Microsoft certification practice
Practise AZ-104 across all 5 official exam domains — Manage Azure Identities and Governance, Implement and Manage Storage, Deploy and Manage Azure Compute, Implement and Manage Virtual Networking, and more — with original exam-style questions, full explanations, and wrong-answer analysis. Microsoft certification exams often test whether you can choose the right Azure, Microsoft 365, identity, security or monitoring action for a realistic administrative scenario. Courseiva helps you practise with structured questions and explanations.
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
New here? Start with this
Recommended: 25-question diagnostic
Covers all 5 domains · takes ~5 min · no account needed · shows your weak areas immediately
Key facts for the AZ-104 exam.
Exam cost
$165 USD / ~£135
Duration
120 minutes
Question count
40–60 questions
Passing score
700 / 1000
Validity
Annual renewal (free online assessment on Microsoft Learn)
Delivered by
Pearson VUE
Online proctored
Yes — available
Retake policy
100% free — no account required
Everything on Courseiva for AZ-104 is free — no subscription, no trial, no email wall.
Courseiva provides free AZ-104 practice questions with original exam-style questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics. Courseiva is an independent platform and is not affiliated with Microsoft.
24 hours after first failure; 14 days after second
Question formats
Microsoft Azure Administrator (AZ-104) validates skills in managing Azure subscriptions, implementing storage, deploying virtual machines, configuring virtual networking, and managing Azure Active Directory (Entra ID). It is the most widely held Azure Associate certification and is required as a prerequisite for AZ-305.
Official prerequisite
None
Recommended experience
AZ-900 and 6 months hands-on Azure administration experience
6–12 months administering Azure workloads. Should be comfortable with Azure portal, Azure CLI/PowerShell, and core services (VMs, storage, networking, Entra ID).
Should you skip this exam?
If you primarily develop applications on Azure, AZ-204 is a better fit. AZ-104 is for operations and administration, not development.
Courseiva study tip
Case study questions are unique to Microsoft exams and require reading a multi-page business scenario before answering. Practise the case study format specifically — the time pressure is real.
UK salary range
£45,000–£75,000
US salary range
$75,000–$115,000
Job roles that cite AZ-104
Not primarily. AZ-104 covers Azure administration: virtual machines, virtual networking, storage accounts, Entra ID (Azure AD), subscriptions, and monitoring. Azure Functions and Logic Apps are covered mainly in AZ-204 (Azure Developer Associate). Azure DevOps Pipelines are covered in AZ-400 (DevOps Engineer Expert). AZ-104 does touch on Azure Automation, Azure Monitor, and basic integration concepts, but if your role involves building serverless apps or CI/CD pipelines, AZ-204 or AZ-400 is the more relevant certification.
$165 USD.
700 out of 1000.
AZ-104 requires annual renewal via a free online assessment on Microsoft Learn. It does not require re-taking the paid exam annually.
AZ-104 is moderately difficult. It has a wide scope (identity, storage, compute, networking, monitoring) and uses case study questions that add time pressure. Allow 100–200 hours of study and complement with hands-on Azure lab work.
Both are mid-level cloud certs with high market value. SAA-C03 has more demand globally due to AWS's market share. AZ-104 is the right choice if your role is Azure-focused.
Yes. AZ-104 (or its equivalent) is an official prerequisite for AZ-305 (Azure Solutions Architect Expert).
Azure Administrator roles in the UK typically pay £45,000–£75,000. In the US, $75,000–$115,000.
Courseiva Exam Intelligence
Data confidence: ModerateDerived from Courseiva's continuously updated practice dataset: 1,049 exam-style questions, 369 learner answers, and 35 practice sessions. Updated 2 July 2026.
Question difficulty mix
Average time per question: 90s
5
Exam domains
official blueprint domains covered by the bank
Most missed domain
Courseiva learners find Deploy and Manage Azure Compute the hardest AZ-104 domain — only 13% of 79 answers in this domain are correct on the first try.
According to Courseiva practice data, learners average 26% across 35 AZ-104 practice sessions.
Practice modes
Choose a mode that matches your current study phase. Use topic practice early on and mock exams closer to your exam date.
All AZ-104 Questions
Browse the full question bank organised by domain and difficulty.
Practice Test
Start a 20-question session with a full explanation after each answer.
Mock Exam
Simulate the real exam with a timed, full-length question set.
Quick 25
A 25-question warm-up — ideal for a short daily study session.
Flashcards
Reinforce key terms, commands, and protocol facts with flashcards.
Domain Practice
Focus exclusively on one exam domain to target your weakest area.
50-Question Set
Mid-length practice set covering all domains.
Exam guide
Start with a short practice session, review each missed answer, then return to the topics that caused mistakes.
AZ-104 spans 5 official exam domains (Manage Azure Identities and Governance, Implement and Manage Storage, Deploy and Manage Azure Compute, and more). Questions test whether you can apply each objective in a realistic scenario, not just recall a definition.
Related practice questions
Use these internal links to move from the exam guide into focused topic practice pages.
Practise AZ-104 questions linked to Manage Azure Identities and Governance.
Practise AZ-104 questions linked to Implement and Manage Storage.
Practise AZ-104 questions linked to Deploy and Manage Azure Compute.
Practise AZ-104 questions linked to Implement and Manage Virtual Networking.
Practise AZ-104 questions linked to Monitor and Maintain Azure Resources.
Practise AZ-104 questions linked to AZ-104 Azure RBAC.
Practise AZ-104 questions linked to AZ-104 storage account.
Practise AZ-104 questions linked to AZ-104 virtual network.
Practise AZ-104 questions linked to AZ-104 NSG.
Practise AZ-104 questions linked to AZ-104 Azure Monitor.
Practise AZ-104 questions linked to AZ-104 backup.
Practise AZ-104 questions linked to AZ-104 managed identity.
Practice directory
Every practice set is a unique selection of questions — numbered tests, domain-focused sessions, and topic-specific quizzes.
Showing 8 of 67 tests. See all 67 AZ-104 practice tests →
Official blueprint
Target weak areas by practising questions from a single domain. Each domain page shows all questions, difficulty breakdown, and a focused practice session.
Practise AZ-104 questions in this domain →
Practise AZ-104 questions in this domain →
Practise AZ-104 questions in this domain →
Practise AZ-104 questions in this domain →
Practise AZ-104 questions in this domain →
Deep-dive questions
The most-searched AZ-104 questions — each with a detailed explanation, worked example, and full answer breakdown.
Term reference
These terms appear frequently in AZ-104 questions. Understanding them precisely reduces guessing and improves scores.
Dynamic route
A route that is automatically learned and updated by a router using a routing protocol, rather than being manually configured.
Reader role
A Reader role is a predefined set of permissions in identity and governance systems that allows a user to view resources and data but not create, modify, or delete anything.
Security pillar
The Security pillar is a set of best practices for designing and operating cloud systems that protect data, systems, and assets through confidentiality, integrity, and availability controls.
Guest user
A guest user is a temporary or limited-access account that allows someone to use a system, network, or application without full user privileges and often without a permanent identity.
Azure Load Balancer
Azure Load Balancer is a cloud service that evenly distributes incoming network traffic across multiple virtual machines or resources to ensure reliability and high availability.
Public IP address
A globally unique IP address assigned to a device that allows it to communicate directly over the internet.
Soft delete
A soft delete marks data as deleted without actually removing it from the database, allowing recovery if needed.
Risk acceptance
Risk acceptance is a risk management strategy where an organization acknowledges a potential risk but decides to tolerate it without taking active measures to reduce or eliminate it.
Learn the concepts
168 book-style chapters cover every AZ-104 objective in plain English. Read the theory here, then test it with practice questions.
Chapter 1
VPN Gateway and ExpressRoute
12 min read
Chapter 2
Dynamic Membership Groups
25 min read
Chapter 3
Privileged Identity Management (PIM)
25 min read
Chapter 4
Managed Identities for Azure Resources
25 min read
Chapter 5
Customer-Managed Keys (CMK) for Storage Encryption
25 min read
Chapter 6
Generalizing and Capturing VM Images
25 min read
Chapter 7
Microsoft Entra ID Users and Groups
25 min read
Chapter 8
Azure RBAC Role Assignments
25 min read
Free study guide
The Courseiva AZ-104 study guide covers exam format, the official domain blueprint with weights, a structured study plan, and domain-specific tips for each section. Use it alongside practice questions to build both conceptual depth and exam confidence.
Sample questions
Original exam-style questions — not copied from any exam or dump site. Open a question for the full answer breakdown.
A Modify policy adds CostCenter=042 to resources in RG-Finance. New resources are tagged correctly, but existing virtual machines remain untagged. What three requirements must be m…
A developer wants to keep application data separate from the operating system so the VM can be rebuilt without losing files. Before making a risky change, the administrator also wa…
Based on the exhibit, which Network Watcher tool should you use to determine whether an NSG allows or denies TCP 1433 traffic and which rule is responsible?
A policy initiative is assigned at the Corp management group to enforce allowed locations and required tags. A new subscription is added under Corp later. Which two statements are…
Arrange the steps to create a virtual network in Azure with a subnet and deploy a VM.
You need to ensure that junior administrators can view all resources in the Prod-Sub subscription but cannot create, modify, or delete any resources. Which Azure RBAC role should y…
Related certifications
Studying for AZ-104? These related Microsoft certifications share concepts and are common next steps.
Microsoft Security, Compliance, and Identity Fundamentals
SC-900 · 1,250 practice questions
Microsoft Security Operations Analyst
SC-200 · 1,200 practice questions
Microsoft Azure AI Fundamentals
AI-900 · 985 practice questions
Azure Fundamentals
AZ-900 · 981 practice questions
Azure AI Engineer Associate
AI-102 · 945 practice questions
Microsoft 365 Endpoint Administrator
MD-102 · 942 practice questions
Official booking and top-rated study resources for the AZ-104.
Ways to study AZ-104