On this page
Intro
AZ-900 supports Microsoft Certified: Azure Fundamentals and focuses on understanding cloud concepts, Azure services and the tools used to manage and govern them. It is a starting point for learning Azure, and CertMonk can help you review the terminology and distinctions as you go. That scope follows Microsoft’s Azure Fundamentals page.
Exam at a glance
| Detail | AZ-900 |
|---|---|
| Exam code | AZ-900 |
| Questions | Exam-specific count not published; Microsoft says most certification exams typically contain 40–60, with variation |
| Time | 45 minutes, as listed on the certification page |
| Passing score | 700 or greater; technical exams use a 1–1,000 scale |
| Question types | Specific mix not published in advance; interactive components may appear |
| Price | Check the vendor’s site for current pricing |
| Retirement | Date not published on the reviewed certification page |
Sources: certification details, exam experience and scoring policy, reviewed September 28, 2026.
Exam domains and weights
| Domain | Weight | In plain English |
|---|---|---|
| Describe cloud concepts | 25–30% | Explain cloud models, responsibilities and service choices. |
| Describe Azure architecture and services | 35–40% | Recognize Azure's structure and the purpose of its main services. |
| Describe Azure management and governance | 30–35% | Explain tools for managing resources, costs and organizational rules. |
These ranges follow the English outline effective July 20, 2026, in Microsoft’s official exam objectives. They are published ranges, not exact proportions to convert into a predicted number of items.
What each domain really tests
Describe cloud concepts
Start with the relationship between a service and its responsibilities. When learning a cloud model or service type, explain what the customer is using and what decisions remain with them. Keep a short comparison sheet rather than a list of acronyms without context.
With IaaS, the customer manages the guest operating system and applications. PaaS removes the need to manage that underlying operating system for the application platform; SaaS provides an application to use. Customer responsibilities for data and identities remain across these models. See Microsoft’s shared-responsibility explanation.
Distinguish concepts that sound similar instead of treating them as interchangeable benefits. Give each one its own explanation and a note about what you still need to clarify. Return to those uncertain points during the next session rather than trying to memorize a sentence you do not understand.
Describe Azure architecture and services
Build a simple map of Azure's structure before learning many service names. Place the organizational terms on one page and the service categories on another. This helps prevent a resource-management term from becoming confused with a location or a computing service.
For compute, networking and storage, make the purpose of each service your first note. Add a short comparison with a nearby alternative. Your goal at this stage is a clear explanation of the choice, with further reading where the difference remains vague.
Give identity and access their own study session. Use a diagram that connects a person or application with a resource, then label the concepts you are studying. Read that diagram aloud to check whether the relationships make sense without the documentation open.
Describe Azure management and governance
Group tools by the job they help perform: organizing work, applying rules, understanding costs or observing services. Write a one-sentence purpose for each tool before adding details. That keeps the study material useful when several product names appear close together.
Azure Policy helps check and enforce organizational requirements, such as restricting where resources may be deployed. A policy definition describes a rule; an assignment applies it at a chosen scope. Learn the purpose before the configuration detail, using Microsoft’s Policy overview.
Include management and deployment approaches in your checklist. You do not need to make every study session a large project: a careful walkthrough can help connect a concept to the interface or documentation. Finish by explaining the purpose of what you observed.
These study activities are organized around Microsoft’s current skills outline. Use its detailed list to check coverage while keeping your own explanations short and original.
A realistic 30-day study plan
Use a month as a flexible planning window. Short, regular sessions are easier to review than a single weekend of reading everything. Keep a learning log with the topic, the point of confusion and a specific next action; revise the schedule when that log shows you need more time.
Days 1–7: learn the cloud vocabulary
Begin by reading the objectives and marking the terms you already recognize. Spend the next sessions on cloud concepts and service models. After each session, close your notes and explain one distinction in a few sentences.
Build a small comparison sheet gradually. Include only material you can explain, with a separate list of uncertain ideas. Use the final day to revisit that list and rewrite any definition that still sounds like copied wording rather than your own understanding.
Days 8–14: map Azure architecture and services
Work through the architecture and service domain in small groups. Start with structure, then move to the service categories and identity topics. Use diagrams and purpose statements so the week does not become a collection of product names.
Add untimed practice after learning each group. Read the explanations for all alternatives and record why your selected choice fit or failed. Reserve one session for revisiting cloud concepts from the previous week, especially distinctions you had to guess.
Days 15–21: study management and governance
Organize this week around the jobs that management tools perform. Create a comparison sheet for concepts you keep mixing up. Use documentation to correct the distinction, then explain it again without looking.
Toward the end of the week, review all three domains together. Mixed review can reveal gaps that are hidden when the topic heading tells you what to expect. Record those gaps without treating one difficult session as a verdict on your ability.
Days 22–28: repair gaps and practice pacing
Choose daily work from your learning log. Begin with the confusion that recurs most often, review the relevant material and write a clearer explanation. Revisit the topic later rather than immediately repeating the same practice set.
Add timed practice after the concepts feel more stable. Review mistakes caused by moving too quickly separately from errors caused by missing knowledge. A pacing problem needs a different response from a concept you have never properly learned.
Use a shorter session to read Microsoft's exam-experience guidance. Familiarity with the process can remove avoidable uncertainty, while your main study time remains focused on the actual learning objectives.
Days 29–30: review and make a decision
Read your condensed notes and explain the major distinctions without prompts. Check the current objectives and your booking details before attending. If significant gaps remain, extend the plan with a small set of clear tasks.
Do not fill the final evening with an entirely new course. A focused review of what you already studied is easier to evaluate than a flood of unfamiliar material. Let your understanding determine the next step, not the fact that the calendar says day thirty.
Common mistakes and how to avoid them
- Memorizing acronyms without meaning. Write the purpose in ordinary language before adding the abbreviation.
- Treating similar concepts as synonyms. Keep a short comparison sheet for the distinctions you confuse.
- Skipping management and governance. Give the third domain a full place in your schedule.
- Collecting too many resources. Finish a focused learning cycle before replacing it with another course.
- Counting correct guesses as understanding. Flag them and review the reasoning later.
- Revising only comfortable topics. Use your learning log to select the next session.
How to use practice questions well
Begin untimed so you can examine the reasoning. Review the explanations for wrong alternatives as well as the selected answer. A familiar service name can be a distraction if you do not understand why it fits the requirement.
CertMonk provides explanations for every answer choice, randomized practice tests, timed and untimed modes, flip-card flashcards, study games and progress by exam domain. Use flashcards and games for recall, explanations for distinctions, and domain progress to choose follow-up reading.
After a session, choose a few concepts to repair instead of immediately chasing a higher score. Explain the correction without answer choices, then revisit it in mixed practice later. Add timing when your reasoning is steadier and use the result to investigate pacing, not to predict an exam outcome.
Free practice questions
Try the free AZ-900 samples below and explore the explanations without making a purchase.
A multinational company must run a service for customers in mainland China that complies with local regulations. Which Azure offering is designed for this?
- AAzure in China, a separate instance operated by 21Vianet
- BAzure Government, which serves regulated public-sector customers
- CAzure Arc, connecting servers in China to a global region
- DAny global Azure region located in Asia, such as East Asia
Show the answer and explanation
Answer: A. Azure in China, a separate instance operated by 21Vianet
Correct. Azure in China is a physically separated instance of Azure operated by 21Vianet, designed to meet the regulations that apply there.
Why not the others
- B. Azure Government is a sovereign cloud for US government agencies and their partners, not for mainland China.
- C. Azure Arc extends Azure management to other environments; it does not create a sovereign cloud instance.
- D. Global Azure regions are operated by Microsoft; the separate sovereign instance for mainland China is what the scenario needs.
Takeaway: Sovereign regions are isolated Azure instances for legal and compliance needs: Azure Government for US agencies and Azure in China, operated by 21Vianet, for mainland China.
A CFO asks two questions: “What will our new Azure analytics platform cost each month?” and, separately, “How much would we save by moving the servers in our existing datacenter to Azure?” Which tools answer the questions in that order?
- AThe pricing calculator, then an Azure Migrate business case
- BAn Azure Migrate business case, then the pricing calculator
- CAzure Advisor, then an Azure Migrate business case
- DCost analysis in Microsoft Cost Management, for both of the questions
Show the answer and explanation
Answer: A. The pricing calculator, then an Azure Migrate business case
Correct. The pricing calculator estimates the monthly cost of Azure services you plan to deploy; an Azure Migrate business case compares the total cost of ownership of existing on-premises servers with running them in Azure.
Why not the others
- B. This reverses the tools: a business case compares an existing on-premises estate with Azure, and the pricing calculator estimates new Azure services.
- C. Advisor makes recommendations about resources that are already deployed; it cannot price a platform that does not exist yet.
- D. Cost analysis reports actual and forecast spend on existing Azure resources. It neither prices a new design nor compares an on-premises estate with Azure.
Takeaway: Pricing calculator: estimate what planned Azure services will cost. Azure Migrate business case: compare the total cost of an existing on-premises estate with running it in Azure.
Source: Business case overview — Azure Migrate — Microsoft Learn
Two architects disagree. One says the payroll system is “scalable” because an administrator resizes its servers in a change window once a year when headcount grows. The other says that is not the rapid elasticity the business asked for. Which description matches rapid elasticity as NIST defines it?
- ACapacity that is added when demand grows but is never released
- BCapacity that applies to storage only, while scalability covers compute
- CRunning the same workload in more than one Azure region
- DRapidly provisioning and releasing capacity as demand changes
Show the answer and explanation
Answer: D. Rapidly provisioning and releasing capacity as demand changes
Correct. NIST defines rapid elasticity as capabilities that can be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand. A yearly manual resize is not that.
Why not the others
- A. Elasticity covers both growing and shrinking. Shrinking when demand falls is what saves money.
- B. Both concepts apply across resource types; neither is limited to storage or compute.
- C. Multi-region deployment is about resilience and latency, not about matching capacity to demand.
Takeaway: Scalability is the ability to adjust resources to meet demand. Rapid elasticity (NIST SP 800-145) means capacity is provisioned and released quickly, in some cases automatically, outward and inward as demand changes.
Source: rapid elasticity — NIST CSRC glossary (NIST SP 800-145)
A CISO wants a single measure of the organization’s current security posture in Azure that rises as recommended security controls are implemented. What does Defender for Cloud provide for this?
- AThe Azure Service Health status page
- BThe Azure Advisor cost score
- CThe secure score it calculates
- DAn Azure Policy exemption count
Show the answer and explanation
Answer: C. The secure score it calculates
Correct. Secure score measures an organization’s security posture; implementing security recommendations increases it.
Why not the others
- A. Service Health reports Microsoft-side incidents and maintenance, not your security posture.
- B. Advisor’s cost category focuses on spending, not on the security posture measure the CISO wants.
- D. Exemptions exclude resources from policies; their count is not a posture score.
Takeaway: Secure score in Microsoft Defender for Cloud is a measurable view of security posture; remediating recommendations raises the score.
Source: Secure score in Microsoft Defender for Cloud — Microsoft Learn
A team builds identical test, staging, and production environments by clicking through the Azure portal, and the three keep drifting apart. It wants each environment defined in files that can be version-controlled, reviewed, and deployed repeatedly with the same result. Which approach BEST fits?
- AApply ReadOnly locks to the production environment so that it cannot drift from the test environment.
- BDefine the environments in Bicep or ARM template files and deploy them through Azure Resource Manager.
- COpen Azure Cloud Shell and type the needed commands interactively each time an environment is created.
- DWrite a detailed checklist of portal steps and require two engineers to follow it together for every environment.
Show the answer and explanation
Answer: B. Define the environments in Bicep or ARM template files and deploy them through Azure Resource Manager.
Correct. Bicep files and ARM templates are declarative infrastructure as code: the environment is described in files that can be version-controlled and deployed repeatedly for consistent results.
Why not the others
- A. A lock blocks changes to existing resources. It does not make three environments match, and it prevents legitimate updates.
- C. Cloud Shell is a convenient place to run commands, but typing them interactively each time is still manual and unrepeatable unless the steps are captured as code.
- D. A checklist still depends on manual clicks, which is what causes the drift. It cannot be deployed or verified automatically.
Takeaway: Infrastructure as code, such as Bicep or ARM templates, turns an environment into reviewable files that deploy the same way every time, which ends manual drift.
Source: What is Bicep? — Microsoft Learn
FAQ
Is AZ-900 suitable for someone new to Azure?
Microsoft labels Azure Fundamentals beginner level and describes it as a starting point on its certification page. Give unfamiliar IT concepts extra study time rather than assuming beginner means effortless.
Does this guide use the current AZ-900 outline?
It follows the English skills outline effective July 20, 2026, in Microsoft’s study guide, checked on September 28, 2026.
Is one month enough preparation?
It is a reasonable structure to try, not a fixed requirement. Extend the schedule if you cannot explain the differences between related concepts without looking at notes.
Do I need to become an Azure administrator first?
This exam focuses on describing foundational concepts and services, as shown in Microsoft’s certification overview. Use practical exploration to support understanding without turning the plan into administrator-level training.
Should I memorize every Azure service?
Use the current objectives to set your boundaries. Concentrate on the listed concepts and the purpose of the relevant services instead of trying to memorize an entire product catalog.
How can I tell whether I understand a topic?
Explain it briefly without the service name as a prompt, then distinguish it from a similar concept. If that explanation breaks down, use it to choose your next reading session.
Next step
Try free practice questions → https://app.certmonk.app/samples
