AZ-900 Exam Guide 2026: Pass Azure Fundamentals Free (Complete Study Plan)

AZ-900 in 60 Seconds: What You're Actually Signing Up For

The Microsoft AZ-900 Azure Fundamentals exam is the gateway credential into the Microsoft cloud — and it's the single most-taken cloud certification on Earth. In 2026, Microsoft refined the skills outline again (minor — Microsoft Entra ID, Defender for Cloud, and Microsoft Purview got clearer coverage) but the three weighted domains and 700/1000 passing score remain unchanged.

More than 1.2 million professionals have earned the Azure Fundamentals credential since its launch, making AZ-900 the most-taken cloud exam in history. That volume creates a side benefit for you as a 2026 candidate: the study ecosystem is enormous, free resources are abundant, and the question bank is well-mapped by the community. The trade-off? Competition for entry-level Azure roles is also high — which is why this guide treats AZ-900 not as a finish line but as step 1 of a deliberate 2-3 exam stack that actually gets you hired.

Here's the exam at a glance — verified against the official Microsoft Learn certification page as of April 2026:

/practice/azure-az-900Practice questions with detailed explanations

---

What AZ-900 Actually Is (And Why It Still Matters in 2026)

AZ-900 is a conceptual exam. That word matters. You will not be asked to configure a VM in the portal. You will not write a Bicep template. You will not troubleshoot an NSG rule. Instead, you will be asked to explain why an organization would choose cloud, when to pick PaaS over IaaS, and what service solves a given business problem.

This makes AZ-900 uniquely valuable for:

• Career changers from non-IT fields (finance, healthcare, retail, education) who need a recruiter-recognized way to signal "I understand cloud."
• Sales, marketing, and procurement staff at Microsoft partners and enterprise customers — most Microsoft Partner Network tiers require a minimum number of Fundamentals-certified staff.
• Students and new grads building a resume before internships.
• Experienced IT pros entering the Azure ecosystem from AWS, GCP, or on-premises backgrounds who need to build Azure vocabulary fast.
• Executives and project managers who sign purchase orders for cloud services and want to understand what they're approving.

Why it's still worth it in 2026

Azure's enterprise footprint keeps expanding — Microsoft holds roughly 25% of global cloud market share (Q4 2025) and is the fastest-growing hyperscaler among the top three. Every Fortune 500 company uses Azure somewhere. AZ-900 is frequently the minimum listed credential on junior cloud and Microsoft-adjacent job postings. And because the credential never expires, it's a rare "one and done" investment.

---

Who Should (And Shouldn't) Take AZ-900

Take AZ-900 if you are:

• A complete beginner to cloud computing.
• In a non-technical role at a Microsoft-partnered organization.
• Planning to stack AZ-104, AI-900, DP-900, or SC-900 in the next 6-12 months.
• A student or recent grad looking for a resume differentiator.
• Switching clouds (e.g., moving from AWS to Azure) and need to learn Azure's vocabulary efficiently.

Skip AZ-900 if you are:

• An experienced cloud engineer with 2+ years of Azure hands-on work → go straight to AZ-104 (Associate).
• Already AWS Solutions Architect certified and familiar with cloud concepts → skip to AZ-104 or AZ-305.
• Looking for hands-on skills validation → AZ-900 is conceptual; AZ-104 is where hands-on skills get tested.

---

Prerequisites (None Required — But Some Background Helps)

Microsoft lists no formal prerequisites for AZ-900. Literally anyone can register and sit the exam. That said, candidates who pass on the first attempt typically have one or more of the following:

• Basic understanding of what a server is and why organizations run them.
• Familiarity with networking concepts at a high level (IP addresses, DNS, firewalls — not deep routing).
• Exposure to databases (SQL vs NoSQL conceptually).
• Comfort with reading Microsoft documentation — you'll be doing a lot of it.

If any of those feel foreign, add 1-2 weeks to your study timeline and consider starting with Microsoft's "Describe cloud concepts" free learning path on Microsoft Learn before the exam-specific content.

---

The 2026 AZ-900 Skills Outline (Verified Weights)

Microsoft's official "Study guide for Exam AZ-900" (Microsoft Learn, updated January 2026) defines three weighted domains. Memorize these weights — they tell you where to spend your time.

Below is the complete breakdown with real-world context, common exam traps, and study tips for each sub-skill.

Domain 1: Describe Cloud Concepts (25-30%)

This domain is cloud-vendor-agnostic — Microsoft wants to know you understand WHY organizations adopt cloud, not just Azure specifics.

1.1 Describe cloud computing

• Define cloud computing — on-demand, pay-as-you-go, broadly accessible, elastic, measured.
• Describe the shared responsibility model — who manages what in IaaS vs PaaS vs SaaS (ALWAYS customer: data + identity; ALWAYS Microsoft: physical hosts).
• Define cloud models — Public (Azure, shared, lowest cost), Private (single-tenant, highest control, highest cost), Hybrid (combines both, e.g., Azure Arc), Multi-cloud (multiple public providers).
• Identify use cases for each model.

Exam trap: Students confuse "Hybrid" (public + private) with "Multi-cloud" (two publics). Hybrid always involves at least one private/on-prem component.

1.2 Describe the benefits of using cloud services

• High availability (% uptime, redundancy within a region).
• Scalability — vertical (bigger VM) vs horizontal (more VMs).
• Reliability — continues functioning during failures, often across regions.
• Predictability — cost predictability (reservations) and performance predictability (dedicated hosts).
• Security and governance — Azure Policy, defense-in-depth.
• Manageability — templates, automation, monitoring.

Microsoft loves to test the CapEx vs OpEx distinction in this sub-skill. Expect at least one question asking which scenario represents each. Classic CapEx signals: "purchased servers," "5-year depreciation," "upfront datacenter build." Classic OpEx signals: "pay-as-you-go," "per-minute billing," "no upfront cost," "operational expense." When in doubt, if the spend happens once upfront → CapEx. If it scales with usage every month → OpEx.

High availability vs Reliability vs Disaster Recovery is another trio that trips candidates. High availability = within a region (99.9-99.99% SLA via availability zones). Reliability = the broader ability to continue operating during failures (includes HA plus graceful degradation). Disaster recovery = recovery after a catastrophic event, usually involving a secondary region (think Azure Site Recovery, geo-redundant storage).

1.3 Describe cloud service types

• IaaS (Infrastructure as a Service) — Azure Virtual Machines. You manage OS, runtime, apps, data.
• PaaS (Platform as a Service) — Azure App Service, Azure SQL Database. You manage apps and data only.
• SaaS (Software as a Service) — Microsoft 365, Dynamics 365. You manage data and user access only.
• Identify appropriate use cases for each — this is where most questions live.

Memory aid: Think "Pizza analogy." IaaS = you make pizza at home (buy oven, cheese, dough). PaaS = take-and-bake (Microsoft delivers prepped pizza, you bake). SaaS = pizza delivered hot.

Domain 2: Describe Azure Architecture and Services (35-40%)

This is the largest and most service-heavy domain. Expect the most questions here.

2.1 Describe the core architectural components of Azure

• Azure regions and region pairs (paired for disaster recovery — e.g., East US ↔ West US).
• Availability zones — physically separate datacenters within a region, for 99.99% SLA.
• Azure datacenters, sovereign regions (Azure Government, Azure China, Azure Germany).
• Resources and resource groups — logical containers; resources can only be in ONE resource group.
• Subscriptions — billing boundary.
• Management groups — hierarchical policy/RBAC inheritance above subscriptions.

2.2 Describe Azure compute and networking services

Compute:

• Azure Virtual Machines (VM) — IaaS, full OS control.
• Virtual Machine Scale Sets (VMSS) — auto-scaling groups of identical VMs.
• Azure App Service — PaaS web apps, managed OS.
• Azure Container Instances (ACI) — single containers, no orchestration.
• Azure Kubernetes Service (AKS) — managed Kubernetes for microservices.
• Azure Functions — serverless, event-driven, pay per execution.
• Azure Virtual Desktop (AVD) — cloud-hosted Windows desktops.

Networking:

• Virtual Network (VNet) — your private network in Azure.
• VPN Gateway — encrypted tunnel over internet from on-prem to Azure.
• ExpressRoute — private dedicated fiber link (bypasses internet; lower latency; higher cost).
• Azure DNS, Load Balancer, Application Gateway, Azure Front Door — traffic routing.

Exam trap: VPN Gateway uses the public internet (encrypted). ExpressRoute does NOT. Know which fits a "strict compliance, no-internet" scenario (ExpressRoute).

2.3 Describe Azure storage services

• Blob Storage — unstructured (images, video, backups). Access tiers: Hot / Cool / Cold / Archive.
• Azure Files — SMB/NFS file shares.
• Queue Storage — async messaging.
• Table Storage — simple NoSQL.
• Disk Storage — block storage for VMs (Standard HDD, Standard SSD, Premium SSD, Ultra Disk).
• Storage redundancy — LRS (1 datacenter), ZRS (3 zones), GRS (2 regions), RA-GRS (read-only secondary), GZRS (combines ZRS + GRS).

Exam trap: For the cheapest, still-readable storage of infrequently-accessed but quickly-retrievable data → Cool tier. For rarely-accessed data where retrieval can take hours → Archive tier.

Azure Cosmos DB vs Azure SQL Database is another Domain-2 favorite. Cosmos DB = globally distributed, multi-model (document, key-value, graph, column-family), millisecond latency, pay-per-throughput, NoSQL-first. Azure SQL = managed SQL Server in the cloud, relational, T-SQL-compatible, ideal for lift-and-shift of SQL Server workloads. If a scenario mentions "global distribution in 5 regions with <10ms latency," the answer is Cosmos DB every time. If it mentions "existing SQL Server database," the answer is Azure SQL.

Azure Database for MySQL / PostgreSQL / MariaDB are fully managed open-source database PaaS offerings — useful when a scenario mentions an existing MySQL or Postgres workload. Expect at least one question distinguishing these from Cosmos DB.

2.4 Describe Azure identity, access, and security

• Microsoft Entra ID (formerly Azure AD) — cloud identity directory.
• Microsoft Entra Domain Services — managed AD DS for legacy apps.
• Authentication vs authorization — authentication = who you are; authorization = what you can do.
• MFA (Multi-factor authentication), Passwordless (FIDO2, Windows Hello, Authenticator).
• External identities (B2B and B2C).
• Conditional Access — policies that require MFA if risky sign-in.
• Azure RBAC — role-based access control, scoped to management group / subscription / resource group / resource.
• Zero Trust model — never trust, always verify.
• Defense-in-depth — layered security (data, app, compute, network, perimeter, identity, physical).
• Microsoft Defender for Cloud — CSPM + workload protection.

Domain 3: Describe Azure Management and Governance (30-35%)

3.1 Describe cost management in Azure

• Factors affecting cost — resource type, region, usage, bandwidth, subscription type.
• Pricing Calculator — estimates cost of proposed resources BEFORE deployment.
• TCO Calculator — compares on-prem total cost vs Azure migration cost.
• Cost Management + Billing — analyzes actual spend AFTER deployment; alerts, budgets, recommendations.
• Tags for cost allocation — tag resources with department, project, environment.
• Purchase options — Pay-as-you-go, Reserved Instances (1- or 3-year commit, up to 72% discount), Azure Spot VMs (unused capacity, deep discount, can be evicted), Azure Hybrid Benefit (reuse Windows Server / SQL licenses), Dev/Test subscriptions.

Key distinction that appears every exam: Pricing Calculator = PROPOSED. TCO Calculator = ON-PREM vs AZURE comparison. Cost Management = ACTUAL spend analysis.

3.2 Describe features and tools for governance and compliance

• Microsoft Purview — unified data governance (data catalog, data map, compliance).
• Azure Policy — enforces organizational rules (allowed regions, SKUs, required tags). Non-compliant resources can be flagged or denied.
• Resource Locks — CanNotDelete or ReadOnly. Prevents accidental deletion/modification regardless of RBAC.
• Service Trust Portal — compliance reports (SOC 2, ISO 27001, HIPAA, etc.).

Exam trap: RBAC controls WHO can act. Azure Policy controls WHAT can be deployed. Resource Locks prevent DELETION/MODIFICATION. All three work together; they are NOT interchangeable.

3.3 Describe features and tools for managing and deploying Azure resources

• Azure Portal — web GUI.
• Azure Cloud Shell — browser-based shell (Bash or PowerShell) with pre-installed tools.
• Azure CLI — cross-platform command line (Bash-friendly).
• Azure PowerShell — PowerShell module (Windows-friendly, now cross-platform).
• Azure Arc — extends Azure management to on-prem, AWS, GCP resources.
• Infrastructure as Code (IaC) — ARM templates (JSON) and Bicep (domain-specific language, cleaner syntax). Bicep is the modern preferred tool.
• Azure Resource Manager (ARM) — the underlying deployment and management layer.

3.4 Describe monitoring tools in Azure

• Azure Advisor — recommendations across Reliability, Security, Performance, Cost, Operational Excellence, Sustainability.
• Azure Service Health — personalized Azure outages affecting YOUR resources.
• Azure Monitor — unified metrics + logs platform. Includes Log Analytics, Application Insights, Alerts, Workbooks.

Exam trap: Azure Status = global Azure health (public). Azure Service Health = impact on YOUR specific resources (personalized).

Missing-from-Competitors deep dive: SLA & Composite SLA math

Most 2026 AZ-900 blogs mention "know your SLAs" but skip the actual math. You will almost certainly face at least one question asking you to compute a composite SLA — so learn this cold.

The rules:

• Service SLA = Microsoft's uptime commitment for a single service (e.g., a standalone Azure VM with premium SSD = 99.9%; VM in Availability Set = 99.95%; VM in Availability Zones = 99.99%).
• Composite SLA = the realistic uptime of an application made of multiple dependent services. Multiply the individual SLAs.
• Adding dependent services in series LOWERS the composite SLA (more failure points).
• Adding redundant services in parallel RAISES the composite SLA (fewer single points of failure).

Worked example (classic AZ-900 question): A web app runs on App Service (99.95%) and talks to Azure SQL Database (99.99%). What is the composite SLA?

→ 0.9995 × 0.9999 = 0.99940 = 99.94% — LOWER than either service alone.

Downtime cheat sheet (per year):

Exam gotchas on SLA questions:

• SLAs do not cover customer configuration errors, customer application bugs, force majeure, or Preview features (zero SLA).
• The Free tier and Trial services have NO SLA.
• SLA credits are issued only when you file a claim — not automatically.

Missing-from-Competitors deep dive: Support plans & their SLAs

Microsoft explicitly includes support plans in the AZ-900 objectives, and competitors routinely skip the tier-by-tier distinctions. Here is what you need to memorize:

Exam trap: Only Standard and Professional Direct include 24×7 critical-case support. Basic and Developer do not. Memorize this trio.

Missing-from-Competitors deep dive: Azure Advisor's six pillars

Azure Advisor is a frequent AZ-900 question, and competitors often list only 3-4 categories. The complete 2026 list is six:

1. Reliability (formerly "High Availability")
2. Security
3. Performance
4. Cost
5. Operational Excellence
6. Sustainability (added 2023, now explicitly in the 2026 skills outline)

If a question lists five of these in the answer choices, "Sustainability" is the one most candidates forget — and it's often the trap.

Missing-from-Competitors deep dive: What is NOT on AZ-900

Save study time by knowing what Microsoft has explicitly excluded from the 2026 AZ-900 skills outline. Skim these, do not deep-dive them:

• IoT Hub, IoT Central, Digital Twins — covered on AZ-220, not AZ-900.
• Azure Synapse Analytics, Data Factory, HDInsight, Databricks — these are DP-900 territory.
• AI/ML beyond awareness (Cognitive Services details, Azure OpenAI, Machine Learning Studio) — AI-900 and AI-102.
• Specific Bicep/ARM syntax — you need to know what IaC is, not how to write a template.
• Network Security Groups (NSG), Application Security Groups, Firewall rules — AZ-104 territory. AZ-900 only asks about VPN vs ExpressRoute at a high level.
• Azure Blueprints — deprecated by Microsoft in 2026 (replaced by Template Specs + Deployment Stacks). Old study guides still mention it; new exams should not — but a rare lingering question may. If you see Blueprints as an option, it is usually a distractor.
• Key Vault specifics (secrets vs keys vs certificates deep-dive) — you only need to know Key Vault exists and what it's for.

Time saved here is time you can put into the high-weight Domain 2 and 3 services.

Missing-from-Competitors deep dive: The "Must-Know Services" priority tier

Not all Azure services get equal airtime on AZ-900. Prioritize like this:

Tier 1 — Master these (expect 2+ questions each):

• Azure Virtual Machines, App Service, Functions, AKS
• Virtual Network, VPN Gateway, ExpressRoute, Load Balancer
• Blob Storage (with tiers), Azure Files, Disk Storage, redundancy options
• Azure SQL Database, Cosmos DB
• Microsoft Entra ID, RBAC, Conditional Access, MFA
• Azure Policy, Resource Locks, Management Groups
• Pricing Calculator, TCO Calculator, Cost Management, Advisor

Tier 2 — Know what they do and when to pick them (expect 1 question each):

• Virtual Machine Scale Sets, Azure Container Instances, Azure Virtual Desktop
• Application Gateway, Azure Front Door, Azure DNS, Azure Bastion
• Queue Storage, Table Storage
• Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Purview
• Azure Arc, Azure Monitor, Log Analytics, Service Health

Tier 3 — One-line awareness only:

• Azure Database for MySQL/PostgreSQL, Key Vault, Azure Machine Learning, Azure DevOps, GitHub integration

The "Same Concept, Different Name" Trap

Microsoft has renamed several services in the past 18 months, and AZ-900 question authors slip both old and new names into distractors. Know these renames cold:

Seeing both names in a question's answer choices is a common distractor tactic. Memorize the new names — they are the correct ones.

---

Difficulty Analysis & Community-Reported Pass Metrics

Microsoft does not publish official AZ-900 pass rates. Anyone citing a specific Microsoft number is making it up. What we CAN reference:

• Reddit r/AzureCertification consensus: 70-80% first-attempt pass rate for candidates who complete Microsoft Learn plus 1-2 practice exams.
• CBT Nuggets (2025-2026 data): AZ-900 is "considered easier than most IT certifications" with 70%+ typical pass rate among their students.
• Community wisdom (Tutorials Dojo, ExamTopics): Candidates scoring 80%+ consistently on full-length practice tests pass the real exam ~95% of the time.

What actually determines difficulty?

The biggest predictor of passing is NOT how much content you study — it's how many full-length practice exams you take. Candidates who take 3+ timed practice exams and review every wrong answer pass at roughly double the rate of those who just read the study guide.

/practice/azure-az-900Practice questions with detailed explanations

---

Your 3-Week, 4-Week, and 6-Week Study Plans

Pick the track that matches your background. Each track totals the same ~40-60 hours of study — the difference is pace and intensity.

Track A: Fast-Track (2-3 weeks) — For existing IT / cloud pros

Track B: Standard (4 weeks) — For career changers with some IT exposure

Track C: Beginner (6 weeks) — For complete newcomers

---

Recommended Resources (Free-First Hierarchy)

Free (do these first)

1. Microsoft Learn — "Microsoft Azure Fundamentals" learning path — the official free path, ~10-14 hours, with interactive sandbox labs. learn.microsoft.com/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts
2. John Savill's AZ-900 Exam Cram (YouTube) — a ~3-hour deep review by a Microsoft MVP. Watch 2x if time permits.
3. Andrew Brown — freeCodeCamp AZ-900 Course (YouTube, ~3 hours) — solid alternative.
4. Microsoft Azure Virtual Training Days — free live event, earns you a FREE exam voucher.
5. Microsoft Exam Sandbox — free simulator showing the exact look/feel of the AZ-900 UI.

Paid (optional, nice-to-haves)

• Tutorials Dojo — AZ-900 Practice Exams (~$15) — widely considered the best practice question bank; 6 timed sets.
• Whizlabs — AZ-900 Practice Tests (~$15-20) — strong alternative, more questions.
• MeasureUp — AZ-900 Official Practice Test (~$89) — Microsoft-endorsed. Expensive but closest to the real exam format.
• Jim Cheshire — "Exam Ref AZ-900 Microsoft Azure Fundamentals" (book) — official Microsoft Press reference.

---

Exam-Day Strategy (Pearson VUE Online Proctored)

24 hours before

• Test your webcam + microphone with OnVUE system check.
• Clear your desk completely — no notes, no phone, no second monitor. No drinks. No earbuds.
• Have government-issued ID ready.
• Pick a quiet, well-lit private room. Bathrooms and kitchens may be required for the 360° room scan.

During the exam

• You have ~60 minutes for 40-60 questions — that's ~70 seconds per question. More than enough if you know the material.
• Flag and skip any question taking >90 seconds. Return at the end.
• Eliminate first — at least one wrong answer is usually obvious. Narrow to 2, then pick the most "Microsoft-aligned" answer (e.g., if Azure Policy and RBAC both seem plausible, re-read the question stem — it almost always hints at the right one).
• Watch for negatives — "which is NOT a characteristic" questions are trap-rich.
• Don't overthink simple questions. If IaaS vs PaaS is an obvious IaaS answer, pick it and move.
• Use the review screen at the end. You have time. Re-read flagged questions with fresh eyes. Change an answer only if you're confident — first-instinct answers are right more often than second-guesses.
• If a question contains a long scenario paragraph, read the actual question at the bottom FIRST, then scan the scenario for the specific details that matter. Don't read top-to-bottom; you'll waste time.

Question-type-specific tactics

• Multiple choice (single answer): Eliminate 2 quickly, then compare the final 2 against the exact question stem wording.
• Multi-select ("choose 2" or "choose 3"): Microsoft only awards credit for ALL correct selections — partial credit is rare. If you're unsure, prefer the obviously right answers over the speculative.
• Drag-and-drop / hot area: Move methodically. These are usually conceptually simple once you slow down.
• Yes/No (review series): 3-5 questions testing the same scenario. Each is scored independently — don't let one shake your confidence on the next.

Good news — no negative marking. AZ-900 does not penalize wrong answers. NEVER leave a question blank. Guess intelligently on every question you are unsure of. A 25% guess beats a guaranteed 0%.

Missing-from-Competitors deep dive: 3 real scenario questions, fully walked through

Most competitors tell you to "think like Microsoft" without showing you how. Here are three representative scenario stems and the exact reasoning that leads to the correct answer — the pattern you should apply to every scenario on exam day.

Scenario A — "A company needs to run a legacy Windows Server 2012 application that requires full OS access and cannot be refactored. Which Azure service is the best fit?"

• Eliminate PaaS (App Service abstracts the OS → wrong).
• Eliminate SaaS (Microsoft 365 is not a compute platform → wrong).
• Eliminate Functions (serverless, no OS → wrong).
• → Azure Virtual Machines (IaaS) — the only option that gives full OS control.

Scenario B — "A multinational retailer needs a globally distributed, multi-region database with single-digit millisecond read latency and 99.999% availability. Which database service fits?"

• Azure SQL Database — regional by default, geo-replication possible but not "globally distributed by design" → eliminate.
• Azure Database for PostgreSQL — relational, single region → eliminate.
• Azure Table Storage — no multi-region SLA of 99.999% → eliminate.
• → Azure Cosmos DB — the only globally distributed, multi-model DB that offers a 99.999% read SLA and single-digit millisecond latency in multiple regions.

Scenario C — "Your finance team wants to prevent any team member from accidentally deleting the production resource group, while still allowing them to modify resources inside it. Which Azure feature should you apply?"

• Azure Policy — enforces deployment rules, not delete prevention → eliminate.
• RBAC "Reader" role — prevents modification AND deletion (too restrictive) → eliminate.
• Azure Tags — organizational only, zero enforcement → eliminate.
• → Resource Lock (CanNotDelete) — specifically prevents deletion while still allowing modifications.

The pattern to internalize: identify the ONE constraint the scenario emphasizes (OS control, global distribution, delete prevention) and find the service whose primary purpose matches it. Distractors almost always mismatch on the constraint.

After submitting

• Score appears within minutes.
• Email and Microsoft Learn profile update within 24-48 hours.
• If you passed, your digital badge is available on Credly.

---

Cost, Retake, Vouchers & Discounts

Standard pricing (US, 2026)

• $99 USD for AZ-900 (varies by country).
• Prices increase with tax in some jurisdictions.
• No additional scheduling or proctoring fee.

How to pay less (or pay nothing)

Retake policy

• Attempt 2: 24-hour wait after failure.
• Attempt 3: 14-day wait.
• Attempts 4-5: 14-day wait each.
• Maximum 5 attempts per 12-month period.
• Each retake requires another full fee — so voucher hunting matters.

Missing-from-Competitors deep dive: What to do if you fail

Most guides stop at "study more and retake." Here is a more useful playbook if you see the red "Did not pass" screen:

1. Screenshot your detailed score report immediately. Microsoft shows a per-domain breakdown (e.g., "Cloud Concepts 650, Architecture 720, Management 680"). Low on one specific domain = targeted restudy. Low on all three = you need more practice exams, not more content.
2. Wait at least 7-10 days before the retake, even though the 24-hour rule allows sooner. Candidates who retake immediately usually repeat the same mistakes.
3. Change your practice bank. If you used Tutorials Dojo and failed, try Whizlabs or MeasureUp. Seeing questions in a new voice rewires your scenario recognition.
4. Review every flagged wrong answer with AI. Ask an AI to explain why the wrong answer is wrong, not just why the right one is right. Most fail reasons come from misunderstanding a distractor, not from not knowing the correct answer.
5. Book the retake with a date — if you leave it open, you'll drift for months. A date forces action.
6. Use Exam Replay if you think you'll need a third attempt. Microsoft sells a discounted "Exam + 1 retake" bundle — cheaper than buying both separately.

---

Salary & Career Reality Check

Let's be honest: AZ-900 alone will not land you a $130,000 cloud engineering job. Recruiters treat it as a signal, not a qualification.

Realistic outcomes with AZ-900 + hands-on projects

The pattern: AZ-900 opens doors to interviews. AZ-104 (Azure Administrator) is what actually lands the cloud engineer job. Plan on the two-exam stack if cloud engineering is your goal.

---

Common Mistakes — Why Candidates Fail

1. Skipping practice exams. By far the #1 reason. Reading the study guide is not enough — you must train for the question format.
2. Over-studying one domain. Candidates love cloud concepts (Domain 1) because it's intuitive. They skim Domain 3 (governance) because it's boring. Domain 3 is 30-35% of the score.
3. Memorizing without understanding. Microsoft is famous for rephrasing the same concept 10 ways. If you only memorize definitions, you'll miss scenario questions.
4. Confusing similar services. Azure Policy vs RBAC vs Resource Locks. TCO Calculator vs Pricing Calculator vs Cost Management. VPN Gateway vs ExpressRoute. These trios are exam bait.
5. Poor time-reading of negative questions. "Which of the following is NOT…" trips tired candidates. Read twice.
6. Relying only on old YouTube content. Microsoft renamed Azure Active Directory → Microsoft Entra ID and the Defender rebrand continues. Content from before 2024 may use outdated names.
7. Skipping the Microsoft Exam Sandbox. Free and 5 minutes. Shows you the exact UI you'll see on exam day — drag-and-drop, hot-area, and review flag behaviors. Candidates who skip this waste 2-3 minutes on exam day figuring out the interface.
8. Scheduling too soon. Booking the exam 3 days out then cramming produces failures. Book AFTER you consistently score 85%+ on two different practice exam providers, not before.
9. Using ONLY brain-dump / leaked-question sites. ExamTopics and similar sites sometimes publish questions that are illegal to use (Microsoft NDA violation). Beyond the ethics, the "correct" answers on these sites are often wrong. Use them to understand question STYLE only — not as your primary answer source.
10. Underestimating scenario-based questions. AZ-900 is "fundamentals," but 30-40% of questions are scenario-framed ("A company needs X. Which service should they choose?"). Rote memorization of definitions doesn't answer scenarios — you need to understand WHEN each service applies.

---

AZ-900 vs AWS Cloud Practitioner vs Google Cloud Digital Leader

A gap most competitors ignore — here's a real side-by-side comparison of the three major foundational cloud certs for 2026.

Strategic verdict: If you're undecided, AZ-900 has the strongest ROI because it never expires. Doing AZ-900 + AWS CCP for ~$200 total is a multi-cloud resume signal that beats either alone.

When each is the obviously right choice

• Choose AZ-900 first if: you work at (or target) a Microsoft shop, Fortune 500, government, healthcare, finance, or large enterprise. You use Microsoft 365 daily. Your region has strong Microsoft partner presence.
• Choose AWS CCP first if: you target tech startups, digital-native companies, media, or e-commerce. You work with Linux/DevOps. You want the largest volume of cloud job listings globally (AWS still leads in raw job count).
• Choose GCP Cloud Digital Leader first if: you're already in a Google-native organization or focused on data/AI/ML roles where BigQuery and Vertex AI dominate.
• Do both AZ-900 + AWS CCP if: you're a career changer with 3-4 free weeks, because the combined signal vastly outpaces either alone and both exams reinforce the same cloud fundamentals at slightly different angles.

---

Next Steps After AZ-900

Your cert is in hand — now what? Here are the natural next-exam paths ordered by popularity:

Recommended stack for cloud engineering: AZ-900 → AZ-104 → AZ-305 (Solutions Architect Expert).

Recommended stack for AI/data careers: AZ-900 → AI-900 → AI-102 (AI Engineer Associate) OR DP-900 → DP-203.

Recommended stack for security careers: AZ-900 → SC-900 → SC-200 or AZ-500.

The 90-Day Post-AZ-900 Action Plan

Passing AZ-900 is the easy part. Converting it into a job offer takes deliberate work in the following 90 days:

Days 1-15 — Hands-on labs. Spin up an Azure Free Account (USD 200 credit for 30 days + 12 months of free tier services). Complete 5 hands-on labs: (1) deploy an Ubuntu VM and SSH in, (2) create a storage account and upload to Blob, (3) build a VNet with two subnets and a peering, (4) deploy an App Service Web App, (5) create a cost alert and a tag policy. Document each with screenshots in a public GitHub repo. This portfolio is what separates you from 90% of other AZ-900 holders.

Days 16-45 — Start AZ-104. The Azure Administrator exam is where "I have AZ-900" becomes "I can actually do the job." Budget 60-80 hours of study. Microsoft Learn has a complete free path; Tutorials Dojo has excellent AZ-104 practice exams.

Days 46-75 — Apply + refine. Start applying for junior cloud roles. Use the interviews (including rejections) to identify knowledge gaps. Revisit weak areas.

Days 76-90 — Take AZ-104. With 60+ days of hands-on lab work behind you, AZ-104 is achievable. The AZ-900 + AZ-104 combo is the standard minimum for a $75K-100K junior Azure role.

---

Final Pre-Exam Checklist

• Completed all 3 Microsoft Learn paths → check.
• Watched John Savill's AZ-900 Cram (at least once) → check.
• Took at least 2 full-length timed practice exams, scored ≥80% → check.
• Reviewed every wrong answer and understood why the right answer is right → check.
• Booked exam through Pearson VUE or Certiport → check.
• Tested webcam/mic 24 hours before → check.
• Government ID ready → check.
• Ready to sit? → Go pass it.

/practice/azure-az-900Practice questions with detailed explanations

---

Official Sources Verified (April 2026)

• Microsoft Learn — Azure Fundamentals Certification overview: https://learn.microsoft.com/en-us/credentials/certifications/azure-fundamentals/
• Microsoft Learn — AZ-900 Study Guide (2026): https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-900
• Microsoft Learn — Free Learning Path: https://learn.microsoft.com/en-us/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts
• Microsoft Exam Retake Policy: https://learn.microsoft.com/en-us/credentials/certifications/exam-retake-policy
• Microsoft Virtual Training Days: https://events.microsoft.com/ (search "Azure Fundamentals")
• Pearson VUE OnVUE Online Proctored: https://home.pearsonvue.com/microsoft/onvue
• Glassdoor — Cloud Engineer Azure salary data (2026)
• Reddit r/AzureCertification — community pass-rate discussions

---

Last verified against Microsoft Learn: April 21, 2026. Microsoft updates the AZ-900 skills outline periodically without notice. Always check the official certification page before scheduling.