# AZ-900 vs AI-901 vs SC-900: Which Microsoft Fundamentals First in 2026

> A decision guide to choosing your first Microsoft fundamentals certification in 2026 by career goal and background: AZ-900 vs AI-900 (now AI-901) vs SC-900, what each proves, stacking order, and what they do and don't unlock.

- Canonical: https://open-exam-prep.com/blog/az-900-vs-ai-900-vs-sc-900-which-microsoft-fundamentals-first-2026
- Published: 2026-05-15
- Updated: 2026-10-26
- Author: Ran Chen, EA, CFP®
- Publisher: OpenExamPrep, free exam prep

## Key facts

- AZ-900, AI-901, and SC-900 are beginner-level Microsoft fundamentals exams, and each costs $99 USD in the United States. Source: Microsoft Learn.
- Microsoft fundamentals certifications do not expire and require no renewal, unlike role-based associate and expert certifications. Source: Microsoft credential expiration policy.
- Microsoft fundamentals exams have 45 minutes of exam time, and Microsoft technical exams require a scaled 700 out of 1,000 to pass. Source: Microsoft Learn.
- The AZ-900 skills outline weights Azure architecture and services at 35-40%, the largest of its three domains. Source: Microsoft Learn AZ-900 study guide.
- The AZ-900 skills outline was refreshed on July 20, 2026 with minor changes, and its three domain weightings stayed the same. Source: Microsoft Learn AZ-900 study guide.
- Microsoft retired the AI-900 exam on June 30, 2026; candidates must now pass AI-901 to earn Microsoft Certified: Azure AI Fundamentals. Source: Microsoft Learn Exam AI-900.
- AI-901 has two domains and weights Implement AI solutions by using Microsoft Foundry at 55-60%; Microsoft expects Python coding syntax knowledge. Source: Microsoft Learn Exam AI-901.
- AI-901 is offered in 13 languages, including English, Japanese, Chinese, Korean, Spanish, German, French, and Portuguese. Source: Microsoft Learn Exam AI-901.
- SC-900 measures four areas: security, compliance, and identity concepts plus the capabilities of Microsoft Entra, security solutions, and compliance solutions. Source: Microsoft Learn SC-900.
- Microsoft's retake policy allows a retake 24 hours after a failed attempt, then 14-day waits, up to five attempts per year. Source: Microsoft Learn retake policy.

## Take AZ-900 First Unless You Have A Specific Reason Not To

If you only want one answer: for almost everyone starting in the Microsoft cloud in 2026, **AZ-900 (Azure Fundamentals) is the right first certification**. It teaches the platform vocabulary — subscriptions, regions, compute, storage, networking, identity, pricing, governance — that Azure AI Fundamentals and SC-900 both quietly assume you already understand. (Microsoft retired the AI-900 exam on June 30, 2026; Azure AI Fundamentals now requires **AI-901**.) The two common exceptions: take **AI-901 first** if your job or target role is explicitly about AI products and you have no near-term cloud-infrastructure path, and take **SC-900 first** if you are moving into a security, compliance, identity, or GRC role where Microsoft Entra and Microsoft Purview are the daily tools.

All three are beginner-level, ~\$99 USD in the United States, 45 minutes of exam time, 700/1000 to pass, and **none of them expire** — Microsoft fundamentals certifications are permanent and do not require renewal ([Microsoft credential expiration policy](https://learn.microsoft.com/en-us/credentials/support/credential-expiration-policy)). So the real decision is not "which is best" — they all hold lifetime value for under \$100. The decision is **sequence**: which one builds the foundation for your next move, and which one you can safely take second or skip.

This post is a decision guide, not an exam walkthrough. For the full blueprint, cost, format, and study plan of each exam, use the dedicated OpenExamPrep guides linked throughout. If you want the single-cert career and ROI breakdown for AI-900 specifically — is it worth it, what it pays, what comes next — read [Is Azure AI-900 Worth It? Career Value and Next Steps](https://open-exam-prep.com/blog/is-azure-ai-900-worth-it-career-value-next-steps-2026).

## The 30-Second Decision Tree

Match your situation to the strongest first pick. These are starting points, not rules — read the per-cert sections before you book.

| Your situation | Take this first | Then |
|---|---|---|
| New to IT / career changer / unsure | **AZ-900** | AI-901 or SC-900, then a role-based associate |
| Building toward Azure admin, dev, or architect (AZ-104, AI-200, AZ-305) | **AZ-900** | Skip straight to the role-based exam |
| Sales, marketing, procurement, or PM at a Microsoft partner | **AZ-900** | AI-901 if you sell or scope AI |
| Product/analyst/consultant role centered on AI features | **AI-901** | AZ-900 for platform context, then a role-based AI certification if you go technical |
| Moving into security, identity, compliance, SOC, or GRC | **SC-900** | AZ-900 for platform context, then SC-200/SC-300 |
| Already working in Azure day to day | **Skip fundamentals** | Go directly to the relevant associate cert |
| Student building a first résumé | **AZ-900** | Add AI-901 or SC-900 as a cheap second signal |

The single most common mistake is treating these as a ranked competition. They are not substitutes. They cover different surfaces of the Microsoft cloud, and most serious candidates eventually hold two of the three. The question this post answers is **which one is the highest-leverage first step for you**, and what each one realistically does and does not unlock.

## What Each Certification Actually Proves

The Microsoft Learn exam pages define exactly what each exam measures. Reading the scope side by side is the fastest way to see why these are not interchangeable.

### AZ-900 — Azure Fundamentals (the platform)

The [AZ-900 study guide](https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-900) covers three domains: **Describe cloud concepts (25–30%)**, **Describe Azure architecture and services (35–40%)**, and **Describe Azure management and governance (30–35%)**. In plain terms, AZ-900 proves you understand what the cloud is (IaaS/PaaS/SaaS, CapEx vs OpEx, the shared responsibility model), the core Azure building blocks (VMs, App Service, storage, virtual networks, Entra ID), and how Azure is paid for and governed (Cost Management, RBAC, Azure Policy, locks, Monitor). It is the only one of the three that gives you the whole platform map. The current objectives took effect July 20, 2026, in a **minor refresh** affecting the compute-and-networking, resource-deployment, and monitoring sub-domains, with the three domain weightings unchanged ([AZ-900 study guide, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-900)).

### AI-901 — Azure AI Fundamentals (the AI layer)

Microsoft retired the AI-900 exam on June 30, 2026; candidates must now pass **AI-901** to earn Microsoft Certified: Azure AI Fundamentals ([Exam AI-900, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-900/)). AI-901 (English version updated April 15, 2026) measures two areas: **Identify AI concepts and capabilities (40–45%)** and **Implement AI solutions by using Microsoft Foundry (55–60%)**, and Microsoft expects knowledge of Python coding syntax and familiarity with Azure resources ([Exam AI-901, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-901)). It is narrow and deep on one slice — AI solutions on Azure — and assumes basic cloud literacy rather than teaching the platform itself.

### SC-900 — Security, Compliance, and Identity Fundamentals (the trust layer)

SC-900 measures four areas: **concepts of security, compliance, and identity**, **capabilities of Microsoft Entra**, **capabilities of Microsoft security solutions**, and **capabilities of Microsoft compliance solutions** ([Microsoft Certified: SC-900, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/)). It proves you understand identity (Entra ID, conditional access, zero trust), Microsoft Defender, Microsoft Sentinel, and Microsoft Purview at a conceptual level — the backbone of any security, identity, or compliance conversation in the Microsoft ecosystem.

The overlap is small and deliberate: AZ-900 touches identity and governance lightly, AI-901 covers AI concepts and solutions, and SC-900 goes deep on the security and identity stack. None of the three can substitute for another.

## Difficulty And Cost Are Nearly Identical — Sequence Is The Real Variable

Because the format and price are the same, difficulty differences come from your background, not the exams themselves.

| Factor | AZ-900 | AI-901 | SC-900 |
|---|---|---|---|
| Level | Beginner | Beginner | Beginner |
| US price | ~\$99 USD | ~\$99 USD | ~\$99 USD |
| Exam time | 45 min | 45 min | 45 min |
| Passing score | 700/1000 | 700/1000 | 700/1000 |
| Expires? | No | No | No |
| Prerequisites | None | None (Python basics expected) | None (Azure/M365 awareness helps) |
| Hardest for | People who skip the governance domain | People without Python basics | People who confuse Entra/Defender/Purview |

Price is set by the country or region where the exam is proctored and excludes promotions and taxes; confirm the current figure with Microsoft before you register, since prices change without notice. Two ways to manage the cost: students can get [academic pricing](https://learn.microsoft.com/en-us/credentials/certifications/student-discounts) in most countries/regions (except India and China) after verifying student status, and the [Exam Replay](https://learn.microsoft.com/en-us/credentials/certifications/deals) offer pairs a retake with the original attempt — useful if you want insurance on a first try. The practical takeaway: none of these is meaningfully "harder" — the difficulty is whichever one tests material you have the least exposure to. That is exactly why **sequence beats selection**. Taking AZ-900 first makes AI-901 and SC-900 easier, because both lean on platform vocabulary AZ-900 teaches. The reverse is not true.

On retakes, all three follow Microsoft's standard fundamentals/role-based retake policy: if you fail, you can retake after **24 hours**, then a **14-day wait applies between every subsequent attempt**, with a maximum of **five attempts in any 12-month window** ([Microsoft retake policy](https://learn.microsoft.com/en-us/credentials/support/retake-policy)). You cannot retake an exam you have already passed, and each attempt is paid.

## Why AZ-900 Is The Default First Pick

Three reasons AZ-900 is the safest first certification for most people in 2026:

**It is the platform context the other two assume.** AI-901 covers implementing AI solutions with Microsoft Foundry; SC-900 talks about securing Azure and Microsoft 365 resources. Both make far more sense after you understand subscriptions, resource groups, regions, and the shared responsibility model — the core of AZ-900. Microsoft itself frames Azure Fundamentals as "a common starting point in a journey towards a career in Azure" ([Microsoft Certified: Azure Fundamentals](https://learn.microsoft.com/en-us/credentials/certifications/azure-fundamentals/)).

**It has the widest audience fit.** AZ-900 has no prerequisites and no coding requirement, so it suits IT beginners, students, and many non-technical staff who work with Azure teams. If you are not yet sure which direction you are heading, AZ-900 keeps every door open.

**It feeds the most role-based paths.** AZ-900 is the conceptual on-ramp to AZ-104 (Administrator), AI-200 (Azure AI Cloud Developer, which replaced AZ-204 on July 31, 2026), AZ-305 (Solutions Architect), and the data and security tracks. Azure AI Fundamentals leads toward role-based AI certifications; SC-900 mainly feeds SC-200/SC-300. AZ-900 gives you the most optionality per dollar.

The honest caveat: if you already work in Azure daily, **none** of the fundamentals exams is the best use of your money — skip to the role-based associate certification, which carries far more hiring weight (and unlike fundamentals, those do expire and renew annually for free).

## When To Take AI-901 Or SC-900 First Instead

The default is not the rule. Pick AI-901 first when your target role is explicitly AI-centric — a product manager owning an AI feature, a consultant scoping AI projects, a business analyst evaluating Azure OpenAI, or a non-engineer who needs AI literacy fast and has no near-term infrastructure path. In that case the AI content is directly relevant to your job *today*, and platform depth can wait, as long as you are comfortable with the Python basics AI-901 expects.

Pick SC-900 first when you are entering or pivoting into security, identity, compliance, SOC analysis, or GRC. The Entra, Defender, Sentinel, and Purview vocabulary is what those roles actually use, and SC-900 is the recognized on-ramp to SC-200 (Security Operations Analyst) and SC-300 (Identity and Access Administrator). For a compliance analyst, SC-900 is more relevant on day one than a general Azure overview.

One nuance: Microsoft retired **the AI-900 exam on June 30, 2026, and replaced it with AI-901** ([Exam AI-900, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-900/)). Anyone who passed AI-900 keeps Microsoft Certified: Azure AI Fundamentals, because fundamentals certifications do not expire; new candidates must pass AI-901. The replacement is a meaningful shift, not a rename: AI-901 has just two domains — **Identify AI concepts and capabilities (40–45%)** and **Implement AI solutions by using Microsoft Foundry (55–60%)** — and Microsoft expects Python coding syntax knowledge and familiarity with Azure resources ([Exam AI-901, Microsoft Learn](https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-901)). AI-901 is offered in 13 languages.

## What These Certifications Do — And Don't — Unlock

Be realistic about the ceiling. Fundamentals certifications are **literacy signals**, not job-qualifying credentials.

**What they do unlock:** recruiter keyword matches, interview credibility for entry and non-engineering roles, a structured way to learn the vocabulary, a permanent line on your Microsoft transcript, and a confidence base for the role-based exams that target specific job roles. For career changers, students, and non-technical staff at Microsoft partners, that signal is worth far more than the ~\$99 cost.

**What they do not unlock:** a cloud engineer, AI engineer, or security engineer job on their own. Hiring for those roles keys off role-based certifications such as AZ-104/AI-200/AZ-305 or SC-200/SC-300 plus hands-on evidence. Treat fundamentals as the on-ramp, not the destination — and pair the cert with a small portfolio project if you want it to convert to interviews.

The employment backdrop favors the stacking strategy: the U.S. Bureau of Labor Statistics projects employment of computer and information research scientists to grow 22% from 2025 to 2035, with a median annual wage of \$140,300 in May 2025 ([BLS Occupational Outlook Handbook](https://www.bls.gov/ooh/computer-and-information-technology/computer-and-information-research-scientists.htm)). Those salaries attach to role-based skills; fundamentals get you onto the path, not to the number.

## A 2026 Stacking Order That Actually Works

Most people should not stop at one. A practical, low-cost sequence:

1. **AZ-900 first** — platform foundation, widest optionality, easiest second-exam ramp.
2. **AI-901 or SC-900 second** — whichever matches your target role. AI-901 if you touch AI products; SC-900 if you touch security, identity, or compliance. Many candidates eventually do both because each is under \$100 and never expires.
3. **One role-based associate** — AZ-104 or SC-200/SC-300, or a current role-based AI certification. Role-based certifications are built around specific job roles, and this step builds directly on the fundamentals layer.
4. **Add a portfolio project** — a small deployed Azure solution, an Azure OpenAI demo, or a documented security configuration. The cert plus the project is what converts to interviews.

The ROI logic is simple: under \$300 total for three permanent fundamentals credentials buys you the vocabulary, the recruiter keywords, and the confidence to attempt the role-based exam that actually pays. Skipping AZ-900 to chase AI-901 or SC-900 first usually means relearning platform basics anyway.

## Practice Beats Re-Reading For All Three

Whatever you take first, the highest-yield study method is the same: short concept review, then heavy timed practice until your *reasoning* is fast, not just your recall. These exams reward scenario discrimination — "which service fits this situation" — far more than memorized definitions. Drill until you can explain why each wrong answer is wrong in one sentence.

Start free, no signup, with full OpenExamPrep question banks for each exam:

- AZ-900: [free practice questions](https://open-exam-prep.com/practice/azure-az-900) and the [AZ-900 study guide](https://open-exam-prep.com/study-guides/azure-az-900)
- AI-901: [free practice questions](https://open-exam-prep.com/practice/azure-ai-901) and the [AI-901 study guide](https://open-exam-prep.com/study-guides/azure-ai-901)
- SC-900: [free practice questions](https://open-exam-prep.com/practice/azure-sc-900) and the [SC-900 study guide](https://open-exam-prep.com/study-guides/azure-sc-900)

For the full per-exam blueprint and study plan, use the dedicated OpenExamPrep exam guides for [AZ-900](https://open-exam-prep.com/blog/azure-az-900-exam-guide-2026), [AI-901](https://open-exam-prep.com/blog/microsoft-azure-ai-fundamentals-ai-901-exam-guide-2026), and [SC-900](https://open-exam-prep.com/blog/azure-sc-900-exam-guide-2026). For the deep career and ROI case on AI-900 by itself, see [Is Azure AI-900 Worth It?](https://open-exam-prep.com/blog/is-azure-ai-900-worth-it-career-value-next-steps-2026).

## Bottom Line

There is no universally "best" Microsoft fundamentals certification — there is a best *first* one for your situation. For the large majority, that is AZ-900: it builds the platform foundation the other two assume, fits the widest range of roles, and feeds the most role-based paths. Take AI-901 first only if your job is explicitly AI-centric, and SC-900 first only if you are heading into security, identity, or compliance. All three cost about the same, last forever, and are worth stacking over time. The expensive mistake is not picking the wrong one — it is stopping at fundamentals instead of using them as the on-ramp to a role-based certification that actually moves your career.

## Official Sources Checked

- Microsoft Learn — Exam AI-900 (retirement to AI-901, skills measured): https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-900/
- Microsoft Learn — Exam AI-901 (two domains, Microsoft Foundry, Python): https://learn.microsoft.com/en-us/credentials/certifications/exams/ai-901
- Microsoft Learn — Microsoft Certified: Azure Fundamentals (AZ-900, \$99 USD, 45 min): https://learn.microsoft.com/en-us/credentials/certifications/azure-fundamentals/
- Microsoft Learn — AZ-900 study guide (July 20, 2026 refresh): https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-900
- Microsoft Learn — Microsoft Certified: SC-900 (skills measured): https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/
- Microsoft Learn — Credential expiration policy (fundamentals do not expire): https://learn.microsoft.com/en-us/credentials/support/credential-expiration-policy
- Microsoft Learn — Exam retake policy (24 hours, then 14 days, max 5/year): https://learn.microsoft.com/en-us/credentials/support/retake-policy
- Microsoft Learn — Student discounts (academic pricing): https://learn.microsoft.com/en-us/credentials/certifications/student-discounts
- U.S. Bureau of Labor Statistics — Computer and Information Research Scientists: https://www.bls.gov/ooh/computer-and-information-technology/computer-and-information-research-scientists.htm

## FAQ

### Which Microsoft fundamentals certification should I take first in 2026?

For most people, AZ-900 (Azure Fundamentals) is the right first certification. It teaches the platform vocabulary — subscriptions, regions, compute, storage, networking, identity, pricing, and governance — that Azure AI Fundamentals (AI-901, which replaced AI-900) and SC-900 both assume you already understand. Take AI-901 first only if your role is explicitly AI-centric and you have no near-term cloud-infrastructure path. Take SC-900 first only if you are moving into security, identity, compliance, SOC, or GRC work where Microsoft Entra and Purview are your daily tools. All three are beginner-level, about $99 USD, and never expire, so the real decision is sequence, not which one is best.

### Is AZ-900 harder than AI-901 or SC-900?

No exam is meaningfully harder by design — all three are beginner-level, 45 minutes, and require 700/1000 to pass. The difficulty you experience comes from your background, not the exam. AZ-900 is hardest for people who skip the management and governance domain (30-35%). AI-901 is hardest for people without Python basics, because Microsoft expects Python coding syntax knowledge and weights Implement AI solutions by using Microsoft Foundry at 55-60%. SC-900 is hardest when you confuse Microsoft Entra, Defender, Sentinel, and Purview. Taking AZ-900 first generally makes the other two easier because both lean on platform vocabulary that AZ-900 teaches.

### Do AZ-900, AI-900, or SC-900 expire?

No. Microsoft fundamentals certifications do not expire and have no renewal requirement, so AZ-900, AI-900, and SC-900 stay valid permanently on your Microsoft Learn transcript. This is different from role-based associate, expert, and specialty certifications, which expire one year after you earn them and must be renewed through a free, unproctored, open-book online assessment on Microsoft Learn. The permanence is a major reason fundamentals certifications are high value for their roughly $99 cost — you pay once and the credential never lapses.

### Can I skip the fundamentals certifications entirely?

Yes, if you already work in Azure day to day. Fundamentals exams prove baseline literacy; they do not carry strong hiring weight on their own. If you have hands-on Azure experience, your money is better spent going straight to a role-based associate certification — AZ-104 (Administrator), AI-200 (Azure AI Cloud Developer, which replaced AZ-204), or SC-200/SC-300 (Security). Fundamentals are most valuable for career changers, students, non-technical staff at Microsoft partners, and anyone who wants a structured way to learn the vocabulary before attempting a role-based exam.

### What jobs do AZ-900, AI-900, or SC-900 qualify me for?

None of them qualify you for an engineering job on their own. They are literacy signals, not job-ready credentials. They unlock recruiter keyword matches, interview credibility for entry-level and non-engineering roles, and a confidence base for the role-based exams that target specific job roles. To get a cloud, AI, or security engineering role you need a role-based certification (AZ-104, SC-200, etc.) plus hands-on evidence such as a portfolio project.

### Should I take all three Microsoft fundamentals certifications?

Many serious candidates eventually hold two of the three, and taking all three is reasonable because each costs about $99 and never expires — under $300 total for three permanent credentials. A practical order: AZ-900 first for platform foundation, then AI-901 or SC-900 (whichever matches your role), then one role-based associate certification. Stacking is worthwhile, but do not stop at fundamentals. Role-based certifications are the ones built around specific job roles; fundamentals are the on-ramp.

### Was AI-900 retired, and does that change which one to take first?

Yes. Microsoft retired the AI-900 exam on June 30, 2026 and replaced it with AI-901; candidates must now pass AI-901 to earn Microsoft Certified: Azure AI Fundamentals. Anyone who already passed AI-900 keeps the credential, because fundamentals certifications do not expire. AI-901 is a bigger shift than a rename: it has two domains, weights Implement AI solutions by using Microsoft Foundry at 55-60%, and expects Python coding syntax knowledge. It is offered in 13 languages. It does not change the default recommendation to take AZ-900 first for most people.

### Which fundamentals cert is best for a non-technical or career-change role?

AZ-900 is the best general choice for non-technical and career-change candidates because Microsoft calls it a common starting point in a journey towards a career in Azure, it has no prerequisites, and it keeps the most career paths open. Choose AI-901 instead if your target role is centered on building or evaluating AI solutions, keeping in mind that it expects Python basics. Choose SC-900 if you are entering security, identity, or compliance. In all cases, pair the certification with a small portfolio project so it converts to interviews rather than just sitting on a résumé.

### How long does it take to study for each of these exams?

Microsoft publishes no study-hour estimates. Plan by the outlines: AZ-900 and SC-900 test concepts, while AI-901 puts 55-60% of the exam on implementing AI solutions in Microsoft Foundry and expects knowledge of Python, so allow extra hands-on time for it. The single biggest accelerator for all three is practice questions under time pressure rather than re-watching videos: drill scenario discrimination until you can explain why each wrong answer is wrong in one sentence, because these exams reward reasoning speed over memorized definitions.

### Where can I practice for AZ-900, AI-901, and SC-900 for free?

OpenExamPrep provides free, no-signup practice question banks and study guides for all three exams: AZ-900 at /practice/azure-az-900, AI-901 at /practice/azure-ai-901, and SC-900 at /practice/azure-sc-900, each paired with a structured study guide. Use short concept review followed by heavy timed practice. For the full blueprint of each exam, use the dedicated OpenExamPrep exam guides, and for the deep career and ROI analysis of AI-900 specifically, read the standalone Is Azure AI-900 Worth It guide.

## Study free on OpenExamPrep

- Azure AZ-900: [Practice questions](https://open-exam-prep.com/practice/azure-az-900) · [Study guide](https://open-exam-prep.com/study-guides/azure-az-900) · [Flashcards](https://open-exam-prep.com/flashcards/azure-az-900) · [Cheat sheet](https://open-exam-prep.com/cheat-sheet/azure-az-900)