Microsoft Azure Certification Roadmap: 2026 Path By Role

Q: What is the Azure certification roadmap for beginners?

Start with AZ-900 (Azure Fundamentals, no prerequisites). Then choose an Associate cert based on your target role: AZ-104 for administration (most versatile), AZ-140 for Virtual Desktop, or AZ-700 for networking. Add AZ-305 (Solutions Architect Expert) once you have hands-on experience.

Q: Should I get AZ-104 or AZ-500 first?

Get AZ-104 first — it is the general-purpose Azure Administrator cert most employers ask for, and it is a common prerequisite mindset for security roles. Note that AZ-500 itself retires August 31, 2026 and is being replaced by SC-500 (Cloud and AI Security Engineer Associate); if you want a security-focused Azure cert, study SC-500, not AZ-500.

Q: What comes after AZ-104?

After AZ-104, the two common next steps are AZ-305 (Solutions Architect Expert, for architecture and design roles) or AZ-400 (DevOps Engineer Expert, for CI/CD and release engineering roles). Both list an Azure Associate certification as a prerequisite.

Q: Is AZ-900 worth it before AZ-104?

Yes for most people. AZ-900 takes 2-4 weeks and builds the cloud-concept vocabulary AZ-104 assumes you already know. Skipping straight to AZ-104 without any Azure background usually means a longer, harder study cycle overall.

Quick Answer

Start with AZ-900 (Azure Fundamentals). Then pick an Associate cert by role: AZ-104 for general administration (the most common next step), AZ-140 for Azure Virtual Desktop, or AZ-700 for networking. From there, AZ-305 (Solutions Architect Expert) or AZ-400 (DevOps Engineer Expert) round out senior roles. Skip AZ-500 — it retires August 31, 2026; use SC-500 instead for the Azure security specialization.

Azure has the largest and most confusing certification family Microsoft runs — a dozen exams spanning admin, architecture, networking, virtual desktop, and DevOps. This roadmap cuts through it: one clear path per role, in the order Microsoft actually intends you to take them.

Step 1: AZ-900 Foundation

Every Azure path starts with AZ-900 (Azure Fundamentals). No prerequisites, no coding, and it covers cloud concepts, core Azure services, pricing/SLAs, and governance — the vocabulary every later exam assumes you already have.

Who should skip it: Almost nobody. Even experienced on-prem admins benefit from the 2-4 week refresher, since Azure-specific terminology (resource groups, ARM, availability zones) trips up people with strong non-cloud backgrounds.

See AZ-900 details & free practice →

Step 2: Choose Your Associate Cert

AZ-104 — Azure Administrator Associate

The default choice for most people. Covers identity, governance, storage, compute, networking, and monitoring — the day-to-day job of an Azure admin.

Best for: sysadmins, IT generalists, career changers, anyone unsure which specialty to pick.

See AZ-104 →

AZ-140 — Azure Virtual Desktop Specialist

Narrow but in-demand specialty for organizations running AVD/Windows 365 at scale.

Best for: end-user computing, VDI, or remote-work infrastructure teams.

See AZ-140 →

AZ-700 — Azure Network Engineer Associate

Deep networking specialty: VNets, hybrid connectivity, load balancing, routing, and network security.

Best for: network engineers moving from on-prem into cloud networking.

See AZ-700 →

AZ-802 — Windows Server Administrator Associate

Administering Windows Server across on-premises, hybrid, and Azure — AD DS, Hyper-V, storage, and hybrid networking with Azure Arc.

Best for: Windows Server / on-prem infrastructure admins moving into hybrid cloud. Also the current successor to AZ-800/AZ-801 (see note below).

See AZ-802 →

Note: Microsoft's older two-exam Windows Server Hybrid Administrator Associate path (AZ-800 + AZ-801) retires September 30, 2026. AZ-802 (single exam, "Administering Windows Server") is the current, non-retiring credential covering the same skill set — start there, not AZ-800/AZ-801.

Test Your AZ-900 Readiness Free

40 free practice questions, no credit card required.

Start Free Practice

Step 3: Expert-Level Certs

AZ-305 — Solutions Architect Expert

Design-focused: choosing between services, cost/performance tradeoffs, migration and governance strategy. Requires an Azure Associate cert (typically AZ-104).

See AZ-305 →

AZ-400 — DevOps Engineer Expert

CI/CD pipelines, infrastructure as code, release strategy, and monitoring. Requires AZ-104 or a developer Associate cert first.

See AZ-400 →

Role-to-Certification Map

Target role	Certification path
Cloud Support / Junior Admin	AZ-900 → AZ-104
Solutions Architect	AZ-900 → AZ-104 → AZ-305
DevOps / SRE	AZ-900 → AZ-104 → AZ-400
Network Engineer	AZ-900 → AZ-700
End-User Computing / VDI	AZ-900 → AZ-140
Cloud Security Engineer	AZ-900 → SC-500 (not AZ-500 — see below)
Windows Server / Hybrid Infrastructure Admin	AZ-900 → AZ-802 (not AZ-800/AZ-801 — see below)

The AZ-500 Retirement (Important)

AZ-500 (Azure Security Engineer Associate) retires August 31, 2026.If you complete it before that date it stays valid for one year, but starting a fresh study plan for it now makes no sense. Microsoft's replacement is SC-500 (Cloud and AI Security Engineer Associate), which expands the same role to cover AI workload security alongside classic Azure security controls. If cloud security is your goal, study SC-500.

Full security certification breakdown →

Realistic Timeline

3-4 wks

AZ-900, part-time study

8-10 wks

AZ-104, part-time study

10-12 wks

AZ-305 or AZ-400, part-time study

Total: roughly 5-6 months to go from zero Azure background to Expert-level, studying 8-10 hours/week.

Common Questions

What is the Azure certification roadmap for beginners?

Start with AZ-900. Then choose an Associate cert: AZ-104 for administration (most versatile), AZ-140 for Virtual Desktop, or AZ-700 for networking. Add AZ-305 or AZ-400 once you have hands-on experience.

Should I get AZ-104 or AZ-500 first?

Get AZ-104 first. AZ-500 retires August 31, 2026 and is being replaced by SC-500 — study SC-500 if security is your goal.

What comes after AZ-104?

AZ-305 (Solutions Architect Expert) for design/architecture roles, or AZ-400 (DevOps Engineer Expert) for CI/CD and release engineering. Both require an Azure Associate cert first.

Is AZ-900 worth it before AZ-104?

Yes for most people — it takes 2-4 weeks and builds the cloud vocabulary AZ-104 assumes you already have.

Get Certified and Move Up the Azure Path

Start with 500 AZ-900 practice questions and work your way to AZ-104.

Try 40 Questions Free Get 500 Questions - $14.99

About MSCertQuiz

MSCertQuiz provides affordable, high-quality practice resources for Microsoft certification candidates, built by certified Azure professionals who track every exam change and retirement.