- What the AZ-104 Actually Tests
- Exam Mechanics You Must Know Before Test Day
- Domain-by-Domain Breakdown and Weight Analysis
- Question Formats and How to Handle Each One
- A Realistic Study Plan Built Around AZ-104 Domains
- Which Resources Actually Align to the Exam
- Understanding the 700 Passing Score
- Renewal, Career Value, and What Comes Next
- Frequently Asked Questions
- The AZ-104 passing score is 700 on a scaled model - not a raw 70% of questions correct.
- Identities/governance and compute each carry 20-25% weight, making them your highest-leverage study targets.
- Candidates typically see 40-60 questions across six distinct item types, including possible lab tasks.
- The exam fee is $165 USD in the United States, administered through Pearson VUE.
What the AZ-104 Actually Tests
The Microsoft Certified: Azure Administrator Associate credential - earned by passing Exam AZ-104 - is a role-based certification that validates your ability to manage Azure infrastructure in production. It is not a conceptual overview exam. Microsoft scoped it to the tasks a working Azure administrator performs daily: configuring identity and access, deploying virtual machines, managing storage accounts, building virtual networks, and keeping workloads observable and healthy.
If you want to understand the full scope of what this credential covers and who pursues it, the What Is AZ-104 Certification? overview is a useful starting point. This guide focuses on how to prepare efficiently and pass on your first attempt.
The skills measured are current as of April 17, 2026. Microsoft updates exam content periodically, so always verify you are studying against the active skills outline on Microsoft Learn before scheduling.
Exam Mechanics You Must Know Before Test Day
Registration and Cost
The exam is delivered exclusively through Pearson VUE, either at a test center or via online proctoring. The standard fee in the United States is $165 USD. Pricing varies by country and region - you will see the localized price at checkout. For a full breakdown of what that fee includes and where discounts may apply, see the AZ-104 Certification Cost 2026: Complete Pricing Breakdown.
No prerequisite certification is required to register. Microsoft recommends that candidates have hands-on experience with Azure administration, familiarity with operating systems, networking, servers, and virtualization, and working knowledge of PowerShell, Azure CLI, the Azure portal, ARM templates or Bicep, and Microsoft Entra ID. If you are newer to Azure, build that hands-on foundation before scheduling.
Appointment Time vs. Exam Time
Microsoft allocates 100 minutes to complete the exam itself. Your total appointment will be longer because it includes seat time, the tutorial, a candidate survey, and identity check-in. Do not book a 100-minute window in your calendar - budget at least two and a half hours for the full appointment to avoid rushing.
Scoring Model
The passing threshold is a scaled score of 700 or higher on Microsoft's scoring model. This is not equivalent to answering 70% of questions correctly. Microsoft uses psychometric scaling, which means the difficulty of the specific items you receive influences your final score. There is no public formula for translating raw correct answers into scaled scores, which is exactly why domain-weighted preparation - focusing hardest on the highest-weight areas - produces better outcomes than simply trying to answer as many practice questions as possible.
Domain-by-Domain Breakdown and Weight Analysis
Five domains structure the AZ-104 exam. Understanding the weight of each domain is the single most important input to your study prioritization. For a complete topic-level treatment of all five areas, the AZ-104 Exam Domains 2026: Complete Guide to All 5 Content Areas goes deeper than this summary.
Domain 1: Manage Azure Identities and Governance (20-25%)
The highest-weighted domain alongside compute. Covers Microsoft Entra ID users and groups, role-based access control (RBAC), Azure Policy, management groups, subscriptions, and resource locks.
- Understand the difference between Entra ID roles and Azure RBAC roles - this distinction appears frequently
- Know how to assign and scope RBAC roles at the management group, subscription, resource group, and resource levels
- Be able to create and enforce Azure Policy definitions and initiatives
- Understand cost management and tagging strategies for governance
Domain 2: Implement and Manage Storage (15-20%)
Covers Azure Storage accounts, blob storage tiers, Azure Files, storage redundancy options (LRS, ZRS, GRS, GZRS), shared access signatures, and Azure File Sync.
- Know when to use each redundancy tier and what failover behavior each provides
- Understand SAS token types and their appropriate use cases for secure access delegation
- Be able to configure lifecycle management policies for blob tiers
Domain 3: Deploy and Manage Azure Compute Resources (20-25%)
Tied with Domain 1 for highest weight. Covers virtual machines, VM scale sets, Azure App Service, Azure Container Instances, Azure Kubernetes Service basics, and ARM/Bicep templates.
- Know how to configure VM availability options: availability sets, availability zones, and scale sets
- Understand App Service plans, deployment slots, and scaling rules
- Be able to deploy resources using ARM templates and Bicep - this appears in lab tasks
Domain 4: Implement and Manage Virtual Networking (15-20%)
Covers VNets, subnets, network security groups, Azure DNS, VNet peering, VPN Gateway, Azure Load Balancer, Application Gateway, and network monitoring tools.
- Understand NSG rule priority and how traffic flows through inbound and outbound rules
- Know the difference between VNet peering and VPN Gateway in terms of cost, latency, and use case
- Be able to configure Azure DNS zones and name resolution across VNets
Domain 5: Monitor and Maintain Azure Resources (10-15%)
The lowest-weighted domain but essential for passing. Covers Azure Monitor, Log Analytics, alerts, Azure Backup, Azure Site Recovery, and update management.
- Know how to create and scope alert rules using metric and log-based signals
- Understand Recovery Services vault configuration for both Backup and Site Recovery
- Be able to interpret Log Analytics KQL queries at a basic level
Question Formats and How to Handle Each One
AZ-104 is not a pure multiple-choice exam. Candidates typically encounter 40 to 60 questions that span at least six distinct item formats. Knowing what to expect from each format prevents format-shock on test day.
| Item Type | What It Looks Like | How to Approach It |
|---|---|---|
| Multiple Choice (single answer) | One correct answer from four options | Eliminate clearly wrong answers first; watch for qualifiers like "least privilege" or "minimum cost" |
| Multiple Choice (multi-answer) | Select two or three correct answers from a list | The prompt will tell you how many to select - do not over-select |
| Case Study | A multi-page scenario with several questions referencing the same environment | Read the requirements and constraints tab first; questions reference the same architecture throughout |
| Drag-and-Drop / Build-List | Order steps or match items to categories | Sequence matters - practice ARM/Bicep deployment steps and CLI command ordering |
| Hot Area | Click the correct region in a screenshot or diagram | Requires portal familiarity - use Microsoft Learn sandbox labs to build visual memory of the UI |
| Lab / Performance-Based Task | Complete a real task in a live or simulated Azure environment | May appear at scheduled deliveries - practice in a real Azure subscription, not just reading |
Key Takeaway
Hot-area and lab items are the format most candidates underestimate. If you have only read about configuring NSGs or deploying VMs but have never done it in the portal or via CLI, you will struggle with these items. Hands-on lab time is not optional preparation for AZ-104.
A Realistic Study Plan Built Around AZ-104 Domains
A six-week schedule maps well onto the five domains, with the heaviest domains - identities/governance and compute - receiving the most time. This plan assumes roughly 10 to 12 hours of study per week. Adjust the timeline if you already have Azure experience in specific areas.
Domain 1 - Identities and Governance (20-25%)
- Configure Microsoft Entra ID users, groups, and guest access in a real tenant
- Assign RBAC roles at different scopes and verify effective permissions
- Create Azure Policy definitions and test compliance evaluation
- Build management group and subscription hierarchies in sandbox
Domain 3 - Compute Resources (20-25%)
- Deploy VMs using the portal, ARM templates, and Bicep - all three methods
- Configure availability sets, zones, and a basic VM scale set
- Create an App Service plan, deploy a web app, and swap deployment slots
- Practice ACI and review AKS node pool concepts
Domain 2 - Storage (15-20%)
- Create storage accounts with different redundancy tiers and compare failover behavior
- Generate SAS tokens with scoped permissions and expiry times
- Configure lifecycle management policies for hot, cool, and archive blob tiers
- Set up Azure File Sync and understand the cloud tiering concept
Domain 4 - Virtual Networking (15-20%)
- Build a hub-and-spoke VNet topology with peering enabled
- Create NSGs with custom inbound and outbound rules; test traffic flow
- Configure a public Azure DNS zone and a private DNS zone for VNet name resolution
- Deploy an Azure Load Balancer and review Application Gateway WAF basics
Domain 5 - Monitor and Maintain (10-15%)
- Configure a Log Analytics workspace and connect VM diagnostics
- Create metric and log-based alert rules with action groups
- Configure a Recovery Services vault and run a test backup and restore
- Review Azure Site Recovery replication configuration concepts
Full Review and Practice Testing
- Take timed practice exams at az104exam.com to identify weak domain coverage
- Revisit hot-area and drag-and-drop items in practice sets - these formats need repetition
- Re-do any lab tasks you struggled with in Weeks 1-5
- Review the official AZ-104 skills outline one final time for any updates
Which Resources Actually Align to the Exam
Not all study materials are created equal for AZ-104. The most reliable resources are ones that map directly to the five exam domains and include hands-on components.
Microsoft Learn (Free, Always Current)
Microsoft Learn's official AZ-104 learning path is the closest thing to a guaranteed-aligned resource because Microsoft authors it against the same skills outline that drives the exam. Work through every module, not just the ones covering topics you already know. The sandbox labs embedded in Microsoft Learn are particularly valuable for building the muscle memory needed for hot-area and performance-based items.
Practice Exams at az104exam.com
Timed, domain-tagged practice questions at az104exam.com serve two purposes: identifying knowledge gaps by domain, and building the cognitive speed needed to work through 40 to 60 questions in 100 minutes without running out of time. Use practice tests diagnostically, not just as a score-chasing exercise.
Hands-On Azure Access
Microsoft offers a free Azure account with a limited credit for new users. For lab practice beyond the free tier, consider the Microsoft Learn sandbox environments, which spin up temporary Azure tenants at no cost. Either approach works - what matters is that you configure real resources, not just read about them.
Understanding the 700 Passing Score
The scaled score of 700 means different things to different candidates depending on which items they received. Microsoft's adaptive scoring model accounts for item difficulty, which means a candidate who answers harder questions correctly may reach 700 with fewer total correct answers than a candidate who received easier items. This has two practical implications:
- Do not try to predict your score from practice test percentages. A 75% on a practice set does not map cleanly to a 750 scaled score on the real exam.
- Weighted domains matter most. Earning partial credit across Domains 1 and 3 - each at 20-25% - has far more scoring impact than perfecting Domain 5 at 10-15%.
For perspective on how candidates typically perform and what factors correlate with first-attempt success, see AZ-104 Pass Rate 2026: What the Data Shows.
Renewal, Career Value, and What Comes Next
The 12-Month Renewal Cycle
Once you earn the AZ-104, certification validity runs for 12 months. Renewal is free and completed entirely online through a Microsoft Learn renewal assessment - no Pearson VUE appointment, no $165 fee, no retake of the full exam. Microsoft sends reminders before expiration. The renewal assessment is shorter and less intensive than the full exam, but it still requires you to stay current with Azure changes over the year.
Career and Salary Implications
The AZ-104 is widely recognized by enterprise employers, cloud consulting firms, managed service providers, and government agencies running Azure workloads. Job titles that commonly list it as a requirement or preference include Cloud Administrator, Azure Systems Administrator, Cloud Engineer, and Infrastructure Engineer. For a detailed look at compensation trends for AZ-104 holders, the AZ-104 Salary Guide 2026: Complete Earnings Analysis covers role-specific and regional data. For an honest return-on-investment assessment, Is the AZ-104 Certification Worth It? Complete ROI Analysis 2026 examines who benefits most from earning the credential.
What to Pursue After AZ-104
The Azure Administrator Associate sits in the middle of the Microsoft certification hierarchy. Common progression paths include the Azure Solutions Architect Expert (AZ-305), which builds on the administrative foundation with design and architecture skills, and the Azure Security Engineer Associate (AZ-500), which extends identity and governance knowledge into cloud security. Some administrators also pursue specialty certifications in networking (AZ-700) or monitoring (AZ-2005). Your next step should align with your job role and the Azure work you actually do - or want to do.
Frequently Asked Questions
Candidates typically see approximately 40 to 60 questions. Microsoft does not publish a fixed number, and your specific question count may vary. Item types include multiple choice, case studies, drag-and-drop, hot area, build-list, and potentially lab or performance-based tasks depending on the delivery.
No formal prerequisite certification is required. Microsoft recommends practical experience with Azure administration, including familiarity with operating systems, networking, PowerShell, Azure CLI, ARM templates or Bicep, and Microsoft Entra ID. The AZ-900 Azure Fundamentals certification is not required but can be helpful as a foundation for candidates who are new to cloud concepts.
The standard U.S. exam fee is $165 USD through Pearson VUE. Pricing is based on the country or region where the exam is proctored and varies internationally. Microsoft offers exam discounts for certain groups including students, Microsoft Learn Student Ambassadors, and through Microsoft events or partner programs. See the AZ-104 Certification Cost 2026: Complete Pricing Breakdown for discount scenarios.
Preparation time varies significantly with prior experience. Candidates with active Azure administration experience may be ready in four to six weeks of focused study. Those newer to Azure or coming from on-premises backgrounds often need eight to twelve weeks to build the required hands-on fluency across all five domains. Domains 1 and 3 each carry 20-25% weight and typically require the most study time regardless of experience level.
Microsoft does not automatically include a free retake with the standard exam fee. Microsoft Certification Challenge promotions and some event-based vouchers occasionally include retake provisions, but these are limited-time offers. Standard exam policies require a waiting period and full retake fee if you do not pass. Microsoft's retake policy specifies how long you must wait before rescheduling - check the current policy on Microsoft Learn before booking if a retake applies to your situation.