Exam AZ-104: Microsoft Azure Administrator
Proctored role-based exam that may include interactive components.
- Type
- Written
- Duration
- 100 min
Exam sections
Manage Azure identities and governance
Candidates learn to manage Microsoft Entra ID (Azure AD) objects, implement role-based access control (RBAC), and manage subscriptions. It covers critical governance features such as resource locks, Azure policies, and blueprints to ensure organizational compliance and security.
Question notes
May include interactive lab components or case studies as part of the proctored exam experience.
Preparation tips
Focus on the 'Manage identities and governance in Azure' learning path. Practice configuring Microsoft Entra ID users, groups, and RBAC roles in the Azure portal.
Implement and manage storage
Involves provisioning and managing storage accounts, configuring data redundancy, and securing storage access. Candidates should understand how to implement Azure Blob, Azure Files, and Azure Disk storage solutions, while monitoring replication and storage performance.
Question notes
Interactive question types and practical tasks may be included to test hands-on storage management skills.
Preparation tips
Complete the 'Implement and manage storage in Azure' path. Pay close attention to storage security settings, shared access signatures, and redundancy levels.
Deploy and manage Azure compute resources
Includes creating and configuring virtual machines (VMs), VM scale sets, and container solutions like Azure Kubernetes Service (AKS). Covers Azure App Service and Azure Functions management, VM sizing for cost and performance, and ensuring high availability.
Question notes
Questions may involve sizing calculations or configuring container settings in a live-lab or simulated environment.
Preparation tips
Review the 'Deploy and manage Azure compute resources' learning path. Practice deploying VMs and AKS clusters using both the Azure portal and command-line tools.
Implement and manage virtual networking
Encompasses designing and implementing virtual networks (VNets), subnets, and IP addressing. Key topics include DNS configuration, securing networks with NSGs and Azure Firewall, and implementing VPN gateways, ExpressRoute, and VNet peering for connectivity.
Question notes
Practical networking tasks, such as configuring peering or network security rules, may be part of the assessment.
Preparation tips
Thoroughly review the 'Configure and manage virtual networks' path. Practice setting up VNet peering and network security groups to control traffic between subnets.
Monitor and maintain Azure resources
Focuses on tracking resource health using Azure Monitor, Log Analytics, and Azure Advisor. Includes configuring alerts, implementing backup and recovery solutions with Azure Backup and Site Recovery, and maintaining organization-wide resource performance.
Question notes
Assessment may include tasks related to troubleshooting resource issues or interpreting monitoring logs and alert conditions.
Preparation tips
Go through the 'Monitor and back up Azure resources' learning path. Practice creating log queries, setting up metric alerts, and configuring backup policies.
