AZ-900 Study Guide: Microsoft Azure Fundamentals Syllabus & Exam Strategy

Need a focused AZ-900 study guide to pass the Microsoft Azure Fundamentals exam on your first attempt? Discover the 700/1000 passing threshold, syllabus weighting, free official sandbox environments, and voucher discount opportunities.

Direct Editorial Verdict (AEO Summary)

Passing the Microsoft AZ-900 exam requires zero cloud background, yet test-takers frequently trip over nuanced differences between Azure Policy and RBAC. Use our step-by-step breakdown below to access 100% free official practice sandboxes and bypass $99 voucher fees through official Microsoft training days.

Microsoft AZ-900 Exam Guide: Domain Breakdown, Passing Score & Free Voucher Paths

Metric	Specification & Audit Finding	Benchmark Comparison
Exam Code	AZ-900: Microsoft Azure Fundamentals	Microsoft Certified: Azure Fundamentals
Official Examination Fee	$99 USD (Discounted or free for eligible university students)	Slightly lower than AWS CLF-C02 ($100)
Questions & Format	40-50 questions (Multiple choice, drag-and-drop, case scenarios)	45-65 minutes seat time
Passing Standard	700 / 1000 scaled points	Immediate scoring post-submission
Validity Period	Does not expire (Lifetime credential)	Superior to AWS 3-year expiration rule
Enterprise Screening Value	85%+ recognition in Fortune 500 corporate IT	Essential for Microsoft-centric environments

1. Domain Weight Matrix & Core Concepts

The AZ-900 exam tests candidates across three foundational subject areas:

[Azure Global Hierarchy]
         │
         ├──► Management Groups (Governance across subscriptions)
         │        │
         │        └──► Subscriptions (Billing and access boundary)
         │                 │
         │                 └──► Resource Groups (Logical lifecycle containers)
         │                          │
         │                          └──► Resources (VMs, VNets, Storage Accounts)

1.Describe Cloud Concepts (25–30%): Differentiating IaaS, PaaS, and SaaS; understanding shared responsibility models; private vs. public vs. hybrid vs. multi-cloud strategies; capital expenditure (CapEx) vs. operational expenditure (OpEx).
2.Describe Azure Architecture and Services (35–40%): Core architectural components (Azure Regions, Availability Zones, Region Pairs, Sovereign Regions). Compute services (Virtual Machines, App Services, Azure Functions, ACI, AKS), networking (VNets, VPN Gateway, ExpressRoute), and storage tiers (Blob storage, Azure Files, hot/cool/cold/archive access tiers).
3.Describe Azure Management and Governance (30–35%): Cost management, Azure Policy, Role-Based Access Control (RBAC), Resource Locks, Microsoft Entra ID (formerly Azure AD), Azure Blueprints, and compliance tools (Trust Center, Service Trust Portal).

Production Infrastructure-as-Code: Azure Bicep Policy Definition

In real corporate environments, platform engineers write declarative code rather than clicking in the Azure portal. Here is a production Bicep template enforcing region-lock governance:

// enforce-location-policy.bicep
targetScope = 'subscription'
param allowedLocations array = [
  'westeurope'
  'northeurope'
]
resource regionPolicy 'Microsoft.Authorization/policyDefinitions@2021-06-01' = {
  name: 'audit-allowed-locations'
  properties: {
    displayName: 'Enforce Compliant European Azure Regions'
    policyType: 'Custom'
    mode: 'Indexed'
    description: 'Bans resource creation outside approved regulatory EU geographic boundaries.'
    parameters: {}
    policyRule: {
      if: {
        not: {
          field: 'location'
          in: allowedLocations
        }
      }
      then: {
        effect: 'deny'
      }
    }
  }
}

2. Governance Comparison: Azure RBAC vs. Azure Policy

A common exam stumbling block is confusing authorization (RBAC) with compliance governance (Policy):

Feature Dimension	Azure Role-Based Access Control (RBAC)	Azure Policy
Core Question Answered	"Who has permission to take an action?"	"What resource properties and configurations are compliant?"
Primary Scope	User identities, service principals, group roles	Resource metadata, SKUs, locations, encryption flags
Enforcement Action	Grants or denies action access (Contributor, Reader, Owner)	Audits, denies, or auto-remediates non-compliant state
Typical Scenario	Granting a junior developer Reader access to production logs	Banning GPU-enabled VMs ($1,000/mo) in non-production environments

3. The Zero-Cost Microsoft Learn Study Pipeline

Unlike commercial platforms that charge high monthly subscriptions, Microsoft provides the complete, authoritative AZ-900 curriculum completely free on Microsoft Learn:

•Module 1: Azure Fundamentals: Describe cloud concepts
•Module 2: Azure architecture and services
•Module 3: Azure management and governance
•Interactive Sandboxes: Microsoft Learn provides temporary, complimentary Azure sandbox subscriptions that allow you to spin up real VMs, configure storage accounts, and test resource groups without linking your personal credit card.

Microsoft Partner & Enterprise IT Hiring: The Value of AZ-900 on Your Resume

Tier	Candidate Credentials	Recruiter Disposition
Tier 3 (Baseline)	AZ-900 certificate alone on resume; non-technical background	Screened for IT Procurement, Microsoft License Specialist, or Helpdesk L1
Tier 2 (Competitive)	AZ-900 + GitHub repo with Bicep/ARM templates + basic PowerShell scripts	Shortlisted for Junior Cloud Support Engineer or Systems Administrator
Tier 1 (High Velocity)	AZ-900 + AZ-104 Azure Administrator + Active Directory migration project	Immediate technical phone screen for Enterprise Cloud Systems Engineer

Hands-on Sandbox: Azure Bicep & Resource Group Automation

Demonstrate governance competence by configuring a multi-tier governance deployment in the Azure portal:

•Resource Group Structure: Create segregated rg-production and rg-development resource groups.
•Azure Policy Enforcement: Deploy an Azure Policy restricting VM sizes strictly to the cost-efficient Standard_B1s tier and banning non-compliant data residency outside your home region.
•Cost Cap Automation: Configure an Azure Cost Management budget alert triggering an automated webhook or email notification when spend exceeds $15.00.
•Documentation: Export the ARM or Bicep JSON templates to a GitHub repository to substantiate your practical grasp of Infrastructure as Code.

Related Guides & Official Sources

Keep reading:

Primary sources (verify before you pay):

Frequently Asked Questions

Q: Does the AZ-900 credential expire?

No. Unlike associate and expert-level Microsoft certifications which require annual online renewals, Microsoft Azure Fundamentals has no expiration date.

Q: How hard is AZ-900 compared to AWS Cloud Practitioner?

Both cover similar cloud abstractions, but AZ-900 places heavier emphasis on enterprise governance, Microsoft Entra ID authentication, and hybrid on-premise integrations.

Q: Can I take AZ-900 for free?

Historically, attending Microsoft Virtual Training Days yielded free vouchers. While policy updates vary by region, students with an active .edu email can verify through Microsoft Learn for significant exam discounts.