Azure AZ-104 Study Guide 2026 — Pass Azure Administrator First Try

The Azure AZ-104 nearly broke me. Not because it's impossibly hard—but because I studied the wrong things for the wrong amount of time, and walked in thinking I was ready when I absolutely wasn't.

I passed on my second attempt. And the difference between attempt one and attempt two wasn't more studying—it was better studying. Here's the complete guide I wish I'd had the first time around.

AZ-104 Exam Overview (2026 Edition)

Let's get the basics out of the way:

What Changed in 2026

Microsoft updated the AZ-104 objectives in late 2025. Key changes:

• More emphasis on Azure Arc and hybrid management scenarios
• Updated networking questions covering Azure Private Link and Private Endpoints
• More Entra ID (the rebranding from Azure AD is now fully reflected in exam questions)
• Container-related content expanded — expect Azure Container Apps and AKS questions

If you're using study materials from before September 2025, you're studying outdated content. Make sure everything aligns with the current exam skills outline.

The 5 Exam Domains (Weighted)

Understanding the weighting tells you where to spend your time:

1. Manage Azure Identities and Governance (20-25%)

This domain trips up people who come from an AWS background. Azure's identity model with Entra ID (formerly Azure AD) is fundamentally different from IAM.

Key topics:

• Entra ID users, groups, and administrative units
• Role-Based Access Control (RBAC) — custom roles, role assignments, scope
• Azure Policy — built-in vs custom policies, initiatives, compliance
• Management groups, subscriptions, and resource groups hierarchy
• Azure Blueprints and landing zones

My biggest mistake on attempt one: I knew what RBAC was but couldn't apply it to specific scenarios. The exam doesn't ask "What is a custom role?" It asks "A developer needs to manage VMs in resource group X but not delete them. Which built-in role and scope should you assign?" Practice scenario questions for this domain.

2. Implement and Manage Storage (15-20%)

Storage sounds boring until you realize there are like 47 different storage configurations and the exam expects you to know when to use each one.

Key topics:

• Storage accounts — types, tiers, replication options (LRS, ZRS, GRS, RA-GRS)
• Blob storage — hot, cool, cold, archive tiers and lifecycle management
• Azure Files and Azure File Sync
• Storage security — SAS tokens, access keys, Entra ID auth, encryption
• AzCopy and Storage Explorer

3. Deploy and Manage Azure Compute Resources (20-25%)

The meatiest domain. Expect lots of VM, scale set, and container questions.

Key topics:

• Virtual machines — sizing, availability sets, availability zones, scale sets
• ARM templates and Bicep for infrastructure as code
• Azure App Service — plans, deployment slots, scaling
• Azure Container Instances and Azure Container Apps
• Azure Kubernetes Service (AKS) basics

Hands-on experience matters most here. If you've never deployed a VM Scale Set with a custom script extension, do it before the exam. The lab questions will test exactly this kind of task.

4. Implement and Manage Virtual Networking (15-20%)

Networking is where most people's confidence dies. Azure networking has so many moving parts.

Key topics:

• VNets, subnets, and VNet peering
• Network Security Groups (NSGs) — rules, priority, default rules
• Azure Load Balancer vs Application Gateway vs Front Door
• VPN Gateway and ExpressRoute
• Azure DNS and Private DNS zones
• Private Endpoints and Private Link

The #1 networking topic to nail: NSG rule evaluation order. Rules are processed by priority (lowest number = highest priority). If you don't understand how default rules interact with custom rules, you'll get multiple questions wrong. Practice with AZ-104 questions that focus on NSG scenarios.

5. Monitor and Maintain Azure Resources (10-15%)

The lowest-weighted domain, but don't skip it. Free points if you study it.

Key topics:

• Azure Monitor — metrics, logs, alerts, action groups
• Log Analytics workspaces and KQL queries
• Azure Backup — vault setup, backup policies, restore options
• Azure Site Recovery
• Network Watcher tools

The 10-Week AZ-104 Study Plan

This plan assumes 1-2 hours per day. Adjust based on your Azure experience level.

Weeks 1-2: Identity & Governance

• Complete Microsoft Learn modules for Entra ID
• Set up a free Azure account and create users, groups, RBAC assignments
• Create and assign Azure Policies
• Practice: 50 questions on identity domain

Weeks 3-4: Storage

• Create storage accounts with different replication options
• Practice blob lifecycle management policies
• Set up Azure Files and test SAS tokens
• Practice: 50 questions on storage domain

Weeks 5-6: Compute

• Deploy VMs, scale sets, App Service apps
• Write a basic ARM template or Bicep file
• Deploy a container to ACI
• Practice: 80 questions on compute domain

Weeks 7-8: Networking

• Build a VNet with subnets, NSGs, and peering
• Set up Load Balancer and Application Gateway
• Configure Azure DNS
• Practice: 80 questions on networking domain — free AZ-104 practice test

Weeks 9-10: Monitoring + Full Practice Exams

• Set up Azure Monitor alerts and Log Analytics
• Configure Azure Backup for a VM
• Take 3-4 full-length practice exams under timed conditions
• Review all wrong answers, re-study weak domains
• Book exam when consistently scoring 85%+

Best Free Study Resources for AZ-104

You don't need to spend hundreds on courses. Here's what's genuinely useful and free:

• Microsoft Learn: The official learning path is comprehensive and free. Start here.
• ExamCert AZ-104 Practice Test: 600+ free practice questions with explanations
• Azure Free Account: $200 credit for 30 days + always-free tier services. Essential for hands-on practice.
• John Savill's YouTube: His AZ-104 study cram and masterclass videos are gold. Completely free.
• Microsoft Practice Assessment: Free official practice test on Microsoft Learn

AZ-104 vs Other Azure Certifications

Not sure if AZ-104 is right for you? Here's the quick comparison:

• AZ-104 vs AZ-900: AZ-900 is fundamentals (concepts), AZ-104 is hands-on administration. Choose AZ-104 if you already work in IT.
• AZ-104 vs AZ-305: AZ-104 is implementation, AZ-305 is architecture/design. Get AZ-104 first—it's a prerequisite mindset for AZ-305.
• AZ-204 vs AZ-104: AZ-104 is for admins, AZ-204 is for developers. Pick based on your role.
• AZ-104 vs AWS SAA-C03: If your company uses Azure, go AZ-104. Multi-cloud? Read our comparison.

Exam Day Tips (From Someone Who Failed Once)

These are the things I'd tell past-me:

Time Management

You have 120 minutes for ~50 questions. That's about 2.4 minutes per question. But some questions are quick (30 seconds) and others require careful reading (3-4 minutes). Don't panic if a question takes time—you'll make up for it on easy ones.

Lab Questions Strategy

If you get lab questions, they usually appear first. They're also time-boxed separately. Key advice: read the task requirements carefully and don't overthink. They test whether you can perform a specific task in the portal, not whether you can architect a solution.

Flag and Move On

If a question stumps you for more than 3 minutes, flag it and move on. Your subconscious will often work on it while you answer other questions. Come back to flagged questions after finishing the rest.

Read All Options

Azure exam questions often have options that are 90% correct but wrong on one detail. Read ALL options before selecting. The difference between the right and wrong answer is often a single word—like "Reader" vs "Contributor" role, or "allow" vs "deny" in an NSG rule.

After AZ-104: What's Next?

Once you've passed AZ-104, you've got options:

• AZ-305 Azure Solutions Architect — the natural progression for architecture roles
• AZ-500 Azure Security Engineer — if security interests you
• AZ-204 Azure Developer — if you code and want the dev perspective
• AZ-400 Azure DevOps Engineer — combines admin + dev skills

My recommendation? Take AZ-305 next. The knowledge from AZ-104 directly feeds into it, and an Architect cert significantly boosts your market value.

FAQ — Azure AZ-104 Study Guide