AZ-104 vs AZ-103: Microsoft Azure Administrator Associate Changes Explained
When Microsoft retired the AZ-103 exam in August 2020 and replaced it with AZ-104, many IT professionals found themselves navigating a significant transition in Azure certification requirements. The shift from AZ-103 to AZ-104 represented more than a simple version update. It reflected Microsoft’s evolving cloud platform and the changing responsibilities of Azure administrators in modern enterprise environments.
Understanding the differences between these two examinations becomes essential for anyone pursuing the Microsoft Certified Azure Administrator Associate credential. Whether you’re renewing an existing certification or entering the Azure ecosystem for the first time, recognizing what changed and why helps you prepare more effectively and align your skills with current industry demands.
The Foundation: What Was AZ-103?
The AZ-103 examination served as Microsoft’s benchmark for Azure administration competency from 2018 until its retirement in 2020. This exam tested candidates on fundamental Azure services, including virtual machine deployment, storage account configuration, virtual network implementation, and identity management through Azure Active Directory. The exam structure included approximately 40 to 60 questions delivered in various formats, with a passing score requirement of 700 out of 1000 points.
Candidates preparing for AZ-103 focused heavily on implementing and monitoring Azure infrastructure. The exam emphasized practical skills in managing subscriptions, analyzing resource utilization, and configuring resources through both the Azure portal and command-line interfaces. Security implementation formed another crucial component, covering network security groups, Azure Security Center, and role-based access control fundamentals.
The AZ-103 exam assumed candidates possessed a solid understanding of operating systems, networking, servers, and virtualization concepts. This prerequisite knowledge base ensured that test-takers could handle the responsibilities of managing cloud infrastructure at an enterprise level. Many candidates supplemented their hands-on experience with structured preparation resources from established certification providers to ensure comprehensive coverage of exam objectives.
Storage management represented a significant portion of the AZ-103 content. Candidates needed to demonstrate proficiency in creating and configuring storage accounts, implementing Azure files and blob storage, and managing data with tools like AzCopy and Azure Storage Explorer. These skills formed the backbone of data management strategies in Azure environments.
The Evolution: Introducing AZ-104
Microsoft launched the AZ-104 exam as the successor to AZ-103, incorporating substantial changes that reflected the maturation of Azure services and shifting administrative responsibilities. While maintaining the core focus on Azure administration, AZ-104 introduced updated content areas and adjusted the weightage of existing domains to match current industry requirements.
The AZ-104 exam structure maintains a similar format to its predecessor, with 40 to 60 questions requiring a passing score of 700 points. However, the distribution of content across domains underwent significant revision. The new exam places greater emphasis on governance, compliance, and security practices, acknowledging the increased importance of these areas in cloud administration.
One notable evolution involves the expansion of identity and access management topics. While AZ-103 covered Azure Active Directory basics, AZ-104 delves deeper into hybrid identity scenarios, conditional access policies, and advanced authentication methods. This shift reflects the reality that modern Azure administrators must navigate complex identity landscapes spanning on-premises and cloud environments.
The monitoring and backup sections received substantial updates in AZ-104. The exam now includes more comprehensive coverage of Azure Monitor, Log Analytics, and Application Insights. These additions recognize that proactive monitoring and observability have become critical skills for administrators managing production Azure workloads.
Key Domain Changes Between AZ-103 and AZ-104
Examining the specific domain changes reveals Microsoft’s strategic direction for the Azure Administrator role. The AZ-104 exam organizes content into five major domains, with each receiving a specific percentage allocation that guides candidates in prioritizing their study efforts.
The first major domain, Manage Azure Identities and Governance, accounts for 15 to 20 percent of the exam. This section expanded significantly from AZ-103, incorporating advanced Azure Active Directory features, management groups, Azure Policy implementation, and resource tagging strategies. The increased focus on governance reflects enterprise demands for better cost management, compliance tracking, and organizational resource hierarchy.
Implement and Manage Storage, representing 15 to 20 percent of the exam, retained much of its AZ-103 foundation while adding new elements. AZ-104 candidates must now demonstrate knowledge of Azure Files authentication methods, storage security features like encryption and advanced threat protection, and disaster recovery planning for storage resources. The integration of Azure Backup into this domain represents a logical consolidation of data protection responsibilities.
Deploy and Manage Azure Compute Resources, comprising 20 to 25 percent of the exam, underwent refinement rather than revolution. While virtual machine management remains central, AZ-104 places greater emphasis on automation through Azure Resource Manager templates, Azure Container Instances, and Azure Kubernetes Service basics. This evolution acknowledges the industry trend toward containerization and infrastructure as code.
Configure and Manage Virtual Networking, accounting for 25 to 30 percent of the exam, represents the largest single domain. This section absorbed content from multiple AZ-103 areas and expanded to include Azure DNS, virtual network peering, Azure Load Balancer, and Azure Application Gateway configurations. The networking domain’s prominence underscores the critical role network architecture plays in Azure environments. Professionals looking to strengthen their DevOps capabilities alongside administration might explore resources like Azure DevOps certification materials to understand the intersection of these disciplines.
Monitor and Back Up Azure Resources, representing 10 to 15 percent of the exam, emerged as a distinct domain in AZ-104. Previously scattered across various AZ-103 sections, Microsoft consolidated monitoring and backup topics to emphasize their importance. This domain covers Azure Monitor configuration, action groups and alerts, Log Analytics workspace management, and Azure Backup implementation across various resource types.
Security Enhancements in AZ-104
Security considerations received elevated attention in the transition from AZ-103 to AZ-104, reflecting the cybersecurity challenges organizations face in cloud environments. The new exam integrates security topics throughout multiple domains rather than treating security as an isolated subject.
Azure Active Directory security features expanded dramatically in AZ-104. Candidates must now understand conditional access policies in depth, including how to create location-based access rules, require multi-factor authentication for specific user groups, and implement device compliance requirements. These capabilities allow organizations to implement zero-trust security models effectively.
Network security topics in AZ-104 include more sophisticated scenarios than AZ-103 addressed. The exam tests knowledge of network security groups at both subnet and network interface levels, Azure Firewall implementation, DDoS protection plans, and service endpoints versus private endpoints. Understanding when to apply each security mechanism becomes crucial for designing secure Azure architectures. Those interested in specializing further in Azure security might consider exploring security-focused certification tracks as a natural progression.
The AZ-104 exam also incorporates Azure Policy more extensively as a governance and security tool. Candidates should understand how to create custom policy definitions, assign policies at various scopes, and use policy initiatives to enforce multiple related requirements simultaneously. This knowledge enables administrators to maintain consistent security and compliance postures across large Azure deployments.
Encryption requirements received enhanced coverage in AZ-104. The exam addresses encryption at rest for various services, encryption in transit using TLS, and Azure Key Vault integration for managing cryptographic keys and secrets. Understanding these encryption mechanisms helps administrators meet regulatory compliance requirements and protect sensitive data.
Networking Complexity in the New Exam
The networking domain’s expansion in AZ-104 reflects the increased sophistication of Azure network services and their central role in cloud architecture. Administrators must now possess deeper networking knowledge than AZ-103 required.
Virtual network peering became a more prominent topic in AZ-104, including both regional peering within the same Azure region and global peering across regions. Candidates must understand how to establish peering connections, configure routing between peered networks, and troubleshoot peering issues. The exam also covers virtual network peering’s relationship with network security groups and user-defined routes.
Azure DNS integration represents another area of expansion. AZ-104 candidates should understand how to create public and private DNS zones, add DNS records, and implement DNS-based traffic routing. Private DNS zones particularly gained importance as organizations increasingly use them to provide name resolution for resources within virtual networks without exposing DNS records publicly.
Load balancing technologies received more detailed coverage in AZ-104. The exam differentiates between Azure Load Balancer’s layer-4 capabilities and Azure Application Gateway’s layer-7 features. Candidates must know when to apply each technology based on application requirements, how to configure health probes, and how to implement session persistence when necessary. Those preparing for network-specific certifications might find value in exploring advanced networking certification resources to build upon these foundational concepts.
The introduction of Azure Bastion as a managed secure remote access solution appears in AZ-104 content. This service provides RDP and SSH access to virtual machines through the Azure portal without exposing management ports to the public internet. Understanding Azure Bastion’s deployment and configuration demonstrates modern approaches to secure remote administration.
Governance and Compliance Focus
Governance emerged as a major theme in AZ-104, reflecting enterprise needs for cost management, compliance enforcement, and organizational resource management. These topics received less emphasis in AZ-103 but now form a critical component of the Azure administrator’s responsibilities.
Management groups provide hierarchical organization above the subscription level, allowing administrators to apply policies, access controls, and budgets across multiple subscriptions simultaneously. AZ-104 candidates must understand how to create management group hierarchies, move subscriptions between management groups, and leverage inheritance for efficient governance.
Azure Policy implementation skills extend beyond basic usage in AZ-104. The exam covers policy effects like deny, audit, append, and modify, along with policy parameters that make definitions reusable across different contexts. Understanding how to create custom policy definitions using JSON and how to evaluate policy compliance reports demonstrates advanced governance capabilities.
Resource tagging strategies gained prominence in AZ-104 as organizations seek better cost allocation and resource categorization. Candidates should understand how to apply tags through various methods, including the Azure portal, PowerShell, Azure CLI, and Azure Policy enforcement. The exam also addresses tag inheritance behaviors and limitations.
Azure Blueprints appears in AZ-104 as a tool for deploying governed environments that meet organizational standards. Candidates must understand how blueprints differ from Resource Manager templates, how to create blueprint definitions with artifacts, and how to assign blueprints to subscriptions. This knowledge supports repeatable, compliant environment provisioning. Candidates seeking comprehensive guidance on exam preparation might benefit from detailed study strategies for the AZ-104 certification.
Monitoring and Observability Evolution
The consolidation and expansion of monitoring topics in AZ-104 acknowledges that effective observability has become essential for managing Azure environments. The exam tests practical skills in implementing comprehensive monitoring solutions.
Azure Monitor serves as the centralized platform for collecting, analyzing, and acting on telemetry from Azure resources and applications. AZ-104 candidates must understand the Azure Monitor data platform’s structure, including metrics and logs as distinct data types with different characteristics and query methods.
Log Analytics workspaces provide the foundation for collecting and analyzing log data. The exam covers workspace creation, data source configuration, and basic Kusto Query Language usage for extracting insights from logs. Candidates should understand how to query Activity Logs, resource logs, and custom log sources.
Action groups and alerts form the proactive response component of Azure Monitor. AZ-104 tests the ability to create metric alerts, log query alerts, and activity log alerts. Understanding action group configuration, including email notifications, SMS messages, webhook integrations, and automation runbook execution, enables administrators to respond automatically to infrastructure events.
Azure Backup integration represents a significant addition in AZ-104. The exam covers Recovery Services vault creation, backup policy configuration for various resource types, and backup monitoring and management. Candidates must understand how to perform backup and restore operations for virtual machines, SQL databases running on Azure VMs, and Azure file shares. Those developing broader study routines for Azure certifications might explore effective study methodologies for Microsoft exams.
Infrastructure as Code and Automation
Automation capabilities received expanded coverage in AZ-104, reflecting the industry’s movement toward infrastructure as code practices and the need for repeatable, scalable deployment methods.
Azure Resource Manager templates form the foundation of declarative infrastructure deployment in Azure. AZ-104 candidates must understand template structure, including parameters, variables, resources, and outputs sections. The exam tests the ability to deploy templates through various methods and troubleshoot common template deployment errors.
PowerShell and Azure CLI appear prominently throughout AZ-104. While AZ-103 included these tools, the new exam tests more sophisticated scripting scenarios and command chaining techniques. Candidates should be comfortable with both imperative commands for individual resource management and scripting approaches for batch operations.
Azure Cloud Shell receives explicit coverage in AZ-104 as a convenient administration environment. Understanding how to leverage Cloud Shell’s pre-configured tools, persistent storage, and choice between Bash and PowerShell environments demonstrates modern administrative practices.
The introduction of Azure Container Instances and basic Azure Kubernetes Service concepts in AZ-104 reflects containerization’s growing importance. While not requiring deep container expertise, the exam tests fundamental understanding of container deployment and management in Azure.
Cost Management and Optimization
Cost optimization emerged as a distinct competency area in AZ-104, acknowledging that administrators play a crucial role in controlling cloud expenditure while maintaining service quality.
Azure Cost Management and Billing tools provide visibility into resource spending patterns. AZ-104 candidates must understand how to analyze cost trends, create budgets with alert thresholds, and use cost analysis features to identify optimization opportunities.
Resource rightsizing recommendations help optimize spending on underutilized resources. The exam addresses how to identify oversized virtual machines, evaluate resize recommendations, and implement changes to match actual resource requirements with provisioned capacity.
Reserved instances and Azure Hybrid Benefit represent significant cost optimization strategies. Candidates should understand how reserved instances provide discounts for committed usage, how to evaluate reservation coverage, and how Azure Hybrid Benefit allows organizations to apply existing Windows Server and SQL Server licenses to Azure deployments.
Resource lifecycle management through automation helps prevent unnecessary spending. AZ-104 covers implementing auto-shutdown schedules for development and test virtual machines, using Azure Automation for scheduled resource operations, and leveraging tags for environment identification and automated policy application. Professionals interested in understanding how fundamental certifications support administrative roles might explore resources discussing the value of foundational Microsoft certifications.
Identity Management Transformation
Identity management underwent perhaps the most significant transformation between AZ-103 and AZ-104, expanding from basic Azure Active Directory operations to comprehensive identity and access management scenarios that reflect modern enterprise requirements.
Azure Active Directory Connect gained prominence in AZ-104 as the bridge between on-premises Active Directory environments and Azure AD. The exam now requires understanding of synchronization options, including password hash synchronization, pass-through authentication, and federation using Active Directory Federation Services. Candidates must know how to configure hybrid identity scenarios that maintain single sign-on capabilities while transitioning workloads to Azure.
Conditional access policies represent a major addition to AZ-104 content. These policies enable administrators to enforce access requirements based on conditions like user location, device compliance status, application sensitivity, and sign-in risk level. The exam tests the ability to design conditional access policies that balance security requirements with user productivity, implementing controls like requiring multi-factor authentication for administrative operations while allowing streamlined access for standard users from corporate devices.
Azure AD Privileged Identity Management appears in AZ-104 as a tool for implementing just-in-time administrative access. Candidates should understand how to configure eligible role assignments that users can activate when needed, approval workflows for sensitive role activations, and access reviews that periodically validate continued need for privileged access. This knowledge supports zero-standing-privilege architectures that minimize security risks from compromised credentials.
Self-service password reset emerged as a testable topic in AZ-104, acknowledging its role in reducing help desk workload while improving user experience. The exam covers authentication method configuration, registration requirements, and on-premises writeback capabilities that synchronize password changes back to Active Directory.
Device management integration with Azure AD expanded in AZ-104. Candidates must understand the differences between Azure AD registration, Azure AD join, and hybrid Azure AD join scenarios. The exam addresses how device identity integrates with conditional access policies and how Intune integration extends management capabilities to mobile devices. Professionals beginning their Azure journey might benefit from exploring foundational Azure certification paths before tackling administrator-level content.
Storage Architecture Advances
Storage topics evolved in AZ-104 to reflect new Azure Storage features and changing data management requirements. While AZ-103 covered storage fundamentals, the updated exam tests more sophisticated storage scenarios and integration patterns.
Azure Files authentication methods received expanded coverage in AZ-104. The exam now includes identity-based authentication for Azure Files using Azure AD Domain Services or on-premises Active Directory Domain Services integration. Understanding these authentication mechanisms enables administrators to implement file shares that maintain existing access control models while moving data to Azure.
Storage redundancy options grew more nuanced in AZ-104. Beyond basic locally redundant storage and geo-redundant storage concepts, the exam addresses zone-redundant storage for high availability within regions and geo-zone-redundant storage that combines regional and zonal redundancy. Candidates must understand when each redundancy option makes sense based on availability requirements and cost considerations.
Azure Storage security features expanded significantly. AZ-104 covers shared access signatures in detail, including service-level versus account-level permissions, stored access policies for modifying shared access signature parameters, and best practices for secure distribution. The exam also addresses storage account firewalls, virtual network service endpoints, and private endpoints for isolating storage traffic within Azure networks.
Lifecycle management policies appear in AZ-104 as a cost optimization tool for blob storage. Candidates should understand how to create rules that automatically transition blobs between access tiers based on age or move blobs to archive storage for long-term retention. These policies help organizations optimize storage costs while maintaining appropriate data retention.
Azure Backup for various workload types received more comprehensive coverage. The exam tests backup configuration for Azure file shares, SQL Server databases running on Azure virtual machines, and SAP HANA databases. Understanding workload-specific backup requirements and recovery procedures demonstrates readiness for production environment management. Those interested in expanding their data platform expertise might explore comprehensive guides for data science certifications as complementary skills.
Advanced Networking Concepts
Networking content in AZ-104 expanded substantially to cover sophisticated scenarios that enterprise Azure deployments commonly encounter. The increased emphasis reflects networking’s foundational role in cloud architecture.Hub-and-spoke network topology patterns appear in AZ-104 as a recommended approach for organizing Azure virtual networks. The exam tests understanding of how central hub networks provide shared services like firewall appliances and VPN gateways while spoke networks host workload-specific resources. Candidates should understand how to implement connectivity between hub and spokes using virtual network peering and how to route traffic appropriately.
Network security group flow logs emerged as a monitoring and security tool in AZ-104. These logs capture information about IP traffic flowing through network security groups, enabling administrators to analyze traffic patterns, detect anomalies, and troubleshoot connectivity issues. The exam covers flow log configuration, storage integration, and basic traffic analytics capabilities.Azure VPN Gateway configuration received more detailed coverage in AZ-104. The exam tests knowledge of site-to-site VPN setup for connecting on-premises networks to Azure, point-to-site VPN for individual user connections, and VPN Gateway SKU selection based on throughput and feature requirements. Understanding forced tunneling to route all internet traffic back through on-premises networks demonstrates hybrid networking competency.
ExpressRoute fundamentals appear in AZ-104 as an alternative to VPN connectivity. While not requiring deep ExpressRoute expertise, the exam tests basic understanding of ExpressRoute’s private connection model, connectivity providers, and use cases where ExpressRoute makes sense compared to VPN options. Those pursuing platform architecture specializations might explore Power Platform architecture certification resources to understand cross-platform integration scenarios.Azure Firewall represents a major addition to AZ-104 networking content. This managed network security service provides threat protection for virtual network resources through application rules, network rules, and threat intelligence integration. Candidates must understand how to configure Azure Firewall, create rule collections, and integrate firewall deployment into hub-and-spoke topologies.
Monitoring and Diagnostics Depth
Monitoring capabilities in AZ-104 extend well beyond the basic alert configuration that AZ-103 covered. The updated exam tests practical skills in implementing comprehensive observability solutions.Azure Monitor Metrics Explorer received explicit coverage as the tool for interactive metric analysis. AZ-104 candidates should understand how to create metric charts, apply filters and splits to analyze metric dimensions, and pin charts to Azure dashboards for persistent visibility. The exam tests knowledge of metric aggregation types like average, minimum, maximum, and sum.
Azure Monitor Logs and Log Analytics workspaces form the foundation for centralized logging. The exam covers connecting various data sources including Azure resources, on-premises servers through the Log Analytics agent, and custom applications through the Log Analytics API. Understanding workspace design considerations like regional placement, access control, and retention settings demonstrates production environment expertise.
Kusto Query Language fundamentals appear in AZ-104 as the mechanism for extracting insights from log data. While not requiring expert query skills, the exam tests basic query construction including table selection, filtering with where operators, projection with project operators, and aggregation operations. These queries enable administrators to investigate issues and analyze trends.
Application Insights integration received attention in AZ-104 as application performance monitoring extends beyond traditional infrastructure metrics. The exam covers enabling Application Insights for web applications, analyzing application performance data, and understanding how distributed tracing works across microservices architectures.
Diagnostic settings appear throughout AZ-104 as the mechanism for routing resource logs to various destinations. Candidates must understand how to configure diagnostic settings to send logs to Log Analytics workspaces for analysis, storage accounts for archival, or Event Hubs for streaming to external systems. This knowledge enables centralized log collection across Azure resources. Professionals interested in business intelligence integration might explore Power BI certification resources to understand data analysis workflows.
Backup and Disaster Recovery
Backup and disaster recovery capabilities expanded significantly in AZ-104, moving from basic virtual machine backup to comprehensive protection strategies across multiple workload types.
Recovery Services vault architecture forms the foundation for Azure Backup. AZ-104 candidates must understand how to create vaults, configure vault properties like storage replication type, and implement soft delete protection that prevents accidental backup deletion. The exam covers backup policies that define retention schedules and when backups occur automatically.
Azure Site Recovery appears in AZ-104 as a disaster recovery solution for replicating workloads between regions or from on-premises to Azure. The exam tests understanding of recovery plans that orchestrate failover of multiple virtual machines, replication policies that control recovery point objectives, and failback procedures for returning production workloads to primary locations after disaster recovery events.
Backup for specific workload types received detailed coverage. The exam addresses SQL Server backup on Azure virtual machines, including full backups, differential backups, and transaction log backups that enable point-in-time recovery. SAP HANA backup appears for organizations running this enterprise application on Azure.
Restore operations testing extends beyond simple virtual machine restoration. AZ-104 covers file-level recovery from virtual machine backups, database restoration to alternate servers, and cross-region restore capabilities that recover data in secondary regions. Understanding these restoration scenarios ensures administrators can meet recovery objectives.
Backup reporting and monitoring capabilities in Azure Backup enable administrators to verify protection coverage and backup success rates. The exam addresses backup reports, backup alerts, and integration with Azure Monitor for centralized visibility across multiple vaults.
Automation and DevOps Integration
Automation received elevated importance in AZ-104, reflecting the industry’s embrace of infrastructure as code and the need for repeatable, version-controlled deployment processes.
Azure Automation accounts provide runbook hosting and automation capabilities. The exam covers creating automation accounts, importing and authoring runbooks in PowerShell or Python, and scheduling runbook execution. Understanding automation credential assets, variable assets, and connection assets enables runbooks to access external systems securely.
Update Management through Azure Automation helps maintain virtual machine patch compliance. AZ-104 candidates must understand how to enable Update Management, schedule update deployments that install missing patches, and review update assessment results. The exam covers creating dynamic groups based on machine characteristics for targeted update deployments. Those seeking to specialize in development operations might benefit from comprehensive Azure DevOps preparation guides.
Change Tracking and Inventory capabilities integrated with Azure Automation appear in AZ-104. These features monitor configuration changes on virtual machines including software installations, service status changes, registry modifications, and file changes. Understanding how to enable tracking and analyze change data demonstrates operational maturity.
ARM template parameters and variables enable template reusability. The exam tests knowledge of parameter files for providing deployment-specific values, default parameter values, and variable usage for calculations or simplifying complex expressions. Understanding template dependencies ensures resources deploy in the correct order.
Template deployment modes received explicit coverage in AZ-104. Complete mode removes resources that exist in the resource group but aren’t defined in the template, while incremental mode leaves existing resources unchanged. Candidates must understand the implications of each mode and when to use them.
Platform Integration Capabilities
AZ-104 acknowledges that Azure administrators increasingly work in hybrid and multi-platform environments requiring integration knowledge beyond pure Azure administration.
Hybrid identity scenarios with Azure AD Connect require understanding synchronization scope, attribute filtering, and password policies. The exam tests knowledge of configuring synchronization rules, enabling password writeback for self-service password reset, and troubleshooting common synchronization issues.
Azure Arc appears in AZ-104 as Microsoft’s solution for managing resources outside Azure. The exam covers onboarding servers to Azure Arc, applying Azure Policy to Arc-enabled servers, and leveraging Azure Monitor on hybrid machines. This knowledge demonstrates readiness for managing heterogeneous infrastructure.
Hybrid networking beyond basic VPN connectivity appears in AZ-104. The exam addresses virtual WAN for simplified branch connectivity, bandwidth considerations for hybrid connections, and network performance monitoring to detect issues affecting hybrid applications.
Integration with Microsoft 365 services shows how Azure AD underpins authentication across Microsoft cloud platforms. Understanding how Azure AD provides identity for Exchange Online, SharePoint Online, and Teams demonstrates the broader identity context administrators navigate. Professionals developing platform development skills might explore Power Platform developer certification paths as complementary expertise.
Security Operations and Compliance
Security and compliance topics permeate AZ-104, reflecting their critical importance in cloud operations. The exam tests practical security implementation rather than theoretical security knowledge.
Azure Security Center standard tier capabilities appear in AZ-104 for threat detection and security recommendations. Candidates must understand how to interpret secure score, remediate security recommendations, and investigate security alerts. The exam covers just-in-time virtual machine access that reduces exposure to network attacks.
Compliance frameworks and Azure Policy integration demonstrate how organizations maintain regulatory compliance. AZ-104 tests understanding of built-in policy initiatives aligned with standards like HIPAA, PCI DSS, and ISO 27001. Candidates should know how to assign compliance initiatives, review compliance reports, and remediate non-compliant resources.
Network security best practices appear throughout networking topics. The exam tests layered security approaches using network security groups, Azure Firewall, and application security groups to create defense-in-depth architectures. Understanding traffic flow analysis and security rule evaluation order helps troubleshoot connectivity while maintaining security. Security specialists might find value in exploring security operations analyst certification resources for deeper security expertise.
Data encryption requirements extend across multiple services. AZ-104 covers encryption at rest configuration for various resource types, encryption in transit enforcement, and Azure Key Vault integration for managing encryption keys and secrets. The exam tests understanding of customer-managed keys versus Microsoft-managed keys.
Practical Exam Preparation Differences
Preparing for AZ-104 requires different approaches compared to AZ-103 preparation due to the exam’s expanded scope and changed emphasis. Candidates benefit from understanding these preparation differences to allocate study time effectively.
Hands-on experience requirements increased for AZ-104. While AZ-103 could potentially be passed with primarily theoretical knowledge reinforced by practice tests, AZ-104 demands practical experience with Azure services. The exam includes scenario-based questions that test troubleshooting ability and decision-making in realistic situations where multiple correct approaches exist but one represents the best practice.
Lab environment access became more critical for AZ-104 preparation. Candidates should maintain an Azure subscription for practice, even if using free tier services or spending minimal amounts monthly. The exam tests skills like creating network peering connections, configuring diagnostic settings, and implementing backup policies that require actual service interaction rather than memorization.
Documentation familiarity represents another preparation difference. AZ-104 questions occasionally require recalling specific Azure service limits, available regions for particular services, or configuration parameters that documentation references clarify better than memorization. Understanding how to navigate Microsoft Learn resources and Azure documentation efficiently helps during preparation and in professional practice.
Time management during the exam requires adjustment for AZ-104. Case study questions that present a scenario and ask multiple questions about that scenario consume more time than standalone questions. Candidates should practice identifying relevant information quickly from scenarios and discarding details that don’t affect question answers. Those seeking structured preparation approaches might benefit from exploring comprehensive certification preparation resources that outline effective study methodologies.
Learning path differences between AZ-103 and AZ-104 preparation reflect content changes. Microsoft Learn modules for AZ-104 include additional sections on governance, hybrid identity, and advanced networking that didn’t exist for AZ-103. Following official learning paths ensures coverage of new topics while reinforcing fundamentals that carried forward.
Career Implications of Certification Changes
The evolution from AZ-103 to AZ-104 certification reflects changing employer expectations for Azure administrators. Understanding these shifts helps professionals align skill development with market demands.
Job role expansion beyond traditional infrastructure administration appears in AZ-104’s content scope. The exam’s inclusion of governance, cost management, and compliance topics signals that Azure administrators increasingly own responsibilities previously held by separate teams. This consolidation creates opportunities for administrators to expand their influence but requires broader knowledge than infrastructure-focused roles demanded historically.
Security responsibilities integration into the administrator role represents another significant trend. While dedicated security specialists handle advanced threat detection and security architecture, AZ-104 content indicates administrators must implement security controls, configure identity protection, and maintain compliance posture. This shift reflects security’s elevation from afterthought to fundamental design consideration.
Automation expectations increased dramatically between AZ-103 and AZ-104. The expanded automation content signals that manual console-based administration no longer scales adequately for cloud environments. Professionals who develop scripting capabilities alongside Azure service knowledge position themselves advantageously for advancement opportunities.
Hybrid cloud competency emerged as a differentiator in AZ-104 content. The exam’s inclusion of Azure Arc, hybrid identity, and hybrid networking topics acknowledges that most enterprise environments will remain hybrid for years. Administrators who understand both on-premises technologies and Azure services deliver greater value than those specializing exclusively in cloud operations.
Preparation Resource Evolution
Resources available for AZ-104 preparation differ significantly from AZ-103 options due to the exam’s relative newness and Microsoft’s evolving training offerings.Microsoft Learn emerged as the primary free training resource for AZ-104. This platform provides learning paths specifically aligned with exam objectives, including hands-on exercises in sandbox environments that don’t require Azure subscriptions. The interactive learning approach differs from traditional documentation study and helps concepts stick through practice.
Official Microsoft training courses for AZ-104 incorporate lessons learned from AZ-103 training feedback. The courses include more scenario-based exercises, troubleshooting labs, and design activities that mirror exam question styles. Instructor-led training options provide interaction opportunities with experienced Azure professionals. Candidates seeking alternative approaches might explore proven study techniques for Microsoft data analyst exams that translate across certifications.Practice test quality improved for AZ-104 compared to early AZ-103 practice exams. Reputable providers now offer questions that better match actual exam difficulty and format. However, candidates should recognize that practice tests supplement rather than replace hands-on experience and official learning materials.
Community resources including blogs, video courses, and study groups matured around AZ-104. The larger Azure community shares preparation tips, lab exercises, and clarifications on confusing topics. Engaging with community resources provides diverse perspectives on challenging concepts.Documentation updates for new Azure features appear continuously between exam revisions. While AZ-104 objectives remain relatively stable, Azure services receive monthly updates. Candidates should verify that study materials reflect current service capabilities rather than outdated information.
Certification Path Integration
AZ-104 exists within Microsoft’s broader certification framework, and understanding its relationships to other certifications helps professionals plan career development paths.
Foundation certification considerations affect some candidates’ approaches to AZ-104. While Microsoft doesn’t require the Azure Fundamentals AZ-900 certification before attempting AZ-104, candidates without prior Azure experience often benefit from starting with fundamentals. The foundational certification provides vocabulary and basic concepts that AZ-104 assumes as prerequisite knowledge.
Specialization certifications build upon AZ-104 skills. Microsoft offers expert-level certifications for Azure solutions architects, security engineers, and DevOps engineers that require either AZ-104 or equivalent administrator knowledge. The administrator certification serves as a stepping stone toward specialization rather than an endpoint.
Multi-cloud career paths sometimes include AZ-104 alongside AWS or Google Cloud certifications. Organizations increasingly adopt multi-cloud strategies, and professionals who understand multiple platforms deliver unique value. The administrator-level certification in Azure provides comparable depth to AWS Certified SysOps Administrator or Google Professional Cloud Architect certifications.
Renewal requirements changed with AZ-104’s introduction. Microsoft now requires annual renewal through Microsoft Learn assessments rather than full exam retakes. This approach keeps certified professionals current on new features while reducing the burden of recertification.
Integration with Microsoft 365 certifications reflects converging administration responsibilities. Organizations often expect Azure administrators to understand Microsoft 365 administration basics and vice versa. The shared Azure AD foundation between platforms makes combined expertise increasingly valuable. Those exploring business applications might investigate Dynamics 365 certification pathways as complementary knowledge.
Technical Skills Development Focus
Beyond specific exam objectives, AZ-104 signals technical skills that benefit long-term career development in cloud administration.
Infrastructure as code capabilities receive implicit emphasis through AZ-104’s automation content. While the exam tests specific tools like ARM templates, the underlying principle of managing infrastructure through version-controlled code applies across platforms and tools. Developing this mindset prepares administrators for emerging technologies like Terraform and Bicep.
Observability thinking extends beyond traditional monitoring. AZ-104’s comprehensive monitoring coverage encourages thinking about telemetry collection, log correlation, and proactive issue detection rather than reactive troubleshooting. This approach scales better as environments grow in complexity.
Security-first design principles appear throughout AZ-104 content. Rather than treating security as a separate consideration, the exam integrates security into every domain. This security-conscious approach to every architectural decision represents best practice for cloud environments where traditional network perimeters don’t exist.
Troubleshooting methodology receives implicit testing through scenario questions. AZ-104 doesn’t directly test troubleshooting as a skill, but scenario questions require systematic problem analysis, hypothesis formation, and solution validation. Developing structured troubleshooting approaches benefits professional practice beyond certification.
Documentation and knowledge sharing capabilities matter increasingly as environments grow complex. While AZ-104 doesn’t test documentation directly, professional administrators recognize that capturing configurations, procedures, and architectural decisions enables team scaling and knowledge transfer. Those pursuing training opportunities might explore established Microsoft training providers for intensive learning experiences.
Organizational Adoption Patterns
Understanding how organizations implement Azure affects interpretation of AZ-104’s content priorities and preparation approaches.
Small to medium business adoption typically starts with infrastructure as a service migrations. These organizations lift and shift virtual machines to Azure initially, making compute and storage management critically important. AZ-104’s strong emphasis on virtual machines and storage reflects this common entry point.
Enterprise adoption follows more complex patterns involving hybrid connectivity, governance frameworks, and security compliance. Large organizations maintain on-premises infrastructure while gradually migrating workloads, requiring administrators who understand both environments. AZ-104’s hybrid content addresses enterprise needs.
Industry-specific requirements influence which AZ-104 topics matter most in particular contexts. Healthcare organizations emphasize compliance and data protection, financial services focus on security and disaster recovery, while retail organizations prioritize availability and performance. Understanding industry context helps candidates relate exam content to practical applications.
Digital transformation initiatives drive demand for administrators who understand application modernization alongside infrastructure management. AZ-104’s inclusion of container basics and platform services signals that administrators increasingly support development teams adopting cloud-native architectures.
Geographic considerations affect Azure feature availability and compliance requirements. Not all Azure services launch simultaneously across regions, and data residency requirements vary by jurisdiction. AZ-104 candidates benefit from understanding how geography affects Azure service selection. Global training resources like international certification training providers offer regionally relevant perspectives.
Exam Logistics and Scheduling
Practical considerations around taking the AZ-104 exam differ from AZ-103 in ways that affect candidate planning.
Testing center availability expanded for AZ-104 through Pearson VUE partnerships. Microsoft’s relationship with this testing provider offers convenient scheduling options worldwide. Understanding testing center policies around identification requirements, prohibited items, and break procedures reduces exam day stress.
Online proctoring emerged as a viable alternative to testing center exams. This option allows candidates to take exams from home or office with remote proctoring monitoring through webcam. While convenient, online proctoring requires technical preparation including webcam testing, environment preparation, and understanding proctoring rules. Candidates can explore official testing provider resources for scheduling details.
Exam duration and format remained consistent between AZ-103 and AZ-104. Candidates receive 120 minutes to complete the exam, with additional time for reading instructions and providing feedback. The question count ranges from 40 to 60 questions in various formats including multiple choice, case studies, and active screen demonstrations.
Scoring methodology uses scaled scoring from 100 to 1000, with 700 required to pass. Questions aren’t equally weighted, and experimental questions that don’t count toward scores appear on exams. Candidates cannot return to previous questions in some sections, making careful reading essential before submitting answers.
Accommodations for candidates with disabilities or language needs are available through Pearson VUE. Microsoft offers exams in multiple languages, and additional time accommodations support candidates with documented needs. Requesting accommodations requires advance planning before exam scheduling.
Conclusion
The evolution from AZ-103 to AZ-104 reflects Microsoft’s deeper understanding of the skill set required by Azure administrators in modern enterprise environments. While the AZ-103 certification focused on core foundational concepts related to infrastructure management, the transition to AZ-104 brings the curriculum into closer alignment with the complexities faced by today’s cloud administrators. This updated certification now places a strong emphasis on governance, security integration, hybrid cloud capabilities, and operational automation, all while maintaining a focus on essential infrastructure management. By incorporating these advanced topics, the AZ-104 certification better prepares professionals for the multifaceted challenges of modern cloud operations, ensuring that they possess the skills needed to manage not only the infrastructure but also the more dynamic, security-conscious, and hybrid nature of contemporary cloud environments.
The changes in the AZ-104 exam objectives highlight the growing importance of governance and security, areas that are often key priorities for organizations moving critical operations to the cloud. The new focus on managing and implementing Azure security, identity services, and governance features—such as Azure Policy, Blueprints, and role-based access control (RBAC)—prepares candidates to create secure, compliant environments. Security is no longer a secondary concern but a central element of any cloud deployment. As enterprises increasingly adopt cloud technologies, they face heightened concerns around data privacy, regulatory compliance, and risk management, all of which the AZ-104 now directly addresses. By integrating security practices into everyday tasks, the certification ensures administrators are ready to safeguard cloud environments against evolving threats.
Moreover, the emphasis on hybrid cloud capabilities marks another key shift in Azure administration. As businesses move to cloud-first strategies, many organizations still require hybrid architectures that connect on-premises resources with the cloud. The AZ-104’s focus on services like Azure Arc, Azure Site Recovery, and ExpressRoute reflects this dual need for managing both on-premises and cloud resources seamlessly. With the rise of hybrid and multi-cloud deployments, Azure administrators must be equipped to handle a mix of workloads, which requires a deeper understanding of how to create and maintain such interconnected infrastructures. The certification ensures administrators can bridge the gap between on-premises systems and Azure’s cloud offerings.
Additionally, the operational automation topics introduced in the AZ-104 exam are critical for reducing manual workloads and improving operational efficiency. As organizations scale their cloud operations, automation becomes key to handling routine tasks, patch management, monitoring, and scaling resources. This includes tools like Azure Automation, Azure Logic Apps, and Azure Functions, which help streamline management processes and enable self-healing systems. The certification’s emphasis on automation equips administrators with the knowledge and skills to implement efficient workflows, reduce human error, and respond quickly to system issues without manual intervention, improving the overall resilience of cloud environments.
In essence, professionals who approach AZ-104 preparation with an understanding of these broader shifts and the strategic intent behind the changes will be better equipped to meet the challenges of cloud administration in real-world scenarios. By focusing on practical knowledge that extends beyond exam objectives, candidates will gain skills that directly translate into value for organizations, helping them to build, secure, and manage their Azure environments more effectively. The AZ-104 certification, with its comprehensive coverage of governance, security, hybrid capabilities, and automation, provides a clear pathway for career advancement while preparing administrators to excel in a rapidly evolving cloud landscape.
