Cloud administration, for an experienced systems administrator, means extending familiar Windows server skills into Azure tasks such as troubleshooting a route table, assigning the correct role in Microsoft Entra ID, and restoring a protected workload from Azure Backup. That gap between operations experience and cloud-specific administration is exactly where many AZ-104 candidates succeed or struggle.

The Microsoft Azure Administrator exam, AZ-104, validates the ability to implement, manage, monitor, and secure Azure resources used in day-to-day operations. It sits above fundamentals-level knowledge and focuses less on definitions than on decisions: which identity control to use, how to configure a virtual network, how to protect data, and how to diagnose a service that is not behaving as expected.

Last updated: June 2026. Microsoft updates role-based exams and documentation periodically, so candidates should check the current Microsoft Learn AZ-104 skills outline and Microsoft exam policies before booking or relying on older study material.

Why AZ-104 still matters in 2026

AZ-104 remains relevant because Azure administration has become a practical operations role rather than a purely cloud-focused specialty. Administrators are expected to manage identities, subscriptions, virtual networks, storage accounts, compute resources, monitoring, backup, and cost controls in environments that often connect back to on-premises infrastructure.

That practical scope is what makes the exam demanding. A candidate who has completed an introductory path such as Azure Fundamentals may understand the language of Azure, but AZ-104 expects a stronger grasp of how services behave together. For example, a storage account configuration may involve network restrictions, role-based access control, lifecycle rules, private endpoints, monitoring alerts, and backup requirements rather than a single isolated setting.

The most important 2025 terminology change is that Azure Active Directory is now Microsoft Entra ID across Microsoft documentation and current exam language. Older courses, blog posts, and screenshots may still use Azure AD, so candidates should mentally map identity topics to Microsoft Entra ID, including users, groups, role assignments, Conditional Access, privileged access, and hybrid identity configuration.

What the AZ-104 exam tests in practice

The official Microsoft Learn skills outline is the reference point for what to study, because it defines the current measured skills and may change over time. Broadly, AZ-104 covers identity and governance, storage, compute, virtual networking, monitoring, and backup. The exam also tests how these areas interact in realistic administrative scenarios.

Identity and governance questions often require more than knowing what RBAC stands for. Candidates should understand how to assign built-in roles, where scope matters, how management groups and subscriptions affect governance, and how Microsoft Entra ID controls such as Conditional Access can protect administrative access. Hybrid identity is easy to underestimate; Cloud Sync, Microsoft Entra Connect Sync, break-glass accounts, and Conditional Access exclusions all matter because a misconfigured identity control can lock out administrators or weaken security.

Storage preparation should include blob containers, Azure Files, access control, redundancy choices, lifecycle management, encryption, and recovery options. Cost and resilience are increasingly visible in scenario-style questions, so storage tiers, retention settings, backup policies, availability zones, and cost alerts should be treated as normal administration topics rather than side issues.

Compute questions usually centre on virtual machines, scale sets, availability options, disks, extensions, containers, and App Service fundamentals. It is useful to practise deploying a virtual machine scale set across zones, attaching managed disks, configuring automatic updates where appropriate, and checking whether monitoring data is being collected as expected.

Networking is often the domain that exposes weak preparation. A candidate should be comfortable with virtual networks, subnets, peering, network security groups, user-defined routes, Azure Firewall concepts, private endpoints, DNS resolution, and VPN connectivity. In practice, troubleshooting effective NSG rules, effective routes, Private DNS records, and asymmetric routing issues builds the kind of reasoning the exam expects.

Monitoring and backup should be studied as operating disciplines, not as last-minute topics. Azure Monitor, Log Analytics, alert rules, action groups, Recovery Services vaults, backup policies, restore options, and diagnostic settings all appear in the daily work of an Azure administrator. Candidates who practise setting alerts and then deliberately breaking or changing resources learn far more than candidates who only read the interface labels.

A practical hands-on blueprint for preparation

Strong AZ-104 preparation starts with a reusable sandbox. Rather than clicking through isolated demos once, candidates should build a small Azure environment that can be recreated and broken safely: a subscription or resource group structure, a virtual network with subnets, a test virtual machine, a storage account, monitoring, backup, budget alerts, and a few Microsoft Entra ID test users or groups where appropriate.

Governance should be part of that sandbox from the beginning. Create role assignments at different scopes, apply Azure Policy to enforce a simple rule, configure a budget, and observe what happens when a user has too much or too little access. This helps connect RBAC, policy, cost management, and subscription administration into one mental model.

Infrastructure as Code also deserves a place in AZ-104 preparation. Candidates do not need to become advanced developers, but using Bicep or Terraform to redeploy a lab teaches repeatability and reduces dependence on portal memory. A simple template that creates a virtual network, subnet, NSG, VM, and storage account can be reused for networking, monitoring, backup, and troubleshooting exercises.

A useful lab cycle is to deploy, restrict, observe, break, and repair. For instance, deploy a VM, apply an NSG rule, test connectivity, change a route table, review effective routes, enable diagnostics, create an alert, back up the VM, and then test a restore scenario. That sequence mirrors administration work more closely than a one-page exercise that ends once the resource is created.

Study materials should support this hands-on work rather than replace it. Microsoft Learn provides the official structure, Azure documentation explains product behaviour, and an optional instructor-led route can help candidates who need scheduled labs and guided explanation; the Microsoft training catalogue from Readynez is one such place to compare structured options. Practice tests can identify gaps, but they should never be treated as a substitute for building and troubleshooting in Azure, and candidates should avoid braindumps or any material that violates Microsoft exam rules.

A realistic 6–8 week study rhythm

A six-to-eight-week plan is enough for many candidates who already understand networking, Windows or Linux administration, and basic cloud concepts, although the right pace depends on prior experience. The first phase should focus on reading the current Microsoft Learn skills outline and mapping each objective to a lab task. If a skill cannot be demonstrated in a sandbox, it probably has not been learned deeply enough.

The next phase should group study by operating theme. Identity and governance can be paired because RBAC, policy, management groups, and Microsoft Entra ID administration often appear together. Storage and backup pair naturally because data protection, recovery, lifecycle rules, and access controls overlap. Compute, networking, and monitoring then become the core troubleshooting block, where candidates should spend the most hands-on time.

The final phase should be assessment and repair. Timed practice questions are useful for pacing and reading accuracy, but every wrong answer should lead back to the portal, CLI, PowerShell, or documentation. A candidate who misses a question on private endpoints should build a private endpoint lab; a candidate who misses a question on managed identities should configure one and test access.

Some candidates keep screenshots, architecture sketches, or short notes as they study. That can be useful, provided screenshots do not expose tenant names, subscription IDs, secrets, keys, or user data. Diagrams should be simple and accessible, with clear labels and alt text if they are shared in a team wiki or study group.

Choosing AZ-104, AZ-700, or AZ-305

AZ-104 is the right fit when the goal is to become credible at implementing and managing Azure resources. It aligns with administrator, operations engineer, cloud support, and infrastructure roles where the work involves keeping Azure environments secure, monitored, connected, and available.

AZ-700 is a better match when the role is primarily network-focused. Candidates who spend most of their time on connectivity, routing, hybrid networking, private access, load balancing, and network security may find the Azure Network Engineer Associate path more aligned with their daily responsibilities after they have the right foundation.

AZ-305 is different again because it focuses on designing Azure solutions rather than administering them day to day. Administrators who want to progress toward architecture can use AZ-104 as a practical base before moving into design-led study such as the Azure Solutions Architect AZ-305 route. Security-focused administrators may also move toward AZ-500 later, but AZ-104 remains useful because security decisions in Azure often depend on identity, networking, monitoring, and governance fundamentals.

Exam-day judgement and common mistakes

The AZ-104 exam is described by Microsoft as a role-based exam and may include different question formats, including scenario-based questions. The original exam details commonly referenced by candidates include a 100-minute duration, 40–60 questions, a scaled score out of 1,000, and a passing score of 700, but Microsoft’s current exam page should be treated as the source for booking details, regional pricing, and policy updates.

On exam day, careful reading matters. Case study details often define the answer: the subscription boundary, the required scope, the existing route, the region, the redundancy requirement, or the identity constraint. A technically correct Azure feature may still be the wrong choice if it violates a stated requirement.

The most common preparation mistake is studying services in isolation. Real Azure administration is interconnected, and the exam reflects that pattern. A networking question may depend on DNS, an identity question may depend on scope, and a backup question may depend on region, policy, or retention requirements.

Another frequent mistake is relying only on the Azure portal. Portal familiarity is important, but administrators increasingly work across the portal, Azure CLI, PowerShell, ARM or Bicep templates, and automation workflows. Even basic command-line practice helps candidates understand resource names, parameters, dependencies, and outputs more clearly.

Candidates should also avoid overusing practice exams too early. Practice questions are most valuable after the candidate has built enough context to explain why an answer is right. If practice tests become memorisation exercises, they can create false confidence and leave gaps in troubleshooting ability.

AZ-104 exam FAQ

How much does AZ-104 cost?

The original commonly cited price is $165 USD, but Microsoft applies regional pricing and may update fees. Candidates should check the official Microsoft exam booking page for the current local price before scheduling.

How long is the AZ-104 exam?

The exam has commonly been described as 100 minutes with 40–60 questions. Microsoft can update exam delivery details, so the current Microsoft exam page should be checked before booking.

Can AZ-104 be renewed?

Microsoft role-based certifications have renewal processes managed through Microsoft Learn. Candidates should use Microsoft’s certification dashboard and renewal guidance to confirm timing, eligibility, and current requirements.

What happens if a candidate fails AZ-104?

Microsoft publishes retake rules in its exam policies, and those rules should be checked directly because waiting periods and conditions can change. The most useful response to a failed attempt is to review the score report by skill area, rebuild weak labs, and avoid rushing into another attempt without correcting the underlying gaps.

Turning AZ-104 preparation into Azure administration skill

Passing AZ-104 is a useful milestone, but the lasting value comes from building habits that transfer to production work: checking scope before assigning access, validating routes before blaming applications, setting budgets before costs drift, and testing recovery before an incident occurs. Candidates who prepare that way usually gain more than an exam result; they develop the judgement expected from an Azure administrator.

A practical next step is to compare the current Microsoft Learn skills outline with a personal lab plan, then decide whether self-study is enough or whether guided training would reduce delays. Readynez can help candidates who want a structured Microsoft learning path, but the core requirement remains the same in every route: build, troubleshoot, document, and repeat until Azure administration decisions feel familiar.

Those who want to explore broader Microsoft learning options can start from the Readynez site and use official Microsoft documentation alongside any course, lab, or practice assessment they choose.