Microsoft · AZ-104
Validates the ability to implement, manage, and monitor an organization's Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.
Practice Questions
757
≈ 15 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2025
AZ-104 measures five skill areas: managing Azure identities and governance, implementing and managing storage, deploying and managing compute resources, implementing and managing virtual networking, and monitoring and maintaining Azure resources. Microsoft last updated the skills-measured outline on April 17, 2026, so the 757 questions in this bank are checked against the current version rather than an older revision that might test retired features.
You get 100 minutes on exam day, with a mix of multiple-choice, drag-and-drop, and scenario-based questions, sometimes including interactive tasks where you complete an action directly in a simulated Azure portal rather than picking from a list. You need 700 out of a scaled 1,000 to pass. Because several questions involve hands-on portal or CLI tasks rather than pure recall, practicing the underlying commands matters as much as recognizing the right answer choice.
There is no formal prerequisite, but Microsoft expects familiarity with operating systems, networking, and virtualization, plus hands-on experience with PowerShell, the Azure CLI, the Azure portal, and Resource Manager templates or Bicep. The certification renews every 12 months through a free assessment on Microsoft Learn, so there is no need to retake the full exam. Start with the free preview, then work through the full 757-question bank until your accuracy holds steady across all five skill areas.
The Microsoft Certified: Azure Administrator Associate (AZ-104) validates subject matter expertise in implementing, managing, and monitoring an organization's Microsoft Azure environment. The certification covers a broad range of Azure services and capabilities, including virtual networks, storage, compute, identity, security, and governance. Exam content was last updated on April 18, 2025, reflecting the current skills required for the Azure administrator role.
Certified administrators are expected to work proficiently across the Azure portal, Azure CLI, PowerShell, Azure Resource Manager (ARM) templates and Bicep files, and Microsoft Entra ID. The role requires a solid understanding of foundational IT concepts — operating systems, networking, servers, and virtualization — applied to cloud-based infrastructure management. Azure administrators often collaborate with teams responsible for database, application development, DevOps, and security, making this a highly cross-functional credential.
This certification is designed for IT professionals who actively administer Azure cloud environments, typically with a minimum of six months of hands-on Azure experience. Target job roles include Azure Administrator, Cloud Engineer, Azure Systems Administrator, Cloud Support Engineer, and Cloud Operations Analyst. It is particularly suited to professionals transitioning from on-premises infrastructure roles (sysadmins, network admins) into cloud-focused positions, as well as those already working in Azure who want to formalize and validate their skills.
Candidates pursuing advancement into cloud security (AZ-500), DevOps (AZ-400), or Solutions Architect (AZ-305) roles will also find AZ-104 a required or strongly recommended stepping stone, as it establishes the administrative foundation those advanced certifications build upon.
There are no mandatory prerequisite certifications for AZ-104 — it does not require passing AZ-900 (Azure Fundamentals) first, though completing that exam is helpful for those new to Azure concepts. Microsoft recommends at least six months of practical experience administering Azure resources before attempting the exam.
Candidates should have hands-on familiarity with the Azure portal, Azure CLI, and PowerShell for managing resources, as well as working knowledge of Azure Resource Manager templates and Bicep files. A background in traditional IT infrastructure — including networking concepts (DNS, routing, NSGs, load balancing), server administration, operating systems, and virtualization — is strongly recommended, as many exam scenarios assume this foundational knowledge. Experience with Microsoft Entra ID (formerly Azure Active Directory) for identity and access management is also expected.
The AZ-104 exam is proctored and delivered through Pearson VUE, either at a testing center or via online proctoring. Candidates are given 100 minutes to complete the assessment. The exam may include interactive lab-based components (e.g., tasks performed in a live or simulated Azure environment) in addition to standard multiple-choice, case study, drag-and-drop, and scenario-based questions; the exact number of questions varies per administration and is not published by Microsoft.
A score of 700 out of 1000 is required to pass. Scoring is scaled, meaning it does not correspond directly to a raw percentage of correct answers. If a candidate fails on the first attempt, a retake is permitted after 24 hours; subsequent retake waiting periods vary per Microsoft's retake policy. The certification is valid for one year and can be renewed at no cost by passing an online renewal assessment on Microsoft Learn.
Earning the AZ-104 certification opens access to a strong and growing job market, with Azure administrator roles reporting U.S. salaries generally in the range of $88,000–$161,000 annually depending on experience, location, and employer. Certified professionals typically see a 15–20% salary premium over non-certified peers in equivalent roles. Common job titles held by AZ-104 holders include Azure Administrator, Cloud Engineer, Azure Systems Administrator, and Cloud Operations Analyst, with experienced professionals moving into hybrid roles such as Cloud Security Analyst or progressing toward Solutions Architect and DevOps Engineer tracks.
Microsoft Azure holds approximately 20% of the global cloud market and is the dominant platform in enterprise, government, healthcare, and financial services sectors, creating consistent demand for certified administrators. The AZ-104 also serves as a direct prerequisite or recommended foundation for higher-level Microsoft certifications including AZ-500 (Azure Security Engineer Associate), AZ-400 (DevOps Engineer Expert), and AZ-305 (Azure Solutions Architect Expert). Compared to AWS Certified SysOps Administrator and Google Associate Cloud Engineer, AZ-104 is particularly competitive in enterprise-heavy industries where Microsoft's ecosystem — including Microsoft 365, Active Directory, and hybrid cloud via Azure Arc — is deeply embedded.
5 sample questions with answers and explanations. The full bank has 757 questions, enough for 15 full-length practice exams.
Preview — answers shown1. A new Azure subscription has been created. Which of the following is an example of managing governance for this subscription?
Explanation
Assigning an Azure Policy is a core aspect of governance. Governance in Azure refers to the mechanisms and processes for maintaining control over your applications and resources. This includes ensuring compliance, managing costs, and enforcing organizational standards. Azure Policy is a primary governance tool used to create rules for resources, such as requiring specific tags, restricting which regions resources can be deployed to, or allowing only certain VM SKUs. This directly relates to governing the subscription's usage. Here's why the others are examples of resource management, not governance: Creating a VM, configuring VNet peering, and creating a storage account are all examples of using or managing resources within the subscription, not applying overarching rules or controls to it.
2. A company is setting up a new virtual machine scale set (VMSS) for a web application. They need to ensure that if a planned maintenance event occurs in Azure, only a small subset of their VM instances are rebooted at one time to maintain high availability. How can they achieve this?
Explanation
The way to achieve this is by increasing the number of update domains. An update domain is a logical group of VMs that are updated and rebooted together during planned maintenance. Azure proceeds through update domains sequentially. By increasing the number of update domains (up to the maximum of 20), you are dividing your VMSS instances into more, smaller groups. This ensures that a smaller fraction of your total capacity is impacted at any given time during a maintenance event. Here's why the others are incorrect: Fault domains protect against unplanned hardware failures (like a rack power loss), not planned maintenance. A proximity placement group is for low latency, not high availability during maintenance. VM size has no impact on maintenance domains.
3. An ARM template for an internal load balancer is configured with a privateIPAllocationMethod of 'Dynamic'. What does this mean for the load balancer's frontend IP address?
Explanation
It means the IP address will be the first available IP from the subnet. When the allocation method is set to 'Dynamic' for an internal load balancer, Azure automatically assigns the next available IP address from the address range of the subnet specified in the frontend IP configuration. While it's assigned automatically, this private IP address will not change for the lifetime of the load balancer resource.
4. A storage account has two lifecycle management rules. RuleA, which applies to blobs with the prefix 'invoices/', moves blobs to Archive after 10 days. RuleB, which applies to all blobs, moves them to Cool after 5 days. On October 1st, a new blob named 'invoices/inv-123.pdf' is uploaded. What will be the state of this blob on October 12th?
Explanation
The blob will be in the Archive tier. When multiple lifecycle management rules apply to the same blob, the rule with the most specific prefix match takes precedence. In this case, the blob 'invoices/inv-123.pdf' matches the prefix for RuleA. Therefore, the actions from RuleA (move to Archive after 10 days) will be applied, and the more general RuleB will be ignored for this specific blob.
5. A company is migrating an application to Azure that consists of two components: a web front end and a back-end processing service. These components communicate constantly and require the absolute lowest possible network latency between them. Both will be deployed on separate VMs. Which Azure feature should be used to ensure the VMs are placed as physically close as possible within the same datacenter?
Explanation
The correct feature is a Proximity Placement Group (PPG). A PPG is a logical grouping that is used as a deployment constraint, telling Azure to locate the resources that are part of it physically close to one another within the same datacenter. This is specifically designed to reduce inter-VM network latency for applications that are latency-sensitive or 'chatty'. Here is why the other options are not the best fit for this specific goal: An Availability Set provides high availability by separating VMs onto different hardware racks, which could slightly increase latency. Availability Zones provide high availability by placing VMs in different physical data centers, which would significantly increase latency. VNet Peering connects networks, but it doesn't control the physical placement of VMs within a datacenter.
Microsoft does not publish an exact count; expect roughly 40 to 60 questions in 100 minutes, mixing multiple-choice, drag-and-drop, and interactive lab-style tasks.
700 on a scaled score of 100 to 1,000.
Around $165 USD; the price varies by the country or region where you sit the exam.
Five, per Microsoft’s April 17, 2026 update: manage Azure identities and governance, implement and manage storage, deploy and manage Azure compute resources, implement and manage virtual networking, and monitor and maintain Azure resources.
It renews every 12 months, but you do not retake the full exam — Microsoft offers a free online renewal assessment through Microsoft Learn before the expiration date.
No formal prerequisite, but Microsoft expects familiarity with operating systems, networking, and virtualization, plus hands-on experience with PowerShell, the Azure CLI, the Azure portal, and Resource Manager templates or Bicep.
Microsoft rates it Intermediate. The interactive lab-style questions, where you perform a task in a simulated portal rather than choose from a list, trip up candidates who have only studied theory without hands-on Azure practice.
English, Chinese (Simplified and Traditional), Korean, Japanese, French, Spanish, German, and Portuguese (Brazil).
Administering Information Security in Microsoft 365 (SC-401)
SC-401 · 939 questions
Administering Windows Server Hybrid Core Infrastructure (AZ-800)
AZ-800 · 898 questions
Microsoft Certified: Agentic AI Business Solutions Architect (AB-100)
AB-100 · 700 questions
Microsoft Certified: Azure AI Engineer Associate (AI-102)
AI-102 · 1392 questions
Microsoft Certified: Azure AI Fundamentals (AI-900)
AI-900 · 464 questions
Microsoft Azure AI Fundamentals (AI-901)
AI-901 · 600 questions
$17.99
One-time access to this exam