Microsoft Azure infrastructure certifications make more sense when they are mapped to jobs instead of arranged as a simple difficulty ladder. Azure administrators operate environments. Solutions architects design them. Network engineers specialize in connectivity and application delivery. Azure Virtual Desktop specialists focus on end-user computing. Fundamentals candidates need platform literacy before they take on those responsibilities.<\/p>\n
The portfolio also contains legacy credentials that still appear in search results and older training material. That matters in October 2026 because the Windows Server Hybrid Administrator certification, including AZ-801, retired on September 30. Candidates need to distinguish current Azure infrastructure paths from exams that remain historically relevant but are no longer available.<\/p>\n
This page organizes the Microsoft infrastructure family by role within the wider Microsoft certifications<\/a> portfolio. For a vendor-neutral comparison with AWS, Google Cloud and VMware, use the broader cloud architecture certification map<\/a>.<\/p>\n AZ-900<\/a> is the Azure Fundamentals exam. It is useful for candidates who need a structured introduction to cloud concepts, Azure services, management, governance, security and pricing. It can be valuable for business professionals, project staff, technical sales people and IT practitioners who are new to Azure.<\/p>\n AZ-900 should not be mistaken for an administrator or architect certification. It validates vocabulary and foundational understanding rather than the ability to run production Azure environments. Experienced infrastructure professionals can often move directly into a role-based path if they already understand general cloud concepts.<\/p>\n The best use of AZ-900 is to reduce platform uncertainty. Once a candidate understands subscriptions, resource groups, identity, basic compute, storage, networking and governance, the next step should be determined by job responsibility.<\/p>\n AZ-104<\/a> is the central certification for Azure administrators. It covers the operational skills required to manage identity and governance, storage, compute, virtual networking and monitoring in Azure.<\/p>\n This is the strongest Microsoft infrastructure starting point for professionals who will actually operate Azure. The candidate should be comfortable creating and managing resources, assigning access, troubleshooting connectivity, configuring storage, working with virtual machines and platform services, applying governance and using monitoring data to understand system health.<\/p>\n AZ-104 is also valuable for future architects because design decisions are better when the architect understands how Azure behaves in practice. Microsoft reflects that relationship in the Azure Solutions Architect Expert path, which uses Azure Administrator Associate as a prerequisite alongside the architecture exam.<\/p>\n The existing AZ-104 cloud-administrator discussion<\/a> gives additional context on how the role has evolved as Azure has become more automated and governance-heavy.<\/p>\n AZ-305<\/a> focuses on designing Azure infrastructure solutions rather than administering individual resources. Candidates are expected to translate business and technical requirements into decisions about identity, governance, monitoring, data storage, business continuity and infrastructure.<\/p>\n The difference from AZ-104 is important. An administrator might configure a virtual network or backup policy. An architect must decide what network topology or recovery strategy best satisfies requirements and constraints. That means reasoning across cost, security, availability, manageability and organizational complexity.<\/p>\n Architecture preparation should therefore include scenario work. Practice comparing two designs that could both function technically and explaining why one is better for the stated requirements. That is more useful than memorizing isolated product facts.<\/p>\n Candidates can use the existing AZ-305 infrastructure<\/a> or the Azure solutions architect learning path<\/a> where deeper exam context is useful.<\/p>\n AZ-700<\/a> is the Azure Network Engineer Associate exam. It is designed for candidates responsible for core networking, hybrid connectivity, application delivery, private access and network security.<\/p>\n This specialization becomes especially valuable in larger environments, where networking is no longer a handful of virtual networks and security groups. Engineers may need hub-and-spoke or virtual WAN designs, ExpressRoute or VPN connectivity, load balancing, application gateways, private endpoints, DNS, firewall policy and troubleshooting across multiple subscriptions.<\/p>\n Networking depth also strengthens architecture skills. Identity is often described as the new security perimeter, but applications still move traffic through real network paths. Architects need to understand how private connectivity, routing and application delivery affect security, latency, resilience and cost.<\/p>\n The existing AZ-700 networking preparation material<\/a> is useful once the candidate has chosen networking as the specialization.<\/p>\n AZ-140<\/a> is the Azure Virtual Desktop Specialty certification. It fits professionals responsible for planning, implementing, managing and monitoring AVD environments.<\/p>\n The role combines several infrastructure domains. Candidates need to understand identity, networking, host pools, session hosts, profiles, applications, user access, security and monitoring. AVD also creates operational concerns around user experience, scaling, image management and application delivery that are not central to a general Azure administrator exam.<\/p>\n AZ-140 is therefore a good specialization for EUC engineers, desktop virtualization professionals and Azure administrators whose responsibilities include virtual desktops. It is not necessary for every Azure architect.<\/p>\n The AZ-140 and Azure Virtual Desktop<\/a> can help candidates judge whether they have enough Azure and desktop-virtualization foundation before preparing for the specialty.<\/p>\n AZ-801<\/a>, Configuring Windows Server Hybrid Advanced Services, retired on September 30, 2026 together with the Windows Server Hybrid Administrator Associate certification. That date is important because older roadmaps may still recommend AZ-800 and AZ-801 as an active hybrid-administrator path.<\/p>\n The content remains historically relevant to professionals who earned the certification or who manage Windows Server hybrid environments, but it should not be presented as a current exam for new candidates. Certification pages and study material should make that status explicit so users do not prepare for an unavailable test.<\/p>\n The retirement also illustrates a broader lesson: Microsoft role-based certification changes can be faster than the underlying technology. Hybrid identity, networking, migration and Windows Server operations still matter even when a particular credential is retired. Candidates should separate durable technical skills from the current badge used to validate them.<\/p>\n Infrastructure and security are inseparable in Azure. Administrators and architects need to understand Entra identity, role-based access control, managed identities, policy, network security, Key Vault, Defender capabilities, logging and private access patterns.<\/p>\nAZ-900 for Azure fundamentals, not infrastructure engineering<\/h2>\n
AZ-104 for Azure administration<\/h2>\n
AZ-305 for solutions architecture<\/h2>\n
AZ-700 for Azure networking<\/h2>\n
AZ-140 for Azure Virtual Desktop<\/h2>\n
AZ-801 is now a legacy exam<\/h2>\n
How Azure infrastructure connects to security<\/h2>\n