CertLumen
Azure · Fundamentals

Microsoft Azure Fundamentals (AZ-900)

Cloud concepts, core Azure services, and Azure management and governance for the AZ-900 exam. Lessons, exam-style practice, timed mocks and an AI tutor, mapped to every objective of the official exam guide.

Free Included · 7-day free trial

16lessons
281exam-style questions
4practice exams
6hands-on labs

The exam

Questions
45
Time
45 minutes
Passing score
700 on a scale of 1 to 1000
Exam fee
USD 99 (US price; varies by country or region)
Valid for
Does not expire (Fundamentals certifications do not expire; no renewal needed)
Delivery
Proctored, online (Pearson VUE) or at a test center; Certiport for students and educators

Official exam page · booked with Microsoft

Syllabus

Every section of the exam guide

3 sections and 57 objectives, in the official weights. Each lesson is mapped to the objectives it covers.

Section 1 · Describe cloud concepts28%

What the exam asks

  • Define cloud computing
  • Describe the shared responsibility model
  • Define cloud models, including public, private, and hybrid
  • Identify appropriate use cases for each cloud model
  • Describe the consumption-based model
  • Compare cloud pricing models
  • Describe serverless
  • Describe the benefits of high availability and scalability in the cloud
  • Describe the benefits of reliability and predictability in the cloud
  • Describe the benefits of security and governance in the cloud
  • Describe the benefits of manageability in the cloud
  • Describe infrastructure as a service (IaaS)
  • Describe platform as a service (PaaS)
  • Describe software as a service (SaaS)
  • Identify appropriate use cases for each cloud service type (IaaS, PaaS, and SaaS)

Lessons

  1. Cloud computing, shared responsibility and cloud models
  2. Consumption-based model, pricing models and serverless
  3. Benefits of the cloud: availability, reliability, security and manageability
  4. IaaS, PaaS and SaaS and their use cases
Section 2 · Describe Azure architecture and services38%

What the exam asks

  • Describe Azure regions, region pairs, and sovereign regions
  • Describe availability zones
  • Describe Azure datacenters
  • Describe Azure resources and resource groups
  • Describe subscriptions
  • Describe management groups
  • Describe the hierarchy of resource groups, subscriptions, and management groups
  • Compare compute types, including containers, virtual machines, and functions
  • Describe virtual machine options, including Azure virtual machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
  • Describe the resources required for virtual machines
  • Describe application hosting options, including web apps, containers, and virtual machines
  • Describe virtual networking, including the purpose of Azure virtual networks, subnets, peering, Azure DNS, Azure VPN Gateway, and ExpressRoute
  • Define public and private endpoints
  • Compare Azure Storage services
  • Describe storage tiers
  • Describe redundancy options
  • Describe storage account options and storage types
  • Identify options for moving files, including AzCopy, Azure Storage Explorer, and Azure File Sync
  • Describe migration options, including Azure Migrate and Azure Data Box
  • Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services
  • Describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication (MFA), and passwordless
  • Describe external identities in Azure
  • Describe Microsoft Entra Conditional Access
  • Describe Azure role-based access control (RBAC)
  • Describe the concept of Zero Trust
  • Describe the purpose of the defense-in-depth model
  • Describe the purpose of Microsoft Defender for Cloud

Lessons

  1. Regions, region pairs, sovereign regions, availability zones and datacenters
  2. Resources, resource groups, subscriptions and management groups
  3. Compute: virtual machines, containers, functions and app hosting
  4. Virtual networking: VNets, peering, DNS, VPN Gateway, ExpressRoute and endpoints
  5. Azure Storage: services, tiers, redundancy, accounts and moving data
  6. Identity: Microsoft Entra ID, authentication, external identities and Conditional Access
  7. Azure RBAC, Zero Trust, defense in depth and Microsoft Defender for Cloud
Section 3 · Describe Azure management and governance33%

What the exam asks

  • Describe factors that can affect costs in Azure
  • Explore the pricing calculator
  • Describe cost management capabilities in Azure
  • Describe the purpose of tags
  • Describe the purpose of Microsoft Purview in Azure
  • Describe the purpose of Azure Policy
  • Describe the purpose of resource locks
  • Describe the Azure portal
  • Describe Azure Cloud Shell, Azure CLI, and Azure PowerShell
  • Describe the purpose of Azure Arc
  • Describe infrastructure as code (IaC)
  • Describe Azure Resource Manager (ARM) and ARM templates
  • Describe the purpose of Azure Advisor
  • Describe Azure Service Health
  • Describe Azure Monitor, including Log Analytics, Azure Monitor alerts, and Azure Monitor Application Insights

Lessons

  1. Cost management in Azure
  2. Governance and compliance: Microsoft Purview, Azure Policy and resource locks
  3. Managing Azure: portal, Cloud Shell, CLI, PowerShell and Azure Arc
  4. Infrastructure as code, Azure Resource Manager and ARM templates
  5. Monitoring: Azure Advisor, Service Health and Azure Monitor
Study plan

14-Day Standard Plan

The default path for anyone new to Azure. It covers all 16 lessons and all six labs in order, with a section drill after each of the three exam domains and daily flashcards. Section 2 (Azure architecture and services) carries 35–40% of the exam and has seven lessons, so it gets the most days. All four mock exams sit on days 11–14, one per day on the last three days plus a first one to calibrate. Book the exam for day 15 or later. About 1–2 hours a day.

  1. Day 1What the cloud is and who is responsible for what
  2. Day 2Consumption pricing, pricing models and serverless
  3. Day 3Benefits of the cloud and the IaaS / PaaS / SaaS spectrum, then the section 1 drill
  4. Day 4Regions, region pairs, zones and sovereign clouds
  5. Day 5Resource hierarchy and compute
  6. Day 6Virtual networking and endpoints
  7. Day 7Azure Storage
  8. … and 7 more days, with mock exams at the end

Read the free study guide for this exam

Try it

Sample questions

Written for practice in the style of the real exam: never questions from the real exam.

Sample question 1

A company runs two identical web servers and wants the highest virtual machine availability SLA Azure offers in a region that supports availability zones. How should the VMs be deployed?

  1. AIn the same availability set
  2. BIn different availability zones of the same region
  3. CAs single instances, each with a Premium SSD
  4. DIn two resource groups in the same zone
Show the answer

B. Spreading two or more VMs over two or more availability zones gives the 99.99% SLA. An availability set gives 99.95%, and a single VM with premium SSD or ultra disks gives 99.9%.

Sample question 2

A finance team wants a recurring file of detailed cost data delivered automatically to a storage account so it can be loaded into Power BI. Which Cost Management capability provides this?

  1. AScheduled exports
  2. BBudgets
  3. CAnomaly alerts
  4. DAzure Advisor cost recommendations
Show the answer

A. Cost Management exports schedule the delivery of cost data to a storage account for Power BI, finance systems or custom analysis. Budgets and alerts notify, and Advisor recommends savings.

Questions

About this exam

Is AZ-900 an open-book exam, and can I look things up on Microsoft Learn?

No. Microsoft Learn access during the exam is offered on role-based exams, not on Fundamentals exams, and you may not use notes, phones or other devices. Study the tables in the cheat sheet rather than planning to look things up.

How long is the exam and how many questions are there?

You have 45 minutes of exam time (about 65 minutes of seat time, which includes instructions and comments). Microsoft does not publish the question count or the question types; most Microsoft exams have 40–60 questions, and this course's mock exams use 45. Some items are unscored.

What score do I need, and is it a percentage?

700 on a scale of 1 to 1000. It is a scaled score, not a percentage, so you cannot compute it exactly from the number of correct answers. Aim for 80% on the mock exams to leave a margin.

Does the certification expire?

Microsoft Certified: Azure Fundamentals is a Fundamentals certification, and the course materials state that Fundamentals certifications do not expire and need no renewal. Confirm on the certification page if this matters to you, as policies can change.

What changed in the July 20, 2026 skills measured?

The three domains keep their weights (25–30%, 35–40%, 30–35%). Microsoft's change log marks the compute and networking, managing and deploying, and monitoring areas as minor changes and everything else as no change. This course is aligned to the July 20, 2026 list.

Should I take the exam online or at a test center?

Either is allowed. Online (Pearson VUE OnVUE) is convenient but needs a private walled room, a clear desk, a stable network, an ID that matches your profile name, recording and facial comparison. If you do not want those, or your network is unreliable, schedule a test center.

Do I need an Azure account to prepare?

No, but hands-on practice helps. The labs use an Azure free account ($200 credit for 30 days, selected services free for 12 months, always-free services). Delete resource groups afterwards and set a budget alert; VMs, gateways, public IPs and Defender plans can cost money.

What is the difference between Azure Policy, RBAC and resource locks?

RBAC decides who can perform actions, Policy decides what properties resources may have, and a lock stops delete or change regardless of role. An Owner can be stopped by a Deny policy or by a lock, and a Reader can never be granted extra power by a policy.

Why do old names like Azure AD and Azure Security Center still appear?

The exam uses current names (Microsoft Entra ID, Microsoft Defender for Cloud, Azure Local), but older documentation, tools and some third-party material use the old ones. The Renamed features page lists the pairs so you recognise either.

How should I split my time across the three sections?

In proportion to the weights: about 28% on cloud concepts, 38% on architecture and services and 33% on management and governance. Spend the extra time on section 2 because it is the widest, and drill the look-alike tools in section 3.

Ready to start?

See where you stand in 8 minutes

Ten questions from this course, weighted like the real exam, with your score by section and a rough chance of passing.

Take the free check