You're ready to start your Microsoft certification journey, but you're stuck at the first decision: Should you take AZ-900 (Azure Fundamentals) or SC-900 (Security Fundamentals) first? Both are entry-level certifications, both cost $99, and both open doors to lucrative career paths. This guide breaks down exactly which one matches your career goals.
Quick Answer: Which Should You Take First?
Choose AZ-900 if you want to:
- • Become a cloud engineer, DevOps engineer, or solutions architect
- • Work with Azure infrastructure and services
- • Build and deploy applications in the cloud
- • Progress to AZ-104 or AZ-204
Choose SC-900 if you want to:
- • Work in cybersecurity, compliance, or risk management
- • Focus on security across Microsoft 365 and Azure
- • Pursue GRC (Governance, Risk, Compliance) roles
- • Progress to SC-200 or SC-300
Can't Decide?
Start with AZ-900. It provides broader foundational knowledge that's useful regardless of your career path. Security concepts make more sense once you understand the infrastructure they protect.
Ready to start practicing?
Jump straight to free practice questions for whichever cert you chose — no signup needed.
Side-by-Side Comparison Table
| Aspect | AZ-900 | SC-900 |
|---|---|---|
| Full Name | Azure Fundamentals | Security, Compliance, Identity Fundamentals |
| Cost | $99 USD | $99 USD |
| Exam Duration | 45 minutes | 45 minutes |
| Questions | 40-60 questions | 40-60 questions |
| Passing Score | 700/1000 | 700/1000 |
| Difficulty | Beginner-friendly | Slightly easier |
| Study Time | 2-4 weeks (20-40 hours) | 1-3 weeks (15-30 hours) |
| Primary Focus | Cloud infrastructure, Azure services | Security, compliance, identity |
| Technical Depth | Moderate (service-focused) | Low (concept-focused) |
| Career Focus | Cloud engineering, DevOps | Cybersecurity, compliance |
What is AZ-900 (Azure Fundamentals)?
AZ-900 is Microsoft's entry-level certification for Azure cloud platform. It validates your understanding of cloud concepts, core Azure services, security, pricing, and support.
What AZ-900 Covers
Cloud Concepts (25-30%)
- • Cloud computing benefits (scalability, elasticity, high availability)
- • CapEx vs OpEx financial models
- • IaaS, PaaS, SaaS service models
Azure Architecture and Services (35-40%)
- • Compute (VMs, App Service, Functions)
- • Networking (VNet, Load Balancer, VPN Gateway)
- • Storage (Blob, File, Queue, Table)
- • Databases (SQL, Cosmos DB)
Management and Governance (30-35%)
- • Cost management and pricing
- • Governance and compliance (Azure Policy, RBAC)
- • Monitoring and management tools
Who Should Take AZ-900?
- • IT professionals transitioning to cloud
- • Developers wanting to understand Azure infrastructure
- • Sales and marketing professionals in tech
- • Anyone starting a cloud career
Start Your AZ-900 Preparation
Test your Azure knowledge with 40 free practice questions. No signup required.
What is SC-900 (Security, Compliance, and Identity Fundamentals)?
SC-900 validates your understanding of security, compliance, and identity concepts across Microsoft's cloud services, including Azure, Microsoft 365, and Dynamics 365.
What SC-900 Covers
Security, Compliance, and Identity Concepts (10-15%)
- • Shared responsibility model
- • Defense in depth
- • Zero Trust security model
Identity and Access Management (25-30%)
- • Microsoft Entra ID (formerly Azure AD)
- • Authentication methods (MFA, passwordless)
- • Conditional Access
Microsoft Security Solutions (30-35%)
- • Microsoft Defender (Cloud, Endpoint, Office 365)
- • Microsoft Sentinel (SIEM)
- • Security posture management
Microsoft Compliance Solutions (25-30%)
- • Compliance Manager
- • Data classification and protection
- • Insider risk management
Who Should Take SC-900?
- • IT security professionals
- • Compliance officers and auditors
- • Risk management professionals
- • Anyone pursuing cybersecurity career
Exam Difficulty Comparison
Which is Easier?
SC-900 is generally considered slightly easier than AZ-900. Here's why:
AZ-900 Difficulty Factors
- • 35+ Azure services to understand
- • Scenario-based questions requiring service selection
- • Technical concepts (networking, storage)
- • Pricing and cost optimization scenarios
SC-900 Difficulty Factors
- • Fewer tools/services to memorize
- • More concept-focused than technical
- • Security principles are intuitive
- • Less infrastructure knowledge required
Real Talk from Candidates:
"AZ-900 felt harder because there are so many services to keep track of. SC-900 was more about understanding security concepts, which clicked faster for me." - Career Changer, passed both
Pass rates: Both certifications have similar official pass rates (65-70%), but anecdotally, SC-900 tends to require less study time.
Career Paths and Salary Data
AZ-900 Career Progression
Entry Level: Cloud Support Engineer
Average salary: $55,000 - $75,000
Mid-Level: Azure Administrator (AZ-104)
Average salary: $85,000 - $120,000
Senior: Azure Solutions Architect (AZ-305)
Average salary: $130,000 - $180,000
SC-900 Career Progression
Entry Level: Security Analyst
Average salary: $60,000 - $80,000
Mid-Level: Security Operations Analyst (SC-200)
Average salary: $90,000 - $130,000
Senior: Security Architect (SC-100)
Average salary: $140,000 - $200,000
Market Demand (2026)
- Azure roles: 127,000+ open positions in US (LinkedIn data)
- Security roles: 89,000+ open positions in US (LinkedIn data)
- Growth: Cloud security roles growing 35% faster than general IT
Content Overlap: Should You Take Both?
There's approximately 15-20% content overlap between AZ-900 and SC-900:
Overlapping Topics
- • Basic Azure concepts (regions, subscriptions, resource groups)
- • Azure Active Directory / Microsoft Entra ID
- • Azure security features (Network Security Groups, Azure Firewall)
- • Compliance and governance basics
Should You Get Both?
Yes, if:
- • You want a comprehensive understanding of Microsoft cloud ecosystem
- • You're considering cloud security roles (requires infrastructure knowledge)
- • You have 4-6 weeks to dedicate to certification prep
Study tip: If taking both, do AZ-900 first. Understanding Azure infrastructure makes SC-900's security concepts easier to grasp.
Expert Recommendation by Career Goal
Cloud Engineer / DevOps Path
Take AZ-900 first. Progress to AZ-104, then AZ-400 or AZ-305.
SC-900 is optional unless you work in regulated industries (finance, healthcare).
Cybersecurity Path
Take both, starting with AZ-900. Progress to SC-200 or SC-300.
Understanding Azure infrastructure is critical for cloud security roles.
Compliance / GRC Path
Take SC-900 first. Add AZ-900 if working with Azure specifically.
SC-900 covers Microsoft 365 compliance, which is broader than just Azure.
Career Changer (No IT Background)
Start with AZ-900. It provides foundational knowledge applicable everywhere.
Cloud skills are more versatile and in higher demand than security-only skills.
Frequently Asked Questions
Can I take SC-900 without AZ-900?
Yes, there are no prerequisites. However, SC-900 references Azure concepts that AZ-900 covers in detail. Taking AZ-900 first makes SC-900 easier.
Which exam is easier to pass?
SC-900 is generally considered slightly easier because it's more concept-focused and requires memorizing fewer technical services. Most candidates pass SC-900 with 1-3 weeks of study versus 2-4 weeks for AZ-900.
Do employers prefer one over the other?
Depends on the role. Cloud engineering positions strongly prefer AZ-900 (and higher-level Azure certs). Security roles increasingly require SC-900 or similar security certifications. Both are valuable for well-rounded cloud professionals.
How long do these certifications last?
Both certifications do not expire. However, Microsoft's cloud services evolve rapidly. It's recommended to pursue higher-level certifications within 1-2 years to stay current.
Can I get a job with just AZ-900 or SC-900?
Entry-level positions (cloud support, junior analyst) may hire with just these fundamentals certifications. However, most mid-level positions require associate-level certs (AZ-104, SC-200) plus experience. Use fundamentals certs as your first step, not your final destination.
Can I take AZ-900 and SC-900 exams online from home?
Yes. Both exams can be taken at a Pearson VUE testing center or online via Pearson OnVUE with a live remote proctor, as long as you have a quiet, private room, a valid photo ID, and a stable internet connection. Online delivery is the more popular option for both certifications since it removes travel time entirely.
Ready to Start Your Certification Journey?
Practice with verified questions for both AZ-900 and SC-900. Try 40 questions free, or get full access to 500+ questions for just $14.99.
About MSCertQuiz
MSCertQuiz provides affordable, high-quality practice resources for Microsoft certification candidates. Our team includes certified Azure and security professionals with extensive experience helping thousands of candidates pass their exams.
Related Resources
How to Pass AZ-900 First Try
Complete study guide with proven strategies for passing AZ-900 on your first attempt.
AZ-900 vs AZ-104: Career Path
When to take fundamentals vs associate level Azure certifications.
Is AZ-900 Worth It in 2026?
Real salary data, job market analysis, and ROI breakdown.
Free AZ-900 Practice Questions
Test your knowledge with 25 free practice questions covering all exam domains.