Complete AZ-104 Azure Administrator study guide — identity, storage, compute, networking, and monitoring for Azure admins.
This guide works best as a loop: read a chapter, test yourself with practice questions, look up unfamiliar terms in the glossary, then move to the next chapter.
168 chapters covering every exam objective. Each chapter includes key concepts, exam tips, common traps, comparison tables, and a 5-question quiz at the end.
Start Chapter 1Free timed and untimed practice with instant feedback and full explanations. Pick 10–120 questions per session. Filter by domain to drill your weak areas.
Go to practice testEvery AZ-104term defined and searchable. Use it when a chapter mentions a concept you haven't seen before or want a quick refresher on.
Browse glossaryExam blueprint, domain weights, passing score, duration, cost, and registration links. Start here if you're new to this certification.
View exam guide41 chapters
VPN Gateway and ExpressRoute
Objective 4.4 · Networking
Azure Virtual Networks and Subnets
Objective 4.1 · Networking
Network Security Groups (NSG)
Objective 4.1 · Networking
VNet Peering and Global VNet Peering
Objective 4.1 · Networking
Azure Load Balancer
Objective 4.2 · Networking
Azure Application Gateway and WAF
Objective 4.2 · Networking
Azure DNS and Private DNS Zones
Objective 4.3 · Networking
Azure Firewall
Objective 4.5 · Networking
Azure Bastion
Objective 4.5 · Networking
User-Defined Routes (UDR) and Route Tables
Objective 4.1 · Networking
Service Endpoints vs Private Endpoints
Objective 4.1 · Networking
Azure Private Link Service
Objective 4.1 · Networking
Application Security Groups (ASG)
Objective 4.1 · Networking
Service Tags in NSG Rules
Objective 4.1 · Networking
Cross-Subscription and Cross-Region VNet Peering
Objective 4.1 · Networking
Subnet Delegation in Azure
Objective 4.1 · Networking
IPv6 in Azure Virtual Networks
Objective 4.1 · Networking
Azure NAT Gateway
Objective 4.1 · Networking
Azure Front Door and CDN Profiles
Objective 4.2 · Networking
Azure Traffic Manager Routing Methods
Objective 4.2 · Networking
Azure CDN Profiles and Rules Engine
Objective 4.2 · Networking
Public IP Address SKUs and Allocation Methods
Objective 4.2 · Networking
Public IP Address Prefixes
Objective 4.2 · Networking
Load Balancer Frontend, Backend, and Health Probe Rules
Objective 4.2 · Networking
Application Gateway v2 Autoscaling
Objective 4.2 · Networking
Application Gateway Ingress Controller for AKS
Objective 4.2 · Networking
Azure DDoS Protection Standard
Objective 4.5 · Networking
Web Application Firewall (WAF) Policies
Objective 4.5 · Networking
Azure Firewall Premium Features
Objective 4.5 · Networking
Azure Firewall Policy and Rule Collections
Objective 4.5 · Networking
Azure Route Server
Objective 4.4 · Networking
ExpressRoute Global Reach and FastPath
Objective 4.4 · Networking
VPN Gateway BGP Configuration
Objective 4.4 · Networking
Point-to-Site VPN Gateway
Objective 4.4 · Networking
Azure Virtual WAN
Objective 4.4 · Networking
Hub-and-Spoke Network Topology on Azure
Objective 4.4 · Networking
Network Virtual Appliances (NVA)
Objective 4.5 · Networking
Just-in-Time VM Access
Objective 4.5 · Networking
Azure DNS Private Resolver
Objective 4.3 · Networking
Azure Bastion Standard vs Developer SKU
Objective 4.5 · Networking
Azure Connection Monitor v2
Objective 4.5 · Networking
35 chapters
Dynamic Membership Groups
Objective 1.1 · Identity Governance
Privileged Identity Management (PIM)
Objective 1.1 · Identity Governance
Managed Identities for Azure Resources
Objective 1.1 · Identity Governance
Microsoft Entra ID Users and Groups
Objective 1.1 · Identity Governance
Azure RBAC Role Assignments
Objective 1.1 · Identity Governance
Azure AD Connect and Hybrid Identity
Objective 1.1 · Identity Governance
Azure Policy and Initiatives
Objective 1.2 · Identity Governance
Management Groups and Subscriptions
Objective 1.2 · Identity Governance
Resource Locks and Tag Governance
Objective 1.2 · Identity Governance
Azure Blueprints for Compliance
Objective 1.2 · Identity Governance
MFA and Passwordless Authentication in Entra
Objective 1.1 · Identity Governance
External Identities and B2B Collaboration
Objective 1.1 · Identity Governance
Access Reviews in Entra ID
Objective 1.1 · Identity Governance
Entitlement Management and Access Packages
Objective 1.1 · Identity Governance
Azure AD Application Proxy
Objective 1.1 · Identity Governance
Self-Service Password Reset (SSPR)
Objective 1.1 · Identity Governance
Azure AD Domain Services (AADDS)
Objective 1.1 · Identity Governance
Custom Domains in Entra ID
Objective 1.1 · Identity Governance
Administrative Units in Entra
Objective 1.1 · Identity Governance
App Registrations and Service Principals
Objective 1.1 · Identity Governance
Named Locations and Conditional Access Policies
Objective 1.1 · Identity Governance
Token Lifetime and Session Control Policies
Objective 1.1 · Identity Governance
Identity Protection Risk Policies
Objective 1.1 · Identity Governance
Custom RBAC Role Definitions
Objective 1.1 · Identity Governance
Cross-Tenant Synchronization
Objective 1.1 · Identity Governance
Emergency Access Break-Glass Accounts
Objective 1.1 · Identity Governance
Resource Tagging Strategy and Enforcement
Objective 1.2 · Identity Governance
Azure Cost Management and Budgets
Objective 1.2 · Identity Governance
Azure Lighthouse for Multi-Tenant Management
Objective 1.2 · Identity Governance
Azure Arc for Servers
Objective 1.2 · Identity Governance
Subscription Transfer and Resource Move Operations
Objective 1.2 · Identity Governance
Azure Policy Remediation Tasks
Objective 1.2 · Identity Governance
Azure Compliance Dashboard and Regulatory Standards
Objective 1.2 · Identity Governance
Deny Assignments and Resource Locks Deep Dive
Objective 1.2 · Identity Governance
Well-Architected Framework: Governance Pillar
Objective 1.2 · Identity Governance
24 chapters
Customer-Managed Keys (CMK) for Storage Encryption
Objective 2.3 · Storage
Azure Storage Accounts
Objective 2.1 · Storage
Azure Files and Azure File Sync
Objective 2.2 · Storage
Securing Azure Storage (SAS, Keys, Firewall)
Objective 2.3 · Storage
AzCopy and Storage Explorer
Objective 2.4 · Storage
Storage Redundancy: LRS, ZRS, GRS, GZRS Compared
Objective 2.1 · Storage
Blob Versioning and Soft Delete
Objective 2.1 · Storage
Azure Blob Object Replication
Objective 2.1 · Storage
Blob Lifecycle Management Policies
Objective 2.1 · Storage
Immutable Blob Storage: Legal Hold and Time-Based Retention
Objective 2.1 · Storage
Azure Data Lake Storage Gen2
Objective 2.2 · Storage
Azure Import/Export Service and Data Box
Objective 2.2 · Storage
Azure NetApp Files
Objective 2.2 · Storage
Premium File Shares and NFS
Objective 2.2 · Storage
Azure Queue and Table Storage
Objective 2.2 · Storage
Storage Account Failover and RA-GZRS
Objective 2.3 · Storage
Private Endpoints for Azure Storage
Objective 2.3 · Storage
SAS Token Types: Account, Service, User Delegation
Objective 2.3 · Storage
Storage Firewall and Virtual Network Rules
Objective 2.3 · Storage
Blob Storage Events with Event Grid
Objective 2.4 · Storage
Azure File Share Backup via Recovery Vault
Objective 2.4 · Storage
Managing Blob Access Tiers at Scale
Objective 2.4 · Storage
Azure Blob Storage Access Tiers
Objective 2.1 · Storage
Static Website Hosting on Azure Blob
Objective 2.2 · Storage
42 chapters
Generalizing and Capturing VM Images
Objective 3.1 · Compute
Azure Virtual Machine Deployment
Objective 3.1 · Compute
VM Availability Sets and Zones
Objective 3.1 · Compute
Azure Virtual Machine Scale Sets
Objective 3.1 · Compute
Azure App Service Plans and Web Apps
Objective 3.2 · Compute
Azure Container Instances and AKS Basics
Objective 3.3 · Compute
Azure Functions for Administrators
Objective 3.3 · Compute
ARM Templates and Bicep
Objective 3.4 · Compute
VM Extensions: Custom Script, DSC, Diagnostics
Objective 3.1 · Compute
Azure Managed Disk Types: HDD, SSD, Premium, Ultra
Objective 3.1 · Compute
Disk Snapshots and Custom VM Images
Objective 3.1 · Compute
Azure Compute Gallery and Image Versioning
Objective 3.1 · Compute
Azure Spot VMs and Eviction Policy
Objective 3.1 · Compute
Reserved Instances and Savings Plans
Objective 3.1 · Compute
VM Boot Diagnostics and Serial Console
Objective 3.1 · Compute
Azure Disk Encryption: BitLocker and dm-crypt
Objective 3.1 · Compute
Azure Dedicated Hosts
Objective 3.1 · Compute
Proximity Placement Groups
Objective 3.1 · Compute
Linux VMs on Azure: cloud-init and Extensions
Objective 3.1 · Compute
VM Run Command and Invoke Script
Objective 3.1 · Compute
Ephemeral OS Disks for VMs and AKS
Objective 3.1 · Compute
Azure Update Management Center
Objective 3.1 · Compute
Azure Automanage for VMs
Objective 3.1 · Compute
Azure Batch for HPC Workloads
Objective 3.1 · Compute
Azure VMware Solution (AVS)
Objective 3.1 · Compute
App Service Deployment Slots and Swapping
Objective 3.2 · Compute
App Service Autoscaling Rules
Objective 3.2 · Compute
App Service Custom Domains and TLS Certificates
Objective 3.2 · Compute
App Service VNet Integration
Objective 3.2 · Compute
Azure Container Registry (ACR)
Objective 3.3 · Compute
AKS Node Pools and Cluster Upgrades
Objective 3.3 · Compute
AKS Networking: Azure CNI vs Kubenet
Objective 3.3 · Compute
AKS Scaling: HPA, KEDA, Cluster Autoscaler
Objective 3.3 · Compute
AKS RBAC and Workload Identity
Objective 3.3 · Compute
AKS Monitoring: Container Insights and Prometheus
Objective 3.3 · Compute
Azure Container Apps vs AKS vs ACI
Objective 3.3 · Compute
Azure Logic Apps Workflows
Objective 3.3 · Compute
Bicep and ARM Template Advanced Patterns
Objective 3.4 · Compute
Azure Template Specs
Objective 3.4 · Compute
Azure Deployment Stacks
Objective 3.4 · Compute
What-If Analysis for ARM Deployments
Objective 3.4 · Compute
Azure Resource Graph Queries
Objective 3.4 · Compute
26 chapters
Azure Monitor and Log Analytics
Objective 5.1 · Monitoring
Azure Alerts and Action Groups
Objective 5.1 · Monitoring
Azure Backup and Recovery Services Vault
Objective 5.2 · Monitoring
Azure Site Recovery
Objective 5.2 · Monitoring
Cost Management and Billing Analysis
Objective 5.3 · Monitoring
Azure Network Watcher
Objective 5.4 · Monitoring
Log Analytics Workspace Design and Data Retention
Objective 5.1 · Monitoring
KQL Queries for Azure Monitoring
Objective 5.1 · Monitoring
Azure Monitor Workbooks
Objective 5.1 · Monitoring
Azure Dashboards and Shared Dashboards
Objective 5.1 · Monitoring
Azure Metrics Explorer
Objective 5.1 · Monitoring
Diagnostic Settings and Log Routing
Objective 5.1 · Monitoring
Activity Log and Change History
Objective 5.1 · Monitoring
Resource Health and Azure Service Health
Objective 5.1 · Monitoring
Azure Advisor Recommendations
Objective 5.1 · Monitoring
Change Tracking and Inventory
Objective 5.1 · Monitoring
Azure Automation Runbooks
Objective 5.1 · Monitoring
Azure Arc Monitoring for Hybrid VMs
Objective 5.1 · Monitoring
Container Insights for AKS
Objective 5.1 · Monitoring
VM Insights and Dependency Agent
Objective 5.1 · Monitoring
Log Alerts vs Metric Alerts vs Activity Log Alerts
Objective 5.1 · Monitoring
Autoscale Profiles and Schedule Rules
Objective 5.1 · Monitoring
Data Collection Rules (DCR) and Azure Monitor Agent
Objective 5.1 · Monitoring
Azure Site Recovery Monitoring and Reporting
Objective 5.2 · Monitoring
Cost Alerts and Budget Thresholds
Objective 5.3 · Monitoring
Application Change Analysis
Objective 5.4 · Monitoring
Free AZ-104 practice questions with full explanations. Test what you learn chapter by chapter.
AZ-104 Practice Questions