I am currently preparing for the new Microsoft exam AZ-104: Microsoft Azure Administrator, which was announced to replace the AZ-103 exam. There are many great resources out there to prepare for the exam, that’s why I want to share my AZ-104 Microsoft Azure Administrator Certification Exam Study Guide with you. To learn and prepare for the exam, I usually use a couple of online resources, mainly Microsoft Docs and Microsoft Learn, which I am going to share with you. You can find more information about how I prepare for a Microsoft Certification exam on my blog post: How to prepare and pass Microsoft Certification Exam.
Also, check out other Microsoft Azure Certification Exam Study Guides:
- Exam AZ-900: Microsoft Azure Fundamentals Exam Study Guide
- Exam AZ-204: Developing Solutions for Microsoft Azure Exam Study Guide
- Exam AZ-303: Microsoft Azure Architect Technologies Exam Study Guide
- Exam AZ-304: Microsoft Azure Architect Design Certification Exam Study Guide
- Exam AZ-305: Microsoft Azure Solutions Architect Certification Exam Study Guide
- Exam AZ-500: Microsoft Azure Security Technologies Exam Study Guide
- Exam AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub Exam Study Guide
- Exam AZ-700: Microsoft Azure Network Engineer Exam Study Guide
- Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals Exam Study Guide
- Exam DP-300: Azure Database Administrator Exam Study Guide
Here is my AZ-104 Microsoft Azure Administrator Certification Exam Study Guide
It is essential to get familiar with the exam objectives and skills measured first. That is why I recommend reading the description of the exam and the skills measured.
Exam AZ-104: Microsoft Azure Administrator
The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.
Candidates should have a minimum of six months of hands-on experience administering Azure. Candidates should have a strong understanding of core Azure services, Azure workloads, security, and governance. Candidates for this exam should have experience in using PowerShell, the Command Line Interface, Azure Portal, and ARM templates.
The high-level view of the skills measured in the exam:
- Manage Azure identities and governance (15-20%)
- Implement and manage storage (10-15%)
- Deploy and manage Azure compute resources (25-30%)
- Configure and manage virtual networking (30-35%)
- Monitor and back up Azure resources (10-15%)
You can find more information on the exam website.
Free Online Microsoft Learn AZ-104 Exam Study Guide resources
Microsoft Learn provides you with free online training and learning paths for different Microsoft technologies. They not just offer reading material, but also control questions and free online labs. Here are some relevant Microsoft Learn modules and learning paths for the AZ-104 Microsoft Azure Administrator Certification Exam. Microsoft Learn is an important part of my AZ-104 Azure Administrator exam study guide.
The team also just made it easier to prepare with the new AZ-104 related learning paths on Microsoft Learn. I highly recommend that you take these for your AZ-104 exam preparation.
- AZ-104 Prerequisites for Azure administrators
- AZ-104 Manage identities and governance in Azure
- AZ-104 Implement and manage storage in Azure
- AZ-104 Deploy and manage Azure compute resources
- AZ-104: Configure and manage virtual networking
- AZ-104 Monitor and back up Azure resources
Microsoft Docs AZ-104 study guide resources
One thing I always used to prepare for my Microsoft exams is Microsoft Docs. Here are the relevant Microsoft Docs which I used to prepare and study for the AZ-104 exam.
Manage Azure identities and governance (15-20%)
Manage Azure AD objects
What is Azure Active Directory?
- create users and groups
- manage user and group properties
- manage device settings
- perform bulk user updates
- manage guest accounts
- configure Azure AD Join
- configure self-service password reset
Manage role-based access control (RBAC)
What is role-based access control (RBAC) for Azure resources?
- create a custom role
- provide access to Azure resources by assigning roles
- interpret access assignments
- manage multiple directories
Manage subscriptions and governance
Overview of Management services in Azure
- configure Azure policies
- configure resource locks
- apply tags
- create and manage resource groups
- move resources
- remove RGs
- manage subscriptions
- configure Cost Management
- configure management groups
Implement and manage storage (10-15%)
Manage storage accounts
- configure network access to storage accounts
- create and configure storage accounts
- generate shared access signature
- manage access keys
- implement Azure storage replication
- configure Azure AD Authentication for a storage account
Manage data in Azure Storage
- export from Azure job
- import into Azure job
- install and use Azure Storage Explorer
- copy data by using AZCopy
- What is Azure CLI
- Get started with Azure CLI
- Install the Azure CLI (Thomas Maurer)
Configure Azure files and Azure blob storage
- create an Azure file share
- create and configure Azure File Sync service
- configure Azure blob storage
- configure storage tiers for Azure blobs
Deploy and manage Azure compute resources (25-30%)
Configure VMs for high availability and scalability
- configure high availability
- deploy and configure scale sets
Automate deployment and configuration of VMs
- modify Azure Resource Manager (ARM) template
- configure VHD template
- deploy from template
- save a deployment as an ARM template
- automate configuration management by using custom script extensions
Create and configure VMs
- configure Azure Disk Encryption
- move VMs from one resource group to another
- manage VM sizes
- add data discs
- configure networking
- redeploy VMs
Create and configure containers
- create and configure Azure Kubernetes Service (AKS)
- create and configure Azure Container Instances (ACI)
Create and configure Web Apps
- create and configure App Service
- create and configure App Service Plans
Configure and manage virtual networking (30-35%)
Implement and manage virtual networking
- create and configure VNET peering
- Virtual network peering overview
- Azure Virtual Network frequently asked questions (FAQ) VNet Peering
- Tutorial: Connect virtual networks with virtual network peering using the Azure portal
- Create a virtual network peering – different deployment models, same subscription
- Create, change, or delete a virtual network peering
- configure private and public IP addresses, network routes, network interface, subnets, and virtual network
- What is Azure Virtual Network?
- Quickstart: Create a virtual network using the Azure portal
- Virtual network traffic routing
- Networking limits
- Create, change, or delete a public IP address
- Add, change, or remove IP addresses for an Azure network interface
- Associate a public IP address to a virtual machine
- Subnet extension
- Virtual network traffic routing
- Add network interfaces to or remove network interfaces from virtual machines
Configure name resolution
- configure Azure DNS
- configure custom DNS settings
- configure a private or public DNS zone
Secure access to virtual networks
- create security rules
- associate an NSG to a subnet or network interface
- evaluate effective security rules
- deploy and configure Azure Firewall
- deploy and configure Azure Bastion Service
Configure load balancing
- configure Application Gateway
- configure an internal load balancer
- configure load balancing rules
- configure a public load balancer
- troubleshoot load balancing
Monitor and troubleshoot virtual networking
- monitor on-premises connectivity
- use Network Performance Monitor
- use Network Watcher
- troubleshoot external networking
- troubleshoot virtual network connectivity
Integrate an on-premises network with an Azure virtual network
- create and configure Azure VPN Gateway
- create and configure VPNs
- configure ExpressRoute
- configure Azure Virtual WAN
Monitor and back up Azure resources (10-15%)
Monitor resources by using Azure Monitor
- configure and interpret metrics
- configure Log Analytics
- query and analyze logs
- set up alerts and actions
- configure Application Insights
Implement backup and recovery
- configure and review backup reports
- perform backup and restore operations by using Azure Backup
- create a Recovery Services Vault
- use soft delete to recover Azure VMs
- create and configure backup policy
- perform site-to-site recovery by using Azure Site Recovery
Additional Tips and Resources
I hope this AZ-104 Microsoft Azure Administrator Certification Exam Study Guide helps you pass the exam. I also recommend that you open a free Azure account if you don’t have one yet. You can create your free Azure account here. Also, check out my blog posts about Microsoft Azure Certification:
- Why you should become Microsoft Azure certified
- How to pick the right Azure exam certification path
- How to prepare and pass a Microsoft Azure exam
I hope you enjoyed my AZ-104 Study Guide. Did I miss any link, or do you have any recommended AZ-104 Microsoft Azure Administrator Certification Exam Study resources? Let me know in the comments.




