The AZ-104 is a Microsoft certification exam designed to validate the skills of professionals who manage cloud infrastructure within the Azure ecosystem. It targets individuals working in roles such as Azure administrators, cloud engineers, and IT professionals responsible for implementing, monitoring, and maintaining Microsoft Azure solutions. Passing this exam earns the Microsoft Certified: Azure Administrator Associate credential, which is one of the most recognized and sought-after cloud certifications in the industry today.
The exam tests practical knowledge across a broad range of Azure services and administrative tasks, including identity management, virtual networking, storage configuration, compute resource deployment, and monitoring. It is not a theoretical exam that rewards memorization alone. Candidates who succeed are those who have worked with Azure services hands-on and who can apply their knowledge to scenario-based questions that simulate real administrative challenges. The exam is periodically updated by Microsoft to reflect changes in the Azure platform, so candidates should always confirm the current objectives before beginning their preparation.
Eligibility and Prior Knowledge
Microsoft’s current AZ-104 audience profile describes the exam as a role-based assessment for people familiar with administering Azure workloads; it does not state that six months of experience is a universal exam eligibility gate. The recommended background includes operating systems, networking, servers, virtualization, and experience with PowerShell, Azure CLI, the Azure portal, ARM/Bicep templates, and Microsoft Entra ID. Use those skills as a preparation checklist. If you have not administered Azure before, allow extra time to practice deployments and troubleshoot access or connectivity rather than treating any fixed number of months as a reliable readiness measure.
Candidates who are completely new to Azure are strongly advised to complete the AZ-900: Microsoft Azure Fundamentals exam before attempting AZ-104. AZ-900 covers foundational cloud concepts and introduces the Azure service catalog at a high level, providing the conceptual vocabulary that AZ-104 builds upon. While AZ-900 is not a prerequisite, the shift in depth and complexity between the two exams is substantial. Professionals coming from backgrounds in Windows Server administration, networking, or on-premises infrastructure will generally find the transition to AZ-104 material more natural than those with no IT operations experience at all.
Official Exam Objectives Breakdown
Microsoft publishes a detailed skills measured document for AZ-104 that lists every domain covered in the exam and the approximate percentage of questions drawn from each area. As of the most recent update, the exam covers five major domains: managing Azure identities and governance, implementing and managing storage, deploying and managing Azure compute resources, implementing and managing virtual networking, and monitoring and maintaining Azure resources. Each domain carries a different weight, and candidates who allocate their study time proportionally to these weights will cover the most heavily tested material first.
According to the Microsoft AZ-104 skills outline effective April 17, 2026, identity and governance account for 20–25%, storage 15–20%, compute 20–25%, virtual networking 15–20%, and monitoring and maintenance 10–15%. Identity scenarios involve Microsoft Entra users and groups, Azure RBAC scope, policies, and management groups; compute includes VMs, App Service, containers, and ARM/Bicep; networking covers VNets, NSGs, private access, routing, DNS, and load balancing. Use each weight as a guide, not as a substitute for being able to carry out the task or explain a troubleshooting result.
Choosing Study Resources Wisely
The Microsoft Learn AZ-104 study guide and learning paths provide a current starting point, along with an official practice assessment and product documentation. Free Microsoft Learn training sandboxes are no longer available; to practice creating Azure resources you need an authorized subscription. Budget the lab, use the smallest suitable resources, and remove them when the exercise is complete. Supplement documentation with a short log of errors and explanations so you test transferable decision-making rather than memorize a familiar question set.
Beyond Microsoft Learn, several third-party resources are widely trusted by the certification community. John Savill’s AZ-104 study series on YouTube is regarded by many as the most comprehensive free video resource available, offering in-depth technical explanations that go beyond surface-level coverage. Paid platforms such as A Cloud Guru, Pluralsight, and Udemy also offer structured AZ-104 courses that include video lectures, hands-on labs, and practice exams. When selecting a Udemy course, prioritize those with recent update dates and high enrollment numbers, as older courses may not reflect the current exam objectives.
Setting Up a Practice Environment
Hands-on Azure exercises help convert terminology into operational understanding. Instead of assuming lab practice guarantees a first-attempt pass, assign a concrete test to each weakness in the skills outline. Create a VNet and NSG, identify the effective rule denying traffic, then correct it and record the result. Deploy storage with appropriate authorization and verify an access failure from a restricted principal. Repeating a scenario under new constraints is stronger evidence of competence than recognizing a previously seen question.
An Azure introductory trial may supply temporary credits to eligible new subscribers, but the current offer, regional access, pricing and expiry must be checked before relying on them for AZ-104 labs. Use a dedicated resource group, budget alerts and a cleanup checklist. Practice a VNet and NSG, assign an Azure RBAC role, deploy a test VM or storage account and configure Azure Monitor to verify the result. These exercises should demonstrate administrative judgment, not imply that every service will always be free or that a credit amount is universal.
Studying Azure Identity and Governance
Identity and governance carries 20–25% of Microsoft’s AZ-104 skills outline effective April 17, 2026. Prepare to manage Microsoft Entra ID users, groups, external identities and directory roles, then separately assign Azure RBAC roles at resource-management scopes. These are distinct authorization systems: an Entra administrative role does not automatically grant broad access to an Azure subscription. Study management groups, subscriptions, tags, policies and resource locks as governance controls, and learn how Conditional Access and multifactor authentication protect sign-in under the applicable Entra licensing and configuration. Test least-privilege assignments in a lab before assuming that a role name confers the same capability in both control planes.
The governance portion of this domain covers how organizations structure and control their Azure environments through management groups, subscriptions, resource groups, and resources. Azure Policy is particularly important, as exam questions frequently test whether candidates understand how to create, assign, and evaluate policies, as well as how policy effects like audit, deny, append, and deployIfNotExists behave. Resource locks, Azure Blueprints, and cost management tools are also covered. Candidates should spend time working through practical scenarios involving RBAC role assignments at different scopes and verifying how permissions are inherited and overridden at each level of the management hierarchy.
Mastering Azure Networking Concepts
Networking is consistently identified as the most technically challenging domain in AZ-104 by candidates who have sat for the exam. The breadth of networking topics covered is substantial, and the concepts are interconnected in ways that require a genuine architectural understanding rather than isolated knowledge of individual services. Candidates must be proficient in designing and implementing virtual networks, configuring subnets, setting up network peering between virtual networks in the same region and across regions, and working with service endpoints and private endpoints.
Network security groups and application security groups control traffic flow within and between virtual networks, and exam questions frequently present scenarios where candidates must determine which NSG rules will allow or deny specific traffic. Azure DNS, including both public and private DNS zones, is tested alongside custom DNS configuration for virtual networks. Load balancing services including Azure Load Balancer, Azure Application Gateway, Azure Traffic Manager, and Azure Front Door each have distinct use cases that candidates must be able to distinguish. VPN Gateway and ExpressRoute connectivity options are also covered, including how to configure site-to-site VPNs and understand the differences between VPN Gateway SKUs.
Virtual Machine Administration Skills
Virtual machines represent one of the most fundamental compute resources in Azure, and the AZ-104 exam tests VM administration skills extensively. Candidates must know how to deploy VMs from the Azure portal, ARM templates, and the Azure CLI, as well as how to configure VM sizes, availability sets, availability zones, and virtual machine scale sets. Understanding the difference between these high availability options and knowing when to use each one is a common exam topic that requires both conceptual clarity and practical familiarity.
VM storage configuration is another area where candidates must demonstrate depth of knowledge. This includes understanding managed disk types such as Standard HDD, Standard SSD, Premium SSD, and Ultra Disk, as well as how to attach data disks, resize disks, and configure disk encryption using Azure Disk Encryption and server-side encryption. VM networking configuration, including how NICs, IP configurations, and NSGs interact with virtual machine deployments, is also tested. Candidates should practice deploying VMs with specific configurations, connecting to them via RDP and SSH, and performing common administrative tasks such as extending disk partitions and configuring custom script extensions.
Azure Storage Configuration Knowledge
Azure storage is a broad domain that covers multiple storage services and configuration options. The core service is Azure Storage accounts, and candidates must understand the different account types including general-purpose v2, blob storage, and Azure Data Lake Storage Gen2, as well as the performance tiers, replication options, and access tiers available for each. Replication options such as locally redundant storage, zone-redundant storage, geo-redundant storage, and geo-zone-redundant storage each have different availability and durability guarantees that the exam tests through scenario-based questions.
Blob storage configuration is one of the most heavily tested areas within the storage domain. Candidates must be familiar with blob access tiers including hot, cool, and archive, how lifecycle management policies automate tier transitions, and how to configure blob versioning, soft delete, and immutability policies. Azure File shares, Azure Queue Storage, and Azure Table Storage are also covered, along with Azure Storage security features including shared access signatures, stored access policies, Azure AD authentication for storage, and firewall and virtual network configurations. Candidates should practice generating SAS tokens with specific permissions and expiry settings and understand the differences between account-level and service-level SAS.
Monitoring and Backup Preparation
The monitoring domain of AZ-104 covers the tools and services Azure provides for observing resource health, diagnosing performance issues, and maintaining operational visibility across the environment. Azure Monitor is the central platform, and candidates must be comfortable with its core components including metrics, logs, alerts, and diagnostic settings. Log Analytics workspaces are a key component of the monitoring ecosystem, and candidates should understand how to create a workspace, connect resources to it, write basic Kusto Query Language queries, and use the results to investigate issues.
Azure Backup and Azure Site Recovery fall within the broader monitoring and maintenance domain and are regularly tested in the exam. Candidates must know how to configure Recovery Services vaults, set up backup policies for virtual machines and Azure Files, perform restore operations, and understand the difference between backup and disaster recovery scenarios. Azure Site Recovery enables replication of VMs to a secondary region for business continuity purposes, and the exam tests whether candidates understand how to configure replication, perform test failovers, and manage the recovery plan. Spending time in the portal configuring these services directly is the most effective way to retain this knowledge.
Practice Exams and Their Value
Practice exams are an essential component of AZ-104 preparation, but their value depends entirely on how they are used. Candidates who use practice exams purely to memorize question-and-answer pairs without understanding the reasoning behind correct answers are unlikely to perform well on the actual exam, which presents novel scenario variations that reward genuine comprehension rather than pattern matching. The correct approach is to treat every practice question as a learning opportunity, reading the explanation for both correct and incorrect answer choices and tracing each answer back to the underlying concept in the documentation.
The most trusted sources for AZ-104 practice questions include MeasureUp, Whizlabs, and the practice assessments available directly on Microsoft Learn. Microsoft’s own practice assessment is free and provides questions authored to reflect the actual exam format, making it an especially valuable resource. Candidates should target a consistent score of 85 percent or higher on practice exams before scheduling the real test, using lower scores as indicators of which domains need further study rather than as discouraging results. Timed practice sessions planned around Microsoft’s currently published 100-minute AZ-104 assessment duration can help candidates build pacing discipline. Confirm the time shown in your scheduled exam appointment because Microsoft distinguishes assessment time from total seat time.
Scheduling and Exam Day Logistics
AZ-104 can be taken either at a physical Pearson VUE testing center or online through proctored remote delivery. Both options are available worldwide, and the choice should be based on what environment allows the candidate to perform at their best. Testing centers provide a controlled environment free of home distractions, while online proctoring offers flexibility in scheduling and eliminates travel time. Whichever option is selected, candidates should register through the official Microsoft certification portal or through Pearson VUE and confirm the appointment details well in advance.
On exam day, arrive at the testing center or prepare the online testing environment at least 15 minutes early. For online exams, the pre-check process includes identity verification, workspace inspection via webcam, and a system compatibility test, all of which take time and can cause stress if not anticipated. The AZ-104 exam consists of between 40 and 60 questions, which may include multiple choice, drag-and-drop, case studies, and lab-based tasks depending on the exam version. Read every question carefully, paying particular attention to qualifiers such as least privilege, minimum cost, without downtime, or most reliable, as these words often determine which answer is correct among options that might otherwise appear equally valid.
Common Mistakes to Sidestep
Memorizing unauthorized copies of live exam questions can undermine both exam integrity and genuine learning. Reconstructed question collections may omit context, contain mistakes, or become obsolete when Microsoft updates its exams. Rely instead on Microsoft’s official skills outline, practice assessment, documentation, and realistic configuration exercises. When a sample question reveals a weakness, study the underlying Azure feature and test it in an environment you control. That approach builds the ability to diagnose new scenarios even when the exact wording is unfamiliar.
Another frequent mistake is skipping the networking domain because it appears complex, or rushing through it with insufficient depth. Networking questions appear throughout the exam in multiple domains, not just the dedicated networking section, because many Azure services depend on networking configurations. A candidate who has weak networking knowledge will encounter unexpected difficulty even in topics they thought they had covered thoroughly. Similarly, neglecting PowerShell and Azure CLI in favor of studying only the portal interface limits exam performance because some questions specifically describe command-line operations and require familiarity with syntax, parameters, and expected outputs.
Maintaining Motivation During Study
Build an AZ-104 plan around current capability rather than a default four-to-twelve-week estimate. Divide practice by the official domain groups, reserve specific times for lab work, and record which administrative tasks you can complete without a walkthrough. An experienced cloud administrator may need targeted refreshers, while a new learner may need more time to build networking and operating-system foundations. Evaluate progress each week against actual performance and adjust the exam date as appropriate. A weekly schedule is useful as a habit, not a guarantee about when every candidate will be ready.
Study groups and online communities can provide both accountability and peer learning that accelerates preparation. The Microsoft Tech Community, Reddit’s r/AzureCertifications, and various Discord servers focused on cloud certifications host active communities of AZ-104 candidates and certified professionals who share study tips, answer questions, and offer encouragement. Engaging with these communities also exposes candidates to a wider range of question types and real-world scenarios than any single study resource provides. The combination of structured solo study, hands-on lab practice, and community engagement forms the most robust preparation approach available.
A candidate can improve AZ-104 readiness by combining the current Microsoft skills outline with repeated Azure configuration and troubleshooting tasks, but no study method guarantees a first-attempt result. The assessment measures applied administration and judgment under specific constraints. For each topic, practice explaining both the correct configuration and why a plausible alternative would fail. Review mistakes, adjust the learning plan, and book the exam when the important scenarios are reliably manageable rather than trying to satisfy an arbitrary calendar deadline.
The domains covered in AZ-104 span a wide technical surface area, and no candidate will feel equally confident across all of them. Identity and governance, networking, compute, storage, and monitoring each demand their own depth of preparation, and the exam’s scenario-based format means that isolated knowledge of individual services is less valuable than an integrated understanding of how those services interact in real administrative contexts. A candidate who has deployed a virtual network, connected it to another network through peering, applied NSG rules to control traffic, and then diagnosed a connectivity problem has developed the kind of layered, experiential knowledge that translates directly into exam performance.
Hands-on practice using a free Azure account is not merely recommended but foundational to a successful preparation strategy. No volume of reading or video watching replicates the learning that comes from actually configuring, deploying, breaking, and fixing Azure resources in a live environment. Candidates should treat every lab session as a simulation of real administrative work, deliberately introducing challenges and troubleshooting their way through them rather than following prescribed steps without deviation. This approach builds problem-solving instincts that the exam’s scenario questions are specifically designed to reward.
Practice exams, when used correctly as diagnostic and learning tools rather than memorization aids, provide clarity about which areas of knowledge are solid and which require further investment. The goal before sitting the real exam is not just to achieve a high practice score but to reach a point where correct answers can be explained with confidence rather than selected by intuition. When a candidate can articulate why an answer is correct and why each incorrect option falls short, they are ready for the actual exam regardless of how the questions are phrased or framed on test day.
The AZ-104 certification, once earned, opens doors to more advanced Azure certifications including AZ-305 for Azure Solutions Architect Expert, and it carries real weight in the job market as evidence of validated cloud administration capability. The effort invested in passing it thoroughly and honestly, rather than through shortcuts, pays dividends not only in the credential itself but in the practical skills that make a certified professional genuinely more effective at their work. Approach the preparation seriously, build the skills the exam intends to certify, and the first attempt will be the only attempt needed.
