On this page
One map, several routes
Microsoft offers many Azure-related credentials, and it is not obvious where a beginner should begin. There is no single required order. This page lays out the Azure certification path as a set of routes, using each exam's own Microsoft Learn page, so you can pick one that fits the work you want to do. Role-based and specialty certifications can change, so confirm each exam on its page before you commit.
Step one: AZ-900 Azure Fundamentals
Microsoft's Azure Fundamentals page labels the certification Beginner level and calls it a common starting point toward a career in Azure. It covers three areas: cloud concepts, Azure architecture and services, and Azure management and governance. The page lists a 45-minute exam. You do not need to be a cloud engineer to start; the page mentions skills in areas like infrastructure management, database management or software development as background.
AZ-900 is a good first step if you want a vocabulary of the cloud and a tour of Azure services before choosing a job-focused route. If you already work with Azure daily, you might skip ahead. See our AZ-900 study guide.
Step two: choose a route
After fundamentals, the path branches. Pick the route closest to your target role.
| Route | Exam | Microsoft's description of the role |
|---|---|---|
| Administration | AZ-104 | Azure Administrator Associate: implementing, managing and monitoring an Azure environment |
| Architecture | AZ-305 | Designing Microsoft Azure Infrastructure Solutions |
| Security operations | SC-200 | Security Operations Analyst |
| Cloud security | SC-500 | Cloud and AI Security Engineer Associate |
| Data and reporting | PL-300 | Data Analyst Associate (Power BI) |
Administration: AZ-104
The Azure Administrator page describes subject matter expertise in virtual networks, storage, compute, identity, security and governance. It lists 100 minutes and says you should be familiar with operating systems, networking, servers and virtualization, plus experience with PowerShell, Azure CLI, the Azure portal, templates or Bicep, and Microsoft Entra ID. That is a stronger starting point than AZ-900 assumes, so give yourself time to practice in a real or trial environment. The same page notes that this certification has a 12-month renewal frequency. Read our AZ-104 study guide.
Architecture: AZ-305
AZ-305 is for people who translate business requirements into designs for cloud and hybrid solutions on Azure. Microsoft's AZ-305 page describes it as one of the requirements for the Azure Solutions Architect Expert certification. Because design questions lean on how services behave, you may find it easier after working with administration topics, though the page does not make AZ-104 a rule for taking the exam. See the AZ-305 guide.
Security operations: SC-200
The Security Operations Analyst page lists 100 minutes. The study areas include managing a security operations environment, responding to incidents and threat hunting. If you are drawn to monitoring and investigation, see the SC-200 guide.
Cloud security: SC-500
The Cloud and AI Security Engineer Associate page lists 120 minutes. It focuses on identity and access, securing storage, databases and networking, securing compute, and security posture. It suits anyone who wants to build protections rather than investigate alerts. See the SC-500 guide.
Data and reporting: PL-300
The Data Analyst Associate page lists 100 minutes and covers preparing, modeling, visualizing and securing Power BI content. It is a data route, so it can sit alongside Azure certifications rather than replace them. See the PL-300 guide.
How to choose
Ask three questions.
- What work do I want to do in a year? Running environments points to AZ-104, designing them to AZ-305, defending them to SC-200 or SC-500, and reporting on data to PL-300.
- What can I practice with? Hands-on time matters for administration and security exams. If you cannot practice, start lower-risk and build up.
- What is my timeline? Each exam page lists its own length, and fees vary by country or region, so check the vendor's site for current pricing before you plan.
You do not have to earn them all. A focused route that matches a job goal usually beats a collection with no direction.
Keep current
Microsoft updates exam outlines and states dates for them on each exam's study guide. Before you buy a course, compare its date with the current study guide. Microsoft also notes that exam records registered under a work or school account can be lost if you leave the organization, so follow the registration advice on each exam page.
Free practice questions
Free sample questions can show where you stand on a first exam. Try free practice questions for the exam you are considering. Practice results show current knowledge, not a prediction of exam results.
FAQ
Do I need AZ-900 before AZ-104?
The AZ-104 page we reviewed does not list AZ-900 as a requirement. It does describe familiarity with operating systems, networking, servers and virtualization. AZ-900 can still be a useful warm-up if cloud terms are new to you.
Which Azure certification suits a complete beginner?
AZ-900 is labeled Beginner level by Microsoft and is described as a common starting point. Whether it is right for you depends on your goals and background.
Is AZ-305 harder than AZ-104?
They test different skills: AZ-305 is about design decisions, while AZ-104 is about implementing and managing. Compare the skills outlines on Microsoft Learn rather than relying on a ranking.
Where do SC-200 and SC-500 fit?
They are security routes. SC-200 centers on security operations such as incident response and hunting, and SC-500 on securing cloud and AI workloads. Pick by the work you want to do.
Do these certifications expire?
Microsoft's AZ-104 page says role-based and specialty certifications expire unless renewed, with a renewal frequency of 12 months, and that renewal is an online assessment on Microsoft Learn. Check each certification page for its own terms.
