non-cloud (helpdesk, support, sales engineering, finance) into a cloud-adjacent role. AZ-900 is the credible signal that you've started.
• Microsoft-shop employer. Many enterprise IT shops require AZ-900 for any cloud-touching role. If yours is one, take it tomorrow.
• You want a free cert. Microsoft runs Cloud Skills Challenges roughly twice a year that include free AZ-900 vouchers. If you're going to take it anyway, wait for one. The vouchers come out via the Microsoft Learn newsletter.
• You're studying for AZ-104 / AZ-204. AZ-900 is genuinely good prep for the harder role-based exams. The vocabulary scaffold makes the next exam easier.

When to skip it

If you've already been working in Azure for a year and you have AZ-104 in mind, skip AZ-900 and go straight to AZ-104. AZ-900 doesn't add anything to a resume that already has AZ-104. The fundamentals cert is for people who don't yet have role-based credentials. It is not a prerequisite.

Same goes if you've already passed AWS CLF-C02 or GCP Cloud Digital Leader. The fundamentals concepts overlap heavily; you don't need three of them.

Bottom line

AZ-900 is a low-stakes, high-velocity cert. Don't overthink it. Two to three weeks of evening study, $99 (or free), one Pearson VUE proctored session (online or in-person), done. The difficulty is not the test, it's the discipline to study the boring pricing-and-compliance bits that don't show up in real engineering.

If you're starting today, open the AZ-900 question bank and run a timed practice exam. See where you stand cold. Most people score 65-75% on a first attempt with no prep. Two weeks of focused review gets you comfortably past 800/1000.

Then book the exam. Don't let the prep stretch into a third month — at that point, you've learned everything AZ-900 has to teach and you're just adding anxiety.