
Azure AZ-900 Certification Exam Topics to Prioritize
Azure AZ-900 Certification Exam Topics to Prioritize
If you're studying for the Azure AZ-900 certification exam, avoid giving every objective the same amount of effort. Begin with Azure architecture and services, then move to management and governance, and finally cloud concepts. This sequence aligns with Microsoft's exam weighting and how AZ-900 questions are structured: you'll often find service knowledge and governance terms embedded in scenario descriptions, while cloud concepts help you rule out incorrect answers.
Think of this guide as a topic triage map. While you must cover every objective, your initial review should build quick recognition of Azure services, identity, networking, storage, cost controls, and policy. After those concepts are solid, move on to mixed practice questions and create flashcards for any topics you struggle with repeatedly.
What Microsoft tests on the Azure AZ-900 certification exam
Microsoft's official AZ-900 study guide organizes the exam into three main skill areas. The percentages below are your best starting point for prioritizing study time, as they indicate where you'll get the highest return on your effort.
| AZ-900 skill area | Microsoft exam weight | Priority | What to know cold |
|---|---|---|---|
| Describe Azure architecture and services | 35% to 40% | Highest | Regions, availability zones, resource groups, compute, networking, storage, Microsoft Entra ID and security basics |
| Describe Azure management and governance | 30% to 35% | High | Cost tools, Azure Policy, RBAC, resource locks, tags, Azure Monitor, Service Health and Azure Advisor |
| Describe cloud concepts | 25% to 30% | Foundational | Shared responsibility, cloud models, service models, consumption pricing, scalability, elasticity, reliability and governance concepts |
Treat these weights as a guide for allocating study time, not as an excuse to skip a domain. The AZ-900 is a fundamentals exam, meaning Microsoft frequently tests your ability to select the correct concept or service for a basic business need. If your knowledge is inconsistent, even a lower-weighted domain can cost you straightforward points.
You can also verify the current exam details on Microsoft's AZ-900 exam page. Always check this page before booking, as Microsoft may update objectives.
Prioritize Azure architecture and services first
Azure architecture and services deserves your initial study focus. It's the largest domain and provides the foundation for the entire exam. Without understanding how resources, subscriptions, identity, networking, and storage connect, governance and cost questions will be unnecessarily difficult.
Begin with the Azure resource hierarchy. Understand the differences between management groups, subscriptions, resource groups, and individual resources. The AZ-900 doesn't typically require architect-level design depth, but it does expect you to know where resources reside, how they're organized, and how access or policies apply at various scopes.
Next, concentrate on reliability terms. You should clearly explain regions, region pairs, and availability zones without overcomplicating them. A frequent exam question pattern involves identifying which Azure feature enhances availability or minimizes the impact of a datacenter failure. While you don't need to memorize every Azure region, you must grasp how regional placement affects your deployment.
For compute, prioritize selecting the right service. Know when a workload is best suited for Azure Virtual Machines, App Service, Azure Functions, containers, or Azure Virtual Desktop. The exam usually asks you to match a service to a simple requirement, rather than detailing implementation steps.
When it comes to networking, learn the core purpose of virtual networks, subnets, network security groups, VPN Gateway, ExpressRoute, and Azure DNS. Pay close attention to the distinction between internet-based encrypted connectivity and private dedicated connectivity. This difference appears often because the names can sound similar to newcomers.
For storage, understand the use cases before diving into specifics. Azure Blob Storage handles object storage. Azure Files delivers managed file shares. Queue Storage supports message storage, and Table Storage manages NoSQL key-value data. Also study access tiers (hot, cool, archive) and redundancy options like locally redundant storage and geo-redundant storage.
Identity requires extra focus due to its overlap with governance. Microsoft Entra ID serves as the cloud-based identity and access service for Azure and other Microsoft cloud offerings. You should understand authentication, multifactor authentication, and conditional access at a high level, as well as how identity differs from authorization via role-based access control. Microsoft's Microsoft Entra ID overview is a great source for official definitions.
| Topic pair that gets confused | Fast way to separate them |
|---|---|
| Virtual Machines vs App Service | VMs give more operating system control, App Service manages more of the web app platform for you |
| Blob Storage vs Azure Files | Blob stores objects, Azure Files provides shared file storage using common file protocols |
| VPN Gateway vs ExpressRoute | VPN uses encrypted connectivity over the internet, ExpressRoute uses private connectivity through a provider |
| RBAC vs Azure Policy | RBAC controls who can perform actions, Azure Policy evaluates or enforces resource rules |
| Azure Monitor vs Service Health | Azure Monitor observes your resources, Service Health reports Azure service issues that may affect you |

Prioritize Azure management, governance, cost and monitoring next
Management and governance is the second-highest weighted AZ-900 domain. Many first-time cloud learners find this section challenging. The terms are concise, but their distinctions are important.
Start with cost management. Understand what influences Azure costs: resource type, region, usage duration, storage capacity, outbound data transfer, and support plans. You also need to know the purpose of the Azure Pricing Calculator, Total Cost of Ownership Calculator, Microsoft Cost Management, budgets, and Azure Advisor. Take time to explore the official Azure pricing calculator to make these tool names feel more concrete.
Then, study governance controls by focusing on comparisons. RBAC (Role-Based Access Control) addresses the access question: who can perform what actions at a given scope. Azure Policy tackles compliance, defining which resource configurations are permitted or audited. Resource locks prevent accidental deletion or modification. Tags organize resources for management and cost reporting.
Monitoring is another high-value area, especially since some Azure tools have similar-sounding names. Azure Monitor collects and analyzes telemetry. Log Analytics helps you query logs. Application Insights focuses on application performance and behavior. Azure Service Health reports on Azure service incidents and planned maintenance that might impact your resources. Finally, Azure Advisor provides recommendations for cost, reliability, security, and performance.
Don't spend valuable study time memorizing command syntax. While you should recognize the Azure portal, Azure PowerShell, Azure CLI, Cloud Shell, Azure Resource Manager templates, and Bicep, the AZ-900 doesn't test you as an administrator. Your practical goal is to understand which management option suits a simple scenario.
Use cloud concepts to explain the answer choices
Cloud concepts is the smallest domain by exam weight, but don't treat it as a warm-up. This section provides the foundational language that underpins answer choices in the other two domains.
The shared responsibility model is crucial. In IaaS (Infrastructure as a Service), the customer manages more, like operating system configurations and installed applications. With PaaS (Platform as a Service), the cloud provider manages more of the platform. In SaaS (Software as a Service), the provider handles most of the stack, and the customer focuses on users, data, and configuration. Microsoft's shared responsibility documentation explains this model clearly.
Also, learn the public, private, and hybrid cloud models. Public cloud services run on shared provider infrastructure. A private cloud is dedicated to a single organization. A hybrid cloud combines environments, often to support migrations, compliance, or existing datacenter investments.
When studying service models, practice with concrete examples. Virtual Machines are IaaS. App Service and Azure SQL Database fit PaaS patterns. Microsoft 365 is a common SaaS example. If you can classify a service model, you can typically infer the corresponding responsibilities, control levels, and operational effort.
High availability, scalability, elasticity, fault tolerance, and disaster recovery are distinct concepts worth separating in your notes. AZ-900 questions frequently describe business needs using plain language—for instance, handling demand spikes, reducing downtime, or recovering from a regional incident. Match the concept to the need before looking at Azure service names.

What to study less for AZ-900
Some topics are indeed useful, but they can take up too much time if you approach the AZ-900 as an associate-level engineering exam. Keep your study depth aligned with the fundamentals level.
Don't spend hours trying to memorize every VM size, storage redundancy abbreviation, CLI command, or detail of Kubernetes administration. You should recognize core services and understand why you'd choose them, but you don't need deep deployment skills for this exam.
Also, avoid passive rereading after your initial pass. Just because you can read a page and nod along doesn't prove you can answer a Microsoft-style question. A better test: close your notes, explain a service in one sentence, then compare it with the nearest similar service.
Here's a simple filter: if a detail influences how you'd choose between services, study it. If it's a configuration detail you'd typically look up during real implementation, learn only its high-level purpose for the AZ-900.
How to allocate study time across AZ-900 topics
Your specific study plan depends on your background, but the exam weighting offers a practical split. If you're new to cloud, dedicate enough early time to cloud concepts to make the rest of Azure understandable. If you already work with cloud services, focus more on Azure-specific names, governance tools, and cost controls.
| Available study time | Architecture and services | Management and governance | Cloud concepts | Best use of practice questions |
|---|---|---|---|---|
| 6 hours | 2.5 hours | 2 hours | 1.5 hours | Short checks after each domain |
| 10 hours | 4 hours | 3.5 hours | 2.5 hours | Focused sets, then one mixed review |
| 20 hours | 8 hours | 7 hours | 5 hours | Domain practice, mixed exams and targeted retakes |
For a structured, objective-by-objective reference as you follow this priority order, keep the MindMesh AZ-900 study guide open as your primary checklist.
How to turn topic priorities into practice sessions
Once you've reviewed the highest-priority domains, shift your focus from passive reading to active retrieval. The AZ-900 includes many terms that feel familiar until you see two similar answer choices together. Practice helps expose those near-misses early.
Use this sequence for each major domain:
- Review one objective group, such as storage, identity, or cost management.
- Write a one-sentence purpose for each service or concept without looking at your notes.
- Answer focused practice questions on that group.
- Read every explanation, including the ones you got right.
- Turn missed concepts into flashcards and revisit them with spaced repetition.
If you're struggling to understand why an answer is correct—not just what the answer is—review examples like these Azure certification sample questions explained. Your goal should be to build strong answer reasoning, not to memorize a fixed set of questions.
Common AZ-900 topic prioritization mistakes
The first common mistake is overemphasizing cloud concepts while under-practicing Azure service selection. Cloud vocabulary is important, but the exam includes enough Azure-specific services that generic cloud knowledge alone won't get you across the finish line.
A second mistake is treating governance as common sense. While RBAC, Azure Policy, locks, and tags are easy to define individually, the exam often asks you to identify which tool solves a specific control problem. Make detailed comparison notes for these.
Third, avoid delaying practice exams until the very last day. Practice isn't just about a final score check; it's how you uncover subtle confusion between similar-sounding services.
Finally, don't chase advanced Azure details too early. If you're learning private endpoints, Kubernetes operations, or complex networking before you can explain subscriptions, resource groups, and VNets, you're studying beyond the exam's scope before mastering the fundamentals.
Frequently Asked Questions
Which AZ-900 exam topic should I study first? Start with Azure architecture and services because it has the highest Microsoft weighting and supports many other questions. Then move to management and governance, followed by cloud concepts review and mixed practice.
Can I pass AZ-900 by only studying the highest-weighted domain? No. The highest-weighted domain gives you the most return for your study time, but AZ-900 pulls from all three skill areas. Cloud concepts and governance can decide close scores because they appear in scenario wording.
Are Azure pricing and governance heavily tested on AZ-900? Yes. Management and governance accounts for 30% to 35% of the exam in Microsoft's current study guide. Cost tools, budgets, Azure Policy, RBAC, resource locks, tags, monitoring and service health all deserve focused review.
How deep do I need to go into Azure networking for AZ-900? Learn the purpose of VNets, subnets, VPN Gateway, ExpressRoute, network security groups and DNS. You don't need associate-level network design, but you should be able to choose the right connectivity or security concept for a simple requirement.
When should I start AZ-900 practice questions? Start after your first review of a domain, not after finishing the entire course. Focused questions help you catch confusion early. Once you've reviewed all domains, switch to mixed practice exams to test real readiness.
Build your AZ-900 readiness by focusing on weak spots
The most effective AZ-900 plan doesn't involve studying everything equally. Prioritize the highest-weighted domains, use comparisons to differentiate similar services, and let practice data guide your next review.
MindMesh Academy helps you solidify your understanding of these prioritized topics. Our practice questions come with detailed explanations, and adaptive practice helps you target your weakest areas. Use the priority order we've discussed to focus your study, then reinforce your knowledge and gauge your readiness with our AZ-900 practice exams.

Written by
Alvin Varughese
Founder, MindMesh Academy
Alvin Varughese is the founder of MindMesh Academy and an enterprise architecture leader. An electrical engineer by training, he moved from factory automation in South Africa to cloud architecture at GE Appliances and Humana (Fortune 50), and holds 20 professional certifications including AWS Solutions Architect Professional, Azure DevOps Engineer Expert, and Microsoft Agentic AI Business Solutions Architect. He built MindMesh Academy after interviewing too many highly certified candidates who couldn't answer basic questions: the goal is prep that makes you better at the job, not just able to pass the exam.