- What Domain 1 Actually Tests
- Cloud Service Models: IaaS, PaaS, and SaaS
- Deployment Models: Public, Private, and Hybrid Cloud
- The Six Benefits of Cloud Computing Microsoft Expects You to Know
- The Shared Responsibility Model
- How Domain 1 Questions Are Written
- A Domain-Specific Study Approach
- Where Candidates Lose Points in Domain 1
- Frequently Asked Questions
- Domain 1 carries 25-30% of your AZ-900 score, making it worth roughly a quarter of the 700-point passing threshold.
- Microsoft's skills version was updated July 20, 2026 - verify you are studying the current objectives before exam day.
- The shared responsibility model is one of the most tested concepts in this domain; know exactly what shifts with each service model.
- No prerequisites are required for AZ-900, but candidates with zero IT background should budget extra time on cloud economics concepts.
What Domain 1 Actually Tests
Domain 1, Describe cloud concepts, accounts for 25-30% of the AZ-900 exam. On a 45-minute, 40-60 question assessment with a passing score of 700 on Microsoft's 1-1000 scale, that weight is meaningful. A candidate who skips this domain hoping to compensate elsewhere is taking a real risk.
But Domain 1 is also frequently underestimated. Many candidates treat it as "easy introductory material" and skim it. The reality is that Microsoft phrases cloud concept questions in ways that trip up people who only have surface-level familiarity. Understanding the why behind cloud economics, the precise boundaries of the shared responsibility model, and the exact distinctions between service models is what separates a 720 from a 660.
If you want a full picture of how this domain fits into the overall exam structure, the AZ-900 Exam Domains 2026: Complete Guide to All 3 Content Areas breaks down all three domains side by side. For now, let's go deep on Domain 1 specifically.
Cloud Service Models: IaaS, PaaS, and SaaS
The three cloud service models are tested directly and indirectly throughout Domain 1. Microsoft does not just ask you to define them - it asks you to apply them to scenarios.
Infrastructure as a Service (IaaS)
The cloud provider manages the physical hardware, networking, and virtualization. The customer manages the operating system, middleware, runtime, data, and applications.
- Highest level of customer control and flexibility
- Greatest customer responsibility for security patching and OS management
- Example scenarios: lift-and-shift migrations, custom VM configurations
- Azure Virtual Machines is the canonical IaaS example
Platform as a Service (PaaS)
The provider manages infrastructure plus the operating system and runtime environment. The customer focuses on applications and data.
- Middle ground between control and managed convenience
- Customer responsibility shifts away from OS patching to application logic
- Example scenarios: web app development, database hosting without server management
- Azure App Service and Azure SQL Database are classic PaaS examples
Software as a Service (SaaS)
The provider manages everything from infrastructure to the application itself. Customers consume the software through a browser or thin client.
- Least customer responsibility for underlying infrastructure
- Customer typically manages only data and user access settings
- Example scenarios: email, collaboration tools, CRM platforms
- Microsoft 365 is the most commonly cited AZ-900 SaaS example
Exam questions frequently present a business scenario - "A company wants to deploy a custom app without managing servers" - and ask which model fits. Practice mapping scenarios to models, not just memorizing definitions.
Deployment Models: Public, Private, and Hybrid Cloud
Deployment models describe where cloud infrastructure lives and who has access to it. Microsoft tests this with both definitional and scenario-based questions.
| Deployment Model | Who Owns the Hardware | Who Can Access Resources | Primary Use Case |
|---|---|---|---|
| Public Cloud | Cloud provider (Microsoft) | Any paying customer | Scalable general-purpose workloads |
| Private Cloud | The organization itself | Only that organization | Regulated industries, sensitive data |
| Hybrid Cloud | Both provider and organization | Controlled mix of both environments | Gradual migration, compliance requirements |
A common exam trap: candidates confuse "private cloud" with "on-premises data center." On AZ-900, a private cloud specifically implies cloud-like self-service and elasticity hosted on dedicated infrastructure - not simply a traditional server room. Know this distinction cold.
The Six Benefits of Cloud Computing Microsoft Expects You to Know
Microsoft's official learning content organizes cloud benefits into a specific framework. These are not generic talking points - they are the exact categories tested in AZ-900 questions.
- High Availability: Uptime guarantees and SLA commitments that keep services running even during component failures.
- Scalability: The ability to increase or decrease resources to match demand. Know the difference between vertical scaling (scaling up - adding more power to an existing resource) and horizontal scaling (scaling out - adding more instances).
- Reliability: The ability of a system to recover from failures and continue functioning, closely tied to Azure's global distribution model.
- Predictability: Confidence in performance (predictable outcomes) and cost (predictable spend via reserved instances and pricing calculators).
- Security: Cloud providers offer security tools and infrastructure, but the model of shared responsibility means customers still have obligations.
- Governance: Policies, templates, and auditing tools that help organizations maintain compliance and standardize deployments.
The distinction between scalability and elasticity is a specific exam trap. Elasticity implies automatic scaling in response to demand changes; scalability is the broader capability to scale at all. Microsoft uses these terms precisely in AZ-900 questions.
The Shared Responsibility Model
The shared responsibility model is arguably the single most important concept in Domain 1. It defines which security and management tasks belong to the cloud provider versus the customer - and that division shifts depending on which service model you are using.
| Responsibility Area | On-Premises | IaaS | PaaS | SaaS |
|---|---|---|---|---|
| Physical data center | Customer | Provider | Provider | Provider |
| Network infrastructure | Customer | Provider | Provider | Provider |
| Operating system | Customer | Customer | Provider | Provider |
| Application | Customer | Customer | Customer | Provider |
| Data and identities | Customer | Customer | Customer | Customer |
Notice that data and identities always remain the customer's responsibility, regardless of service model. This is a recurring exam theme - the cloud provider never takes ownership of your data governance obligations.
Key Takeaway
When an AZ-900 question describes a data breach scenario and asks "whose responsibility is it?", the answer almost always involves the customer retaining accountability for identity management and data classification - even in a fully SaaS environment.
How Domain 1 Questions Are Written
Understanding what Domain 1 tests conceptually is necessary, but not sufficient. You also need to understand how Microsoft phrases questions in this domain specifically.
Scenario-Based Matching
The most common Domain 1 question format presents a business scenario and asks which cloud model, deployment type, or benefit applies. Example: "A retail company wants to avoid capital expenditure on servers and pay only for what it uses. Which cloud characteristic does this describe?" The answer is the consumption-based model (OpEx vs. CapEx). These questions reward candidates who have internalized the concepts, not just memorized terms.
Best-Answer Questions
Some questions present multiple technically correct answers but ask for the best or most appropriate one. In Domain 1, this often means choosing between two benefits that both apply - but one aligns more precisely with the scenario detail given. Read every word of the scenario carefully before selecting.
What Microsoft Does Not Pre-Announce
Microsoft does not pre-announce exact item types for AZ-900, and interactive components are possible. While the fundamentals exam is primarily multiple choice, candidates should not be surprised by drag-and-drop or matching interfaces. The Best AZ-900 Practice Questions 2026: What to Expect on the Exam covers question format strategies in depth.
One important exam mechanic: there is no penalty for guessing on AZ-900. If you are unsure, always select an answer rather than leaving it blank. With 45 minutes of exam time and a seat time of 65 minutes (which includes check-in procedures), time management matters less than on longer exams - but do not dawdle.
A Domain-Specific Study Approach
Because Domain 1 is conceptually foundational, it should be studied first - but it should not consume the largest share of your preparation time given its lower exam weight compared to Domain 2.
Domain 1: Cloud Concepts Foundation
- Master IaaS, PaaS, SaaS definitions and scenario application
- Build a comparison table for public, private, and hybrid deployment models
- Memorize the six cloud benefits with one real-world Azure example each
- Study the shared responsibility matrix by service model
- Complete 20-30 Domain 1-specific practice questions on the AZ-900 practice test platform
Domain 2: Azure Architecture and Services (Heaviest Weight)
- Shift majority of study time here - this domain is 35-40% of your score
- Review regions, availability zones, and Azure resource hierarchy
- Study core compute, networking, and storage services
- See AZ-900 Domain 2: Complete Study Guide 2026 for the full breakdown
Domain 3 + Full Exam Practice
- Cover Azure management tools, cost management, and governance features
- See AZ-900 Domain 3: Complete Study Guide 2026
- Run full timed practice exams simulating the 45-minute format
- Review weak areas identified across all three domains
Note that Microsoft Learn is not available during the AZ-900 exam itself - fundamentals exams do not allow access to reference material. Everything must be retained before exam day. This makes active recall practice more valuable than passive reading.
For a comprehensive study plan covering all three domains, the AZ-900 Study Guide 2026: How to Pass on Your First Attempt offers a detailed week-by-week framework.
Where Candidates Lose Points in Domain 1
Confusing CapEx and OpEx
Capital expenditure (CapEx) refers to upfront spending on physical infrastructure - servers, data centers, hardware. Operational expenditure (OpEx) refers to pay-as-you-go costs. Cloud computing shifts spending from CapEx to OpEx. Microsoft tests this shift as a core cloud economic benefit. Candidates who cannot explain why this matters to a business will miss scenario questions that hinge on it.
Treating "High Availability" and "Fault Tolerance" as Synonyms
High availability means maximizing uptime through redundancy and SLA commitments. Fault tolerance means a system continues operating without interruption even when components fail - a stricter guarantee. AZ-900 occasionally distinguishes these in answer options. Know the nuance.
Underestimating the Consumption-Based Model Questions
Microsoft emphasizes the consumption-based pricing model as a defining feature of cloud computing. Questions ask about its implications: no upfront cost, no wasted capacity, scalable cost structure. Candidates who only know this as a definition without understanding its business implications stumble on applied questions.
Ignoring the Governance Benefit
Governance appears as one of the cloud benefits in Domain 1 but also bleeds into Domain 3. When tested in Domain 1, it focuses on the conceptual value - standardization, compliance templates, audit trails - not the specific Azure tools (which are Domain 3 territory). Keep that conceptual/technical split clear in your study sessions.
Candidates who want broader context on how Domain 1 knowledge translates into career opportunities should explore the AZ-900 Salary Guide 2026: Complete Earnings Analysis and AZ-900 Jobs - cloud fundamentals literacy is increasingly a baseline expectation, not a differentiator, in many IT hiring processes.
Before sitting the exam, running through targeted practice sets is the most efficient way to identify gaps in your Domain 1 knowledge. The AZ-900 practice exam platform provides domain-specific question sets mapped to the July 2026 objectives.
Frequently Asked Questions
Microsoft does not publish exact question counts by domain. With a typical exam containing 40-60 questions and Domain 1 weighted at 25-30%, you can expect roughly 10-18 questions from cloud concepts. Some items may be unscored, so treat every question as if it counts.
Domain 1 is often perceived as easier because the concepts are less technical, but many candidates lose points here by treating it too casually. Domain 2 is typically the most time-intensive because of the breadth of Azure services it covers. Domain 1's difficulty lies in scenario interpretation, not memorization volume.
No hands-on experience is required - AZ-900 has no prerequisites. Domain 1 is especially accessible to candidates without Azure lab experience because it tests conceptual understanding rather than service configuration. That said, working through free Azure sandbox environments can reinforce abstract concepts significantly.
The shared responsibility model is introduced in Domain 1 but its implications surface across Domain 2 (specific Azure services and their managed components) and Domain 3 (security and compliance tools that address customer-side responsibilities). Understanding it thoroughly in Domain 1 provides a foundation for the other domains.
The skills measured were updated as of July 20, 2026. Always download the official skills outline from Microsoft's AZ-900 certification page before beginning your preparation to confirm you are studying the current version. Older prep materials may reference superseded objectives.
- AZ-900 Domain 2: Describe Azure architecture and services (35-40%) - Complete Study Guide 2026
- AZ-900 Domain 3: Describe Azure management and governance (30-35%) - Complete Study Guide 2026
- AZ-900 Exam Domains 2026: Complete Guide to All 3 Content Areas
- AZ-900 Study Guide 2026: How to Pass on Your First Attempt