The 30 most valuable Microsoft certifications in 2026 span six tracks: Cloud Infrastructure, Data and AI, Security and Identity, Modern Work, Power Platform, and Copilot and Dynamics 365, and this guide profiles every one of them individually, including what each exam actually tests, who it is built for, current cost, prerequisites, and the career step it leads to next.
Top 30 Microsoft Certifications at a Glance
| Rank | Certification | Exam Code | Level | Cost (USD) | Track |
| 1 | Azure Fundamentals | AZ-900 | Fundamentals | $99 | Fundamentals |
| 2 | Azure AI Fundamentals | AI-901 | Fundamentals | $99 | Fundamentals |
| 3 | Azure Data Fundamentals | DP-900 | Fundamentals | $99 | Fundamentals |
| 4 | Security, Compliance, and Identity Fundamentals | SC-900 | Fundamentals | $99 | Fundamentals |
| 5 | Power Platform Fundamentals | PL-900 | Fundamentals | $99 | Fundamentals |
| 6 | Copilot and Agent Administration Fundamentals | AB-900 | Fundamentals | $99 | Fundamentals |
| 7 | Azure Administrator Associate | AZ-104 | Associate | $165 | Cloud Infrastructure |
| 8 | Azure Network Engineer Associate | AZ-700 | Associate | $165 | Cloud Infrastructure |
| 9 | Azure Security Engineer Associate | AZ-500 | Associate, retiring | $165 | Cloud Infrastructure |
| 10 | Cloud and AI Security Engineer Associate | SC-500 | Associate, new | $165 | Cloud Infrastructure |
| 11 | Azure Solutions Architect Expert | AZ-305 | Expert | $165 | Cloud Infrastructure |
| 12 | DevOps Engineer Expert | AZ-400 | Expert | $165 | Cloud Infrastructure |
| 13 | Fabric Analytics Engineer Associate | DP-600 | Associate | $165 | Data and AI |
| 14 | Fabric Data Engineer Associate | DP-700 | Associate | $165 | Data and AI |
| 15 | Azure Database Administrator Associate | DP-300 | Associate | $165 | Data and AI |
| 16 | Azure Databricks Data Engineer Associate | DP-750 | Associate, new | $165 | Data and AI |
| 17 | Azure AI Cloud Developer Associate | AI-200 | Associate, new | $165 | Data and AI |
| 18 | Azure AI App and Agent Developer Associate | AI-103 | Associate, new | $165 | Data and AI |
| 19 | Security Operations Analyst Associate | SC-200 | Associate | $165 | Security and Identity |
| 20 | Identity and Access Administrator Associate | SC-300 | Associate | $165 | Security and Identity |
| 21 | Information Security Administrator Associate | SC-401 | Associate, new | $165 | Security and Identity |
| 22 | Cybersecurity Architect Expert | SC-100 | Expert | $165 | Security and Identity |
| 23 | Endpoint Administrator Associate | MD-102 | Associate | $165 | Modern Work |
| 24 | Teams Administrator Associate | MS-700 | Associate | $165 | Modern Work |
| 25 | Microsoft 365 Administrator Expert | MS-102 | Expert | $165 | Modern Work |
| 26 | Power Platform Functional Consultant Associate | PL-200 | Associate | $165 | Power Platform |
| 27 | Power BI Data Analyst Associate | PL-300 | Associate | $165 | Power Platform |
| 28 | Power Platform Developer Associate | PL-400 | Associate | $165 | Power Platform |
| 29 | Copilot AI Business Practitioner | AB-730 | Associate | $99 | Copilot and Dynamics 365 |
| 30 | Dynamics 365 Business Central Functional Consultant Associate | MB-800 | Associate | $165 | Copilot and Dynamics 365 |
This list is curated from Microsoft’s full catalog of more than 100 active certifications, selected for 2026 career relevance across every major track rather than raw exam count. Most Microsoft role-based exams run 100 to 150 minutes with 40 to 60 questions, are scored on a scale of 100 to 1000, and require a 700 to pass. Fundamentals exams run shorter, typically 45 to 60 minutes. Associate and Expert certifications expire after 1 year and renew for free through an online Microsoft Learn assessment. Fundamentals certifications never expire. For the Azure-specific subset of this list with retirement dates and replacement mapping, see our Azure Certification Path guide.
The Six Fundamentals Certifications
Every track in the Microsoft ecosystem has its own $99 entry point. None of these six require prerequisites, none expire, and all six are appropriate starting points for candidates with less than 2 years of relevant experience.
| Certification | Exam Code | Best For |
| Azure Fundamentals | AZ-900 | Anyone entering cloud computing |
| Azure AI Fundamentals | AI-901 | Anyone entering AI or machine learning roles |
| Azure Data Fundamentals | DP-900 | Anyone entering data engineering or analytics |
| Security, Compliance, and Identity Fundamentals | SC-900 | Anyone entering security or compliance roles |
| Power Platform Fundamentals | PL-900 | Anyone entering low-code development |
| Copilot and Agent Administration Fundamentals | AB-900 | Microsoft 365 admins and Copilot rollout leads |
AZ-900: Azure Fundamentals
AZ-900 covers core cloud concepts, Azure’s main service categories, pricing and support models, and the fundamentals of security, privacy, and compliance in the cloud. It assumes no technical background and is the most commonly recommended first certification for anyone considering a career in cloud computing, IT sales, or technical project management. The exam is entirely conceptual, so it will not prepare you to configure Azure resources, but it builds the vocabulary that makes AZ-104 and every subsequent Azure exam easier to study for. Most candidates with zero cloud background complete preparation in 2 to 4 weeks.
AI-901: Azure AI Fundamentals
AI-901 replaced the previous AI-900 exam and covers AI workload types, machine learning principles, computer vision, natural language processing, document intelligence, and generative AI concepts as implemented on Azure. It is non-technical and does not require coding knowledge, making it accessible to business analysts, product managers, and career changers who want to understand AI capabilities before committing to a technical AI-200 or AI-103 track. Given how central generative AI has become to hiring conversations in 2026, this is one of the highest-momentum Fundamentals certifications to hold regardless of your eventual specialization.
DP-900: Azure Data Fundamentals
DP-900 introduces relational and non-relational data concepts, core data workloads, and the Azure data services that support them, including Azure SQL, Cosmos DB, and Synapse Analytics. It is the standard entry point for anyone targeting a data engineering, data analytics, or database administration career, and it directly feeds into DP-600, DP-700, DP-300, and DP-750 at the Associate level. Candidates with any SQL or spreadsheet background typically move through this exam faster than candidates with no data experience at all.
SC-900: Security, Compliance, and Identity Fundamentals
SC-900 covers the shared concepts across Microsoft Entra, Microsoft Purview, Microsoft Defender, and Microsoft’s broader compliance ecosystem. It does not go deep into any single product but gives candidates enough working vocabulary to decide which specialized security track, operations, identity, information protection, or architecture, fits their interests. Because it is required knowledge underlying SC-200, SC-300, SC-401, and eventually SC-100, most security career roadmaps treat SC-900 as close to mandatory even though Microsoft does not formally require it.
PL-900: Power Platform Fundamentals
PL-900 covers the business value and core capabilities of Power Apps, Power Automate, Power BI, and Power Virtual Agents, along with how they integrate with Dynamics 365 and Microsoft 365. It is aimed at business users, analysts, and citizen developers as much as IT professionals, and it is frequently the very first Microsoft certification for people coming from a business operations or finance background rather than a technical one. PL-900 leads directly into PL-200, PL-300, and PL-400 depending on which Power Platform specialty a candidate wants to pursue.
AB-900: Copilot and Agent Administration Fundamentals
AB-900 replaced the retired MS-900 Microsoft 365 Fundamentals exam and expanded its scope to include Copilot administration and Microsoft Purview data governance alongside the original Microsoft 365 service fundamentals. It is the required conceptual foundation for IT administrators managing Copilot rollouts, licensing, and adoption across an organization. Given how fast enterprise Copilot deployment is moving in 2026, AB-900 has quickly become one of the most requested Fundamentals certifications in Microsoft 365 admin job postings.
Track 1: Cloud Infrastructure
| Stage | Certification | Target Role |
| Fundamentals | AZ-900 | Anyone entering cloud computing |
| Associate | AZ-104 | Azure Administrator, Cloud Engineer |
| Associate, specialist | AZ-700 | Network Engineer |
| Associate, specialist | SC-500, replacing AZ-500 after August 31, 2026 | Cloud Security Engineer |
| Expert, requires AZ-104 | AZ-305 | Solutions Architect, Cloud Architect |
| Expert, requires AZ-104 or prior AZ-204 | AZ-400 | DevOps Engineer |
AZ-104: Azure Administrator Associate
AZ-104 validates the hands-on ability to manage Azure identities, governance, storage, compute, virtual networking, and monitoring in production environments. The exam runs approximately 100 to 120 minutes with 40 to 60 questions mixing multiple choice, drag and drop, and scenario-based case studies, and requires a scaled score of 700 out of 1000 to pass. It costs $165 and has no mandatory prerequisites, though candidates with no prior cloud exposure benefit from AZ-900 first. AZ-104 is the single most in-demand Azure credential in job postings and is also the prerequisite for both AZ-305 and AZ-400, making it the pivot point of the entire Cloud Infrastructure track. Certified Azure Administrators average $88,000 to $135,000 in the United States.
AZ-700: Azure Network Engineer Associate
AZ-700 validates the design and implementation of Azure networking solutions, including virtual networks, hybrid connectivity through ExpressRoute and VPN gateways, load balancing, private access to Azure services, and network security. It targets network engineers who are moving existing on-premises networking expertise into cloud environments rather than complete beginners. AZ-700 pairs naturally with AZ-305 for architects who want to specialize specifically in networking design, and it is one of the strongest differentiators for candidates competing for senior cloud infrastructure roles where hybrid connectivity is a core requirement.
AZ-500: Azure Security Engineer Associate
AZ-500 has been the standard Associate-level credential for implementing security controls across Azure identity, platform protection, security operations, and data and application security. It retires on August 31, 2026 and is being replaced by SC-500, which extends the same scope to cover AI system security alongside traditional infrastructure protection. If your exam date falls before the retirement window, AZ-500 remains a fully valid and recognized credential, and current holders do not need to do anything to keep it active. For candidates just starting the cloud security track, targeting SC-500 directly is now the better long-term choice. See our AZ-500 vs SC-500 transition guide for the complete comparison.
SC-500: Cloud and AI Security Engineer Associate
SC-500 is Microsoft’s newest cloud security credential, built to replace AZ-500 while adding coverage for securing AI workloads, Copilot deployments, and AI Foundry environments alongside traditional Azure infrastructure security. It is currently rolling out through 2026 as Microsoft phases out AZ-500, and it reflects a broader shift across the entire Microsoft security catalog toward treating AI system security as a core, not optional, skill. Professionals who hold AZ-500 already have a strong head start on SC-500’s overlapping domains, but the exam introduces enough new AI-specific content that dedicated preparation is still necessary.
AZ-305: Azure Solutions Architect Expert
AZ-305 validates the ability to design identity, governance, data storage, business continuity, and infrastructure solutions at an enterprise architecture level, requiring candidates to hold an active AZ-104 before the Expert certification is awarded. The exam is scenario-heavy, presenting complex business requirements and asking candidates to select and justify the correct Azure services rather than testing simple recall. AZ-305 is one of the two highest-paying credentials in the entire Microsoft catalog, with Solutions Architects averaging $140,000 to $185,000 in the United States, and it is frequently listed as a required or strongly preferred credential for principal and staff-level cloud roles.
AZ-400: DevOps Engineer Expert
AZ-400 validates the ability to design and implement DevOps practices on Azure, covering continuous integration and delivery pipelines, infrastructure as code, dependency and artifact management, security integration into the development lifecycle, and monitoring and feedback loops. It requires an active AZ-104 as its prerequisite, since AZ-204 (the previous alternative prerequisite) has retired. AZ-400 is the credential that most directly separates general cloud administrators from engineers who own the full software delivery pipeline, and DevOps Engineers holding it average $120,000 to $160,000 in the United States.
Track 2: Data and AI
| Stage | Certification | Target Role |
| Fundamentals | DP-900 | Anyone entering data or AI roles |
| Associate | DP-600 | Fabric Analytics Engineer, Power BI specialist |
| Associate | DP-700 | Fabric Data Engineer |
| Associate | DP-300 | Database Administrator |
| Associate, replaces DP-100 | DP-750 | Data Scientist, ML Engineer |
| Associate, replaces AZ-204 | AI-200 | AI Cloud Developer |
| Associate, replaces AI-102 | AI-103 | AI App and Agent Developer |
DP-600: Fabric Analytics Engineer Associate
DP-600 validates the ability to design, build, and manage analytics solutions using Microsoft Fabric, including Lakehouse architecture, Power BI semantic models, data transformation using Dataflows and notebooks, and governance across a Fabric workspace. It targets analytics engineers and experienced Power BI professionals who are expanding into the full Fabric platform rather than staying within Power BI alone. As enterprises consolidate their analytics stack onto Fabric, DP-600 has become one of the fastest-growing certifications in the Data and AI track. See our DP-600 vs DP-700 comparison if you are deciding between the analytics and engineering sides of Fabric.
DP-700: Fabric Data Engineer Associate
DP-700 validates the ability to implement and manage data engineering solutions using Microsoft Fabric, covering data ingestion, transformation, and the orchestration of pipelines feeding Lakehouse and Warehouse items within Fabric. Unlike DP-600, which is analytics and reporting focused, DP-700 is built for engineers who build and operate the data pipelines themselves. Candidates coming from a traditional Azure Data Factory or Synapse background typically find DP-700 the more natural fit, while candidates coming from a Power BI or reporting background typically find DP-600 closer to their existing skill set.
DP-300: Azure Database Administrator Associate
DP-300 validates the ability to plan, implement, and maintain both on-premises and Azure-hosted relational database solutions, primarily focused on Azure SQL Database, Azure SQL Managed Instance, and SQL Server on Azure VMs. It covers high availability, disaster recovery, performance monitoring and tuning, and security configuration for database workloads specifically. DP-300 remains one of the more stable, unchanged certifications in the Data track and continues to be widely requested for hybrid database administration roles where organizations run both on-premises SQL Server and Azure-hosted databases side by side.
DP-750: Azure Databricks Data Engineer Associate
DP-750 replaced the retired DP-100 Azure Data Scientist Associate exam and shifts the certification’s focus from classical machine learning model training toward Databricks-based data engineering and MLOps at scale. It reflects Databricks’ emergence as the dominant enterprise platform for large-scale data and AI workloads, and validates skills in building and orchestrating Databricks pipelines, managing Delta Lake tables, and supporting production machine learning workflows. Candidates who previously would have targeted DP-100 should now plan directly for DP-750 instead, since DP-100 stopped being offered after June 30, 2026.
AI-200: Azure AI Cloud Developer Associate
AI-200 replaced the retired AZ-204 Azure Developer Associate exam and represents Microsoft’s decision to make AI-integrated development the new baseline expectation for Azure developers rather than a specialization layered on top of traditional cloud app development. It covers building applications with Azure OpenAI Service, AI Foundry, retrieval-augmented generation patterns, and integrating generative AI capabilities into standard Azure-hosted applications. Developers who previously held or were studying for AZ-204 should treat AI-200 as their direct successor, and the shift signals that generative AI development is no longer treated as optional knowledge for Azure application developers.
AI-103: Azure AI App and Agent Developer Associate
AI-103 replaced the retired AI-102 Azure AI Engineer Associate exam and expands its scope from traditional Cognitive Services integration toward building and deploying AI agents using Azure AI Foundry and agentic application patterns. It covers responsible AI implementation, prompt engineering at a professional level, and orchestrating multi-step AI agent workflows rather than simply calling pre-built AI APIs. Alongside AI-200, AI-103 represents the leading edge of Microsoft’s AI certification strategy, and both credentials are seeing some of the fastest salary growth of any certification in the entire Microsoft catalog, with AI-focused developer roles averaging $130,000 to $175,000.
Track 3: Security and Identity
| Stage | Certification | Target Role |
| Fundamentals | SC-900 | Anyone entering security roles |
| Associate | SC-200 | Security Operations Analyst, SOC Tier 1 and 2 |
| Associate | SC-300 | Identity and Access Administrator |
| Associate, new | SC-401 | Information Security Administrator |
| Expert, requires an Associate-level security cert | SC-100 | Cybersecurity Architect |
SC-200: Security Operations Analyst Associate
SC-200 validates the ability to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Defender for Cloud. It is built for professionals working inside a security operations center who need to triage alerts, manage incidents, and use Kusto Query Language for threat hunting across Microsoft’s security stack. SC-200 is the most direct Microsoft equivalent to vendor-neutral SOC analyst certifications, and it pairs closely with SC-300 for professionals who want both operational detection skills and identity administration in their toolkit. See our SC-200 vs SC-300 comparison for a full breakdown of which fits your target role.
SC-300: Identity and Access Administrator Associate
SC-300 validates the ability to design, implement, and operate an organization’s identity and access management using Microsoft Entra ID, covering authentication, conditional access, identity governance, and hybrid identity scenarios connecting on-premises Active Directory to the cloud. It is one of the most consistently requested Associate-level security certifications because identity has become the primary security perimeter for most organizations, replacing the traditional network perimeter. SC-300 is also one of the four Associate-level certifications that can serve as the prerequisite for MS-102 at the Expert level.
SC-401: Information Security Administrator Associate
SC-401 is one of the newest additions to the Microsoft security catalog, validating the ability to implement information protection, data loss prevention, and insider risk management using Microsoft Purview. The exam runs approximately 100 minutes with around 65 questions, including case studies, and does not include performance-based lab simulations. It is designed for security administrators who work with governance, data classification, and information security policy rather than network-level threat response, and it is one of the four qualifying Associate certifications for MS-102. Information Security Administrators holding SC-401 average $95,000 to $140,000 in the United States, making it one of the strongest ROI certifications in the entire Microsoft security catalog relative to its $165 cost.
SC-100: Cybersecurity Architect Expert
SC-100 validates the ability to design comprehensive security strategies across Zero Trust architecture, identity, data, applications, and infrastructure, integrating recommendations across the entire Microsoft security portfolio rather than any single product. It requires an active Associate-level security certification, SC-200, SC-300, or SC-401 all qualify, before Microsoft awards the Expert credential. SC-100 consistently produces the highest salaries of any certification profiled in this guide, with Cybersecurity Architects averaging $150,000 to $200,000 or more in the United States, and it is frequently a stated requirement for CISO-track and principal security architect roles.
Track 4: Modern Work
| Stage | Certification | Target Role |
| Associate | MD-102 | Endpoint Administrator |
| Associate | MS-700 | Teams Administrator |
| Expert, requires MD-102, MS-700, SC-300, or SC-401 | MS-102 | Microsoft 365 Administrator |
MD-102: Endpoint Administrator Associate
MD-102 validates the ability to plan, deploy, manage, and secure devices and client applications across Windows and other endpoints in a corporate environment, including device compliance policies, endpoint security configuration, and application deployment through Microsoft Intune. It targets IT professionals moving from traditional desktop support or systems administration roles into modern, cloud-managed endpoint administration. MD-102 is one of four Associate certifications that qualifies a candidate to pursue MS-102, making it a common on-ramp into broader Microsoft 365 administration careers for professionals with a device management background.
MS-700: Teams Administrator Associate
MS-700 validates the ability to plan, deploy, configure, and manage Microsoft Teams for an organization, covering Teams governance, meeting and calling configuration, and integration with the broader Microsoft 365 collaboration stack. It is built for IT professionals responsible for the collaboration and communication experience specifically, distinct from general endpoint or identity administration. As hybrid and remote work arrangements remain standard in most enterprises through 2026, MS-700 continues to see steady demand, particularly at organizations running Teams Phone and Teams Rooms deployments at scale.
MS-102: Microsoft 365 Administrator Expert
MS-102 validates the ability to deploy, configure, secure, manage, and monitor the full Microsoft 365 environment, tying together identity, device management, security, and compliance under a single Expert-level credential. Unlike most Microsoft Expert exams, which require one specific Associate prerequisite, MS-102 accepts any one of four different Associate certifications, MD-102, MS-700, SC-300, or SC-401, giving candidates flexibility based on whether their background is in devices, collaboration, identity, or information security. This flexible prerequisite structure makes MS-102 one of the more accessible Expert-level credentials in the Microsoft catalog, and Microsoft 365 Administrators holding it average $85,000 to $125,000 in the United States.
Track 5: Power Platform
| Stage | Certification | Target Role |
| Fundamentals | PL-900 | Anyone entering low-code development |
| Associate | PL-200 | Power Platform Functional Consultant |
| Associate | PL-300 | Power BI Data Analyst |
| Associate | PL-400 | Power Platform Developer |
PL-200: Power Platform Functional Consultant Associate
PL-200 validates the ability to configure and customize Power Platform solutions, including Power Apps, Power Automate, and Dataverse, to meet business requirements, typically as part of broader Dynamics 365 or Microsoft 365 implementation projects. It targets functional consultants who work directly with business stakeholders to translate requirements into working Power Platform solutions rather than developers writing custom code. PL-200 pairs closely with Dynamics 365 certifications like MB-800, since most Power Platform Functional Consultant roles in practice involve extending an existing Dynamics 365 application.
PL-300: Power BI Data Analyst Associate
PL-300 validates the ability to prepare, model, visualize, and analyze data using Power BI, and to deploy and maintain Power BI assets across an organization, including workspace governance and dataset security. It is one of the most widely held Power Platform certifications because Power BI adoption is broad across nearly every industry and department, not limited to IT teams. PL-300 is also the natural stepping stone into DP-600 for analysts who want to expand from Power BI specifically into the full Microsoft Fabric analytics platform, and Power BI Data Analysts holding it average $90,000 to $130,000 in the United States.
PL-400: Power Platform Developer Associate
PL-400 validates the ability to design, develop, secure, and troubleshoot custom Power Platform solutions, including custom connectors, plugins, Power Apps component framework controls, and Dataverse extensions that go beyond what a functional consultant configures through low-code tools alone. It targets developers with existing coding experience who are extending their skills into the Power Platform ecosystem rather than citizen developers with no programming background. PL-400 commands one of the strongest salary premiums of any Associate-level Microsoft certification, with Power Platform Developers averaging $105,000 to $155,000 and senior specialists reporting figures considerably higher depending on region and Copilot integration experience.
Track 6: Copilot and Dynamics 365
| Stage | Certification | Target Role |
| Fundamentals | AB-900, replaced MS-900 | Microsoft 365 IT admins, Copilot rollout leads |
| Associate | AB-730 | Business users implementing Copilot |
| Associate | MB-800 | Dynamics 365 Business Central Consultant |
AB-730: Copilot AI Business Practitioner
AB-730 validates the practical ability to use Microsoft 365 Copilot effectively across everyday business tasks, including prompt construction, working with Copilot in Word, Excel, and Teams, and understanding the data governance boundaries Copilot operates within. It is priced at the Fundamentals-adjacent $99 rate despite being positioned at the Associate level, reflecting its role as a business-user credential rather than a deeply technical one. AB-730 is one of the fastest-growing certifications in Microsoft’s entire catalog as organizations push Copilot adoption at scale, and it pairs with the AB-731 Copilot AI Lead credential for professionals moving into change management and adoption leadership roles. See our AB-730 vs AB-731 comparison and the full Microsoft AB Series guide for the complete Copilot certification landscape.
MB-800: Dynamics 365 Business Central Functional Consultant Associate
MB-800 validates the ability to configure and implement Microsoft Dynamics 365 Business Central for small and mid-sized businesses, covering financial management, supply chain, and core ERP configuration within the platform. It has become the most accessible entry point into the Dynamics 365 certification family since Microsoft retired both MB-910 and MB-920, the previous Dynamics 365 Fundamentals exams, on December 31, 2025 with no direct beginner-level replacement announced yet. Candidates coming from a finance, accounting, or ERP implementation background typically progress through MB-800 faster than candidates with a pure IT background, and Dynamics 365 Functional Consultants holding it average $95,000 to $140,000, with technical consultants who pair it with Power Platform development skills often reaching $120,000 to $175,000.
2026 Retirements and Replacements
| Retiring Certification | Retirement Date | Replacement |
| AZ-204 Azure Developer Associate | June 30, 2026 | AI-200 Azure AI Cloud Developer |
| AI-102 Azure AI Engineer Associate | June 30, 2026 | AI-103 Azure AI App and Agent Developer |
| DP-100 Azure Data Scientist Associate | June 30, 2026 | DP-750 Azure Databricks Data Engineer |
| AI-900 Azure AI Fundamentals | June 30, 2026 | AI-901 Azure AI Fundamentals, updated |
| MS-900 Microsoft 365 Fundamentals | March 31, 2026 | AB-900 Copilot and Agent Administration Fundamentals |
| AZ-500 Azure Security Engineer Associate | August 31, 2026 | SC-500 Cloud and AI Security Engineer |
| MB-910 and MB-920 Dynamics 365 Fundamentals | December 31, 2025 | No direct replacement announced yet |
Any certification roadmap published before mid-2026 that does not reflect this table is sending candidates toward exams that no longer exist or are about to disappear. Full details on every affected exam are in our Microsoft Certifications Retiring 2026 guide.
Career Paths and Salary by Track
| Career Path | Recommended Certification Sequence | Typical US Salary Range |
| Cloud Administrator | AZ-900, optional, then AZ-104 | $88,000 to $135,000 |
| Solutions Architect | AZ-104 then AZ-305 | $140,000 to $185,000 |
| Cloud Security Engineer | SC-900 then SC-500 | $125,000 to $165,000 |
| DevOps Engineer | AZ-104 then AZ-400 | $120,000 to $160,000 |
| Data or AI Engineer | DP-900 then DP-700 or DP-750 | $120,000 to $175,000 |
| AI App Developer | AI-901 then AI-200 or AI-103 | $130,000 to $175,000 |
| Security Operations Analyst | SC-900 then SC-200 | $95,000 to $135,000 |
| Cybersecurity Architect | SC-300 or SC-401 then SC-100 | $150,000 to $200,000 or more |
| Microsoft 365 Administrator | MD-102 or MS-700 then MS-102 | $85,000 to $125,000 |
| Power Platform Developer | PL-900 then PL-400 | $105,000 to $155,000 |
| Power BI Data Analyst | PL-900 then PL-300 | $90,000 to $130,000 |
| Dynamics 365 Functional Consultant | PL-900 then MB-800 | $95,000 to $140,000 |
| Dynamics 365 Technical Consultant | MB-800 plus Power Platform developer skills | $120,000 to $175,000 |
Cloud security and cybersecurity architecture consistently produce the highest salary ceilings across the entire Microsoft ecosystem, followed closely by AI-focused developer roles as enterprise Copilot and agentic AI deployments accelerate hiring in that space through 2026.
How to Choose Your Starting Track
| Your Background | Start Here | Why |
| No IT experience | AZ-900 or SC-900 | Broadest foundational value, no prerequisites |
| IT support or helpdesk | MD-102 | Directly builds on existing device management work |
| Networking background | AZ-104 then AZ-700 | Cloud networking is the fastest-growing networking specialty |
| Developer background | AI-200 or PL-400 | Both reward existing coding skills immediately |
| Data analyst background | PL-300 then DP-600 | Power BI skills transfer directly into Fabric |
| Compliance or legal background | SC-900 then SC-401 | Purview and information protection match existing skills |
| ERP or finance background | PL-900 then MB-800 | Dynamics 365 Business Central rewards financial process knowledge |
| Career switcher, no clear direction | AZ-900, SC-900, and PL-900 | All three cost $99 combined and reveal which track fits before committing to Associate-level study time |
FAQs
Do I need to pass all 30 of these certifications?
No. Almost no professional holds more than 3 to 5 Microsoft certifications at once. This list maps the full landscape so you can identify which single track and 2 to 3 certifications actually apply to your career goal.
Which Microsoft certification should a complete beginner start with?
AZ-900, SC-900, or PL-900, depending on whether your interest leans toward cloud infrastructure, security, or business applications. All three cost $99, have no prerequisites, and never expire.
How long does it take to complete a full track from Fundamentals to Expert?
Most candidates take 18 to 36 months to progress from a Fundamentals certification through an Associate certification to an Expert-level credential, assuming part-time study alongside a full-time job.
Do Microsoft role-based certifications expire?
Yes. Associate and Expert-level certifications expire after 1 year but renew for free through a short online assessment on Microsoft Learn. Fundamentals certifications never expire.
What replaced the retired MS-900 certification?
AB-900, Copilot and Agent Administration Fundamentals, replaced MS-900 on March 31, 2026, and adds Copilot administration and Microsoft Purview governance content on top of the original Microsoft 365 fundamentals.
Is it better to specialize in one track or spread across multiple?
Specializing in one track through Associate and Expert level produces stronger salary outcomes than holding several Fundamentals-only certifications across different tracks. Employers weight depth in a relevant track over breadth across unrelated ones.
Which Microsoft certification track has the highest salary ceiling?
Cybersecurity Architect Expert, SC-100, and Azure Solutions Architect Expert, AZ-305, consistently produce the highest salaries across the Microsoft ecosystem, both frequently exceeding $180,000 in senior roles.
Can I take an Expert-level exam without the prerequisite Associate certification?
For most Expert exams, no. AZ-305 requires an active AZ-104, and AZ-400 requires AZ-104 since AZ-204 has retired. MS-102 is the exception, accepting any one of four different Associate certifications.
What is the fastest path into a Microsoft AI career in 2026?
AI-901, Fundamentals, followed by AI-200 or AI-103, Associate, is the most direct path, since both new Associate certifications were built specifically around Azure AI Foundry and agentic AI development rather than legacy machine learning workflows.
Is Dynamics 365 certification worth pursuing without an ERP background?
It is possible but harder. Dynamics 365 Functional Consultant roles reward existing knowledge of finance, supply chain, or customer service processes, so candidates without that background typically take longer to reach exam readiness than candidates coming from Azure or Power Platform tracks.
