Microsoft
Microsoft Azure Administrator (AZ-104) exam objectives
Microsoft publishes 5 exam domains with official weightings. The weight tells you where your marks come from — study time should roughly follow it.
AZ-104AssociateIntermediate
1. Manage Azure identities and governance
24%- Microsoft Entra ID: users, groups, administrative units and licence assignment
- RBAC — built-in versus custom roles, and scope inheritance across the management hierarchy
- Subscriptions and governance: management groups, Azure Policy, resource locks, tags
- Cost management — budgets, alerts and cost analysis
2. Implement and manage storage
19%- Storage accounts: redundancy options (LRS/ZRS/GRS/GZRS) and access tiers
- Securing storage — SAS tokens, access keys, firewalls and private endpoints
- Azure Files, File Sync, and blob lifecycle management
- Moving data with AzCopy, Storage Explorer and Import/Export
3. Deploy and manage Azure compute resources
24%- Virtual machines: sizing, availability sets and zones, and scale sets
- ARM templates and Bicep — deploying, and reading a template to predict its result
- Containers: Azure Container Instances and Azure Kubernetes Service basics
- App Service plans, scaling and deployment slots
4. Implement and manage virtual networking
19%- Virtual networks, subnets, peering and address planning
- Network security groups and application security groups — and evaluation order
- Load Balancer versus Application Gateway, and when each applies
- Azure DNS, private endpoints, and hybrid connectivity with VPN Gateway
5. Monitor and maintain Azure resources
14%- Azure Monitor, Log Analytics workspaces and basic KQL queries
- Alerts, action groups and Application Insights
- Network Watcher for connectivity troubleshooting
- Backup and recovery — Azure Backup, Recovery Services vaults, Site Recovery
Our practice exam distributes its questions across these exact domains at these weightings — so your score per domain tells you precisely where you stand.
Practice these objectives free →