AZ-900 vs AI-901 vs SC-900: Which Microsoft Fundamentals First in 2026

Take AZ-900 First Unless You Have A Specific Reason Not To

If you only want one answer: for almost everyone starting in the Microsoft cloud in 2026, AZ-900 (Azure Fundamentals) is the right first certification. It teaches the platform vocabulary — subscriptions, regions, compute, storage, networking, identity, pricing, governance — that Azure AI Fundamentals and SC-900 both quietly assume you already understand. (Microsoft retired the AI-900 exam on June 30, 2026; Azure AI Fundamentals now requires AI-901.) The two common exceptions: take AI-901 first if your job or target role is explicitly about AI products and you have no near-term cloud-infrastructure path, and take SC-900 first if you are moving into a security, compliance, identity, or GRC role where Microsoft Entra and Microsoft Purview are the daily tools.

All three are beginner-level, ~$99 USD in the United States, 45 minutes of exam time, 700/1000 to pass, and none of them expire — Microsoft fundamentals certifications are permanent and do not require renewal (Microsoft credential expiration policy). So the real decision is not "which is best" — they all hold lifetime value for under $100. The decision is sequence: which one builds the foundation for your next move, and which one you can safely take second or skip.

This post is a decision guide, not an exam walkthrough. For the full blueprint, cost, format, and study plan of each exam, use the dedicated OpenExamPrep guides linked throughout. If you want the single-cert career and ROI breakdown for AI-900 specifically — is it worth it, what it pays, what comes next — read Is Azure AI-900 Worth It? Career Value and Next Steps.

The 30-Second Decision Tree

Match your situation to the strongest first pick. These are starting points, not rules — read the per-cert sections before you book.

The single most common mistake is treating these as a ranked competition. They are not substitutes. They cover different surfaces of the Microsoft cloud, and most serious candidates eventually hold two of the three. The question this post answers is which one is the highest-leverage first step for you, and what each one realistically does and does not unlock.

What Each Certification Actually Proves

The Microsoft Learn exam pages define exactly what each exam measures. Reading the scope side by side is the fastest way to see why these are not interchangeable.

AZ-900 — Azure Fundamentals (the platform)

The AZ-900 study guide covers three domains: Describe cloud concepts (25–30%), Describe Azure architecture and services (35–40%), and Describe Azure management and governance (30–35%). In plain terms, AZ-900 proves you understand what the cloud is (IaaS/PaaS/SaaS, CapEx vs OpEx, the shared responsibility model), the core Azure building blocks (VMs, App Service, storage, virtual networks, Entra ID), and how Azure is paid for and governed (Cost Management, RBAC, Azure Policy, locks, Monitor). It is the only one of the three that gives you the whole platform map. The current objectives took effect July 20, 2026, in a minor refresh affecting the compute-and-networking, resource-deployment, and monitoring sub-domains, with the three domain weightings unchanged (AZ-900 study guide, Microsoft Learn).

AI-901 — Azure AI Fundamentals (the AI layer)

Microsoft retired the AI-900 exam on June 30, 2026; candidates must now pass AI-901 to earn Microsoft Certified: Azure AI Fundamentals (Exam AI-900, Microsoft Learn). AI-901 (English version updated April 15, 2026) measures two areas: Identify AI concepts and capabilities (40–45%) and Implement AI solutions by using Microsoft Foundry (55–60%), and Microsoft expects knowledge of Python coding syntax and familiarity with Azure resources (Exam AI-901, Microsoft Learn). It is narrow and deep on one slice — AI solutions on Azure — and assumes basic cloud literacy rather than teaching the platform itself.

SC-900 — Security, Compliance, and Identity Fundamentals (the trust layer)

SC-900 measures four areas: concepts of security, compliance, and identity, capabilities of Microsoft Entra, capabilities of Microsoft security solutions, and capabilities of Microsoft compliance solutions (Microsoft Certified: SC-900, Microsoft Learn). It proves you understand identity (Entra ID, conditional access, zero trust), Microsoft Defender, Microsoft Sentinel, and Microsoft Purview at a conceptual level — the backbone of any security, identity, or compliance conversation in the Microsoft ecosystem.

The overlap is small and deliberate: AZ-900 touches identity and governance lightly, AI-901 covers AI concepts and solutions, and SC-900 goes deep on the security and identity stack. None of the three can substitute for another.

Difficulty And Cost Are Nearly Identical — Sequence Is The Real Variable

Because the format and price are the same, difficulty differences come from your background, not the exams themselves.

Price is set by the country or region where the exam is proctored and excludes promotions and taxes; confirm the current figure with Microsoft before you register, since prices change without notice. Two ways to manage the cost: students can get academic pricing in most countries/regions (except India and China) after verifying student status, and the Exam Replay offer pairs a retake with the original attempt — useful if you want insurance on a first try. The practical takeaway: none of these is meaningfully "harder" — the difficulty is whichever one tests material you have the least exposure to. That is exactly why sequence beats selection. Taking AZ-900 first makes AI-901 and SC-900 easier, because both lean on platform vocabulary AZ-900 teaches. The reverse is not true.

On retakes, all three follow Microsoft's standard fundamentals/role-based retake policy: if you fail, you can retake after 24 hours, then a 14-day wait applies between every subsequent attempt, with a maximum of five attempts in any 12-month window (Microsoft retake policy). You cannot retake an exam you have already passed, and each attempt is paid.

Why AZ-900 Is The Default First Pick

Three reasons AZ-900 is the safest first certification for most people in 2026:

It is the platform context the other two assume. AI-901 covers implementing AI solutions with Microsoft Foundry; SC-900 talks about securing Azure and Microsoft 365 resources. Both make far more sense after you understand subscriptions, resource groups, regions, and the shared responsibility model — the core of AZ-900. Microsoft itself frames Azure Fundamentals as "a common starting point in a journey towards a career in Azure" (Microsoft Certified: Azure Fundamentals).

It has the widest audience fit. AZ-900 has no prerequisites and no coding requirement, so it suits IT beginners, students, and many non-technical staff who work with Azure teams. If you are not yet sure which direction you are heading, AZ-900 keeps every door open.

It feeds the most role-based paths. AZ-900 is the conceptual on-ramp to AZ-104 (Administrator), AI-200 (Azure AI Cloud Developer, which replaced AZ-204 on July 31, 2026), AZ-305 (Solutions Architect), and the data and security tracks. Azure AI Fundamentals leads toward role-based AI certifications; SC-900 mainly feeds SC-200/SC-300. AZ-900 gives you the most optionality per dollar.

The honest caveat: if you already work in Azure daily, none of the fundamentals exams is the best use of your money — skip to the role-based associate certification, which carries far more hiring weight (and unlike fundamentals, those do expire and renew annually for free).

When To Take AI-901 Or SC-900 First Instead

The default is not the rule. Pick AI-901 first when your target role is explicitly AI-centric — a product manager owning an AI feature, a consultant scoping AI projects, a business analyst evaluating Azure OpenAI, or a non-engineer who needs AI literacy fast and has no near-term infrastructure path. In that case the AI content is directly relevant to your job today, and platform depth can wait, as long as you are comfortable with the Python basics AI-901 expects.

Pick SC-900 first when you are entering or pivoting into security, identity, compliance, SOC analysis, or GRC. The Entra, Defender, Sentinel, and Purview vocabulary is what those roles actually use, and SC-900 is the recognized on-ramp to SC-200 (Security Operations Analyst) and SC-300 (Identity and Access Administrator). For a compliance analyst, SC-900 is more relevant on day one than a general Azure overview.

One nuance: Microsoft retired the AI-900 exam on June 30, 2026, and replaced it with AI-901 (Exam AI-900, Microsoft Learn). Anyone who passed AI-900 keeps Microsoft Certified: Azure AI Fundamentals, because fundamentals certifications do not expire; new candidates must pass AI-901. The replacement is a meaningful shift, not a rename: AI-901 has just two domains — Identify AI concepts and capabilities (40–45%) and Implement AI solutions by using Microsoft Foundry (55–60%) — and Microsoft expects Python coding syntax knowledge and familiarity with Azure resources (Exam AI-901, Microsoft Learn). AI-901 is offered in 13 languages.

What These Certifications Do — And Don't — Unlock

Be realistic about the ceiling. Fundamentals certifications are literacy signals, not job-qualifying credentials.

What they do unlock: recruiter keyword matches, interview credibility for entry and non-engineering roles, a structured way to learn the vocabulary, a permanent line on your Microsoft transcript, and a confidence base for the role-based exams that target specific job roles. For career changers, students, and non-technical staff at Microsoft partners, that signal is worth far more than the ~$99 cost.

What they do not unlock: a cloud engineer, AI engineer, or security engineer job on their own. Hiring for those roles keys off role-based certifications such as AZ-104/AI-200/AZ-305 or SC-200/SC-300 plus hands-on evidence. Treat fundamentals as the on-ramp, not the destination — and pair the cert with a small portfolio project if you want it to convert to interviews.

The employment backdrop favors the stacking strategy: the U.S. Bureau of Labor Statistics projects employment of computer and information research scientists to grow 22% from 2025 to 2035, with a median annual wage of $140,300 in May 2025 (BLS Occupational Outlook Handbook). Those salaries attach to role-based skills; fundamentals get you onto the path, not to the number.

A 2026 Stacking Order That Actually Works

Most people should not stop at one. A practical, low-cost sequence:

1. AZ-900 first — platform foundation, widest optionality, easiest second-exam ramp.
2. AI-901 or SC-900 second — whichever matches your target role. AI-901 if you touch AI products; SC-900 if you touch security, identity, or compliance. Many candidates eventually do both because each is under $100 and never expires.
3. One role-based associate — AZ-104 or SC-200/SC-300, or a current role-based AI certification. Role-based certifications are built around specific job roles, and this step builds directly on the fundamentals layer.
4. Add a portfolio project — a small deployed Azure solution, an Azure OpenAI demo, or a documented security configuration. The cert plus the project is what converts to interviews.

The ROI logic is simple: under $300 total for three permanent fundamentals credentials buys you the vocabulary, the recruiter keywords, and the confidence to attempt the role-based exam that actually pays. Skipping AZ-900 to chase AI-901 or SC-900 first usually means relearning platform basics anyway.

Practice Beats Re-Reading For All Three

Whatever you take first, the highest-yield study method is the same: short concept review, then heavy timed practice until your reasoning is fast, not just your recall. These exams reward scenario discrimination — "which service fits this situation" — far more than memorized definitions. Drill until you can explain why each wrong answer is wrong in one sentence.

Start free, no signup, with full OpenExamPrep question banks for each exam:

• AZ-900: free practice questions and the AZ-900 study guide
• AI-901: free practice questions and the AI-901 study guide
• SC-900: free practice questions and the SC-900 study guide

For the full per-exam blueprint and study plan, use the dedicated OpenExamPrep exam guides for AZ-900, AI-901, and SC-900. For the deep career and ROI case on AI-900 by itself, see Is Azure AI-900 Worth It?.

Bottom Line

There is no universally "best" Microsoft fundamentals certification — there is a best first one for your situation. For the large majority, that is AZ-900: it builds the platform foundation the other two assume, fits the widest range of roles, and feeds the most role-based paths. Take AI-901 first only if your job is explicitly AI-centric, and SC-900 first only if you are heading into security, identity, or compliance. All three cost about the same, last forever, and are worth stacking over time. The expensive mistake is not picking the wrong one — it is stopping at fundamentals instead of using them as the on-ramp to a role-based certification that actually moves your career.

Official Sources Checked

• Microsoft Learn — Exam AI-900 (retirement to AI-901, skills measured): https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-900/
• Microsoft Learn — Exam AI-901 (two domains, Microsoft Foundry, Python): https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-901
• Microsoft Learn — Microsoft Certified: Azure Fundamentals (AZ-900, $99 USD, 45 min): https://learn.microsoft.com/en-us/credentials/certifications/azure-fundamentals/
• Microsoft Learn — AZ-900 study guide (July 20, 2026 refresh): https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-900
• Microsoft Learn — Microsoft Certified: SC-900 (skills measured): https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/
• Microsoft Learn — Credential expiration policy (fundamentals do not expire): https://learn.microsoft.com/en-us/credentials/support/credential-expiration-policy
• Microsoft Learn — Exam retake policy (24 hours, then 14 days, max 5/year): https://learn.microsoft.com/en-us/credentials/support/retake-policy
• Microsoft Learn — Student discounts (academic pricing): https://learn.microsoft.com/en-us/credentials/certifications/student-discounts
• U.S. Bureau of Labor Statistics — Computer and Information Research Scientists: https://www.bls.gov/ooh/computer-and-information-technology/computer-and-information-research-scientists.htm