CertSafari

    Free Practice Questions for Microsoft Certified: Azure Administrator Associate (AZ-104) Certification

    Exam guide version:
    April 17, 2026
    Guide checked for updates:
    9 Oct 2026
    Question bank created:
    6 Feb 2026
    Question bank last updated:
    9 Oct 2026

    Study with 387 exam-style practice questions designed to help you prepare for the Microsoft Certified: Azure Administrator Associate (AZ-104). All questions are aligned with the latest exam guide and include detailed explanations to help you master the material.

    Your progress

    Coverage
    Mastery
    Performance

    Start Practicing

    Start a quiz

    Practice with randomly mixed questions from all topics

    Question MixAll Topics
    FormatRandom Order

    Exam experiences

    Pass and fail outcomes from candidates who prepared here — advice, scores, and prep time.

    Your saved questions

    Open the list of questions you bookmarked during practice for this exam.

    Study notes

    Private notes per question, grouped by exam domain — opens on its own page, not inline on this overview.

    Quiz History

    Exam Details

    Key information about Microsoft Certified: Azure Administrator Associate (AZ-104)

    Official study guide

    View

    Question formats CertSafari offers
    • Multiple choice
    • Ordering
    • Matching
    • True/False
    level:

    associate (intermediate)

    prerequisites:

    Familiarity with operating systems, networking, servers, and virtualization. Experience with PowerShell, Azure CLI, the Azure portal, Azure Resource Manager templates, and Microsoft Entra ID.

    target audience:

    Candidates with subject matter expertise in implementing, managing, and monitoring Microsoft Azure environments, including virtual networks, storage, compute, identity, security, and governance.

    skills measured as of:

    April 18, 2025

    Exam Topics & Skills Assessed

    Skills measured (from the official study guide)

    1: Manage Azure identities and governance

    1.1: Manage Microsoft Entra users and groups

    - Create users and groups - Manage user and group properties - Manage licenses in Microsoft Entra ID - Manage external users - Configure self-service password reset (SSPR)

    1.2: Manage access to Azure resources

    - Manage built-in Azure roles - Assign roles at different scopes - Interpret access assignments

    1.3: Manage Azure subscriptions and governance

    - Implement and manage Azure Policy - Configure resource locks - Apply and manage tags on resources - Manage resource groups - Manage subscriptions - Manage costs by using alerts, budgets, and Azure Advisor recommendations - Configure management groups

    2: Implement and manage storage

    2.1: Configure access to storage

    - Configure Azure Storage firewalls and virtual networks - Create and use shared access signature (SAS) tokens - Configure stored access policies - Manage access keys - Configure identity-based access for Azure Files

    2.2: Configure and manage storage accounts

    - Create and configure storage accounts - Configure Azure Storage redundancy - Configure object replication - Configure storage account encryption - Manage data by using Azure Storage Explorer and AzCopy

    2.3: Configure Azure Files and Azure Blob Storage

    - Create and configure a file share in Azure Files - Create and configure a container in Azure Blob Storage - Configure storage tiers - Configure soft delete for blobs and containers - Configure snapshots and soft delete for Azure Files - Configure blob lifecycle management - Configure blob versioning

    3: Deploy and manage Azure compute resources

    3.1: Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files

    - Interpret an Azure Resource Manager template or a Bicep file - Modify an existing Azure Resource Manager template - Modify an existing Bicep file - Deploy resources by using an Azure Resource Manager template or a Bicep file - Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file

    3.2: Create and configure virtual machines

    - Create a virtual machine - Configure encryption at host for Azure virtual machines - Move a virtual machine to another resource group, subscription, or region - Manage virtual machine sizes - Manage virtual machine disks - Deploy virtual machines to availability zones and availability sets - Deploy and configure an Azure Virtual Machine Scale Sets

    3.3: Provision and manage containers in the Azure portal

    - Create and manage an Azure Container Registry - Provision a container by using Azure Container Instances - Provision a container by using Azure Container Apps - Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps

    3.4: Create and configure Azure App Service

    - Provision an App Service plan - Configure scaling for an App Service plan - Create an App Service - Configure certificates and Transport Layer Security (TLS) for an App Service - Map an existing custom DNS name to an App Service - Configure backup for an App Service - Configure networking settings for an App Service - Configure deployment slots for an App Service

    4: Implement and manage virtual networking

    4.1: Configure and manage virtual networks in Azure

    - Create and configure virtual networks and subnets - Create and configure virtual network peering - Configure public IP addresses - Configure user-defined routes - Troubleshoot network connectivity

    4.2: Configure secure access to virtual networks

    - Create and configure network security groups (NSGs) and application security groups - Evaluate effective security rules in NSGs - Implement Azure Bastion - Configure service endpoints for Azure platform as a service (PaaS) - Configure private endpoints for Azure PaaS

    4.3: Configure name resolution and load balancing

    - Configure Azure DNS - Configure an internal or public load balancer - Troubleshoot load balancing

    5: Monitor and maintain Azure resources

    5.1: Monitor resources in Azure

    - Interpret metrics in Azure Monitor - Configure log settings in Azure Monitor - Query and analyze logs in Azure Monitor - Set up alert rules, action groups, and alert processing rules in Azure Monitor - Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights - Use Azure Network Watcher and Connection monitor

    5.2: Implement backup and recovery

    - Create a Recovery Services vault - Create an Azure Backup vault - Create and configure a backup policy - Perform backup and restore operations by using Azure Backup - Configure Azure Site Recovery for Azure resources - Perform a failover to a secondary region by using Site Recovery - Configure and interpret reports and alerts for backups

    Techniques & products

    Microsoft Entra ID
    Azure Policy
    Resource locks
    Azure roles
    Management groups
    Azure Storage firewalls
    Virtual networks
    Shared access signature (SAS) tokens
    Stored access policies
    Access keys
    Identity-based access for Azure Files
    Storage accounts
    Azure Storage redundancy
    Object replication
    Storage account encryption
    Azure Storage Explorer
    AzCopy
    Azure Files
    Azure Blob Storage
    Storage tiers
    Soft delete for blobs and containers
    Snapshots
    Blob lifecycle management
    Blob versioning
    Azure Resource Manager (ARM) templates
    Bicep files
    Virtual machines
    Azure Disk Encryption
    Availability zones
    Availability sets
    Azure Virtual Machine Scale Sets
    Azure Container Registry
    Azure Container Instances
    Azure Container Apps
    Azure App Service
    App Service plan
    Transport Layer Security (TLS)
    Custom DNS names
    Deployment slots
    Virtual network peering
    Public IP addresses
    User-defined network routes
    Network security groups (NSGs)
    Application security groups
    Azure Bastion
    Service endpoints
    Private endpoints
    Azure DNS
    Load balancer
    Azure Monitor
    Log settings
    Alert rules
    Action groups
    Alert processing rules
    Azure Monitor Insights
    Azure Network Watcher
    Connection Monitor
    Recovery Services vault
    Azure Backup vault
    Backup policy
    Azure Site Recovery
    PowerShell
    Azure CLI
    Azure portal

    CertSafari is not affiliated with, endorsed by, or officially connected to Microsoft Corporation. Full disclaimer