AZ-104 syllabus

5 domains and 81 topics, updated November 2026

AZ-104 tests day-to-day administration of an Azure environment: identities and governance, storage, compute, virtual networking, and monitoring with backup. This outline lists what each domain expects, in plain terms, following the current Microsoft skills measured list. Tick topics off as you cover them. Your ticks are saved in this browser.

This outline follows the official AZ-104 exam guide. Check it for the exact wording.

Manage Azure identities and governance

20–25%

Managing who can sign in and what they can do, and applying governance with policy, locks, tags, subscriptions and cost controls. Worth 20-25% of the exam.

Microsoft Entra users and groups
Access to Azure resources
Subscriptions and governance

Implement and manage storage

15–20%

Securing and configuring storage accounts, then using Blob Storage and Azure Files. Worth 15-20% of the exam.

Access to storage
Storage accounts
Azure Files and Blob Storage

Deploy and manage Azure compute resources

20–25%

Deploying with templates, running virtual machines and scale sets, and hosting containers and web apps. Worth 20-25% of the exam.

ARM templates and Bicep
Virtual machines
Containers
Azure App Service

Implement and manage virtual networking

15–20%

Building virtual networks, controlling traffic, reaching PaaS services privately, resolving names and balancing load. Worth 15-20% of the exam.

Virtual networks
Secure access to virtual networks
Name resolution and load balancing

Monitor and maintain Azure resources

10–15%

Watching resources with Azure Monitor and protecting them with backup and Site Recovery. Worth 10-15% of the exam.

Azure Monitor
Backup and recovery