- AZ-104 is Microsoft's role-based certification for Azure Administrators, requiring a passing scaled score of 700 or higher.
- The exam covers five domains; identities/governance and compute each carry the heaviest weight at 20-25% each.
- You get 100 minutes of assessment time; the full appointment including check-in and tutorials runs longer.
- The U.S. exam fee is typically $165 USD, and annual renewal is free via a Microsoft Learn online assessment.
What AZ-104 Actually Is
AZ-104 is the exam identifier for the Microsoft Certified: Azure Administrator Associate credential - one of the most widely recognized role-based certifications in cloud infrastructure. It validates that a candidate can configure, manage, and monitor Azure environments at a professional level, covering everything from identity governance to virtual networking to compute deployment.
Microsoft designed this certification specifically for professionals who work hands-on in Azure every day: cloud engineers, systems administrators, and IT infrastructure specialists who have shifted into cloud-first roles or are building toward them. Unlike entry-level Azure credentials, AZ-104 tests applied skill, not just conceptual awareness. You need to know how things actually work inside the Azure portal, with Azure CLI, with PowerShell, and with ARM templates or Bicep.
The certification is governed by Microsoft Corporation and delivered through Pearson VUE, the same proctoring partner behind most major IT vendor exams. If you want a deeper look at what the credential means within the broader Microsoft certification ecosystem, the AZ-104 Certification overview page covers that context in full.
Exam Mechanics: Format, Timing, and Scoring
Time Allocation
Microsoft allocates 100 minutes for the assessment itself. However, candidates should not confuse this with the total appointment length. The full session includes additional time for check-in procedures, an optional tutorial on question types, a pre-exam survey, and a post-exam survey. Plan your schedule accordingly - showing up mentally fresh matters more than trying to squeeze the appointment into a tight window.
Question Types and Volume
AZ-104 is not a straightforward multiple-choice test. Candidates commonly encounter between 40 and 60 questions across a range of interactive item types. These include:
- Multiple-choice and multiple-select - standard single or multi-answer questions
- Case studies - scenario-based sections where you answer several questions tied to a shared business scenario
- Drag-and-drop and build-list - ordering or assembling steps in a process
- Hot-area - clicking a specific element within a diagram or interface screenshot
- Lab or performance-based tasks - live or simulated Azure environment tasks, when scheduled for that delivery
Microsoft does not publish a fixed scored versus unscored item breakdown. Some questions may be unscored pilot items included for validation purposes; you will not be told which ones these are.
Scaled Scoring and What 700 Means
The passing score for AZ-104 is 700 on Microsoft's scaled scoring model. This is a critical distinction: 700 does not mean you need to answer 70% of questions correctly. Microsoft's scaled scoring adjusts for item difficulty, meaning the raw number of correct answers required to reach 700 varies depending on the specific form of the exam you receive. Treat 700 as a threshold on a 1-1000 scale, not as a percentage target.
The Five Domains You Will Be Tested On
AZ-104's content is organized into five official domains. The current skills measured are valid as of April 17, 2026. Understanding both what each domain covers and how much it weighs in the exam is essential for prioritizing your study time. For a deep-dive into all five areas, see the AZ-104 Exam Domains 2026: Complete Guide to All 5 Content Areas.
Domain 1: Manage Azure Identities and Governance (20-25%)
The single heaviest domain alongside compute. This section tests your ability to manage Microsoft Entra ID (formerly Azure Active Directory), configure role-based access control (RBAC), manage subscriptions and governance with Azure Policy, and work with management groups.
- Create and manage users, groups, and external identities in Microsoft Entra ID
- Configure and assign Azure RBAC roles at appropriate scopes
- Implement Azure Policy definitions and assignments
- Manage subscriptions, resource locks, and management group hierarchies
Domain 2: Implement and Manage Storage (15-20%)
Storage on Azure is more nuanced than it appears. This domain covers Azure Storage accounts, blob storage tiers, file shares, access controls, and data redundancy configurations.
- Configure storage account types and replication options (LRS, GRS, ZRS)
- Manage Azure Blob Storage, access tiers, and lifecycle policies
- Set up Azure Files and Azure File Sync
- Control access with shared access signatures (SAS) and storage firewalls
Domain 3: Deploy and Manage Azure Compute Resources (20-25%)
Tied with Domain 1 as the highest-weighted section. Covers virtual machines, App Service, Azure Container Instances, and infrastructure automation via ARM templates and Bicep.
- Create and configure Azure Virtual Machines, including availability sets and scale sets
- Deploy and manage Azure App Service plans and web apps
- Work with Azure Container Instances and Azure Kubernetes Service basics
- Automate deployments with ARM templates and Bicep
Domain 4: Implement and Manage Virtual Networking (15-20%)
Azure networking is highly interconnected. This domain tests virtual network creation, subnetting, DNS, VPN gateways, and network security groups.
- Create and configure VNets, subnets, and peering connections
- Configure Network Security Groups (NSGs) and Application Security Groups (ASGs)
- Implement Azure DNS, private DNS zones, and name resolution
- Set up VPN gateways, ExpressRoute connections, and Azure Bastion
Domain 5: Monitor and Maintain Azure Resources (10-15%)
The lightest domain by weight, but don't skip it. Azure Monitor, Log Analytics, alerts, and backup and recovery configurations are practical daily-admin tasks that appear throughout the exam in scenario questions.
- Configure Azure Monitor, metrics, and diagnostic settings
- Create and manage alerts and action groups
- Implement Azure Backup and Azure Site Recovery
- Work with Log Analytics workspaces and KQL queries
Individual domain deep-dives are available for each section: Domain 1, Domain 2, Domain 3, and Domain 4.
Who Should Take AZ-104?
The Target Candidate Profile
Microsoft does not require a prerequisite certification to register for AZ-104. However, the recommended experience profile is specific and demanding. Microsoft advises candidates to have practical familiarity with:
- Operating systems (Windows Server and Linux basics)
- Networking fundamentals (IP addressing, DNS, routing, firewall concepts)
- Server and virtualization concepts
- Azure CLI and PowerShell for automation tasks
- The Azure portal for GUI-based administration
- ARM templates and Bicep for infrastructure-as-code deployments
- Microsoft Entra ID for identity management
If you are new to Azure entirely, preparing for AZ-104 without any prior hands-on experience will be significantly more difficult. The AZ-900 (Azure Fundamentals) exam is not a prerequisite, but many candidates use it as a foundation before attempting AZ-104.
Who Hires for This Certification
AZ-104 holders are actively sought by organizations running Azure infrastructure at scale. This includes enterprise IT departments migrating from on-premises data centers, cloud-native companies operating Azure-first environments, managed service providers (MSPs) supporting multiple Azure tenants, and consulting firms implementing Azure solutions for clients. Government agencies and healthcare organizations with strict compliance requirements also rely heavily on certified Azure Administrators to manage identity controls and governance policies - which maps directly to Domain 1's weight in the exam.
For a detailed look at the roles and industries hiring for this credential, the AZ-104 Jobs resource breaks down employer demand by sector and job title.
| Candidate Type | Typical Starting Point | Primary Gap to Address |
|---|---|---|
| On-premises sysadmin moving to Azure | Strong OS/networking foundation | Azure-specific services and portal fluency |
| Cloud practitioner with AZ-900 | Conceptual Azure familiarity | Hands-on configuration depth in all five domains |
| Developer with Azure exposure | ARM/Bicep and compute knowledge | Networking, storage governance, and identity management |
| IT generalist with no Azure background | Broad IT fundamentals | All five domains plus Azure-specific tooling |
Registration, Cost, and Renewal
Registering Through Pearson VUE
Exam AZ-104 is scheduled through Pearson VUE, either at an authorized testing center or via online proctoring from your own location. Registration is handled through the Microsoft Learn certification dashboard, which links directly to Pearson VUE's scheduling system. You will need a Microsoft account and a Pearson VUE account to complete the process.
Exam Fee
The standard U.S. exam fee is $165 USD. Microsoft adjusts pricing based on the country or region where the exam is proctored, so candidates outside the United States may pay a different amount in local currency. Microsoft offers exam discounts for students and through certain Microsoft learning partners. For a full breakdown of all cost variables - including retake fees and discount programs - see the AZ-104 Certification Cost 2026: Complete Pricing Breakdown.
Certification Renewal
The AZ-104 certification is valid for 12 months from the date you pass. Renewal does not require retaking the full proctored exam. Instead, Microsoft offers a free online renewal assessment through Microsoft Learn. The renewal assessment is unproctored and can be taken from any device. You must pass it before your certification expiration date to maintain your active status. This annual renewal model keeps certified professionals current as Azure services evolve.
Preparing Strategically by Domain Weight
Given that Domains 1 and 3 each carry 20-25% of the exam weight - together representing roughly half of your total score - your preparation calendar should reflect that reality from day one. Below is a suggested five-week domain-focused framework. Adapt the duration based on your existing experience level.
Domain 1 - Identities and Governance (20-25%)
- Build Microsoft Entra ID users, groups, and external identity configurations in a free Azure sandbox
- Practice assigning and auditing RBAC roles at subscription and resource group scope
- Create and test Azure Policy definitions with deny and audit effects
Domain 3 - Compute Resources (20-25%)
- Deploy VMs manually and via ARM templates; practice resizing and extension configuration
- Configure VM scale sets with autoscale rules
- Deploy an App Service plan and web app; test deployment slots
Domains 2 and 4 - Storage and Networking (15-20% each)
- Configure storage accounts with correct redundancy options and access tiers for scenario-based questions
- Build a VNet with subnets, peering, and an NSG with inbound/outbound rules
- Practice SAS token generation and storage firewall rules
Domain 5 - Monitoring and Maintenance (10-15%)
- Set up Azure Monitor alerts with action groups for a test VM
- Configure a Recovery Services vault and run a backup policy
- Write basic KQL queries in a Log Analytics workspace
Full-Length Practice and Weak-Area Reinforcement
- Complete timed full-length practice exams at AZ-104 Exam Prep practice tests to simulate real exam pacing
- Review every missed question by domain and re-practice in the Azure portal
- Focus additional time on whichever domain your practice scores flag as weakest
For a more detailed, week-by-week preparation plan with resource recommendations, see the AZ-104 Study Guide 2026: How to Pass on Your First Attempt. If you want to calibrate your expectations before committing to a study schedule, the How Hard Is the AZ-104 Exam? Complete Difficulty Guide 2026 offers a thorough analysis of where most candidates struggle and why.
Practice tests are one of the highest-leverage tools available when preparing for AZ-104, specifically because the exam's question variety - case studies, drag-and-drop, hot-area items - requires format familiarity, not just content knowledge. Regular timed sessions on AZ-104 Exam Prep help you build both simultaneously.
Frequently Asked Questions
AZ-104 is the Microsoft exam code for the Azure Administrator Associate certification. "AZ" indicates the Azure product family, and "104" is the specific exam number assigned to this role-based assessment. For more on the naming convention, see AZ-104 Meaning.
No. Microsoft does not require a prerequisite certification to register. However, Microsoft strongly recommends that candidates have practical experience with Azure administration, including familiarity with the Azure portal, PowerShell, Azure CLI, ARM templates, Bicep, and Microsoft Entra ID before attempting the exam.
The certification is valid for 12 months. Renewal is free and is completed online through a Microsoft Learn renewal assessment - no retaking the full proctored exam. The renewal window opens 180 days before your expiration date.
The passing score is 700 on Microsoft's scaled scoring model, which runs from 1 to 1000. This is not a percentage - it does not mean you need to answer 70% of questions correctly. Microsoft's scaled model adjusts for question difficulty across different exam forms.
For professionals working in or moving into Azure administration roles, the credential provides measurable career benefits. The certification demonstrates validated, role-specific skills that employers actively look for when hiring for Azure infrastructure positions. For a full return-on-investment analysis, see Is the AZ-104 Certification Worth It? Complete ROI Analysis 2026.