Microsoft Azure Administrator Certification

Certification guide

AZ-104: Microsoft Azure Administrator is the associate-level credential for the people who actually run an Azure environment day to day — the administrators who create the identities, assign the access, deploy the virtual machines, wire up the networks, secure the storage, and keep the whole estate monitored and backed up. Passing it earns the Microsoft Certified: Azure Administrator Associate title, the natural step up from AZ-900 fundamentals and the working prerequisite mindset for architect-track exams like AZ-305.

The exam assumes hands-on fluency, not just portal familiarity. Microsoft’s audience profile expects working knowledge of operating systems, networking, servers, and virtualization, plus real experience with PowerShell, the Azure CLI, ARM templates and Bicep, and Microsoft Entra ID. The most recent outline refresh (April 17, 2026) was a minor one — small refinements to VM configuration, container provisioning, networking, and monitoring topics, with no structural change to the five domains or their weightings.

~40–60 questions 100–120 min 700 / 1000 scaled $165 USD Pearson VUE Annual free renewal 5 domains

Manage Azure identities and governance

Domain 1 · 20–25%

Microsoft Entra users, groups, licenses, external users, and self-service password reset; Azure RBAC built-in roles, assignment scopes, and interpreting effective access; and subscription governance — Azure Policy, resource locks, tags, management groups, and cost control through budgets, alerts, and Advisor recommendations.

Implement and manage storage

Domain 2 · 15–20%

Securing access with storage firewalls, virtual network rules, SAS tokens, stored access policies, access keys, and identity-based access for Azure Files; configuring storage accounts, redundancy options, object replication, and encryption; and managing blobs and file shares — tiers, soft delete, snapshots, versioning, and lifecycle management — with Storage Explorer and AzCopy.

Deploy and manage Azure compute resources

Domain 3 · 20–25%

Automating deployment with ARM templates and Bicep; creating and operating virtual machines — encryption at host, moves, sizing, disks, availability zones and sets, and Virtual Machine Scale Sets; provisioning containers with Azure Container Registry, Container Instances, and Container Apps; and configuring App Service plans, scaling, certificates, custom DNS, and deployment slots.

Implement and manage virtual networking

Domain 4 · 15–20%

Virtual networks, subnets, and peering; public IPs and user-defined routes; securing access with network security groups, application security groups, Azure Bastion, service endpoints, and private endpoints; plus Azure DNS, internal and public load balancers, and connectivity troubleshooting.

Monitor and maintain Azure resources

Domain 5 · 10–15%

Azure Monitor metrics, logs, and KQL queries; alert rules, action groups, and alert processing rules; Insights, Network Watcher, and Connection Monitor; and protection — Recovery Services vaults, backup policies, restores, and regional failover with Azure Site Recovery.

Our practice exams mirror this structure. Every attempt draws questions weighted to the official outline — identities/governance and compute together carry roughly half the exam, exactly as they do on test day — and every question carries a full explanation, so a wrong answer becomes a study note instead of a mystery.

Microsoft scores AZ-104 on a scaled 100–1000 basis with a cut score of 700 — which is not a raw 70%, because harder question forms carry different weight. We set the practice pass mark at 70% as an honest proxy: if you can clear 70% here consistently, across every domain rather than by leaning on your strong areas, you’re performing at the level the scaled cut demands.

Microsoft AZ-104 - Practice Exam

Full-length Microsoft Azure Administrator (AZ-104) practice exam. 60 original questions weighted to the official skill outline across identities and governance, storage, compute, virtual networking, and monitoring,…

60 questions 120 min pass 70%
Subscribe to start

Trademark notice & independence. Certifym is an independent study resource and is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft®, Azure®, Microsoft Entra™, and AZ-104 are trademarks or registered trademarks of Microsoft Corporation. Use of these marks is solely to identify the certification for which these study materials are intended. The AZ-104 study guide and its skill outline are the property of Microsoft Corporation; candidates should review the official, current study guide directly on Microsoft Learn.

All questions, answers, and explanations on Certifym are original content created for practice purposes. They are not actual Microsoft examination questions and are not represented as such. Practicing with these materials does not guarantee a passing result on any live certification exam. Exam requirements, format, domain weights, pricing, and renewal policies are set by Microsoft and may change; always verify current details on Microsoft Learn before scheduling your exam.