AZ-104 Practice Test
Microsoft Certified: Azure Administrator Associate
AZ-104 is where free resources stop being enough.
This is an associate-level exam that tests real-world scenarios, not just definitions. Our 500 questions are calibrated to match that difficulty — so the real exam doesn't surprise you.
Start Free Practice — 40 QuestionsNo credit card required. Upgrade to full 500 questions for $19.99 when ready.
Is this for you?
This is NOT for you if:
AZ-104 Exam Details
What to expect on exam day
Questions
40-60 questions
Duration
120 minutes
Passing Score
700/1000
Exam Cost
$165 USD
Exam Domains Covered
Master all topics tested on the AZ-104 exam
Manage Azure identities and governance (20-25%)
Implement and manage storage (15-20%)
Deploy and manage Azure compute resources (20-25%)
Implement and manage virtual networking (15-20%)
Monitor and maintain Azure resources (10-15%)
Test Yourself Right Now
Try 5 real practice questions — no signup needed
5 Free AZ-104 Questions
See how ready you are for the AZ-104 exam. Each question includes a detailed explanation so you learn as you go.
Sample AZ-104 Practice Questions
10 real questions from the free AZ-104bank. Pick an answer in your head, then open “Show answer” for the explanation.
1. Which Azure storage service supports static website hosting?
- A. Azure Table storage
- B. Azure Queue storage
- C. Azure Blob storage
- D. Azure Disk storage
Show answer
Correct answer: C
Azure Blob storage supports static website hosting, allowing you to serve HTML, CSS, JavaScript, and other static files directly from a storage account. A special $web container is created. Table and Queue storage don't support websites. Azure Disk is for VM disks.
2. During Azure platform maintenance, what happens to VMs in an availability set?
- A. VMs are updated one update domain at a time so the set keeps capacity available
- B. The VMs in the set are rebooted simultaneously across the update domains
- C. VMs are evacuated to alternative hosts via live migration with no reboot
- D. VMs in the availability set are not affected by Azure platform maintenance
Show answer
Correct answer: A
Azure walks an availability set one update domain at a time during planned platform maintenance, so only a subset of VMs is unavailable at any moment while the remaining update domains continue serving traffic. Live migration (Memory Preserving Maintenance) is used for some unplanned host maintenance events but is not what update domains in an availability set are for. Availability sets do not reboot all VMs at once and are not exempt from platform maintenance.
3. You want to prevent accidental deletion of production resources while still allowing updates and modifications. Which lock type should you use?
- A. CanNotDelete
- B. ReadOnly
- C. DoNotDelete
- D. No lock is needed
Show answer
Correct answer: A
CanNotDelete locks prevent deletion but allow modifications and updates. This protects against accidental deletion while maintaining operational flexibility. ReadOnly locks prevent both deletion and modifications. DoNotDelete is not a valid lock type. Some protection is better than none for production resources.
4. You need to ensure that all Azure SQL databases in your organization are configured with Transparent Data Encryption (TDE) enabled. What should you use?
- A. An Azure Policy with DeployIfNotExists effect that evaluates SQL databases and automatically enables Transparent Data Encryption when it is not configured.
- B. An Azure Policy initiative (policy set definition) of built-in audit policies for SQL TDE, assigned at the subscription with AuditIfNotExists effect.
- C. An Azure Deployment Stack containing an ARM template that creates SQL databases with TDE enabled, redeployed periodically to enforce configuration.
- D. An Azure Advisor security recommendation acted on manually by database administrators as it surfaces in the Advisor portal each week.
Show answer
Correct answer: A
Azure Policy with the DeployIfNotExists effect can both evaluate existing Azure SQL databases and automatically remediate them by enabling Transparent Data Encryption where it is missing, giving ongoing enforcement. A policy initiative with AuditIfNotExists only reports non-compliance and does not remediate. Deployment Stacks (which now supersede the deprecated Azure Blueprints experience) only enforce configuration for resources deployed through the stack itself, not arbitrary existing SQL databases. Azure Advisor surfaces recommendations but does not enforce or auto-remediate.
5. You accidentally delete a blob. Soft delete is enabled with a 7-day retention period. What happens?
- A. The blob is flagged as soft-deleted and remains recoverable for the next 7 days
- B. The blob is permanently purged from the container as soon as the delete request completes
- C. The blob is automatically moved to the Archive access tier for cost-efficient retention
- D. The blob is restored to its prior version after a one-hour grace period elapses
Show answer
Correct answer: A
Blob soft delete retains deleted blobs (and optionally versions/snapshots) for the configured retention window so you can call Undelete Blob to recover them. After the retention period elapses, Azure permanently removes the data. Soft delete does not push blobs to Archive, does not perform automatic restores, and does not bypass the deletion request.
Show 5 more questions
6. You try to create a virtual machine but receive an error that the Microsoft.Compute resource provider is not registered. What should you do?
- A. Register the Microsoft.Compute resource provider on the subscription (for example, az provider register --namespace Microsoft.Compute)
- B. Open a support request so that Azure enables the Microsoft.Compute resource provider on your behalf
- C. Recreate the subscription so that the default set of resource providers is registered automatically
- D. Wait approximately 24 hours for Azure to register Microsoft.Compute on the subscription automatically
Show answer
Correct answer: A
Resource providers expose resource types in a subscription and some, including Microsoft.Compute when it has never been used, must be registered explicitly before deployments succeed. You self-service this with az provider register --namespace Microsoft.Compute, the equivalent Register-AzResourceProvider PowerShell cmdlet, or the portal's Subscriptions > Resource providers blade. Support involvement, recreating the subscription, and waiting are all unnecessary because registration is a near-instant, user-driven action.
7. What format are ARM templates written in?
- A. JSON, declarative resource definitions following the Azure Resource Manager template schema
- B. YAML, identical to the schema used by Azure DevOps pipeline definitions
- C. XML, similar to the legacy Azure Service Management classic deployment model
- D. PowerShell, evaluated by Azure Resource Manager during deployment execution time
Show answer
Correct answer: A
ARM templates are authored as JSON documents that follow the Azure Resource Manager template schema and declare resources, parameters, variables, and outputs. Bicep is a friendlier domain-specific language that transpiles down to the same ARM JSON before deployment. YAML is used by Azure DevOps Pipelines and Kubernetes manifests, not ARM. The classic ASM model used XML, but ARM (the current control plane) does not. PowerShell is an imperative scripting language that can deploy ARM templates via cmdlets such as New-AzResourceGroupDeployment but is not the template format itself.
8. You forgot the password for a Windows VM. How can you reset it?
- A. Use the Reset password option on the VM blade in the Azure portal, which invokes the VMAccess extension to set a new local administrator password
- B. Delete the VM and recreate it from the same managed disk with a new administrator password specified at deployment time
- C. Local administrator passwords on Azure VMs cannot be reset once the VM has been started for the first time without redeploying the image
- D. Open a support request with Azure so a Microsoft engineer can mount the OS disk on a recovery VM and reset the password manually
Show answer
Correct answer: A
Azure portal provides a "Reset password" feature (using VM Access extension) to reset passwords for Windows and Linux VMs without deleting them. No need to recreate VMs or contact support. This is a built-in self-service feature.
9. What caching option is recommended for OS disks?
- A. No host caching (the disabled cache mode)
- B. ReadOnly caching
- C. Read/Write
- D. Disabled by default for Premium SSD OS disks
Show answer
Correct answer: C
Read/Write caching is the default and recommended setting for OS disks, providing better boot performance and general OS operations. Data disks typically use None or Read-only depending on the workload. There is no Write-only option. Caching uses the local VM host cache.
10. You configure a storage account to allow access only from specific virtual networks. What feature are you using?
- A. Network Security Groups (NSGs) attached to the storage account
- B. Azure Firewall with FQDN rules to the storage account
- C. Storage account firewalls and virtual networks (service endpoints)
- D. Private Link with private endpoints for storage
Show answer
Correct answer: C
The Firewalls and virtual networks blade on a storage account, used together with VNet service endpoints, restricts access to chosen VNets, subnets, and public IP ranges. NSGs do not apply to PaaS storage accounts. Azure Firewall is a separate network appliance and is not the storage-side control. Private Link creates a private endpoint inside your VNet but is a different feature from the VNet/firewall ruleset on the storage account.
Why Practice with MSCertQuiz?
Microsoft Learn teaches concepts. We prepare you for the actual exam.
Scenario-based questions that match AZ-104's real-world testing style
Explanations teach the reasoning behind each answer — critical for case-study questions
Calibrated to associate-level difficulty so you're not under-prepared
Updated for the latest 2026 exam objectives — no outdated material
Not sure if you're ready for the AZ-104 exam?
Take the free AZ-104 Readiness Check →What Our Users Say
“AZ-104 was the hardest Microsoft exam I've taken. The scenario-based questions here were almost identical in style to the real thing. Passed with 760 — would have failed without this prep.”
Naveed K.
AZ-104 Certified
“The NSG, storage, and identity questions were spot-on. I kept scoring 65% in practice until the explanations showed me why I was picking the wrong answers. Eventually hit 85% and passed the real exam.”
Jessica R.
Azure Administrator
“Coming from AWS, I needed to learn Azure fast for a new role. The AZ-104 questions covered real admin scenarios, not just definitions. Passed in 6 weeks of prep.”
Pavel T.
Passed AZ-104 first try
Choose Your Plan
Start free, upgrade when you're ready to get serious
Free
Good for exploring the platform
- 40 practice questions
- Practice mode only
- Progress tracking
- No exam simulation mode
AZ-104 Full Access
Best if your exam is in the next 2-4 weeks
- 500 practice questions
- Practice & Exam modes
- Detailed explanations
- Lifetime access
7-day money-back guarantee
Pro — All Certs
Best if you're planning multiple Microsoft exams
- ALL certifications included
- Unlimited questions
- New certs added free
- Cancel anytime
Save 30% vs buying individually
Your AZ-104Exam Won't Wait
Candidates who complete at least 2 full mock exams pass at significantly higher rates than those who only study passively.
Don't risk $165 USD on the real exam without testing yourself first.
Start Free Practice NowNo credit card required • 40 free questions • Upgrade for $19.99 when ready
Official Microsoft Resources
Our practice questions are aligned with official Microsoft exam objectives. We recommend studying with Microsoft Learn first, then using MSCertQuiz to test your readiness.
View Official AZ-104 Exam DetailsAZ-104 Frequently Asked Questions
Everything you need to know about the AZ-104 Azure Administrator certification
How hard is the AZ-104 exam?
Is AZ-104 worth it in 2026?
What's the difference between AZ-900 and AZ-104?
How long should I study for AZ-104?
How is MSCertQuiz different from free AZ-104 resources?
How much does the AZ-104 exam cost in 2026?
What is the AZ-104 passing score in 2026?
Does the AZ-104 certification expire?
What is the average AZ-104 salary in 2026?
How is AZ-104 different from MS-102?
How is AZ-104 different from MD-102?
How is AZ-104 different from AZ-305?
How many questions are on the AZ-104 exam?
AZ-104 Exam Cost 2026
The AZ-104 exam costs $165 USD in 2026. This is the standard Microsoft Associate-level certification price. Pricing varies by country due to Microsoft's market-based pricing — approximately ₹4,800 INR in India, £113 GBP in the UK, and roughly €165 EUR in most European markets. Always confirm the current price on the official Microsoft Learn scheduling page for your region before booking.
There are no formal prerequisites, though Microsoft strongly recommends 6 months of hands-on Azure administration experience and prior completion of AZ-900 fundamentals. AZ-104 is a role-based Associate certification and expires annually — renewal is free via a shorter online assessment on Microsoft Learn. Microsoft Ignite, Enterprise Skills Initiative (ESI), and Microsoft Learn Cloud Skills Challenges occasionally offer free or discounted exam vouchers.
AZ-104 vs AZ-900: Implementation vs Concepts
The two most-searched Azure certifications, but the gap between them is large. AZ-900 validates conceptual understanding; AZ-104 validates hands-on administration.
| AZ-900 | AZ-104 | |
|---|---|---|
| Level | Fundamentals | Associate |
| Cost | $99 | $165 |
| Duration | 45 min | 120 min |
| Question style | Multiple choice, drag-drop | Scenario-based, case studies, PowerShell/CLI |
| Study time | 2–3 weeks | 8–12 weeks |
| Expires? | No | Annual renewal (free) |
| Best for | Resume signal, foundation | Azure administrators, cloud engineers |
AZ-900 is not a hard prerequisite, but AZ-104 assumes you understand cloud concepts (shared responsibility, regions, governance) that AZ-900 explicitly teaches. Skipping AZ-900 typically adds 2–3 weeks to AZ-104 preparation time.
AZ-104 vs MS-102 vs MD-102: Which Admin Role?
Three Microsoft Associate-level administrator certifications, three different roles. The right one depends on which environment you manage day-to-day.
| AZ-104 | MS-102 | MD-102 | |
|---|---|---|---|
| Role | Azure Administrator | Microsoft 365 Administrator | Endpoint Administrator |
| Focus | Azure cloud infrastructure (VMs, networks, storage, identity) | M365 tenant management, Defender XDR, Purview, Entra for M365 | Intune, Windows Autopilot, device compliance, app protection |
| Best for | Cloud engineers, SREs, infrastructure admins | M365 admins, collaboration platform engineers | Endpoint admins, desktop engineers, mobility specialists |
| Salary range (US) | $85K–$130K | $75K–$115K | $70K–$105K |
| Overlap with AZ-104 | — | Identity (Entra ID) basics only | Minimal |
AZ-104 vs AZ-305: Implementation vs Design
AZ-104 (Associate, $165) tests your ability to implement and manage Azure resources — configuring VMs, networks, storage, RBAC, and monitoring. AZ-305 (Expert, $165) tests your ability to design Azure solutions— choosing services, justifying trade-offs, and designing for scale, security, and cost. AZ-305 questions are scenario-heavy and often have multiple defensible answers; understanding Microsoft's preferred patterns and the Azure Well-Architected Framework matters more than recalling configuration commands. Microsoft strongly recommends passing AZ-104 first — most successful AZ-305 candidates have 1–3 years of AZ-104-equivalent hands-on experience.
AZ-104 Salary and Job Outlook (2026)
AZ-104 is one of the highest-leverage Microsoft certifications for salary growth. Reported US salary ranges in 2026:
- • Junior Azure administrator (0–2 yrs): $70,000–$90,000 USD
- • Azure administrator (2–5 yrs): $95,000–$120,000 USD
- • Senior Azure administrator / cloud engineer (5+ yrs): $120,000–$150,000 USD
- • AZ-104 + AZ-305 (Solutions Architect): $130,000–$170,000 USD
- • AZ-104 + AZ-400 (DevOps Engineer): $125,000–$165,000 USD
Major US metros (San Francisco, New York, Seattle, Boston) pay 20–35% above the national average. Remote-friendly Azure roles have narrowed the metro gap since 2022. Internationally, AZ-104 is recognized as a strong signal of cloud competency — particularly in the UK, Germany, India, and Australia where Azure adoption is high.
AZ-104 Exam Topics 2026: Domain Breakdown
AZ-104 covers five domains. Microsoft refines wording periodically but the weights have remained stable. Always verify the latest objectives on the official Microsoft Learn AZ-104 page.
Manage Azure Identities and Governance
20–25%Microsoft Entra ID users, groups, and devices, administrative units, B2B and B2C basics, RBAC (built-in roles and custom roles), subscriptions, management groups, resource groups, Azure Policy, Resource Locks, Tags.
Implement and Manage Storage
15–20%Storage account types and redundancy (LRS, ZRS, GRS, RA-GRS, GZRS), Blob containers and access tiers (Hot, Cool, Cold, Archive), lifecycle management, Azure Files and File Sync, storage security (SAS, access keys, private endpoints), AzCopy and Storage Explorer.
Deploy and Manage Azure Compute Resources
20–25%VM sizing, deployment, disks, VM extensions, availability sets vs. availability zones, VM Scale Sets, autoscale, Azure App Service, Container Instances, AKS basics, ARM templates and Bicep.
Implement and Manage Virtual Networking
15–20%VNets, subnets, NSGs and Application Security Groups, Azure DNS, VNet peering, VPN Gateway, ExpressRoute basics, Azure Firewall, load balancers (Public/Internal Standard), Application Gateway, network routing and User Defined Routes.
Monitor and Maintain Azure Resources
10–15%Azure Monitor (metrics, logs, alerts, action groups), Log Analytics workspaces and KQL basics, Application Insights, Azure Backup (VMs and Recovery Services Vault), Azure Site Recovery, Network Watcher.
AZ-104 Study Plan: 8-Week Schedule
Most candidates pass AZ-104 with 8–12 weeks of preparation. This 8-week plan assumes you already have AZ-900 knowledge and basic Azure portal familiarity:
- Week 1–2: Identity and Governance — Entra ID, RBAC, subscriptions, Policy. Practice with the Azure free tier portal.
- Week 3: Storage — storage accounts, redundancy options, Blob tiers, Azure Files. Build 2–3 storage accounts hands-on.
- Week 4–5: Compute — VMs, Scale Sets, App Service, containers, ARM/Bicep templates. Deploy at least 5 VM configurations.
- Week 6: Networking — VNets, NSGs, peering, VPN, Load Balancer, Application Gateway. This is the most error-prone domain on the exam.
- Week 7: Monitoring — Azure Monitor, Log Analytics, Backup, Site Recovery. Take 40 free practice questions to find weak areas.
- Week 8: Two full timed mock exams. Review every wrong answer. Target consistent 80%+ before booking. Pay particular attention to case study time management.
Training your whole team on AZ-104? Per-seat pricing covers every certification, with a manager dashboard to see who's exam-ready.
See team pricing →Also Preparing For
Candidates studying AZ-104 often prepare for these certifications next.