AZ-900 Complete Guide: Microsoft Azure Fundamentals Exam Scope, Study Roadmap & Pass Strategy

Microsoft Certified: Azure Fundamentals, better known as AZ-900, is the most-taken exam in Microsoft's certification catalog. According to figures Microsoft itself has published, more than 1.2 million people worldwide have earned it, making it the de facto "first cloud certification" for working professionals. In Japan as well, large SIers such as SoftBank and JBS recommend it as an onboarding milestone for new hires — something many readers have probably seen firsthand.

This article uses the latest Skills measured, revised on January 14, 2026, as its starting point. From there we cover what each domain actually tests, the subtle-but-painful pitfalls introduced by the Microsoft Entra ID rename, the real story of a Japanese engineer who scored over 900 with 25 hours of study despite having no IT background, and the career-path question of which certification to pursue next. Each section is structured to help readers who are "still considering the exam", "already studying", and "already booked", so you can jump straight to what you need.

What kind of exam is AZ-900?

AZ-900 belongs to the Fundamentals tier and is a 45-minute, ~40-60 question multiple-choice exam. The passing score is 700 out of 1000. The fee is $99 USD, and in Japan the typical display price via Pearson VUE is JPY 13,200 (incl. tax). Both online (OnVUE) and test center delivery are supported, and you can sit it in 13 languages, including Japanese. One unusual property among Microsoft certifications: once you pass, it is valid indefinitely with no renewal required — a sharp contrast with Associate-level exams, which demand annual renewal.

The exam scope splits into three large domains: Cloud concepts (25-30%) on the fundamentals of cloud, Azure architecture and services (35-40%) on the platform itself and its main services, and Azure management and governance (30-35%) on how you run and control it. The middle domain is the centerpiece — and the area where the most candidates stumble.

Sources: official Microsoft Learn exam page and the official Study Guide.

Domain 1: Cloud concepts

The first domain tests how you think about the cloud itself. Can you explain the line between IaaS, PaaS, and SaaS with concrete examples? Do you understand the difference between the three cloud models (Public, Private, Hybrid)? And — arguably the single most-tested concept on AZ-900 — do you have an intuitive grasp of the Shared responsibility model?

The Shared responsibility model sounds obvious the first time you hear it, but the real exam grills you on it relentlessly: "What is the customer responsible for in SaaS?" "Who patches the OS in IaaS?" Burn the line into your head: in SaaS the customer protects only data and account information, in IaaS the customer owns everything from the OS up, and hardware plus the physical data center always belong to the cloud provider. If you can answer this instantly, you won't hesitate on exam day.

The definition of serverless lives in this domain too. Azure Functions and Logic Apps are the canonical examples. Understand it not as "there is no server" but as "an execution model that fully abstracts server management away from the user" and you're set. The Capex (capital expenditure) vs Opex (operating expense) distinction tends to appear in scenarios aimed at the business-side conversation. If you've never sat through an internal budget approval, it's worth saying the difference out loud once to check you can actually explain it.

Domain 2: Azure architecture and services

This is the highest-weighted, core domain. It tests your overall picture of the Azure platform and its main services, with strict expectations about terminology. Three areas come up most often: the Azure resource hierarchy, the relationship between regions and availability zones, and the "which one do I choose?" design calls across compute, storage, and networking.

Hierarchy and region design

Azure resources are managed in a nested structure: Management group → Subscription → Resource group → Resource. Sit the exam without understanding this hierarchy and you'll lose points on frequent patterns like "If I apply a policy at the subscription level, how does it affect the RGs below?" or "Can a tag be attached to a resource group or only to a resource?".

A Region pair is a pair of regions located at least 200 miles apart, used as a building block for disaster recovery. An Availability Zone is a different concept entirely — physically isolated data center groups within a single region, and the basis for the 99.99% VM SLA. An Availability Set is yet another concept (redundant placement within a single data center). Not confusing these three layers is the single biggest pitfall of this domain.

Compute, storage, and networking

On the compute side, you need to choose correctly among VM, VM Scale Sets, App Service, Container Instances, AKS, and Functions. The 2026 revision explicitly added Azure Virtual Desktop to the VM options list, so remote-desktop scenarios likely now appear in question pools. Be ready to explain — in your own words — the rule of thumb: full control → VM, reduce operational burden via PaaS → App Service, event-driven snippets → Functions.

For storage, learning the five options — Blob (Hot/Cool/Cold/Archive, the four tiers), Disk, File, Queue, Table — is enough. The key is being able to justify a tier choice, e.g. "long-term log retention → Archive, frequently accessed user-uploaded images → Hot".

On networking, the frequently tested topics are the relationship between VNet and Subnet, how Peering behaves, and when to use VPN Gateway vs ExpressRoute. One frequently mis-answered fact: ExpressRoute is a dedicated line and is not encrypted by default (MACsec and similar options are available). Exam writers love to slip this into distractor answers. Because the revision promoted Public/Private endpoints to a standalone bullet, brushing up on private connectivity scenarios to PaaS services is a smart bet.

Domain 3: Management and governance

This domain asks "how do you govern Azure as an organization?". It rests on four pillars: cost, compliance, operational tooling, and monitoring. Questions live in the context of enterprise IT governance rather than raw Azure features, so people with operations experience find it familiar, while those without it can find it abstract.

The first thing to nail down is the difference between Azure Policy, RBAC, and Resource Lock. Azure Policy enforces compliance itself — e.g. forbidding creation of a particular resource type. RBAC is access management — who is allowed to do what. Resource Lock comes in two flavors, "CanNotDelete" and "ReadOnly", and physically blocks accidental deletion or modification. The three serve different purposes, and exam questions test whether you can pick the right tool. They also show up constantly in real work, so internalize them once and the knowledge pays dividends for years.

The 2026 revision now explicitly bullets Microsoft Entra ID (formerly Azure AD) and Microsoft Purview (formerly Azure Purview). Entra ID was rebranded from Azure AD in July 2023, but the old name still lingers in workplaces and study materials and remains a source of confusion for exam prep. The exam uses the new names as canonical, so when you encounter "Azure AD" in older question banks, mentally translate it to "Entra ID" as you study.

For monitoring, Azure Monitor is the center of gravity. If you can distinguish the four pieces — Metrics, Logs (Log Analytics), and Alerts as the three pillars, plus Application Insights as the APM (Application Performance Monitoring) layer — you can pick up nearly all the monitoring points in this domain. One more pair to keep straight: Azure Advisor (recommendations) and Azure Service Health (Azure-side incident information) are easy to confuse, so make sure you have them clearly separated.

What the January 2026 revision really means

The official change log just says "Minor", but for AZ-900 candidates the impact is not small. There are two reasons. First, the branding unification has now fully landed. With Entra ID and Purview added as official bullets, the terminology gap with question banks built before 2024 has become obvious. Knowledge from older materials may be conceptually correct, yet still fail to match the exact wording shown in the live exam's answer choices.

The second reason is that IaC (Infrastructure as Code) and Public/Private endpoints were promoted to standalone exam items. IaC had previously been touched on only in the context of ARM templates; now it is explicitly framed as a broader concept that includes Bicep and Terraform. Combined with the endpoints split, the modern operational trend of "managing Azure as code, and connecting through private networks" has officially trickled down into the Fundamentals exam.

One caveat: some Japanese blogs and third-party question banks claim that the 2026 revision "added Microsoft Copilot, Microsoft Fabric, Azure OpenAI, and the 6 Responsible AI principles in bulk". Open the actual Microsoft official Skills measured PDF and you will not find any of these items explicitly listed. AI is covered in depth by a separate certification, AI-901 (GA in June 2026, the successor to AI-900), so for AZ-900 the safe assumption is that AI appears only at a conceptual level. Spending time on out-of-scope topics at the expense of the material you actually need to cover is a classic pitfall for first-time candidates.

Can you pass on official resources alone?

The short answer: yes — AZ-900 is an exam you can pass entirely on resources that Microsoft makes available for free. Commercial Udemy courses and books are useful supplements, but they are not required. Working through the four resources below in order is enough to bring even a complete IT beginner into the pass zone within four weeks.

In particular, Azure Virtual Training Day is the official route that effectively brings the JPY 13,200 exam fee down to zero, and SIOS and several Japanese blogs have written up firsthand experience of using it. Japanese-language sessions are held regularly, so even if English makes you uncomfortable, this is not a barrier. Add it up: Microsoft Learn self-study + Virtual Training Day + Practice Assessment — and the total study material cost is JPY 0.

A 4-week study roadmap to exam day

Cross-reading Japanese pass stories, study time varies a lot by background. SoftBank's blog and Aichi_Lover's Qiita article report that IT beginners pass in roughly 25-40 hours. People with 1-3 years of IT experience tend to need 15-25 hours, and those with prior experience on another cloud finish in 5-15 hours. The plan below is sized for the IT-beginner case.

Week 1: walk through the Cloud concepts learning path once and internalize the Shared responsibility model and the boundaries between IaaS, PaaS, and SaaS. Open the Pricing Calculator and estimate the cost of running a single VM yourself — Capex/Opex suddenly becomes concrete.

Week 2: the largest domain, Architecture & services. Don't keep it purely theoretical. Log in to the Azure portal on the free tier and run at least one full cycle of hands-on operations: spin up a VM and delete it, create a VNet with multiple subnets, create a Storage Account and upload a file to Blob. The retention boost is significant.

Week 3: Management & governance. This is also the right time to attend Part 1 and Part 2 of Microsoft Virtual Training Day. Attendance alone earns you the exam voucher, and getting it in hand now makes booking later straightforward.

Week 4: polish. Drill the official Practice Assessment until you can score 80%+, and revisit any Microsoft Learn paths covering weak areas. The day before the exam, touch the real UI through the Exam Sandbox and re-read the revision change log one last time — that's the textbook routine going into exam day.

Common failure patterns, as seen by passers

Aggregating Japanese exam stories, candidates who fail share common pitfalls. The most common: relying on a pre-2024 question bank and failing to keep up with the new Entra ID/Purview/Virtual Desktop terminology. Second: getting tangled up on the difference between Azure Policy, RBAC, and Resource Lock. Third: confusing the three layers of Region pair, Availability Zone, and Availability Set. Fourth: missing that ExpressRoute is not encrypted by default and treating it as equivalent to a VPN Gateway. All of these are the kind of mistake a single pass through the official Study Guide would prevent.

Booking and exam-day workflow

You book the exam from your Microsoft Learn profile, which hands off into the Pearson VUE scheduler. One strong recommendation here: when you create the test-taker profile, use a personal MSA (Microsoft account) — not your organizational account (your company's Azure AD / Entra ID account). The reason: if you pass under an organizational account and later change jobs and lose access to that account, you can lose access to your certification record. This pitfall has been called out repeatedly in Japanese blogs, so if there is any chance you might change jobs, just use a personal MSA and don't think twice.

You can pick between online (OnVUE) and a test center. OnVUE has the convenience of taking the exam from home, but it imposes strict checks on your webcam, network, and room conditions. Even a single object left on your desk can be flagged by the proctor and force a recheck. Test center delivery sees fewer issues, so many candidates choose it for their first attempt. On the day, the iron rule is: bring two pieces of photo ID and clear your desk completely before you begin.

Where AZ-900 sits in the Japanese market

Within Japan, AZ-900 sits alongside AWS Cloud Practitioner (CLF) as the default first cloud certification. Major SIers — NTT East, SoftBank, JBS — recommend it as an onboarding milestone for new hires and mid-career joiners alike, and a growing number of companies have internal programs that nudge sales and planning staff in cloud-adjacent roles to earn it. When listing it on a resume or CV, the recommended format is the full name: Microsoft Certified: Azure Fundamentals (AZ-900), Passed YYYY-MM.

Domestic training providers such as Edifist Learning, Trainocate Japan, and SIOS Tech maintain standing AZ-900 courses, and SIOS in particular publishes a "complete guide to taking the exam for free via Virtual Training Day". AZ-900 is an exam you can pass through self-study just fine, but if you'd rather build study time into work hours, an enterprise-contracted training course is a viable alternative.

What to aim for after AZ-900

AZ-900 is not a finish line — it's the entry point to the Azure certification ladder. Where you go next depends on the role you're aiming for. For infrastructure management, the next stop is AZ-104 (Azure Administrator Associate) — effectively a required course. Architect-bound? Go AZ-104 first, then AZ-305 (Solutions Architect Expert). DevOps? AZ-104 or AZ-204, then AZ-400 (DevOps Engineer Expert) — those are the standard tracks.

One caveat: Azure Developer Associate (AZ-204) is scheduled to retire on July 31, 2026. As of this article's publication, no successor exam has been formally announced, so you need to time any new attempt carefully. If the developer track is your goal, a practical option is to get AZ-104 first and wait for the successor announcement.

Plenty of people start with AZ-900 and then collect the rest of the Fundamentals series — AI-901 (the successor to AI-900, GA in June 2026), DP-900, SC-900, and MS-900. They all share the same spec: $99 USD, 45 minutes, 700 to pass, and indefinite validity. Common terms (Entra ID, RBAC, Policy, etc.) reappear across them, so your learning effort compounds. They are also accessible to non-engineers in sales or PM roles, and work nicely as a tool for building internal visibility.

Frequently Asked Questions

Terminology and scoring figures in this article are based on Microsoft Learn official and the MicrosoftDocs GitHub repository (CC BY 4.0). This article is not an official Microsoft Corporation product, and there is no affiliation or sponsorship relationship. Microsoft, Azure, Microsoft Entra, Microsoft Purview, and Windows are trademarks of the Microsoft group of companies. Information is accurate as of the official sources published on May 24, 2026. For the latest information, always consult the official Study Guide.