Complete AZ-900 Guide: Pass the Azure Fundamentals Certification

AZ-900 Microsoft Azure Fundamentals is the entry-level certification into the Azure ecosystem. Approachable for beginners as well as for professionals who want to validate their basics, it is the first stepping stone to advanced certifications such as AZ-104 or AZ-305. This guide gives you everything you need to prepare effectively.

AZ-900 exam overview

The AZ-900 exam is designed to validate a foundational understanding of cloud services and Microsoft Azure. It does not require any prior technical experience, making it the ideal entry point for:

• Non-technical professionals (HR, finance, sales) working in cloud-driven environments
• IT beginners who want to start a cloud journey
• Experienced practitioners looking to formalize their Azure knowledge

Core cloud concepts

The first part of the exam (about 25-30% of the score) covers general cloud computing concepts. Key notions to master:

Deployment models

• Public cloud: resources hosted by a third-party provider (Azure, AWS, GCP), accessed over the internet. The dominant model for most companies.
• Private cloud: infrastructure dedicated to a single organization, hosted on-premises or by a provider. Offers maximum control.
• Hybrid cloud: a combination of the two models, leveraging public cloud flexibility while keeping sensitive data on-premises.

Service models

• IaaS (Infrastructure as a Service): you manage the operating system, applications and data. Azure Virtual Machines is the flagship example.
• PaaS (Platform as a Service): the provider manages the infrastructure and runtime. Azure App Service and Azure SQL Database fall into this category.
• SaaS (Software as a Service): a complete application delivered via the cloud. Microsoft 365 is the best-known example.

Cloud benefits

The exam assesses your understanding of the key cloud benefits:

• High availability: contractually guaranteed availability SLAs
• Scalability: vertical scaling (scale-up) or horizontal scaling (scale-out) on demand
• Elasticity: automatic, real-time resource adjustment
• Agility: rapid provisioning of new resources within minutes
• Disaster recovery: geo-redundancy strategies for business continuity
• CapEx vs OpEx: shift from capital expenditure (buying servers) to operational expenditure (consumption-based subscription)

Core Azure services to master

This section is the largest exam block (35-40%). It covers the essential Azure service categories.

Compute

• Azure Virtual Machines: IaaS virtual machines, Windows and Linux compatible
• Azure App Service: PaaS hosting for web apps and APIs
• Azure Functions: serverless code execution triggered by events
• Azure Container Instances (ACI): serverless container execution
• Azure Kubernetes Service (AKS): managed container orchestration

Storage

• Azure Blob Storage: unstructured objects (images, videos, backups)
• Azure Disk Storage: persistent disks for VMs
• Azure Files: SMB file shares accessible in the cloud
• Azure Queue Storage: queued messages for component-to-component communication

Networking

• Azure Virtual Network (VNet): isolated private network in Azure
• Azure Load Balancer: traffic distribution across multiple instances
• Azure VPN Gateway: secure connection between on-premises networks and Azure
• Azure ExpressRoute: dedicated private connection (not over the internet) to Azure
• Azure Content Delivery Network (CDN): low-latency static content delivery

Databases

• Azure SQL Database: managed relational database (PaaS)
• Azure Cosmos DB: globally distributed, multi-model NoSQL database
• Azure Database for MySQL/PostgreSQL: managed open-source databases

Security, compliance and governance

About 30% of the exam covers security and management in Azure.

Identity and access

• Azure Active Directory (Azure AD / Entra ID): Microsoft's cloud identity service, user and group management
• Multi-factor authentication (MFA): an additional layer of security beyond the password
• Conditional access: access policies based on conditions (location, device, risk)
• RBAC (Role-Based Access Control): assigning roles to control access to Azure resources

Azure security tools

• Azure Defender / Microsoft Defender for Cloud: threat protection and security posture assessment
• Azure Key Vault: secure storage for secrets, keys and certificates
• Azure DDoS Protection: protection against denial-of-service attacks
• Azure Firewall: cloud-native, managed and highly available firewall

Compliance and governance

• Azure Policy: define and enforce rules across Azure resources
• Azure Blueprints: repeatable deployment of compliant environments
• Microsoft Trust Center: transparency portal for compliance and privacy
• Microsoft Compliance Center: certifications (ISO 27001, SOC 2, GDPR, HIPAA, etc.)

Cost management and Azure SLAs

Mastering the cost management tools is a frequently underestimated topic.

Cost management tools

• Azure Pricing Calculator: cost estimation before deployment
• Azure Cost Management + Billing: tracking and analyzing actual spend
• Azure Advisor: optimization recommendations (cost, performance, security, reliability)
• Tags: labels on resources to track cost by project or department

Azure SLAs

An SLA (Service Level Agreement) is a contractual commitment to availability. Azure typically guarantees between 99.9% and 99.99% depending on the service. Key points:

• 99.9% = roughly 8.7 hours of downtime per year
• 99.99% = roughly 52 minutes of downtime per year
• Using availability zones improves the composite SLA
• Preview services do not have a guaranteed SLA

Recommended preparation plan

For most candidates, 3 to 5 weeks of preparation is enough for AZ-900. Here is a typical plan:

Free official resources

• Microsoft Learn: free, complete AZ-900 learning path with built-in sandboxes
• Azure Free Account: USD 200 of credit to explore the services hands-on
• Azure documentation: comprehensive technical reference on docs.microsoft.com

Exam day tips

• Read each question fully before looking at the answers - words like "always", "never", "best" change the expected answer
• For service questions, think about the shared responsibility model
• Watch out for plausible distractors: Azure often offers similar services (ACI vs AKS, ExpressRoute vs VPN Gateway)
• If you hesitate between two answers, eliminate the obvious wrong ones and trust your preparation
• Manage your time: 65 minutes for 40-60 questions, roughly 1 to 1.5 minutes per question

Conclusion

AZ-900 is an affordable and highly valuable certification that opens the door to every Azure specialization. With a structured 3 to 5 week preparation combining theory on Microsoft Learn and practice on training tests, success is within your reach. It is also the best investment to understand cloud computing end-to-end before tackling advanced certifications.