Question 1 of 20 Domain
0%

Exam Complete!

You answered 0 out of 20 questions correctly

Ready for the Complete Exam?

Get access to all 1,020 practice questions with detailed explanations

About the Azure AZ-104 Exam

The Microsoft Azure Administrator Associate (AZ-104) exam validates your hands-on expertise in implementing, managing, and monitoring an organization's Azure environment—including virtual networks, storage, compute resources, identities, and security. Unlike the foundational AZ-900, which covers cloud concepts broadly, AZ-104 expects practical experience deploying Azure resources, configuring role-based access control (RBAC), and troubleshooting Azure services in production scenarios. This Associate-level certification targets IT professionals responsible for day-to-day Azure administration tasks such as provisioning VMs, managing Azure AD users, and optimizing resource costs.

The exam consists of 40-60 questions (including case studies, multiple-choice, and interactive lab simulations) to be completed in 120-180 minutes, with a passing score of 700 out of 1000. The exam costs $165 USD and certifications remain valid for one year (Microsoft changed from two-year validity in 2023—you must renew annually via free online assessments). Microsoft recommends at least 6 months of hands-on experience managing Azure resources before attempting AZ-104. After earning AZ-104, administrators typically pursue the Azure Solutions Architect Expert (AZ-305) or specialize with Azure Security Engineer (AZ-500).

Exam Domains and Weighting:

  • Domain 1: Manage Azure identities and governance (20-25%) - Azure Active Directory (users, groups, administrative units), RBAC (role assignments, custom roles, scope), Azure Policy (compliance enforcement, policy definitions), subscriptions and resource groups (management groups, cost analysis, Azure Advisor recommendations)
  • Domain 2: Implement and manage storage (15-20%) - Storage accounts (redundancy options: LRS, ZRS, GRS, RA-GRS), Blob storage (access tiers: Hot, Cool, Archive), Azure Files (SMB shares, file sync), storage security (shared access signatures, stored access policies, encryption), Azure Backup and Site Recovery
  • Domain 3: Deploy and manage Azure compute resources (20-25%) - Virtual Machines (sizing, availability sets, scale sets, disk configuration), Azure App Service (web apps, deployment slots, app settings), Azure Container Instances and Azure Kubernetes Service (AKS basics), VM extensions and custom script extensions
  • Domain 4: Implement and manage virtual networking (15-20%) - Virtual Networks (VNets, subnets, IP addressing: static vs. dynamic), Network Security Groups (NSGs, security rules), Azure Load Balancer and Application Gateway, VNet peering and VPN Gateway (site-to-site, point-to-site), Azure DNS and private endpoints
  • Domain 5: Monitor and maintain Azure resources (10-15%) - Azure Monitor (metrics, logs, alerts), Log Analytics workspaces and KQL queries, Azure Network Watcher (connection troubleshoot, packet capture), Azure Service Health and Resource Health, backup and restore operations

AZ-104 emphasizes practical hands-on administration—expect interactive lab simulations where you configure Azure resources directly in the Azure Portal during the exam, not just answer theory questions. The exam tests real-world troubleshooting scenarios like diagnosing VM connectivity issues using Network Watcher, configuring RBAC to grant least-privilege access, and optimizing storage costs by implementing lifecycle policies. Before attempting AZ-104, ensure you're comfortable navigating the Azure Portal, using Azure CLI/PowerShell commands, and interpreting Azure Monitor metrics and logs.

Why Take This Certification?

  • Strong Entry-Level Azure Salaries: Azure Administrators earn average salaries of $95,000 USD annually (Salary.com 2024), with experienced administrators in enterprise environments earning $110,000-$120,000. AZ-104 certification commands 10-15% higher compensation than non-certified Azure admins because it proves hands-on skills in RBAC configuration, VNet implementation, and Azure Monitor troubleshooting—practical expertise employers verify before hiring.
  • High Demand in Enterprise Migration Projects: 78% of Fortune 500 companies use Microsoft Azure (Microsoft 2024), creating massive demand for administrators who can manage hybrid cloud environments integrating on-premises Active Directory with Azure AD. Organizations migrating from on-premises to Azure specifically seek AZ-104 certified professionals who understand VNet peering, VPN gateways, and Azure Site Recovery—skills critical for lift-and-shift migration projects.
  • Gateway to Azure Career Paths: AZ-104 opens roles as Azure Administrator, Cloud Operations Engineer, and Infrastructure Specialist. This certification establishes foundational Azure knowledge required for advanced certifications like AZ-305 (Solutions Architect Expert), AZ-500 (Security Engineer), or AZ-400 (DevOps Engineer)—creating clear progression paths toward senior cloud architecture and engineering positions earning $130,000-$150,000+.
  • Master Practical Azure Administration: Unlike AZ-900 which covers theoretical cloud concepts, AZ-104 validates hands-on skills managing real Azure environments—deploying VMs with availability sets, configuring NSG security rules, implementing Azure Backup policies, and troubleshooting connectivity with Network Watcher. You'll gain expertise in Azure Portal, Azure CLI, and PowerShell automation that directly translates to daily Azure administration tasks, making you immediately productive in Azure operations roles.

What You'll Learn in the Azure AZ-104 Exam

The Azure Administrator Associate exam covers comprehensive Azure services and management tools for administering cloud infrastructure in production environments. Unlike AZ-900 which introduces cloud concepts conceptually, AZ-104 dives into hands-on configuration of Azure resources, RBAC security, virtual networking architecture, and cost optimization strategies—the practical skills IT professionals need to manage Azure environments for organizations of all sizes.

Core Azure Services

  • Identity & Governance: Azure Active Directory (user and group management, administrative units), role-based access control (built-in roles vs. custom roles, scope: subscription, resource group, resource), Azure Policy (compliance enforcement, policy definitions, initiatives), management groups (hierarchical organization of subscriptions), Azure Cost Management (cost analysis, budgets, recommendations)
  • Storage Solutions: Storage accounts (performance tiers: Standard vs. Premium, redundancy options: LRS, ZRS, GRS, RA-GRS), Blob storage (access tiers: Hot, Cool, Archive, lifecycle management policies), Azure Files (SMB file shares, Azure File Sync for hybrid scenarios), storage security (shared access signatures with expiration, stored access policies, encryption at rest and in transit)
  • Compute Resources: Virtual Machines (VM sizing families: general purpose, compute optimized, memory optimized, availability sets vs. availability zones, VM scale sets for auto-scaling), managed disks (OS disks, data disks, disk encryption), Azure App Service (web apps, deployment slots for staging/production, app settings and connection strings), containers (Azure Container Instances, AKS basics)
  • Networking: Virtual Networks (VNets, subnets, IP addressing schemes), Network Security Groups (inbound/outbound security rules, service tags, ASGs), Azure Load Balancer (basic vs. standard SKU, backend pools, health probes), Application Gateway (layer-7 load balancing, WAF), VNet peering (local vs. global), VPN Gateway (site-to-site, point-to-site, ExpressRoute basics), Azure DNS and private endpoints
  • Monitoring & Backup: Azure Monitor (metrics, logs, action groups), Log Analytics workspaces (KQL queries for log analysis), Azure Alerts (metric alerts, log search alerts), Network Watcher (connection troubleshoot, IP flow verify, packet capture), Azure Backup (vault configuration, backup policies for VMs and Azure Files), Azure Site Recovery (disaster recovery configuration)

Key Administration Concepts & Patterns

  • Implementing least-privilege access using RBAC with custom role definitions, assigning roles at appropriate scopes (subscription, resource group, resource)
  • Designing resilient VM deployments using availability sets (protect against rack failures within datacenter) or availability zones (protect against datacenter failures within region)
  • Optimizing storage costs with Blob lifecycle management policies that automatically transition blobs from Hot to Cool to Archive tiers based on last-modified timestamps
  • Configuring hybrid connectivity between on-premises networks and Azure VNets using VPN Gateway (site-to-site IPsec tunnels) or ExpressRoute (dedicated private connections)
  • Troubleshooting network connectivity issues using Network Watcher tools: connection troubleshoot (diagnose VM-to-VM connectivity), IP flow verify (test NSG rule evaluation), packet capture (deep packet inspection)
  • Implementing disaster recovery strategies with Azure Backup for file-level recovery and Azure Site Recovery for full VM failover to secondary Azure regions

How to Prepare for the Azure AZ-104 Exam

Azure Administrator Associate certification requires both theoretical knowledge of Azure services AND practical hands-on experience managing Azure resources. Microsoft's exam includes interactive lab simulations where you perform actual Azure Portal tasks during the exam—you can't pass by memorizing theory alone. Microsoft recommends at least 6 months of hands-on Azure administration experience before attempting AZ-104.

  1. Study Azure Services and Fundamentals (3-4 weeks): Download the official Microsoft AZ-104 exam guide and systematically study all five domains. Focus on services most heavily tested: Azure AD and RBAC configuration (identity and governance domain), VNet and NSG design (networking domain), VM deployment and scaling (compute domain), storage account configuration and redundancy options (storage domain), and Azure Monitor with Log Analytics (monitoring domain). Use Microsoft Learn's official AZ-104 learning paths which provide free structured training modules aligned with exam objectives.
  2. Hands-On Lab Practice (4-6 weeks): Create a free Azure account (12 months of free tier services + $200 credit for 30 days) and implement realistic scenarios: deploy VMs with availability sets and configure auto-scaling with VM scale sets, create VNets with subnets and implement VNet peering between regions, configure NSG rules to allow specific traffic and test with Network Watcher, implement RBAC by creating custom roles and assigning them at resource group scope, set up Azure Backup for VMs and practice restore operations, configure Azure Monitor alerts to trigger when VM CPU exceeds thresholds. The exam heavily tests hands-on skills via interactive lab simulations—practice performing tasks in the Azure Portal (not just Azure CLI) because you'll need to navigate the Portal during the exam.
  3. Master Azure CLI and PowerShell Basics (1-2 weeks): While most exam questions use Azure Portal screenshots, you should understand basic Azure CLI and PowerShell commands for resource management: creating VMs (`az vm create`), managing RBAC (`az role assignment create`), configuring storage (`az storage account create`), and querying resources (`az resource list`). Practice common automation scenarios like deploying resources via ARM templates (JSON) or Bicep (Microsoft's newer IaC language), as the exam tests understanding of declarative infrastructure deployment patterns.
  4. Practice Exams and Final Review (1-2 weeks): Take timed practice exams to simulate the actual 120-180 minute testing experience. The official Microsoft practice exam ($99 USD, includes retake) provides the most realistic difficulty level and question formats, including case studies and lab simulations. Focus on scenario-based questions where multiple answers seem correct but only one fully satisfies the requirements (e.g., "most cost-effective solution" vs. "highest availability solution"). Review incorrect answers carefully to understand why—explanations often reveal gaps in understanding of service limits, SKU differences (Basic vs. Standard load balancer), or RBAC scope hierarchies.

Schedule your exam once you consistently score 80%+ on practice exams and feel confident navigating the Azure Portal for common administration tasks. The AZ-104 exam costs $165 USD with certification valid for one year (renew annually via free online assessment). After passing, you'll receive a digital badge, exam score report, and access to the Microsoft Certified community with exclusive benefits (exam discounts, Azure credits for labs, priority support).

Frequently Asked Questions

No. All Nex Arc practice questions are original content created by certified professionals based on official exam guides and publicly available documentation. We do not offer brain dumps, leaked questions, or actual exam content. Using or distributing real exam questions violates certification provider agreements and can result in certification revocation. Our questions are designed to test the same knowledge and skills as the real exam, using different scenarios and wording.
The Azure AZ-104 exam consists of 40-60 questions that you need to complete in 120 minutes (2 hours). Questions include multiple-choice, case studies, and interactive simulations. Our premium course includes 1,020 practice questions across 17 full practice exams with detailed explanations.
The passing score is 700 out of 1000. Azure uses a scaled scoring model, and not all questions carry the same weight. Focus on understanding cloud fundamentals rather than memorizing answers.
Click on the "Buy Now" button in the sidebar to purchase the complete course. After payment, you'll have instant access to all 17 practice exams with 1,020 questions with detailed explanations and lifetime access.
Microsoft doesn't mandate prerequisites, but strongly recommends at least 6 months of hands-on experience administering Azure resources before attempting AZ-104. While earning AZ-900 (Azure Fundamentals) first is helpful for understanding cloud concepts, it's not required—AZ-104 focuses on practical administration skills rather than theoretical fundamentals. The exam includes interactive lab simulations, so you must have experience navigating the Azure Portal and configuring resources.
The Azure Administrator Associate certification is valid for one year from the date you pass the exam. Microsoft changed from two-year validity to annual renewal in 2023. To maintain your certification, you must complete a free online renewal assessment on Microsoft Learn before expiration. The renewal assessment covers recent Azure service updates and new features added since you originally certified.
The Azure Administrator Associate exam costs $165 USD. If you don't pass on your first attempt, you must wait 24 hours before retaking the exam, and you'll need to pay the full exam fee again. Microsoft does not offer refunds for failed exams. The official Microsoft practice exam costs an additional $99 USD (includes one retake) but provides the most realistic exam simulation including interactive lab questions.
Deploy and manage Azure compute resources (20-25%) and Manage Azure identities and governance (20-25%) receive the most weight. Focus heavily on VM deployment with availability sets and scale sets, RBAC role assignments at different scopes, VNet and NSG configuration, storage account redundancy options (LRS, ZRS, GRS, RA-GRS), and Azure Monitor with Log Analytics. The exam includes interactive lab simulations testing hands-on skills—practice navigating the Azure Portal for common administration tasks.
While AZ-900 (Azure Fundamentals) covers theoretical cloud concepts broadly and is designed for non-technical roles, AZ-104 (Azure Administrator Associate) dives deep into hands-on Azure resource administration and requires practical experience. AZ-104 includes interactive lab simulations where you perform actual Azure Portal tasks during the exam—you must configure VMs, implement RBAC, troubleshoot networking, and manage storage. AZ-104 is significantly harder and targets IT professionals responsible for daily Azure administration, while AZ-900 is entry-level for anyone working with Azure.
Loading...