AZ-900 • Azure Fundamentals • 2025 Update
What’s New in Microsoft Azure for AZ-900 in 2025: Key Features to Know
Practical, exam-focused, and up-to-date—built for US readers and global learners preparing for the Microsoft Azure Fundamentals exam (AZ-900).
AZ-900 at a Glance (2025)
AZ-900 (Microsoft Azure Fundamentals) validates core cloud knowledge—what Azure is, how it’s organized, how you secure and govern it, and how pricing/support work. It is vendor-official, beginner-friendly, and widely recognized by hiring managers in the US for roles like junior cloud analyst, technical account manager, and presales associate.
~45 minutes exam time; check the official page for details on timing and format.
Multiple choice, drag-and-drop, hot area, and more (no coding required).
Scaled 1-1000; passing score is 700.
Good news: Fundamentals certifications do not expire. Once you pass, your AZ-900 stays valid.
The English version of the AZ-900 skills outline is scheduled to update on October 30, 2025. Always review the official study guide before booking.
What’s New in Azure (and the Exam) in 2025
Expect more emphasis on AI-enabled services, security by default, and cost optimization. Azure’s announcements since late 2024 center on expanding AI platforms, operational security, and hybrid consistency. For example, Azure AI Studio has been renamed and expanded as Azure AI Foundry, improving the end-to-end experience to build, customize, and deploy AI models.
Microsoft’s 2024 Ignite “Book of News” also underscored large investments in AI and secure cloud infrastructure—momentum that continues across 2025.
| 2025 Focus | What to Know for AZ-900 | Why It Matters |
|---|---|---|
| AI Platforms & Responsible AI | Recognize Azure AI services & governance basics. | Cloud literacy now includes responsible AI and data protection. |
| Identity First Security | Microsoft Entra ID (formerly Azure AD), Conditional Access, RBAC. | Identity is the new security perimeter; core to every Azure design. |
| Cost Optimization | Azure Cost Management, Savings Plans vs Reservations, Pricing Calculator. | Real-world cloud success depends on predictable spend and visibility. |
| Hybrid & Edge | Azure Arc concepts; consistent management across clouds/on-prem. | Modern enterprises are multicloud/hybrid—AZ-900 covers fundamentals. |
Cloud Concepts Refresher (High-Value Exam Topics)
Shared Responsibility Model
In the cloud you and the provider split duties. With IaaS you manage OS, apps, and data; with PaaS you focus on apps and data; with SaaS you mainly manage data and access. Azure documents this clearly—know who does what and how it shifts as you move from on-prem to SaaS.
Consumption-based Pricing
Azure charges primarily on what you use (compute hours, storage GB, outbound bandwidth), with discounts via Reservations and the Savings Plan for compute. You’ll estimate costs with the Pricing Calculator, and compare on-prem vs cloud with the TCO Calculator.
Capital vs Operational Expenditure
Cloud shifts CapEx (hardware purchases) toward OpEx (pay-as-you-go). AZ-900 expects you to explain this business benefit and tie it to elasticity and agility.
Core Azure Services You Must Know
Compute
- Azure Virtual Machines & scale sets
- Containers & AKS (high-level awareness)
- App Services for web & APIs
- Serverless with Azure Functions
Storage & Data
- Blob (object), File shares, Disk
- Azure SQL, Cosmos DB basics
- Redundancy tiers (LRS/ZRS/GRS) conceptually
Networking
Azure virtual networks, subnets, network security groups, and connectivity options (VPN gateways, ExpressRoute) are intro-level topics for AZ-900.
Hybrid & Edge with Azure Arc
Know that Azure Arc extends Azure management to servers, Kubernetes, data services, and SQL anywhere (on-prem or other clouds).
Security, Identity & Access (Microsoft Entra ID, RBAC)
Microsoft Entra ID is the new name for Azure AD, and it provides identity, authentication, and access policies for users, apps, and devices.
Azure RBAC (Role-Based Access Control) controls authorization to Azure resources in scopes like subscription, resource group, or resource; it’s built on Azure Resource Manager.
Security Posture & Threat Defense
- Microsoft Defender for Cloud (CNAPP) for posture management and threat protection across Azure/multicloud.
- Microsoft Sentinel (cloud-native SIEM/SOAR) for detection, investigation, and response.
- Azure Monitor to gather metrics, logs, and traces for insights and alerting.
Governance, Cost Management & Pricing
Cost Management Essentials
Use Azure Cost Management to track spend and budgets; estimate with the Pricing Calculator and compare on-prem to cloud with TCO.
Savings Plan vs Reservations (Know the Difference)
| Option | How It Works | Best For | Typical Savings |
|---|---|---|---|
| Savings Plan (Compute) | Commit to hourly spend for 1 or 3 years; applies flexibly across eligible compute. | Dynamic/variable workloads across regions & VM families. | Up to ~65% vs PAYG (meter/term dependent). |
| Reservations | Commit to a specific resource (e.g., VM family/region) for 1 or 3 years; billing discount only. | Stable, predictable workloads with steady utilization. | Up to ~72% vs PAYG in some cases. |
Microsoft’s docs include clear guidance to choose between them.
Free Services & Free Account
Azure offers 65+ services that are “always free” (within monthly limits) and additional 12-month free services for new accounts, plus start credit. This is often referenced in entry-level training and practice.
Reliability: Regions, Availability Zones & SLAs
Azure organizes its global footprint into regions (geographic areas with one or more datacenters). Many regions offer availability zones—separate sets of datacenters with independent power, cooling, and networking—to improve resiliency.
AZ-900 expects conceptual knowledge of zone-redundant vs zonal services and how SLAs improve when you architect for redundancy.
Monitoring, Security Operations & Incident Response
Azure Monitor provides metrics/logs, dashboards, and alerts; Defender for Cloud assesses posture and protects resources; and Microsoft Sentinel ingests telemetry for SIEM/SOAR. Understand how these complement each other in a basic SecOps workflow.
| Service | Primary Role | For AZ-900 |
|---|---|---|
| Azure Monitor | Observability (metrics, logs, alerts) | Know core purpose & examples of insights and alerts. |
| Defender for Cloud | CNAPP: posture, recommendations, threat protections | Recognize it as cloud security posture & threat defense. |
| Microsoft Sentinel | SIEM/SOAR for detection & response | High-level purpose; part of incident response. |
A Proven 14-Day Study Plan (with daily outcomes)
This plan assumes ~1.5–2 hours per day and leverages official resources. Reorder the days if you have prior experience.
| Day | Focus | Outcome |
|---|---|---|
| 1 | Exam overview & objectives; create a Microsoft Learn profile. | Clarity on skills measured; calendar your test date. |
| 2 | Cloud concepts: IaaS/PaaS/SaaS; CapEx vs OpEx; elasticity. | Explain models & business benefits in your own words. |
| 3 | Core compute: VMs, scale sets, App Service, Functions. | Know use-cases and when serverless is optimal. |
| 4 | Storage: Blob/File/Disk; redundancy; access tiers. | Map data scenarios to the right storage option. |
| 5 | Networking: VNets, NSGs, peering, VPN/ExpressRoute. | Basic designs and secure segmentation vocabulary. |
| 6 | Identity basics: Entra ID, Conditional Access, MFA. | Describe identity-first security and SSO benefits. |
| 7 | RBAC & scopes; Resource Manager concepts. | Assign the right role at the right scope. |
| 8 | Governance: tags, policy concepts, cost management. | Budget alerts; policy vs RBAC mental model. |
| 9 | Reliability: regions, availability zones, SLAs. | Articulate zonal vs zone-redundant patterns. |
| 10 | Monitoring & security: Monitor, Defender for Cloud, Sentinel. | Explain end-to-end telemetry and incident flow. |
| 11 | Pricing: Calculator + TCO; Savings Plan vs Reservations. | Build a sample estimate; defend a discount choice. |
| 12 | Hybrid & edge: Azure Arc scenarios. | Explain why “manage anywhere” matters. |
| 13 | Official Practice Assessment + review weak areas. | Close gaps using Learn docs & study guide. |
| 14 | Exam simulator mindset: timeboxing, flag-and-move. | Ready to sit the exam with a calm, efficient routine. |
Official study guide and Microsoft Learn modules are your primary references.
Practice Resources & Exam Experience
- Official Practice Assessment—free via Microsoft Learn; use it to sample wording and difficulty and to locate gaps.
- Question Types—familiarize yourself with drag-and-drop, hot area, case studies, etc.
- Scheduling & Retakes—you can typically retake after 24 hours (first retake) with longer waits thereafter; always confirm current policy on Learn.
Bookmark the official AZ-900 page for exam updates and scheduling: Microsoft Certified: Azure Fundamentals.
Real-World Scenarios & Mini-Case Studies
1) Startup API on a Budget
Goal: Minimize cost while launching a web API. Choose App Service (Basic/Standard), Functions for background jobs, Storage for files, and Cosmos DB serverless for bursty traffic. Estimate monthly spend with the Pricing Calculator; consider a Savings Plan if CPU hours become consistently high.
2) Regulated SMB with Hybrid Assets
Goal: Keep some servers on-prem but manage everything centrally. Use Azure Arc to onboard servers/Kubernetes, apply Azure Policy at scale, push monitoring with Azure Monitor, and integrate security into Defender for Cloud and Sentinel for detection and response.
3) Retail Chain: Reliability First
Goal: Design for uptime across a region. Use availability zones for zonal services and choose zone-redundant options when available; test failover and review SLAs.
AZ-900 FAQ (2025 Edition)
| Does AZ-900 expire? | No. Fundamentals certifications do not expire. |
|---|---|
| How long is the exam? | Plan for ~45 minutes of exam time; total seat time can be longer due to setup and surveys. |
| When is the next outline update? | English skills outline updates on October 30, 2025. Always check the study guide before scheduling. |
| Free learning? | Yes—Microsoft Learn + the free Practice Assessment for AZ-900. |
| Any “gotchas” for identity? | Know that Azure AD is now Microsoft Entra ID; don’t confuse Entra roles (directory scope) with Azure RBAC roles (resource scope). |
| Where can I read official details? | Start here: AZ-900 official page and AZ-900 study guide. |
Fast, Secure, and 100% Guaranteed in Just 3 Days – No Stress
Why choose CertGet for obtaining your Microsoft AZ-900 certification?
- Pay Only After Passing and viewing your score report.
- 100% Pass Guarantee for AZ-900.
- No Stress & No Time Wasted – Complete it in just 3 days.
- Secure Payment via PayPal – Only after passing.
Microsoft Azure AZ-900 Certification — Guaranteed Pass (Fast & Simple)
Identity & Access
- Microsoft Entra ID: Azure’s cloud identity & access platform.
- RBAC: Role-based authorization to Azure resources.
Reliability
- Region: Azure geographic area with datacenters.
- Availability Zone: Separate datacenters within a region for higher resiliency.
Cost
- Savings Plan: Commit to hourly spend; flexible across compute.
- Reservations: Commit to specific resources for deeper discounts.
Azure fundamentals certification
Microsoft Azure 2025
Azure pricing calculator
Azure TCO calculator
Microsoft Entra ID
Azure RBAC
Azure regions & zones
Defender for Cloud
Microsoft Sentinel
Azure Monitor
Savings plan vs reservations
Cloud shared responsibility
Azure governance
Cost management
Free Azure services
Useful Links (Official & In-Depth)
- Official exam page (updates, scheduling): Microsoft Certified: Azure Fundamentals
- AZ-900 Study Guide (skills measured; updated outlines): AZ-900 study guide
- Free Practice Assessment: Practice Assessments
- Azure Pricing Calculator: Estimate costs
- Azure Free Services: 65+ always-free services
