Exam Domains

1.0 Manage Azure identities and governance 20%

1.1Manage Microsoft Entra users and groups
Create users and groups; Manage user and group properties; Manage licenses in Microsoft Entra ID; Manage external users; Configure self-service password reset (SSPR)
1.2Manage access to Azure resources
Manage built-in Azure roles; Assign roles at different scopes; Interpret access assignments
1.3Manage Azure subscriptions and governance
Implement and manage Azure Policy; Configure resource locks; Apply and manage tags on resources; Manage resource groups; Manage subscriptions; Manage costs by using alerts, budgets, and Azure Advisor recommendations; Configure management groups

2.0 Implement and manage storage 15%

2.1Configure access to storage
Configure Azure Storage firewalls and virtual networks; Create and use shared access signature (SAS) tokens; Configure stored access policies; Manage access keys; Configure identity-based access for Azure Files
2.2Configure and manage storage accounts
Create and configure storage accounts; Configure Azure Storage redundancy; Configure object replication; Configure storage account encryption
2.3Manage data by using Azure Storage Explorer and AzCopy
Configure Azure Files and Azure Blob Storage; Create and configure a file share in Azure Files; Create and configure a container in Azure Blob Storage; Configure storage tiers; Configure soft delete for blobs and containers; Configure snapshots and soft delete for Azure Files; Configure blob lifecycle management; Configure blob versioning

3.0 Deploy and manage Azure compute resources 20%

3.1Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files
Interpret an Azure Resource Manager template or a Bicep file; Modify an existing Azure Resource Manager template; Modify an existing Bicep file; Deploy resources by using an Azure Resource Manager template or a Bicep file; Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file
3.2Create and configure virtual machines
Create a virtual machine; Configure encryption at host for Azure virtual machines; Move a virtual machine to another resource group, subscription, or region; Manage virtual machine sizes; Manage virtual machine disks; Deploy virtual machines to availability zones and availability sets
3.3Deploy and configure an Azure Virtual Machine Scale Sets
Provision and manage containers in the Azure portal; Create and manage an Azure Container Registry; Provision a container by using Azure Container Instances; Provision a container by using Azure Container Apps; Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps
3.4Create and configure Azure App Service
Provision an App Service plan; Configure scaling for an App Service plan; Create an App Service; Configure certificates and Transport Layer Security (TLS) for an App Service; Map an existing custom DNS name to an App Service; Configure backup for an App Service; Configure networking settings for an App Service; Configure deployment slots for an App Service

4.0 Implement and manage virtual networking 15%

4.1Configure and manage virtual networks in Azure
Create and configure virtual networks and subnets; Create and configure virtual network peering; Configure public IP addresses; Configure user-defined routes; Troubleshoot network connectivity
4.2Configure secure access to virtual networks
Create and configure network security groups (NSGs) and application security groups; Evaluate effective security rules in NSGs; Implement Azure Bastion; Configure service endpoints for Azure platform as a service (PaaS); Configure private endpoints for Azure PaaS
4.3Configure name resolution and load balancing
Configure Azure DNS; Configure an internal or public load balancer; Troubleshoot load balancing

5.0 Monitor and maintain Azure resources 10%

5.1Monitor resources in Azure
Interpret metrics in Azure Monitor; Configure log settings in Azure Monitor; Query and analyze logs in Azure Monitor; Set up alert rules, action groups, and alert processing rules in Azure Monitor; Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights
5.2Implement backup and recovery
Create a Recovery Services vault; Create an Azure Backup vault; Create and configure a backup policy; Perform backup and restore operations by using Azure Backup; Configure Azure Site Recovery for Azure resources; Perform a failover to a secondary region by using Site Recovery; Configure and interpret reports and alerts for backups

Exam Details

Question TypesMultiple Choice, Multiple Response, Drag and Drop, Case Study, Build List, Hot Area, Repeated Answer Choices

FormatLinear

Online ProctoringAvailable

ID RequirementsOne valid, government-issued photo ID. Name on ID must match registration. For online: webcam required, room must be clear of people and materials.

RenewalRequired -- Microsoft certifications (Associate/Expert/Specialty) are renewed annually for free via a short renewal assessment on Microsoft Learn. Renewal assessment available 6 months before expiry. Fundamentals certifications do not expire.

PrerequisitesOperating systems, Networking, Servers, Virtualization; PowerShell, Azure CLI, Azure portal, Azure Resource Manager templates or Bicep files, Microsoft Entra ID

Retake PolicyNo waiting period for first retake if score >= 500 on failed attempt. If score < 500: 14-day waiting period before retake. Maximum 5 attempts per exam per year (365 days). Free retake voucher sometimes included in official instructor-led training.

LanguagesEnglish, Simplified Chinese, Traditional Chinese, French, German, Japanese, Korean, Portuguese, Russian, Spanish, Arabic, Indonesian

Microsoft Azure Administrator (AZ-104) Exam Blueprint

Exam Domains

Exam Details

Official Study Resources