Study guide

Microsoft Azure Administrator (AZ-104): Study Guide

By The Exam Atlas Editorial Team · Verified 2026-05-29

A suggested study plan

Weeks 1–2Identities and governance: Microsoft Entra ID, RBAC, subscriptions, policies
Weeks 3–4Storage: storage accounts, blobs, files, access and security
Weeks 5–6Compute: VMs, scale sets, containers and App Service
Weeks 7–8Virtual networking and monitoring; then full-length timed reviews

The Microsoft Azure Administrator (AZ-104) validates that you can manage identities, governance, storage, compute and networking in Azure day to day. It is hands-on in spirit, so the fastest way to prepare is to do the tasks in a free Azure account rather than only reading. This guide is study guidance only, with no real or simulated exam questions.

The five skill areas, and how to study each

1. Manage Azure identities and governance (20–25%)

Microsoft Entra ID (users, groups), role-based access control (RBAC), subscriptions and management groups, and Azure Policy. This scopes everything else, so start here.

2. Implement and manage storage (15–20%)

Storage accounts, blob and file storage, access tiers (hot, cool, archive), redundancy (LRS, ZRS, GRS), and securing access with keys, SAS and identities.

3. Deploy and manage Azure compute resources (20–25%)

Virtual machines and scale sets, availability options, App Service, and containers. Know how to size, secure and scale compute.

4. Configure and manage virtual networking (15–20%)

VNets and subnets, network security groups, peering, VPN and ExpressRoute, load balancing and DNS. This is the densest area — give it extra time.

5. Monitor and maintain Azure resources (10–15%)

Azure Monitor, alerts and Log Analytics, plus backup and recovery. Smaller, but easy marks once you know the tools.

How to prepare

Use a free Azure account and Microsoft Learn’s free modules, and practise both the portal and the CLI/PowerShell. Networking and governance are the highest-value areas. Avoid “exam dump” sites — they breach Microsoft policy and copyright.

Key concepts to master

Microsoft Entra ID
Azure's identity service (formerly Azure AD); users, groups and RBAC live here.
RBAC
Role-Based Access Control assigns permissions at management group, subscription, resource group or resource scope.
Resource hierarchy
Management groups → subscriptions → resource groups → resources. Policy and RBAC inherit down.
Virtual networking
VNets, subnets, NSGs, peering and VPN/ExpressRoute — the densest topic.
Storage account tiers
Hot, cool and archive access tiers, plus redundancy options (LRS, ZRS, GRS).

Common mistakes to avoid

Free study resources

FAQ

How long does it take to study for AZ-104?
Most people need 60–90 hours over 8 to 10 weeks. Hands-on time in the Azure portal shortens this considerably.
Do I need AZ-900 first?
No. AZ-900 (Fundamentals) is optional. AZ-104 has no prerequisites, though fundamentals help if you are new to Azure.
Is AZ-104 hands-on?
Yes. Expect case studies and tasks that mirror real administration, so practise in a free Azure account.

Sources