Mastering the Microsoft 365 Fundamentals Exam (MS-900):
A Comprehensive Guide

Preparing for the Microsoft 365 Fundamentals exam (MS-900) is a critical step for professionals looking to validate their basic understanding of Microsoft 365 services, usually after taking the Microsoft 365 Fundamentals course.

This exam is designed to demonstrate foundational Microsoft 365 knowledge, including cloud services, security, compliance, privacy, and Microsoft 365 pricing. Below, I’ve outlined the essential topics and areas that you should focus on to pass the MS-900 exam successfully.

Microsoft 365 Fundamentals exam preparation

Understanding Cloud Concepts (15-20%)

Benefits of Cloud Computing


Cloud computing offers unmatched scalability options. Users can easily scale their computing resources up or down based on their needs. This flexibility allows for efficient resource utilisation, ensuring that users have access to more resources during peak times and can scale down to save costs when demand decreases.

Cost Efficiency

One of the primary attractions of cloud computing is its cost efficiency. Traditional on-premises setups require significant upfront investments in hardware and software, whereas cloud services operate on a pay-as-you-go model, significantly reducing capital expenditure. Maintenance and upgrade costs are also lower, as these are managed by the service provider.

Disaster Recovery

Cloud services provide robust disaster recovery solutions. Data is backed up across multiple locations on the cloud provider’s network, ensuring that it can be recovered quickly in the event of a hardware failure, natural disaster, or cyber attack. This level of redundancy is challenging and costly to replicate with physical, on-site backups.

Accessibility and Collaboration

Cloud computing enables users to access their applications and data from anywhere with an internet connection, promoting remote work and business continuity. It also facilitates collaboration by allowing multiple users to view and edit documents simultaneously, regardless of their location.


Leading cloud service providers invest heavily in security, implementing rigorous security protocols and compliance standards to protect user data. While security remains a shared responsibility, with users needing to implement their own measures, the underlying infrastructure benefits from state-of-the-art security features.

Types of Cloud Services

Infrastructure as a Service (IaaS)

IaaS provides virtualised computing resources over the internet. Users rent infrastructure – servers, networks, storage, and operating systems on a pay-per-use basis. This model eliminates the need for physical hardware, reducing capital expenditure. Examples include Amazon Web Services (AWS), Microsoft Azure, and Google Compute Engine.

Platform as a Service (PaaS)

PaaS offers a development environment to application developers. It includes infrastructure (servers, storage, and networking) and a platform layer (development tools, database management systems, business analytics). PaaS allows developers to focus on building software without managing the underlying infrastructure. Examples include Heroku, Google App Engine, and Microsoft Azure App Services.

Software as a Service (SaaS)

SaaS delivers software applications over the internet on a subscription basis. Users access software applications hosted on cloud servers, eliminating the need to install and run these applications on their personal computers or in their data centres. This significantly reduces the effort of software maintenance, ongoing operation, and support. Examples include Google Workspace, Salesforce, and Microsoft 365.

Cloud Models

Public Cloud

Public clouds are cloud computing platforms which are managed and owned by third-party service providers. These platforms offer a wide range of services including storage, computing capabilities, and networking services, which are delivered over the internet. Public clouds operate on a multi-tenant model, meaning that the same physical resources (servers, storage, etc.) are shared among multiple customers or tenants. Some of the most well-known public cloud providers include Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The primary advantage of public clouds is their scalability and flexibility, allowing businesses to scale resources up or down based on demand, without the need for significant upfront capital expenditure on hardware.

Private Cloud

A private cloud refers to a cloud computing environment that is exclusively used by a single organisation. It can be hosted either on-premise or off-premise and is managed either by the organisation itself or a third-party service provider. Unlike the public cloud, where resources are shared among multiple tenants, a private cloud ensures that resources are dedicated solely to one tenant, offering a higher level of security and control. Private clouds are often preferred by organisations with strict compliance, data privacy, and security requirements. Despite potentially higher costs and complexity in setup and management compared to public clouds, private clouds offer the benefits of cloud computing along with greater control over the infrastructure.

Hybrid Cloud

Hybrid cloud combines public cloud, private cloud, and, in some cases, on-premises infrastructure, allowing data and applications to be shared between them. This approach provides businesses with greater flexibility and more deployment options. For instance, an organization can use the public cloud for high-volume, low-security tasks such as web-based email and the private cloud (or on-premises infrastructure) for sensitive, business-critical operations like financial reporting. A key advantage of a hybrid cloud is the ability to quickly scale computing resources, taking advantage of the public cloud’s scalability while keeping sensitive data secure in a private cloud or on-premises data center. Hybrid clouds also support workload mobility, disaster recovery, and compliance goals, enabling businesses to leverage the best of both worlds. 

Core Microsoft 365 Services and Concepts (30-35%)

Key Components and Services: Microsoft 365 combines various services and applications to enhance productivity. Key components include Office 365, Windows 11, and EMS (Enterprise Mobility + Security). Focus on learning how Microsoft 365 integrates services like Exchange Online, SharePoint Online, Teams, and OneDrive for Business. Additionally, understand device management through tools like Intune and Windows Autopilot, and explore Microsoft’s diverse subscription plans tailored for different organisational sizes. Absolutely, understanding the core components and services of Microsoft 365 is crucial for managing and deploying it within any organisation efficiently. Here’s a detailed breakdown of key components and services provided by Microsoft 365 to help clarify their roles and how they contribute to enhancing productivity in the workplace:

Office 365

  • Exchange Online: This service provides email hosting, calendar, and contacts management. It allows users to access their email from anywhere, ensuring seamless communication across the organisation.
  • SharePoint Online: A collaboration tool for creating websites. It is used to store, organise, and access information from any device. Primarily, it’s a highly effective tool for document management and collaboration.
  • Teams: Microsoft Teams is a unified communication and collaboration platform that combines persistent workplace chat, video meetings, file storage (including collaboration on files), and application integration. It has rapidly become a central hub for teamwork.
  • OneDrive for Business: Offers cloud storage and file sharing capabilities that enable users to access files from anywhere. It integrates closely with Office apps, allowing for real-time collaboration.

Windows 11

Windows 11 is a crucial component of Microsoft 365, integrating seamlessly with other services for a cohesive user experience across devices. It provides security features, deployment options, and flexible management tools.

Enterprise Mobility + Security (EMS)

EMS is a suite of tools designed to help manage and secure devices, applications, and data. Key components include:

  • Intune: A cloud-based service in the enterprise mobility management (EMM) space that helps enable your workforce to be productive while keeping your corporate data protected.
  • Azure Active Directory: Provides identity and access management solutions, making sure only authorised personnel have access to business resources.
  • Advanced Threat Analytics: Helps identify and protect against cybersecurity threats using analytics and machine learning.

Device Management

  • Intune: Not just for mobile devices, Intune manages desktops and apps across Windows, macOS, and mobile platforms, ensuring security compliance and policy enforcement.
  • Windows Autopilot: Simplifies the deployment and setup of new Windows 10 and 11 PCs. It can automatically configure new devices into a business-ready state, enforcing policies and installing necessary applications without IT needing to physically touch the device.

Subscription Plans

Microsoft 365 offers diverse plans to cater to different organisational sizes and needs, including:

  • Microsoft 365 Business: Designed for SMEs, integrating Office 365 suite with device management and security solutions.
  • Microsoft 365 Enterprise: Offers a comprehensive suite of productivity and security tools suitable for larger organisations with complex IT environments.
  • Microsoft 365 Education: Tailored for educational institutions, combining Office 365 for Education with powerful device management and security tools.
  • Understanding these components and how they integrate with each other is fundamental for IT professionals looking to leverage Microsoft 365 effectively. It’s not just about individual 

Security, Compliance, Privacy, and Trust (30-35%)

Foundation of Security and Compliance: Security is a pillar of Microsoft 365. Familiarise yourself with the Microsoft Secure Score, Security Center, and identity management through Microsoft Entra ID (Azure AD). Learn about multi-factor authentication, threat protection services like Microsoft Defender, and information protection technologies including Data Loss Prevention (DLP) and Azure Information Protection. Also, ensure you understand how Microsoft 365 adheres to compliance regulations like GDPR and the tools available to help organisations manage these requirements.

Certainly, understanding the foundation of security and compliance within the Microsoft 365 environment is crucial for both IT professionals and organisations aiming to safeguard their information and ensure they are adhering to necessary regulations. Here’s an overview covering the key aspects you mentioned:

Microsoft Secure Score

  • Overview: Microsoft Secure Score is a measurement tool offered by Microsoft that evaluates your organisation’s security posture. It assesses the configurations and user behaviors within your Microsoft 365 and Azure environments to identify potential vulnerabilities and offers recommendations for improvement. The higher your score, the more secure your environment is considered to be.
  • Benefits: It helps organisations understand their security position and provides actionable insights to enhance it. By following the recommendations to increase your score, you can significantly reduce your organisation’s risk of security breaches.

Security Centre

  • Microsoft 365 Security Center: This is a unified platform for monitoring and managing security across your Microsoft 365 services. It provides insights into your security posture, allows the management of data protection policies, and offers analytics to identify and remediate threats.
  • Azure Security Center: While focusing on Azure resources, Azure Security Center emphasises continuous security assessment and threat protection. It offers advanced threat protection services, integrates with various Azure services, and provides security recommendations.

Identity Management through Microsoft Entra ID (Azure AD)

  • Microsoft Entra ID (Azure AD) is Microsoft’s cloud-based identity and access management service. It helps employees sign in and access resources both externally (services like Microsoft 365, the Azure portal, and thousands of other SaaS applications) and internally (your organisation’s network and apps).
  • Multi-Factor Authentication (MFA): Azure AD supports Multi-Factor Authentication to provide an additional layer of security. MFA requires two or more verification methods to prove your identity, making it harder for attackers to gain access to devices and networks.

Threat Protection Services

Microsoft Defender: It includes various enterprise-grade security solutions like Microsoft Defender for Endpoint, Microsoft Defender for Identity, etc., which protect against sophisticated threats across email, applications, cloud services, and endpoints.

Information Protection Technologies

  • Data Loss Prevention (DLP)**: This technology helps prevent sensitive information from leaking outside of your organisation. DLP policies can be configured to identify, monitor, and automatically protect sensitive information across Microsoft 365 services.
  • Azure Information Protection: Now integrated into Microsoft Information Protection, it allows organisations to classify, label, and protect documents and emails based on their sensitivity.

Compliance with Regulations

  • Microsoft Purview: Offers an all-encompassing approach that assists businesses in adhering to international, local, and sector-specific laws related to the safeguarding of data and the management of personal information.
  • GDPR & Beyond: Tools and services within Microsoft 365 are crafted to support businesses in achieving GDPR and additional compliance standards, ensuring effective data management. 

Microsoft 365 Pricing and Support (20-25%)

Understanding Pricing and Support Options: Navigating Microsoft 365’s pricing structures and support options is essential. Learn about the different pricing plans, what each plan includes, and how to manage subscriptions effectively. Additionally, comprehend the support structures provided by Microsoft, including SLAs and lifecycle policies, which are critical for maintaining service standards and ensuring compliance.

Understanding the pricing and support options for Microsoft 365 is crucial for businesses and individuals aiming to leverage this robust suite of productivity tools. Microsoft 365, formerly known as Office 365, offers a range of subscription plans catered to different needs, such as for home, business, and enterprise use. Each plan includes a set of services like email, collaboration tools, and office applications, among others. The platform’s support structures, including Service Level Agreements (SLAs) and lifecycle policies, are essential for maintaining service quality and compliance. Let’s delve into the details.

Microsoft 365 Pricing Plans

For Home Users

  • Microsoft 365 Family: Ideal for families, supporting up to 6 users, with access to Office apps, 1 TB of OneDrive cloud storage per user, and additional safety features.
  • Microsoft 365 Personal: Best suited for an individual, offering access to Office apps, 1 TB of OneDrive storage, and premium features.

For Business Users

  • Microsoft 365 Business Basic: Offers cloud services like OneDrive, Teams, Exchange, and SharePoint without desktop Office apps.
  • Microsoft 365 Business Standard: In addition to cloud services, it includes desktop Office apps for businesses that need the full suite.
  • Microsoft 365 Business Premium: Adds advanced security and device management capabilities on top of Standard’s offerings.

For Enterprise Users

  • Office 365 E1: Provides essential services like email, file storage and sharing, and web versions of Office apps.
  • Office 365 E3: Includes everything in E1 plus desktop Office apps and additional security and compliance tools.
  • Office 365 E5: Encompasses all E3 features plus advanced security, analytics, and voice capabilities.

Support Options

Microsoft provides several layers of support for Microsoft 365:

  • Standard Support: Included with all plans, offering general support for subscription and billing issues, service usage, and technical problems.
  • Premier Support: An enhanced support level available for an additional fee, including a dedicated manager, faster response times, and more in-depth technical assistance.
  • Support SLAs: Microsoft provides Service Level Agreements (SLAs) for its services, guaranteeing certain uptime percentages (usually 99.9%) and defining response times for various issue severities.

Lifecycle Policies

Microsoft follows a specific lifecycle policy for its products, detailing how long a product will receive support and updates. For Microsoft 365, this often means users need to stay current with the software versions to receive support subscriptions involves:

  • Selecting the Right Plan: Consider the number of users, required features, and budget.
  • Subscription Licensing: Licenses can be assigned, reassigned, or removed for users as needed.
  • Billing and Renewal: Keep track of renewal dates to ensure continuity of service.

How to Prepare Effectively for the Microsoft 365 Fundamentals Exam

  • Leverage Microsoft Learn: Microsoft offers learning paths that are specifically tailored for the MS-900 exam on their Microsoft Learn platform. These are invaluable resources for both new learners and seasoned professionals.
  • Engage with Community and Forums: Join forums and community groups like Tech Community or LinkedIn groups. Engaging with peers can provide insights and tips that are beneficial for exam preparation.
  • Hands-On Practice: Utilise a trial subscription of Microsoft 365 to gain hands-on experience. Practical exposure to setting up and managing a Microsoft 365 tenant will provide a deeper understanding of the theoretical concepts covered in the exam.
  • Take Practice Exams: Before scheduling your exam, take several practice tests. These will help you identify areas of strength and weakness, and familiarise you with the exam format and question styles.

Final Thoughts about the Microsoft 365 Fundamentals Exam

The MS-900 Microsoft 365 Fundamentals exam serves as a gateway to more advanced Microsoft certifications. By mastering the fundamentals, you not only gain a solid foundation in Microsoft 365 technologies but also prepare yourself for further professional development in cloud technology roles. Start studying today and take your first step towards becoming a Microsoft 365 certified professional!

Frequently Asked Questions

What is the MS-900: Microsoft 365 Fundamentals Exam?

The MS-900: Microsoft 365 Fundamentals Exam is a certification test designed for candidates looking to demonstrate foundational knowledge of Microsoft 365 services and concepts. Successful completion awards the Microsoft 365 Certified Fundamentals designation, emphasising an understanding of Microsoft cloud services, including Microsoft Exchange, and the benefits of the Microsoft 365 cloud service model.

Who should take the Microsoft MS-900 exam?

The Microsoft MS-900 exam is tailored for IT professionals, business decision makers, and other individuals interested in validating their understanding of Microsoft 365 services. It is ideal for those looking to grasp the capabilities of Microsoft 365 including cloud fundamentals and to make informed decisions regarding Microsoft cloud services.

What topics are covered in the MS-900 exam?

The MS-900 exam objectives include an overview of core Microsoft 365 services and features, understanding of Microsoft 365 pricing and support, fundamentals of cloud security, compliance, privacy, and trust in Microsoft 365, and knowledge of Microsoft 365 teamwork, productivity, and collaboration tools. These core areas are essential to navigate and utilise the Microsoft 365 admin center effectively.

How can I benefit from a MS-900 study guide?

A comprehensive MS-900 study guide is an essential tool for preparation, offering a structured approach to learning the exam objectives. It can significantly increase your understanding of the Microsoft 365 platform from concept to execution, helping you to test your knowledge, identify weak spots, and strengthen your command over the fundamentals of the Microsoft 365 certification exam content.

What are the best methods to prepare and pass the MS-900 certification exam?

To best prepare and pass the MS-900 certification exam, combining resources such as official MS-900 course materials, study guides, practice tests, and revising the capabilities of Microsoft 365, including its apps and teamwork features, is highly recommended. Immersing yourself in a variety of preparation materials allows you to test your knowledge and approach the exam with confidence.

How long should I prepare for the Microsoft 365 Fundamentals MS-900 exam?

Preparation time for the Microsoft 365 Fundamentals MS-900 exam varies by individual, depending on existing knowledge and experience with Microsoft 365 services. Typically, candidates may spend a few weeks to a couple of months studying. Regular practice and revision of exam objectives, along with a solid study plan, can optimise preparation time and enhance readiness.

Are there any prerequisites for taking the MS-900 exam?

There are no strict prerequisites for taking the MS-900 exam, making it accessible to individuals new to Microsoft 365 or those beginning their journey in the Microsoft cloud ecosystem. However, having a basic understanding of the Microsoft 365 platform and its services will be advantageous.

How do I test my knowledge before taking the MS-900 test?

To test your knowledge before the official MS-900 test, you should utilise practice exams and quizzes offered by reputable sources. These practice tests simulate the real exam environment, helping to familiarise yourself with the format, types of questions, and timing, thereby increasing your chances to pass the exam with confidence.

What is the best way to stay updated with changes to the MS-900 exam objectives?

The best way to stay updated with any changes to the MS-900 exam objectives is to regularly check the official Microsoft Learning website and engage with the Microsoft 365 community. Microsoft updates their certification exams periodically to reflect the latest technologies and market needs, so staying informed is key to ensuring your study material is current.

Scroll to Top