Az 900 Exam Topics

What you actually need to know about the Azure Fundamentals test

Most people treat the Az 900 as a multiple-choice quiz you can breeze through after a weekend of reading. That mindset gets you a passing score on practice exams and a very different result on exam day. The test is deliberately scenario-heavy. It stops asking "what is a cloud service" and starts asking "which cloud service model fits a company that wants zero server patching." The gap between the two styles is where candidates lose points. I spent three weeks prepping for my first attempt, then another two weeks after I failed the first time. My mistake was memorizing definitions instead of mapping them to business outcomes. Once I started answering questions by eliminating the option that created the most operational work for a customer, my score jumped from 680 to 850. The exam does not reward rote learning. It rewards the ability to pick the simplest solution that still meets compliance, cost, and scale requirements.

Az 900 Exam Topics that actually appear on the real test

The official exam blueprint breaks down into four main areas: cloud concepts, Azure architecture and services, security and compliance, and pricing and support. Weighted differently across versions, but the general distribution stays consistent. Cloud concepts usually carry the highest percentage, around 30-35 percent. Architecture and services follow at roughly 25-30 percent. Security and compliance sits near 25 percent, and pricing and support is the smallest bucket, often 10-15 percent. These numbers shift slightly when Microsoft updates the exam, so always check the latest blueprint on their certification page before you book. Within cloud concepts, you will see questions about the six advantages of cloud computing, the three service models, and the four deployment models. But the test rarely asks for a definition. It gives you a scenario like "a retail chain needs to handle traffic spikes during holiday sales without buying hardware" and expects you to choose elastic scaling over manual provisioning. The answer is almost always the option that reduces manual work while maintaining reliability. Architecture and services is the biggest trap. You will encounter dozens of Azure products: virtual machines, App Service, Azure Functions, Kubernetes Service, Blob Storage, Cosmos DB, Synapse, Databricks, Event Hubs, Service Bus, and more. The exam does not expect you to know how to configure each one. It expects you to know when to use which one. I once confused Azure Functions with Logic Apps because both handle automation. The difference is that Functions are for code-based event-driven tasks, while Logic Apps are for workflow orchestration with connectors. A telltale hint is whether the scenario mentions "custom code" versus "pre-built connectors." If it is custom code, go with Functions. If it is gluing SaaS services together, Logic Apps is the right pick.

Security and compliance is where many candidates underinvest. They assume it is just about Azure AD and RBAC. It is more than that. You need to understand the shared responsibility model inside and out. Microsoft secures the cloud; you secure what you put in the cloud. That means encryption at rest and in transit, network security groups, Azure Firewall, Defender for Cloud, and Key Vault for secrets. Compliance questions often reference GDPR, HIPAA, ISO standards, and Microsoft Trust Center. You do not need to memorize regulation text. You need to know which Azure tool helps with which requirement. For data residency, the answer is usually Azure Policy or location-based service selection. For encryption key management, it is Azure Key Vault. Pricing and support is the shortest section but the one people neglect until it is too late. You should know the difference between pay-as-you-go, reserved instances, and spot VMs. You should understand Azure Pricing Calculator versus Total Cost of Ownership calculators. Support plans matter: Basic, Standard, Professional Direct, and Enterprise. The exam loves to ask which plan includes architectural reviews and 24/7 support with fast response times. That is Professional Direct or Enterprise. Spot VMs are for interruptible workloads where cost trumps availability. Reserved instances lock you in for one or three years but cut compute costs by up to 72 percent. Use that number. It comes up often.

How I actually studied instead of following generic advice

Generic advice says "watch videos and take practice tests." That works if you have time. It does not work if you are working full-time. I switched to a hands-on lab first, then filled gaps with targeted reading. I created a free Azure account and spent two days breaking things on purpose. I spun up a VM, deleted it, recreated it with a different OS, compared costs in the pricing calculator. I deployed a static website to Blob Storage, then tried to block public access. I created a resource group, moved resources between regions, and watched what happened to latency and pricing. This tactile approach made the abstract concrete. When the exam asked about global services versus regional services, I remembered physically clicking through the portal and seeing which options changed based on region selection. I also stopped treating practice exams as scorekeepers. I used them as diagnostic tools. Every wrong answer became a research ticket. If I missed a question about Azure Advisor recommendations, I opened the documentation and read the full section on cost, performance, security, reliability, and operational excellence. I repeated this for each missed topic until I could explain the concept to someone else. Teaching it forced me to understand the nuance instead of guessing. One specific edge case I ran into involved the distinction between Azure Monitor and Log Analytics. The exam framed a scenario about alerting on CPU usage versus querying custom logs. I picked Azure Monitor for both initially because they sound similar. The correct answer split them: Azure Monitor handles metrics and alerts, Log Analytics handles log queries and advanced analytics. The workaround was to remember that "metrics and alerts" point to Monitor, while "Kusto queries and dashboards" point to Log Analytics. This distinction appears in at least one question per exam, and it is easy to miss if you skim the docs.

Pitfalls that sink otherwise prepared candidates

The biggest pitfall is overthinking. The Az 900 is not trying to trick you with esoteric features. It wants you to choose the most straightforward, cost-effective, and compliant option. If an answer includes unnecessary complexity, it is usually wrong. Another pitfall is ignoring the new services. Microsoft adds features regularly, and the exam reflects current offerings. If you study an outdated guide, you might encounter questions about Azure Arc or Microsoft Sentinel that your materials never covered. Always verify your study resources are published within the last year. A third pitfall is assuming the exam is purely technical. It is not. It is business-technical. Questions frequently include details about company size, budget constraints, regulatory environment, and existing investments. A startup with limited IT staff will get a different recommended solution than a multinational bank. Train yourself to read those context clues. They are not decorative. They are the deciding factor between two plausible answers. Finally, do not neglect the hands-on labs even if you think you are done with them. The exam measures conceptual mapping, but the practice tests that mirror it closely include screenshots and portal references. If you have never clicked through the Azure portal, you might hesitate on questions that assume familiarity with navigation paths. Spend an hour browsing the dashboard, resource groups, and cost management blade. It takes minimal time and removes that subtle uncertainty.

What this exam can and cannot do for you

The Azure Fundamentals certification proves you understand cloud basics and Azure's core services. It is a solid entry point for roles in sales, pre-sales, project management, or junior cloud administration. It does not prove you can architect a production workload. For that, you need AZ-104 or AZ-305. It also does not substitute for hands-on experience. Employers increasingly expect candidates to have built something, not just passed a multiple-choice test. Pair this certification with a personal project, like deploying a three-tier application with a load balancer, managed identity, and Azure Database for MySQL. If you are short on time, focus on the weighted areas first. Spend 40 percent of your study time on cloud concepts and architecture, 30 percent on security and compliance, and 30 percent on pricing and support. Take practice exams under timed conditions. Review every wrong answer thoroughly. Avoid cramming the night before. The exam is long enough that fatigue will hurt your accuracy. Sleep well, eat properly, and leave early for the test center or set up your remote proctoring environment a day ahead. There is no shortcut that replaces deliberate practice. But there is a smarter path. Map scenarios to services, understand why simplicity wins, and verify your knowledge against current documentation. The rest is execution.