How to Pass the AZ-104 Azure Administrator Exam
Master Azure administration with proven exam strategies and hands-on CLI practice.
The AZ-104 Microsoft Azure Administrator exam is a critical certification for IT professionals managing Azure cloud environments. This guide provides a structured approach to passing the exam, focusing on the five main domains: Manage Azure Identities and Governance, Implement and Manage Storage, Deploy and Manage Azure Compute Resources, Configure and Manage Virtual Networking, and Monitor and Maintain Azure Resources. With a passing score of 700 out of 1000 and approximately 40-60 questions, including case studies, you need a mix of theoretical knowledge and hands-on experience. This guide includes real Azure CLI commands, ARM template snippets, and practical tips to help you succeed.
Understand the Exam Blueprint and Domains
Start by downloading the official AZ-104 study guide from Microsoft. The exam covers five domains: Manage Azure Identities and Governance (20-25%), Implement and Manage Storage (15-20%), Deploy and Manage Azure Compute Resources (20-25%), Configure and Manage Virtual Networking (20-25%), and Monitor and Maintain Azure Resources (10-15%). Focus on the highest-weighted areas first. Use the Azure CLI to practice identity management tasks.
az ad user create --display-name "TestUser" --user-principal-name testuser@yourdomain.onmicrosoft.com --password "P@ssw0rd!" --force-change-password-next-loginSpend extra time on virtual networking and compute resources — they make up nearly 50% of the exam.
Don't skip the governance domain; many candidates underestimate its weight.
Set Up a Free Azure Subscription for Hands-On Practice
Create a free Azure account with a $200 credit for the first 30 days. Use this sandbox to deploy resources like virtual networks, storage accounts, and VMs. Practice creating resource groups and applying tags for cost management. The exam expects you to know how to use the Azure portal, CLI, and PowerShell interchangeably.
az group create --name MyResourceGroup --location eastus
az storage account create --name mystorageaccount123 --resource-group MyResourceGroup --location eastus --sku Standard_LRSUse the Azure Quickstart Templates repository on GitHub to deploy complex environments quickly.
Delete resources after practice to avoid exhausting your free credit.
Master Virtual Networking with Azure CLI
Virtual networking is a core domain. Practice creating VNets, subnets, network security groups (NSGs), and peering connections. Understand how to configure Azure DNS and private endpoints. The exam often includes scenario-based questions about network traffic flow and security rules.
az network vnet create --name MyVNet --resource-group MyResourceGroup --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefix 10.0.1.0/24
az network nsg create --name MyNSG --resource-group MyResourceGroup
az network nsg rule create --name AllowSSH --nsg-name MyNSG --resource-group MyResourceGroup --priority 100 --direction Inbound --access Allow --protocol Tcp --destination-port-ranges 22Use the Azure Network Watcher to test connectivity between VMs — it's a common exam scenario.
Remember that NSG rules are evaluated in priority order; lower numbers are processed first.
Deploy and Manage Azure Compute Resources
Learn to deploy virtual machines, scale sets, and container instances. Understand availability sets, availability zones, and load balancers. Practice using ARM templates and Bicep for infrastructure as code. The exam includes questions on VM sizing, pricing tiers, and high availability configurations.
az vm create --name MyVM --resource-group MyResourceGroup --image UbuntuLTS --size Standard_B1s --admin-username azureuser --generate-ssh-keys
az vm availability-set create --name MyAvSet --resource-group MyResourceGroupFamiliarize yourself with the differences between Azure Load Balancer, Application Gateway, and Traffic Manager.
Always test your ARM templates with the 'what-if' operation before deployment to avoid unexpected costs.
Implement and Manage Storage Solutions
Azure storage includes Blob, File, Queue, and Table storage. Practice creating storage accounts, configuring replication (LRS, GRS, RA-GRS), and setting up lifecycle management policies. Understand shared access signatures (SAS) and access keys. The exam often tests on storage security and data protection.
az storage account create --name mystorageacct --resource-group MyResourceGroup --location eastus --sku Standard_GRS --kind StorageV2
az storage container create --name mycontainer --account-name mystorageacct --auth-mode login
az storage blob upload --account-name mystorageacct --container-name mycontainer --file myfile.txt --name myfile.txt --auth-mode loginUse Azure Storage Explorer for a graphical view of your storage resources during practice.
Remember that changing replication tiers after creation may incur downtime or data loss.
Monitor and Maintain Azure Resources
Learn to use Azure Monitor, Log Analytics, and Application Insights. Practice setting up alerts, action groups, and diagnostic settings. Understand how to view metrics and logs for VMs, storage, and networking. The exam includes questions on monitoring performance and troubleshooting common issues.
az monitor log-analytics workspace create --resource-group MyResourceGroup --workspace-name MyWorkspace --location eastus
az monitor metrics alert create --name "High CPU Alert" --resource-group MyResourceGroup --scopes /subscriptions/.../resourceGroups/MyResourceGroup/providers/Microsoft.Compute/virtualMachines/MyVM --condition "avg Percentage CPU > 90" --window-size 5m --evaluation-frequency 1m --action-groups /subscriptions/.../resourceGroups/MyResourceGroup/providers/microsoft.insights/actionGroups/MyActionGroupSet up a dashboard in the Azure portal to visualize key metrics for quick exam recall.
Diagnostic settings incur additional costs; disable them after testing.
Take Practice Exams and Review Case Studies
Use official Microsoft practice tests and third-party resources like TutorialsDojo or MeasureUp. Focus on case studies, which are a significant part of the exam. Each case study has multiple questions based on a single scenario. Time yourself to simulate the real exam environment (120 minutes).
Example case study: Contoso Ltd. needs to migrate on-premises VMs to Azure. They require high availability, geo-redundant storage, and private network connectivity. Design a solution using Azure Migrate, Availability Zones, and VPN Gateway.Review the Microsoft Learn modules for each domain — they include free sandbox environments.
Avoid memorizing answers; understand the 'why' behind each solution.
Key tips
Book your exam at least 3 weeks in advance to create a study deadline and avoid last-minute cramming.
Use the Azure CLI daily for at least 30 minutes — muscle memory for commands helps in scenario-based questions.
Join the r/AZ104 subreddit and Microsoft Tech Community forums for real-world exam experiences and tips.
Create a cheat sheet of common Azure CLI commands, ARM template syntax, and PowerShell cmdlets for quick review.
Focus on understanding Azure RBAC roles, policy definitions, and management groups — these are heavily tested.
Take advantage of the free Azure sandbox in Microsoft Learn modules — it resets automatically and costs nothing.
Frequently asked questions
What is the passing score for AZ-104?
The passing score is 700 out of 1000. The exam typically has 40-60 questions, including multiple-choice, drag-and-drop, and case studies. You have 120 minutes to complete it.
How long should I study for AZ-104?
Most IT professionals need 4-6 weeks of dedicated study, spending 10-15 hours per week. Hands-on practice is essential — aim for at least 20 hours of lab work.
Can I take the AZ-104 exam online?
Yes, Microsoft offers online proctored exams through Pearson VUE. You need a quiet room, a webcam, and a stable internet connection. Check system requirements beforehand.
What are the most difficult topics on AZ-104?
Virtual networking (especially VNet peering, NSGs, and Azure DNS) and Azure governance (RBAC, policies, and management groups) are commonly cited as the hardest domains.
Is AZ-104 worth it for cloud administrators?
Absolutely. AZ-104 is one of the most recognized Azure certifications. It validates your ability to manage Azure environments and is often a prerequisite for higher-level certifications like AZ-305.
Related glossary terms
Dynamic route
A route that is automatically learned and updated by a router using a routing protocol, rather than being manually configured.
Reader role
A Reader role is a predefined set of permissions in identity and governance systems that allows a user to view resources and data but not create, modify, or delete anything.
Security pillar
The Security pillar is a set of best practices for designing and operating cloud systems that protect data, systems, and assets through confidentiality, integrity, and availability controls.
Guest user
A guest user is a temporary or limited-access account that allows someone to use a system, network, or application without full user privileges and often without a permanent identity.
Azure Load Balancer
Azure Load Balancer is a cloud service that evenly distributes incoming network traffic across multiple virtual machines or resources to ensure reliability and high availability.
Public IP address
A globally unique IP address assigned to a device that allows it to communicate directly over the internet.
Practice with real exam questions
Apply what you just learned with exam-style practice questions.