The Complete 30-Day AZ-900 Study Plan: Pass the Azure Fundamentals Exam
Passing the AZ-900 Azure Fundamentals exam takes structured preparation, realistic time management and focused practice with good resources. This plan sets out what to study each week and how to use practice tests, with the aim of passing on your first attempt.
AZ-900 Exam Overview
AZ-900 is Microsoft's foundational cloud certification. Start with the format and what the exam requires.
Exam Format and Passing Requirements
- Passing Score: 700 on a scaled score of 1-1000 (not a percentage of questions correct)
- Duration: 45 minutes
- Question Count: 40-60 questions
- Question Types: Multiple choice, multiple select, drag-and-drop
- Cost: $99 USD
- Retake Policy: Wait 24 hours after a first fail, then 14 days between later attempts (up to 5 attempts in a 12-month period)
The pass mark is 700 on a scaled score, which does not convert to a fixed number of correct answers, so aim to know the material well rather than counting how many you can miss. The exam measures conceptual knowledge rather than deep technical skill, and steady preparation is enough to pass it.
Exam Objectives Breakdown
The AZ-900 exam tests three domains. Their weights tell you where to spend your study time.
| Domain | Exam Weight | Study Week | Key Topics |
|---|---|---|---|
| Cloud Concepts | 25-30% | Week 1 | IaaS, PaaS, SaaS, shared responsibility, cloud benefits |
| Azure Architecture and Services | 35-40% | Weeks 2-3 | Compute, networking, storage, databases, identity, security |
| Azure Management and Governance | 30-35% | Week 4 | Cost management, governance, monitoring, SLAs |
The biggest share of this plan goes on Azure's architecture and services domain. Give this area roughly 40% of your study time.
Week 1: Cloud Concepts and Shared Responsibility
Week 1 covers the foundations: what cloud computing offers and how it differs from traditional infrastructure.
Understanding Cloud Computing
Cloud computing is the on-demand delivery of computing resources (servers, storage, databases, software) over the internet. The main benefits are:
- Scalability: Increase or decrease resources based on demand
- Cost Efficiency: Pay only for what you use
- Reliability: Built-in redundancy and failover
- Security: Shared responsibility for protecting data
- Global Reach: Access from anywhere with internet connectivity
Service Models: IaaS, PaaS, and SaaS
The AZ-900 exam puts heavy weight on the three cloud service models and how they differ.
Infrastructure as a Service (IaaS)
IaaS provides virtualised computing resources over the internet. You manage applications, data, and runtime, while Microsoft manages virtualisation, servers, storage, and networking.
Example Azure services: Virtual Machines, Azure Kubernetes Service (AKS), Virtual Networks
Platform as a Service (PaaS)
PaaS provides a platform for building and deploying applications. You manage only applications and data. Microsoft handles everything else, including runtime, middleware, and OS.
Example Azure services: App Service, Azure SQL Database, Azure Cosmos DB, Azure Functions
Software as a Service (SaaS)
SaaS delivers applications over the internet. You use the software through a web browser. Microsoft manages all infrastructure, platform, and application layers.
Example: Microsoft 365, Dynamics 365, Salesforce
The Shared Responsibility Model
The shared responsibility model sets out what Microsoft manages and what you manage. It is central to the AZ-900 exam.
As you move from IaaS to PaaS to SaaS, your responsibility decreases while Microsoft's increases:
- IaaS: You're responsible for applications, data, runtime, OS, middleware. Microsoft manages virtualisation, servers, storage, and networking
- PaaS: You're responsible for applications and data only
- SaaS: Microsoft is responsible for everything
Exam questions on the model ask which party is responsible for security, updates and maintenance.
Cloud Deployment Models
Week 1 also covers the cloud deployment models:
- Public Cloud: Resources available to everyone; most cost-effective
- Private Cloud: Infrastructure dedicated to one organisation
- Hybrid Cloud: Combination of public and private cloud resources
Week 2: Azure Core Services and Infrastructure
Week 2 is the heaviest week of the plan. It covers Azure's main services, which make up 35-40% of exam questions.
Compute Services
Compute services run applications and process data.
Azure Virtual Machines (VMs)
VMs are IaaS resources that give you full control over the operating system and installed software. Use them when you need the most control and flexibility.
Azure App Service
App Service is a managed PaaS offering for hosting web apps, mobile backends, and RESTful APIs. Microsoft manages the underlying infrastructure.
Azure Container Instances (ACI) and Azure Kubernetes Service (AKS)
Containers package applications with their dependencies. ACI is a serverless container service, while AKS provides managed Kubernetes orchestration for larger container deployments.
Azure Functions
Functions is Azure's serverless compute service. Code runs in response to events, you do not manage servers, and billing is per execution.
Storage Services
Azure has several storage services, each suited to a different kind of data.
Azure Blob Storage
Blob Storage holds large amounts of unstructured data such as images, videos and backups. It scales well and is cheap for large files.
Azure Table Storage
Table Storage stores structured NoSQL data. Use it when you need flexible schemas and fast access to data.
Azure Queue Storage
Queue Storage enables asynchronous messaging between application components.
Azure Disk Storage
Disk Storage provides persistent block storage for virtual machines. It supports managed disks with automatic redundancy.
Networking Services
Networking services connect Azure resources to each other and to on-premises infrastructure.
Azure Virtual Network (VNet)
VNets create isolated network environments in Azure. You define IP address ranges, subnets, and security rules. VNets are the base of most Azure deployments.
Azure Load Balancer
Load Balancer spreads traffic across multiple resources for availability and performance.
Azure Application Gateway
Application Gateway is a layer 7 load balancer with support for URL routing, SSL/TLS termination, and Web Application Firewall (WAF).
Azure Content Delivery Network (CDN)
CDN caches content at edge locations globally, reducing latency for end users.
Database Services
Azure has several database services for different application needs.
Azure SQL Database
SQL Database is a managed relational database based on SQL Server. Microsoft handles patching, backups, and maintenance.
Azure Cosmos DB
Cosmos DB is a globally distributed NoSQL database supporting multiple APIs (SQL, MongoDB, Cassandra).
Azure Database for MySQL and PostgreSQL
These services provide managed open-source databases with automatic backups and high availability.
Week 3: Security, Compliance, and Identity
Week 3 covers the security and identity services, which fall under the "Describe Azure architecture and services" and "Describe Azure management and governance" domains of the AZ-900 exam.
Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity and access management service, separate from on-premises Active Directory.
- Authentication: Verify user identity through multi-factor authentication (MFA)
- Authorization: Control what authenticated users can access
- Single Sign-On (SSO): Users log in once and access multiple applications
- Conditional Access: Enforce policies based on user location, device compliance, and risk
Role-Based Access Control (RBAC)
RBAC decides what authenticated users can do with Azure resources. The main concepts are:
- Roles: Define permissions (Owner, Contributor, Reader, and custom roles)
- Scope: Apply roles at subscription, resource group, or resource level
- Security principals: Assign roles to users, groups, and service principals
Owner has full permissions, Contributor can create and manage resources but can't assign permissions, and Reader can view resources only.
Microsoft Defender for Cloud and Microsoft Sentinel
Microsoft Defender for Cloud provides security recommendations and threat detection across your Azure environment. It identifies misconfigurations and security vulnerabilities.
Microsoft Sentinel is a cloud-native security information and event management (SIEM) solution for detecting and responding to threats.
Encryption and Compliance
- Encryption at Rest: Data stored on disk is encrypted using industry-standard algorithms
- Encryption in Transit: Data moving between services uses TLS/SSL protocols
- Azure Key Vault: Manages cryptographic keys and secrets securely
Compliance and Certifications
Azure meets many compliance standards, including:
- ISO 27001: Information security management
- SOC 2: Service organization controls
- HIPAA: Healthcare industry requirements
- GDPR: European data protection regulations
- PCI DSS: Payment card security
The exam tests which compliance certifications Azure holds, rather than the detail of each standard.
Azure Policies and Governance
Azure Policies enforce organisational standards across resources. For example, you can require all storage accounts to use encryption or prevent resources from being deployed in certain regions.
Week 4: Pricing, Cost Management, and SLAs
The final week covers cost management and service level agreements, which make up 10-15% of the exam.
Understanding Azure Pricing
Azure pricing varies by service, region and usage. The main pricing models are:
Pay-As-You-Go
You pay for what you use. It is flexible but costs more than reserved options.
Reserved Instances
Prepay for one or three years for discounts of up to 72%. Suited to predictable workloads.
Spot Pricing
Buy unused Azure compute capacity at a large discount. Suited to fault-tolerant applications.
Total Cost of Ownership (TCO) Calculator
The TCO calculator compares on-premises infrastructure costs with Azure cloud costs. It includes:
- Hardware and software licensing
- IT labour and administration
- Datacenter infrastructure (power, cooling, space)
- Downtime and disaster recovery costs
The TCO calculator is free on the Microsoft website. Exam questions can ask about using it for migration planning.
Azure Cost Management
Azure Cost Management shows where your spending goes, through:
- Budgets: Set spending limits and receive alerts
- Cost Analysis: Track spending by service, region, or resource
- Recommendations: Identify opportunities to reduce costs
Service Level Agreements (SLAs)
SLAs set out Microsoft's uptime guarantees. Common levels are:
- 99.9% availability: About 43 minutes downtime per month
- 99.95% availability: About 22 minutes downtime per month
- 99.99% availability: About 4 minutes downtime per month
Each resource has its own SLA. The exam tests how SLAs work and how they are calculated.
Support Plans
Azure offers four support tiers:
- Basic: Free, includes documentation and community forums
- Developer: $29/month, business hours support
- Standard: $100/month, 24x7 support with 1-hour response for critical issues
- Professional Direct: $1000/month, fastest response times
The 30-Day Daily Schedule
The schedule below assumes 60-90 minutes of study a day across four weeks.
Study Format
Split each 60-90 minute session like this:
- 40-50 minutes: Microsoft Learn modules and documentation
- 20-30 minutes: Practice questions on azureprep.com
- 10 minutes: Review weak areas from previous sessions
Week 1 Daily Schedule
- Days 1-2: Cloud computing fundamentals, service models (IaaS, PaaS, SaaS)
- Days 3-4: Shared responsibility model, deployment models
- Days 5-6: Cloud benefits and cost considerations
- Day 7: Week 1 review and practice questions
Week 2 Daily Schedule
- Day 8: Azure Compute services (VMs, App Service, Functions)
- Day 9: Azure Storage services (Blob, Table, Disk)
- Day 10: Azure Networking (VNets, Load Balancer, CDN)
- Day 11: Azure Databases (SQL Database, Cosmos DB)
- Day 12: Analytics services (Data Lake, Synapse)
- Days 13-14: Week 2 review and targeted practice questions
Week 3 Daily Schedule
- Days 15-16: Microsoft Entra ID, authentication, and MFA
- Day 17: RBAC and identity management
- Days 18-19: Azure Security services (Defender for Cloud, Sentinel)
- Day 20: Encryption, compliance, and Azure Policies
- Day 21: Week 3 review and security-focused practice
Week 4 Final Review and Mock Exams
- Days 22-23: Azure pricing models and TCO Calculator
- Days 24-25: Cost Management, budgets, and recommendations
- Days 26-27: Service Level Agreements and support plans
- Days 28-30: Full-length timed mock exams
Free Resources for AZ-900 Preparation
All of the resources below are free.
Microsoft Learn
Microsoft Learn has official training modules for all Azure services. Each module includes:
- Video demonstrations
- Interactive exercises in a free Azure sandbox
- Knowledge checks to verify understanding
- Learning paths organised by certification
Microsoft Learn is at learn.microsoft.com. It is Microsoft's official training resource, and it is free.
azureprep.com Practice Questions
azureprep.com has AZ-900 practice questions, free in full with a free account, with:
- Exam-style questions with detailed explanations
- Timed mock exams that simulate the real test
- Performance tracking to show weak areas
- Questions updated as Azure services change
Practising on azureprep.com throughout the plan shows up knowledge gaps early, while there is still time to fix them.
Microsoft Azure Documentation
The official Azure documentation at docs.microsoft.com covers every service in detail. Use it when you need more depth on a topic.
YouTube Channels
Free Azure training videos come from:
- Microsoft Azure YouTube channel
- Individual instructors covering AZ-900 concepts
Videos suit people who learn best from demonstrations.
Practice Test Strategy: Weeks 3 and 4
Practice tests show your knowledge gaps and build the stamina to concentrate for the whole exam.
Week 3 Practice Strategy
During week 3, take untimed practice tests focused on specific domains:
- Take 1-2 untimed practice exams covering cloud concepts and Azure services
- Review every wrong answer, and every answer you guessed correctly
- Read the explanations to see why each correct answer is correct
- Track your weakest topics for targeted review
Week 4 Mock Exam Strategy
Week 4 is for timed, full-length mock exams, which build endurance and pacing.
- Days 22-27: Take one untimed full-length mock exam every 2-3 days
- Days 28-30: Take two full-length timed mock exams on azureprep.com
- Score both exams as if taking the real test: 45 minutes, 40-60 questions
Sit timed exams under real test conditions:
- Find a quiet, distraction-free environment
- Use only the exam timer
- Do not use notes or other materials
- Review answers only after the timer ends
Interpreting Mock Exam Results
If your mock exam scores are consistently low:
- Review weak domains thoroughly
- Take additional untimed practice tests on those topics
- Delay your exam date if necessary
If you consistently score 75-85% on timed exams:
- Review incorrect answers to understand your mistakes
- You're ready to schedule the real exam
If you score 85%+ on multiple exams:
- You're well-prepared
- Review any remaining weak areas
- Book your exam
Common Mistakes That Cause Exam Failure
Candidates commonly make the four mistakes below.
Mistake 1: Not Understanding the Shared Responsibility Model
Many candidates lose marks on questions about who is responsible for security, updates and maintenance. The shared responsibility model answers all of them.
Solution: Create a chart showing responsibility for IaaS, PaaS, and SaaS. Review it daily.
Mistake 2: Confusing Azure Services
Azure has dozens of services with similar names. Candidates often confuse Azure SQL Database with Azure SQL Managed Instance, or Azure Container Instances with Azure Kubernetes Service.
Solution: Build a comparison table for similar services, listing when to use each one.
Mistake 3: Memorising Rather Than Understanding
The AZ-900 exam tests conceptual understanding, not memorisation of service names or technical specifications. Most questions describe a business requirement and ask you to choose the solution that meets it.
Solution: Practise scenario-based questions, and learn why you would choose each Azure service as well as what it does.
Mistake 4: Neglecting Cost Management and Pricing
Many candidates underrate Azure pricing models, cost optimisation tools and billing concepts, yet these topics make up a significant portion of the exam.
Solution: Set aside time for the Azure pricing calculator, the cost management tools, and purchasing options such as reserved instances and hybrid benefits.
Exam Day Tips
On exam day, arrive early and read each question carefully. Keep a steady pace, and move on from hard questions instead of getting stuck. Mark any question you are unsure of for review, and answer every question, even if you have to guess.
Microsoft updates exam content regularly, so spend your time on core concepts rather than memorising details that may change.
Summary
The plan depends on daily study, hands-on practice with Azure services and regular practice exams to check progress. Learn the concepts behind each service, and cover every exam domain, including the smaller ones.
AZ-900 practice questions, free with a free account, are at azureprep.com.