Exam AZ-104: Microsoft Azure Administrator

The Microsoft Azure Administrator (AZ-104) certification is designed for professionals with proven expertise in managing, implementing, and monitoring a company’s Microsoft Azure environment. This role is crucial in ensuring the operational success of cloud infrastructure and services.

Key Responsibilities of an Azure Administrator

Azure Administrators play a central role in maintaining and optimizing an organization’s cloud resources. They work collaboratively within cross-functional teams to deliver integrated solutions involving:

Virtual Networks – Deploying and managing secure network connectivity across cloud and on-premises environments.
Storage – Managing data storage solutions including Blob Storage, File Shares, and recovery services.
Compute Resources – Configuring and managing virtual machines, containers, and app services.
Identity Management – Implementing identity solutions using Microsoft Entra ID (formerly Azure AD) to control user access.
Security – Enforcing access controls, threat protection, and compliance policies.
Governance – Applying governance practices through resource organization, policies, and cost management tools.

Collaboration and Integration

In this role, administrators often work as part of a broader IT team, collaborating with professionals in networking, security, application development, and DevOps. They ensure that Azure services are deployed and maintained according to organizational standards and project requirements.

Prerequisite Knowledge and Skills

Candidates should demonstrate a solid understanding of:

Operating Systems – Especially Windows and Linux environments.
Networking Concepts – Including IP addressing, DNS, VPNs, and firewalls.
Server Management – Deploying and maintaining physical and virtual servers.
Virtualization Technologies – Working with hypervisors and virtual environments.

Practical Experience with Azure Tools

Hands-on experience is essential for success in this certification. Familiarity with the following tools and interfaces is expected:

Azure PowerShell – For task automation and scripting.
Azure CLI (Command-Line Interface) – For managing Azure resources via command-line operations.
Azure Portal – Navigating and configuring resources through the web interface.
Azure Resource Manager (ARM) Templates – Automating deployments and infrastructure as code.
Microsoft Entra ID (Azure Active Directory) – Managing identities, roles, and access.

Exam Details

The AZ-104: Microsoft Azure Administrator certification exam is classified at the intermediate level and is intended for individuals pursuing the role of an Azure Administrator. This certification validates the candidate’s ability to manage and maintain core Azure services and resources within a cloud environment. Candidates are given 100 minutes to complete the exam. It is important to note that this is a proctored assessment, meaning it will be monitored either in person or online under strict examination conditions. The exam is closed-book, and candidates cannot access any external materials or references during the test. In addition to multiple-choice or text-based questions, the assessment may also include interactive tasks or performance-based components to evaluate practical knowledge and skills.

The AZ-104 exam is available in multiple languages to accommodate a global audience. Supported languages include English, Simplified Chinese, Traditional Chinese, Korean, Japanese, French, Spanish, German, Brazilian Portuguese, and Italian. This multilingual availability ensures that candidates from diverse regions can take the exam in their preferred language. To successfully pass the exam, candidates must achieve a minimum score of 700 out of 1000. Microsoft also offers exam accommodations for candidates who require additional support due to medical, cognitive, or physical conditions.

Course Outline

The exam covers the following topics:

Module 1: Understand about Managing Azure identities and governance (20-25%)

1.1 Managing Microsoft Entra users and groups

Create users and groups (Microsoft Documentation: Add or delete users using Azure Active Directory)
Manage user and group properties
Manage licenses in Microsoft Entra ID
Manage external users
Configure self-service password reset (SSPR) (Microsoft Documentation: Tutorial: Enable users to unlock their account or reset passwords using Azure Active Directory self-service password reset)

1.2 Managing access to Azure resources

Manage built-in Azure roles
Assign roles at different scopes
Interpret access assignments

1.3 Manage Azure subscriptions and governance

Implementing and managing Azure policy (Microsoft Documentation: Create and manage policies to enforce compliance)
Configuring resource locks (Microsoft Documentation: Lock resources to prevent unexpected changes)
Apply and manage tags on resources (Microsoft Documentation: Use tags to organize your Azure resources and management hierarchy)
Managing resource groups (Microsoft Documentation: Move resources to a new resource group or subscription)
Managing subscriptions (Microsoft Documentation: Organize and manage multiple Azure subscriptions)
Manage costs by using alerts, budgets, and Azure Advisor recommendations (Microsoft Documentation: Use cost alerts to monitor usage and spending)
Configuring management groups (Microsoft Documentation: Create management groups for resource organization and management)

Module 2: Learn how to implement and manage storage (15-20%)

2.1 Configure access to storage

Configure Azure Storage firewalls and virtual networks
Create and use shared access signature (SAS) tokens
Configure stored access policies
Manage access keys (Microsoft Documentation: Manage storage account access keys)
Configure identity-based access for Azure Files

2.2 Configure and manage storage accounts

Create and configure storage accounts
Configure Azure Storage redundancy (Microsoft Documentation: Azure Storage redundancy)
Configure object replication (Microsoft Documentation: Configure object replication for block blobs)
Configure storage account encryption
Manage data by using Azure Storage Explorer and AzCopy (Microsoft Documentation: Get started with AzCopy)

2.3 Configure Azure files and Azure blob storage

Create and configure a file share in Azure Storage (Microsoft Documentation: Create an Azure file share)
Create and configure a container in Blob Storage
Configure storage tiers (Microsoft Documentation: Hot, Cool, and Archive access tiers for blob data)
Configure soft delete for blobs and containers
Configure snapshots and soft delete for Azure Files
Configure blob lifecycle management (Microsoft Documentation: Configure a lifecycle management policy)
Configure blob versioning

Module 3: Deploying and managing Azure compute resources (20-25%)

3.1 Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files

Interpret an Azure Resource Manager template or a Bicep file
Modify an existing Azure Resource Manager template
Modify an existing Bicep file
Deploy resources by using an Azure Resource Manager template or a Bicep file
Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file

3.2 Create and configure Virtual Machines

Create a Virtual Machine (Microsoft Documentation: Create a Windows virtual machine)
Configure Azure Disk Encryption (Microsoft Documentation: Create and encrypt a Windows virtual machine with the Azure portal)
Move a virtual machine to another resource group, subscription, or region (Microsoft Documentation: Move a Windows VM to another Azure subscription or resource group)
Manage virtual machines sizes (Microsoft Documentation: Sizes for virtual machines in Azure)
Add virtual machines disks
Deploy virtual machines to availability zones and availability sets
Deploy and configure an Azure Virtual Machines scale sets (Microsoft Documentation: Create a virtual machine scale set in the Azure portal)

3.3 Provision and manage containers in the Azure portal

Create and manage an Azure container registry
Provision a container by using Azure Container Instances
Provision a container by using Azure Container Apps
Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps

3.4 Create and configure Azure App Service

Provision an App Service plan
Configure scaling for an App Service plan
Create an App Service (Microsoft Documentation: App Service overview)
Configure certificates and Transport Layer Security (TLS) for an App Service
Map an existing custom DNS name to an App Service
Configure a backup for an App Service (Microsoft Documentation: Back up and restore your app in Azure App Service)
Configuring networking settings for an App Service (Microsoft Documentation: Configuring the Network)
Configure deployment slots for an App Service

Module 4: Understand about implementing and managing virtual networking (15–20%)

4.1 Configure and manage virtual networks in Azure

Create and configure virtual networks and subnets (Microsoft Documentation: Azure Virtual Network)
Create and configure virtual network peering (Microsoft Documentation: Virtual network peering)
Configure public IP addresses
Configure user-defined network routes (Microsoft Documentation: Virtual network traffic routing)
Troubleshoot network connectivity

4.2 Configure secure access to virtual networks

Create and configure network security groups (NSGs) and application security groups (Microsoft Documentation: Network security groups)
Evaluate effective security rules in NSGs (Microsoft Documentation: Effective security rules view in Azure Network Watcher)
Implement Azure Bastion (Microsoft Documentation: Azure Bastion)
Configure service endpoints for Azure platform as a service (PaaS)
Configure private endpoints for Azure PaaS(Microsoft Documentation: private endpoint)

4.3 Configure name resolution and load balancing

Configure Azure DNS
Configure an internal or public load balancer (Microsoft Documentation: Create an internal load balancer)
Troubleshoot load balancing (Microsoft Documentation: Troubleshoot Azure Load Balancer)

Module 5: Monitoring and Maintaining Azure resources (10-15%)

5.1 Monitor resources in Azure

Interpret metrics in Azure Monitor (Microsoft Documentation: Metrics in Azure Monitor)
Configure log settings in Azure Monitor (Microsoft Documentation: Azure Monitor Logs overview)
Query and analyze logs in Azure Monitor(Microsoft Documentation: Get started with log queries in Azure Monitor)
Set up alert rules, action groups, and alert processing rules in Azure Monitor (Microsoft Documentation: Create, view, and manage metric alerts using Azure Monitor)
Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights (Microsoft Documentation: VM insights)
Use Azure Network Watcher and Connection Monitor

5.2 Implement backup and recovery

Create a Recovery Services vault (Microsoft Documentation: Create and configure a Recovery Services vault)
Create Azure backup vault (Microsoft Documentation: Backup vaults overview)
Create and configure backup policy
Perform backup and restore operations by using Azure Backup (Microsoft Documentation: restore Azure VM data in Azure portal)
Configure Azure Site Recovery for Azure resources (Microsoft Documentation: Azure to Azure disaster recovery architecture)
Perform failover to a secondary region by using Site Recovery (Microsoft Documentation: Failover Azure VMs to a secondary region)
Configure and interpret reports and alerts for backups (Microsoft Documentation: Configure Azure Backup reports)

Microsoft AZ-104 Exam FAQs

Click Here for FAQs!

Microsoft Certification Exam Policies

To uphold the integrity and credibility of its certification program, Microsoft has implemented a comprehensive set of exam policies. These guidelines are in place to ensure that every candidate, whether testing online or at a certified testing center, experiences a consistent, fair, and secure examination process. The policies support the global standard of Microsoft certifications and help maintain trust in their value across industries.

Exam Retake Policy

Candidates who do not achieve a passing score on their first attempt must wait a minimum of 24 hours before rescheduling the exam. This short waiting period allows candidates to review their certification dashboard and choose a suitable date for the next attempt. For subsequent retakes (attempts two through five), a mandatory 14-day waiting period is enforced between each try. To maintain exam integrity, Microsoft limits candidates to five attempts within a 12-month rolling window, starting from the date of the first exam.

Rescheduling and Cancellation Guidelines

Microsoft offers flexible scheduling options for candidates needing to change or cancel their exam appointments. If a change is made at least six business days before the scheduled date, no additional fee is charged. However, if a rescheduling or cancellation request is submitted within five business days, a fee will be applied. Candidates who fail to appear for their exam or cancel less than 24 hours before the appointment will lose their full exam fee. In certain situations involving emergencies or accessibility needs, Microsoft may offer exceptions or waive fees based on the candidate’s specific circumstances.

Microsoft AZ-104 Exam Study Guide

1. Understand the Exam Objective

Understanding the exam objectives is a critical first step in preparing effectively for the Microsoft AZ-104: Azure Administrator certification. These objectives outline the key areas of knowledge and practical skills that the exam will assess, helping candidates focus their study efforts on the most relevant topics. By thoroughly reviewing each domain—such as managing Azure identities, configuring virtual networks, administering storage, and monitoring resources—candidates can identify their strengths and address any gaps in understanding. This targeted approach not only boosts confidence but also ensures efficient preparation aligned with the exam’s actual requirements. Familiarity with the objectives also enables candidates to anticipate the types of scenarios and tasks they may encounter, improving their readiness for both theoretical questions and hands-on components.

2. Use the Microsoft Official Learning Path

Utilizing the Microsoft Official Learning Path is one of the most effective ways to prepare for the AZ-104: Microsoft Azure Administrator exam. These structured learning modules are developed directly by Microsoft and align closely with the exam objectives, ensuring that candidates receive accurate and up-to-date information. The learning path is organized into logical sections that cover core topics such as Azure compute, networking, storage, identity, and governance. Each module includes a mix of conceptual explanations, guided exercises, and real-world examples to reinforce understanding. Whether you’re new to Azure or refining your existing skills, the official learning path provides a comprehensive foundation that supports both self-paced study and instructor-led training. The modules are:

3. Microsoft Documentation for Reference

Microsoft documentation offers in-depth, technically accurate, and regularly updated content straight from Microsoft, covering every Azure service and feature included in the exam. It serves as a reliable resource for understanding real-world implementation, configuration details, and best practices. Unlike study guides that may summarize information, the documentation provides comprehensive insights, command-line examples, troubleshooting steps, and links to related topics. Leveraging this resource helps candidates deepen their technical knowledge, stay current with platform changes, and gain the clarity needed to answer both conceptual and scenario-based exam questions with confidence.

4. Join Study Groups

Participating in study groups can significantly enhance your preparation for the AZ-104 exam. These groups provide a collaborative learning environment where candidates can share insights, discuss complex topics, and clarify doubts with peers who are also preparing for the same certification. Engaging in group discussions helps reinforce learning through different perspectives and encourages accountability in your study routine. Study groups can also provide motivation, exam tips, and access to additional resources that may not be easily found when studying alone.

5. Take AZ-104 Practice Tests

Taking practice tests is a powerful way to assess your readiness for the AZ-104 exam. These mock exams simulate the actual test environment, helping you become familiar with the question format, time constraints, and the types of scenarios you may encounter. Practice tests also help identify knowledge gaps, allowing you to focus your revision on weaker areas. Regularly testing yourself not only improves your confidence but also sharpens your time management and critical thinking skills, which are essential for successfully navigating the exam.