Microsoft Azure Administrator Associate AZ-104 — Study Guide
Practice as you learn. Every concept maps to real exam questions with verified answers in the Microsoft exam hub, or drill the full exam with timed practice on ExamRoll.io.
This guide covers each AZ-104 domain in depth. Pick a domain to go deep, or work through them in order.
The domains
- Azure Active Directory and Identity Management — Groups provide scalable authorization and licensing. Assigned membership is explicitly managed. Dynamic membership (Azure AD Premium P1) evaluates
- Azure Subscriptions, Governance and Cost Management — Subscriptions are billing and deployment isolation boundaries. Common types include Pay-As-You-Go, Enterprise Agreement (EA), Microsoft Customer
- Azure Virtual Machines and Compute — Upgrade and resize operations are constrained by hardware availability in the target cluster; resizing a VM in an availability set can fail with
- Azure Virtual Networking — Default system routes allow intra-VNet traffic and send 0.0.0.0/0 to the internet (subject to public IP presence). User-defined routes (UDR) override
- Azure Load Balancing and Traffic Management — Core components define how traffic flows: - Frontend IP: The VIP exposed to clients. External LBs use a Public IP or Public IP Prefix; internal LBs
- Azure Storage — Redundancy choices balance durability, availability, and cost: - LRS stores three synchronous copies in a single datacenter, suitable for intra-zone
- Azure App Service and PaaS Compute — Scaling divides into scale-up (change pricing tier/VM size) and scale-out (change instance count). Autoscale requires Standard and above and is
- Azure Databases and Data Services — Elastic pools share compute among multiple databases to absorb bursty, out-of-phase workloads at lower aggregate cost. Pools are available in DTU
- Azure Monitor, Backup and Site Recovery — Diagnostic settings are the bridge from resources to telemetry sinks. On each Azure resource, configure diagnostic settings to choose categories
- Azure Security and Compliance — Second, workload protections deliver threat detection and hardened configurations. Enable plans per subscription or management group: - Servers:
Ready to practice?
- Browse every question with verified answers → — free, with explanations.
- Start timed practice tests on ExamRoll.io → — the full question bank, in 20+ languages.
Pass the whole exam — not just this question
You found this answer. Get every verified question and explanation in one place, and save hours of prep. Free to start.
Pass your exam →