More study resources

About this exam

The Microsoft Certified: Azure Administrator Associate credential validates the day-to-day skills needed to implement, manage, and monitor an organization's Azure environment. It is aimed at administrators who already work with Azure-or are moving into that role-and who need to prove they can handle identities, governance, storage, compute, virtual networking, and monitoring in the portal, with the Azure CLI, and with Azure PowerShell. The associated exam is organized around five weighted domains: manage Azure identities and governance; implement and manage storage; deploy and manage Azure compute resources; implement and manage virtual networking; and monitor and maintain Azure resources. Questions are scenario-based and often ask you to choose the least-privilege or most cost-effective option, so memorizing menu paths is not enough. Prepare by building a personal subscription or sandbox: create users and groups, assign roles with Azure RBAC, configure storage accounts and access tiers, deploy VMs and scale sets, design VNets with peering and NSGs, and set up Azure Monitor alerts and Log Analytics. Supplement hands-on work with Microsoft Learn modules and the official skills outline, and practice explaining why one design beats another. Microsoft publishes current exam logistics, including question count, duration, fee, and passing score, on its official certification page.

What you'll study

Common questions

About MSAP preparation

What is the format of the AZ-104 exam?

Expect a mix of multiple-choice and multiple-response items, plus interactive formats such as drag-and-drop, hot area, and case studies. Some deliveries may include lab or simulation sections. The official Microsoft certification page lists the formats currently in use, so check it before scheduling.

How difficult is the exam, and how long should I study?

Candidates with hands-on Azure administration experience typically find it challenging but fair, because many items test judgment rather than recall. If you are new to Azure, plan several weeks of consistent lab work. Focus on the five domain weights and practice justifying least-privilege and cost-effective choices.

How many questions are there and how much time do I get?

Microsoft does not publish a fixed count or time limit in the skills outline; both can vary by delivery and whether a lab or case-study section is included. The official exam page and your appointment confirmation state the current details, so rely on those rather than third-party estimates.

What does the exam cost, and what is the passing score?

Fees vary by country and currency, and the passing score is set by Microsoft and not disclosed as a fixed percentage. Check the official certification page for the current price in your region and for any retake or voucher policies before you book.

If I fail, can I retake the exam?

Yes, retakes are possible, but Microsoft applies waiting periods and fees that depend on the exam and region. Review your score report by domain, reinforce the weakest areas with labs, and confirm the current retake rules on the official site before scheduling again.

In what order should I study the domains?

Start with identities and governance, because RBAC and subscriptions underpin everything else. Then move to storage, compute, and networking, which build on identity concepts. Finish with monitoring, since Azure Monitor and Log Analytics draw on resources you deployed earlier. Keep a sandbox subscription active throughout.

What are common failure modes?

Candidates often memorize portal steps without understanding role assignments, NSG precedence, or storage redundancy trade-offs. Others neglect PowerShell and CLI syntax, or skip case studies that require reading requirements carefully. Practice choosing the least-privilege and lowest-cost valid option, and always read the full scenario before answering.

Do I need to know PowerShell and the Azure CLI?

Yes. The exam expects familiarity with Azure PowerShell and the Azure CLI for tasks such as creating resources, assigning roles, and querying logs. You do not need to be a scripting expert, but you should recognize correct cmdlet and command syntax and understand when to use each tool.

How long is the certification valid?

Microsoft associate certifications are generally valid for one year and can be renewed online through a free assessment on Microsoft Learn. Confirm the current validity and renewal window on your certification dashboard, since policies can change.