- AZ-104 is Microsoft's role-based exam for Azure Administrators, proctored through Pearson VUE at $165 USD in the U.S.
- The passing score is 700 on a scaled model - not a simple 70% of raw questions answered correctly.
- Identities/governance and compute are the two heaviest domains, each weighted at 20-25%.
- No prerequisite certification is required; Microsoft recommends hands-on Azure experience before sitting the exam.
What the AZ-104 Certification Actually Is
The AZ-104 Certification is Microsoft's official credential for professionals who administer cloud environments built on Microsoft Azure. Its full name is Microsoft Certified: Azure Administrator Associate, and it sits at the Associate tier of Microsoft's certification ladder - above the Fundamentals level but below the Expert tier occupied by credentials like the Azure Solutions Architect Expert.
Understanding AZ-104 meaning starts with what the role actually does. Azure Administrators are responsible for implementing, managing, and monitoring an organization's Azure environment. That covers everything from provisioning virtual machines and configuring virtual networks to enforcing identity governance policies and setting up backup and recovery solutions. The exam tests whether a candidate can perform those tasks at a production-ready level, not just recognize terminology.
Microsoft governs the credential, sets the skills measured, and determines the passing threshold. Pearson VUE handles the delivery - either at a physical test center or through an online proctored session. The U.S. exam fee is typically $165 USD, though pricing varies by the country or region where the exam is proctored.
If you want a broader orientation before diving deeper, the What Is AZ-104? overview covers the credential's place in the Microsoft ecosystem, while What Does AZ-104 Stand For? breaks down the naming convention Microsoft uses across its exam portfolio.
Exam Mechanics: Format, Fees, and Registration
Time Allocation and Appointment Structure
Microsoft lists 100 minutes to complete the AZ-104 assessment itself. However, your total appointment window will be longer. Pearson VUE adds time at the beginning for check-in procedures, identity verification, a system tutorial, and a post-exam survey. When scheduling, plan for a total block that exceeds 100 minutes so you are not rushed by external commitments.
Question Types and Format
Candidates commonly encounter 40-60 questions across multiple item formats. Microsoft does not publish a fixed split between scored and unscored items, so every question should be treated as if it counts. The item types you can expect include:
- Multiple choice - single or multiple correct answers
- Case studies - a detailed scenario followed by several related questions
- Drag-and-drop - ordering steps or matching components
- Build-list - selecting and sequencing items from a provided list
- Hot area - clicking the correct element within a diagram or interface screenshot
- Lab or performance-based tasks - live or simulated Azure portal work, which may appear depending on your specific delivery
The lab component is where many candidates underestimate preparation time. If your delivery includes performance-based tasks, you need genuine portal fluency - knowing which blade to navigate to, what settings to toggle, and how to verify success, not just the concept in the abstract.
Registration and Pricing
Register directly through Pearson VUE after creating or signing into a Microsoft certification profile. The standard U.S. fee is $165 USD. Pricing adjusts based on the country or region where the exam is proctored, which can make a meaningful difference for candidates in certain markets. Microsoft also offers exam discounts to students and eligible Microsoft Partner employees, so verify any applicable discounts before purchasing. For a full breakdown of all associated costs, see the AZ-104 Certification Cost 2026: Complete Pricing Breakdown.
The Five Exam Domains Explained
The AZ-104 exam is organized into five content domains, each carrying a specific percentage weight. Understanding these weights is the single most strategic piece of information a candidate can act on. For a deep dive into every domain, the AZ-104 Exam Domains 2026: Complete Guide to All 5 Content Areas covers each area in full detail. Here is what each domain demands at a practical level.
Domain 1: Manage Azure Identities and Governance (20-25%)
This is one of the two heaviest-weighted domains on the exam. Candidates must demonstrate command of Microsoft Entra ID (formerly Azure Active Directory), including user and group management, role-based access control (RBAC), Azure Policy, management groups, subscriptions, and resource locks.
- Configure and manage Microsoft Entra users, groups, and external identities
- Assign and interpret RBAC roles at management group, subscription, and resource group scopes
- Implement and evaluate Azure Policy definitions and initiatives
- Apply resource tags and locks to enforce governance at scale
Domain 2: Implement and Manage Storage (15-20%)
Storage questions test your ability to configure Azure Storage accounts, understand redundancy options, manage blob lifecycles, secure storage with shared access signatures and private endpoints, and integrate Azure Files and Azure File Sync.
- Choose between LRS, ZRS, GRS, and GZRS based on scenario requirements
- Configure blob access tiers and lifecycle management policies
- Generate and scope shared access signatures (SAS) appropriately
- Set up Azure File Sync to extend on-premises file servers to Azure
Domain 3: Deploy and Manage Azure Compute Resources (20-25%)
Tied with Domain 1 for the highest weighting, this domain covers virtual machines, availability sets and zones, VM scale sets, Azure App Service, Azure Container Instances, and infrastructure-as-code with ARM templates and Bicep.
- Deploy and resize VMs; configure disks, extensions, and custom script execution
- Set up VM scale sets with autoscale rules and health probes
- Deploy web apps on Azure App Service and configure deployment slots
- Author and deploy ARM templates or Bicep files for repeatable infrastructure
Domain 4: Implement and Manage Virtual Networking (15-20%)
Networking questions span virtual network design, subnetting, network security groups, Azure DNS, VPN gateways, ExpressRoute, Azure Load Balancer, Application Gateway, and network monitoring tools.
- Design VNet address spaces and configure subnet segmentation
- Apply and troubleshoot NSG rules and application security groups
- Configure VNet peering and site-to-site VPN connections
- Implement Azure Load Balancer versus Application Gateway based on Layer 4 vs. Layer 7 needs
Domain 5: Monitor and Maintain Azure Resources (10-15%)
Although the lightest-weighted domain, monitoring questions appear consistently and can be tie-breakers for candidates near the passing threshold. Topics include Azure Monitor, Log Analytics workspaces, alerts, diagnostic settings, Azure Backup, and Azure Site Recovery.
- Configure diagnostic settings to route logs to Log Analytics, Storage, or Event Hub
- Create metric alerts and action groups for automated notification
- Set up Azure Backup for VMs and Azure Files with appropriate recovery point objectives
- Configure Azure Site Recovery replication for business continuity
For individual domain deep dives, explore the dedicated study guides: Domain 1: Manage Azure Identities and Governance, Domain 2: Implement and Manage Storage, Domain 3: Deploy and Manage Azure Compute Resources, and Domain 4: Implement and Manage Virtual Networking.
Who Earns the AZ-104 and Why Employers Care
The Target Candidate Profile
Microsoft recommends that candidates have practical experience with operating systems, networking, servers, and virtualization before attempting AZ-104. Familiarity with PowerShell, the Azure CLI, the Azure portal, and ARM or Bicep templates is expected - not introduced during the exam. Microsoft Entra ID knowledge is equally essential given that Domain 1 alone accounts for up to a quarter of the exam.
This is not a beginner credential. Candidates who pass AZ-104 are expected to independently manage an Azure tenant, not just understand what Azure is. If you are starting from zero cloud experience, the AZ-900 Azure Fundamentals exam provides foundational grounding, though it is not a formal prerequisite for AZ-104.
Industries and Roles That Request It
The AZ-104 appears in job postings across financial services, healthcare, government, managed service providers, and technology companies - essentially any sector running infrastructure on Azure. Common job titles tied to the credential include Cloud Administrator, Azure Engineer, Infrastructure Engineer, Systems Administrator (cloud-focused), and DevOps Engineer where infrastructure management is part of the scope.
Because Azure is one of the dominant hyperscalers, the credential has broad hiring signal value. Employers use it as a filter for candidates who can manage production environments without extensive onboarding time. For a full look at which roles and industries value the credential most, see AZ-104 Jobs and the AZ-104 Salary Guide 2026: Complete Earnings Analysis.
Scoring, Passing, and Staying Certified
How the Score Works
AZ-104 uses Microsoft's scaled scoring model, where 700 is the passing threshold on a scale that typically runs to 1000. This is a critical distinction: 700 does not mean answering 70% of questions correctly. Scaled scoring adjusts for question difficulty, meaning a harder question answered correctly may contribute more to your score than an easier one. You will not know your exact scaled-to-raw conversion, which is why chasing a specific raw percentage during practice is less useful than consistently demonstrating competence across all five domains.
Key Takeaway
A 700 passing score reflects scaled difficulty adjustment - not a 70% raw score. Candidates who practice primarily with easy questions may pass practice sets comfortably but still fall short of 700 on exam day. Prioritize domain coverage over surface-level pass rates in practice.
Renewal Without Re-Examination
Once certified, the AZ-104 credential requires renewal every 12 months. Unlike the original exam, renewal is completely free and is completed through an online renewal assessment on Microsoft Learn. The renewal assessment is shorter and unproctored, focused on skills that have evolved since your last certification. The current skills measured are valid as of April 17, 2026. Candidates who let their certification lapse must retake the full proctored exam and pay the full exam fee.
| Attribute | Initial Exam (AZ-104) | Annual Renewal |
|---|---|---|
| Delivery method | Pearson VUE (proctored) | Microsoft Learn (online, unproctored) |
| Cost | $165 USD (U.S. pricing) | Free |
| Time limit | 100 minutes | No fixed time limit published |
| Passing threshold | 700 (scaled score) | Not publicly disclosed |
| Frequency | Once (then renewal) | Every 12 months |
A Domain-Anchored Preparation Roadmap
Effective preparation for AZ-104 should mirror the exam's domain weighting - spending the most time on Domains 1 and 3 (20-25% each), then working through Domains 2 and 4 (15-20% each), and closing with Domain 5 (10-15%). The following timeline assumes a candidate with some Azure familiarity preparing over six weeks.
Domain 1 - Identities and Governance
- Build Microsoft Entra users and groups in a free Azure tenant
- Assign RBAC roles at different scopes and observe effective permissions
- Create and assign a custom Azure Policy definition
Domain 3 - Compute Resources
- Deploy Windows and Linux VMs; attach and manage data disks
- Configure a VM scale set with a custom autoscale rule
- Deploy an App Service plan and swap deployment slots
- Author a basic Bicep template and deploy it via Azure CLI
Domain 2 - Storage
- Create storage accounts with different redundancy configurations
- Generate service-level and account-level SAS tokens and test access
- Configure blob lifecycle management policies and verify tier transitions
Domain 4 - Virtual Networking
- Design and deploy VNets with multiple subnets; configure NSG rules
- Set up VNet peering between two virtual networks and test connectivity
- Deploy an Azure Load Balancer with a backend pool and health probe
Domain 5 - Monitor and Maintain
- Configure diagnostic settings to send VM logs to a Log Analytics workspace
- Create a metric alert with an action group for email notification
- Set up Azure Backup for a VM and perform a test restore
Full Review and Practice Assessment
- Take timed practice exams at AZ-104 Exam Prep practice tests and review every missed question by domain
- Revisit weak areas identified in Weeks 1-5 with targeted lab repetition
- Simulate exam conditions: 100-minute timer, no interruptions, no notes
For a full structured study plan with resource recommendations, the AZ-104 Study Guide 2026: How to Pass on Your First Attempt walks through preparation week by week with specific Microsoft Learn path references. And if you are weighing whether the investment of time and money makes sense for your career, Is the AZ-104 Certification Worth It? Complete ROI Analysis 2026 provides a detailed analysis.
For benchmarking your readiness before exam day, AZ-104 Exam Prep provides practice questions aligned to all five domains with detailed explanations - the closest simulation available outside of the official Pearson VUE environment.
Frequently Asked Questions
No formal prerequisite certification is required. Microsoft recommends practical experience with Azure administration, operating systems, networking, PowerShell, the Azure CLI, the Azure portal, ARM/Bicep templates, and Microsoft Entra ID - but these are recommendations, not enforced requirements. Candidates who attempt AZ-104 without hands-on experience typically find the exam significantly more difficult.
The passing score is 700 on Microsoft's scaled scoring model. This is not a percentage of questions answered correctly. Scaled scoring adjusts for the difficulty of the specific question set you receive, so 700 scaled points may correspond to different raw question counts across different exam deliveries.
Microsoft lists 100 minutes for the assessment itself. The full Pearson VUE appointment is longer because it includes check-in, identity verification, a system tutorial, and a post-exam survey. Budget additional time beyond the 100-minute assessment when scheduling your appointment.
The AZ-104 certification must be renewed every 12 months. Renewal is free and completed through an online assessment on Microsoft Learn - no proctoring, no retake fee. The renewal assessment covers skills that have evolved since your certification date. If you let the certification expire, you must retake the full proctored exam and pay the exam fee again.
Prioritize Domain 1 (Manage Azure Identities and Governance) and Domain 3 (Deploy and Manage Azure Compute Resources) first, as each is weighted at 20-25% - together they represent roughly half the exam. Then give equal attention to Domains 2 and 4 (each 15-20%), and close your preparation with Domain 5 (Monitor and Maintain, 10-15%). Neglecting any domain entirely is risky because questions from each area appear throughout the exam.