Microsoft AZ-900 Azure Fundamentals Practice Exam
Prepare for Microsoft’s foundational cloud certification across all three domains — cloud concepts, Azure architecture and services, and Azure management and governance. Objective-mapped questions, instant feedback in Learn mode, and a full timed simulation in Exam mode, each answer linked to Microsoft Learn. No coding required. Start with a 24-hour free trial.
Start 24-hour free trial →AZ-900 exam at a glance
- Vendor
- Microsoft
- Exam code
- AZ-900
- Certification
- Microsoft Certified: Azure Fundamentals
- Level
- Fundamentals (foundational, no coding)
- Questions
- Approximately 40–60 (varies by exam form)
- Duration
- 45 minutes exam time (about 65 minutes seat time)
- Passing score
- 700 of 1000 (scaled, not a raw percentage)
- Cost
- $99 USD (varies by region)
- Validity
- Does not expire (lifetime credential)
- Prerequisites
- None
Sources: Microsoft — Azure Fundamentals · AZ-900 study guide. Note: Microsoft is updating the English version of AZ-900 on July 20, 2026 — review the study guide for the latest skills before scheduling.
About the AZ-900 Azure Fundamentals certification
AZ-900 earns the Microsoft Certified: Azure Fundamentals credential — the most widely taken entry-level cloud certification in the world, with more than a million professionals certified. It validates foundational knowledge of cloud concepts and core Azure services, including for non-technical business stakeholders. There are no prerequisites and no coding: it’s a common first step in an Azure journey, and the certification does not expire.
The exam is conceptual and scenario-based — you’re asked which Azure service, construct, or governance tool best fits a described business need, not to configure anything. Concentrate on the shared responsibility model, the IaaS vs PaaS vs SaaS distinction, and Azure’s governance tools (Azure Policy, RBAC, Cost Management). Note that Microsoft’s January 2026 refresh added Azure AI, Copilot, and Responsible AI coverage, so budget study time there if your materials pre-date 2025. PowerKram maps every practice question to one of the three exam domains and links each explanation to the exact Microsoft Learn page it derives from, so a wrong answer becomes a specific page to read. For how fundamentals certifications fit a broader path, see our IT certifications guide.
AZ-900 exam domains and weights
Microsoft organizes AZ-900 into three weighted domains. Azure architecture and services is the heaviest at 35–40%. Plan your study time roughly in proportion, and confirm the current weights on Microsoft’s study guide, especially around the July 20, 2026 update.
Core architectural components (regions, availability zones, resource groups, subscriptions, management groups); compute (VMs, App Service, Functions, containers); networking, storage, and database services.
Cost management (pricing, TCO, budgets, tags); governance and compliance (Azure Policy, RBAC, resource locks, Microsoft Purview); and tools for managing and monitoring (Azure Monitor, Advisor, Service Health).
Cloud benefits (high availability, scalability, elasticity, agility, disaster recovery); CapEx vs OpEx and the consumption model; the shared responsibility model; and cloud models (public, private, hybrid).
Source: Microsoft — AZ-900 study guide (skills measured). Weights are Microsoft’s published ranges.
Who the AZ-900 exam is for
AZ-900 is intentionally broad and accessible, suited to a wide audience:
- Non-technical professionals — sales, procurement, project and product managers — working with Azure customers.
- Students and career switchers entering cloud computing with no prior IT background.
- IT professionals from on-premises environments mapping existing skills to the cloud.
- Developers and admins building a foundation before role-based Azure exams.
AZ-900 is a stepping stone, not a finish line. The natural next step is the AZ-104 Azure Administrator, and its sibling fundamentals credentials pair well too: AI-900 Azure AI Fundamentals (especially now that AZ-900 covers AI), DP-900 Azure Data Fundamentals, and SC-900 Security, Compliance & Identity Fundamentals. For the roles this credential supports, see the cloud engineer career guide in our Career Hub.
What this AZ-900 practice exam delivers
Score by domain
Every question is tagged to one of the three domains, so your report tells you exactly whether cloud concepts, architecture and services, or management and governance needs the most work.
Learn mode
Immediate feedback after each question with a full explanation of why the right answer is right and the others wrong — built for the “which service or tool fits” judgment AZ-900 rewards.
Exam mode
A timed run that mirrors the 45-minute format and the 700/1000 scaled bar, so pacing feels familiar on test day.
Source-linked explanations
Every answer links to the exact Microsoft Learn page it derives from — so you learn from the source, not just a memorized letter.
Sample AZ-900 practice questions
Ten free scenario questions across the three domains, each with a full explanation and a source link to Microsoft Learn. The complete bank is available with the 24-hour trial.
A startup is deciding between building their own datacenter and using Azure. They want to convert large upfront hardware costs into predictable monthly operational expenses.
Which cloud benefit does this describe?
- Geo-distribution
- Shift from capital expenditure (CapEx) to operational expenditure (OpEx)
- Scalability
- High availability
Show answer & explanation
Correct: B — CapEx to OpEx. Moving from buying hardware (CapEx) to paying monthly for consumed cloud services (OpEx) is a core cloud economic benefit.
Why not the others: high availability (D) ensures uptime; scalability (C) handles demand changes; geo-distribution (A) spreads resources globally — none is about the cost model.
Source: Microsoft Learn — Fiscal outcomes (CapEx/OpEx) → Further reading: PowerKram — AZ-104 Azure Administrator →A company is moving workloads to Azure and wants to know which security tasks it still owns versus which Microsoft handles, depending on the service model.
Under the shared responsibility model, which items are ALWAYS the customer’s responsibility, regardless of IaaS, PaaS, or SaaS?
- The physical datacenter, physical hosts, and physical network
- Data, and the identities and accounts that access it
- The hypervisor and the underlying compute fabric
- Nothing — Microsoft is responsible for everything in the cloud
Show answer & explanation
Correct: B. Under the shared responsibility model, the customer always retains responsibility for their data and for identity/account management, no matter the service model; the division of the rest shifts across IaaS, PaaS, and SaaS.
Why not the others: physical facilities, hosts, and network (A) and the hypervisor/fabric (C) are always Microsoft’s; and (D) misstates the model — responsibility is shared, not entirely Microsoft’s.
Source: Microsoft Learn — Shared responsibility in the cloud →A company needs complete control over their operating system and middleware but does not want to manage physical hardware.
Which cloud service type meets this need?
- Platform as a Service, where the provider manages the OS while customers deploy code
- Software as a Service, where the provider manages all layers including the application
- Infrastructure as a Service, where customers manage the OS and middleware while the provider handles hardware
- Serverless, where the provider manages all infrastructure and scales automatically
Show answer & explanation
Correct: C — IaaS. Infrastructure as a Service gives customers control of the operating system, middleware, and runtime while Azure manages the physical infrastructure underneath.
Why not the others: SaaS (B) manages the whole stack; PaaS (A) manages the OS, so you don’t control middleware at that level; serverless (D) abstracts infrastructure away entirely.
Source: Microsoft Learn — What is Azure (service models) → Further reading: PowerKram — AI-900 Azure AI Fundamentals →A retail chain needs their e-commerce platform available 99.99% of the time, even during a full regional Azure outage.
Which cloud concept addresses this requirement?
- Cost optimization, reducing spend through reserved capacity
- High availability through redundancy across multiple geographic regions
- Agility, enabling rapid deployment of new features within minutes
- Elasticity, automatically adding or removing resources on demand
Show answer & explanation
Correct: B — high availability. Multi-region redundancy keeps the application accessible even during a complete regional failure by serving traffic from surviving regions.
Why not the others: agility (C) is about deployment speed; elasticity (D) is demand-driven scaling, not failure resilience; cost optimization (A) is about spend, not availability.
Source: Microsoft Learn — Reliability overview → Further reading: PowerKram — DP-900 Azure Data Fundamentals →An organization needs to group Azure resources that share the same lifecycle, permissions, and billing tags for a marketing project.
Which Azure construct should they use?
- An Azure subscription, serving as the primary billing boundary
- A resource group, organizing resources that share lifecycle, permissions, and tags
- A management group, organizing multiple subscriptions under one governance hierarchy
- An availability zone, providing physically separate datacenters within a region
Show answer & explanation
Correct: B — a resource group. Resource groups organize resources that share a lifecycle and enable RBAC and billing tags at the group level.
Why not the others: management groups (C) organize subscriptions, not individual resources; subscriptions (A) are billing boundaries containing many resource groups; availability zones (D) are physical locations for resilience, not an organization construct.
Source: Microsoft Learn — Resource Manager & resource groups → Further reading: PowerKram — AZ-104 Azure Administrator →A company evaluates Azure VMs, App Service, and Functions. They want code to run only on events, with zero cost when idle.
Which service should they select?
- Azure Functions on the Consumption plan, executing code only on events with per-execution billing
- Azure App Service, hosting web apps on always-available managed infrastructure
- Azure Container Instances, running containers with per-second billing while active
- Azure Virtual Machines, providing full OS control with per-second billing while running
Show answer & explanation
Correct: A — Azure Functions (Consumption plan). Functions on Consumption execute only when triggered and charge only during execution, with zero cost while idle.
Why not the others: VMs (D) charge per second while running; App Service (B) charges for the plan regardless of requests; Container Instances (C) charge per second while the container group is active.
Source: Microsoft Learn — Azure Functions Consumption plan →A multinational needs a database that replicates automatically across three Azure regions with single-digit millisecond reads globally.
Which service provides this?
- Azure Cosmos DB, with turnkey multi-region distribution and guaranteed low-latency reads
- Azure Database for MySQL Flexible Server, with zone-redundant high availability
- Azure Table Storage, providing simple key-value access across storage regions
- Azure SQL Database, with active geo-replication providing readable secondaries
Show answer & explanation
Correct: A — Azure Cosmos DB. Cosmos DB offers turnkey multi-region replication with single-digit millisecond read latency guarantees at any scale.
Why not the others: SQL Database geo-replication (D) gives readable secondaries but with higher cross-region latency; MySQL Flexible Server (B) is zone-redundant within one region; Table Storage (C) offers no guaranteed cross-region latency.
Source: Microsoft Learn — Cosmos DB global distribution →A dev team needs a private container image registry integrated with Azure, supporting geo-replication and vulnerability scanning.
Which service should they use?
- Docker Hub, a public registry with community-maintained image libraries
- Azure Blob Storage, configured with container-organized folders for image files
- GitHub Container Registry, hosting images alongside source-code repositories
- Azure Container Registry, offering private registries with geo-replication and security scanning
Show answer & explanation
Correct: D — Azure Container Registry. ACR provides private registries with geo-replication and integrates with Microsoft Defender for automated vulnerability scanning.
Why not the others: Docker Hub (A) is primarily public; GitHub Container Registry (C) lacks Azure-native security-scanning integration; Blob Storage (B) stores unstructured data and isn’t an image registry.
Source: Microsoft Learn — Azure Container Registry →A CFO wants to understand Azure spending by department and set budgets with alerts when spending approaches limits.
Which Azure service provides this financial visibility?
- Azure Monitor, tracking resource performance metrics, logs, and telemetry
- Azure Policy, evaluating resource configuration compliance
- Azure Advisor, offering optimization recommendations across cost, security, and performance
- Microsoft Cost Management, providing cost analysis, budgets, and spending alerts
Show answer & explanation
Correct: D — Microsoft Cost Management. Cost Management breaks spend down by tags, departments, and subscriptions and supports budgets with threshold alerts.
Why not the others: Advisor (C) recommends but isn’t a financial tool; Monitor (A) tracks performance telemetry, not spend; Policy (B) enforces configuration compliance, not budgets.
Source: Microsoft Learn — Cost Management + Billing → Further reading: PowerKram — SC-900 Security, Compliance & Identity →A CTO wants to prevent teams from creating expensive VM sizes in development subscriptions while allowing all sizes in production.
Which governance tool enforces this restriction?
- Azure Policy, with an allowed-VM-SKU definition assigned to the development subscription
- The RBAC Reader role, assigned to developers to prevent all resource creation
- Azure Advisor, generating weekly cost-optimization recommendations
- Resource tags, labeling VMs by cost center for later reporting
Show answer & explanation
Correct: A — Azure Policy. An allowed-VM-SKU-sizes policy restricts which VM types can be created, enforced at the development subscription scope while production stays unrestricted.
Why not the others: Advisor (C) only recommends; the Reader role (B) blocks all writes, not just certain VM sizes; tags (D) label resources but enforce nothing.
Source: Microsoft Learn — Azure Policy overview →Keep going: study guides and career paths
AZ-900 is the world’s most-taken cloud certification and the on-ramp to Microsoft’s role-based Azure track. Two PowerKram hubs back this exam.
Deep dive: format, the 2026 updates, and a study plan
Format and how it’s scored
AZ-900 is roughly 40–60 questions in about 45 minutes of exam time (Microsoft doesn’t publish an exact count — it varies by form), delivered at a Pearson VUE center or online with a proctor. Scoring is scaled: you need 700 of 1000, which is not the same as 70% raw correct because items are weighted. It costs $99, has no prerequisites, and — unlike role-based certifications — the Fundamentals credential does not expire. Read the certifications guide →
The 2026 updates (AI content, and a July refresh)
Microsoft’s January 2026 refresh added Azure AI Services, Microsoft Copilot, and Responsible AI to the assessed content — candidates studying from pre-2025 materials routinely report being surprised by AI questions, so budget a study session there. A further English-language update lands on July 20, 2026; the three weighted domains and 700/1000 score are expected to stay, but review the study guide’s change table before you sit. One more currency note: Azure Blueprints was deprecated in 2026 (superseded by Template Specs and Deployment Stacks), so if you see it as an option it’s now usually a distractor rather than the answer.
Common traps
Fundamentals doesn’t mean easy. The classic trap areas: service overlap (Front Door vs Application Gateway vs Load Balancer vs Traffic Manager), storage-redundancy acronyms (LRS, ZRS, GRS, GZRS — know which failure each protects against), the Entra rebrand (“Azure Active Directory” is now Microsoft Entra ID; you may see either), and governance-vs-management (Azure Policy enforces rules, RBAC controls access — don’t conflate them). Read absolute words carefully: “always,” “only,” “most cost-effective” often flip the right answer.
Realistic study plan
Two to four weeks at a few hours a week is typical (less with IT experience). Complete Microsoft’s official AZ-900 learning path, spin up an Azure free account to click around real services, and prioritize the heaviest domain (architecture and services). Use PowerKram Learn mode with the sourced links to close gaps while the rationale is fresh, then finish in Exam mode across all three domains under the 45-minute clock. Microsoft Virtual Training Days for Azure Fundamentals sometimes include a free exam voucher — worth checking before you pay. Cloud career paths →
Frequently asked questions about the AZ-900 exam
What certification does AZ-900 lead to?
What is the exam format and passing score?
What are the exam domains and weights?
Does AZ-900 expire, and is it changing in 2026?
Who should take this exam, and what comes next?
Start your free 24-hour AZ-900 practice trial
Full access to the question bank across all three domains, both study modes, and source-linked explanations. No credit card required.
Start free trial →