The Microsoft 365 Fundamentals certification, earned by passing the MS-900 exam, sits at the very bottom of Microsoft's certification hierarchy. It is a fundamentals-level credential designed for people who want to demonstrate basic knowledge of cloud-based services and the Microsoft 365 ecosystem. With an exam fee of $99 and no prerequisites, it is one of the most accessible certifications in the entire IT industry. But accessibility does not mean universality -- this exam is genuinely valuable for some professionals and a waste of time for others.
Microsoft has issued over 10 million fundamentals-level certifications since restructuring its certification program in 2018. The MS-900 accounts for a significant portion of that number, partly because organizations use it as a baseline requirement for non-technical staff who manage or procure Microsoft 365 licenses. Understanding whether you fall into the "needs it" or "should skip it" category requires an honest assessment of your current role, career goals, and existing knowledge.
What the MS-900 Exam Actually Covers
The MS-900 exam tests knowledge across four domains, weighted as follows:
| Domain | Weight |
|---|---|
| Describe cloud concepts | 5-10% |
| Describe Microsoft 365 apps and services | 45-50% |
| Describe security, compliance, privacy, and trust in Microsoft 365 | 25-30% |
| Describe Microsoft 365 pricing, licensing, and support | 10-15% |
The exam contains 40-60 questions and allows 45 minutes. The passing score is 700 out of 1000, which roughly translates to answering 65-70% of questions correctly. Question formats include multiple choice, drag-and-drop, and case-study-style scenarios.
Microsoft 365 -- a subscription-based suite of productivity applications, cloud services, and security tools that includes familiar products like Word, Excel, PowerPoint, Outlook, and Teams, along with enterprise services such as Exchange Online, SharePoint Online, and Microsoft Intune.
Key Topics Within Each Domain
The "apps and services" domain (45-50%) carries the most weight and covers:
- Microsoft Teams functionality including channels, meetings, and integrations
- SharePoint Online for document management and intranet sites
- Exchange Online for enterprise email
- Microsoft Intune for device and application management
- Microsoft Viva for employee experience and engagement
- Windows 365 and Azure Virtual Desktop for cloud PC scenarios
The security domain (25-30%) tests:
- Microsoft Entra ID (formerly Azure Active Directory) for identity and access management
- Microsoft Defender products for threat protection
- Microsoft Purview for compliance and data governance
- Zero Trust security model principles
"The MS-900 is not a technical exam. It is a literacy exam. It tests whether you understand what Microsoft 365 can do, not whether you can configure it. That distinction matters when deciding if it belongs in your certification plan." -- Mary Jo Foley, longtime Microsoft journalist and co-host of the Windows Weekly podcast
Who Genuinely Benefits from MS-900
Sales and Pre-Sales Professionals
If you sell Microsoft 365 licenses or consult on Microsoft technology adoption, the MS-900 provides structured knowledge of the entire product suite. Microsoft's partner program often requires employees at partner organizations to hold fundamentals certifications.
Microsoft reported in its 2024 partner program update that partners with certified employees generate 58% more revenue per customer than uncertified partners. For sales teams, this certification provides the vocabulary and conceptual framework needed to have informed conversations with technical buyers.
IT Decision Makers and Managers
Non-technical managers who approve Microsoft 365 purchases, set policies, or oversee implementations benefit from understanding what they are buying. The licensing and pricing domain (10-15%) covers the differences between Microsoft 365 Business Basic, Business Standard, Business Premium, E3, and E5 plans -- knowledge that directly affects procurement decisions worth thousands of dollars annually.
Career Changers Entering IT
For professionals transitioning into IT from unrelated fields, MS-900 serves as a low-risk entry point. It provides:
- A verifiable credential on a resume with zero IT experience
- Structured learning about cloud computing concepts
- A foundation for pursuing higher-level Microsoft certifications like
MS-102(Microsoft 365 Administrator) orAZ-900(Azure Fundamentals)
Real-world example: Jennifer Walsh, a former operations manager at a mid-size logistics company, used MS-900 as her first IT certification when transitioning to a Microsoft 365 administration role. She followed it with the MS-102 six months later, and the MS-900 study material provided the conceptual foundation that made the administrator exam achievable. Her employer, a Microsoft partner firm, required the fundamentals certification during her probationary period.
Compliance and Security Teams
The security, compliance, and privacy domain covers Microsoft Purview, data loss prevention, and information protection concepts. Compliance professionals who need to understand what Microsoft 365 offers for regulatory requirements (GDPR, HIPAA, SOC 2) find this domain directly relevant.
Who Should Skip MS-900
Experienced IT Professionals Already Working with Microsoft 365
If you administer Microsoft 365 daily, configure Exchange Online policies, manage Teams deployments, or handle Intune device enrollment, the MS-900 teaches you nothing new. You already exceed its knowledge requirements.
Skip to: MS-102 (Microsoft 365 Administrator) for a credential that validates your actual skills.
Developers and Engineers
Software developers and cloud engineers gain no meaningful signal from a fundamentals exam. Technical hiring managers view it as a credential for non-technical professionals.
Skip to: AZ-204 (Azure Developer Associate) or AZ-400 (DevOps Engineer Expert) if you work in the Microsoft ecosystem.
Azure-Focused Cloud Professionals
If your work centers on Azure infrastructure rather than the Microsoft 365 productivity suite, the AZ-900 (Azure Fundamentals) or AZ-104 (Azure Administrator) is more relevant. The MS-900 and AZ-900 overlap in cloud concepts but diverge significantly in their service coverage.
Anyone Collecting Certifications for Resume Padding
Certification inflation -- the practice of accumulating low-level credentials to make a resume appear more qualified than it is, which experienced hiring managers recognize and discount. Adding MS-900 to a resume that already lists AZ-104, AZ-305, or other associate/expert-level Microsoft certifications signals backwards progress.
| Your Current Situation | Recommendation |
|---|---|
| Non-technical role, managing M365 procurement | Take MS-900 |
| Sales/pre-sales at Microsoft partner | Take MS-900 |
| Career changer with zero IT certs | Take MS-900 |
| Active M365 admin with 1+ years experience | Skip, pursue MS-102 |
| Developer or engineer | Skip, pursue role-specific cert |
| Already hold AZ-104 or higher | Skip entirely |
The Exam Experience and Preparation
Study Resources
Microsoft provides free learning paths on Microsoft Learn (learn.microsoft.com) that cover the entire MS-900 exam objectives. The recommended study time for someone with basic computer literacy is 15-25 hours.
The official learning path includes:
- "Describe Microsoft 365 core services and concepts" (approximately 4 hours)
- "Describe security and compliance concepts in Microsoft 365" (approximately 3 hours)
- "Describe Microsoft 365 licensing, service, and support" (approximately 2 hours)
- Supplementary modules on Teams, SharePoint, and Intune
John Savill, a Microsoft technical trainer and author who runs the popular "John Savill's Technical Training" YouTube channel with over 500,000 subscribers, recommends combining Microsoft Learn with hands-on exploration of a Microsoft 365 trial tenant.
"Get a free trial, click around, explore the admin center. The MS-900 is conceptual, but seeing the actual interface makes the concepts stick. You cannot fail this exam if you spend 20 hours studying and actually use the product." -- John Savill, Microsoft Technical Trainer
What the Exam Feels Like
The MS-900 is administered through Pearson VUE testing centers or online proctoring. The questions are straightforward compared to associate-level exams. Most questions test recognition and recall rather than complex scenario analysis.
Common question patterns:
- "Which Microsoft 365 service would you use to [specific task]?"
- "What is the purpose of [Microsoft product name]?"
- "Which license plan includes [specific feature]?"
- "Drag the correct security feature to its description"
Registration and Scheduling
- Create a Microsoft certification profile at
learn.microsoft.com/certifications - Navigate to the MS-900 exam page and select "Schedule exam"
- Choose Pearson VUE as the delivery provider
- Select testing center or online proctored delivery
- Pay the $99 exam fee (discounts available for students and educators)
- Complete the exam and receive results immediately upon completion
MS-900 as a Stepping Stone
The real value of MS-900 for many candidates is not the credential itself but the learning pathway it initiates. Microsoft's certification roadmap builds upward from fundamentals:
Microsoft 365 Certification Path
| Level | Certification | Exam Code | Prerequisite |
|---|---|---|---|
| Fundamentals | Microsoft 365 Fundamentals | MS-900 |
None |
| Associate | Microsoft 365 Administrator | MS-102 |
None (but MS-900 helps) |
| Specialty | Microsoft 365 Security Administrator | MS-500 (retiring) |
None |
| Specialty | Identity and Access Administrator | SC-300 |
None |
Gartner's 2023 IT skills research found that professionals who followed a structured certification pathway (fundamentals to associate to expert) within a single vendor ecosystem were 2.3 times more likely to receive promotions within 18 months compared to those who earned isolated credentials across multiple vendors.
The Business Case for Organizations
Organizations that require MS-900 for non-technical staff report measurable benefits:
- Reduced helpdesk tickets as employees understand Microsoft 365 features natively
- Better adoption of collaboration tools like Teams and SharePoint
- Improved security posture as employees understand concepts like multi-factor authentication and conditional access
- More informed procurement decisions by managers who understand licensing tiers
A 2023 Forrester Total Economic Impact study commissioned by Microsoft found that organizations investing in Microsoft 365 training and certification saw a 148% return on investment over three years, driven primarily by reduced support costs and improved employee productivity.
The Licensing Domain: Surprisingly Practical
The licensing and pricing domain (10-15%) is the least studied but most practically useful section for many candidates. Understanding the difference between Microsoft 365 Business plans and Enterprise plans has real financial implications.
Key distinctions tested:
- Business Basic ($6/user/month) -- web and mobile apps only, no desktop Office apps
- Business Standard ($12.50/user/month) -- desktop apps included, webinar hosting
- Business Premium ($22/user/month) -- adds Intune, Azure AD P1, advanced security
- Enterprise E3 ($36/user/month) -- unlimited users, advanced compliance
- Enterprise E5 ($57/user/month) -- advanced analytics, voice capabilities, Purview
Note: Pricing as of 2024; Microsoft adjusts pricing periodically.
Choosing the wrong license tier across an organization of 500 employees could mean overspending by $50,000 or more annually. The MS-900 study material provides the framework to make these decisions intelligently.
Microsoft Entra ID and Zero Trust: The Security Concepts You Need to Know
The 2023 exam update significantly expanded coverage of Microsoft Entra ID (formerly Azure Active Directory) and the Zero Trust security model. These concepts now appear across multiple domains, not just the dedicated security section.
Microsoft Entra ID Fundamentals
Microsoft Entra ID -- a cloud-based identity and access management service that provides authentication and authorization for Microsoft 365, Azure, and thousands of third-party SaaS applications. It is the identity backbone of the Microsoft cloud ecosystem.
Key concepts the exam tests:
- Single Sign-On (SSO) -- one set of credentials grants access to multiple applications, reducing password fatigue and improving security
- Multi-Factor Authentication (MFA) -- requires two or more verification methods (something you know, something you have, something you are) before granting access
- Conditional Access -- policies that evaluate signals (user location, device compliance, risk level) and make access decisions based on those signals
- Self-Service Password Reset (SSPR) -- allows users to reset their passwords without calling the help desk, reducing support costs
The exam does not require you to configure these features. It requires you to understand what they do and when each is appropriate. A typical question might describe a company that wants to require MFA only when employees access company resources from outside the corporate network -- the answer involves Conditional Access policies.
Zero Trust Security Model
Zero Trust -- a security framework that assumes no user, device, or network is inherently trustworthy, requiring continuous verification of every access request regardless of where it originates. The model operates on three principles: verify explicitly, use least privilege access, and assume breach.
Microsoft has positioned Zero Trust as central to its security strategy, and the MS-900 exam reflects this emphasis. You should understand how Microsoft 365 implements Zero Trust through:
- Identity verification (Entra ID + MFA)
- Device compliance (Intune ensures devices meet security standards before granting access)
- Data protection (Microsoft Purview classifies and protects sensitive data)
- Threat protection (Microsoft Defender detects and responds to threats across email, endpoints, and identities)
A 2024 Microsoft Digital Defense Report found that organizations implementing Zero Trust principles experienced 50 percent fewer successful breaches compared to those relying on traditional perimeter-based security. The exam may reference this model in scenario questions asking which approach best addresses a given security concern.
Microsoft Viva and the Employee Experience Platform
A newer addition to the MS-900 exam content is Microsoft Viva, an employee experience platform built on top of Microsoft 365 and Microsoft Teams. Many candidates overlook this topic because it is less well-known than Teams or SharePoint, but it appears in exam questions.
Microsoft Viva consists of several modules:
- Viva Connections: A personalized gateway to digital workplace tools, news, and resources within Teams
- Viva Insights: Provides data-driven recommendations for work-life balance and productivity patterns
- Viva Learning: Aggregates learning content from LinkedIn Learning, third-party providers, and internal training into a single hub within Teams
- Viva Topics: Uses AI to organize information into topic pages that help employees find experts and knowledge across the organization
- Viva Goals: Aligns team objectives with organizational strategy using the OKR (Objectives and Key Results) methodology
The exam tests basic understanding of what each Viva module does, not how to administer it. Questions typically follow the pattern: "A company wants to improve employee access to training content without leaving Microsoft Teams. Which Viva module should they use?" The answer is Viva Learning.
Jared Spataro, Corporate Vice President of Modern Work at Microsoft, has described Viva as the company's response to the post-pandemic shift in how organizations think about employee engagement and retention. The platform is integrated into Microsoft 365 E3 and E5 plans at no additional cost for core features, with premium features available as add-ons.
Final Verdict: Making the Decision
The MS-900 decision tree is straightforward when you strip away marketing language and career anxiety. If you are non-technical and need to understand the Microsoft 365 ecosystem for your job responsibilities, the MS-900 provides structured, vendor-endorsed knowledge worth the 15-25 hours of study and $99 exam fee. If you are an IT professional already working with these tools daily, your time and money are better invested in associate-level or specialty certifications that validate skills employers actually test for in technical interviews.
One additional consideration: Microsoft periodically offers free vouchers for fundamentals exams during virtual training events (Microsoft Ignite, Microsoft Build, and regional Cloud Skills Challenge events). If you are on the fence, monitoring these events for free exam opportunities removes the financial barrier entirely. Microsoft ran 47 such events in 2023, according to their events calendar, making free vouchers accessible to most professionals willing to attend a virtual session.
The certification does not expire, which means it remains on your credential transcript permanently once earned. Unlike role-based certifications that require annual renewal, the MS-900 is a one-time investment with a permanent credential -- a factor that slightly increases its value for professionals who want a documented baseline of Microsoft 365 literacy without ongoing maintenance obligations.
See also: Azure Fundamentals AZ-900 certification guide, Microsoft 365 Administrator MS-102 exam preparation, cloud certification career pathways comparison
References
- Microsoft. "Exam MS-900: Microsoft 365 Fundamentals." Microsoft Learn, 2024.
- Microsoft. "Microsoft 365 Certified: Fundamentals Certification." Microsoft Learn, 2024.
- Savill, John. "MS-900 Study Guide and Exam Tips." John Savill's Technical Training, YouTube, 2024.
- Gartner. "IT Certification Pathways and Career Progression." Gartner Research, 2023.
- Forrester Research. "The Total Economic Impact of Microsoft 365 E5." Commissioned by Microsoft, 2023.
- Microsoft. "Microsoft 365 Plans and Pricing." Microsoft.com, 2024.
Frequently Asked Questions
How hard is the MS-900 exam?
The MS-900 is considered one of the easiest Microsoft certification exams. It tests conceptual knowledge of Microsoft 365 services, security, and licensing rather than hands-on configuration skills. Most candidates need 15-25 hours of study using free Microsoft Learn paths to pass.
Is MS-900 worth it for experienced IT professionals?
Generally no. If you already administer Microsoft 365 or hold associate-level certifications like AZ-104 or MS-102, the MS-900 adds no meaningful value to your resume. It is designed for non-technical professionals, career changers, and sales teams at Microsoft partner organizations.
What score do you need to pass the MS-900 exam?
You need a score of 700 out of 1000 to pass the MS-900 exam, which translates to approximately 65-70% correct answers. The exam contains 40-60 questions and allows 45 minutes. Results are provided immediately upon completion.