Cloud computing is the delivery of computing services over the internet, enabling faster innovation, flexible resources, and economies of scale.

A public cloud is a cloud deployment model in which a cloud provider owns and operates the infrastructure and delivers computing resources over the public internet to multiple tenants.

A private cloud is a cloud deployment model in which cloud resources are used exclusively by a single organization, either hosted on-premises or by a third-party provider.

A hybrid cloud is a computing environment that combines public and private clouds, allowing data and applications to be shared between them.

Infrastructure as a Service (IaaS)

Infrastructure as a Service (IaaS) is a cloud service model that provides virtualized computing resources such as servers, storage, and networking on demand.

What is Azure Policy?

Azure Policy is a service in Azure that you use to create, assign, and manage policies that enforce rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

What is hybrid cloud?

A hybrid cloud is a computing environment that combines public and private clouds, allowing data and applications to be shared between them.

What is public cloud?

A public cloud is a cloud deployment model in which a cloud provider owns and operates the infrastructure and delivers computing resources over the public internet to multiple tenants.

AZ-900 Orientation: Exam Structure, Mindset, and Study Strategy — Microsoft Azure Fundamentals (AZ-900): Complete Exam-Ready Masterclass

Big Picture: What AZ-900 Really Tests

What AZ-900 Is

AZ-900 is an entry-level Azure Fundamentals exam. It checks whether you understand core cloud and Azure ideas well enough to join discussions and make basic cloud decisions.

Three Major Domains

The exam is structured into three domains: 1) cloud concepts, 2) Azure architecture and services, and 3) Azure management and governance, each with its own weight.

Scoring Overview

You receive a scaled score from 100–1000 and need 700 or higher to pass. The exam is non-adaptive and some sections do not let you go back after moving on.

Bloom Level BL2

AZ-900 targets Bloom level BL2: understand/describe. You must recognize, explain, and compare concepts, not design complex systems or memorize every technical detail.

Domain 1: Describe Cloud Concepts (20–25%)

Why Domain 1 Matters

Describe cloud concepts is about a quarter of your score. It checks whether you understand the "why" of cloud, not just product names.

Cloud Computing & Benefits

Know the exact definition of cloud computing and be able to explain benefits like scalability, pay-as-you-go pricing, global reach, and high availability.

Deployment Models

Be able to distinguish public cloud, private cloud, and hybrid cloud, and explain when an organization might choose each model.

Service Models & Shared Responsibility

Understand IaaS, PaaS, and SaaS definitions and how the shared responsibility model divides security and compliance duties.

Domain 2: Describe Azure Architecture and Services (35–40%)

Why Domain 2 Is Heavy

Describe Azure architecture and services is the heaviest domain, around 35–40%. It checks if you can recognize and explain Azure building blocks.

Core Architecture Pieces

Understand regions, availability zones, resource groups, and subscriptions, plus how management groups, subscriptions, and resources relate.

Compute, Network, Storage

Know when to use VMs, App Service, containers, Functions, VNets, VPNs, ExpressRoute, Blob Storage, Azure Files, and VM disks.

Data & Service Choice Questions

Recognize Azure SQL Database, Cosmos DB, and Synapse. Expect scenario questions asking which service best fits a described need.

Domain 3: Describe Azure Management and Governance (30–35%)

Governance Is Big

Describe Azure management and governance is about 30–35% of the exam. Many candidates underestimate identity, governance, and cost topics.

Identity & RBAC

Know what Microsoft Entra ID is and how RBAC assigns roles to users, groups, and service principals to control who can do what.

Azure Policy & Governance

Understand Azure Policy as the way to enforce rules across resources, plus the general idea of packaging governance artifacts for consistency.

Cost, SLAs, Monitoring

Be able to explain cost drivers, basic SLA ideas, and the purpose of Azure Monitor, Service Health, and management tools like the portal and CLI.

Bloom’s Taxonomy BL2: How Deep Do You Need to Go?

Why Bloom’s Level Matters

AZ-900 targets Bloom’s level BL2: understand/describe. Matching your study depth to BL2 keeps you efficient and focused.

Bloom Levels in Brief

Bloom runs from Remember and Understand up to Apply, Analyze, Evaluate, and Create. AZ-900 mostly stays at Remember and Understand.

What You Must Do at BL2

You must define, explain, and classify concepts, and answer simple scenario questions like "which service fits this need?".

What You Can Skip

You do not need to design complex systems or memorize every configuration. Aim for clear, broad understanding, not deep specialization.

Question Types and Scoring: How AZ-900 Asks

Why Format Knowledge Helps

Knowing the common AZ-900 question types helps you read faster and recognize traps, especially with similar-sounding services.

Core Question Types

Expect single-answer and multi-answer multiple choice, drag-and-drop matching, Yes/No tables, and small scenario sets.

Scoring Basics

There is no negative marking. Some complex items may give partial credit, but you should aim for fully correct answer sets.

Keyword Triggers

Watch for words like "best", "first", "most cost-effective", and "minimize management" to choose between similar Azure options.

Quick Check: Domains and Bloom Level

Test your understanding of AZ-900 domains and cognitive depth.

Which statement best matches the AZ-900 exam’s cognitive level and domain structure?

AZ-900 focuses on designing and implementing complex Azure solutions across five advanced domains.
AZ-900 is mostly about understanding and describing concepts across three domains: cloud concepts, Azure architecture and services, and Azure management and governance.
AZ-900 tests deep troubleshooting skills for Azure networking and security, with heavy emphasis on command-line tools.
AZ-900 focuses only on cloud concepts and does not cover Azure services or governance.

Show Answer

Answer: B) AZ-900 is mostly about understanding and describing concepts across three domains: cloud concepts, Azure architecture and services, and Azure management and governance.

AZ-900 is a fundamentals exam at Bloom’s level BL2 (understand/describe). It is structured into three main domains: cloud concepts; Azure architecture and services; and Azure management and governance. It does not require deep implementation or troubleshooting skills.

Worked Examples: Reading AZ-900 Questions Like an Examiner

Example 1: Deployment Models

A company keeps all hardware on-premises but wants cloud-like features. That scenario maps to a private cloud, not public or hybrid.

Example 2: Service Models

Matching descriptions to IaaS, PaaS, and SaaS tests whether you truly understand who manages what in each service model.

Example 3: Governance Tools

Yes/No tables might ask which statements describe Azure Policy vs Microsoft Entra ID or RBAC. You must distinguish their purposes.

Think Like the Examiner

For each practice question, ask what is being tested: definition, classification, or choosing the best fit. This mirrors AZ-900 design.

Quick Check: Question Types and Traps

Apply what you learned about formats and typical distractors.

You see a question that says: "Select TWO answers" and asks which options reduce management overhead for deploying a web app. Which pair BEST fits AZ-900 patterns?

Deploy on Azure Virtual Machines and manage the OS yourself.
Deploy on Azure App Service and use Azure Functions for background tasks.
Deploy on on-premises servers and use Azure Monitor.
Deploy on Azure Virtual Machines and configure everything via PowerShell.

Show Answer

Answer: B) Deploy on Azure App Service and use Azure Functions for background tasks.

Keywords "reduce management overhead" and a web app scenario usually point toward PaaS or serverless. Azure App Service plus Azure Functions offload OS and runtime management to Azure, which matches the intent. VM-based options increase management effort.

Building Your Study Plan: Time, Topics, and Tools

Align Time With Weights

Spend the most time on Domain 2, then Domain 3, then Domain 1, roughly matching their 40/35/25 percent exam weightings.

Cycle: Learn, Apply, Check

Preview topics, learn them in Skarp lessons, then apply them immediately with low-stakes questions to cement understanding.

Diagnostics & Gap Guides

Use the Skarp diagnostic to see where you stand, then follow your gap guide to focus on weak domains and subtopics.

Spaced Review for Retention

Let the spaced review queue resurface weak items and core definitions at intervals so knowledge sticks without cramming.

Design Your Personal AZ-900 Study Sprint

Use this guided exercise to turn the exam structure into a concrete plan. Write your answers in a notebook or notes app.

Step 1: Set your time window

How many days per week can you study?
How many minutes per session can you realistically commit?

Write: "I will study AZ-900 on [days] for [X] minutes each session."

Step 2: Allocate time by domain

Using your weekly total, roughly allocate:

40–45% to Azure architecture and services
30–35% to management and governance
20–25% to cloud concepts

Write down: "Per week I will spend about [X] mins on Domain 1, [Y] mins on Domain 2, [Z] mins on Domain 3."

Step 3: Pick your first 3-topic sequence

For your next three sessions, choose one topic from each domain, for example:

Domain 1: deployment models (public/private/hybrid)
Domain 2: core compute services (VMs, App Service, Functions)
Domain 3: identity and access (Microsoft Entra ID, RBAC)

Write your own 3-topic list.

Step 4: Attach specific Skarp actions

For each of those topics, define a mini-plan:

"Complete the lesson + do all in-lesson questions"
"Review missed questions in the spaced review queue"
"Note any terms I cannot define in one sentence"

Step 5: Commit to a checkpoint

Choose a date within the next 1–2 weeks to take or retake the Skarp diagnostic or a mock exam. Write: "On [date], I will take a diagnostic to pressure-test these topics."

By the end of this exercise, you should have a short written plan that fits your life and uses this course’s diagnostics, gap guides, and review tools deliberately.

Core Definitions Drill

Use these flashcards to lock in high-frequency AZ-900 terms. Aim to be able to say each definition out loud without looking.

cloud computing: Cloud computing is the delivery of computing services over the internet, enabling faster innovation, flexible resources, and economies of scale.
public cloud: A public cloud is a cloud deployment model in which a cloud provider owns and operates the infrastructure and delivers computing resources over the public internet to multiple tenants.
private cloud: A private cloud is a cloud deployment model in which cloud resources are used exclusively by a single organization, either hosted on-premises or by a third-party provider.
hybrid cloud: A hybrid cloud is a computing environment that combines public and private clouds, allowing data and applications to be shared between them.
Infrastructure as a Service (IaaS): Infrastructure as a Service (IaaS) is a cloud service model that provides virtualized computing resources such as servers, storage, and networking on demand.
Platform as a Service (PaaS): Platform as a Service (PaaS) is a cloud service model that provides a complete development and deployment environment in the cloud, including infrastructure, middleware, and development tools.
Software as a Service (SaaS): Software as a Service (SaaS) is a cloud service model that delivers software applications over the internet on a subscription basis.
shared responsibility model: The shared responsibility model is a framework that defines how security and compliance responsibilities are divided between the cloud provider and the customer.
Microsoft Entra ID: Microsoft Entra ID is Microsoft’s cloud-based identity and access management service that helps employees sign in and access resources such as Microsoft 365, the Azure portal, and thousands of other SaaS applications.
role-based access control (RBAC): Role-based access control (RBAC) is an authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources based on roles assigned to users, groups, and service principals.
Azure Policy: Azure Policy is a service in Azure that you use to create, assign, and manage policies that enforce rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

Key Terms

Azure Policy: Azure Policy is a service in Azure that you use to create, assign, and manage policies that enforce rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.
hybrid cloud: A hybrid cloud is a computing environment that combines public and private clouds, allowing data and applications to be shared between them.
public cloud: A public cloud is a cloud deployment model in which a cloud provider owns and operates the infrastructure and delivers computing resources over the public internet to multiple tenants.
private cloud: A private cloud is a cloud deployment model in which cloud resources are used exclusively by a single organization, either hosted on-premises or by a third-party provider.
AZ-900 domains: The three main content areas of the Azure Fundamentals exam: cloud concepts; Azure architecture and services; and Azure management and governance.
cloud computing: Cloud computing is the delivery of computing services over the internet, enabling faster innovation, flexible resources, and economies of scale.
Bloom’s taxonomy: A framework that classifies cognitive skills from lower-order (remember, understand) to higher-order (apply, analyze, evaluate, create), used to design and analyze exam questions.
Microsoft Entra ID: Microsoft Entra ID is Microsoft’s cloud-based identity and access management service that helps employees sign in and access resources such as Microsoft 365, the Azure portal, and thousands of other SaaS applications.
shared responsibility model: The shared responsibility model is a framework that defines how security and compliance responsibilities are divided between the cloud provider and the customer.
Platform as a Service (PaaS): Platform as a Service (PaaS) is a cloud service model that provides a complete development and deployment environment in the cloud, including infrastructure, middleware, and development tools.
Software as a Service (SaaS): Software as a Service (SaaS) is a cloud service model that delivers software applications over the internet on a subscription basis.
role-based access control (RBAC): Role-based access control (RBAC) is an authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources based on roles assigned to users, groups, and service principals.
Infrastructure as a Service (IaaS): Infrastructure as a Service (IaaS) is a cloud service model that provides virtualized computing resources such as servers, storage, and networking on demand.