Certifications a student can earn pre-graduation
A student can realistically earn a fundamentals certification before graduating: AZ-900 for cloud, SC-900 for security, AI-901 or AIF-C01 for AI, and Network+ N10-009 for networking. Associate and professional exams assume you have done the job, so they are the wrong target for most students. The right first exam depends on the field you are studying and on whether you can already read a short Python script.
Example profiles, not real people. The scenarios below are illustrative planning examples built from the official exam outline. They are not reviews or reports of anyone’s result.
The decision rule
Pick one fundamentals exam that matches the subject you are already studying, pass it, and only then decide whether a second one adds anything. Two or three focused credentials say more than a long list of exams from areas you have not worked in.
| Your programme or interest | First exam | What it asks of you |
|---|---|---|
| Computer science, IT or no clear direction | AZ-900 | Cloud concepts, Azure services, governance; four weeks at four to six hours a week |
| Security, compliance or risk | SC-900 | Concepts and Microsoft product names; no coding |
| Software or data with some Python | AI-901 | Python syntax and Foundry hands-on work |
| Anything AWS-leaning, or AI from a business angle | AIF-C01 | Conceptual AI and generative AI on AWS |
| IT with an eye on a security career | N10-009, then SY0-801 | Networking basics before the security baseline |
What makes these exams student-friendly
No prerequisites. AZ-900, SC-900, AI-901 and AIF-C01 list no required certification, although AI-901’s audience profile assumes Python (see below). Microsoft’s SC-900 audience profile names students explicitly.
A student booking route. AZ-900, SC-900 and AB-900 can be booked through Certiport for students and educators instead of Pearson VUE. The AZ-900 page also notes that passing may make you eligible for ACE college credit, according to Microsoft’s certification page; check with your own institution before relying on it.
No renewal. Microsoft fundamentals certifications do not expire, so a credential earned in a first year is still current at graduation. That differs from associate exams, which renew every 12 months. AIF-C01 is valid for three years.
Modest cost, set by country. Microsoft prices are set per country or region and shown at booking. AIF-C01 costs 100 USD on AWS’s page. For wider comparisons see certification costs.
Where AI-901 is not a beginner exam
AI-901 replaced AI-900 and its audience profile now assumes Python coding syntax and familiarity with REST APIs, SDKs and CLIs. Its two skill areas are AI concepts at 40 to 45 percent and implementing solutions with Microsoft Foundry at 55 to 60 percent. A student with no programming should add a week for Python basics or choose AZ-900 or AIF-C01 instead. The AZ-900 vs AI-901 guide and the AIF-C01 vs AI-901 comparison help with that choice.
Security+ is possible, but plan the basics
SY0-801 is 90 questions at most in 90 minutes with a passing score of 750 on a 100 to 900 scale. CompTIA aims it at security administrators with two years of experience. The site rates it hard for a student without IT work and recommends building networking and operating system basics first, for example with Network+. If you want to sit Security+, note the dates: CompTIA lists the V8 launch around November 17, 2026, while SY0-701 retires on June 11, 2027 in English. A student graduating in 2027 should check which version the booking page offers. See the CompTIA path.
Security+ renews through continuing education, 50 units and a $150 fee per three-year cycle, which is a cost to remember if the credential is earned early.
Realistic study time for a student
These are the site’s own figures:
- AZ-900: four to six hours a week for four weeks, with 5 to 6 weeks for a student with no IT background.
- SC-900: four to six hours a week for four weeks; six weeks for a student with no IT experience, using a trial tenant to click around.
- AI-901: five to seven hours a week for four weeks, plus a week for Python if you have never written any.
- AIF-C01: five to seven hours a week for four weeks, assuming some AWS familiarity.
A semester also carries coursework, so treat these as estimates for steady weeks, not exam periods. Book a date four to eight weeks ahead, or longer if the material is new to you, and work backwards, as the study method guide recommends.
Scenario: a student with no IT work who wants a security first step
This is an illustrative planning example. The student has no job experience in IT, has never opened an admin portal and wants to say something concrete about security on a CV.
Where the time goes: SC-900’s biggest area, Microsoft security solutions at 35 to 40 percent, then Entra at 25 to 30 percent. These are the areas that need a technical mental model. The trap is to read product names without learning which problem each solves, which turns similar Defender names into guesses.
A reasonable planning assumption is six weeks at four to six hours a week, 24 to 36 hours in total, as the SC-900 difficulty page suggests for a student without IT experience. Because the SC-900 audience profile expects some familiarity with Azure and Microsoft 365, the student could take AZ-900 first, adding the 5 to 6 weeks listed above. That order is optional, since neither exam is a prerequisite for the other. See SC-900 vs AZ-900.
Where to go next
- The Azure AI certification path shows how AI-901 leads to the associate exams.
- The Microsoft security path covers what follows SC-900.
- The security first-exam guide compares Security+, SC-900 and SC-200.
- Check the exam changes tracker before booking, since several outlines change in October 2026.