[Updated] AZ-104: Microsoft Azure Administrator
Introduction
Certification Details
This article provides an in-depth overview of the AZ-104 exam topics, highlighting each module and its respective weight. The certification exam is organized into five main modules:
- Manage Identity and Governance
- Implement and Manage Storage
- Deploy and Manage Azure Compute Resources
- Implement and Maintain Virtual Networking
- Monitor and Maintain Azure Resources
Below is a detailed breakdown of the exam modules and the key concepts covered in each.
Manage Azure Identities and Governance
This module makes up approximately 20–25% of the exam and is divided into three core areas:
Administer Identity:
Focuses on managing Microsoft Entra ID (formerly Azure AD).Administer Governance and Compliance:
Covers key topics such as policies, subscriptions, management groups, and Role-Based Access Control (RBAC).Administer Azure Resources:
Involves working with ARM templates, CLI, and PowerShell for resource deployment and management.
Note
Ensure you familiarize yourself with both the legacy and current names (Microsoft Entra ID vs. Azure AD) to avoid any confusion during the exam.
Implement and Manage Storage
Accounting for 15–20% of the exam, this module focuses on the management of Azure storage solutions:
- Administer Azure Storage:
Emphasizes best practices for managing and configuring Azure storage services.
Deploy and Manage Azure Compute Resources
Constituting about 20–25% of the exam, this module is split into two primary topics:
- Virtual Machines
- PaaS Compute Options:
Discusses app services, container instances, container apps, and similar offerings.
Note
With recent updates, Azure Kubernetes Service is no longer included in the exam syllabus.
Implement and Manage Virtual Networking
This module covers the configuration and management of virtual networking in Azure, including:
- Administering virtual network configurations.
- Establishing inter-site connectivity using Virtual Network Peering and VPN Gateway.
Warning
Note that VPN Gateway is not required for the exam.
- Managing network traffic with load balancers, route tables, and User Defined Routes (UDRs).
Monitor and Maintain Azure Resources
Representing 10–15% of the exam, this section focuses on monitoring and support tasks, including:
- Data Protection:
Encompasses topics such as Site Recovery and backup strategies. - Administrator Monitoring:
Includes the use of Azure Monitor, Log Analytics, and Alerts for resource monitoring.
There have been several service name updates recently. Notably, Azure AD is now known as Microsoft Entra ID; however, the underlying features remain unchanged. For more detailed information and additional learning resources, consider exploring the following links:
This concludes the detailed overview of the AZ-104 exam topics. Best of luck with your certification preparation!
Watch Video
Watch video content