Microsoft Azure Administrator (AZ-104) Exam Blueprint

AZ-104

700 (1-1000)Passing Score
Practice Microsoft Azure Administrator on QuizForge

Credential type: certification examination · verified on the issuer's site September 19, 2026 issuer page

Exam Domains

1.0 Manage Azure identities and governance 20-25%
  • 1.1Manage Microsoft Entra users and groups
    Create users and groups; Manage user and group properties; Manage licenses in Microsoft Entra ID; Manage external users; Configure self-service password reset (SSPR)
  • 1.2Manage access to Azure resources
    Manage built-in Azure roles; Assign roles at different scopes; Interpret access assignments
  • 1.3Manage Azure subscriptions and governance
    Implement and manage Azure Policy; Configure resource locks; Apply and manage tags on resources; Manage resource groups; Manage subscriptions; Manage costs by using alerts, budgets, and Azure Advisor recommendations; Configure management groups
2.0 Implement and manage storage 15-20%
  • 2.1Configure access to storage
    Configure Azure Storage firewalls and virtual networks; Create and use shared access signature (SAS) tokens; Configure stored access policies; Manage access keys; Configure identity-based access for Azure Files
  • 2.2Configure and manage storage accounts
    Create and configure storage accounts; Configure Azure Storage redundancy; Configure object replication; Configure storage account encryption; Manage data by using Azure Storage Explorer and AzCopy
  • 2.3Configure Azure Files and Azure Blob Storage
    Create and configure a file share in Azure Files; Create and configure a container in Azure Blob Storage; Configure storage tiers; Configure soft delete for blobs and containers; Configure snapshots and soft delete for Azure Files; Configure blob lifecycle management; Configure blob versioning
3.0 Deploy and manage Azure compute resources 20-25%
  • 3.1Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files
    Interpret an Azure Resource Manager template or a Bicep file; Modify an existing Azure Resource Manager template; Modify an existing Bicep file; Deploy resources by using an Azure Resource Manager template or a Bicep file; Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file
  • 3.2Create and configure virtual machines
    Create a virtual machine; Configure encryption at host for Azure virtual machines; Move a virtual machine to another resource group, subscription, or region; Manage virtual machine sizes; Manage virtual machine disks; Deploy virtual machines to availability zones and availability sets; Deploy and configure an Azure Virtual Machine Scale Sets
  • 3.3Provision and manage containers in the Azure portal
    Create and manage an Azure Container Registry; Provision a container by using Azure Container Instances; Provision a container by using Azure Container Apps; Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps
  • 3.4Create and configure Azure App Service
    Provision an App Service plan; Configure scaling for an App Service plan; Create an App Service; Configure certificates and Transport Layer Security (TLS) for an App Service; Map an existing custom DNS name to an App Service; Configure backup for an App Service; Configure networking settings for an App Service; Configure deployment slots for an App Service
4.0 Implement and manage virtual networking 15-20%
  • 4.1Configure and manage virtual networks in Azure
    Create and configure virtual networks and subnets; Create and configure virtual network peering; Configure public IP addresses; Configure user-defined routes; Troubleshoot network connectivity
  • 4.2Configure secure access to virtual networks
    Create and configure network security groups (NSGs) and application security groups; Evaluate effective security rules in NSGs; Implement Azure Bastion; Configure service endpoints for Azure platform as a service (PaaS); Configure private endpoints for Azure PaaS
  • 4.3Configure name resolution and load balancing
    Configure Azure DNS; Configure an internal or public load balancer; Troubleshoot load balancing
5.0 Monitor and maintain Azure resources 10-15%
  • 5.1Monitor resources in Azure
    Interpret metrics in Azure Monitor; Configure log settings in Azure Monitor; Query and analyze logs in Azure Monitor; Set up alert rules, action groups, and alert processing rules in Azure Monitor; Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights; Use Azure Network Watcher and Connection monitor
  • 5.2Implement backup and recovery
    Create a Recovery Services vault; Create an Azure Backup vault; Create and configure a backup policy; Perform backup and restore operations by using Azure Backup; Configure Azure Site Recovery for Azure resources; Perform a failover to a secondary region by using Site Recovery; Configure and interpret reports and alerts for backups

Exam Details

Online ProctoringAvailable
RenewalRequired -- Microsoft certifications (Associate/Expert/Specialty) are renewed annually for free via a short renewal assessment on Microsoft Learn. Renewal assessment available 6 months before expiry. Fundamentals certifications do not expire.
PrerequisitesOperating systems, Networking, Servers, Virtualization (recommended); PowerShell, Azure CLI, Azure portal, Azure Resource Manager templates or Bicep files, Microsoft Entra ID (recommended)
Retake PolicyAfter the first failure, wait 24 hours. Wait 14 days between later attempts. At most five attempts in the 12 months starting with the first attempt; after five failures, wait until that period ends. Retake fees apply. See Microsoft's policy for exceptions.

Official Study Resources

official documentationAzure documentation
official documentationMicrosoft Entra ID
official documentationAzure Policy
official documentationAzure Storage
official documentationAzure Storage Explorer
official documentationAzure Blob Storage
official documentationARM templates
official documentationAzure Container Instances
official documentationAzure Container Apps
official documentationApp Service
official documentationAzure DNS
official documentationAzure Bastion
official documentationApplication Gateway
official documentationAzure Monitor
official documentationNetwork Watcher
official documentationAzure Site Recovery
official documentationAzure Backup service
official documentationMicrosoft Q&A | Microsoft Docs
official documentationExam Readiness Zone

Source review and study planning

Source checked 2026-09-04. Objectives effective 2026-04-17.

Official-source reconciliation with automated hierarchy checks; not an endorsement by Microsoft.

Official objectives | Official retake policy

Plan against this version