What Actually Shows Up on the Azure Fundamentals Exam
Most people studying for AZ-900 waste about three weeks because they treat it like a memorization test instead of a comprehension check. The exam does not care if you can quote the exact percentage of uptime SLA for a single-instance virtual machine. It cares whether you understand when to use a cloud service versus a platform service versus a function-as-a-service, and what tradeoff each one introduces. I spent six months building infrastructure documentation for teams that kept over-provisioning because they did not understand the boundary between PaaS and IaaS on Azure. The confusion showed up in the exam in the most predictable ways. The official source is Microsoft Learn's practice assessment, which you can access directly from your Azure account dashboard or at the certification page. It gives you about 40 questions with explanations. They are not identical to what you get on exam day, but the phrasing style is accurate. Third-party providers exist, but their content quality varies wildly. The ones worth using are the free question banks that reference the actual exam objectives rather than recycling content from older exam versions. A lot of the paid dumps out there are from 2022 and 2023 and contain questions about services that have been replaced or renamed since then. I saw this firsthand when a colleague almost failed his attempt because he had studied from a question bank that still referenced Azure SQL Database v12 behavior instead of the current elastic pool model. The test is timed at 30 to 45 minutes with roughly 40 to 60 questions. You get multiple choice, drag-and-drop, and some hit-marking items where you select all answers that apply. The tricky part is that the exam uses scenario-based wording rather than straightforward definition questions. Instead of asking "What is Azure Virtual Machine?", you will get a paragraph describing a company that needs to migrate a legacy application quickly with minimal changes, and then be asked which compute option fits. The distinction matters because it means reading comprehension is as important as technical knowledge.
One specific edge case I ran into is with the shared responsibility model questions. The exam tries to trick you by describing a responsibility that belongs to the customer and making it sound like it belongs to Microsoft, or vice versa. For example, patching the guest OS on a Virtual Machine is your responsibility, but patching the underlying hypervisor is Microsoft's. On a managed instance like Azure SQL Managed Instance, the line blurs more than it does on a raw VM, and that specific distinction comes up often. I learned this the hard way after writing practice explanations that incorrectly attributed guest OS patching to Microsoft for a long stretch. Fixing that error cost me a day of rework and a slightly embarrassed Slack message to a team that had been using my notes.
Core Topics That Actually Matter
The exam covers four main domains. Compute, storage, networking, and pricing and support. Within compute, know the difference between Azure Virtual Machines, App Services, Azure Functions, and Container Instances well enough to pick the right one from a scenario. App Service is for web apps and API apps with built-in scaling and deployment slots. Functions is for event-driven code without managing servers. Container Instances is for short-lived or containerized workloads where you do not need a full orchestration layer. Kubernetes Service is there too but it shows up less frequently on this particular exam. Storage questions tend to focus on choosing the right blob tier. Hot for frequently accessed data, cool for infrequent access with longer retention, and archive for data you rarely touch but must keep. You need to understand retrieval latency differences between them. Hot blob reads take milliseconds. Cool takes a bit longer with a rehydration step sometimes. Archive can take hours to restore. That practical difference is worth more than memorizing the pricing table. Networking on this exam is mostly about virtual networks, subnets, NSGs, and the basic idea of Azure Firewall versus Application Gateway. NSGs are stateful and filter at the subnet or NIC level. Firewall is centralized. Application Gateway handles layer 7 routing and SSL termination. Don't conflate them. A common mistake people make on the test is selecting Application Gateway when the scenario only requires network-level filtering, when NSG would be sufficient and cheaper.
Get the Full Details
What Beginners Keep Getting Wrong
The biggest blind spot is mixing up high availability with disaster recovery. High availability on Azure is about keeping a workload running during failures within a region, using availability zones or multiple instances across fault domains. Disaster recovery is about surviving a regional outage, using geo-redundant storage, zone-redundant backups, or active-active regions. These are separate concepts with separate services and pricing. I have seen study guides conflate them, and it shows up repeatedly in exam questions that ask which feature protects against a region-wide failure versus a single-datacenter failure. Another counter-intuitive point is that Azure Active Directory is not the same thing as Entra ID in the context of the exam, even though they are now the same product. The exam currently still references both terms interchangeably, and questions may use either name. If you are studying from material that treats them as different systems, you are looking at outdated content. The migration from AAD to Entra ID was announced in 2023 and the terminology shift is complete, but exam question banks have not fully caught up everywhere.
Practical Study Approach
Start with the Microsoft Learn AZ-900 learning path. It is free and it covers every objective explicitly. Budget about 20 to 30 hours total, not 80. Most people who spend 80 hours are re-reading the same modules repeatedly because they do not trust their understanding. Instead, take practice exams early and often. Even if you score 40 percent on your first one, the review of incorrect answers teaches you more than another pass through the reading material. Track which domain you keep missing. If it is pricing and TCO, read the pricing calculator documentation. If it is security and compliance, focus on the shared responsibility model and Azure Policy basics. Do not try to achieve a perfect score on the first practice test. Aim for consistent 80-plus on three separate attempts before scheduling the real exam.
Limitations of This Certification
The AZ-900 is a fundamentals-level exam. It validates that you understand cloud concepts and Azure basics. It does not validate hands-on ability. Passing AZ-900 will not prepare you to deploy a production workload without additional study. Several hiring managers I have talked to treat it as a baseline checkbox, not a signal of competence. If your goal is to actually build things, plan to move toward AZ-104 or AZ-204 after you clear this one. The foundational knowledge transfers, but the skill gap between AZ-900 and real Azure administration is significant.
