How to use this guide
Give each domain study time in proportion to its official weighting. The percentages below are where your marks actually come from. Work through the domains in order, then let your per-domain practice scores show you what to go back to.
The fastest way to improve: read one domain’s focus areas, take a practice run, then read the explanation for every question you missed before moving on. The explanations are where the learning happens. Skipping them is the most common reason people stop improving.
1. Manage Azure identities and governance
24% of the examWhat to focus on:
- Microsoft Entra ID: users, groups, administrative units and licence assignment
- RBAC: built-in versus custom roles, and scope inheritance across the management hierarchy
- Subscriptions and governance: management groups, Azure Policy, resource locks, tags
- Cost management: budgets, alerts and cost analysis
2. Implement and manage storage
19% of the examWhat to focus on:
- Storage accounts: redundancy options (LRS/ZRS/GRS/GZRS) and access tiers
- Securing storage with SAS tokens, access keys, firewalls and private endpoints
- Azure Files, File Sync, and blob lifecycle management
- Moving data with AzCopy, Storage Explorer and Import/Export
3. Deploy and manage Azure compute resources
24% of the examWhat to focus on:
- Virtual machines: sizing, availability sets and zones, and scale sets
- ARM templates and Bicep: deploying, and reading a template to predict its result
- Containers: Azure Container Instances and Azure Kubernetes Service basics
- App Service plans, scaling and deployment slots
4. Implement and manage virtual networking
19% of the examWhat to focus on:
- Virtual networks, subnets, peering and address planning
- Network security groups and application security groups, plus evaluation order
- Load Balancer versus Application Gateway, and when each applies
- Azure DNS, private endpoints, and hybrid connectivity with VPN Gateway
5. Monitor and maintain Azure resources
14% of the examWhat to focus on:
- Azure Monitor, Log Analytics workspaces and basic KQL queries
- Alerts, action groups and Application Insights
- Network Watcher for connectivity troubleshooting
- Backup and recovery: Azure Backup, Recovery Services vaults, Site Recovery
Common mistakes
- Confusing Azure Policy with RBAC. Policy governs what resources may exist and how they must be configured; RBAC governs who may act on them. Questions are built on that distinction.
- Guessing at NSG evaluation. Rules are processed by priority and the first match wins, so walk the rules in order.
- Treating availability sets and availability zones as interchangeable. They protect against different failures.
- Picking Load Balancer when the scenario describes HTTP path- or host-based routing. That is Application Gateway's job.
- Skimming storage redundancy. LRS, ZRS, GRS and GZRS differ in exactly the way the scenarios test: regional versus zonal versus geo failure.
- Skimming Bicep or ARM fragments. The answer is usually one property, and the rest of the template is there to slow you down.
Exam-day tips
- Read the last line of the scenario first. It carries the actual requirement, and it reframes everything above it.
- Watch for least-privilege phrasing. When several roles would work, the answer is the narrowest one that still does the job.
- Read case-study scenarios properly once. One scenario covers several questions, so re-reading per item wastes time.
- Check whether you are in a locked section before rushing. Some questions cannot be revisited once answered.
- There is no penalty for a wrong answer. Never leave one blank.
- Prioritise identity and compute. They are 24% each, nearly half the exam between them.
How to know you’re ready
One good practice score can be luck. What counts is scoring at or above the real pass mark (700 on a 1 to 1000 scaled score) across several full-length sets in a row, with no single domain trailing far behind the others. Kwizza tracks your per-domain readiness automatically as you practice.
Free, full-length, and weighted to the official blueprint. Every answer is explained.
Start the Azure Administrator practice exam →