AZ-900 Microsoft Azure Fundamentals: 2025 Study Plan and Key Topics

The AZ-900 Microsoft Azure Fundamentals certification remains one of the most widely pursued entry-level cloud credentials available in 2025, providing a structured introduction to cloud computing concepts and Microsoft Azure services for professionals across technical and non-technical backgrounds. Unlike most Microsoft certifications that target specific technical roles, the AZ-900 is deliberately designed to be accessible to a broad audience including business analysts, project managers, sales professionals, finance teams, and IT professionals who work alongside cloud infrastructure without directly administering it. This accessibility makes it unique among Azure certifications and explains why organizations across industries encourage employees from diverse backgrounds to pursue it.

The value the AZ-900 delivers in 2025 goes beyond the credential itself. The structured learning process required to pass the exam builds a mental framework for understanding how cloud services work, why organizations adopt them, and how Azure organizes its services into logical categories. This framework makes subsequent learning more efficient for professionals who go on to pursue role-specific certifications, and it provides sufficient context for non-technical professionals to participate meaningfully in cloud-related discussions, evaluate vendor proposals, and understand the implications of cloud adoption decisions for their organizations. In a technology environment where cloud literacy is increasingly expected across job functions, the AZ-900 provides a recognized and respected foundation.

Understanding the Current AZ-900 Exam Structure

The AZ-900 exam in 2025 contains between 40 and 60 questions presented in formats including multiple choice, multiple select, drag-and-drop matching, and scenario-based questions that present brief business situations and ask candidates to identify the most appropriate Azure service or concept. Microsoft allocates 60 minutes for the exam, and the passing score is 700 out of 1000. The exam is available in multiple languages and can be taken either at a testing center or through online proctoring, giving candidates flexibility in how and where they sit for it.

Microsoft organizes the AZ-900 content into three skill domains that each carry different weights in the final score. The cloud concepts domain covers fundamental ideas about cloud computing including service models, deployment models, and the benefits of cloud adoption. The Azure architecture and services domain covers the core Azure services across compute, networking, storage, and other categories. The Azure management and governance domain covers tools and practices for managing, securing, and governing Azure environments. Reviewing the official skills outline document that Microsoft publishes for the AZ-900 before beginning study is essential because the domain weights tell you where to focus most of your preparation energy for maximum impact on your score.

Cloud Concepts You Must Know for the Exam

The cloud concepts domain forms the theoretical foundation of the AZ-900 and covers ideas that apply across cloud providers rather than Azure specifically. The three cloud service models represent the most fundamental framework in this domain. Infrastructure as a Service provides virtualized compute, storage, and networking resources that customers manage above the hypervisor level, giving them control over operating systems, applications, and configurations while Microsoft manages the underlying physical infrastructure. Platform as a Service abstracts the operating system and runtime environment, allowing customers to deploy and manage applications without worrying about the infrastructure beneath them. Software as a Service delivers complete applications managed entirely by the provider, with customers responsible only for using the application and managing their data within it.

The shared responsibility model builds directly on the service model framework by defining which security and management responsibilities belong to Microsoft and which belong to the customer depending on which service model is in use. In Infrastructure as a Service deployments, customers carry more responsibility for operating system patching, application security, and identity management. In Software as a Service deployments, Microsoft carries most operational responsibility while customers are responsible primarily for their data and access management. The exam tests this model through scenario questions that describe a specific deployment situation and ask candidates to identify who is responsible for a particular aspect of security or management. Understanding the shared responsibility model accurately rather than as a vague concept is important for answering these questions correctly.

Azure Architecture Fundamentals Every Candidate Needs

Azure’s physical and logical infrastructure organization is a core topic in the AZ-900 that establishes the geographic and organizational context within which all Azure services operate. Azure regions are geographic areas containing one or more datacenters connected by low-latency networks, and Microsoft currently operates more regions than any other major cloud provider. Region pairs link two Azure regions within the same geographic boundary to support replication and failover for services that use geo-redundant options, ensuring that a regional disaster does not affect both paired regions simultaneously.

Availability zones are physically separate datacenter facilities within a single Azure region, each with independent power, cooling, and networking infrastructure. Deploying resources across availability zones protects against datacenter-level failures by ensuring that a failure in one zone does not affect resources running in other zones within the same region. The AZ-900 exam expects candidates to understand the difference between regions, region pairs, and availability zones and to identify which option provides protection against which type of failure. Sovereign regions including Azure Government for United States government workloads and Azure China operated through a local partner also appear in the exam as examples of specialized Azure deployments that address specific regulatory or data sovereignty requirements.

Core Azure Compute Services to Study

Compute services represent one of the largest and most varied categories of Azure offerings, and the AZ-900 expects familiarity with the primary options and their appropriate use cases. Azure Virtual Machines provide Infrastructure as a Service compute that allows customers to run any supported operating system and application stack with full control over the software environment. Virtual machines are appropriate for lift-and-shift migrations of existing applications, custom software environments that require specific operating system configurations, and workloads that need persistent compute resources running continuously.

Azure App Service provides a Platform as a Service environment for hosting web applications, REST APIs, and mobile backends without managing the underlying server infrastructure. Azure Container Instances allows containerized applications to run without managing orchestration infrastructure, suitable for simple containerized workloads and batch processing scenarios. Azure Kubernetes Service provides managed container orchestration for organizations running complex containerized application environments that require scaling, self-healing, and sophisticated deployment management. Azure Functions delivers serverless compute that runs code in response to triggers without any server management, charging only for the actual execution time of each function invocation. The AZ-900 exam tests understanding of when each compute option is most appropriate rather than deep configuration knowledge of any individual service.

Azure Networking Services for the Fundamentals Exam

Networking services in the AZ-900 are covered at a conceptual level appropriate for the fundamentals exam rather than the configuration depth required by role-specific certifications. Azure Virtual Networks provide logically isolated network environments within Azure where resources communicate privately, connect to on-premises environments, and apply network security controls. The concept of address spaces, subnets, and network segmentation appears in the exam at the level of understanding what these concepts mean and why they matter rather than how to configure specific IP addressing schemes.

Azure VPN Gateway and Azure ExpressRoute both provide connectivity between on-premises environments and Azure, and the AZ-900 exam tests the conceptual difference between these options. VPN Gateway uses encrypted tunnels over the public internet and suits organizations with moderate bandwidth requirements and tolerance for internet-based connectivity. ExpressRoute provides private dedicated connectivity through telecommunications partners, delivering more consistent performance and higher bandwidth for organizations with stringent connectivity requirements. Azure Content Delivery Network distributes content to edge locations closer to users to reduce latency for globally distributed audiences. Azure DNS provides domain name resolution services within and outside of Azure environments. Understanding what each service does and when it is appropriate is the level of knowledge the AZ-900 fundamentals exam assesses.

Storage Services Covered in the AZ-900 Exam

Azure storage services appear in the AZ-900 across both the architecture and services domain and the management and governance domain, reflecting how storage decisions intersect with both functional requirements and cost management considerations. Azure Blob Storage provides object storage optimized for storing large volumes of unstructured data including documents, images, videos, backups, and log files. The three blob storage access tiers, hot for frequently accessed data, cool for infrequently accessed data, and archive for rarely accessed long-term retention, represent a cost optimization mechanism that the exam tests through scenarios asking candidates to select the appropriate tier based on access frequency and cost requirements.

Azure Files provides managed file shares accessible through the SMB and NFS protocols that can be mounted on Windows, Linux, and macOS machines simultaneously, making it suitable for replacing on-premises file servers or providing shared storage for applications that require a file system interface. Azure Queue Storage provides message queuing for communication between application components, enabling decoupled architectures where producers and consumers of work items operate independently. Azure Table Storage provides NoSQL key-value storage for structured data that does not require the relational structure of a traditional database. The AZ-900 exam expects candidates to match each storage service to the appropriate scenario based on the data type and access pattern described rather than to configure any of these services in detail.

Azure Identity and Security Services

Identity and security services form an increasingly important part of the AZ-900 content as Microsoft emphasizes security fundamentals across all certification levels. Microsoft Entra ID, the service formerly known as Azure Active Directory, provides cloud-based identity and access management for authenticating users and controlling access to Azure resources and Microsoft 365 services. The AZ-900 covers Entra ID at a conceptual level including the difference between authentication, which verifies who someone is, and authorization, which determines what they are allowed to do, and how multi-factor authentication adds a second verification factor to reduce the risk of compromised credentials.

Azure role-based access control implements the principle of least privilege by assigning roles to users, groups, and service principals that grant only the permissions needed for specific tasks rather than broad administrative access. Azure Defender, now part of Microsoft Defender for Cloud, provides threat protection and security posture assessment for Azure resources. Azure Key Vault stores secrets, encryption keys, and certificates securely and allows applications to retrieve them programmatically without embedding sensitive values in application code. Microsoft Sentinel provides cloud-native security information and event management capabilities for collecting, analyzing, and responding to security threats across Azure and connected environments. The AZ-900 tests awareness of what each security service does rather than how to configure or administer it.

Cost Management and Azure Pricing Fundamentals

Cost management is a topic the AZ-900 covers in practical detail because understanding how Azure services are priced and how costs are controlled is relevant to professionals across business and technical roles. The Azure pricing model is consumption-based for most services, meaning organizations pay for what they use rather than purchasing fixed capacity in advance. This model differs fundamentally from traditional on-premises infrastructure investment and is one of the primary financial arguments for cloud adoption that the exam tests through questions about capital expenditure versus operational expenditure.

Azure Cost Management and Billing provides tools for monitoring spending, analyzing cost trends, creating budgets with alert thresholds, and identifying optimization opportunities. The Azure Pricing Calculator allows organizations to estimate costs for planned deployments before committing to them. The Total Cost of Ownership Calculator helps organizations compare the full cost of running workloads on-premises against running them in Azure, including infrastructure, labor, and facility costs that on-premises deployments require. Reserved instances and savings plans provide discounted pricing in exchange for commitment to a defined usage level over one or three year terms, and the AZ-900 tests understanding of when these commitment-based pricing options make financial sense compared to pay-as-you-go pricing.

Azure Governance and Compliance Tools

Governance tools in the AZ-900 cover how organizations maintain control, enforce standards, and demonstrate compliance across their Azure environments. Azure Policy allows organizations to define rules that resources must comply with and enforce those rules at deployment time, preventing non-compliant configurations from being created. Management groups organize Azure subscriptions into a hierarchy that allows policies and access controls to apply across multiple subscriptions simultaneously, which is important for large organizations managing dozens or hundreds of subscriptions. Azure Blueprints package governance artifacts including policies, role assignments, and resource templates into reusable definitions that can be applied consistently across multiple environments.

The Microsoft Cloud Adoption Framework provides guidance for organizations planning, implementing, and optimizing their Azure adoption at an organizational level, covering strategy, planning, readiness, migration, governance, and management phases. The Azure Well-Architected Framework provides design principles and best practices for individual workloads across five pillars including reliability, security, cost optimization, operational excellence, and performance efficiency. The AZ-900 tests awareness of what these frameworks cover and how they guide cloud adoption decisions rather than detailed knowledge of their specific recommendations. Understanding that these frameworks exist and serve different purposes is the level of depth the fundamentals exam requires.

Building Your 2025 Study Plan for the AZ-900

An effective AZ-900 study plan for 2025 should span four to six weeks for most candidates, with daily study sessions of 45 to 60 minutes producing better retention than marathon weekend sessions separated by days without engagement. Begin with the Microsoft Learn AZ-900 learning path, which covers all three exam domains with guided modules, interactive exercises, and knowledge checks. Working through the complete learning path before supplementing with other resources ensures your foundation reflects current exam content since Microsoft updates these materials when exam objectives change.

After completing the Microsoft Learn path, supplement with hands-on exploration in a free Azure account where you can see the services and interfaces described in the learning materials rather than simply reading about them. Navigate to the Azure portal, explore the service categories, and create simple resources like a storage account or a virtual machine to experience the deployment process firsthand. This direct exposure makes abstract concepts concrete and builds the recognition that helps when exam questions describe Azure service characteristics or scenarios. Finish your preparation with practice exams from platforms like MeasureUp or Whizlabs that expose you to the question format and identify specific topics requiring additional review before your exam date.

What Comes After Passing the AZ-900

Passing the AZ-900 is the beginning of an Azure learning journey rather than a destination, and understanding where to go next helps candidates plan their career development trajectory from the start. The AZ-900 provides a foundation that feeds naturally into role-specific associate certifications depending on the professional direction that best aligns with your career goals. The AZ-104 Azure Administrator Associate is the natural next step for IT professionals who manage or plan to manage Azure infrastructure. The AZ-204 Azure Developer Associate targets software developers building applications on Azure. The AI-900 Azure AI Fundamentals and DP-900 Azure Data Fundamentals provide domain-specific introductions for professionals moving into artificial intelligence and data roles respectively.

The AZ-900 certification is valid without expiration, unlike most Microsoft role-based certifications that require annual renewal through online assessments. This permanence makes it a stable foundational credential that does not require maintenance, freeing professionals who hold it to focus their renewal and continuing education effort on the more advanced role-specific certifications they pursue subsequently. The knowledge the AZ-900 represents does evolve as Azure adds services and retires older capabilities, so candidates who want their understanding to remain current should engage with Azure release communications and Microsoft Learn content updates even after the certification is earned, building the continuous learning habit that sustains relevance in a rapidly evolving cloud environment.

Conclusion

The AZ-900 certification in 2025 represents a meaningful investment for professionals across a wide range of roles and industries who work in or alongside cloud environments. Its accessibility to non-technical professionals combined with its genuine technical depth for those who engage seriously with the content makes it one of the most broadly applicable certifications in the Microsoft portfolio. The structured learning process it requires builds a foundation of cloud literacy that improves professional effectiveness regardless of whether the certification itself is formally recognized by an employer or required for a specific role.

Preparing for the AZ-900 with genuine engagement rather than minimum-effort cramming delivers returns that extend far beyond the exam score. Candidates who take time to understand why cloud service models exist, how Azure pricing works, what governance tools accomplish, and how security services protect cloud environments develop practical knowledge that applies directly to real decisions they will encounter in their professional work. This applied understanding is what separates professionals who hold the AZ-900 as a genuine knowledge credential from those who passed an exam without retaining the knowledge it was designed to validate.

The combination of a clear study plan structured around the official Microsoft Learn path, hands-on exploration in a free Azure account, and targeted practice exam review creates the most reliable path to both passing the exam and developing knowledge that lasts beyond exam day. Starting with the skills outline to understand where to focus, progressing through structured learning with regular hands-on reinforcement, and finishing with honest self-assessment through practice exams before scheduling the actual exam gives candidates the preparation depth needed to approach exam day with genuine confidence rather than anxiety about unfamiliar topics. In 2025, with cloud adoption continuing to accelerate across every industry, the investment in AZ-900 preparation is one that pays consistent returns for years beyond the day the certification is earned.