What happens if I let a Microsoft certificate expire?

That free assessment opens only within the final six months of a certificate's life. Miss that window and it closes: to hold the credential again you book and pay for the full proctored exam, in its current version, with its current objectives. This applies to every associate and expert certificate here. The Fundamentals certificates cannot expire, so the question never arises for AZ-900, AI-901, DP-900, PL-900 or SC-900.

Which Microsoft exam should I sit first?

AZ-900 if the destination is cloud work of any kind, including sales and project roles around it. SC-900 if your world is compliance, data protection or identity and you want one credential rather than a career track. PL-900 only if you already build things in Power Apps or Power Automate and want it recognised. MO-210 if the job is genuinely spreadsheets, since it is examined in Excel itself rather than on paper.

Do I need a Fundamentals certificate before an associate exam?

No. AZ-104, DP-700, PL-300, SC-200 and SC-300 have no required certification at all; Microsoft states an experience expectation instead, which nobody checks at the test centre. Only three exams here carry a hard prerequisite. AZ-305 requires AZ-104. AZ-400 requires AZ-104, or the retired AZ-204 if you already hold it. Four associate certificates open the door to MS-102, and SC-300 is one of them.

How many Microsoft certificates is it sensible to hold?

Two or three, plus whichever Fundamentals paper you started with. One associate that matches what you do every day, one expert credential if your track offers one and your employer cares, and nothing else. Beyond that the yearly renewal load grows faster than the credibility does, and a lapsed certificate on a profile reads worse than never having claimed it.

All certifications

Microsoft certifications

Microsoft runs two certification systems under one roof, and the difference between them decides how much work you are signing up for. The Fundamentals exams are a single sitting and then yours for good. The role-based associate and expert certificates lapse twelve months after you pass, and you keep them alive with a free, unproctored assessment you take at your own desk. Fourteen Microsoft exams are documented here, spread across Azure infrastructure, security and identity, data, Microsoft 365, Power Platform and Excel.

Exam delivery: Pearson VUE (test centre or online proctored); students through Certiport

Start with the honest question, which is not which exam but whether any of them. These papers test product behaviour rather than transferable theory, so a Microsoft certificate earns its fee when the platform in the objectives is the platform you actually touch at work. If your employer runs on AWS or Google Cloud, almost none of it carries over; read the objectives for the vocabulary and sit a different vendor's exam. If you write application code and your team is judged on what ships, skip the ladder altogether. An expert badge in DevOps proves very little that your own pipeline history does not. The people who get real value are administrators, analysts, identity and security staff, and career changers who need one legible signal on a CV that does not yet contain a relevant job title. That last group should book exactly one exam. AZ-900 is the Fundamentals paper worth paying for on its own merit: it hands you the vocabulary of a platform that dominates enterprise purchasing, it never expires, and it is the one non-technical colleagues recognise on sight. SC-900 earns its fee too, but only for compliance, sales and procurement people who will never sit a security associate exam. The other three do not. DP-900, AI-901 and PL-900 cover ground you will cover again, properly, at associate level. Work through their free learning paths, skip the booking, and put the fee towards DP-700 or PL-300 instead.

Pick one track, because these ladders barely cross

Track	Start here	Working level	Top rung on this site	Expiry
Azure infrastructure	AZ-900	AZ-104	AZ-305, AZ-400	AZ-900 never; the rest yearly
Security and identity	SC-900	SC-200, SC-300	None here	SC-900 never; associates yearly
Data and analytics	DP-900	DP-700	None here	DP-900 never; DP-700 yearly
Microsoft 365	SC-900	SC-300, one accepted prerequisite	MS-102	Yearly; MS-102 retires 30 November 2026
Power Platform	PL-900	PL-300	None here	PL-900 never; PL-300 yearly
Office skills	MO-210	MO-210 is the whole track	None here	Five years, tied to the app version

Free renewal is a reason to hold fewer certificates, not more

Now the part the exam pages state plainly and almost nobody thinks through. Every role-based certificate in the table above is valid for one year from the day you pass. Six months before it runs out, Microsoft opens a renewal assessment on Microsoft Learn: no proctor, no fee, taken whenever suits you, and you may sit it again if it goes badly. That really is generous. It is also precisely why collecting these is a bad plan. Each badge you hold becomes a chore that returns every twelve months every year you intend to keep it, and the assessments follow the current product rather than the exam you originally sat, so they get harder to pass cold as the platform moves underneath you. Hold two that match your daily work and each renewal costs you an afternoon. Hold six and some autumn you will quietly let four of them go. Letting one go is not a trivial thing either, because once the certificate has actually expired the renewal route closes and the only way back is the full proctored exam, booked and paid for a second time. So treat the one-year clock as a filter at the moment of purchase rather than a problem for later. Ask whether you will still be doing this particular job next September, and book only if the answer is yes. The Fundamentals certificates behave in the opposite way and never lapse at all, which is exactly what makes AZ-900 sensible for a career changer to own for years. MO-210 belongs to neither system: Microsoft lists a sixty-month renewal interval, and the credential is pinned to the Office version you were examined on.

Foundational

Associate

Expert

Choosing within Microsoft

Each verdict is written from the first exam's page; the reverse view, where one exists, is written from the other's.

AI-901 against DP-900: The data fundamentals paper, and arguably the more useful of the two for most non-technical readers, because every AI project fails on data long before it fails on models.
AI-901 against PL-300: A genuine associate-level step into analytics work rather than vocabulary. If you want something an employer reads as capability, go there instead.
AZ-900 against AZ-104: Where anyone technical should go instead. It is not gated behind this paper, it costs more, and it is the one an employer reads as evidence you can run something.
AZ-900 against SC-900: The same tier for security and compliance vocabulary. Worth holding alongside this only if compliance conversations are actually part of your work.
DP-900 against AI-901: The AI vocabulary paper at the same tier. This one is the better first purchase for most readers, because AI projects fail on data more reliably than they fail on models.
DP-900 against PL-300: The analytics associate sitting above this. What it certifies is that a report of yours can be depended upon, which is a different and more employable claim.
MO-210 against PL-300: The move upward for anybody whose ambition is data work rather than spreadsheet work. It is a different discipline, and the point at which a workbook has outgrown itself is exactly where it starts.
MO-210 against PL-900: The other certificate aimed at business users, covering breadth of tooling rather than depth in one application. That one proves you know what exists; this proves you can do something.
PL-900 against PL-300: A genuine associate certificate on the analytics side. Anyone needing a credential read as competence instead of acquaintance should sit that instead.
PL-900 against AZ-900: Broader and about the platform rather than the business applications on top of it. If you can justify only one fundamentals paper, that one covers more ground.
PL-900 against MO-210: The other certificate aimed squarely at business users, and practical rather than a matter of choosing between options. It proves you can do something; this proves you know what is available.
SC-900 against SC-200: The operations exam this one introduces. It certifies that you can hunt and respond rather than define, and it is the sensible next step for anyone technical.
SC-900 against AZ-900: The same tier for the platform rather than its security products. Where the budget stretches to a single foundational sitting, the platform paper reaches further.
AZ-104 against AZ-305: The architect certificate directly above, and it requires this one. Holding both means two annual renewals rather than one, which is worth knowing before you start the climb.
AZ-104 against AZ-900: Optional and not a prerequisite. Skip it if you are technical; the fundamentals paper adds nothing an employer will read once you hold this.
DP-700 against PL-300: The analytics certificate on the consumption side of the same platform. If you build the reports rather than the pipelines, that is your exam.
DP-700 against DP-900: One tier down and purely definitional; nothing gates this exam behind it, so anybody already engineering data elsewhere can pass straight over.
PL-300 against DP-900: Vocabulary rather than practice, and not a prerequisite. If you already produce reports, skip it and come here.
PL-300 against DP-700: The engineering side of the same platform. That builds the pipeline, this consumes it, and holding both describes a small-team analyst who does everything.
SC-200 against SC-900: The vocabulary tier below, and not required. Skip it if you already work in security; it introduces products rather than teaching you to use them.
SC-200 against SC-300: Identity rather than operations, and the natural pair for anyone whose incidents keep turning out to be account compromise, which is most of them.
SC-300 against SC-200: Operations rather than identity, and a natural pair. Most incidents an analyst investigates started as an account problem, so holding both covers a real workflow rather than two hobbies.
SC-300 against MS-102: Broader and retiring in November 2026. If identity is the part that interests you, this certificate is the one with a future.
AZ-305 against AZ-104: Required before this, and worth holding on its own merits. If you are unsure whether to climb, note that stopping here costs one annual renewal instead of two.
AZ-305 against AZ-400: The other Microsoft expert paper, reachable from the same prerequisite. It answers how software reaches production where this answers how the platform is shaped.
AZ-400 against AZ-305: The other expert paper from the same prerequisite. Architecture decides how the platform is shaped; this decides how software reaches it.
MS-102 against SC-300: Identity in far more depth, still current, and not facing retirement. If the identity half is what interests you, that is the safer certificate to invest in right now.
MS-102 against SC-200: The security operations counterpart, focused on detection and response rather than tenant administration. It overlaps with this paper's threat-protection section and goes much deeper.

Frequently asked

What happens if I let a Microsoft certificate expire?: That free assessment opens only within the final six months of a certificate's life. Miss that window and it closes: to hold the credential again you book and pay for the full proctored exam, in its current version, with its current objectives. This applies to every associate and expert certificate here. The Fundamentals certificates cannot expire, so the question never arises for AZ-900, AI-901, DP-900, PL-900 or SC-900.
Which Microsoft exam should I sit first?: AZ-900 if the destination is cloud work of any kind, including sales and project roles around it. SC-900 if your world is compliance, data protection or identity and you want one credential rather than a career track. PL-900 only if you already build things in Power Apps or Power Automate and want it recognised. MO-210 if the job is genuinely spreadsheets, since it is examined in Excel itself rather than on paper.
Do I need a Fundamentals certificate before an associate exam?: No. AZ-104, DP-700, PL-300, SC-200 and SC-300 have no required certification at all; Microsoft states an experience expectation instead, which nobody checks at the test centre. Only three exams here carry a hard prerequisite. AZ-305 requires AZ-104. AZ-400 requires AZ-104, or the retired AZ-204 if you already hold it. Four associate certificates open the door to MS-102, and SC-300 is one of them.
How many Microsoft certificates is it sensible to hold?: Two or three, plus whichever Fundamentals paper you started with. One associate that matches what you do every day, one expert credential if your track offers one and your employer cares, and nothing else. Beyond that the yearly renewal load grows faster than the credibility does, and a lapsed certificate on a profile reads worse than never having claimed it.

Official certification portal: learn.microsoft.com/en-us/credentials

Other vendors

Last reviewed 12 September 2026 · Getting Digital