- What the AZ-104 Certification Actually Is
- Exam Mechanics: Format, Fees, and Scheduling
- The Five Domains You Will Be Tested On
- Question Types and How Microsoft Tests You
- Who Hires AZ-104 Holders and Why
- Skills Microsoft Expects Before You Sit the Exam
- A Domain-Anchored Prep Schedule
- Renewal, Validity, and Staying Current
- Frequently Asked Questions
- AZ-104 is a Microsoft role-based exam delivered by Pearson VUE; the U.S. fee is typically $165 USD.
- Passing requires a scaled score of 700 or higher-not a raw 70% of questions correct.
- Identities/governance and compute are each weighted 20-25%, making them the highest-priority domains.
- Candidates commonly see 40-60 questions including labs; Microsoft allocates 100 minutes for the assessment.
What the AZ-104 Certification Actually Is
The Microsoft Certified: Azure Administrator Associate credential-earned by passing Exam AZ-104-is Microsoft's role-based certification for professionals who configure, manage, and monitor Azure environments in production. It sits at the Associate level in Microsoft's certification hierarchy, above Fundamentals credentials like AZ-900 and below Expert-level paths like the Azure Solutions Architect Expert.
The certification validates that a candidate can handle the day-to-day operational workload of an Azure administrator: standing up virtual machines, enforcing identity policies in Microsoft Entra ID (formerly Azure Active Directory), configuring virtual networks, managing storage accounts, and keeping the environment observable through Azure Monitor and related services. If you want to understand the broader meaning and context behind the credential, What Is AZ-104? covers the foundational background in detail.
Unlike vendor-neutral cloud credentials, AZ-104 is tightly scoped to the Azure platform. Every domain maps directly to a set of Azure portal controls, Azure CLI commands, or ARM/Bicep templates a working administrator uses on a given Tuesday. That specificity is exactly what makes it valuable to employers-and exactly what makes generic cloud study guides insufficient preparation.
Exam Mechanics: Format, Fees, and Scheduling
Registration and Cost
AZ-104 is delivered exclusively through Pearson VUE, either at a testing center or via online proctoring. The U.S. exam fee is typically $165 USD. Pricing varies by country or region based on local economic conditions-candidates outside the United States should check Microsoft's regional pricing before budgeting. For a full breakdown of what you will actually spend when you factor in study materials and potential retakes, see the AZ-104 Certification Cost 2026: Complete Pricing Breakdown.
Microsoft offers an exam discount through certain learning programs, employer vouchers, and Microsoft Learn challenges. If you are studying independently, watch for promotional offers tied to Microsoft events like Ignite or Build.
Time Allocation
Microsoft lists 100 minutes to complete the assessment itself. Your full Pearson VUE appointment will be longer because it includes pre-exam check-in, a non-disclosure agreement, an optional tutorial on item types, and a post-exam survey. Plan for roughly 30-40 extra minutes when you book your calendar.
Scoring Model
AZ-104 uses Microsoft's scaled scoring model. The passing threshold is a score of 700 or higher on a scale of 1-1000. This is not equivalent to getting 70% of questions right. Microsoft applies psychometric scaling, so the effective raw-score requirement fluctuates depending on which version of the exam you receive. The implication for test-takers: do not target "just passing." Build depth across all five domains rather than banking on a specific question count.
The Five Domains You Will Be Tested On
Microsoft's official skills outline-current as of April 17, 2026-divides AZ-104 into five weighted domains. Understanding the weighting is the first strategic decision in any prep plan. For a deep technical walkthrough of each area, the AZ-104 Exam Domains 2026: Complete Guide to All 5 Content Areas breaks every objective down in full.
Domain 1: Manage Azure Identities and Governance (20-25%)
The single largest domain alongside compute. Candidates must demonstrate mastery of Microsoft Entra ID user and group management, role-based access control (RBAC), Azure Policy, management groups, subscriptions, and resource locks.
- Creating and managing users, groups, and service principals in Microsoft Entra ID
- Assigning and auditing RBAC roles at management group, subscription, and resource group scope
- Configuring Azure Policy definitions, initiatives, and compliance reporting
- Implementing resource tagging strategies and cost management guardrails
Domain 2: Implement and Manage Storage (15-20%)
Covers Azure storage account configuration, redundancy options, lifecycle management, access tiers, Azure Files, Azure Blob Storage, and shared access signatures (SAS).
- Selecting appropriate redundancy: LRS, ZRS, GRS, GZRS
- Configuring blob access tiers and lifecycle policies to control cost
- Securing storage with SAS tokens, stored access policies, and private endpoints
Domain 3: Deploy and Manage Azure Compute Resources (20-25%)
Tied with Domain 1 for the heaviest weighting. Covers virtual machines, VM scale sets, Azure App Service, Azure Container Instances, Azure Kubernetes Service basics, and ARM/Bicep template deployments.
- Deploying VMs using the portal, CLI, PowerShell, and ARM/Bicep templates
- Configuring VM availability: availability sets, availability zones, and scale sets
- Managing App Service plans, deployment slots, and scaling rules
- Understanding container-based workloads at the administrator level
Domain 4: Implement and Manage Virtual Networking (15-20%)
Tests candidates on VNet design, subnetting, NSGs, Azure DNS, VNet peering, VPN gateways, Azure Load Balancer, Application Gateway, and network monitoring tools.
- Designing address spaces and subnets for Azure VNets
- Writing and applying NSG rules and associating them with subnets or NICs
- Configuring VNet peering, site-to-site VPN, and ExpressRoute concepts
- Implementing Azure DNS zones and private DNS resolution
Domain 5: Monitor and Maintain Azure Resources (10-15%)
The smallest domain but operationally critical. Covers Azure Monitor, Log Analytics workspaces, alerts, diagnostic settings, Azure Backup, and Azure Site Recovery.
- Configuring diagnostic settings to route logs to Log Analytics or storage
- Creating metric and log-based alerts with action groups
- Implementing Azure Backup policies for VMs and Azure Files
- Understanding Recovery Services vault configuration for Site Recovery
For individual deep dives, explore the dedicated guides: Domain 1: Identities and Governance, Domain 2: Storage, Domain 3: Compute, and Domain 4: Virtual Networking.
Question Types and How Microsoft Tests You
AZ-104 is not a memorization exam dressed up as a skills test. Microsoft uses a deliberate mix of item formats specifically designed to probe whether you can apply configuration knowledge rather than recall definitions.
| Item Type | What It Tests | AZ-104 Example Context |
|---|---|---|
| Multiple Choice (single answer) | Targeted concept knowledge | Which redundancy option replicates data across paired regions? |
| Multiple Choice (multi-select) | Ability to identify all correct components | Which two services support private endpoints in this scenario? |
| Case Study | Cross-domain scenario reasoning | A multi-page company scenario requiring RBAC, VNet, and VM decisions |
| Drag-and-Drop / Build-List | Sequential or categorical ordering | Arrange the steps to configure a site-to-site VPN in correct order |
| Hot Area | Portal navigation and visual recognition | Click the correct blade in a screenshot to configure diagnostic settings |
| Lab / Performance-Based Task | Hands-on execution in a live or simulated Azure environment | Create a storage account with specific redundancy and configure a lifecycle policy |
Candidates commonly encounter 40-60 questions across these formats. Lab tasks may or may not appear depending on your specific exam delivery-Microsoft does not guarantee their presence on every appointment. However, preparing for them is non-negotiable because they test the exact hands-on competency the certification is designed to validate. The AZ-104 Exam Prep practice tests include scenario-based questions modeled on these formats to help you build that applied fluency.
One structural note: Microsoft Learn reference lookup access may be available during eligible role-based exams under specific rules, with no extra time added. Do not plan your preparation strategy around this feature-the time pressure makes extended reference searches impractical.
Who Hires AZ-104 Holders and Why
The organizations most actively seeking AZ-104 holders fall into a few clear categories. Large enterprises running hybrid Azure environments need administrators who can manage Microsoft Entra ID alongside on-premises Active Directory, enforce governance policies across subscriptions, and keep compute and networking infrastructure operational. Managed service providers (MSPs) building Azure practices hire AZ-104 holders to staff client engagements. Technology consultancies use the certification as a minimum bar for cloud operations roles.
Job titles commonly attached to AZ-104 include Cloud Administrator, Azure Infrastructure Engineer, Systems Administrator (cloud-focused), Cloud Operations Engineer, and Platform Engineer. The credential also appears as a preferred or required qualification in DevOps and site reliability engineering (SRE) roles where Azure infrastructure management is part of the scope.
For a detailed look at which roles list AZ-104 and how the credential affects compensation, the AZ-104 Salary Guide 2026: Complete Earnings Analysis covers the employment landscape thoroughly. If you are still evaluating whether to pursue the certification at all, Is the AZ-104 Certification Worth It? Complete ROI Analysis 2026 walks through the career calculus in depth.
Skills Microsoft Expects Before You Sit the Exam
AZ-104 has no formal prerequisite certification. Microsoft does not require you to hold AZ-900 or any other credential before registering. What Microsoft does recommend-strongly-is real working experience in the following areas:
- Operating systems: Comfort with both Windows Server and Linux at an administrative level
- Networking fundamentals: IP addressing, DNS, subnetting, routing, and firewall concepts
- Virtualization: Experience with hypervisors and virtual machine lifecycle management
- Scripting and automation: Practical use of Azure PowerShell and Azure CLI for resource management tasks
- Infrastructure as Code: Familiarity with ARM templates and/or Bicep for repeatable deployments
- Identity management: Working knowledge of Microsoft Entra ID, including user provisioning, group policies, and conditional access concepts
- Azure portal navigation: Ability to locate and configure resources across the portal efficiently
Candidates who arrive with strong on-premises IT backgrounds but limited Azure exposure typically find the identity and governance domain approachable while needing more deliberate study on Azure-native constructs like VNet peering, Application Gateway, and ARM/Bicep syntax. Candidates from a development background often have the inverse challenge-comfortable with code but less familiar with operational concerns like backup policies, NSG rules, and availability zone configurations. Understanding your starting point matters before building a study plan.
A Domain-Anchored Prep Schedule
Generic weekly study templates are widely available and largely useless for AZ-104 because they ignore domain weighting. A schedule anchored to the actual exam structure is more effective. The following is built around the official weights and assumes roughly six weeks of focused preparation. Adjust based on your existing Azure experience.
Domain 1 - Identities and Governance (20-25%)
- Build and manage users, groups, and service principals in a live Azure tenant
- Assign RBAC roles at multiple scopes; audit assignments with Azure CLI
- Create a policy definition and apply it at the subscription level
- Configure management group hierarchy with at least two subscription scopes
Domain 3 - Compute Resources (20-25%)
- Deploy VMs via portal, Azure CLI, and a Bicep template-same VM, three methods
- Configure an availability set and move a workload into an availability zone
- Set up a VM scale set with custom scaling rules
- Deploy an App Service with a staging slot and practice slot swaps
Domain 2 - Storage (15-20%)
- Create storage accounts with LRS, ZRS, and GRS; compare portal configuration differences
- Configure a blob lifecycle policy with tier transitions and deletion rules
- Generate and test SAS tokens with limited permissions and expiry windows
- Mount an Azure Files share on both a Windows and a Linux VM
Domain 4 - Virtual Networking (15-20%)
- Design and deploy a VNet with multiple subnets; apply NSGs and verify traffic flow
- Configure VNet peering between two VNets and test connectivity
- Set up an Azure DNS private zone and link it to a VNet
- Deploy an Azure Load Balancer with a backend pool and health probe
Domain 5 - Monitor and Maintain (10-15%)
- Configure diagnostic settings on a VM and route to a Log Analytics workspace
- Create a metric alert on CPU percentage with an email action group
- Configure Azure Backup for a VM; test a restore operation
- Review Azure Site Recovery replication requirements for a VM
Integration, Practice Tests, and Gap Closure
- Complete full-length timed practice exams under realistic conditions
- Review every missed question by revisiting the relevant Azure documentation page
- Prioritize any domain where practice test accuracy remains below your target
- Run at least two end-to-end scenario labs combining compute, networking, and identity in a single deployment
The AZ-104 Exam Prep practice tests are designed to reflect the scenario depth and item format distribution you will encounter on exam day. Use them throughout Week 6-not as a substitute for hands-on lab work in earlier weeks, but as the final calibration layer before your appointment.
For a more comprehensive preparation framework with additional resource recommendations, the AZ-104 Study Guide 2026: How to Pass on Your First Attempt covers strategy in full detail.
Key Takeaway
Allocate your study time proportional to domain weight. Domains 1 and 3 together account for up to 50% of your exam score. If your prep time is limited, these two domains deliver the highest marginal return per hour invested.
Renewal, Validity, and Staying Current
AZ-104 certification is valid for 12 months from the date you pass. Microsoft requires annual renewal rather than a full retake. The renewal mechanism is a free online assessment on Microsoft Learn-no additional Pearson VUE appointment, no additional fee, and no time limit on the renewal assessment itself. Microsoft typically notifies certified holders by email six months before expiration and again at the 30-day mark.
The renewal assessment covers changes to the Azure platform and updated exam objectives. Because Microsoft continuously evolves Azure services, the renewal is not merely administrative-it genuinely tests whether your knowledge reflects current platform capabilities. Administrators who stay active on Azure in their day jobs typically find the renewal straightforward. Those who have been away from hands-on Azure work for several months may need a focused review cycle before completing it.
The current skills outline is valid through April 17, 2026. Microsoft publishes exam objective updates on the official AZ-104 certification page when changes occur, usually with advance notice. If you are scheduling your exam close to an objective update date, verify that your study materials reflect the current version.
Frequently Asked Questions
No. Microsoft lists no formal prerequisite certification for AZ-104. AZ-900 (Azure Fundamentals) can be helpful if you have no prior Azure exposure, but it is not required. Microsoft's recommendation is practical Azure experience with identities, networking, compute, and scripting-not a specific preceding exam.
The passing score is 700 on Microsoft's 1-1000 scaled scoring model. This is not a raw percentage of questions answered correctly. Psychometric scaling means the equivalent raw question count can vary between exam forms, so there is no reliable shortcut to calculate exactly how many questions you need to answer correctly.
Microsoft does not publish a fixed question count. Candidates commonly report seeing approximately 40-60 questions, which may include multiple-choice, case study, drag-and-drop, hot-area, build-list items, and potentially lab tasks. The exact number varies by exam form and delivery type.
AZ-104 is consistently rated as one of the more challenging Associate-level Microsoft exams because it requires both broad coverage across five domains and genuine hands-on proficiency-particularly for any lab or performance-based tasks that appear. For a detailed difficulty analysis, see How Hard Is the AZ-104 Exam? Complete Difficulty Guide 2026.
Renewal is completely free. Microsoft provides an online renewal assessment through Microsoft Learn that certified holders can complete at no charge. The renewal must be completed before the 12-month certification expiration date. There is no Pearson VUE appointment required and no exam fee associated with the renewal process.