Microsoft · AZ-104
Validates the ability to implement, manage, and monitor an organization's Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.
Practice Questions
757
≈ 15 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2025
AZ-104 measures five skill areas: managing Azure identities and governance, implementing and managing storage, deploying and managing compute resources, implementing and managing virtual networking, and monitoring and maintaining Azure resources. Microsoft last updated the skills-measured outline on April 17, 2026, so the 757 questions in this bank are checked against the current version rather than an older revision that might test retired features.
You get 100 minutes on exam day, with a mix of multiple-choice, drag-and-drop, and scenario-based questions, sometimes including interactive tasks where you complete an action directly in a simulated Azure portal rather than picking from a list. You need 700 out of a scaled 1,000 to pass. Because several questions involve hands-on portal or CLI tasks rather than pure recall, practicing the underlying commands matters as much as recognizing the right answer choice.
There is no formal prerequisite, but Microsoft expects familiarity with operating systems, networking, and virtualization, plus hands-on experience with PowerShell, the Azure CLI, the Azure portal, and Resource Manager templates or Bicep. The certification renews every 12 months through a free assessment on Microsoft Learn, so there is no need to retake the full exam. Start with the free preview, then work through the full 757-question bank until your accuracy holds steady across all five skill areas.
The Microsoft Certified: Azure Administrator Associate (AZ-104) validates subject matter expertise in implementing, managing, and monitoring an organization's Microsoft Azure environment. The certification covers a broad range of Azure services and capabilities, including virtual networks, storage, compute, identity, security, and governance. Exam content was last updated on April 18, 2025, reflecting the current skills required for the Azure administrator role.
Certified administrators are expected to work proficiently across the Azure portal, Azure CLI, PowerShell, Azure Resource Manager (ARM) templates and Bicep files, and Microsoft Entra ID. The role requires a solid understanding of foundational IT concepts — operating systems, networking, servers, and virtualization — applied to cloud-based infrastructure management. Azure administrators often collaborate with teams responsible for database, application development, DevOps, and security, making this a highly cross-functional credential.
This certification is designed for IT professionals who actively administer Azure cloud environments, typically with a minimum of six months of hands-on Azure experience. Target job roles include Azure Administrator, Cloud Engineer, Azure Systems Administrator, Cloud Support Engineer, and Cloud Operations Analyst. It is particularly suited to professionals transitioning from on-premises infrastructure roles (sysadmins, network admins) into cloud-focused positions, as well as those already working in Azure who want to formalize and validate their skills.
Candidates pursuing advancement into cloud security (AZ-500), DevOps (AZ-400), or Solutions Architect (AZ-305) roles will also find AZ-104 a required or strongly recommended stepping stone, as it establishes the administrative foundation those advanced certifications build upon.
There are no mandatory prerequisite certifications for AZ-104 — it does not require passing AZ-900 (Azure Fundamentals) first, though completing that exam is helpful for those new to Azure concepts. Microsoft recommends at least six months of practical experience administering Azure resources before attempting the exam.
Candidates should have hands-on familiarity with the Azure portal, Azure CLI, and PowerShell for managing resources, as well as working knowledge of Azure Resource Manager templates and Bicep files. A background in traditional IT infrastructure — including networking concepts (DNS, routing, NSGs, load balancing), server administration, operating systems, and virtualization — is strongly recommended, as many exam scenarios assume this foundational knowledge. Experience with Microsoft Entra ID (formerly Azure Active Directory) for identity and access management is also expected.
The AZ-104 exam is proctored and delivered through Pearson VUE, either at a testing center or via online proctoring. Candidates are given 100 minutes to complete the assessment. The exam may include interactive lab-based components (e.g., tasks performed in a live or simulated Azure environment) in addition to standard multiple-choice, case study, drag-and-drop, and scenario-based questions; the exact number of questions varies per administration and is not published by Microsoft.
A score of 700 out of 1000 is required to pass. Scoring is scaled, meaning it does not correspond directly to a raw percentage of correct answers. If a candidate fails on the first attempt, a retake is permitted after 24 hours; subsequent retake waiting periods vary per Microsoft's retake policy. The certification is valid for one year and can be renewed at no cost by passing an online renewal assessment on Microsoft Learn.
Earning the AZ-104 certification opens access to a strong and growing job market, with Azure administrator roles reporting U.S. salaries generally in the range of $88,000–$161,000 annually depending on experience, location, and employer. Certified professionals typically see a 15–20% salary premium over non-certified peers in equivalent roles. Common job titles held by AZ-104 holders include Azure Administrator, Cloud Engineer, Azure Systems Administrator, and Cloud Operations Analyst, with experienced professionals moving into hybrid roles such as Cloud Security Analyst or progressing toward Solutions Architect and DevOps Engineer tracks.
Microsoft Azure holds approximately 20% of the global cloud market and is the dominant platform in enterprise, government, healthcare, and financial services sectors, creating consistent demand for certified administrators. The AZ-104 also serves as a direct prerequisite or recommended foundation for higher-level Microsoft certifications including AZ-500 (Azure Security Engineer Associate), AZ-400 (DevOps Engineer Expert), and AZ-305 (Azure Solutions Architect Expert). Compared to AWS Certified SysOps Administrator and Google Associate Cloud Engineer, AZ-104 is particularly competitive in enterprise-heavy industries where Microsoft's ecosystem — including Microsoft 365, Active Directory, and hybrid cloud via Azure Arc — is deeply embedded.
5 sample questions with answers and explanations. The full bank has 757 questions, enough for 15 full-length practice exams.
Preview — answers shown1. User1 is assigned the 'Reader and Data Access' role for 'storage1'. Does this role allow User1 to list or regenerate the storage account keys?
Explanation
No, this role is insufficient for key management. The 'Reader and Data Access' role is a combination of the 'Reader' role, which allows viewing the resource's settings, and data access roles (like Storage Blob Data Reader). It does not include any permissions to perform management actions like regenerating access keys. Key management is a privileged operation not granted by read-only roles.
2. User2 has the 'Virtual Machine Contributor' role assigned at a scope that includes VM3. Can User2 use this role to create a snapshot of VM3's data disk?
Explanation
No, User2 cannot create a disk snapshot. The 'Virtual Machine Contributor' role allows a user to manage the virtual machine itself, including its attached disks. However, a disk snapshot is a separate type of Azure resource. The permissions to create, delete, or manage snapshots are not included in the 'Virtual Machine Contributor' role. A role like 'Contributor' on the resource group or the specific 'Disk Snapshot Contributor' role would be required.
3. A user named 'Admin1' has the 'Storage Account Contributor' role on a resource group named 'RG-Data'. Can 'Admin1' create a new storage account inside 'RG-Data'?
Explanation
Yes, Admin1 can create a new storage account. The 'Storage Account Contributor' role includes the 'Microsoft.Storage/storageAccounts/write' permission. This permission allows a user to create new storage accounts and manage existing ones within the scope of the role assignment, which in this case is the 'RG-Data' resource group.
4. User1 has the 'Storage Account Contributor' role assigned at the scope of resource group 'RG1'. Does this role allow User1 to create a new storage account within RG1?
Explanation
Yes, User1 can create a new storage account. The 'Storage Account Contributor' role, when assigned at a resource group scope, grants full management permissions for all storage accounts within that resource group. This includes the ability to create new storage accounts, as well as modify or delete existing ones. The permissions inherited from the resource group scope apply to the entire container.
5. A storage container has two stored access policies defined. What is the maximum number of additional stored access policies that can be created for this container?
Explanation
Three additional policies can be created. Azure Storage places a limit on the number of stored access policies that can be defined for a single container, file share, table, or queue. The maximum number allowed is five. Since two policies already exist, a maximum of three more can be added.
Microsoft does not publish an exact count; expect roughly 40 to 60 questions in 100 minutes, mixing multiple-choice, drag-and-drop, and interactive lab-style tasks.
700 on a scaled score of 100 to 1,000.
Around $165 USD; the price varies by the country or region where you sit the exam.
Five, per Microsoft’s April 17, 2026 update: manage Azure identities and governance, implement and manage storage, deploy and manage Azure compute resources, implement and manage virtual networking, and monitor and maintain Azure resources.
It renews every 12 months, but you do not retake the full exam — Microsoft offers a free online renewal assessment through Microsoft Learn before the expiration date.
No formal prerequisite, but Microsoft expects familiarity with operating systems, networking, and virtualization, plus hands-on experience with PowerShell, the Azure CLI, the Azure portal, and Resource Manager templates or Bicep.
Microsoft rates it Intermediate. The interactive lab-style questions, where you perform a task in a simulated portal rather than choose from a list, trip up candidates who have only studied theory without hands-on Azure practice.
English, Chinese (Simplified and Traditional), Korean, Japanese, French, Spanish, German, and Portuguese (Brazil).
Administering Information Security in Microsoft 365 (SC-401)
SC-401 · 939 questions
Administering Windows Server Hybrid Core Infrastructure (AZ-800)
AZ-800 · 898 questions
Microsoft Certified: Agentic AI Business Solutions Architect (AB-100)
AB-100 · 700 questions
Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103)
AI-103 · 409 questions
Microsoft Certified: Azure AI Engineer Associate (AI-102)
AI-102 · 1392 questions
Microsoft Certified: Azure AI Fundamentals (AI-900)
AI-900 · 464 questions
$17.99
One-time access to this exam