AZ-104 Azure Administrator Associate: The Complete 2026 Guide
If you want a hands-on cloud role that companies hire for every day, the Azure Administrator Associate certification (AZ-104) is a smart, practical choice. It proves you can build, secure, and keep Azure running—skills that teams rely on in production. In this complete 2026 guide, you’ll learn exactly what the AZ-104 exam covers, how it’s scored and timed, what it costs, the best resources to study, and a week-by-week plan to pass on your first attempt. We’ll also cover the “open-book” exam feature that lets you access Microsoft Learn during the test, annual renewal, and real-world scenarios you’ll be ready to handle after you earn the badge. [1][3]
What Is the AZ-104 Azure Administrator Associate Certification?
The Microsoft Certified: Azure Administrator Associate (exam AZ-104) validates your ability to implement, manage, and monitor an organization’s Azure environment across compute, storage, networking, identity, security, and governance. It’s designed for professionals who manage cloud infrastructure day to day—creating resources, applying policy and RBAC, optimizing costs, troubleshooting, and automating routine tasks with PowerShell and Azure CLI. The certification page (last updated April 18, 2025) also lists supported exam languages and links to scheduling through Pearson VUE. [1]
What makes AZ-104 especially useful?
It maps to real responsibilities: you’ll configure VNets, deploy VMs, secure storage, enforce policy, and monitor resources—the exact tasks that keep Azure workloads healthy. [1]
Microsoft updates the certification and its study guide to reflect current Azure services, so your proof of skill stays relevant. [1][2]
The credential uses an annual renewal (free online assessment) model, so your badge signals “current” to employers. [4]
Actionable takeaway:
Skim the official certification page to confirm languages, schedule options, and any recent updates before you start your study plan. Save it as your “source of truth.” [1]
AZ-104 Exam at a Glance
Before you plan, know the rules of the game. Here’s what to expect:
Exam time: You have 100 minutes of exam time. Plan for roughly 120 minutes total seat time including check-in and post-exam survey. [1][3]
Question count and types: Expect around 40–60 questions across multiple formats (single/multiple answer, drag-and-drop, case studies, and more). Some role-based exams may include labs (subject to availability). [3][1]
Open‑book support: During most role-based exams—including AZ-104—you can open Microsoft Learn in a split pane. The clock keeps running, and access is limited to Microsoft Learn content (no discussion forums or personal account areas). This rewards real-world troubleshooting skills and smart lookups. [3]
Passing score: 700 on a scaled score. [2]
Actionable takeaway:
Practice under exam conditions: do timed sets of 40–60 questions and rehearse 2–3 “lookups” in Microsoft Learn per set so you’re fast and focused on test day. [3]
Skills Measured: The AZ-104 Blueprint (Updated April 18, 2025)
Microsoft publishes an official study guide and weights for each domain. Use these weights to allocate your study time. [2]
Manage Azure identities and governance (20–25%)
Implement and manage storage (15–20%)
Deploy and manage Azure compute resources (20–25%)
Implement and manage virtual networking (15–20%)
Monitor and maintain Azure resources (10–15%)
Let’s break each one down with tasks, tips, and a quick hands‑on idea you can try this week.
Manage Azure identities and governance (20–25%)
You’ll configure access and guardrails:
Microsoft Entra ID basics: tenants, users, groups, app registrations, enterprise apps.
RBAC: built-in roles, custom roles, deny assignments, scoped assignments (subscription, resource group, resource).
Governance: Azure Policy definitions, assignments, initiatives; Blueprints (where used), management groups, resource locks and tags.
Cost management: budgets, cost alerts, and basic spend analysis.
Hands-on idea:
Create a management group hierarchy (e.g., Corp → Prod/NonProd), assign an initiative (set of policies) at the management group, and verify compliance on a test subscription. Then grant a least‑privilege custom role to a resource group. [2]
Tip:
Be crystal clear on RBAC vs. Policy: RBAC controls “who can do what”; Policy controls “what is allowed to exist.” Expect scenarios that mix them. [2]
Implement and manage storage (15–20%)
You’ll secure data and control access:
Storage accounts: redundancy (LRS, GRS, ZRS), encryption (Microsoft-managed vs. customer-managed keys), firewalls, and private endpoints.
Blob: containers, access tiers, lifecycle rules, SAS (user delegation vs. service SAS), immutability.
Azure Files: identity‑based access (Entra ID/Azure AD DS), SMB/NFS shares, backups.
Access: shared keys vs. SAS vs. role assignments; defending against public access when not needed.
Hands-on idea:
Create a storage account with private endpoint, enable lifecycle rules for cool/archive on older blobs, and configure an immutable policy for a container. Test access via SAS and RBAC. [2]
Tip:
Expect questions that blend security and cost—like choosing redundancy or lifecycle settings to meet recovery and budget goals. [2]
Deploy and manage Azure compute resources (20–25%)
You’ll build and run workloads:
Virtual Machines & Scale Sets: images, VM sizes, managed disks, availability options (zones/sets), extensions, and Azure Backup.
App Service: deployment slots, TLS/cert management, backup/restore, scaling.
Containers: ACR authentication, pushing images; basics of ACI and Container Apps.
Automation: ARM/Bicep templates, scripts, and Desired State Configuration (DSC) concepts.
Hands-on idea:
Deploy a VM scale set with a custom image, place it across zones, attach a load balancer, and configure autoscale on CPU. Back it up to a Recovery Services vault. [2]
Tip:
Know when to pick VMSS vs. single VMs vs. PaaS (App Service/Container Apps). Scenarios often test “right‑sizing” to meet SLAs and cost constraints. [2]
Implement and manage virtual networking (15–20%)
You’ll design connectivity and security:
VNets: address planning, subnets, VNet peering, UDRs, service endpoints vs. private endpoints.
Security: NSGs, ASGs, firewall basics, just‑in‑time access (via Defender), Bastion for secure admin.
Load balancing: public and internal load balancers; health probes.
Name resolution: private/public DNS, private DNS zones and linking to VNets.
Connectivity: site‑to‑site VPN, ExpressRoute concepts, NAT gateway.
Hands-on idea:
Build two VNets with overlapping and non-overlapping ranges, peer them, and test connectivity. Add a private endpoint to a storage account plus a private DNS zone and verify name resolution from a VM. [2]
Tip:
Keep straight the trade‑offs between service endpoints and private endpoints (especially routing, DNS, and security posture). [2]
Monitor and maintain Azure resources (10–15%)
You’ll keep Azure healthy:
Azure Monitor: metrics, logs, alerts (including action groups), Insights (e.g., VM/App/Container).
Network Watcher: connection troubleshoot, NSG flow logs, topology.
Backup & DR: Recovery Services vaults, backup policies, Azure Site Recovery basics; restore/runbook testing.
Updates & maintenance: update rings/maintenance windows where applicable.
Hands-on idea:
Create metric and log‑based alerts for a VM, route them to an action group (email/SMS/webhook), and visualize performance in a workbook. [2]
Tip:
Expect step‑by‑step scenario chains: detect an issue (Monitor/Network Watcher), trace root cause (logs), then remediate and prove compliance. [2]
Actionable takeaway for this whole section:
Print or copy the official domain list with weights and check off each task as you lab it once in portal and once via PowerShell/CLI. It doubles your retention and mirrors real-world flexibility. [2]
Who Should Take AZ-104? Prerequisites and Background
There are no formal prerequisites for AZ‑104. Microsoft recommends a foundation in operating systems, networking, servers, virtualization, and hands‑on experience with the Azure portal, PowerShell, Azure CLI, ARM/Bicep, and Microsoft Entra ID. If you’re newer to Azure, start with the dedicated “AZ‑104: Prerequisites for Azure administrators” learning path on Microsoft Learn—it’s designed to get you study‑ready fast. [1][5]
Actionable takeaway:
If you lack a skill (e.g., PowerShell), block off two focused evenings this week to learn only the cmdlets you’ll use most: AZ accounts, resource groups, networking, compute, and storage. Then immediately apply them in a small lab. [5]
How to Register and Where to Test
You’ll schedule AZ‑104 through Pearson VUE from the Microsoft Learn certification dashboard. You can test at a authorized test center or take an online proctored exam (OnVUE) from home—just make sure your space, ID, and system meet requirements. Microsoft allows at most two exams scheduled concurrently under your account. If you need testing accommodations (extra time, assistive tech), Microsoft supports a range of options—apply ahead of time. [8][9][15]
Actionable takeaway:
Decide now: test center or online proctoring. If online, do the official system test and a dry run in your exam room a week before the exam. [9]
Costs, Retakes, and Renewal
Price: Microsoft sets exam pricing by country/region. In the United States, “advanced role‑based” exams (which include associate/expert) are US$165 as of Nov 1, 2024. Your price may vary—confirm during scheduling. [11]
Retakes: If you don’t pass, you can retake after 24 hours; subsequent retakes require a 14‑day wait; maximum five attempts in a 12‑month period. Each retake incurs a new fee. [10]
Renewal: Role‑based certifications now expire annually. Starting six months before expiry, you can complete a free online renewal assessment on Microsoft Learn. When you pass, your certification extends one year from its current expiration date. [4]
Actionable takeaway:
Put your expiration and the 6‑month renewal window in your calendar the day you pass, so you never scramble to renew at the last minute. [4]
Your 6‑Week Study Roadmap (Proven Pace for Busy Learners)
This plan assumes 6–8 hours per week. Double the hours to compress it into 3–4 weeks.
Week 1: Orient and set up
Read the official AZ‑104 study guide and note unfamiliar objectives.
Create an Azure free account (for new customers) to run all labs for this plan. [2][7]
Quick wins: Do two identity/governance tasks in a throwaway subscription: create a custom RBAC role and apply an initiative at the management group. [2]
Weeks 2–3: Core build—identity/governance, storage, compute
Follow the Learn modules for identities & governance, then storage (redundancy, encryption, SAS, lifecycle), and compute (VM/VMSS, images/disks, App Service basics). [5]
Hands‑on: “Mirror the blueprint.” For each domain, do one portal‑based and one automation‑based deployment (PowerShell or CLI). [2]
Validation: Tie your labs back to the study guide objectives; if you can’t explain “why this choice,” repeat the lab with a different option. [2]
Week 4: Network deep dive
Learn and lab: VNets, peering, NSGs/ASGs, private endpoints vs. service endpoints, DNS (private zones), load balancers, Bastion. [2]
Build a full path: Client VM → private endpoint → storage; confirm resolution with private DNS. Add a load balancer to a small VMSS and test health probes. [2]
Week 5: Monitoring and resiliency
Learn and lab: Azure Monitor (metrics, logs, alerts, Insights), Network Watcher, Azure Backup, and Site Recovery. [2]
Create alert rules with action groups. Back up a VM to a Recovery Services vault, simulate a restore or a test failover. [2]
Week 6: Exam rehearsal and polish
Take the free Practice Assessment to identify weak areas. [1]
Use the Exam Sandbox so the interface feels familiar (menuing, review/flagging). [1]
Schedule your exam through Pearson VUE. Rehearse 2–3 Microsoft Learn lookups under time pressure—fast, focused, and only when needed. [8][3]
Actionable takeaway:
Keep a running “I would Google this” list while studying. By week 6, turn it into a 1‑page index of Microsoft Learn topics you can reach fast during the exam. [3]
Test-Day Strategy (And Common Pitfalls To Avoid)
Time block by domain: If you’re strong in networking, answer those quickly and bank time for governance or storage. Don’t spend five minutes on a 1‑point detail.
Smart open‑book: The Microsoft Learn pane is powerful but time‑boxed. Use it to confirm a specific parameter or option—never to learn a topic from scratch. [3]
Flag with purpose: If an item looks time‑consuming (case study text, multi‑step logic), place a best‑effort answer, flag, and return later if time allows.
Watch for “two truths and a better truth”: More than one answer can look correct; choose the most secure/least privilege/cloud‑native fit for the scenario.
Labs (if present): Do the tasks in the order given, verify results clearly (e.g., resource status, policy compliance), and don’t overengineer.
Actionable takeaway:
Practice two full 60‑minute sets in week 6—one with three quick Learn lookups and one with none—so you can manage either way on test day. [3]
Real-World Scenarios You’ll Be Ready to Own
Enforcing guardrails across many subscriptions:
Use management groups, policy initiatives, and RBAC to enforce standards while keeping teams agile.
Locking down data paths:
Switch from public endpoints to private endpoints with private DNS zones; confirm deny‑by‑default with NSGs and firewall rules.
Right‑sizing compute and reducing toil:
Move from snowflake VMs to VM Scale Sets with autoscale; standardize images; manage extensions as code; back up with vault policies.
Building resilient networks:
Spread across availability zones; use health probes and load balancers; verify routes with effective routes and Connection Troubleshoot.
Monitoring what matters:
Combine metric and log alerts with action groups; surface insights in workbooks; use Network Watcher flow logs to spot misrouted traffic.
Actionable takeaway:
After each lab, ask: “How would I prove this to a stakeholder?” Make a 3‑bullet “evidence snippet” (screenshot, command output, alert screen). It becomes interview‑ready proof of skill.
Career Impact and ROI
The badge aligns with roles like Azure Administrator, Cloud Administrator/Engineer, and Systems Administrator with Azure responsibility. Many organizations run Azure at enterprise scale, and the day‑to‑day skills of provisioning, securing, monitoring, and automating are continually in demand. [1]
Independent, broad‑market data backs the value of certification:
In Pearson VUE’s 2025 Value of IT Certification Candidate Report, 63% of certified candidates reported receiving or expecting a promotion; 32% reported salary increases post‑certification. [12]
Industry coverage highlights that most IT leaders see measurable value from hiring and upskilling certified professionals. [13]
Actionable takeaway:
Add two proof‑of‑work mini‑projects (e.g., “Secure storage with private endpoints and RBAC” and “Resilient VMSS with autoscale and LB”) to your résumé and LinkedIn to translate AZ‑104 into immediate career signals.
Budget, Retakes, and Admin Tips (So You Don’t Overpay)
Price awareness: In the U.S., role‑based exams are US$165 as of Nov 1, 2024; check your exact price during scheduling since it varies by country/region. [11]
Plan for a second shot: Retakes require a 24‑hour wait for the first retake and 14 days thereafter, up to five per year—budget accordingly. [10]
Use your own account: Book with your personal Microsoft account so certification records travel with you if you change employers. [1]
Look for discounts: Watch for occasional Microsoft or partner promotions (“Exam Replay” and event vouchers). [1]
Actionable takeaway:
Block a retake slot on your calendar two weeks after your first attempt. If you pass, you’ll free the slot; if not, you already have momentum and time reserved. [10]
FAQs
Q1: How long is the AZ-104 exam and how many questions are there?
Most candidates see around 40–60 questions. AZ‑104 gives you 100 minutes of exam time, and Microsoft’s guidance suggests roughly 120 minutes total seat time including check‑in and survey. [1][3]
Q2: Is AZ‑104 “open book”?
Yes. During most role‑based exams you can open Microsoft Learn in a split pane. It’s time‑boxed, and access is limited to Learn content (no forums or account settings). Practice quick lookups beforehand. [3]
Q3: Are there labs in AZ‑104?
Microsoft can include interactive components; they may be paused or reintroduced depending on service conditions. Prepare for both item‑based and task‑based experiences. [1]
Q4: What’s the passing score?
700 on a scaled score. [2]
Q5: How long is the certification valid and how do I renew?
It’s valid for one year. Starting six months before expiry, complete a free online renewal assessment on Microsoft Learn to extend for another year. [4]
Q6: Where do I schedule the exam, and can I take it from home?
Schedule via Pearson VUE from your Microsoft Learn certification dashboard. You can test at a center or use OnVUE online proctoring if you meet the environment and system requirements. [8][9]
Q7: What if I need accommodations?
Microsoft supports a range of testing accommodations (e.g., additional time, assistive tech). Apply in advance to ensure approval before scheduling. [15]
Conclusion:
If you like building and running real systems—not just talking about them—AZ‑104 is your kind of certification. It’s practical, recognized, and tightly aligned to everyday Azure administration. Use the blueprint in this guide, stay close to the official study guide, and build small labs that mirror each domain. In six focused weeks, you can turn preparation into a passing score—and a credential that opens doors. When you’re ready, I can tailor a personal study tracker and a 1‑page renewal checklist so you stay current year after year.
Citations
[1] Microsoft Certified: Azure Administrator Associate (exam page)
[2] Exam AZ‑104 Study Guide (skills measured and weights; pass score; updated Apr 18, 2025)
[3] Exam duration and experience (question counts, seat time, Microsoft Learn during exams)
[4] Renew your Microsoft Certification (annual renewal policy and process)
[5] AZ‑104: Prerequisites for Azure administrators (learning path)
[6] Course AZ‑104T00 (instructor‑led training)
[7] Azure Free Account (hands‑on practice environment)
[8] Register and schedule an exam (scheduling flow; two‑exam concurrent limit)
[9] Online proctored exams (OnVUE)
[10] Exam retake policy (24 hours; 14 days; five attempts/year)
[11] Microsoft Certification exam prices (effective Nov 1, 2024; US$165 in the U.S. for advanced role‑based)
[12] Pearson VUE 2025 Value of IT Certification Candidate Report (career outcomes)
[13] CIO reporting on certification value (industry coverage)