Azure certifications explained: levels, codes and how to pick

Fundamentals: broad literacy, no experience assumed

Fundamentals certifications are the entry tier: broad, conceptual exams designed for people with no hands-on experience. AZ-900 Azure Fundamentals is the flagship — cloud concepts, core Azure services, security and identity, governance and pricing. Siblings cover other domains at the same gentle level: AI-900 for AI fundamentals and DP-900 for data fundamentals, among others.

Two things distinguish this tier. First, its audience is genuinely wide: career changers, students, and non-engineering professionals — sales, product, finance, management — who work around Azure and need fluency more than depth. Second, Fundamentals certifications never expire, which is unique in Microsoft’s scheme; every higher tier renews annually. Pass AZ-900 once and it sits on your CV permanently.

Associate: role-based and hands-on

The Associate tier is where certifications become technical and role-shaped. Each associate exam maps to a job function and assumes some real hands-on experience: AZ-104 Azure Administrator covers running Azure environments — identity with Microsoft Entra ID, storage, compute, networking, monitoring — while DP-700 Fabric Data Engineer covers data engineering on Microsoft Fabric, Microsoft’s unified data-analytics platform. Other associates target developers, security engineers and AI engineers.

These exams are scenario-driven, can include case studies and drag-and-drop questions alongside multiple choice, and are hard to pass on reading alone — the assumed experience is real. This is the tier most employers mean when they ask for “Azure certified”, and for most people it is the destination tier: you take the one associate matching your role, not the whole row.

Expert and Specialty: depth for experienced practitioners

Expert certifications sit at the top of the role-based scheme and assume substantial experience. AZ-305 Azure Solutions Architect Expert is the best known — designing whole solutions across compute, networking, storage, and security — alongside the DevOps Engineer Expert. Some expert certifications formally require an associate certification as a prerequisite, the one place Microsoft enforces sequence.

Specialty certifications are different in shape rather than height: narrow, deep credentials for specific domains rather than broad roles. Both tiers are late-career moves in certification terms — they reward years of practice, and attempting them early usually produces an expensive lesson in how scenario exams punish theoretical knowledge. Most readers should file them under “later” and focus on the tier that matches their current experience.

Decoding the exam codes

Every Microsoft exam code is a two-letter prefix plus a number, and the prefix tells you the domain at a glance:

• AZ — Azure infrastructure and platform (AZ-900 Fundamentals, AZ-104 Administrator, AZ-305 Solutions Architect Expert).
• DP — data platform (DP-900 Data Fundamentals, DP-700 Fabric Data Engineer).
• AI — artificial intelligence (AI-900 AI Fundamentals and the AI engineering exams).
• SC — security, compliance and identity.
• MS and MD — Microsoft 365 and modern desktop administration, outside Azure proper but part of the same scheme.
• The number loosely signals level: 900-series exams are Fundamentals; three-digit codes below that are role-based exams at associate or expert level.

How the scheme differs from AWS

AWS and Azure certifications rhyme — both run from a foundational tier through associates to advanced levels — but two differences matter. The first is granularity: Microsoft’s scheme is aggressively role-based, with a distinct exam per job function and per domain, while AWS groups roles more broadly at each level. Neither approach is better; Microsoft’s gives a more precise fit to a job title, AWS’s a shorter menu.

The second is validity. AWS certifications last three years, and renewing means paying for and passing a full proctored exam again. Azure’s role-based and specialty certifications expire after just one year — but renew free, via a short online, unproctored assessment on Microsoft Learn available in the six months before expiry, with unlimited attempts. Azure asks for lighter maintenance more often; AWS asks for heavier maintenance less often. Exam mechanics otherwise feel familiar across both: proctored delivery through Pearson VUE, online or at a test centre, with Azure exams passed at 700 out of 1000.

How to pick one

The scheme’s role-based design hands you the method: pick the role, then take its certification. New to cloud, or in a non-engineering role around Azure — AZ-900, the purpose-built on-ramp. Heading for infrastructure and operations — AZ-104. Heading for data engineering on Microsoft’s stack — DP-700. Already deep in Azure with years of experience — the expert tier for your role. Fees vary by country, so check the exam page on Microsoft Learn for current pricing where you live; the study material there is free either way.

This article is the map; sequencing is a separate question — whether to start at Fundamentals or jump straight to an associate, and what order to take things in — which our guide to the Azure certification path covers in full. The short version holds here too: let job adverts for the role you want tell you which certification matters, and ignore any pressure to collect them all. One well-chosen, well-earned certification outweighs a drawer of misfits.