AZ-104: Microsoft Azure Administrator certification and exam guide
What the associate certification validates, who it is for, the recommended experience, and the five current exam domains.
Read article Microsoft AZ-104 Certification Study 
All articles · English
0 of 29 read 0%Azure Cloud Shell: browser-based Azure administration
Use Bash or PowerShell from a browser, persist files, edit scripts, and choose when Cloud Shell fits an Azure administration task.
Read articleARM templates: JSON structure, parameters, outputs, and deployment
Build reusable Azure infrastructure with JSON templates, resource providers, Azure CLI or PowerShell deployments, validated parameters, outputs, and idempotence.
Read articleMicrosoft Entra ID, AD DS, P1/P2, and Domain Services
Compare cloud and domain identity, understand tenants and SSO, distinguish P1 from P2, and use managed domain services for legacy Azure workloads.
Read articleUsers, groups, devices, licenses, and provisioning
Manage identity lifecycles, device states, group-based licenses, custom security attributes, SCIM, and API-driven inbound provisioning.
Read articleAzure architecture: regions, zones, resources, and management hierarchy
Understand Azure accounts, datacenters, regions, availability zones, region strategies, resource groups, subscriptions, and management groups.
Read articleAzure Policy governance: definitions, effects, compliance, and safe deployment
Learn governance, scopes, initiatives, assignments, JSON definitions, conditions, effects, evaluation, remediation, compliance states, and deployment rings.
Read articleAzure RBAC: roles, scope, access assignments, and change auditing
Learn security principals, role definitions, scope inheritance, effective permissions, IAM exercises, least-privilege assignments, and Activity Log reports.
Read articleMicrosoft Entra SSPR: password reset, hybrid writeback, and company branding
Configure self-service password reset, strong methods, registration, licensing, staged testing, hybrid writeback, notifications, and branded sign-in experiences.
Read articleAzure Virtual Network: subnets, CIDR, public and private IP addressing
Plan nonoverlapping networks, service subnets, public and private addresses, explicit outbound access, and a peered hub-and-spoke laboratory.
Read articleAzure network security groups: effective rules, ASGs, and traffic control
Create NSGs, reason about priority and stateful effective rules, group workloads with ASGs, troubleshoot with Network Watcher, and complete the virtual-networking lab.
Read articleAzure DNS: public and private zones, records, delegation, and aliases
Resolve names, delegate public zones, link private zones, manage record sets and TTL, use DNSSEC and aliases, and complete both Azure DNS labs.
Read articleAzure virtual network peering: gateway transit, routing, and service chaining
Connect regional and global VNets, configure both peering directions, share gateways, route hub-and-spoke traffic with UDRs and NVAs, and complete the intersite lab.
Read articleAzure custom routes and network virtual appliances: UDR, BGP, and IP forwarding
Understand system routes and next-hop selection, create UDRs, exchange BGP routes, deploy an NVA, enable forwarding, and prove the path with traceroute.
Read articleAzure Load Balancer: Layer 4 distribution, health probes, NAT, and service selection
Design public and internal frontends, five-tuple distribution, session persistence, health probes, HA ports, inbound NAT, and explicit outbound SNAT.
Read articleApplication Gateway: Layer 7 routing, WAF, TLS, probes, and service selection
Design listeners, rules, URL and host routing, affinity, health probes, TLS termination, end-to-end TLS, WAF, autoscaling, and graceful maintenance.
Read articleAzure Network Watcher: topology, connection monitoring, diagnostics, and flow visibility
Use topology, continuous and point-in-time connection tests, security and route diagnostics, packet capture, VPN checks, VNet flow logs, and traffic analytics.
Read articleAzure Storage accounts: services, account types, redundancy, endpoints, and network access
Choose Blob, Files, Queue, or Table; compare account types and LRS through RA-GZRS; construct endpoints, map domains, and isolate network access.
Read articleAzure Blob Storage: containers, access tiers, lifecycle, replication, management, and cost
Secure containers, choose Hot through Archive, automate lifecycle, replicate block blobs, select transfer tools, estimate cost, and protect public web content.
Read articleAzure Storage security: SAS, encryption, customer-managed keys, monitoring, and threat protection
Choose identity or SAS, decode signed URIs, govern encryption keys, monitor storage health, detect threats, and secure Blob and Azure Files.
Read articleAzure Files: shares, snapshots, soft delete, Storage Explorer, and File Sync
Choose SMB or NFS shares and tiers, configure identity, recover with snapshots and soft delete, administer storage, and build hybrid caches.
Read articleAzure Virtual Machines: planning, deployment, management, availability, and backup
Design VM resources and networking, choose sizes and disks, automate deployment, improve availability, plan disaster recovery, and protect workloads.
Read articleAzure VM availability, scale sets, and autoscale
Plan for maintenance, use sets and zones, separate fault and update domains, compare scaling models, and configure Virtual Machine Scale Sets autoscale.
Read articleAzure App Service plans: pricing, scale up, scale out, and autoscale
Choose a hosting tier, understand shared compute and costs, scale resources and instances, and compare autoscale rules with automatic scaling.
Read articleAzure App Service apps: deployment, slots, security, domains, backup, and monitoring
Create and configure web apps, automate delivery, swap deployment slots, add authentication and domains, recover backups, and monitor live behavior.
Read articleAzure containers: Container Instances, groups, Container Apps, and AKS
Compare containers and VMs, deploy ACI groups, configure networking, storage and restart behavior, and choose between Container Apps and AKS.
Read articleAzure Backup: architecture, vaults, policies, security, and monitoring
Protect hybrid and Azure workloads, set RPO/RTO and retention, choose tiers and replication, secure recovery points, and monitor the backup estate.
Read articleBack up and restore Azure virtual machines with Azure Backup
Protect Windows and Linux VMs, choose snapshot consistency and policy, automate backups, monitor jobs, and restore VMs, disks, files, regions, subscriptions, and zones.
Read articleMonitor Azure virtual machines with Azure Monitor
Analyze host metrics, alerts and boot data, enable enhanced guest monitoring, route events with DCRs, and investigate Syslog in Log Analytics with KQL.
Read article
Certificate of Completion
Finish every chapter to unlock your track completion certificate and download it as PDF, PNG or JPG.
Get certificate
Practice Test 01 - Microsoft AZ-104
Timed test with 90 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
90 questions90 min
Open practice test Practice Test 02 - Microsoft AZ-104
Timed test with 90 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
90 questions90 min
Open practice test Practice Test 03 - Microsoft AZ-104
Timed test with 88 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
88 questions88 min
Open practice test Practice Test 04 - Microsoft AZ-104
Timed test with 90 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
90 questions90 min
Open practice test Practice Test 05 - Microsoft AZ-104
Timed test with 90 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
90 questions90 min
Open practice test Practice Test 06 - Microsoft AZ-104
Timed test with 82 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
82 questions82 min
Open practice test Practice Test 07 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test Practice Test 08 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test Practice Test 09 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test Practice Test 10 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test Practice Test 11 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test Practice Test 12 - Microsoft AZ-104
Timed test with 60 questions on Azure identities and governance, storage, compute, virtual networking, monitoring, and recovery.
60 questions1 hour
Open practice test