Azure Administrator AZ-104: Complete Learning Path and Study Guide

Azure Administrator AZ-104 Certification

The Microsoft Azure Administrator Associate (AZ-104) certification validates your expertise in implementing, managing, and monitoring Azure environments. This role-based certification is essential for IT professionals responsible for managing cloud services spanning storage, security, networking, and compute in Microsoft Azure.

AZ-104 is the most popular Azure certification and serves as the foundation for advanced Azure certifications like AZ-305 (Solutions Architect Expert) and AZ-400 (DevOps Engineer Expert).

Why AZ-104 Matters

Industry Recognition:

• Most in-demand Azure certification
• Often required for Azure administrator roles
• Foundation for Microsoft's role-based certification path
• Validates real-world Azure administration skills

Career Impact:

• Average salary: $90,000-$130,000
• Opens doors to cloud administration roles
• Prerequisite for Azure Solutions Architect Expert
• Demonstrates Microsoft cloud expertise

Exam Format and Requirements

Question Types

Multiple Choice: Select one correct answer

Multiple Response: Select all that apply (question indicates how many)

Case Studies: Multi-page scenarios with multiple questions

Drag and Drop: Order steps or match items

Hot Area: Click on correct area of image/diagram

Lab Simulations: Perform tasks in simulated Azure portal (may appear)

Exam Delivery

• Online proctored via Pearson VUE
• In-person at testing centers
• Available in multiple languages
• Photo ID required

Exam Domains Detailed Breakdown

Domain 1: Manage Azure Identities and Governance

15-20%

Azure Active Directory:

# Create user
New-AzADUser -DisplayName "John Doe" -UserPrincipalName "[email protected]" -Password $securePassword

# Create group
New-AzADGroup -DisplayName "IT Admins" -MailNickname "itadmins"

# Add user to group
Add-AzADGroupMember -TargetGroupObjectId $groupId -MemberObjectId $userId

# Assign role
New-AzRoleAssignment -ObjectId $userId -RoleDefinitionName "Contributor" -Scope "/subscriptions/$subscriptionId"

Azure AD Features:

• Self-service password reset (SSPR)
• Multi-factor authentication (MFA)
• Conditional Access policies
• Azure AD Connect for hybrid identity
• Azure AD Domain Services
• Privileged Identity Management (PIM)

Azure Policy:

{
  "if": {
    "field": "type",
    "equals": "Microsoft.Compute/virtualMachines"
  },
  "then": {
    "effect": "deny",
    "details": {
      "requiredTags": ["Environment", "Owner"]
    }
  }
}

Role-Based Access Control (RBAC):

• Built-in roles: Owner, Contributor, Reader
• Custom roles
• Management groups for hierarchy
• Resource locks (ReadOnly, CanNotDelete)

Azure Blueprints:

• Template-based environment deployment
• Compliance and governance automation
• Artifact versioning and tracking

Domain 2: Implement and Manage Storage

15-20%

Storage Accounts:

# Create storage account
az storage account create \
  --name mystorageaccount \
  --resource-group myResourceGroup \
  --location eastus \
  --sku Standard_LRS \
  --kind StorageV2

# Create blob container
az storage container create \
  --name mycontainer \
  --account-name mystorageaccount \
  --public-access blob

# Upload blob
az storage blob upload \
  --account-name mystorageaccount \
  --container-name mycontainer \
  --name myblob \
  --file ./localfile.txt

Storage Types:

• Blob Storage: Object storage (Block, Page, Append blobs)
• Azure Files: SMB file shares in cloud
• Queue Storage: Message queue for asynchronous processing
• Table Storage: NoSQL key-value store
• Disk Storage: Managed disks for VMs

Storage Access Tiers:

• Hot: Frequently accessed data
• Cool: Infrequently accessed (30+ days)
• Archive: Rarely accessed (180+ days)

Data Security:

• Storage encryption at rest (default)
• Shared Access Signatures (SAS)
• Storage account keys
• Azure AD authentication
• Network security rules

Azure File Sync:

• Sync on-premises file servers to Azure
• Cloud tiering for capacity extension
• Multi-site sync
• Disaster recovery capability

Domain 3: Deploy and Manage Azure Compute Resources

20-25%

Virtual Machines:

# Create VM
az vm create \
  --resource-group myResourceGroup \
  --name myVM \
  --image UbuntuLTS \
  --admin-username azureuser \
  --generate-ssh-keys \
  --size Standard_DS1_v2

# Start/Stop VM
az vm start --resource-group myResourceGroup --name myVM
az vm stop --resource-group myResourceGroup --name myVM
az vm deallocate --resource-group myResourceGroup --name myVM

# Resize VM
az vm resize --resource-group myResourceGroup --name myVM --size Standard_DS2_v2

# Add data disk
az vm disk attach \
  --resource-group myResourceGroup \
  --vm-name myVM \
  --name myDataDisk \
  --size-gb 128 \
  --sku Premium_LRS

VM Availability:

• Availability Sets (fault domains, update domains)
• Availability Zones (datacenter-level redundancy)
• Virtual Machine Scale Sets (VMSS)
• Load Balancer integration

ARM Templates:

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "vmName": {
      "type": "string",
      "metadata": {
        "description": "Name of the VM"
      }
    }
  },
  "resources": [
    {
      "type": "Microsoft.Compute/virtualMachines",
      "apiVersion": "2021-03-01",
      "name": "[parameters('vmName')]",
      "location": "[resourceGroup().location]",
      "properties": {
        // VM configuration
      }
    }
  ]
}

Azure Container Instances:

# Create container instance
az container create \
  --resource-group myResourceGroup \
  --name mycontainer \
  --image nginx \
  --dns-name-label myapp \
  --ports 80

Azure App Service:

• Web Apps (Windows and Linux)
• Deployment slots for staging
• Auto-scaling
• Custom domains and SSL
• Continuous deployment

Domain 4: Configure and Manage Virtual Networking

25-30%

Virtual Networks:

# Create VNet
az network vnet create \
  --resource-group myResourceGroup \
  --name myVNet \
  --address-prefix 10.0.0.0/16 \
  --subnet-name mySubnet \
  --subnet-prefix 10.0.1.0/24

# Create NSG
az network nsg create \
  --resource-group myResourceGroup \
  --name myNSG

# Create NSG rule
az network nsg rule create \
  --resource-group myResourceGroup \
  --nsg-name myNSG \
  --name AllowSSH \
  --priority 100 \
  --source-address-prefixes '*' \
  --destination-port-ranges 22 \
  --access Allow \
  --protocol Tcp

VNet Peering:

# Create VNet peering
az network vnet peering create \
  --resource-group myResourceGroup \
  --name VNet1-to-VNet2 \
  --vnet-name VNet1 \
  --remote-vnet VNet2 \
  --allow-vnet-access

Load Balancing:

• Azure Load Balancer: Layer 4 (TCP/UDP)
• Application Gateway: Layer 7 (HTTP/HTTPS) with WAF
• Traffic Manager: DNS-based global load balancing
• Front Door: Global HTTP load balancer with CDN

VPN Gateway:

# Create VPN Gateway
az network vnet-gateway create \
  --resource-group myResourceGroup \
  --name myVPNGateway \
  --vnet myVNet \
  --gateway-type Vpn \
  --vpn-type RouteBased \
  --sku VpnGw1 \
  --no-wait

ExpressRoute:

• Private connection to Azure (not over internet)
• 50 Mbps to 10 Gbps bandwidth
• Layer 3 connectivity
• 99.95% SLA

DNS:

• Azure DNS zones
• Custom domains
• Private DNS zones
• DNS record types (A, AAAA, CNAME, MX, TXT)

Domain 5: Monitor and Maintain Azure Resources

10-15%

Azure Monitor:

# Create alert rule
az monitor metrics alert create \
  --name "High CPU Alert" \
  --resource-group myResourceGroup \
  --scopes "/subscriptions/$subscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM" \
  --condition "avg Percentage CPU > 80" \
  --window-size 5m \
  --evaluation-frequency 1m \
  --action-group myActionGroup

Log Analytics:

// Query VM performance
Perf
| where ObjectName == "Processor" and CounterName == "% Processor Time"
| summarize avg(CounterValue) by Computer, bin(TimeGenerated, 5m)
| render timechart

// Query failed logins
SecurityEvent
| where EventID == 4625
| summarize count() by Account, Computer
| top 10 by count_

Azure Backup:

• VM backup with Recovery Services vault
• File and folder backup
• Azure Backup Server
• Backup policies and retention
• Restore points and recovery

Azure Site Recovery:

• Disaster recovery as a service
• VM replication to secondary region
• Failover and failback
• Replication health monitoring
• Recovery plans with automation

Update Management:

• Assess update compliance
• Schedule update deployments
• Integration with Log Analytics
• Support for Windows and Linux

Comprehensive Study Resources

Official Microsoft Resources

• school

  Microsoft Learn AZ-104 Path - Free official learning modules

  open_in_new
• description

  AZ-104 Study Guide - Official exam objectives

  open_in_new
• link

  Azure Documentation - Complete Azure reference

  open_in_new
• 🔬 Azure Free Account - $200 credit for 30 days

Recommended Courses

• school

  Scott Duffy's AZ-104 Course (Udemy) - Comprehensive with hands-on labs

  open_in_new
• school

  A Cloud Guru AZ-104 Path - Interactive labs

  open_in_new
• school

  Pluralsight AZ-104 Path - Multiple courses

  open_in_new
• school

  John Savill's AZ-104 Study Playlist - Free YouTube series

  open_in_new

Practice Exams

• quiz

  MeasureUp AZ-104 - Official practice exam

  open_in_new
• quiz

  Whizlabs AZ-104 Tests - Multiple mock exams

  open_in_new
• 📝 Tutorials Dojo AZ-104 - Practice questions with explanations

Hands-On Labs

• 🔬 Microsoft Learn Sandbox - Free lab environment
• 🔬 Azure Portal - Practice in real environment
• 🔬 Azure CLI / PowerShell - Command-line practice

8-Week Study Plan

Week 1: Azure Fundamentals Review

• Review Azure basics (if needed)
• Understand Azure architecture
• Navigate Azure Portal
• Learn Azure CLI and PowerShell basics
• Study Time: 10-12 hours

Week 2: Identities and Governance

• Azure AD user and group management
• RBAC and custom roles
• Azure Policy implementation
• Management groups and subscriptions
• Study Time: 12-15 hours

Week 3-4: Storage and Compute

• Storage accounts and blob storage
• Azure Files and File Sync
• Create and manage VMs
• VM availability and scaling
• Container instances
• Study Time: 15-18 hours per week

Week 5-6: Virtual Networking

• VNets and subnets
• NSGs and application security groups
• VNet peering
• VPN Gateway and ExpressRoute
• Load balancing options
• Study Time: 15-18 hours per week

Week 7: Monitoring and Backup

• Azure Monitor and Log Analytics
• Create alerts and action groups
• Azure Backup configuration
• Site Recovery setup
• Study Time: 12-15 hours

Week 8: Practice and Review

• Take practice exams
• Review weak areas
• Hands-on labs in Azure Portal
• Command-line practice
• Final review
• Study Time: 15-20 hours

Critical Exam Tips

Azure Portal vs Command Line

Know both methods:

• Portal for visual understanding
• CLI/PowerShell for automation
• Exam tests both approaches

Common Exam Topics

1. 1 RBAC assignments - Assign roles at correct scope
2. 2 NSG rules - Understand priority and evaluation
3. 3 VNet peering - Know limitations and requirements
4. 4 Storage access tiers - Choose appropriate tier
5. 5 VM sizing - Select right size for workload
6. 6 Backup retention - Configure policies correctly

Time Management

• Don't spend >2 minutes per question initially
• Flag difficult questions and return later
• Case studies can be time-consuming - budget wisely
• Review all answers if time permits

Practice Questions

Test your Azure administration knowledge with realistic exam scenarios.

Frequently Asked Questions

---

AZ-104 Success Formula:

1. 1 Hands-on practice - 40+ hours in Azure Portal
2. 2 Command-line proficiency - Learn Azure CLI and PowerShell
3. 3 Understand concepts - Don't just memorize
4. 4 Practice exams - Take multiple mock tests
5. 5 Review weak areas - Focus on lowest-scoring domains

Azure Administrator certification is your gateway to cloud administration careers and advanced Azure certifications. Master AZ-104, and you'll have skills to manage enterprise Azure environments!