AZ-104 exam domains
The AZ-104 exam is weighted across 5 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Manage Azure identities and governance | 24% | Practice this topic |
| Implement and manage storage | 19% | Practice this topic |
| Deploy and manage Azure compute resources | 24% | Practice this topic |
| Implement and manage virtual networking | 19% | Practice this topic |
| Monitor and maintain Azure resources | 14% | Practice this topic |
Sample AZ-104 questions
A sample of the AZ-104 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- Your team runs a nightly data-processing batch job packaged as a container image in Azure Container Registry. You want to deploy it using Azure Contai…View question
- Your team runs a nightly batch job as an Azure Container Instance (ACI) container group. The image is stored in a Premium Azure Container Registry nam…View question
- You deploy a background image-processing microservice to Azure Container Apps. The workload is not exposed over HTTP; instead it pulls jobs from an Az…View question
- You manage an Azure Container Instances (ACI) deployment for a lightweight API. The container image is stored in a private Azure Container Registry na…View question
- Your company runs a production Azure Container Registry named prodacr. The security team requires that only digitally signed container images can be p…View question
- Your company runs Azure Kubernetes Service clusters in East US and West Europe. Both clusters pull container images from a single Azure Container Regi…View question
- Your company runs a private Azure Container Registry named contosoacr. A partner has published a required base image in a public Docker Hub repository…View question
- Your development team stores a Dockerfile in a Git repository but the build agents do not have Docker Engine installed and cannot run local builds. Yo…View question
- Your company runs a container platform on Azure and stores images in an Azure Container Registry (ACR) on the Basic SKU. Developers report frequent th…View question
- Your team stores a custom application image in an Azure Container Registry (ACR) named contosoreg. The image is built from a public base image. Compan…View question
Key AZ-104 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the AZ-104 exam.
AZ-104 frequently asked questions
What is the AZ-104 certification?+
Microsoft positions the Azure Administrator as validating subject-matter expertise in implementing, managing, and monitoring an Azure environment — identity, governance, storage, compute, networking, and monitoring. It expects familiarity with the Azure portal, Azure CLI, PowerShell, and ARM/Bicep templates.
It is a practical exam: you are expected to know how Azure services behave and how to configure them, such as assigning RBAC roles at the right scope, choosing storage redundancy, or evaluating effective NSG rules — not just recognising what a service is.
What topics are on the AZ-104 exam?+
The AZ-104 exam is organised into five weighted skill areas. The percentages below are the midpoints of Microsoft’s published ranges (for example 20–25%), normalized to total 100, so treat them as a study-time guide. Identity/governance and compute carry the most weight.
Manage Azure identities and governance (24%)
One of the two heaviest areas. It covers managing Microsoft Entra ID users and groups, licenses, external users, and self-service password reset; managing access with built-in Azure RBAC roles at different scopes; and governance through Azure Policy, resource locks, tags, resource groups, subscriptions, management groups, and cost controls.
Implement and manage storage (19%)
Covers configuring access to Azure Storage (firewalls, shared access signatures, stored access policies, access keys, identity-based access for Files), configuring storage accounts (redundancy, replication, encryption), and working with Azure Files and Blob Storage including tiers, soft delete, snapshots, lifecycle management, and versioning.
Deploy and manage Azure compute resources (24%)
One of the two heaviest areas. It covers automating deployment with ARM templates and Bicep, creating and configuring virtual machines (sizes, disks, encryption, availability zones and sets, scale sets), provisioning containers (Container Registry, Container Instances, Container Apps), and configuring Azure App Service.
Implement and manage virtual networking (19%)
Covers virtual networks and subnets, VNet peering, public IPs, user-defined routes and connectivity troubleshooting; securing access with network security groups, application security groups, Azure Bastion, service endpoints and private endpoints; and name resolution and load balancing with Azure DNS and Azure Load Balancer.
Monitor and maintain Azure resources (14%)
The smallest area. It covers monitoring with Azure Monitor (metrics, log queries, alert rules, action groups, Insights, Network Watcher) and implementing backup and recovery with Recovery Services vaults, Azure Backup, backup policies, and Azure Site Recovery including regional failover.
Is the AZ-104 hard?+
AZ-104 is a clear step up from AZ-900. It is an associate administrator exam, so it expects working knowledge of configuring Azure, and it can include case studies and interactive question formats rather than only multiple choice.
The difficulty comes from breadth across identity, storage, compute, networking, and monitoring, plus needing to know exact behaviours — RBAC scope inheritance, storage redundancy options, effective NSG rules. Practising scenario questions until those distinctions are automatic is the key.
How many questions are on the AZ-104 exam and how long is it?+
Microsoft does not fix a single question count for AZ-104; it typically presents roughly 40–60 questions in a mix of formats — multiple choice, multiple response, drag-and-drop, and sometimes case studies — with about 100 minutes of working time.
Our full-length practice mock uses a 60-question, 100-minute session so you can rehearse pacing under realistic time pressure before test day.
What score do you need to pass the AZ-104?+
Microsoft scores AZ-104 on a scale of 1 to 1,000, and the passing score is 700. That is a scaled score rather than a raw 70%, because Microsoft adjusts for question difficulty, and there is no penalty for wrong answers, so you should never leave a question blank. Our practice mock uses a 70% threshold to give you a comparable target.
How much does the AZ-104 exam cost?+
The AZ-104 exam fee is set by Microsoft and varies by region — check the Microsoft certification page for current pricing. Microsoft associate certifications are valid for one year and can be renewed for free through an online assessment on Microsoft Learn. Everything on this hub is free.
Who should take the AZ-104?+
The Azure Administrator is aimed at people who implement, manage, and monitor an organization’s Azure environment — cloud administrators, systems administrators moving to Azure, and infrastructure engineers.
Microsoft recommends familiarity with the Azure portal, Azure CLI, PowerShell, ARM/Bicep, and Microsoft Entra ID, plus general operating-system, networking, and virtualization knowledge. AZ-900 is a helpful precursor but not required.
What jobs and salaries can the AZ-104 lead to?+
AZ-104 is relevant to roles such as Azure administrator, cloud administrator, systems administrator, and infrastructure engineer, where running an Azure environment is part of the job. It is a foundation for Azure associate and expert paths.
How much any certification moves compensation depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. AZ-104 is best viewed as a way to demonstrate Azure administration skills rather than a guaranteed raise on its own.
How long does it take to study for the AZ-104?+
Candidates with Azure experience often need four to eight weeks; those newer to Azure should plan for two to three months at roughly an hour a day. The most efficient path is to learn the five skill areas while practising in the Azure portal, then shift the majority of your time to timed scenario practice.
A good rhythm is to study one skill area at a time and drill its topic quiz immediately, then move to mixed, full-length timed mocks in the final stretch — reviewing every explanation, including for questions you answered correctly, because AZ-104 distractors are built from plausible but incorrect Azure configurations. Use the per-domain results here to find your weakest area.
How should you prepare for the AZ-104?+
Study the five skill areas above, giving the most time to identity/governance and compute, then drill practice questions area by area. Every MockAPI question reveals a full explanation and tells you why each wrong answer is wrong — essential for an exam whose distractors are realistic misconfigurations.
When you can answer topic drills comfortably, move to a full-length timed mock to rehearse pacing, and pair this with hands-on practice in the Azure portal. Use the glossary to nail terminology, and aim to score consistently above the pass mark on mocks before you book.
Can you take the AZ-104 exam online?+
Yes. Microsoft delivers AZ-104 through Pearson VUE, so you can test at a physical Pearson VUE centre or online with remote proctoring (OnVUE). The online exam requires a private, quiet room, a clear workspace, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you and a room scan before you start.
If you do not pass, Microsoft requires a 24-hour wait before a second attempt; after that, a 14-day wait applies between further attempts, with a limit of five attempts in a 12-month period, and each attempt needs its own registration. Once you pass, the certification is renewable for free on Microsoft Learn.
What certification should you take after the AZ-104?+
After AZ-104, common next steps include the Azure Solutions Architect Expert (AZ-305), which builds directly on administrator knowledge, or role-based associate exams such as the Azure Developer (AZ-204) or Azure Network Engineer.
Microsoft also offers specialty and security certifications (for example Azure Security Engineer, AZ-500) that pair well with administrator skills. Pairing any of these with hands-on Azure experience is what turns a certificate into a career.