examOS.
Exam CatalogueStudy PlansRoadmapsBlogs
Login

ExamOS

Credits PolicyReferral PolicyQuality StandardsPricingPrivacy PolicyTerms of UseContact UsReport a Bug

Follow us

Disclaimer: ExamOS is an independent platform, not affiliated with any certification provider, and does not use or distribute exam dumps.

Share your feedback

Checking sign-in status...

examOS.Study Plan
Disclaimer: ExamOS is an independent platform, not affiliated with any certification provider, and does not use or distribute exam dumps.
← Back to Study Plans

Study Plan

Microsoft Azure Administrator (AZ-104) – Study Plan

A condensed 8-week plan for AZ-104. Master Azure identities, governance, storage, compute, networking, and monitoring with hands-on labs and scenario-based practice.

MicrosoftAZ-104Passing score: 700 / 1000Azure administrators with 6+ months hands-on experience, familiar with PowerShell, Azure CLI, and ARM/Bicep templates18-Jul-202648 views
Start date: _______________Target exam date: _______________
8 WeeksDuration
~50 hrsTotal Study Time
5 DomainsExam Coverage

Stay consistent by setting a target date for this certification.

Set target

How to use this plan

  1. 1Read and explore. Start the week with Microsoft Learn modules and hands-on labs in the Azure portal. The exam tests practical skills, so lab time is not optional.
  2. 2Build your judgment. For every Azure service you work with, understand not just how to configure it but when to use it and when something else is a better fit.
  3. 3Practice with ExamOS. Use the quiz modes in the order specified in this Study Plan.
  4. 4Practice all three interfaces. The exam tests Azure portal, Azure CLI, and PowerShell equally. Make sure you are comfortable with all three.
Rookie ModeChallenger ModeLegend Mode

Week-by-Week Breakdown


W1

Week 1

Foundation and Self-Assessment

This week is about mapping your current knowledge against the exam domains, getting comfortable with the Azure resource hierarchy, and identifying where you need to focus. You are not expected to master anything yet. You are building a baseline.

Topics

  • Azure resource hierarchy overview
  • Entra ID basics: tenants, users, groups
  • ARM templates and Bicep fundamentals
  • PowerShell and Azure CLI fluency
  • Exam structure and study guide walkthrough

Activities

  • Read the official AZ-104 study guide and identify weak domains.
W2

Week 2

Virtual Networking (15-20%)

This is consistently the domain that causes the most failures. The AZ-104 expects you to be comfortable with networking, and the questions go deeper than most candidates expect. If you cannot explain the difference between a network security group and an application security group without looking it up, spend extra time here.

Topics

  • VNet design and peering
  • NSGs, ASGs, and Azure Bastion
  • Service endpoints vs private endpoints
  • Azure DNS (public and private zones)
  • Load balancing and troubleshooting

Activities

  • Build a hub-and-spoke VNet topology with VNet peering in the Azure portal.
W3

Week 3

Azure Compute Resources (20-25%)

You already know what VMs are. This week is about choosing between compute models, automating deployments, and understanding the nuances that the exam tests: availability sets vs zones, deployment slots, autoscaling policies, and ARM/Bicep templates.

Topics

  • ARM and Bicep deployments
  • VMs, availability sets, and zones
  • VM Scale Sets and autoscaling
  • Containers: ACR, ACI, Container Apps
  • App Service: plans, slots, TLS, networking

Activities

  • Deploy a VM using an ARM template, then modify and redeploy it using Bicep.
W4

Week 4

Networking and Compute Integration

The hardest questions on AZ-104 combine networking and compute. You might need to diagnose why an App Service cannot reach a database in a VNet, or configure NSGs for a VM Scale Set behind a load balancer. This week ties the two domains together the way the exam does.

Topics

  • VMs in VNets: NICs and routing
  • App Service VNet integration
  • Application Gateway (Layer 7, WAF)
  • Cross-scenario troubleshooting patterns
  • Network Watcher diagnostic tools

Activities

  • Deploy a VM Scale Set behind an Application Gateway with URL-based routing.
W5

Week 5

Identity and Governance (20-25%)

Since you already know how to create users and assign roles from your day-to-day work, this week focuses on the architecture and governance layer: policy inheritance, management group design, cost management, and the distinction between RBAC and Azure Policy that the exam tests relentlessly.

Topics

  • Entra ID: users, groups, licenses, SSPR
  • RBAC roles and scope assignments
  • Azure Policy: definitions, initiatives, compliance
  • Management groups and policy inheritance
  • Resource locks, tags, and cost management

Activities

  • Create a user and group in Entra ID. Assign an Azure RBAC role at the resource group scope and verify access.
W6

Week 6

Storage (15-20%)

Storage seems straightforward until the exam asks you to choose between six redundancy options, decide when to use SAS tokens vs access keys vs identity-based access, or figure out why a lifecycle policy is not moving blobs to Archive. This week gets the details right.

Topics

  • Storage accounts and redundancy options
  • Access control: SAS tokens, keys, identity
  • Blob tiers and lifecycle management
  • Azure Files: SMB, NFS, identity auth
  • AzCopy, Storage Explorer, object replication

Activities

  • Create a storage account with a lifecycle policy moving blobs from Hot to Cool to Archive based on age.
W7

Week 7

Monitoring and Maintenance (10-15%)

This is the smallest domain by weight, but it shows up as a thread through questions in every other domain. Knowing how to set up alerts, interpret diagnostic data, configure backup, and perform restores is part of being an administrator, and the exam treats it that way.

Topics

  • Azure Monitor: metrics, logs, diagnostics
  • Alerts and action groups
  • VM Insights and container insights
  • Backup vaults, policies, and restores
  • Azure Site Recovery: replication and failover

Activities

  • Configure diagnostic settings for a VM to send logs to a Log Analytics workspace.
W8

Week 8

Exam Simulation and Booking

Your final push. This week is full exam simulation mode: filling in remaining gaps and building the confidence to walk into the testing center ready.

Topics

  • Full syllabus review across all five domains
  • Time management (100 minutes for 40-60 questions)
  • Case study and lab task technique
  • Drag-and-drop sequencing (no partial credit)

Activities

  • Take the free official practice assessment again and compare to your Week 1 score.
  • Take at least 3 ExamOS Legend mode full quizzes (80% hard questions, 100-minute timer).

Daily Study Routine

Suggested 2–3 Hour Day

TimeActivity
15 minLook over yesterday's wrong answers. For each one, identify the principle you missed.
30 minRead Microsoft Learn modules for this week's topic
30 minHands-on lab (Azure portal, CLI, or PowerShell)
30 minTake an ExamOS quiz (Challenger or Legend mode, depending on the week)
15 minLog missed concepts and review them the next morning

Stay consistent by setting a target date for this certification.

Set target
  • Create or verify an Azure subscription (free tier or pay-as-you-go).
  • Complete the Azure Fundamentals prerequisite paths if needed (cloud concepts, architecture and services, management and governance).
  • Take the free official practice assessment to gauge your baseline.
  • Take the ExamOS Rookie mode quiz (30 questions). Note any domain below 60%.
  • Goal:A clear picture of where you stand and a working familiarity with Azure's resource hierarchy.
    Rookie Mode
    Rookie Mode
  • Configure an NSG with prioritized rules and test connectivity using IP flow verify in Network Watcher.
  • Deploy a Standard Load Balancer with a health probe and backend pool.
  • Create a private endpoint for a storage account and verify DNS resolution.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Architect and troubleshoot secure, scalable network solutions with confidence.
    Challenger Mode
    Challenger Mode
  • Configure a VM Scale Set with autoscaling based on CPU utilization.
  • Deploy an App Service with a staging slot and perform a swap to production.
  • Push a container image to ACR and deploy it to ACI.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Confidently select and deploy the right compute solution for any described workload.
    Challenger Mode
    Challenger Mode
  • Configure a VM with multiple NICs and route traffic through Azure Firewall.
  • Deploy an App Service with VNet integration and test connectivity to a private-endpoint-protected storage account.
  • Intentionally break a network path and use Network Watcher (connection troubleshoot, IP flow verify, next hop) to diagnose it.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Diagnose and resolve the networking issues that break compute workloads. This is the most common real-world problem and the most heavily tested scenario.
    Challenger Mode
    Challenger Mode
  • Design a management group hierarchy and assign an Azure Policy initiative at the management group level.
  • Create a resource lock on a resource group and test its effect.
  • Configure a budget with cost alerts in Azure Cost Management.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Design identity and governance architectures with policy inheritance and least-privilege access.
    Challenger Mode
    Challenger Mode
  • Generate a SAS token with specific permissions and test it against the storage account.
  • Configure a storage account firewall with a virtual network rule and test that access is blocked from outside the VNet.
  • Create an Azure Files share with identity-based authentication.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Configure storage for cost optimization, security, and hybrid scenarios with confidence.
    Challenger Mode
    Challenger Mode
  • Write a basic KQL query to filter and summarize log data from Log Analytics.
  • Create an Azure Monitor alert with an action group that sends email notifications.
  • Configure Azure Backup for a VM using a Recovery Services vault and perform a test restore.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Monitor, alert, back up, and maintain Azure resources at scale.
    Challenger Mode
    Challenger Mode
  • Simulate real exam conditions at least once: no phone, no breaks, 100 minutes, same time of day you plan to actually sit the exam.
  • For every Legend question you miss, review the explanation and write one sentence explaining the principle behind the correct answer.
  • Once you are consistently hitting 80% or above on Legend mode across two or more sessions, book your exam. You are ready.
  • Goal:Consistent above 80% on Legend mode across two or more sessions. Confidence to schedule the exam.
    Legend Mode
    Legend Mode

    Overview

    The AZ-104 validates your ability to implement, manage, and monitor an organization's Azure environment. Success here requires more than knowing which buttons to click in the portal. You need to understand how services interact, how to troubleshoot when things break, and how to choose the right approach when multiple options exist.

    This exam tests hands-on administrative skill across five domains. Questions will put you in realistic scenarios: diagnosing a broken network connection, choosing the right storage redundancy option, configuring access for a hybrid workforce. That is what Azure administrators deal with every day, and that is what this plan prepares you for.

    The April 2026 update made minor adjustments to sub-tasks within storage (Azure Files and Blob), compute (VMs and Containers), and virtual networking. No domains were added or removed.

    Domain Weight
    Manage Azure identities and governance 20-25%
    Implement and manage storage 15-20%
    Deploy and manage Azure compute resources 20-25%
    Implement and manage virtual networking 15-20%
    Monitor and maintain Azure resources 10-15%

    Networking and compute together represent 35-45% of the exam. They are also the domains where candidates lose the most marks. This plan front-loads them.

    Recommended experience: 6+ months of hands-on Azure administration. Familiarity with operating systems, networking, servers, virtualization, PowerShell, Azure CLI, the Azure portal, ARM templates/Bicep, and Microsoft Entra ID.

    Registration tip: Register with a personal Microsoft account (MSA). If you register with a work or school (Entra ID) account and later leave that organization, your exam records may be lost and unrecoverable.

    Frequently Asked Questions

    Do I need AZ-900 before AZ-104?

    There are no formal prerequisites. However, candidates should have a minimum of six months of hands-on Azure administration experience. If you have never touched the Azure portal, starting with AZ-900 first is a worthwhile investment.

    How many practice questions should I aim for?

    Aim for at least 800 unique questions across all domains, ensuring you prioritize quality over quantity. ExamOS provides over 3,000 high quality practice questions covering all domains and designed to explain the rationale behind both correct and incorrect answers.

    When should I book the exam?

    Once you are consistently hitting 80% or above on Legend mode across two or more sessions, and you feel comfortable explaining Azure administration decisions, you are ready. Trust your preparation.

    How long is the exam?

    You get 100 minutes of actual exam time. The total seat time is 120 minutes, which includes time for the NDA review, instructions, and post-exam comments. If the exam includes interactive lab tasks on the day you sit it, review the overview pages at the start to confirm the exact duration.

    I am a non-native English speaker. Can I get extra time?

    Yes, under certain conditions. Microsoft offers an additional 30 minutes if the exam is not available in your native language. The AZ-104 is currently offered in English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Chinese (Traditional), and Italian. If your native language is not among these, you can request the accommodation:

    1. Visit the English as a Second Language request form on the Microsoft Learn credentials page.
    2. Submit your request before scheduling your exam.
    3. Once approved, the extra time will be applied when you schedule and take the exam.

    If the exam is available in your native language, you can still take it in English, but the additional 30 minutes will not be granted. Request this accommodation before you schedule. It cannot be added after the exam is booked.

    Can I use Microsoft Learn during the exam?

    Yes. All associate and expert role-based exams, including AZ-104, give you access to Microsoft Learn during the exam.

    A "Learn" button at the bottom of the exam screen (Pearson VUE) opens Microsoft Learn in a split-screen view. You can search for documentation using the search bar at the top right. This is not available on Fundamentals or GitHub exams.

    A few things to know:

    • You can only access Microsoft Learn. No other websites, no browser tabs, no search engines.
    • CTRL+F does not work reliably in the embedded view. Use the search bar.
    • Use it to confirm specific details like service limits, SKUs, or feature availability. Do not rely on it as a substitute for preparation. Candidates who know the material well use it to verify edge cases. Candidates who rely on it consistently run out of time.

    What are the interactive lab tasks?

    The exam includes interactive components where you complete tasks in a simulated Azure environment. These test hands-on skills, not just knowledge recall. Use the exam sandbox on Microsoft Learn to practice the interface before test day.

    What changed in the April 2026 update?

    Minor adjustments to specific sub-tasks within storage (Azure Files and Blob), compute (VMs and Containers), and virtual networking. No domains were added or removed. Always review the official skills measured page on Microsoft Learn before your exam date.

    What is the most important domain to study?

    Networking and compute together account for 35-45% of the exam and are where most candidates lose marks. But every domain carries enough weight that skipping one is risky. The biggest trap is over-studying the domain you already know from daily work and under-studying the ones you rarely touch.

    What are the most common ways people fail?

    • Ignoring networking. Many candidates spend weeks on compute and identity, then get blindsided by networking questions. VNet peering, service endpoints vs private endpoints, and load balancer configuration come up constantly.
    • Studying theory without hands-on practice. The exam tests practical skills. If you have not actually created a VNet, configured an NSG, or set up a storage account with lifecycle policies, you will struggle.
    • Confusing RBAC with Azure Policy. RBAC controls who can do what (authorization). Azure Policy controls what configurations are allowed to exist (governance). This distinction is tested constantly.
    • Missing the networking gotchas. VNet peering is not transitive. NSG priority is lower number = higher priority. First matching rule wins. These show up in questions repeatedly.
    • Forgetting storage tier behavior. Archive tier blobs require hours to rehydrate, not minutes. ZRS protects a zone, not a region. For regional outage protection, you need GRS or GZRS.

    What are the three biggest preparation mistakes?

    1. Studying without touching the portal. The AZ-104 is a practical exam. Reading documentation is not enough. You need to actually deploy, configure, and troubleshoot in Azure.
    2. Neglecting networking. It is the hardest domain and the one most likely to cause a failed attempt. Give it the time it deserves, even if it is not part of your daily work.
    3. Rushing through the plan without repeating Challenger quizzes. The repetition is the point. Passing a Challenger quiz once means you got lucky. Passing it twice in a row means you actually know the material.

    Is there a renewal option?

    Yes. AZ-104 is valid for 1 year. You can renew it for free by passing an online assessment on Microsoft Learn. The renewal assessment is shorter and focuses on what has changed since you originally certified. Start the renewal process before your certification expires to avoid having to retake the full exam.


    Quick-Reference: What Is on the Exam (April 17, 2026)

    This is a condensed summary. For the full, always-current list, visit the official AZ-104 study guide.

    Domain Key Skills
    Manage Azure identities and governance (20–25%) Entra ID users/groups, licenses, external users, SSPR, built-in roles, role assignments, Azure Policy, resource locks, tags, cost management, management groups
    Implement and manage storage (15–20%) Storage firewalls/VNets, SAS tokens, stored access policies, access keys, identity-based Azure Files access, redundancy, object replication, encryption, AzCopy/Storage Explorer, Azure Files shares, Blob containers, tiers, soft delete, snapshots, lifecycle management, versioning
    Deploy and manage Azure compute resources (20–25%) ARM/Bicep deployment and conversion, VMs (create, encrypt, move, size, disks, availability sets/zones, scale sets), ACR, ACI, Container Apps, App Service (plans, scaling, TLS, custom DNS, backup, networking, deployment slots)
    Implement and manage virtual networking (15–20%) VNets, subnets, peering, public IPs, UDRs, connectivity troubleshooting, NSGs, ASGs, effective rules, Azure Bastion, service endpoints, private endpoints, Azure DNS, internal/public load balancers, load-balancing troubleshooting
    Monitor and maintain Azure resources (10–15%) Azure Monitor metrics/logs, alerts, action groups, Insights, Network Watcher, Connection Monitor, Recovery Services vault, Azure Backup vault, backup policies, backup/restore, Site Recovery, failover, backup reports/alerts