AZ-104 Cheat Sheet

AZ-104 Exam Blueprint — At a Glance

#	Domain	Weight	Questions	Practice
1.0	Manage Azure Identities and Governance Manage Azure Identities and Governance tests Azure AD users and groups, RBAC role assignments, management groups, subscriptions, and Azure Policy.	20%	259	Practice →
2.0	Implement and Manage Storage Implement and Manage Storage questions on this certification test your ability to deploy and manage implement and manage storage concepts in scenario-based situations.	15%	228	Practice →
3.0	Deploy and Manage Azure Compute Deploy and Manage Azure Compute questions on this certification test your ability to deploy and manage deploy and manage azure compute concepts in scenario-based situations.	20%	204	Practice →
4.0	Implement and Manage Virtual Networking Implement and Manage Virtual Networking questions on this certification test your ability to deploy and manage implement and manage virtual networking concepts in scenario-based situations.	20%	288	Practice →
5.0	Monitor and Maintain Azure Resources Monitor and Maintain Azure Resources questions on this certification test your ability to deploy and manage monitor and maintain azure resources concepts in scenario-based situations.	25%	191	Practice →
Total		100%	1,170

Domain Quick Reference

1.0Manage Azure Identities and Governance

Manage Azure Identities and Governance tests Azure AD users and groups, RBAC role assignments, management groups, subscriptions, and Azure Policy.

20%

Key concepts

✓Azure AD objects: users, groups, service principals, and managed identities.
✓RBAC: built-in roles (Owner, Contributor, Reader), custom roles, and scope hierarchy.
✓Management groups, subscriptions, resource groups, and how policy inheritance flows down.
✓Azure Policy effects: Deny, Audit, Append, DeployIfNotExists, and Modify.

Watch out for

⚠Assuming Owner at the resource group level grants Owner access to the subscription — roles do not inherit upward.
⚠Confusing Azure AD roles (directory-level) with Azure RBAC roles (resource-level).
⚠Forgetting that Azure Policy can only enforce compliance going forward — existing non-compliant resources require a remediation task.
⚠Mixing up Deny (blocks creation) and Audit (logs non-compliance) policy effects.

2.0Implement and Manage Storage

Implement and Manage Storage questions on this certification test your ability to deploy and manage implement and manage storage concepts in scenario-based situations.

15%

Key concepts

✓Core Implement and Manage Storage concepts and how they apply in real-world cloud scenarios.
✓How to deploy implement and manage storage correctly and verify the outcome.
✓Troubleshooting implement and manage storage issues by interpreting error output and system state.
✓Cloud best practices and Implement and Manage Storage design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

3.0Deploy and Manage Azure Compute

Deploy and Manage Azure Compute questions on this certification test your ability to deploy and manage deploy and manage azure compute concepts in scenario-based situations.

20%

Key concepts

✓Core Deploy and Manage Azure Compute concepts and how they apply in real-world cloud scenarios.
✓How to deploy deploy and manage azure compute correctly and verify the outcome.
✓Troubleshooting deploy and manage azure compute issues by interpreting error output and system state.
✓Cloud best practices and Deploy and Manage Azure Compute design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

4.0Implement and Manage Virtual Networking

Implement and Manage Virtual Networking questions on this certification test your ability to deploy and manage implement and manage virtual networking concepts in scenario-based situations.

20%

Key concepts

✓Core Implement and Manage Virtual Networking concepts and how they apply in real-world cloud scenarios.
✓How to deploy implement and manage virtual networking correctly and verify the outcome.
✓Troubleshooting implement and manage virtual networking issues by interpreting error output and system state.
✓Cloud best practices and Implement and Manage Virtual Networking design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

5.0Monitor and Maintain Azure Resources

Monitor and Maintain Azure Resources questions on this certification test your ability to deploy and manage monitor and maintain azure resources concepts in scenario-based situations.

25%

Key concepts

✓Core Monitor and Maintain Azure Resources concepts and how they apply in real-world cloud scenarios.
✓How to deploy monitor and maintain azure resources correctly and verify the outcome.
✓Troubleshooting monitor and maintain azure resources issues by interpreting error output and system state.
✓Cloud best practices and Monitor and Maintain Azure Resources design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'
→Flag uncertain questions and come back — don't waste time on one question.
→Eliminate obviously wrong options first, then choose between remaining ones.
→Trust your first instinct unless you have a specific reason to change.
→For AZ-104, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

Domain

Weight

Questions

Practice

1.0

Manage Azure Identities and Governance

Manage Azure Identities and Governance tests Azure AD users and groups, RBAC role assignments, management groups, subscriptions, and Azure Policy.

20%

259

Practice →

2.0

Implement and Manage Storage

Implement and Manage Storage questions on this certification test your ability to deploy and manage implement and manage storage concepts in scenario-based situations.

15%

228

Practice →

3.0

Deploy and Manage Azure Compute

Deploy and Manage Azure Compute questions on this certification test your ability to deploy and manage deploy and manage azure compute concepts in scenario-based situations.

20%

204

Practice →

4.0

Implement and Manage Virtual Networking

Implement and Manage Virtual Networking questions on this certification test your ability to deploy and manage implement and manage virtual networking concepts in scenario-based situations.

20%

288

Practice →

5.0

Monitor and Maintain Azure Resources

Monitor and Maintain Azure Resources questions on this certification test your ability to deploy and manage monitor and maintain azure resources concepts in scenario-based situations.

25%

191

Practice →

Total

100%

1,170

Domain Quick Reference

1.0Manage Azure Identities and Governance

Manage Azure Identities and Governance tests Azure AD users and groups, RBAC role assignments, management groups, subscriptions, and Azure Policy.

20%

Key concepts

✓Azure AD objects: users, groups, service principals, and managed identities.
✓RBAC: built-in roles (Owner, Contributor, Reader), custom roles, and scope hierarchy.
✓Management groups, subscriptions, resource groups, and how policy inheritance flows down.
✓Azure Policy effects: Deny, Audit, Append, DeployIfNotExists, and Modify.

Watch out for

⚠Assuming Owner at the resource group level grants Owner access to the subscription — roles do not inherit upward.
⚠Confusing Azure AD roles (directory-level) with Azure RBAC roles (resource-level).
⚠Forgetting that Azure Policy can only enforce compliance going forward — existing non-compliant resources require a remediation task.
⚠Mixing up Deny (blocks creation) and Audit (logs non-compliance) policy effects.

2.0Implement and Manage Storage

Implement and Manage Storage questions on this certification test your ability to deploy and manage implement and manage storage concepts in scenario-based situations.

15%

Key concepts

✓Core Implement and Manage Storage concepts and how they apply in real-world cloud scenarios.
✓How to deploy implement and manage storage correctly and verify the outcome.
✓Troubleshooting implement and manage storage issues by interpreting error output and system state.
✓Cloud best practices and Implement and Manage Storage design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

3.0Deploy and Manage Azure Compute

Deploy and Manage Azure Compute questions on this certification test your ability to deploy and manage deploy and manage azure compute concepts in scenario-based situations.

20%

Key concepts

✓Core Deploy and Manage Azure Compute concepts and how they apply in real-world cloud scenarios.
✓How to deploy deploy and manage azure compute correctly and verify the outcome.
✓Troubleshooting deploy and manage azure compute issues by interpreting error output and system state.
✓Cloud best practices and Deploy and Manage Azure Compute design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

4.0Implement and Manage Virtual Networking

Implement and Manage Virtual Networking questions on this certification test your ability to deploy and manage implement and manage virtual networking concepts in scenario-based situations.

20%

Key concepts

✓Core Implement and Manage Virtual Networking concepts and how they apply in real-world cloud scenarios.
✓How to deploy implement and manage virtual networking correctly and verify the outcome.
✓Troubleshooting implement and manage virtual networking issues by interpreting error output and system state.
✓Cloud best practices and Implement and Manage Virtual Networking design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

5.0Monitor and Maintain Azure Resources

Monitor and Maintain Azure Resources questions on this certification test your ability to deploy and manage monitor and maintain azure resources concepts in scenario-based situations.

25%

Key concepts

✓Core Monitor and Maintain Azure Resources concepts and how they apply in real-world cloud scenarios.
✓How to deploy monitor and maintain azure resources correctly and verify the outcome.
✓Troubleshooting monitor and maintain azure resources issues by interpreting error output and system state.
✓Cloud best practices and Monitor and Maintain Azure Resources design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For AZ-104, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

AZ-104 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Manage Azure Identities and Governance

2.0Implement and Manage Storage

3.0Deploy and Manage Azure Compute

4.0Implement and Manage Virtual Networking

5.0Monitor and Maintain Azure Resources

Exam Day Reminders

More AZ-104 resources

AZ-104 Cheat Sheet

AZ-104 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Manage Azure Identities and Governance

2.0Implement and Manage Storage

3.0Deploy and Manage Azure Compute

4.0Implement and Manage Virtual Networking

5.0Monitor and Maintain Azure Resources

Exam Day Reminders

More AZ-104 resources