What does the MS-900 exam cover?
The MS-900 Microsoft 365 Fundamentals exam covers cloud concepts as they apply to Microsoft 365, core Microsoft 365 services and concepts, security compliance and privacy in Microsoft 365, and Microsoft 365 pricing and support. It is an entry-level exam requiring no prior Microsoft 365 experience and costs $99 USD.
The MS-900 Microsoft 365 Certified: Fundamentals certification validates foundational knowledge of the Microsoft 365 suite, which includes productivity tools (Word, Excel, Teams, SharePoint), cloud services (Exchange Online, OneDrive), security, and compliance. It is the starting point for professionals building Microsoft 365 expertise.
Microsoft 365 is used by over 345 million paid seats globally, making it the dominant enterprise productivity platform. MS-900 is valuable for IT support staff, business analysts, project managers, and anyone who works with or makes decisions about Microsoft 365 deployments. The exam costs $99 USD and requires a passing score of 700 out of 1000.
Exam Overview
| Detail | Information |
|---|---|
| Exam Code | MS-900 |
| Full Name | Microsoft 365 Fundamentals |
| Number of Questions | 40-60 |
| Time Limit | 45 minutes |
| Passing Score | 700/1000 |
| Cost | $99 USD |
| Prerequisites | None |
| Related Role-Based Exams | MS-102, MS-700, MS-721 |
The exam covers four domains:
- Describe cloud concepts (10-15%)
- Describe Microsoft 365 apps and services (45-50%)
- Describe security, compliance, privacy, and trust in Microsoft 365 (25-30%)
- Describe Microsoft 365 pricing and support (10-15%)
"The MS-900 strongly emphasizes the core Microsoft 365 service portfolio -- Teams, Exchange Online, SharePoint, OneDrive, Intune, and Entra ID. Candidates who can distinguish what each service does and which problems it solves will find the exam straightforward. The challenge is the breadth of the service catalog." -- Microsoft 365 training community
Domain 1: Cloud Concepts in Microsoft 365 Context (10-15%)
Benefits of Microsoft 365 Cloud Services
Microsoft 365 delivers several cloud benefits that the exam tests:
- Productivity anywhere: Applications available through web browsers and mobile apps, enabling work from any device
- Automatic updates: Microsoft manages service updates; organizations do not need to plan and execute software upgrades
- Scalability: Adding or removing licenses immediately, without hardware procurement cycles
- Security included: Advanced threat protection, identity management, and compliance tools included in higher license tiers
Microsoft 365 vs. Office 2021
A common exam topic is understanding the difference between subscription-based Microsoft 365 (always current, includes cloud services) and perpetual Office licenses (one-time purchase, no cloud services, no feature updates after release).
Domain 2: Microsoft 365 Apps and Services (45-50%)
Productivity and Collaboration Services
| Service | Category | Primary Purpose |
|---|---|---|
| Microsoft Teams | Communication | Chat, meetings, calling, file collaboration |
| Exchange Online | Cloud email, calendars, contacts | |
| SharePoint Online | Intranet/document management | Team sites, document libraries, intranet portals |
| OneDrive | Personal storage | Individual cloud file storage and sync |
| Microsoft 365 Apps | Productivity | Word, Excel, PowerPoint, Outlook desktop apps |
| Viva | Employee experience | Engagement, learning, insights, goals |
Microsoft Teams Capabilities
Microsoft Teams has become the central hub for collaboration in Microsoft 365. Key capabilities:
- Chat: Persistent 1:1 and group messaging with file sharing
- Meetings: Audio/video meetings, screen sharing, recording, transcription, and breakout rooms
- Calling: PSTN calling through Microsoft Calling Plans or Direct Routing
- Teams channels: Organized workspaces for team projects with shared files and apps
- Teams apps: Integrated third-party and Microsoft apps within the Teams interface
Device Management with Intune
Microsoft Intune provides unified endpoint management:
- Mobile Device Management (MDM): Full device enrollment for corporate-owned devices, allowing policy enforcement and remote wipe
- Mobile Application Management (MAM): App-level protection policies for personal devices (BYOD) without requiring full device enrollment
- Autopilot: Zero-touch deployment of Windows devices, joining Azure AD and configuring with Intune policies without manual setup
Domain 3: Security, Compliance, Privacy, and Trust (25-30%)
Microsoft 365 Security Features
Microsoft 365 Defender integrates security across the Microsoft 365 ecosystem:
- Microsoft Defender for Office 365: Protection against phishing, malware, and business email compromise
- Microsoft Defender for Endpoint: Endpoint detection and response for managed devices
- Microsoft Entra ID: Identity-based access control, MFA, and Conditional Access
Compliance in Microsoft 365
Microsoft Purview provides compliance capabilities integrated into Microsoft 365:
- Compliance Manager: Automated compliance assessments for regulations like GDPR, HIPAA, and ISO 27001
- Sensitivity labels: Classifying and protecting content (emails, documents) based on sensitivity level
- Retention policies: Automatically retaining or deleting content based on regulatory requirements
- Communication compliance: Monitoring communications for policy violations
Microsoft Privacy Principles
Microsoft commits to several privacy principles for Microsoft 365:
- Control: Customers own their data and can delete it
- Transparency: Microsoft is transparent about data handling practices
- Security: Microsoft implements strong security measures
- Legal protections: Microsoft will not provide customer data to governments unless legally required
- No data for advertising: Microsoft does not use customer data to target advertising
"Many MS-900 candidates underestimate the compliance and trust domain, assuming it is straightforward. Questions about specific Purview capabilities, the differences between retention labels and sensitivity labels, and what Compliance Manager measures can be surprisingly specific. Allocate study time proportionally to the domain weight." -- MS-900 candidate community
Domain 4: Microsoft 365 Pricing and Support (10-15%)
License Tiers
Microsoft 365 offers multiple license tiers:
| License | Target | Key Differentiators |
|---|---|---|
| Microsoft 365 Business Basic | SMB | Web/mobile apps only, Teams, Exchange |
| Microsoft 365 Business Standard | SMB | Desktop apps, Teams Phone |
| Microsoft 365 Business Premium | SMB | Intune, Defender, Azure AD P1 |
| Microsoft 365 E3 | Enterprise | Full compliance tools, desktop apps |
| Microsoft 365 E5 | Enterprise | Advanced security, analytics, compliance |
| Microsoft 365 F1/F3 | Frontline workers | Lighter apps for deskless workers |
Microsoft 365 Support Options
Microsoft offers multiple support tiers:
- Included support: Available to all Microsoft 365 subscribers; access via admin center
- Unified Support: A paid, enhanced support tier providing direct access to Microsoft engineers with faster response times
- FastTrack: Microsoft-provided deployment guidance for organizations with 150+ seats, helping with initial setup and adoption
Frequently Asked Questions
How long does MS-900 take to study for? Most candidates need 1-2 weeks of study for MS-900. The exam is conceptual and broad rather than technical and deep. Microsoft Learn's official MS-900 learning path covers all exam objectives in approximately 8-10 hours. Candidates already using Microsoft 365 products daily will find many concepts familiar and may need even less dedicated study time.
Is MS-900 worth getting for IT professionals? MS-900 is most valuable for professionals in IT support, sales, business analysis, and project management who work with Microsoft 365 but do not specialize in it. For technical Microsoft 365 administrators, MS-102 (Microsoft 365 Administrator Expert) and service-specific certifications like MS-700 (Teams Administrator) provide more career value. MS-900 is often a prerequisite recommendation on job postings for helpdesk and junior IT roles.
What Microsoft 365 certifications should I take after MS-900? The most common next steps are MS-102 (Microsoft 365 Administrator Expert), MS-700 (Administering Microsoft Teams), or MS-721 (Microsoft 365 Certified: Collaboration Communications Systems Engineer Associate). The choice depends on your role: generalist admins pursue MS-102, Teams-focused roles pursue MS-700, and voice/calling specialists pursue MS-721.
References
- Microsoft. (2025). Exam MS-900: Microsoft 365 Fundamentals. https://learn.microsoft.com/en-us/credentials/certifications/exams/ms-900/
- Microsoft. (2025). Microsoft 365 Documentation. https://learn.microsoft.com/en-us/microsoft-365/
- Microsoft. (2025). Microsoft Teams Documentation. https://learn.microsoft.com/en-us/microsoftteams/
- Microsoft. (2025). Microsoft Purview Compliance Documentation. https://learn.microsoft.com/en-us/purview/
- Microsoft. (2025). Microsoft Trust Center. https://www.microsoft.com/en-us/trust-center
- Statista. (2024). Microsoft 365 paid seats worldwide. https://www.statista.com/statistics/983321/worldwide-microsoft-office-365-user-numbers/