AZ-104Microsoft Azure Administrator
What the exam covers
- Manage Azure identities and governance 50 practice questions 20–25%
- Implement and manage storage 14 practice questions 15–20%
- Deploy and manage Azure compute resources 12 practice questions 20–25%
- Implement and manage virtual networking 14 practice questions 15–20%
- Monitor and maintain Azure resources 10 practice questions 10–15%
Study guide
From Microsoft
About AZ-104
Day-to-day Azure administration: Entra ID users and groups, RBAC and policy, storage accounts, VMs and scale sets, App Service and containers, virtual networks, and monitoring and backup.
Who it's for. Administrators who run Azure subscriptions.
How to prepare
- NSG rule evaluation (priority, default rules, subnet and NIC) is a frequent trap.
- Know storage access options: account keys, SAS tokens, stored access policies, and Entra-based RBAC.
- Practise moving resources between resource groups and subscriptions, and what can’t be moved.
Sample AZ-104 questions
Try these with the answers on the page, then practise the full bank.
- A platform team needs an identity for an unattended deployment script that will read and write resources in an Azure subscription. The identity must not be tied to a person and must be able to hold its own credentials. Which identity type should the team create? Manage Azure identities and governance
- An operator must be able to start, stop and reconfigure virtual machines in one resource group, and must have no rights anywhere else in the subscription. Which mechanism should be used? Manage Azure identities and governance
- An administrator wants to assign a custom rule that permits only a specific list of virtual machine sizes. What must exist before that assignment can be created? Manage Azure identities and governance
- An administrator must create 500 new cloud-only user accounts in Microsoft Entra ID and wants to submit them in one operation using a comma-separated template downloaded from the portal. Which approach should be used? Manage Azure identities and governance
- A user's password has expired. The account is enabled, licensed and not locked out, yet the user cannot sign in to any application. What should be attempted first? Manage Azure identities and governance
- A company wants administrators to hold no standing privileged role. Instead they should request elevation for a few hours, with approval and MFA, and every activation must be auditable. Which feature provides this? Manage Azure identities and governance
- A custom role definition must grant read access to every resource type from every resource provider, and nothing else. Which actions entry accomplishes this? Manage Azure identities and governance
- A policy must add a tag with a fixed value to a resource request when, and only when, that tag is absent, without altering any other property. Which effect does this? Manage Azure identities and governance
- All 18 sample questions
Questions people ask
Is this AZ-104 practice exam free?
Yes. All 100 questions, the timed mock exam and the explanations are free, and there's no account to create.
Are these real exam questions?
No. Real exam questions are confidential under the Azure candidate agreement. These are practice questions written to cover the same domains in the same scenario style, each with an explanation of why the answer is right.
How is the AZ-104 mock exam scored?
Questions are drawn from every domain in proportion to the exam guide, and you get a raw percentage with a breakdown by domain. Azure uses scaled scoring, so treat 75% or more here as a sign you're ready rather than a predicted score.
Where is my progress saved?
In your browser, on this device. Nothing is sent to us apart from the answers you check, and clearing site data resets it.