Microsoft Azure Administrator Associate (AZ-104)

For Exam AZ-104: Microsoft Azure Administrator, you need to be familiar with setting up and managing Microsoft Azure for a company. This includes understanding things like virtual networks, storage, computers, and user identities, keeping things secure, and making sure everything follows the rules.

As an Azure administrator, you're part of a team that builds the company's cloud system. You work with others to create and manage things like internet connections, keeping data safe, setting up databases, making apps, and improving how things get done in the company. It's important to understand the workings of different operating systems, how computers connect, what servers do, and how to use virtualization.

Who should take the Microsoft AZ-104 Exam?

Those who have experience using tools like PowerShell, Azure CLI, the Azure portal, Azure Resource Manager templates, and Microsoft Entra ID are best suited for this exam.

Exam Details of Microsoft AZ-104

• Exam Code: AZ-104
• Exam Name: Microsoft Azure Administrator Associate
• Exam Languages: English, Chinese (Simplified), Korean, Japanese, French, Spanish, German, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Chinese (Traditional), Italian, Indonesian (Indonesia)
• Exam Questions: 40-60 Questions
• Passing Score: 700 or greater (On a scale of 1 - 1000)

AZ-104 Exam Course Outline 

The Exam AZ-104: Microsoft Azure Administrator covers the given topics  - 

Domain 1 - Understanding to manage Azure identities and governance (20–25%)

1.1 Explain managing Microsoft Entra users and groups

• Learn to create users and groups
• Learn to manage user and group properties
• Learn to manage licenses in Microsoft Entra ID
• Learn to manage external users
• Learn to configure self-service password reset (SSPR)

1.2 Explain managing access to Azure resources

• Learn to manage built-in Azure roles
  
• Learn to assign roles at different scopes
• Learn to interpret access assignments

1.3 Explain to manage Azure subscriptions and governance

• Learn to implement and manage Azure Policy
  
• Learn to configure resource locks
• Learn to apply and manage tags on resources
• Learn to manage resource groups
• Learn to manage subscriptions
• Learn to manage costs by using alerts, budgets, and Azure Advisor recommendations
• Learn to configure management groups

Domain 2 - Understanding to implement and manage storage (15–20%)

2.1 Explain to configure access to storage

• Learn to configure Azure Storage firewalls and virtual networks
  
• Learn to create and use shared access signature (SAS) tokens
• Learn to configure stored access policies
• Learn to manage access keys
• Learn to configure identity-based access for Azure Files

2.2 Explain to Configure and manage storage accounts

• Learn to create and configure storage accounts
  
• Learn to configure Azure Storage redundancy
• Learn to configure object replication
• Learn to configure storage account encryption
• Learn to manage data by using Azure Storage Explorer and AzCopy

2.3 Explain configure Azure Files and Azure Blob Storage

• Learn to create and configure a file share in Azure Storage
  
• Learn to create and configure a container in Blob Storage
• Learn to configure storage tiers
• Learn to configure snapshots and soft delete for Azure Files
• Learn to configure blob lifecycle management
• Learn to configure blob versioning

Domain 3 - Understanding to Deploy and manage Azure compute resources (20–25%)

3.1 Explain to automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files

• Learn to interpret an Azure Resource Manager template or a Bicep file
  
• Learn to modify an existing Azure Resource Manager template
• Learn to modify an existing Bicep file
• Learn to deploy resources by using an Azure Resource Manager template or a Bicep file
• Learn to export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file

3.2 Explain to create and configure virtual machines

• Learn to create a virtual machine
  
• Learn to configure Azure Disk Encryption
• Learn to move a virtual machine to another resource group, subscription, or region
• Learn to manage virtual machine sizes
• Learn to manage virtual machine disks
• Learn to deploy virtual machines to availability zones and availability sets
• Learn to deploy and configure an Azure Virtual Machine Scale Sets

3.3 Explain provisioning and managing containers in the Azure portal

• Learn to create and manage an Azure container registry
  
• Learn to provision a container by using Azure Container Instances
• Learn to provision a container by using Azure Container Apps
• Learn to manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps

3.4 Explain creating and configuring Azure App Service

• Learn to provision an App Service plan
  
• Learn to configure scaling for an App Service plan
• Learn to create an App Service
• Learn to configure certificates and Transport Layer Security (TLS) for an App Service
• Learn to map an existing custom DNS name to an App Service
• Learn to configure backup for an App Service
• Learn to configure networking settings for an App Service
• Learn to configure deployment slots for an App Service

Domain 4 - Understanding to implement and manage virtual networking (15–20%)

4.1 Explain to configure and manage virtual networks in Azure

• Learn to create and configure virtual networks and subnets
  
• Learn to create and configure virtual network peering
• Learn to configure public IP addresses
• Learn to configure user-defined network routes
• Learn to troubleshoot network connectivity

4.2 Explain to configure secure access to virtual networks

• Learn to create and configure network security groups (NSGs) and application security groups
  
• Learn to evaluate effective security rules in NSGs
• Learn to implement Azure Bastion
• Learn to configure service endpoints for Azure platform as a service (PaaS)
• Learn to configure private endpoints for Azure PaaS

4.3 Explain to Configure name resolution and load balancing

• Learn to configure Azure DNS
  
• Learn to configure an internal or public load balancer
• Learn to troubleshoot load balancing

Domain 5 - Monitor and maintain Azure resources (10–15%)

5.1 Explain to monitor resources in Azure

• Learn to interpret metrics in Azure Monitor
  
• Learn to configure log settings in Azure Monitor
• Learn to query and analyze logs in Azure Monitor
• Learn to set up alert rules, action groups, and alert processing rules in Azure Monitor
• Learn to configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights
• Learn to use Azure Network Watcher and Connection Monitor

5.2 Explain to implement backup and recovery

• Learn to create a Recovery Services vault
  
• Learn to create an Azure Backup vault
• Learn to create and configure a backup policy 
• Learn to perform backup and restore operations by using Azure Backup
• Learn to configure Azure Site Recovery for Azure resources
• Learn to perform a failover to a secondary region by using Site Recovery
• Learn to configure and interpret reports and alerts for backups

Get ready to prepare for the Microsoft Azure Administrator Associate (AZ-104) with the updated Practice Exams Now!