The Microsoft Azure Administrator certification (AZ-104) is one of the most respected and sought-after credentials in cloud computing. Whether you're an IT professional transitioning to the cloud or a seasoned admin looking to formalize your Azure skills, passing this exam proves you can manage Azure's core services — identity, storage, compute, networking, and monitoring.

This guide covers everything you need to know to prepare for and pass the AZ-104 exam with confidence.

What Is AZ-104?

AZ-104 replaces the older AZ-103 exam and serves as the Microsoft Azure Administrator certification. It's designed for professionals who implement, manage, and monitor an organization's Azure environment. Candidates should have at least six months of hands-on experience administering Azure, plus a solid understanding of core Azure services, Azure Portal, Azure CLI, Azure PowerShell, and ARM templates.

Unlike foundational exams (like AZ-900), AZ-104 is an associate-level exam that demands practical, scenario-based knowledge. You won't just memorize facts — you need to make architectural decisions, troubleshoot deployments, and optimize costs.

The 5 Exam Domains (With Weightages)

The AZ-104 exam is divided into five domains. Understanding these weightages helps you allocate study time effectively:

1. Manage Azure Identities and Governance (20%)

This domain covers Entra ID (formerly Azure Active Directory), RBAC, Azure Policy, management groups, and subscriptions. You'll need to:

Manage Microsoft Entra ID users, groups, and devices
Configure role-based access control (RBAC) — know the difference between built-in roles like Owner, Contributor, and Reader
Create and assign Azure Policy initiatives and definitions
Organize resources with management groups and subscriptions
Implement Azure Blueprints for repeatable environments

Key services: Microsoft Entra ID (formerly Azure AD), Azure RBAC, Azure Policy, Azure Blueprints, Management Groups

2. Implement and Manage Storage (15%)

Azure Storage is the backbone of most Azure workloads. Expect questions on:

Configuring Blob storage tiers (Hot, Cool, Cold, Archive) and access tiers
Managing Azure Files shares and File Sync
Implementing Azure Storage security — shared access signatures (SAS), access keys, managed identities
Configuring storage replication: LRS, GRS, RA-GRS, ZRS, GZRS, and RA-GZRS
Setting up Azure Storage encryption (Azure SSE, customer-managed keys)

Key services: Azure Blob Storage, Azure Files, Azure Storage Explorer, Storage Accounts

3. Deploy and Manage Azure Compute Resources (25%)

The largest domain by weight — compute is where much of the action happens. Focus on:

Creating and configuring Azure Virtual Machines (VMs) — sizes, disks, extensions
Implementing availability zones vs. availability sets (a common trap!)
Deploying and managing Azure App Service plans and web apps
Configuring Azure Container Instances (ACI) and Azure Kubernetes Service (AKS)
Managing VM backups with Azure Backup and disaster recovery with Azure Site Recovery
Understanding VM scale sets and autoscaling

Key services: Azure VMs, Virtual Machine Scale Sets, App Service, AKS, Azure Container Instances

4. Configure and Manage Virtual Networking (25%)

Tied with compute for the highest weight, this is where many candidates stumble. Master these topics:

Creating and configuring virtual networks (VNets) and subnets — IP addressing, CIDR
Implementing VNet peering and gateway transit
Configuring private and public DNS
Setting up load balancers (Azure Load Balancer, Application Gateway, Traffic Manager)
Configuring network security groups (NSGs) and application security groups (ASGs)
Deploying VPN gateways and ExpressRoute
Understanding service endpoints and private endpoints

Key services: Azure Virtual Network, Load Balancer, Application Gateway, VPN Gateway, Azure DNS, NSGs

5. Monitor and Maintain Azure Resources (15%)

The smallest domain but still critical. Know how to:

Monitor Azure resources with Azure Monitor, Log Analytics, and Application Insights
Configure alerts and action groups
Implement Azure Backup and disaster recovery
Optimize costs with Advisor recommendations
Use Azure Resource Graph and Resource Explorer

Key services: Azure Monitor, Log Analytics, Application Insights, Azure Backup, Azure Advisor

Recommended Study Approach (8-10 Weeks)

AZ-104 requires a disciplined, multi-phase study plan. Here's a proven timeline:

Weeks 1-2: Foundation and Identity

Read Microsoft's official AZ-104 learning path on Microsoft Learn
Set up an Azure free account ($200 credit) for hands-on labs
Focus on Entra ID, RBAC, and Azure Policy
Create users, groups, and custom roles in your lab tenant

Weeks 3-4: Storage and Compute

Deploy VMs — try different sizes, configure managed disks, set up extensions
Create storage accounts, upload blobs, configure replication, test SAS tokens
Experiment with Azure Files and File Sync
Build your first App Service web app

Weeks 5-6: Networking

Design and deploy a multi-subnet VNet
Peer two virtual networks and test connectivity
Set up a load balancer and distribute traffic
Configure NSG rules and ASGs
Build a site-to-site VPN (even just in-lab)

Week 7: Monitoring and Maintenance

Set up Azure Monitor and Log Analytics workspaces
Configure alerts for VM CPU, storage quotas, and network drops
Test Azure Backup on a virtual machine
Use Azure Advisor to identify cost-saving recommendations

Weeks 8-10: Practice, Review, and Exam Prep

Take AZ-104 practice questions daily — focus on scenario-based questions
Review weak areas using domain weightages
Run through Microsoft's official labs end-to-end
Time yourself on full practice exams to build pacing
Revisit common traps and gotchas (see below)

Common Traps and Gotchas

These are the questions that trip up even experienced Azure admins:

RBAC vs. Azure Policy

This is the #1 confusion point. RBAC controls who can do what (permissions for users/groups). Azure Policy enforces what resources are allowed (rules and compliance). Example: RBAC lets a user create a VM; Azure Policy ensures that VM is always deployed in a specific region.

Storage Replication Options

Memorize the replication options and when to use each:

LRS — three copies in a single datacenter (cheapest, lowest durability)
ZRS — synchronous replication across three availability zones
GRS — LRS in primary region + LRS in secondary region (async)
RA-GRS — same as GRS but supports read access in secondary region
GZRS — ZRS in primary + LRS in secondary (best durability)
RA-GZRS — same as GZRS with read access in secondary

The exam loves asking which replication option to use for specific scenarios involving cost, durability, and failover requirements.

Availability Zones vs. Availability Sets

Availability Zones — physically separate datacenters within a region (zone-redundant). Requires at least two zones. Offers 99.99% SLA.
Availability Sets — logical groups within a single datacenter (fault domains + update domains). Protects against hardware failure and maintenance within one zone. Offers 99.95% SLA.

Know when to choose one over the other. Zones offer higher resilience but aren't available in all regions.

NSG vs. ASG

NSG — a traffic filter attached to subnets or NICs, rules defined by IP addresses and ports
ASG — logical grouping of VMs, referenced in NSG rules instead of IPs (easier management at scale)

You configure ASGs alongside NSGs — they're not alternatives.

VM Sizes Confusion

The exam expects you to know major VM series: General purpose (B, Dsv3, Dasv4), Compute optimized (Fsv2), Memory optimized (Esv3, Easv4), Storage optimized (Lsv2). Each series has specific strengths — know which to use for web servers, databases, batch processing, etc.

Hands-On Lab Recommendations

Theory alone won't pass AZ-104. You need real Azure experience. Here are the best ways to get it:

Microsoft Learn Sandbox — Free, time-limited Azure environments for official modules. Perfect for following structured labs.
Azure Free Account — Sign up for a free account with $200 credit (valid 30 days). Use it to build and destroy resources freely.
GitHub Labs for AZ-104 — Microsoft's official lab repository. Clone it and work through the exercises on your own Azure subscription.
Custom Scenarios — Beyond the labs, build your own projects:
- Deploy a two-tier web application (VMs + SQL Database)
- Migrate on-premises files to Azure Files
- Set up a hub-spoke network topology with VNet peering
- Configure autoscaling for a web app under load

Exam Day Tips

Time management: You have 120 minutes for ~40-60 questions, including case studies. Don't spend more than 2 minutes per question. Flag hard ones and come back.
Case studies first or last? Some candidates prefer doing case studies first (while fresh), others leave them for last. Pick what works for your pace.
Read carefully: Many questions present a scenario with specific requirements (cost, SLA, region). One changed word can flip the correct answer.
Elimination strategy: AZ-104 answers often have two very similar options and two clearly wrong ones. Eliminate the obvious wrong ones first, then reason through the remaining pair.
Revisit flagged questions: Use your review time wisely. If you're unsure, trust your first instinct unless you find a clear error.

Start Your AZ-104 Journey Today

Passing the AZ-104 exam is a significant career milestone. It validates that you can handle real-world Azure administration — and employers know it. With the right study plan, consistent hands-on practice, and high-quality practice questions, you can pass on your first attempt.

Ready to test your knowledge? Try AZ-104 practice questions on Certeli — realistic scenarios, detailed explanations, and progress tracking to identify your weak spots before exam day. Whether you're looking for AZ-104 practice questions or a full Azure Administrator exam prep plan, Certeli has the resources you need to succeed.