Microsoft Azure Administrator
Demonstrate skills and knowledge to implement, manage, and monitor an organization's Microsoft Azure environment.
Exam Details
Your Progress
0%0 of 7 steps completed
Step-by-Step RoadmapEstimated total: 8 to 12 weeks
Prerequisites: Azure Fundamentals
Ensure you have AZ-900 level knowledge or pass AZ-900 first. AZ-104 assumes you already know Azure basics.
What to Learn
- Core Azure services recap
- Azure Resource Manager (ARM)
- Subscriptions, resource groups, and resources
- Azure portal and Cloud Shell navigation
- Basic networking and storage concepts
Resources
- AZ-900 study guide on PathCert
- Microsoft Learn: Azure fundamentals
If you have not passed AZ-900, pass it first. AZ-104 builds directly on that knowledge and the exam assumes you know what virtual machines, storage accounts, and virtual networks are already.
Manage Azure Identities and Governance
Master Entra ID, RBAC, Azure Policy, and resource management best practices.
What to Learn
- Microsoft Entra ID users and groups
- Azure RBAC roles (Owner, Contributor, Reader)
- Azure Policy and Blueprints
- Management groups and subscriptions
- Resource tags and locks
- Cost management and budgets
Resources
- Microsoft Learn: AZ-104 Module 1
- Azure portal: Subscriptions and IAM sections
RBAC is the most tested identity topic. Know the difference: Owner = full control including access management, Contributor = full control except access management, Reader = view only. Also know that Azure Policy enforces rules on new and existing resources.
Implement and Manage Storage
Learn Azure Storage accounts, redundancy options, blob access tiers, and file shares.
What to Learn
- Storage account types (LRS, ZRS, GRS, GZRS)
- Blob storage access tiers (Hot, Cool, Cold, Archive)
- Azure Files and Azure File Sync
- Shared Access Signatures (SAS)
- Azure Storage Explorer and CLI
- Lifecycle management policies
Resources
- Microsoft Learn: AZ-104 Storage module
- Azure Storage documentation
Know storage redundancy inside out: LRS (3 copies, 1 datacenter), ZRS (3 zones, same region), GRS (secondary region), GZRS (zones + secondary region). The exam gives a disaster scenario and asks which redundancy level meets the requirement.
Deploy and Manage Azure Compute
Learn virtual machines, scale sets, containers, and Azure App Service.
What to Learn
- VM creation, sizing, and configuration
- VM availability: Availability Sets vs Availability Zones
- Virtual Machine Scale Sets (VMSS)
- Azure App Service (web apps, API apps)
- Azure Container Instances and AKS basics
- ARM templates and Bicep for automation
Resources
- Microsoft Learn: AZ-104 Compute module
- Azure portal: Create a VM tutorial
Availability Sets protect against rack/hardware failure within a datacenter. Availability Zones protect against entire datacenter failure. The exam will give you a scenario and ask which to use. Also practice writing basic ARM templates.
Configure and Manage Virtual Networking
Master VNets, subnets, NSGs, DNS, load balancers, and VPN connectivity.
What to Learn
- Virtual networks and subnets
- Network Security Groups (NSGs) and rules
- Azure DNS and custom domains
- Azure Load Balancer vs Application Gateway
- VNet peering and service endpoints
- Azure VPN Gateway and ExpressRoute
- Azure Firewall and Bastion
Resources
- Microsoft Learn: AZ-104 Networking module
- Azure networking documentation
Networking is the largest and most complex section of AZ-104. Spend extra time here. Know that NSGs can be applied at both subnet and NIC level. Load Balancer works at Layer 4 (TCP/UDP), Application Gateway works at Layer 7 (HTTP/HTTPS).
Monitor and Maintain Azure Resources
Learn Azure Monitor, Log Analytics, Azure Backup, and Site Recovery.
What to Learn
- Azure Monitor metrics and alerts
- Log Analytics workspace and KQL queries
- Application Insights (app performance)
- Azure Backup (VMs, databases, files)
- Azure Site Recovery (disaster recovery)
- Azure Advisor recommendations
Resources
- Microsoft Learn: AZ-104 Monitoring module
- Azure Monitor documentation
Azure Monitor is the umbrella service. Azure Log Analytics uses KQL (Kusto Query Language) for log analysis. You need to write basic KQL queries in the exam. Learn: `AzureActivity | where OperationName == 'Create'` as a template.
Lab Practice and Exam Prep
Do hands-on labs, take full practice exams, review weak areas, and book your exam.
What to Learn
- Microsoft Learn sandbox labs (free)
- AZ-104 case study walkthroughs
- Lab simulations on MeasureUp
- Timed practice tests
- Final review of key services
Resources
- Microsoft Learn: AZ-104 labs
- MeasureUp AZ-104 practice test
- Udemy: Scott Duffy AZ-104 course
AZ-104 has lab simulations where you click through a live Azure portal environment. Practise every task on a real Azure subscription (free tier available). Clicking through the portal in the exam is much easier if you have done it before.