Microsoft Azure Administrator (AZ-104) — Study Guide
Free, topic-by-topic study notes for the Microsoft Azure Administrator (AZ-104) exam. Read a chapter, then practice it.
Manage Identities and Governance
This domain covers how Azure controls who can do what and how organizations enforce standards across their cloud estate. You will work with Microsoft Entra ID for identity, Azure RBAC for resource access, and governance tools such as Azure Policy, locks, tags, and management groups. Mastering the distinction between identity roles and resource roles is central to the exam.
Implement and Manage Storage
This domain focuses on Azure Storage accounts and the services they host, including blobs and file shares. You will choose redundancy and access tiers, secure access with SAS and firewalls, and move data efficiently. Understanding the trade-offs between durability, cost, and access is essential.
Deploy and Manage Compute Resources
This domain covers Azure compute options from virtual machines to containers and platform services. You will configure availability, scaling, and automated deployment, and choose the right service for a workload. The core skill is matching compute needs to the correct level of management and resiliency.
Configure and Manage Virtual Networking
This domain covers building and securing connectivity in Azure using virtual networks and related services. You will design subnets, filter traffic, connect networks, resolve names, and balance and secure traffic. Selecting the correct networking service for each requirement is the recurring theme.
Monitor and Maintain Azure Resources
This domain covers observing the health and performance of Azure resources and protecting them through backup. You will collect and query telemetry, configure alerts, diagnose networking, and set up recovery. The goal is keeping workloads healthy and recoverable.
Practice by topic
Jump straight into free practice questions for any single Microsoft Azure Administrator (AZ-104) topic.