EnglishDeutschFrançaisEspañolPortuguês

Microsoft · AZ-900 · Fundamentals

Microsoft Azure Fundamentals (AZ-900) — Practice Questions and Mock Exam

Practice with realistic AZ-900 questions aligned to the exam objectives. Alex explains every answer, and your readiness score shows what to study next.

50Questions
45minTime Limit
700/ 1000Pass Score

Checked against Microsoft · September 2026Current exam version

About the exam

The AZ-900 certification demonstrates foundational knowledge of cloud concepts and Azure services. It covers core cloud computing principles, Azure architecture components, Azure management and governance tools, compute, networking, storage services, identity, security, privacy, compliance, and Azure pricing and support. The exam validates a broad understanding of what Azure offers without requiring deep technical implementation skills.

This is the recommended entry point for anyone new to cloud computing or Azure, including business professionals, IT managers, sales and marketing teams, students, and non-technical stakeholders. It provides a solid foundation before pursuing role-based Azure certifications like AZ-104 or AI-200.

What's on the exam

Azure architecture and services carries the most weight at 35–40%: regions and availability zones, compute and networking basics, storage services, and identity fundamentals like Microsoft Entra ID and RBAC. Management and governance follows close behind at 30–35%, covering cost management, Azure Policy, resource locks, and the portal, CLI, and ARM tooling used to manage resources. Cloud concepts (the shared responsibility model, service types, deployment models) sits at 25–30%, the conceptual base the other two domains build on.

The two heavier domains reward breadth across the Azure service catalog over depth in any one service, which is why the exam favors candidates who've explored the portal broadly rather than gone deep on a single workload.

Exam blueprint: AZ-900

Describe cloud concepts25–30%

Cloud computing fundamentals including shared responsibility model, cloud models (public/private/hybrid), consumption-based model, cloud pricing, serverless, benefits of cloud services, and cloud service types (IaaS, PaaS, SaaS)

≈ 4 h
Describe Azure architecture and services35–40%

Core architectural components of Azure (regions, availability zones, resources, subscriptions, management groups), compute and networking services, storage services, and identity/access/security including Microsoft Entra ID, RBAC, and Zero Trust

≈ 6 h
Describe Azure management and governance30–35%

Cost management in Azure, governance and compliance features (Azure Policy, resource locks, Microsoft Purview), tools for managing and deploying resources (Azure portal, Cloud Shell, Azure Arc, ARM templates), and monitoring tools (Azure Advisor, Service Health, Azure Monitor)

≈ 5 h

Exam format and question types

AZ-900 draws 40–60 questions from a mix of multiple-choice, multiple-response, drag-and-drop, true/false, and dropdown-selection formats inside a 45-minute window. Questions test conceptual understanding rather than hands-on configuration — recognizing what a service does and when to use it, not how to deploy it.

Question types: AZ-900

Multiple Choice42%

Pick the single best answer from four or five options — the exam's bread and butter.

Drag & Drop18%

Drag items into the right slot, group or order — it tests whether you can apply a concept, not just recognise it.

Multiple Response18%

More than one answer is correct and you need all of them; the question tells you how many to pick.

Dropdown12%

Complete a statement or a configuration by picking from dropdown menus inside the text.

True / False10%

Judge a single statement as true or false — quick points, but the exact wording decides.

Microsoft confirms these question types — a percentage split is not published; the shares reflect our exam-aligned question pool.

Try five AZ-900 questions

Five questions straight from our Microsoft Azure Fundamentals pool. Answer one — Alex explains the why.

Describe Azure architecture and services1 / 5

A company has multiple Azure subscriptions across different departments. They need to apply a single Azure Policy to all subscriptions to restrict the deployment of virtual machines to specific regions. What should they use?

AlexFull explanation from Alex

Management groups provide a governance scope above subscriptions, enabling you to apply Azure Policy, RBAC, and budgets across multiple subscriptions in a single assignment. By placing departmental subscriptions under one management group, a policy restricting VM deployment to specific regions inherits down to all child subscriptions and their resource groups automatically. Resource groups exist within a single subscription and cannot span multiple subscriptions—wrong scope. Resource tags add metadata for cost tracking and organization but cannot enforce policy restrictions. Azure Blueprints package policies, role assignments, and ARM templates together, but they still rely on management groups or subscriptions as their assignment scope. Exam tip: whenever a question says 'apply one policy across multiple subscriptions,' the answer is management groups. (Ref: learn.microsoft.com/azure/governance/management-groups/overview)

Sourcelearn.microsoft.com

Describe Azure management and governance2 / 5

Which of the following is a benefit of using Azure Resource Manager templates for deploying infrastructure?

AlexFull explanation from Alex

Azure Resource Manager (ARM) templates use declarative JSON syntax to define the desired state of your infrastructure. Key benefits include: repeatable deployments (the same template produces identical environments every time), consistency across dev/staging/prod, idempotency (redeploying the same template yields the same result without duplicating resources), and built-in orchestration (ARM resolves dependency ordering automatically). Templates do not replace subscriptions—you still need a subscription as the deployment target. A single template can deploy dozens of resources simultaneously, not just one. Cost optimization is Azure Advisor's domain, not ARM templates. Exam tip: ARM templates = declarative, repeatable, consistent, idempotent infrastructure-as-code. Also note Bicep is the recommended successor to JSON ARM templates. (Ref: learn.microsoft.com/azure/azure-resource-manager/templates/overview)

Sourcelearn.microsoft.com

Describe Azure management and governance3 / 5

True or False: Azure Cloud Shell includes both Azure CLI and Azure PowerShell pre-installed, and persists files across sessions using an Azure Files share.

AlexFull explanation from Alex

Azure Cloud Shell is a browser-based, authenticated terminal accessible from the Azure portal, shell.azure.com, or the Azure mobile app. It comes pre-installed with both Azure CLI (az commands) and Azure PowerShell (Az module), plus tools like kubectl, Terraform, git, and code editors. File persistence works through an Azure Files share (5 GB) mounted at your $HOME directory, ensuring scripts and configurations survive session restarts. Cloud Shell runs on a temporary Linux host that auto-authenticates with your Azure credentials. Sessions time out after 20 minutes of inactivity. You choose between Bash or PowerShell at launch. The statement is True because both CLIs are pre-installed and Azure Files provides cross-session persistence. (Ref: learn.microsoft.com/azure/cloud-shell/overview)

Sourcelearn.microsoft.com

Describe Azure management and governance4 / 5

Your company needs to prevent accidental deletion of critical production resources in Azure. Which feature should you implement?

AlexFull explanation from Alex

Azure resource locks prevent accidental deletion or modification of critical resources. Two lock types: CanNotDelete (Delete lock) — authorized users can read and modify the resource but cannot delete it. ReadOnly — authorized users can read the resource but cannot modify or delete it. Locks can be applied at subscription, resource group, or individual resource levels and inherit to child resources. Locks override RBAC permissions — even Owners cannot delete a CanNotDelete-locked resource without first removing the lock. Azure Policy enforces compliance rules but doesn't prevent deletion directly. RBAC controls access but can't prevent Owner-level deletions. Exam tip: Resource locks = prevent accidental deletion/modification. Two types: CanNotDelete and ReadOnly. Override RBAC.

Sourcelearn.microsoft.com

Describe Azure architecture and services5 / 5

Identify the correct order of the Azure resource hierarchy from highest to lowest scope.

AlexFull explanation from Alex

The Azure resource hierarchy from highest to lowest scope is: Management groups → Subscriptions → Resource groups → Resources. Management groups sit at the top, organizing multiple subscriptions and applying governance at scale. Subscriptions are billing and access boundaries containing resource groups. Resource groups are logical containers grouping related resources for lifecycle management. Resources are the individual Azure services (VMs, databases, storage accounts). Policies and RBAC assignments at higher levels inherit down to lower levels. A resource can only belong to one resource group, a resource group to one subscription, and a subscription to one management group. Exam tip: Hierarchy top-down: Management groups > Subscriptions > Resource groups > Resources.

Sourcelearn.microsoft.com

452 questions, built like the exam

Every domain of the AZ-900 exam has enough questions in the pool to practice it in depth. A mock exam asks 50 questions in one sitting, on the same 45-minute clock as the real thing.

Audit record: AZ-900

Spec check against MicrosoftSeptember 3, 2026

last verified against the official Microsoft source

Pass mark700 / 1,000

as published by Microsoft

Blueprint coverage68 official objectives

across 3 domains, from the official exam guide

Pool size452 questions

= 9 full practice exams of 50 questions each — never the same question twice

Domain coverageall 3 domains at official weight

Describe cloud concepts 118 · Describe Azure architecture and services 180 · Describe Azure management and governance 154

Canonically validated452 of 452

each verified against official Microsoft documentation — answer, options and explanation, source cited

Methodology openly documented.How questions are made →

Preparing for AZ-900

How long you'll need depends on how much hands-on experience you bring. The rest is set by the vendor: how the exam is delivered, how soon you can retake it, and how long the credential stays valid.

AZ-900 runs through Pearson VUE, either online with a remote proctor or at an authorized testing center, and is offered in English, Japanese, Chinese, Korean, French, German, Spanish, Portuguese, and several other languages depending on location. As a Fundamentals certification, it does not expire and carries no renewal requirement.

Your plan: AZ-900

Preparation

Study time10–25 h

typically around 10 h if you already work with this stack, around 25 h coming to it fresh

LevelFundamentals

Exam day & after

DeliveryPearson VUE online proctored or at authorized testing centers worldwide
Retake policy24-hour wait after the first attempt, 14 days between subsequent attempts, maximum 5 attempts per exam within a 12-month period
Stays validFundamentals certifications do not expire and do not require renewal. However, Microsoft recommends staying current with evolving Azure services.

The hours are our own planning estimate — Microsoft publishes no preparation time for this exam. A starting point for your calendar, not a target.

Common pitfalls

IaaS, PaaS, and SaaS responsibility boundaries are tested directly — knowing which party manages what at each layer, and which Azure services fall into which category, catches more candidates than any single service question. Datacenter geography concepts get confused with each other despite governing different availability and compliance guarantees — availability zones, paired regions, and sovereign clouds each answer a different question. The Pricing Calculator and the Total Cost of Ownership Calculator solve different problems, and candidates often can't say which one a scenario calls for. Azure Policy, Blueprints, management groups, and resource locks each govern a different layer, and Microsoft Entra ID features (MFA, Conditional Access, SSO) get mixed up with on-premises Active Directory concepts they only superficially resemble.

Watch list: AZ-900

  1. 01Cloud Models

    Confusing IaaS, PaaS, and SaaS responsibility models and not knowing which Azure services fall into which category.

  2. 02Azure Regions

    Not understanding availability zones, region pairs, and sovereign cloud concepts and their impact on service availability.

  3. 03Pricing Calculator

    Struggling to differentiate the Azure Pricing Calculator from the Total Cost of Ownership (TCO) Calculator and their use cases.

  4. 04Governance Tools

    Mixing up Azure Policy, Blueprints, Management Groups, and Resource Locks and their specific governance functions.

  5. 05Identity Services

    Confusing Microsoft Entra ID (Azure AD) features like MFA, Conditional Access, and SSO with on-premises Active Directory.

Pass-IT trains you on exactly these weak spots — adaptive & spaced →

Frequently asked questions

How long is the Microsoft Azure Fundamentals exam?

The AZ-900 exam has 50 questions and a 45-minute time limit.

What is the passing score for Microsoft Azure Fundamentals?

You need 700 / 1000 to pass the AZ-900 exam.

What are common mistakes on the Microsoft Azure Fundamentals exam?

Common pitfalls include: Cloud Models, Azure Regions, Pricing Calculator, Governance Tools, Identity Services. Focus study time on these areas to avoid losing points.

Does AZ-900 expire?

No. Microsoft fundamentals certifications do not expire and carry no renewal requirement, so once you pass AZ-900 it stays on your transcript. Azure itself keeps moving, so the certificate lasts longer than the knowledge does.

Do you need AZ-900 before AZ-104 or AZ-204?

No, both are open to book without it. AZ-900 is worth taking if cloud concepts, Azure regions and governance tooling are still new to you, since those are exactly the areas it covers. If you already administer Azure resources, going straight to the associate exam saves you a sitting.

How long does it take to prepare for AZ-900?

Around 15 hours is a realistic budget for someone with some IT background. The exam runs 45 minutes and leans on recognition rather than configuration, so spaced practice over a week or two beats one long session.

What happens if you fail AZ-900?

You can sit it again after 24 hours. Later attempts need 14 days between them, with a ceiling of five attempts on the same exam in any 12-month period.

How should you study for AZ-900?

The trap is treating AZ-900 as a vocabulary test and then meeting questions about the pricing calculator and governance tools that assume you have actually opened them. Our guide sets out what to click through rather than just read. Read the AZ-900 study guide

Pass-IT is an independent study tool, not affiliated with or endorsed by Microsoft; Microsoft and exam names are trademarks of their respective owners.

One certification. One payment.

Full AZ-900 access

Get the full question pool for this certification. Alex explains every answer, and your readiness score shows what to work on next.

Buy AZ-900 access for $29.99One payment. Lifetime access to this certification.
Take the free readiness check20 questions. No card. See what to study before you buy.

Reach 80% readiness and pass — or your money back.

How the score works →