Azure Fundamentals AZ-900 Sign in Try 10 free questions

The AZ-900 cheat sheet: the facts and services that get tested

The Azure Fundamentals numbers, one headline service per category, and the exam-day tips that save marks — on a single page. AZ-900, 2026 edition.

Skim the cheat sheet, then try 6 free questions in the exam's own style — every answer explained, no sign-up.

Straight to the 6 free questions ↓

A cheat sheet earns its keep the night before the exam: the numbers, the service names and the traps on one page, so you are refreshing rather than learning. It will not build the reasoning the exam tests — that comes from working questions — but it is the fastest way to firm up what gets asked. Skim the card in the diagram above, then try the six quick questions below.

The exam, in one line

FactValue
Questionsabout 50
Timeabout 60 minutes
Pass mark700 of 1000 (scaled)
Fee$99
Validitydoes not expire
Question formatsmultiple choice, true/false, drag-and-drop / matching

The blueprint splits into three areas, and the weights are published as ranges, not fixed numbers: Cloud Concepts 25–30%, Azure Architecture & Services 35–40%, Azure Management & Governance 30–35%. Architecture & Services is the heaviest slice, so if study time is short, spend it there. Our simulator draws each run in those official blueprint proportions, so a mock feels like the real weighting.

One headline service per category

Know the single “default” service for each job and most multiple-choice questions collapse to one obvious answer plus three distractors.

CategoryHeadline serviceOne-line job
ComputeAzure Virtual Machinesa server whose OS you control (IaaS)
StorageBlob Storageunstructured object data at scale
NetworkingVirtual Network (VNet)your private network in Azure
IdentityMicrosoft Entra IDusers, groups and sign-in
GovernanceAzure Policyenforce rules on resources
CostAzure Cost Managementanalyse and forecast actual spend

Keep a second name ready for each: App Service and Azure Functions beside VMs; Azure Files and Disk Storage beside Blob; a Network Security Group and Azure Firewall beside VNet; RBAC beside Entra ID; Management Groups and Subscriptions beside Policy; the Pricing Calculator (estimate before you deploy) beside Cost Management (analyse after).

The distinctions the exam plants

  • Azure Policy vs RBAC — Policy governs what resources may do or be configured as; RBAC governs who may act. Remember: Policy = the resource, RBAC = the person.
  • Pricing Calculator vs Cost Management — estimate before you build, versus analyse and forecast what you already run.
  • Entra ID vs a Network Security Group — controlling sign-in is identity; allowing or denying traffic is networking.
  • Azure Advisor vs Microsoft Defender for Cloud — best-practice recommendations across cost, security and reliability, versus a dedicated security posture and threat tool.
  • Management Group vs Subscription vs Resource Group — the nesting order for organising and governing resources, top to bottom.

Top exam-day tips

  1. Answer every question — there is no penalty for a wrong guess, so never leave a blank.
  2. Flag and move on — do not burn four minutes on one item; mark it and return with the time you banked.
  3. Read the last line first — the final sentence usually states what is actually being asked, which reframes the whole scenario.
  4. Eliminate, don’t hunt — cross out the two clearly wrong options, then decide between the last two.
  5. Trust the keyword — “control the OS” means Virtual Machines, “who can sign in” means Entra ID, “estimate before deploying” means the Pricing Calculator.

Work the six questions below before you reveal each explanation, and read past the correct answer to why the other three fail — that habit, not the list, is what carries you through exam day.

An AZ-900 exam-at-a-glance card. One side lists the exam facts: 50 questions, 60 minutes, pass 700 of 1000, 99 US dollars, does not expire, interactive question formats, and the three blueprint weight ranges — Cloud Concepts 25 to 30 percent, Azure Architecture and Services 35 to 40 percent, Azure Management and Governance 30 to 35 percent. The other side lists six service categories each with one headline Azure service: compute is Azure Virtual Machines, storage is Blob Storage, networking is Virtual Network, identity is Microsoft Entra ID, governance is Azure Policy, and cost is Azure Cost Management.

6 free AZ-900 practice questions

Answers and explanations — no email wall
AZ-900 Question 1 of 6

How many questions does the AZ-900 exam contain, and how long do you have?

Answer: A — About 50 questions in 60 minutes

AZ-900 gives you roughly 50 questions and about 60 minutes, with a scaled pass mark of 700 out of 1000. Why not the others: 65 questions in 90 minutes is the AWS foundational exam, not this one. 100 questions in 120 minutes overstates both. 40 in 45 undershoots. Pro tip: budget just over a minute per question and you finish with time to review flagged items.

AZ-900 Question 2 of 6

You need full control over the operating system of a Windows server in Azure. Which compute service fits?

Answer: A — Azure Virtual Machines

Azure Virtual Machines is infrastructure as a service — you own the operating system, patching and configuration. Why not the others: App Service is a managed platform for web apps, so Microsoft runs the OS. Azure Functions runs short event-driven code with no server to manage. Azure Container Instances runs a single container, not a full OS you administer. Pro tip: any wording about controlling or patching the OS points to Virtual Machines.

AZ-900 Question 3 of 6

Which Azure storage service is designed for large amounts of unstructured object data such as images, video and backups?

Answer: A — Azure Blob Storage

Azure Blob Storage holds unstructured objects — media, documents, backups — at massive scale. Why not the others: Azure Files provides fully managed file shares you mount over SMB. Azure Disk Storage supplies the virtual disks attached to a VM. Azure Table Storage is a NoSQL key-value store for structured data. Pro tip: the word 'object' or 'unstructured' is the Blob tell.

AZ-900 Question 4 of 6

Which Azure service manages user identities and sign-in for cloud applications?

Answer: A — Microsoft Entra ID

Microsoft Entra ID (formerly Azure Active Directory) is the cloud identity and access service that handles users, groups and sign-in. Why not the others: Azure Policy enforces configuration rules on resources, not identities. Azure Firewall filters network traffic. A Network Security Group allows or denies traffic to a subnet or NIC. Pro tip: 'who can sign in' is identity — that is Entra ID.

AZ-900 Question 5 of 6

Which statement best separates Azure Policy from role-based access control (RBAC)?

Answer: A — Azure Policy governs what resources can do or be configured as; RBAC governs who can do what

Azure Policy enforces rules on resources — for example allowed regions or required tags — while RBAC grants people the permission to act on resources. Why not the others: assigning user permissions is RBAC's job, not Policy's. They are distinct features with distinct jobs, not synonyms. RBAC does not enforce resource rules and Policy does not encrypt data. Pro tip: Policy = what resources may do; RBAC = who may do it.

AZ-900 Question 6 of 6

You want to analyse and forecast your current Azure spending across subscriptions. Which tool do you use?

Answer: A — Azure Cost Management

Azure Cost Management analyses actual spend, sets budgets and forecasts future cost for resources you already run. Why not the others: the Pricing Calculator estimates cost before you deploy anything. Azure Advisor recommends improvements including cost, but does not itself report your spend. Azure Monitor tracks performance and health, not billing. Pro tip: estimate before = Pricing Calculator; analyse after = Cost Management.

That is exactly how every question in the course works — answer, explanation, why-not. The real set continues in the practice player: 10 free questions, no sign-up.

Continue with the 10 free questions →

Those 6 questions were the start.

The exam does not test whether you recognise a term — it tests whether you can rule out three plausible answers under time pressure. That is what the explanations above are for, and there are 300 more questions built exactly like them.

Collecting questions yourself

  • Scattered across forums, of unknown age
  • Answer keys without reasoning
  • No idea which domain you are weak in

Practising with a system

  • 300 questions in 6 full tests, AZ-900 (2026)
  • Every option explained — including the wrong ones
  • Readiness per exam domain, and drills for your weakest
Start free — 10 questions

Straight into the player. No account, no email.

Frequently asked questions

How do I use a cheat sheet without just memorising it?
Use it as a last-mile refresher, not a substitute for practice. Read a category, then answer questions on it and check why the wrong options fail — the exam tests whether you can rule out three plausible distractors, and that is a reasoning skill you build by working questions, not by rereading a list.
Is this cheat sheet current for the 2026 exam?
Yes. The facts follow the current Azure Fundamentals exam: about 50 questions, roughly 60 minutes, a scaled pass mark of 700 out of 1000, a 99 US dollar fee, and the three blueprint areas weighted Cloud Concepts 25 to 30 percent, Azure Architecture and Services 35 to 40 percent, and Azure Management and Governance 30 to 35 percent.
Are these real exam questions?
No. Every question here is written for this page in the style and difficulty of the exam. Reproducing real Microsoft exam items breaks the certification agreement and can cost you your certification, and a memorised item teaches you nothing about the one you have not seen.

Updated for AZ-900 (July 2026). The sample questions above are our own work in the style of the exam — not real exam items. The exam itself is set and marked by the certification body.