How to Pass AZ-104: Microsoft Azure Administrator
The AZ-104 Microsoft Azure Administrator certification is one of the most sought-after credentials for IT professionals working in cloud environments. It proves you know how to manage Azure infrastructure at a practical, operational level — not in theory, but on the job. If you work in IT and you want to move into cloud administration or advance in a role that already uses Azure, this is the certification to target.
This guide tells you what the exam covers, how to prepare, and what to focus on so you walk into the exam room ready.
What Is AZ-104 and Who Is It For
AZ-104 is Microsoft’s role-based certification for Azure administrators. It validates your ability to manage Azure identities, storage, compute, networking, and monitoring. Microsoft positions this exam for IT professionals with at least six months of hands-on Azure experience, but many candidates pass with less if they train systematically.
This is not an entry-level exam. AZ-900 (Azure Fundamentals) gives you conceptual grounding, but AZ-104 asks you to do things — configure virtual machines, set up role-based access control, manage virtual networks, and monitor resource health. If you have experience in system administration, networking, or on-premises infrastructure, that background transfers well.
You target this certification if you work in IT and want to move into cloud administration, already support Azure resources and need to formalize your skills, or are working toward a cloud architect or senior administrator role.
What the Exam Covers
Microsoft publishes a skills outline for every exam. For AZ-104, the current domains are:
Manage Azure identities and governance (~20–25%)
This section covers Microsoft Entra ID (formerly Azure Active Directory), users, groups, roles, and policies. You need to know how to assign RBAC roles, configure subscriptions, manage resource locks, and apply Azure Policy. This domain trips up candidates who skip governance in their study plan.
Implement and manage storage (~15–20%)
Expect questions on storage accounts, access tiers, lifecycle policies, Azure Files, Azure Blob Storage, and shared access signatures. You need to know when to use each storage type and how to configure access securely.
Deploy and manage Azure compute resources (~20–25%)
This is the practical heart of the exam. You create and configure virtual machines, manage availability sets and scale sets, work with Azure App Service, and handle Azure Container Instances. Know how to resize VMs, configure disks, and troubleshoot deployment failures.
Implement and manage virtual networking (~15–20%)
Virtual networks, subnets, peering, VPN gateways, DNS configuration, network security groups, and Azure Load Balancer all appear here. If you come from a networking background, this section plays to your strengths. If not, spend extra time here.
Monitor and maintain Azure resources (~10–15%)
Azure Monitor, Log Analytics, alerts, and backup and recovery round out the exam. This includes configuring Azure Backup, site recovery, and interpreting diagnostic data.
How to Build Your Study Plan
Set aside six to eight weeks for exam preparation if you study consistently. Here is a structure that works.
Weeks 1–2: Domains 1 and 2. Start with identities and governance, then move to storage. These are concept-heavy but manageable. Use Microsoft Learn’s free modules to read the documentation and complete the exercises.
Weeks 3–4: Domain 3 (Compute). Spend two full weeks on compute. Create virtual machines in a free Azure sandbox or trial account. Build from scratch, configure disks, add extensions, and practice scaling. Reading about VMs is not enough — you need to work with them.
Weeks 5–6: Domain 4 (Networking). Networking takes patience. Set up a virtual network, add subnets, peer two networks, and configure a load balancer. Draw diagrams as you study. Azure networking has specific terminology and the exam tests precision.
Week 7: Domain 5 and Full Review. Go through monitoring and backup quickly, then shift to practice exams. Take full-length timed tests. Identify weak areas and go back to the source material — not more practice questions.
Week 8: Targeted Reinforcement and Scheduling. Address weak spots from your practice runs. Schedule your exam and stop studying new material two days before the test. Rest and review your notes.
Where Candidates Lose Points
The most common mistakes on AZ-104 come down to a few avoidable areas.
Skipping governance. RBAC, Azure Policy, and management groups feel abstract when you’re studying, so many candidates skim this section. The exam does not skim it. Know how to assign roles at different scopes and what the difference is between built-in and custom roles.
Not practicing in the portal. AZ-104 includes lab-style questions where you perform tasks directly in a simulated Azure portal. If you have only read about the steps, you will struggle. Get your hands on a live Azure environment, even a free trial.
Confusing service tiers and feature availability. Azure services have multiple tiers with different capabilities. The exam tests whether you know which tier includes which feature. Study the comparison tables for VM sizes, storage tiers, and load balancer types.
Running out of time. The exam is time-pressured. Practice completing questions in under 90 seconds on average. Long case study sections appear near the end, so save time.
Exam Format and Registration
The AZ-104 exam has approximately 40–60 questions. Question types include multiple choice, drag-and-drop, case studies, and lab simulations. The passing score is 700 out of 1000. You register through Microsoft’s Pearson VUE platform and sit the exam either online or at a test centre.
Microsoft updates exam content periodically. Always check the official AZ-104 exam skills outline on Microsoft Learn before you start your study plan to confirm the current objectives.
How Training Accelerates Your Preparation
Self-study works for some candidates. For others, structured training shortens the path significantly. A good AZ-104 course organizes the content by exam domain, includes hands-on labs, and gives you access to an instructor who explains what the documentation does not.
At Ultimate IT Courses, we deliver Microsoft Azure training in small groups with live instruction and lab access. You work through the exam domains with a trainer who has real-world Azure experience and answers questions that go beyond the textbook.
For a broader look at cloud certification options, visit our networking and cloud training page or speak with us about building a certification path that fits your role and timeline.
What Comes After AZ-104
AZ-104 is a stepping stone, not a ceiling. Once you hold Azure Administrator Associate, you open the path to AZ-305 (Azure Solutions Architect Expert) for those moving into architecture, AZ-500 (Azure Security Engineer) for those moving into cloud security, and AZ-400 (Azure DevOps Engineer) for those working at the infrastructure-development intersection.
Your next step depends on where you want your career to go. AZ-104 gives you the foundation.
The right certification path depends on your current experience, your job target, and your timeline. Get a personalized certification roadmap from our team. We work with IT professionals across Canada to build training plans that lead somewhere specific.
