Microsoft Azure Certification Path Explained (2026)

Microsoft's certification lineup got a shakeup: some of the most famous exam codes changed names, one retired entirely, and the path from beginner to architect looks different than it did a year ago. Here is the Azure certification path as it stands in 2026, mapped to the jobs each cert actually targets.

The 2026 Reshuffle: What Changed

Key changes to know: AI-900 became AI-901, AZ-204 became AI-200, AZ-500 became SC-500, and MS-900 was retired. If you find older study guides referencing the old codes, they are talking about the same (or nearly the same) exams under new names.

The renames are not just cosmetic — they reflect how Microsoft now organizes its portfolio. AI exams moved toward a unified AI numbering, and security exams consolidated under the SC (Security, Compliance, and Identity) prefix. The content of the exams carried over largely intact, so knowledge you built under the old codes still counts.

The Path at a Glance

Exam	Level	Targets the job of…
AZ-900 Azure Fundamentals	Fundamentals	Anyone starting out — students, career changers, non-technical staff
AI-901 Azure AI Fundamentals	Fundamentals	People who need AI literacy: product, sales, aspiring AI practitioners
SC-900 Security, Compliance & Identity Fundamentals	Fundamentals	People leaning toward security, compliance, or identity roles
AZ-104 Azure Administrator	Associate	Cloud administrators, systems admins, IT operations engineers
AI-200 Azure AI Cloud Developer (formerly AZ-204)	Associate	Developers building AI-powered solutions on Azure
AZ-305 Azure Solutions Architect Expert	Expert	Solutions architects designing enterprise cloud systems
AZ-400 DevOps Engineer Expert	Expert	DevOps engineers owning pipelines, release, and automation
SC-500 Azure Security Engineer (formerly AZ-500)	Associate	Security engineers securing Azure workloads and identities

Step 1: Start with a Fundamentals Exam

AZ-900: the default starting point

AZ-900 (Microsoft Certified: Azure Fundamentals) is where the vast majority of people begin. At the fundamentals exam fee tier (around $99 in the US), it tests cloud concepts, Azure architecture and services, and Azure management and governance — no hands-on experience required. It is the vocabulary exam: by the end, you can talk intelligently about regions, availability zones, virtual networks, and the shared responsibility model.

AI-901 and SC-900: the specialty on-ramps

If you already know you are heading toward AI or security, the specialty fundamentals exams are valid alternatives. AI-901 covers AI concepts and Azure AI services at a conceptual level; SC-900 covers security, compliance, and identity fundamentals. Neither replaces AZ-900's breadth — many people take AZ-900 first and add one of these later.

Step 2: Go Role-Based at the Associate Level

AZ-104: the admin exam

AZ-104 (Microsoft Certified: Azure Administrator Associate) is the workhorse certification of the Azure ecosystem. It covers identity and governance, storage, compute, virtual networking, and monitoring in real depth — and it assumes you have spent time in the portal and the command line. This is the cert that moves helpdesk technicians and junior sysadmins into cloud roles, because it maps directly to the daily work of an Azure administrator.

AI-200: the AI developer exam (formerly AZ-204)

Previously known as AZ-204, AI-200 is the associate exam for developers building AI-enabled applications on Azure. If you write code and want your Azure credential to reflect that, this is your exam rather than AZ-104 — same level, different craft.

SC-500: the security engineer exam (formerly AZ-500)

Previously AZ-500, SC-500 targets security engineers: securing identities, protecting data, managing security operations in Azure. A natural follow-up to SC-900 for anyone heading into cloud security.

Step 3: Aim for Expert

AZ-305: Solutions Architect Expert

AZ-305 is the design exam — it tests whether you can architect complete Azure solutions: networking, identity, storage, compute, business continuity, and migrations, all weighed against cost, performance, and security. It targets experienced professionals moving into architect roles, and it pairs naturally with AZ-104's operational depth.

AZ-400: DevOps Engineer Expert

AZ-400 covers the DevOps lifecycle on Azure: source control strategy, CI/CD pipelines, infrastructure as code, continuous feedback, and release management. It is the expert exam for engineers who own how software gets built, tested, and shipped.

Prerequisites and Renewal: The Rules

There are no hard prerequisites in the Azure certification path. You can take AZ-104 without AZ-900, or AZ-305 without any associate exam — Microsoft recommends the learning progression but never enforces it. That said, the recommended order exists for a reason: skipping AZ-900 is only wise if you already live in Azure daily.

On validity: fundamentals certifications do not expire — once you earn AZ-900, it is yours. Role-based certifications (associate and expert) are valid for one year and can be renewed for free through Microsoft's online renewal assessment. Plan on a light annual refresh rather than re-studying from scratch.

Suggested Paths by Goal

Cloud administrator / sysadmin: AZ-900 → AZ-104. Optionally add AZ-305 later for the architect track.
AI developer: AZ-900 → AI-200. Add AI-901 first only if you want the conceptual grounding.
Security engineer: SC-900 → SC-500. AZ-900 helps too — attackers and defenders both love poorly understood infrastructure.
Solutions architect: AZ-900 → AZ-104 → AZ-305. The full climb, and the most respected combo in Azure hiring.
DevOps engineer: AZ-900 → AZ-104 → AZ-400. The AZ-104 operations knowledge makes AZ-400's automation topics far easier.

Frequently Asked Questions

Do I need AZ-900 before taking AZ-104?: No. Microsoft does not enforce prerequisites between exams. AZ-900 first is the recommended learning path, but experienced admins routinely go straight to AZ-104.
I studied for AZ-204 / AZ-500 / AI-900. Is that wasted now?: No — the renames carried the exam content over. Your study transfers directly to AI-200, SC-500, and AI-901 respectively. Just make sure you register for the new exam code.
Do Azure fundamentals certifications expire?: No. Fundamentals exams like AZ-900, AI-901, and SC-900 do not expire. Associate and expert certifications are valid for one year and renew free through Microsoft's online renewal assessment.
Which Azure cert should I get for a cloud administrator job?: AZ-104. It is the associate exam built for exactly that role, and it appears in real job postings. AZ-900 is a good warm-up but rarely sufficient on its own for an admin position.
What happened to MS-900?: MS-900 (Microsoft 365 Fundamentals) was retired. If you were considering it, the current entry points are AZ-900 for cloud, AI-901 for AI, and SC-900 for security.

Where CertCrack Fits

Every Azure journey in the table above starts at AZ-900 — and that is exactly where CertCrack's practice exams begin. Our AZ-900 practice exams include 700 original questions with detailed explanations: a free 30-question sample quiz with no sign-up, and full access covering all three exam domains. Build the vocabulary here, then climb to AZ-104 and beyond with confidence.

Start at the beginning: AZ-900

Try 700 original AZ-900 practice questions with detailed explanations — free 30-question sample quiz, no sign-up needed.

Get AZ-900 Full Access