Microsoft Azure Administrator AZ-104 Exam Guide: Skills, Study Plan, and Scheduling Decisions
AZ-104 validates whether you can implement, manage, secure, and monitor an organization’s Azure environment across identity, governance, storage, compute, networking, and monitoring. It is intended for Azure administrators and IT professionals who work with cloud infrastructure and coordinate with networking, security, database, application, or DevOps teams. This guide helps you decide whether your current experience is sufficient, which skills deserve the most study time, whether to use self-paced learning or instructor-led training, and how to schedule the exam responsibly without relying on leaked questions or memorization.
What does AZ-104 certify?
AZ-104: Microsoft Azure Administrator is the exam associated with the Microsoft Certified: Azure Administrator Associate certification. Microsoft describes the role as configuring, managing, securing, and administering key professional functions in Azure. The credential therefore tests applied administration rather than a narrow product feature or a purely conceptual understanding of cloud computing.
The exam is designed around the work of an administrator who provisions, manages, monitors, and adjusts Azure resources. That work sits inside a larger delivery team: administrators may coordinate with specialists responsible for networking, security, databases, application development, and DevOps. A useful preparation goal is to understand how an administrative choice affects the rest of an Azure solution.
The current study guide identifies five assessed areas: managing Azure identities and governance, implementing and managing storage, deploying and managing Azure compute resources, implementing and managing virtual networking, and monitoring and maintaining Azure resources. These areas are broad enough that reading service descriptions alone is unlikely to demonstrate operational readiness.
Who should take this exam?
AZ-104 is aimed at candidates with subject-matter expertise in implementing, managing, and monitoring Azure environments. It is a reasonable target for an Azure administrator, systems engineer, cloud technologist, or IT operations professional whose responsibilities include identity, infrastructure, storage, networking, security, or governance.
Microsoft lists familiarity with operating systems, networking, servers, and virtualization. It also lists experience with PowerShell, Azure CLI, the Azure portal, Azure Resource Manager templates or Bicep files, and Microsoft Entra ID. These are not merely names to recognize: your preparation should include deciding which interface or deployment approach fits a task and checking the resulting configuration.
The associated Microsoft training course describes successful administrators as starting with experience in virtualization, networking, identity, and storage. It also identifies useful background in virtual machines, virtual networking, virtual hard disks, TCP/IP, DNS, VPNs, firewalls, encryption, Active Directory concepts, RBAC, backup, and restore operations. Use that list as a readiness check, not as a demand to master every adjacent technology before beginning.
Candidates without this background can still use the learning paths, but should first close the fundamentals gap. The prerequisite learning path begins with Azure fundamentals covering cloud concepts, Azure architecture and services, and Azure management and governance.
Which skill areas carry the most weight?
The official skills outline gives the following ranges: Manage Azure identities and governance accounts for 20–25% of the questions, Implement and manage storage accounts for 15–20%, Deploy and manage Azure compute resources accounts for 20–25%, Implement and manage virtual networking accounts for 15–20%, and Monitor and maintain Azure resources accounts for 10–15%. Plan around the labels, not isolated percentages.
Manage Azure identities and governance (20–25%) deserves early attention because it connects users, groups, access, subscriptions, policy, and organizational control. Deploy and manage Azure compute resources (20–25%) is equally prominent and requires more than creating a virtual machine: you need to reason about administration, scaling, web applications, and containers within the published scope.
Implement and manage storage (15–20%) and Implement and manage virtual networking (15–20%) are substantial domains, not optional supporting topics. Monitor and maintain Azure resources (10–15%) has the smallest stated range, but it links monitoring, backup, and operational response to the resources covered elsewhere.
These ranges are guidance for study allocation, not a prediction of the exact questions you will see. The study guide says that its skill bullets illustrate assessment and that related topics may also be covered. It also notes that most questions cover generally available features, while commonly used preview features may appear. Check the live study guide before finalizing your plan because Microsoft updates exams to reflect role requirements.
How should you measure your starting point?
Begin with the official skills measured list and mark each task as explain, perform, troubleshoot, or unfamiliar. A candidate who can define a service but cannot configure it, identify its dependencies, or explain why a deployment failed should treat that topic as incomplete. This baseline prevents time being wasted on familiar portal tours.
Create a skills ledger with five columns: domain, task, evidence of ability, unresolved question, and next lab. For example, “virtual networking” is too broad to assess; record the specific network configuration you can build, the traffic behavior you can explain, and the point at which you need documentation.
Use Microsoft’s practice assessment as a diagnostic rather than a substitute for study. Microsoft says the assessment provides an overview of question style, wording, and difficulty and can help identify knowledge gaps. After each attempt, classify the reason for an incorrect answer: missing concept, confusing two services, misreading a requirement, or choosing an answer that solves a different administrative problem.
Use the exam sandbox separately. It lets you interact with different question types in an environment that resembles the exam interface. The practical recommendation is to learn the interface before exam day, then spend your main preparation time building and explaining Azure configurations.
What should you study first?
Follow a dependency-aware sequence: Azure fundamentals and administration tools first, then identity and governance, storage, compute, networking, and monitoring and backup. This order gives you a working resource and access model before you build workloads, then lets you monitor and protect the resources you have already configured.
Start with the prerequisite learning path if Azure resource structure, Cloud Shell, or ARM templates is unfamiliar. Its modules include an introduction to Azure Cloud Shell and deploying Azure infrastructure with JSON ARM templates. The certification page also lists PowerShell, Azure CLI, the portal, ARM templates or Bicep files, and Microsoft Entra ID among the relevant experience.
Move next to identity and governance. The Microsoft learning path covers Microsoft Entra ID, creating and managing identities, Azure architecture, Azure Policy initiatives, Azure RBAC, and self-service password reset. Study these as connected administrative decisions: who is the principal, what scope is involved, which role is appropriate, and how governance evaluates or restricts the resource.
Then use the remaining AZ-104 learning paths for storage, compute, virtual networking, and monitoring and backup. The official series is explicitly organized around those areas, making it a better backbone than an unrelated collection of tutorials.
How do you prepare for identities and governance?
Practice explaining access from identity to resource. For each scenario, identify the user, group, or workload identity; the Azure scope; the required permission; and the governance control that should apply. This approach is more reliable than memorizing role names because the exam’s administrative decisions depend on scope, responsibility, and least-privilege intent.
The official identity and governance path includes Microsoft Entra ID, identities, Azure RBAC, subscriptions, governance, Azure Policy initiatives, and self-service password reset. Build a small lab in which you create identities and groups, assign access at an intentional scope, apply a policy, and inspect the effect. Record what changed and how you would reverse it.
Keep Microsoft Entra ID and Azure RBAC conceptually distinct. Entra ID concerns identity and directory capabilities; Azure RBAC controls access to Azure resources. In your notes, write a short explanation of which system answers each access question and where a subscription, resource group, or resource fits into the decision.
A common mistake is studying governance as a list of services disconnected from administration. Instead, connect subscriptions, resource organization, tags or policy requirements where applicable, access assignments, and cost or compliance considerations into one operating model.
How do you build practical storage knowledge?
Study storage by matching a workload requirement to the storage configuration and then validating access, resilience, and operations. Do not stop after creating an account or container. For every exercise, state what data is being stored, how an application reaches it, what administrative access is needed, and how the data would be protected or recovered.
Use the official AZ-104 storage learning path and the course syllabus as your boundaries. Microsoft’s course includes implementing storage solutions, backing up and sharing data, and managing Azure subscriptions and infrastructure alongside storage. Your lab notes should therefore connect storage configuration to identity, networking, cost awareness, and backup rather than treating it as an isolated service.
Practice portal work and at least one command-line or declarative workflow where the documentation supports it. The purpose is not to memorize syntax. It is to learn how to find the same configuration in different interfaces, recognize the important parameters, and verify that the deployed state matches the requirement.
Pitfalls include choosing a storage option because its name sounds familiar, overlooking access scope, and failing to test the path an application or administrator will use. After each lab, delete or deallocate resources that no longer serve a learning purpose and review the account’s configuration against your written requirement.
How do you prepare for compute and application resources?
Treat compute questions as deployment and operations problems. Practice selecting and configuring the appropriate Azure compute resource for a stated workload, then perform an administrative task such as resizing, scaling, connecting, or monitoring it. Your explanation should include dependencies, access, networking, and what evidence would show that the change worked.
Microsoft’s AZ-104 course covers creating and scaling virtual machines, implementing web apps and containers, and managing infrastructure. Organize study around those workload types, but avoid memorizing a single deployment path. Compare the portal, Azure CLI, PowerShell, and ARM or Bicep approach when practical so that you understand the underlying resource model.
For each compute lab, write a short runbook: prerequisites, deployment sequence, configuration choices, validation checks, and cleanup. Include failure branches. For example, if a workload cannot be reached, check identity and permissions, network boundaries, name resolution, and the resource’s own status rather than immediately rebuilding it.
A frequent preparation error is focusing on initial creation while ignoring administration. Spend deliberate practice time on changing a resource safely, scaling it appropriately, and recognizing which layer owns a problem. The exam validates administrator judgment, not only deployment familiarity.
How do you study virtual networking?
Study networking from the traffic path outward. Draw the source, destination, address space, subnet, routing or filtering control, name-resolution dependency, and administrative boundary before configuring anything. Then test the expected path and one intentionally blocked path. This makes networking practice concrete and exposes misunderstandings that passive reading can hide.
The certification background includes TCP/IP, DNS, VPNs, firewalls, encryption, virtual networking, and on-premises virtualization concepts. The AZ-104 course also covers configuring virtual networking, connecting Azure and on-premises sites, and managing network traffic. Use those topics to create diagrams and troubleshooting checklists rather than isolated vocabulary cards.
Your lab should require you to explain why traffic is allowed or denied and which configuration would change that result. Keep network security and identity questions separate in your notes, then reconnect them when a workload needs both resource authorization and network reachability.
Avoid the mistake of treating a successful deployment as proof that a network is correctly designed. Validate name resolution, connectivity, intended segmentation, and the administrator’s ability to inspect the configuration. If a lab uses a temporary public endpoint, document that it is a learning choice rather than automatically a production recommendation.
How do you cover monitoring, backup, and maintenance?
Finish each resource lab with an operations task. Configure or inspect monitoring, identify a useful signal, define what would trigger investigation, and practice a backup or recovery workflow where the official learning material covers it. Monitoring and maintenance should be threaded through the entire plan, not postponed as a small final chapter.
Microsoft identifies monitoring and maintaining Azure resources as the fifth assessed area, and the certification page specifically includes configuring virtual networks with Azure Monitor and backing up Azure resources among the stated skills. The course syllabus also includes monitoring the solution and backup and sharing data.
Build a maintenance notebook containing resource health checks, metrics or logs you would inspect, backup assumptions, restore validation, and the owner of the next action. The point is to demonstrate a repeatable operational response, not to collect screenshots.
A common mistake is confusing “a backup exists” with “recovery is understood.” In your exercises, record what is protected, how restoration would be initiated, what dependencies must be recreated or available, and how you would verify the result.
Which learning format fits your situation?
Self-paced Microsoft Learn is suitable when you can work through the prerequisite and AZ-104 learning paths while creating your own labs and review schedule. Instructor-led training is more useful when you need a fixed structure, guided demonstrations, or help connecting administration tasks. Choose based on your available time, existing Azure access, and ability to troubleshoot independently.
Microsoft lists AZ-104T00-A as an intermediate course for Azure administrators and says it can be prepared through instructor-led training or self-paced study. The listed course duration is 4 days, but that describes the course format, not the total preparation required for an individual candidate.
The official course covers subscriptions, identities, infrastructure, virtual networking, on-premises connectivity, network traffic, storage, virtual machines, web apps, containers, backup, and monitoring. Use its syllabus to check coverage, then compare your own lab evidence with the current exam study guide.
Microsoft’s prerequisite learning path mentions paying as you go or trying Azure free for up to 30 days. Treat any trial or account option as subject to the current terms and eligibility shown by Microsoft. Track resource creation and remove unnecessary resources so study does not become uncontrolled infrastructure spending.
What is a practical study roadmap?
A useful roadmap has four stages: establish prerequisites, learn each assessed domain, integrate the domains through scenario labs, and verify readiness with official assessment tools. Give each stage an exit condition. For example, do not leave identity study because you have read the modules; leave it when you can configure access and explain the result without copying a procedure.
Stage one is orientation. Read the current AZ-104 study guide, note its update date and skill bullets, confirm your background in operating systems, networking, virtualization, identity, and storage, and complete prerequisite material where needed. Set up a lab method and a ledger for questions, configurations, validation evidence, and cleanup.
Stage two is domain practice. Work through identities and governance, storage, compute, virtual networking, and monitoring and backup. For each domain, alternate reading with a task. After completing a task, reproduce the outcome through another available interface or explain which interface you would use in a production workflow.
Stage three is integration. Create scenarios that cross domain boundaries: an identity receives scoped access to a workload, a compute resource uses storage, a network path is secured and tested, and monitoring or backup supports operations. Change one requirement at a time and explain which configuration must change and which should remain unchanged.
Stage four is verification. Take the Microsoft practice assessment, review its report, return to the relevant learning material, and repeat weak labs. Use the exam sandbox to learn the interface. Schedule only after your errors show a stable understanding of decisions rather than short-term recall.
A practical weekly pattern is one reading block, one hands-on block, one troubleshooting block, and one review block. Adjust the number of sessions to your calendar; the important feature is the alternation between explanation, execution, diagnosis, and retrieval.
What mistakes undermine AZ-104 preparation?
The most damaging mistake is studying service names without practicing administrator decisions. Other recurring problems are using outdated objectives, ignoring interfaces other than the portal, skipping cleanup, treating practice questions as a question bank, and postponing scheduling or accommodation checks until the last moment.
Do not use exam dumps, leaked questions, or memorization claims as a preparation strategy. They cannot establish that you can administer an Azure environment and may leave you unprepared for changed objectives or scenario wording. Use the current Microsoft study guide, learning paths, practice assessment, exam sandbox, and documented hands-on work instead.
Do not assume that every localized exam version changes at the same time. Microsoft says the English version is updated first and that localized versions are updated approximately eight weeks after the English version, while also warning that this schedule is not guaranteed. Check the available language and current study guide when scheduling.
Do not overfit to a single lab. If you only know how to perform a task in the portal, you may not understand the resource model. If you only know a command copied from documentation, you may not know how to validate it or troubleshoot the result. Practice the reason for each setting and the evidence that proves success.
Finally, do not let a broad checklist replace weak-topic review. Keep the error log, rank gaps by assessed domain and operational importance, and convert each high-priority gap into a specific lab or explanation task.
What are the confirmed exam and delivery details?
Microsoft states that AZ-104 is proctored and that you will have 100 minutes to complete the assessment. The certification page lists a passing score of 700 or greater in the study guide. Microsoft also says that, in most cases, certification exams can be taken online or at a local test center, subject to provider availability.
The certification page lists these exam languages: English, Chinese (Simplified), Korean, Japanese, French, Spanish, German, Portuguese (Brazil), Chinese (Traditional), and Italian. The study guide says that if the exam is not available in your preferred language, you can request an additional 30 minutes to complete it. Verify the current options in the Schedule Exam section before booking.
For online delivery, Microsoft advises running a system pre-check and meeting computer and exam-area security requirements. If you choose a test center, Microsoft describes it as a quiet, pre-configured environment. If an online option does not appear, Microsoft says it is not available from your exam provider at that time.
The exam may include interactive components. Use the official exam sandbox to become familiar with the interface and question types, but do not treat the sandbox as a source of live exam content.
How should you handle accommodations?
Request accommodations before scheduling if you use assistive devices, need extra time, or require another modification to the exam experience. Microsoft says requests should be made early enough for the provider to review them and confirm that the environment supports your needs. Do not schedule first and assume an accommodation can be added automatically.
How do you register without creating account problems?
Start from the Azure Administrator certification page, select the schedule option, and follow the provider’s process. Microsoft recommends using a personal Microsoft account for registration because exam records connected only to an organizational work or school account can be lost and unrecoverable if you leave that organization.
For a personal certification attempt or training program, Microsoft directs candidates to schedule with Pearson VUE; Certiport is presented for students, academic institutions, or Microsoft Office Specialist exams. The provider options shown for a particular candidate remain the authority at the time of booking.
Microsoft states that certification exams can be scheduled no more than 90 days in advance. It also states that a maximum of two Microsoft Certification exams can be scheduled at a time through Pearson VUE. These policies can affect how you sequence a retake or reserve appointments, so read the current scheduling page rather than relying on old forum advice.
Make sure the legal name on your Learn profile matches your legal identification. Review the delivery choice, language, date, location or online requirements, and accommodation status before completing registration. Keep the confirmation details accessible and use your Learn profile to manage the appointment; Microsoft says the profile can be used to reschedule, cancel, or begin a scheduled online exam.
Do not use old AZ-103 articles to plan an AZ-104 appointment. Microsoft’s historical announcement explains that AZ-104 replaced AZ-103, but the current study guide and certification page should govern present preparation and scheduling decisions.
What should you do in the final preparation period?
In the final period, stop expanding the syllabus and strengthen evidence for weak domains. Review the current study guide, complete targeted labs, use the practice assessment diagnostically, and run the exam sandbox. Confirm your delivery setup, identity documents, language, and approved accommodations through the official scheduling process.
Create a one-page decision sheet for each domain. Include the requirement, the Azure service or control involved, the scope or dependency, the validation step, and the likely troubleshooting direction. This is more useful than a long glossary because it rehearses the sequence needed to interpret a scenario.
Perform one integrated rehearsal without copying instructions line by line. Start with a written requirement, build the relevant resources, apply identity and governance, test networking, inspect storage or compute behavior, and finish with monitoring or backup checks. Then clean up the environment and write what you would change for a production design.
Use the score requirement as a readiness reference, not as permission to chase a particular practice percentage. A practice result should prompt investigation of wrong answers and uncertainty. Schedule when you can explain why an option fits the requirement and why the alternatives do not, across all five assessed areas.
On exam day, follow the provider’s current instructions for the proctored delivery, allow time for required checks, and rely on your own reasoning. Official preparation resources can show style and interface; they cannot replace knowledge of Azure administration.
What happens after certification?
Microsoft lists a 12-month renewal frequency for the Azure Administrator Associate certification. The certification page says Microsoft associate, expert, and specialty certifications expire annually and can be renewed by passing a free online assessment on Microsoft Learn.
Treat renewal as ongoing operational maintenance rather than a separate emergency project. Follow the current Azure Administrator certification page and Microsoft Learn profile for renewal instructions, updated learning content, and available assessments. The study guide also directs candidates to Microsoft’s certification resources for renewal details.
Because Azure services and exam skills are updated periodically, retain your lab notes and revisit the current skills measured page before renewal or a future exam attempt. Focus first on changes affecting the work you actually perform, then check how those changes map to the published administrator objectives.
Conclusion
Use AZ-104 preparation to prove that you can make and validate Azure administration decisions across identity, governance, storage, compute, networking, and monitoring. Start with the current Microsoft study guide, build practical evidence through the official learning sequence, use practice tools to locate gaps, and schedule through the current provider process with a personal account. Your next step is simple: mark each assessed domain as confident, practiced, or unknown, then turn every unknown into a specific lab or documented explanation before booking the appointment.
Related exams
- AZ-120 exam — Planning and Administering Microsoft Azure for SAP Workloads
- AZ-140 exam — Configuring and Operating Windows Virtual Desktop on Microsoft Azure
- AZ-305 exam — Designing Microsoft Azure Infrastructure Solutions
- AZ-400 exam — Microsoft Azure DevOps Solutions
- AZ-500 exam — Microsoft Azure Security Technologies
- AZ-700 exam — Designing and Implementing Microsoft Azure Networking Solutions
