AZ-104
Microsoft Azure Administrator
Microsoft Azure Administrator Exam Guide: AZ-104 Preparation and Scheduling
Exam AZ-104 validates the practical administration of Microsoft Azure environments across identity, governance, storage, compute, networking, and monitoring. It is intended for Azure administrators and IT professionals who implement, manage, secure, and monitor cloud infrastructure. This guide helps you decide whether your current experience is sufficient, which skills to study first, how to use Microsoft’s preparation resources, and when to schedule the assessment.
What does AZ-104 validate?
AZ-104 tests whether you can administer the Azure services that support an organization’s infrastructure. Microsoft identifies the role as intermediate-level Azure administration, with responsibility for configuring, managing, securing, and monitoring resources rather than designing every part of an application or owning every specialist security, database, or DevOps function.
The relevant credential is Microsoft Certified: Azure Administrator Associate. The exam focuses on five practical areas: identities and governance, storage, compute resources, virtual networking, and monitoring and maintenance. The work commonly involves coordinating with networking, security, database, application development, and DevOps roles.
A useful readiness question is not “Have I watched enough training?” but “Can I select, configure, troubleshoot, and monitor the appropriate Azure resource for a stated operational requirement?” If you cannot explain why one service configuration is preferable to another, hands-on practice should take priority over additional passive reading.
Who is the intended candidate?
AZ-104 suits candidates who already understand core infrastructure concepts and want to demonstrate Azure administration skills. Microsoft’s audience profile names operating systems, networking, servers, and virtualization as relevant knowledge, alongside experience with Azure PowerShell, Azure CLI, the Azure portal, Azure Resource Manager templates or Bicep files, and Microsoft Entra ID.
The role is particularly relevant to system engineers, cloud technologists, IT operations professionals, and administrators responsible for provisioning or maintaining Azure resources. Microsoft also describes the administrator as someone who provisions, sizes, monitors, and adjusts resources as appropriate.
Do not treat the certification as a substitute for every prerequisite. If virtual machines, virtual networking, virtual hard disks, TCP/IP, DNS, VPNs, firewalls, encryption, Active Directory concepts, or backup and restore operations are unfamiliar, begin with infrastructure fundamentals before moving into exam-specific revision.
Microsoft’s prerequisite learning path covers basic Azure concepts and includes Azure Cloud Shell and Azure Resource Manager template work. Use it as a diagnostic: complete the relevant modules or review the underlying concepts before attempting to memorize service names and configuration choices.
Which skills are measured, and how should the weights affect study time?
Use the current Microsoft study guide as the controlling blueprint, because Microsoft updates exams to reflect role requirements. The study guide lists five assessed areas, and the published ranges indicate where a broad preparation plan should place its effort rather than providing a promise about the exact distribution of questions on a particular attempt.
Manage Azure identities and governance accounts for 20–25% of the exam, and deploy and manage Azure compute resources accounts for 20–25% of the exam. Implement and manage storage accounts for 15–20% of the exam, and implement and manage virtual networking accounts for 15–20% of the exam. Monitor and maintain Azure resources accounts for 10–15% of the exam.
These ranges support a sensible sequence: establish identity and governance, study compute, then cover storage and networking, while keeping monitoring and maintenance active throughout. The smaller published range for monitoring does not make it optional; operational questions often depend on knowing how resources are observed, protected, and maintained.
The study guide states that most questions cover generally available features, although commonly used preview features may also appear. Check the current skills-measured version before final revision, especially if your study material was created earlier. Microsoft updates the English exam first, and localized versions may not always follow the expected update schedule.
How should you prepare for identity and governance?
Begin with the access path: identify the person or workload, determine the required scope, assign the least privilege that meets the task, and apply governance controls that keep the environment within organizational standards. This sequence is more useful than learning Microsoft Entra ID, Azure RBAC, subscriptions, and Azure Policy as disconnected topics.
Microsoft’s identity and governance learning path covers Microsoft Entra ID, identity management, Azure RBAC, subscriptions, governance, and Azure Policy initiatives. Its Exam Readiness Zone episode breaks this domain into managing Entra ID users and groups, managing access to Azure resources, and managing subscriptions and governance.
For practical study, create small scenarios and explain each decision. For example, distinguish an identity-directory problem from an Azure-resource authorization problem. Then decide where a control belongs: at a management-group, subscription, resource-group, or resource scope. Record the reason for the scope, not just the command or portal sequence.
A common mistake is treating authentication and authorization as interchangeable. Another is granting a broad role because it is quick. During practice, ask what the user or workload must do, where it must do it, and how the assignment or policy could affect other resources.
How should you study storage, compute, and networking together?
Study these domains as an operating system for an application rather than as isolated product lists. A realistic exercise might require storage for data, compute for a workload, networking for connectivity and traffic control, and monitoring to verify that the result works. This forces you to connect configuration choices with operational consequences.
Microsoft’s AZ-104 course covers storage solutions, virtual machines, web apps, containers, virtual networking, connections between Azure and on-premises sites, network traffic management, backup, and monitoring. The training sequence can therefore serve as a backbone for lab work, provided you verify each topic against the current study guide.
For storage, practise choosing and configuring an appropriate storage arrangement, controlling access, and considering how data protection or sharing requirements change the design. For compute, practise deploying, sizing, scaling, and managing virtual machines, web apps, and containers. For networking, practise addressing, segmentation, name resolution, connectivity, traffic control, and troubleshooting.
Avoid learning a portal path without understanding the resource relationship behind it. If you can deploy a virtual machine but cannot explain its network interface, subnet, address, access controls, and monitoring signals, your preparation is incomplete. Repeat the same task through the portal and one command-line or template-based method where the learning material supports it.
What hands-on lab pattern gives the best return?
A short, repeatable lab is more valuable than an oversized environment that you never inspect. Start with a stated requirement, deploy only the necessary resources, test the result, introduce one controlled fault or policy constraint, diagnose the outcome, and remove the resources. This builds administration judgment without relying on remembered screenshots.
Use Microsoft’s available Azure learning resources and the account option linked from the prerequisite paths. Microsoft presents pay-as-you-go and an Azure free option, but costs and eligibility can vary, so review the current terms before creating resources. Set a personal cleanup checklist before every lab and confirm that no unneeded resources remain.
A useful lab record has four fields: objective, configuration choices, validation evidence, and cleanup. Add a fifth field for the failure you observed. Examples include an access assignment at the wrong scope, a network rule that blocks intended traffic, an incorrectly sized compute resource, or a monitoring alert that does not reflect the actual condition.
Do not turn labs into a race to deploy everything. The exam measures administration decisions, and deliberate comparison is the point. After completing a task, change one variable and predict the effect before testing it. This is especially useful for permissions, network paths, scaling behavior, storage access, and policy compliance.
Which official learning resources should you use?
Use the Microsoft study guide to define scope, Microsoft Learn paths to build knowledge, and labs or exercises to convert that knowledge into decisions. The official AZ-104 series includes prerequisite, identity and governance, storage, compute, virtual networking, and monitoring and backup paths, giving self-directed candidates a coherent route through the blueprint.
The prerequisite path contains two modules and introduces Azure fundamentals, Cloud Shell, and Azure Resource Manager templates. The identity and governance path contains six modules and covers Entra ID, access, subscriptions, policy, and RBAC. These pages are useful starting points, but the current exam guide remains the authority when a learning module and blueprint appear to differ.
Microsoft also lists AZ-104T00-A, Microsoft Azure Administrator, as instructor-led or self-directed training. The course is listed with a 4-day duration and covers subscriptions, identities, infrastructure, virtual networking, storage, virtual machines, web apps, containers, backup, and monitoring. A scheduled course can provide structure; it does not remove the need for individual practice.
Use the Exam Readiness Zone material to check your interpretation of the domains. The identity and governance episode explicitly maps that group to 20–25% of the questions you might encounter. Treat videos as explanations and orientation, not as a replacement for the study guide, labs, or current product documentation.
How can you measure readiness without memorizing answers?
Microsoft provides a practice assessment and an exam sandbox from the certification page. Use the practice assessment to discover weak domains and the sandbox to become familiar with the interface and question types. Neither resource should be treated as a source of live exam questions or as proof that memorized responses will transfer to new scenarios.
After each practice session, classify every missed or uncertain item. Label it as a terminology gap, configuration gap, scope or security mistake, troubleshooting mistake, or reading mistake. Then return to the relevant Microsoft learning material and reproduce the underlying task in a lab where possible.
The current study guide states that a score of 700 or greater is required to pass. That threshold is an official scoring requirement, not a recommended practice-test target or a guarantee. Use several independent checks: can you explain the choice, perform the task, diagnose a failure, and identify the least disruptive corrective action?
A weak preparation pattern is repeatedly taking practice questions until the wording becomes familiar. A stronger pattern is to hide the answer, explain your reasoning, identify the requirement that drives it, and then test the configuration. Keep an error log and revisit it near the end of each study cycle.
What study roadmap should you follow?
A practical roadmap has four stages: baseline, core administration, integrated scenarios, and final verification. The order matters because later troubleshooting work depends on understanding identity, resource organization, networking, and service behavior. Adjust the pace to your background, but do not skip the baseline simply because you have used the Azure portal before.
Stage one is a baseline review. Read the current skills measured, assess the prerequisite concepts, and identify the Azure tools you can actually use. If you cannot confidently explain subscriptions, resource groups, Entra ID, RBAC, virtual networks, storage, virtual machines, and monitoring, begin with the prerequisite path.
Stage two follows the largest published domains first: identities and governance, then compute, followed by storage and networking. For every topic, combine a Microsoft Learn module with a small implementation task and a written explanation of the design. Include portal work, command-line exposure, and template or Bicep awareness where relevant to your experience.
Stage three integrates the domains. Build or sketch a workload, assign access, apply governance, deploy compute, connect storage, configure network controls, and add monitoring or backup. Remove unnecessary resources and document what you would investigate if the workload failed. This stage reveals gaps that domain-by-domain study can conceal.
Stage four is verification. Re-read the current study guide, review your error log, complete the official practice assessment, explore the sandbox, and revisit only the weak areas. Avoid beginning an unfamiliar broad course immediately before the appointment; use the final review to consolidate decisions and terminology.
What mistakes commonly weaken AZ-104 preparation?
The most damaging mistakes are broad but shallow coverage, dependence on portal memorization, ignoring governance, and postponing troubleshooting. Candidates often learn how to create a resource while overlooking identity scope, network dependencies, monitoring signals, backup implications, and cleanup. Preparation should repeatedly connect a requested outcome to the controls and services that produce it.
Do not study only the domain that matches your current job. Production experience with virtual machines does not automatically cover Entra ID, policy, storage access, virtual networking, or Azure monitoring. Use the published domain ranges to protect study time for unfamiliar areas while preserving enough lab time to make those areas concrete.
Do not assume a command is correct because it looks familiar. Verify the target subscription, resource group, region, scope, dependency, and resulting state. When a task fails, read the error and inspect the resource relationship rather than deleting everything and starting again.
Do not rely on old AZ-103 material without checking it against the current AZ-104 study guide. Microsoft says exams are updated periodically, and the study guide provides versions of the skills measured according to when the candidate takes the exam. Historical announcements about the earlier exam, beta offers, or retired versions are not current preparation instructions.
What are the current delivery and scheduling details?
The certification page states that AZ-104 is a proctored assessment with 100 minutes to complete it. Microsoft says certification exams can generally be taken online or at a local test center, subject to provider availability. Choose the environment you can verify in advance rather than assuming that every appointment offers every delivery option.
Schedule through the certification page’s Pearson VUE option unless your situation specifically calls for another provider. Microsoft recommends registering with a personal Microsoft account because records associated with an organizational work or school account may be lost if you leave that organization. Ensure the legal name in your Learn profile matches your legal identification.
Microsoft states that exams may be scheduled no more than 90 days in advance. You can have a maximum of two Microsoft Certification exams scheduled at a time through Pearson VUE under the policy described on the registration page. Check the current scheduling page for appointment availability and policy details before choosing a date.
For online delivery, run the provider’s system pre-check and verify the testing area against the current requirements. If the online option does not appear, Microsoft says it is not available from the exam provider for that appointment. A test center may be preferable if your computer, connection, or testing space is difficult to validate.
If you need accommodations, request them before scheduling so the provider has time to review the request. The certification page lists the available languages, while the study guide notes that language availability and localized updates should be checked in the Schedule Exam section. If the exam is not available in your preferred language, Microsoft says you can request an additional 30 minutes.
How should you handle the appointment and a retake decision?
Book only after your study process has produced evidence of readiness, but do not wait for a feeling of certainty that can never be measured. Select a date that gives you time to complete integrated labs, review the study guide, and resolve recurring errors. Confirm the appointment details, delivery method, language, account, and accommodation status.
Before scheduling, complete the system check if you plan to test online, explore the exam sandbox, and decide whether a local test center would reduce technical risk. Keep the official registration page available because provider rules, appointment availability, and delivery options are operational details rather than study topics.
If you do not pass, Microsoft’s certification page states that you can retake the exam 24 hours after the first attempt; subsequent retake timing varies. Use the score report and your error log to identify the weak domains. A retake should follow targeted remediation, not an unchanged repetition of the same study routine.
Do not use exam dumps, leaked questions, or memorization services as a preparation strategy. They do not develop the administration judgment the blueprint describes and may violate exam rules. Build transferable skill by learning why a configuration meets a requirement and how to verify it.
How do you maintain the certification after passing?
Passing AZ-104 is not the end of the learning cycle because Azure services and role expectations change. Microsoft lists a 12-month renewal frequency for the certification and says role-based and specialty certifications can be renewed by passing a free online assessment on Microsoft Learn. Track the renewal requirement through your Learn profile rather than relying on an old calendar entry.
Keep your notes organized by capability instead of by course chapter. A useful maintenance file records changes to identity, governance, storage, compute, networking, monitoring, and backup practices, along with the date you verified them against Microsoft Learn. This makes future renewal study more focused and keeps operational knowledge connected to the role.
Review the certification page and study guide when planning renewal or future exam work. Microsoft updates exam content periodically, and the study guide identifies the skills-measured version and language-update caveats. Treat current official material as the decision point whenever older notes, videos, or practice resources disagree.
What should you do next?
Start by opening the current AZ-104 study guide and marking each skill as demonstrated, familiar, or unknown. Then choose the official learning path that addresses your weakest prerequisite or domain, create a small lab objective, and schedule a review point after you can explain and verify the result. This turns preparation into a sequence of decisions rather than a collection of bookmarks.
If your baseline is weak, work through the prerequisite learning before attempting full practice assessments. If your fundamentals are solid, begin with identity and governance, then compute, storage, networking, and monitoring while integrating the domains in labs. Use the practice assessment and sandbox only after you have built enough context to learn from their feedback.
When you are ready to book, use the certification page and Pearson VUE scheduling flow, confirm the delivery conditions, and protect the appointment with a final review of your error log. After passing, connect the credential to your personal Learn profile and monitor the renewal information shown by Microsoft.
Conclusion
AZ-104 preparation is strongest when it mirrors the administrator’s real responsibility: establish controlled access, deploy and manage resources, connect services, observe behavior, and correct problems. Use the current blueprint to allocate attention, Microsoft Learn to structure study, hands-on work to test decisions, and the official scheduling pages to verify delivery details. The next useful action is a skills-gap review followed by one deliberately scoped lab.
Related exams
- AZ-120 exam — Planning and Administering Microsoft Azure for SAP Workloads
- AZ-140 exam — Configuring and Operating Windows Virtual Desktop on Microsoft Azure
- AZ-305 exam — Designing Microsoft Azure Infrastructure Solutions
- AZ-400 exam — Microsoft Azure DevOps Solutions
- AZ-500 exam — Microsoft Azure Security Technologies
- AZ-700 exam — Designing and Implementing Microsoft Azure Networking Solutions