How Hard Is the AZ-900? Difficulty, Timing, and What Trips People Up

AZ-900 has a reputation as the easy one, and the reputation is mostly earned. It is a beginner-level exam with no prerequisites, no lab, and no objective that asks you to build anything. People still fail it, and they fail it for reasons that have very little to do with how hard cloud computing is.

Two questions get mixed together here. The material is not especially hard. The exam is still not easy to pass without preparation, and the gap between those two facts is where the failures live.

Everything below was checked against Microsoft’s own pages on September 7, 2026: the Azure Fundamentals certification page, the AZ-900 study guide, the exam scoring and score reports page, the exam duration and exam experience page, and the exam retake policy. Where Microsoft does not publish something, this post says so instead of repeating a number from an aggregator.

The exam

	AZ-900
Full name	Microsoft Certified: Azure Fundamentals
Level	Beginner
Passing score	700 on a 1 to 1,000 scale
Exam duration	45 minutes (fundamentals exams)
Seat time	65 minutes
Question count	Not published per exam. Microsoft states most of its exams contain 40 to 60 questions
Prerequisites	None
Delivery	Proctored, at a test center or online
Retake	24 hours after a first failure, 14 days between later attempts
Expiration	Does not expire
Skills measured updated	July 20, 2026

Two of those rows are worth reading twice, because they are the two most commonly misquoted numbers about this exam.

The 45 minutes is real, and it comes from Microsoft. The AZ-900 certification page does not print a duration on the page itself. It links to Microsoft’s exam duration and exam experience page, and that page carries a table: fundamentals exams run 45 minutes of exam time inside 65 minutes of seat time. Seat time includes reading the instructions, accepting the candidate agreement, and leaving comments afterward, so the working clock is the 45.

The question count is a range, not a fixed number. Microsoft states that the number of questions is subject to change and that most of its certification exams typically contain between 40 and 60 questions, with the number varying by exam. It does not publish a count for AZ-900 specifically. If you are pacing yourself, plan for roughly a minute per question and treat anything more precise as a guess.

The domain weights come from the study guide, current as of July 20, 2026:

Domain	Weight
Describe Azure architecture and services	35 to 40%
Describe Azure management and governance	30 to 35%
Describe cloud concepts	25 to 30%

The difficulty ceiling

Read the verb at the front of every objective in the study guide. Describe cloud computing. Describe the shared responsibility model. Describe Azure regions, region pairs, and sovereign regions. Describe the purpose of resource locks.

Not configure. Not deploy. Not troubleshoot. Every single objective on this exam asks you to describe something, and that one word sets a hard ceiling on how difficult AZ-900 can be. There is no scenario where you are handed a broken deployment and asked to fix it, because nothing in the blueprint authorizes that kind of question.

This is why experienced engineers pass AZ-900 with a weekend of skimming, and why it is a poor signal of hands-on ability. It is also why the exam is a genuine hurdle for a career changer: describing forty Azure services accurately still means knowing forty Azure services exist and what each one is for.

Scoring

The passing score is 700, and almost everyone reads that as 70%. Microsoft says otherwise in plain terms on its scoring page: all technical exam scores are reported on a scale of 1 to 1,000, a passing score is 700 or greater, and “as this is a scaled score, it may not equal 70% of the points.”

The mechanics behind that are worth understanding before you build a study target around a percentage:

• The bar moves with the question set. Microsoft states that for easier sets of questions more points are required to pass, and for harder sets fewer points are required. You are not being measured against a fixed percentage of a fixed test.
• Some questions do not count. Microsoft seeds unscored questions to gather data, and states that you will not know which ones they are. Answer everything as though it counts.
• There is no penalty for guessing. No points are deducted for a wrong answer, so a blank is strictly worse than a guess. Never leave one empty.
• Multi-part questions give partial credit. You earn a point per correctly answered component, so you can take all, some, or none of the points on offer.

One consequence of the scaled score catches people after a failure. Microsoft will not tell you which questions you missed, and states that the bar chart on your score report cannot be used to work out how many questions you answered correctly in any section. You get strengths and weaknesses, not a marked paper.

Reference access

Here is the asymmetry almost nobody mentions when they call AZ-900 the easy Microsoft exam.

On associate and expert role-based exams, Microsoft lets you open Microsoft Learn in a split screen during the exam and search the documentation. On fundamentals exams, you do not get it. Microsoft’s exam experience page states the resource is available on role-based exams and specifically not on fundamentals exams.

So the comparison people draw between AZ-900 and AZ-104 is not simply easy versus hard. The easier exam is closed-book and the harder one ships with the documentation. That changes what studying for AZ-900 has to accomplish: the recall has to be finished before you sit down, because there is nothing to look anything up in.

The break policy has a similar edge to it. Microsoft has built five minutes of break time into the exam clock, but the clock keeps running while you are away, and once you start a break you cannot return to any question you have already seen, answered or not. On a 45-minute exam, a break is almost never the right call.

Question types

Microsoft does not publish the format breakdown for any specific exam, and says so directly: it does not identify specific exam formats or question types before the exam, to protect exam security.

What it does publish is the AZ-900 certification page’s note that the exam is proctored and that you may have interactive components to complete as part of it. Its exam sandbox demonstrates the question types that appear across its exams, including multiple choice, drag and drop, build list, hot area, and active screen.

The practical instruction is to spend twenty minutes in the free exam sandbox before test day. It runs the real interface, the real instructions, and the real candidate agreement. Fumbling a drag-and-drop control on a 45-minute clock is a self-inflicted wound, and it is completely avoidable.

Common failure points

Four places, consistently, and none of them is conceptual difficulty.

Service-name confusion. This is the big one. Azure sells several services that sound alike and solve different problems, and the exam is built to test exactly that discrimination. Azure Policy against resource locks against role-based access control. Azure Monitor against Azure Service Health against Azure Advisor. The pricing calculator against the total cost of ownership calculator. Blob access tiers against storage redundancy options. If you cannot say in one sentence what each of those does and what it does not do, the exam will find it.

Governance and cost, treated as an afterthought. Management and governance is 30 to 35% of the exam, which puts it neck and neck with architecture as a scoring block. It is also the least interesting material for most candidates, so it gets studied last and least. That single habit accounts for a lot of near misses.

Studying in the study guide’s order. Cloud concepts is listed first and is the smallest and most intuitive domain. Starting there feels productive and front-loads the least valuable 25 to 30%. Architecture and governance together are 65 to 75% of the exam.

Pacing. Forty-five minutes for a possible sixty questions leaves no room for long deliberation. Candidates who fail on time almost always spent it re-reading the first ten questions.

Difficulty by background

Difficulty is not a property of the exam alone. It depends on where you are starting.

Working in IT already, no cloud exposure. Straightforward. The vocabulary transfers, the concepts are familiar under different names, and the work is memorizing Azure’s naming. Two to three weeks of evenings is a normal budget.

Working with Azure day to day. Easy, with one trap. Practitioners fail AZ-900 by answering from how their organization does things rather than from Microsoft’s definitions, and by skipping the cost and governance domain because they have never touched billing. Study the blueprint, not your job.

Career changer, no IT background. This is the group for whom AZ-900 is a real exam. Nothing in it is conceptually hard, but the volume of unfamiliar proper nouns is genuinely large, and there is no prior scaffolding to hang them on. Six to eight weeks is realistic, and the failures in this group are almost always people who read the material without ever testing recall.

Holding another cloud or infrastructure certification. Trivial. If you hold an associate-level cloud certification, most of your study time is a naming translation exercise.

Pass rates

Microsoft does not publish pass rates for AZ-900 or for any of its certification exams. Any specific percentage you see quoted for this exam is somebody’s estimate, a survey of self-selected respondents, or an invention, and none of those tells you anything about your own probability of passing.

What does predict your result is measurable and sits entirely in your control: how many exam-shaped questions you have worked through, and whether you understood the explanations rather than memorizing the answers.

Failure and retakes

Failing AZ-900 is recoverable and mildly expensive, and the schedule is stricter than most people expect.

Microsoft’s retake policy allows a retake 24 hours after a first failure. Every attempt after that carries a 14-day waiting period. You may not sit the same exam more than five times in a 12-month period from your first attempt, and if you fail five times you wait until 12 months from that first attempt. You pay for each attempt.

So the cost of a casual first attempt is not just the fee. It is the fee plus a fortnight before you can try a third time. If you are within reach, the arithmetic favors spending one more week studying over booking early to see how it goes.

Microsoft also runs an Exam Replay offer that bundles an exam with a retake, which is worth pricing if you are genuinely unsure.

Study time

Two to four weeks of evening study for someone with general IT background. Six to eight weeks if cloud and IT are both new. Under a week if you already work with a major cloud platform.

Sequence it by exam weight rather than by the study guide’s order:

1. Architecture and services first (35 to 40%). Most of the service names live here, and they need the most repetitions.
2. Management and governance second (30 to 35%). Cost management, Azure Policy, resource locks, the monitoring tools. Dull, heavily weighted, and the domain most often skimped.
3. Cloud concepts last (25 to 30%). The most intuitive material and the fastest to consolidate at the end.

Our free Study Library covers all three in full. Start with the AZ-900 study guide, then work the complete Azure Fundamentals library. The articles that address the confusions above directly are Azure Policy and governance, resource locks, RBAC compared with Conditional Access, Azure Monitor logs, metrics, and alerts, Azure Advisor, Service Health and resource health, and the pricing calculator compared with the TCO calculator.

Microsoft also publishes a free practice assessment on its certification page. Take it. It is written by the people who write the exam, and it is the closest free signal of the wording style you will face.

Verdict

AZ-900 is an easy exam that is easy to fail, and the two halves of that sentence come from different places.

It is easy because every objective is a describe objective, the ceiling on question difficulty is low, there is no lab, and there are no prerequisites. It is easy to fail because it is closed-book on a 45-minute clock, it is scored on a scale that is not a percentage, roughly two thirds of it sits in the two domains people study last, and Azure’s service catalog is full of names that sound like each other on purpose.

The candidates who fail are almost never the ones who found the material difficult. They are the ones who found it easy, read it once, and never tested whether they could tell Azure Policy from a resource lock under time pressure. If you want the fuller picture on whether the certification earns its place on your resume at all, we covered that separately in Is AZ-900 worth it?.

The thing that decides your first attempt is how many exam-shaped questions you have worked through and understood beforehand. Our AZ-900 practice bank carries 1,300 original questions mapped to the current objectives, every answer explained in plain English for people new to cloud, plus a 500-card spaced-repetition flashcard deck built for exactly the service-name recall this exam turns on. $59 once, lifetime access for the life of the exam version, no subscription.

Not sure where you stand yet? Start with the free 15-question test and let the result tell you whether you are two weeks out or six, before you book anything.