Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
100 min
700
Associate
Registration
$165 USD
Pearson VUE or online proctoring
Validity
1 year
Pass a free online renewal assessment on Microsoft Learn before expiration; Renewal assessment available 6 months before certification expiration; Multiple attempts allowed for renewal assessment
AZ-104 Exam Topics and Domains
AZ-104 is organized into 5 weighted domains. Expect to work with Azure Portal, Azure App Service, Azure Storage, Azure Resource Manager, and more.
1
Manage Azure identities and governance
22.5%
Manage Microsoft Entra users and groups
Create users and groupsManage user and group propertiesManage licenses in Microsoft Entra IDManage external usersConfigure self-service password reset (SSPR)
- Create and manage users and groups in Microsoft Entra ID
- Assign and manage licenses
- Configure external user access
- Implement self-service password reset
Manage access to Azure resources
Manage built-in Azure rolesAssign roles at different scopesInterpret access assignments
- Understand and manage Azure RBAC
- Assign roles at appropriate scopes
- Interpret and troubleshoot access assignments
Manage Azure subscriptions and governance
Implement and manage Azure PolicyConfigure resource locksApply and manage tags on resourcesManage resource groupsManage subscriptionsManage costs by using alerts, budgets, and Azure Advisor recommendationsConfigure management groups
- Implement governance using Azure Policy
- Manage resource locks and tags
- Manage subscriptions and management groups
- Control costs using Cost Management tools
2
Implement and manage storage
17.5%
Configure access to storage
Configure Azure Storage firewalls and virtual networksCreate and use shared access signature (SAS) tokensConfigure stored access policiesManage access keysConfigure identity-based access for Azure Files
- Secure storage accounts with firewalls and networks
- Create and manage SAS tokens
- Configure identity-based access
- Manage storage account keys
Configure and manage storage accounts
Create and configure storage accountsConfigure Azure Storage redundancyConfigure object replicationConfigure storage account encryptionManage data by using Azure Storage Explorer and AzCopy
- Create and configure storage accounts
- Implement storage redundancy
- Configure encryption
- Manage data with Storage Explorer and AzCopy
Configure Azure Files and Azure Blob Storage
Create and configure a file share in Azure StorageCreate and configure a container in Blob StorageConfigure storage tiersConfigure soft delete for blobs and containersConfigure snapshots and soft delete for Azure FilesConfigure blob lifecycle managementConfigure blob versioning
- Create and manage Azure Files
- Configure Blob Storage containers
- Implement storage tiers and lifecycle management
- Configure soft delete and versioning
3
Deploy and manage Azure compute resources
22.5%
Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files
Interpret an Azure Resource Manager template or a Bicep fileModify an existing Azure Resource Manager templateModify an existing Bicep fileDeploy resources by using an Azure Resource Manager template or a Bicep fileExport a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file
- Understand ARM template and Bicep file structure
- Modify and deploy templates
- Export and convert templates
Create and configure virtual machines
Create a virtual machineConfigure Azure Disk EncryptionMove a virtual machine to another resource group, subscription, or regionManage virtual machine sizesManage virtual machine disksDeploy virtual machines to availability zones and availability setsDeploy and configure an Azure Virtual Machine Scale Sets
- Create and manage virtual machines
- Configure disk encryption and management
- Implement high availability with zones and sets
- Deploy and manage scale sets
Provision and manage containers in the Azure portal
Create and manage an Azure container registryProvision a container by using Azure Container InstancesProvision a container by using Azure Container AppsManage sizing and scaling for containers
- Create and manage container registries
- Provision containers using Container Instances and Container Apps
- Configure container sizing and scaling
Create and configure Azure App Service
Provision an App Service planConfigure scaling for an App Service planCreate an App ServiceConfigure certificates and Transport Layer Security (TLS) for an App ServiceMap an existing custom DNS name to an App ServiceConfigure backup for an App ServiceConfigure networking settings for an App ServiceConfigure deployment slots for an App Service
- Create and configure App Service plans
- Deploy and manage App Services
- Configure custom domains and SSL
- Implement deployment slots
4
Implement and manage virtual networking
17.5%
Configure and manage virtual networks in Azure
Create and configure virtual networks and subnetsCreate and configure virtual network peeringConfigure public IP addressesConfigure user-defined network routesTroubleshoot network connectivity
- Create and manage virtual networks and subnets
- Configure VNet peering
- Manage public IP addresses and routing
- Troubleshoot network connectivity
Configure secure access to virtual networks
Create and configure network security groups (NSGs) and application security groupsEvaluate effective security rules in NSGsImplement Azure BastionConfigure service endpoints for Azure platform as a service (PaaS)Configure private endpoints for Azure PaaS
- Configure network security groups
- Implement Azure Bastion
- Configure service and private endpoints
- Secure PaaS services
Configure name resolution and load balancing
Configure Azure DNSConfigure an internal or public load balancerTroubleshoot load balancing
- Configure Azure DNS
- Implement load balancing
- Troubleshoot load balancer issues
5
Monitor and maintain Azure resources
12.5%
Monitor resources in Azure
Interpret metrics in Azure MonitorConfigure log settings in Azure MonitorQuery and analyze logs in Azure MonitorSet up alert rules, action groups, and alert processing rules in Azure MonitorConfigure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor InsightsUse Azure Network Watcher and Connection Monitor
- Monitor resources using Azure Monitor
- Configure and query logs
- Set up alerts and action groups
- Use Azure Monitor Insights and Network Watcher
Implement backup and recovery
Create a Recovery Services vaultCreate an Azure Backup vaultCreate and configure a backup policyPerform backup and restore operations by using Azure BackupConfigure Azure Site Recovery for Azure resourcesPerform a failover to a secondary region by using Site RecoveryConfigure and interpret reports and alerts for backups
- Create and configure backup vaults
- Implement backup and restore operations
- Configure Azure Site Recovery
- Manage disaster recovery
How do I earn this certification?
Passing AZ-104 earns the Microsoft Certified: Azure Administrator Associate certification. It sits in the Azure Infrastructure track.
Next Level Options
- AZ-305 - Designing Microsoft Azure Infrastructure SolutionsNatural progression from administration to architecture
- AZ-700 - Designing and Implementing Microsoft Azure Networking SolutionsSpecialize in Azure networking
- AZ-500 - Microsoft Azure Security TechnologiesSpecialize in Azure security
- AZ-140 - Configuring and Operating Microsoft Azure Virtual DesktopSpecialize in virtual desktop infrastructure
Alternative Paths
- AZ-400 - Designing and Implementing Microsoft DevOps SolutionsRequires AZ-104 or AZ-204 as prerequisite • Combine administration with DevOps practices
- AZ-204 - Developing Solutions for Microsoft AzureShift from administration to development
- AZ-800 - Administering Windows Server Hybrid Core InfrastructureCombine Azure with on-premises Windows Server administration
- SC-900 - Microsoft Security, Compliance, and Identity FundamentalsBuild foundational security knowledge before pursuing AZ-500
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for AZ-104.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2025-04-18
- Announcement date: 2025-04-18
Updates
- Microsoft Entra ID Continuous updates Core component of identity and governance domain (20-25%) • Release date: Ongoing
- Azure Monitor Continuous updates Critical for monitoring domain (10-15%) • Release date: Ongoing
- Azure Storage Latest updates Major component of storage domain (15-20%) • Release date: Ongoing
- Azure Networking Latest updates Core networking domain (15-20%) • Release date: Ongoing
- Azure Compute Latest updates Major compute domain (20-25%) • Release date: Ongoing
Who should take this exam?
This exam is typically taken by Azure administrators and Cloud infrastructure professionals.