AZ-104 Microsoft Certified Azure Administrator QA Test 2026

Are you ready to prepare for the Microsoft Certified Azure Administrator Associate Exam ?As a candidate for this exam, you should have subject matter expertise in implementing, managing, and monitoring an organization’s Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.As an Azure administrator, you often serve as part of a larger team dedicated to implementing an organization's cloud infrastructure. You also coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.You should be familiar with:Operating systemsNetworkingServersVirtualizationIn addition, you should have experience with:PowerShellAzure CLIThe Azure portalAzure Resource Manager templates or Bicep filesMicrosoft Entra IDAZ-104 Exam Topics - Manage Azure identities and governance (20–25%)Implement and manage storage (15–20%)Deploy and manage Azure compute resources (20–25%)Implement and manage virtual networking (15–20%)Monitor and maintain Azure resources (10–15%)Manage Azure identities and governance (20–25%)Manage Microsoft Entra users and groupsCreate users and groupsManage user and group propertiesManage licenses in Microsoft Entra IDManage external usersConfigure self-service password reset (SSPR)Manage access to Azure resourcesManage built-in Azure rolesAssign roles at different scopesInterpret access assignmentsManage Azure subscriptions and governanceImplement and manage Azure PolicyConfigure resource locksApply and manage tags on resourcesManage resource groupsManage subscriptionsManage costs by using alerts, budgets, and Azure Advisor recommendationsConfigure management groupsImplement and manage storage (15–20%)Configure access to storageConfigure Azure Storage firewalls and virtual networksCreate and use shared access signature (SAS) tokensConfigure stored access policiesManage access keysConfigure identity-based access for Azure FilesConfigure and manage storage accountsCreate and configure storage accountsConfigure Azure Storage redundancyConfigure object replicationConfigure storage account encryptionManage data by using Azure Storage Explorer and AzCopyConfigure Azure Files and Azure Blob StorageCreate and configure a file share in Azure FilesCreate and configure a container in Azure Blob StorageConfigure storage tiersConfigure soft delete for blobs and containersConfigure snapshots and soft delete for Azure FilesConfigure blob lifecycle managementConfigure blob versioningDeploy and manage Azure compute resources (20–25%)Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep filesInterpret an Azure Resource Manager template or a Bicep fileModify an existing Azure Resource Manager templateModify an existing Bicep fileDeploy resources by using an Azure Resource Manager template or a Bicep fileExport a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep fileCreate and configure virtual machinesCreate a virtual machineConfigure encryption at host for Azure virtual machinesMove a virtual machine to another resource group, subscription, or regionManage virtual machine sizesManage virtual machine disksDeploy virtual machines to availability zones and availability setsDeploy and configure an Azure Virtual Machine Scale SetsProvision and manage containers in the Azure portalCreate and manage an Azure Container RegistryProvision a container by using Azure Container InstancesProvision a container by using Azure Container AppsManage sizing and scaling for containers, including Azure Container Instances and Azure Container AppsCreate and configure Azure App ServiceProvision an App Service planConfigure scaling for an App Service planCreate an App ServiceConfigure certificates and Transport Layer Security (TLS) for an App ServiceMap an existing custom DNS name to an App ServiceConfigure backup for an App ServiceConfigure networking settings for an App ServiceConfigure deployment slots for an App ServiceImplement and manage virtual networking (15–20%)Configure and manage virtual networks in AzureCreate and configure virtual networks and subnetsCreate and configure virtual network peeringConfigure public IP addressesConfigure user-defined routesTroubleshoot network connectivityConfigure secure access to virtual networksCreate and configure network security groups (NSGs) and application security groupsEvaluate effective security rules in NSGsImplement Azure BastionConfigure service endpoints for Azure platform as a service (PaaS)Configure private endpoints for Azure PaaSConfigure name resolution and load balancingConfigure Azure DNSConfigure an internal or public load balancerTroubleshoot load balancingMonitor and maintain Azure resources (10–15%)Monitor resources in AzureInterpret metrics in Azure MonitorConfigure log settings in Azure MonitorQuery and analyze logs in Azure MonitorSet up alert rules, action groups, and alert processing rules in Azure MonitorConfigure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor InsightsUse Azure Network Watcher and Connection monitorImplement backup and recoveryCreate a Recovery Services vaultCreate an Azure Backup vaultCreate and configure a backup policyPerform backup and restore operations by using Azure BackupConfigure Azure Site Recovery for Azure resourcesPerform a failover to a secondary region by using Site RecoveryConfigure and interpret reports and alerts for backups