MS-900 Complete Guide: Microsoft 365 Fundamentals Scope, Resources & Pass Strategy (Copilot Edition)

Microsoft Certified: Microsoft 365 Fundamentals (MS-900) is the Fundamentals-tier exam that covers the entire Microsoft 365 (formerly Office 365) SaaS product suite. If AZ-900 is the entry point to Azure (IaaS/PaaS), DP-900 to data, and SC-900 to security, then MS-900 is the entry point to cloud SaaS. It focuses on comparing the everyday SaaS products you actually use — Teams, Exchange, SharePoint, OneDrive, Intune, and Microsoft 365 Copilot — and on selecting the right license. This article walks through every domain, the license SKU lineup, how Copilot shows up on the exam, and a complete pass roadmap.

Another distinctive trait of MS-900 is that it's also tuned for IT sales reps, SaaS sales reps, consultants, and procurement. Sales and SE roles at Microsoft partners and SI firms commonly take it alongside AZ-900 as a "cloud-era business card." Unlike other Fundamentals exams, MS-900 emphasizes business value and license selection over technical depth.

MS-900 Exam Basics

The MS-900 spec mirrors AZ-900 / DP-900 / SC-900. 45 minutes, 40-60 questions, passing score 700 / 1000, $99 (about 13,200 yen), available in 13 languages including Japanese, and never expires. You sit the exam via Pearson VUE — either online with OnVUE or at a test center — and no coding is required.

Domain 1: Cloud Concepts (5-10%)

This is the lowest-weighted introductory domain, covering the same foundational concepts as AZ-900. You're tested at the conceptual level on when to use SaaS, PaaS, and IaaS, the public, private, and hybrid cloud models, CapEx vs. OpEx, and the shared responsibility model. If you already hold AZ-900, you can essentially skip this domain.

Domain 2: Microsoft 365 Apps and Services (45-50%)

The highest-weighted domain, covering the main Microsoft 365 SaaS lineup. The services you need to know break down into 6 categories.

1) Productivity Apps: Word, Excel, PowerPoint, OneNote, Outlook, and Forms. You're tested on the difference between Microsoft 365 Apps (formerly Office 365 ProPlus, the locally installed version) and the web versions, plus the conceptual integration with Microsoft 365 Copilot.

2) Collaboration: Microsoft Teams (chat, meetings, calling), SharePoint Online (team sites, portals), OneDrive (personal storage), Loop (collaborative canvas), and Viva (employee experience). Teams gets especially heavy coverage — expect frequent questions on core features like channels, tabs, app integrations, Live Events, and Town Hall.

3) Email / Calendar: Exchange Online (mail platform), Outlook (client), and Exchange Online Protection (EOP, spam filtering). You need to distinguish Exchange Online as the Microsoft 365 mail platform from Outlook as the client that consumes it.

4) Microsoft 365 Copilot: Explicitly added to the exam scope in the 2024 update. Recurring topics: Copilot integration in Word / Excel / PowerPoint / Outlook / Teams, accessing organizational data via Microsoft Graph, building custom agents with Copilot Studio (formerly Power Virtual Agents), and the Copilot license positioning ($30 per user per month). Copilot has become the key differentiator on MS-900 in recent years — make sure you cover it solidly.

5) Device Management: Microsoft Intune (formerly Endpoint Manager), covering Mobile Device Management (MDM) and Mobile Application Management (MAM). Representative features include BYOD support, integration with Conditional Access, and automated Windows 11 provisioning via Autopilot.

6) Power Platform Integration: Power BI (BI), Power Apps (low-code apps), Power Automate (RPA and workflows), and Power Pages (websites). Tested at the conceptual level as the integration layer linking Microsoft 365 and Azure.

Domain 3: Security, Compliance, and Privacy (25-30%)

This domain partially overlaps with SC-900, covering security and compliance specifically in the Microsoft 365 context. The core is Microsoft Entra ID (the Microsoft 365 identity platform), Microsoft Defender for Office 365 (phishing protection for mail / Teams / SharePoint), Microsoft Defender for Cloud Apps (SaaS CASB), and Microsoft Purview (sensitivity labels, DLP, Insider Risk, eDiscovery).

Recurring topics in this domain include Service Trust Portal (Microsoft's compliance document repository — free downloads for SOC 2, ISO 27001, GDPR, etc.), Compliance Manager (a dashboard tracking regulatory compliance progress), and the Privacy by Design principles. More recent topics like Microsoft's Responsible AI principles and EU Data Boundary (keeping EU data within the region) on Microsoft Cloud are also fair game.

Domain 4: Pricing, Licensing, Support, and Lifecycle (10-15%)

This domain tests your understanding of Microsoft 365 license SKUs, and it matters especially for sales and procurement roles. Knowing the 4 main families is enough.

A frequent test target is "the difference between E3 and E5." E5 adds higher-tier features on top of E3 — Microsoft Defender XDR, Microsoft Purview Premium, Power BI Pro, and Microsoft Teams Phone — at roughly double the monthly per-user price. On top of that, the Microsoft 365 Copilot license (+$30) is sold as an add-on to existing SKUs, requiring an underlying E3, E5, or Business Premium subscription. Support plans (Standard / Professional Direct / Unified Enterprise) and lifecycle policies (Modern Lifecycle / Fixed Lifecycle Policy) also appear at the conceptual level.

Can You Pass with Only Official Resources?

Yes — MS-900 is fully passable using only Microsoft's official resources. The Microsoft Learn MS-900 learning path, the free voucher from Virtual Training Day: Microsoft 365 Fundamentals, and the official Practice Assessment are all you need. Working professionals who already use Microsoft 365 day-to-day can realistically pass in as little as 1-2 weeks.

A 4-Week Pass Roadmap

Week 1: Cover Domain 1 and the first half of Domain 2 (Teams / Exchange / SharePoint) via Microsoft Learn. Week 2: Finish Domain 2 (Copilot / Intune / Power Platform) and complete Virtual Training Day Part 1. Week 3: Cover Domain 3 (security and compliance) and complete Virtual Training Day Part 2 to earn the voucher. Week 4: Cover Domain 4 (licensing) and grind the Practice Assessment to 80%+ for final polish. For memorizing license SKUs, a popular trick is to print Microsoft's official Modern Workplace Bundle Comparison page and tape it to your desk.

What to Target After MS-900

MS-900 is the entry point to the Microsoft 365 certification family. If you want to become a Microsoft 365 administrator, the primary target is MS-102 (Microsoft 365 Administrator Expert), which integrates Entra ID admin, Exchange/Teams admin, and security operations. For Teams specialists, MS-721 (Collaboration Communications Systems Engineer Associate) covers phone systems and meeting room hardware. For endpoint management, MD-102 (Endpoint Administrator Associate) covers Intune, Autopilot, and Windows 11 management. For Microsoft 365 security, go for SC-401 (Information Security Administrator Associate, the successor to MS-500). If you're continuing in consulting or sales, the recommended path is the three pillars — AZ-900 + SC-900 + MS-900 — to position yourself as someone who can speak to "all of Microsoft Cloud."

Frequently Asked Questions

Exam information in this article is based on the official Microsoft Learn MS-900 page and the official Study Guide. This article is not an official Microsoft Corporation product, and there is no partnership or sponsorship relationship of any kind. Microsoft, Microsoft 365, Microsoft Teams, SharePoint, OneDrive, Exchange, Outlook, Microsoft Intune, and Microsoft Copilot are trademarks of the Microsoft group of companies. Information reflects officially published materials as of May 24, 2026. Always confirm the latest details on the official pages.