Full exam simulation
50 questions · 100 minutes, 0 unscored and not identified. One question per screen, flag and strike-out, a review screen and a score report per domain — no answers until you finish.
MicrosoftAZ-104AssociateAdministrationAvailable
Microsoft Azure Administrator
Implement, manage and monitor identity, governance, storage, compute and networking in Azure.
Independent practice — not affiliated with or endorsed by Microsoft. AZ-104 is used only to identify the exam. Trademark notices
Domain weights
Share of scored content per domain. Every sitting draws questions by these weights.
- D1Manage Azure identities and governance24 %19 concepts
- D2Implement and manage storage19 %16 concepts
- D3Deploy and manage Azure compute resources24 %21 concepts
- D4Implement and manage virtual networking19 %17 concepts
- D5Monitor and maintain Azure resources14 %14 concepts
Your progress
No attempts yet. Take a full sitting to get a readiness rating; results are kept in this browser. Join your class to keep them on every device.
Choose a mode
ESL +30
The full sitting with 30 extra minutes (130 min) — the accommodation non-native English speakers can request for exams in English.
Quick 20
20 questions · 40 min, same weights, all scored. A daily check.
Weak spots
20 questions aimed at your weakest domains, missed concepts and due reviews.
Practice builder
Pick domains, topics, how many questions and which pool (new, wrong, due, low confidence). Spaced repetition with confidence ratings, flashcards and a mistake book.
Open practiceDomain drill
One domain, up to 20 questions.
What's on the exam
Domain 1: Manage Azure identities and governance
24 %Entra users and groups, licenses, external users and SSPR; built-in and custom Azure roles, scopes and access assignments; Azure Policy, locks, tags, resource groups, subscriptions, costs, Advisor and management groups. Official range 20–25 %.
Practice domain 1 →Domain 2: Implement and manage storage
19 %Storage firewalls, SAS, stored access policies, access keys and identity-based Azure Files access; account types, redundancy, object replication, encryption, AzCopy and Storage Explorer; file shares, blob tiers, soft delete, snapshots, lifecycle and versioning. Official range 15–20 %.
Practice domain 2 →Domain 3: Deploy and manage Azure compute resources
24 %ARM templates and Bicep (read, modify, deploy, export, decompile); VMs, encryption at host, moves, sizes, disks, zones, availability sets and scale sets; Container Registry, Container Instances and Container Apps; App Service plans, TLS, domains, backup, networking and slots. Official range 20–25 %.
Practice domain 3 →Domain 4: Implement and manage virtual networking
19 %VNets, subnets, peering, public IPs, user-defined routes and connectivity troubleshooting; NSGs, application security groups, effective rules, Bastion, service and private endpoints; Azure DNS and public or internal load balancers. Official range 15–20 %.
Practice domain 4 →Domain 5: Monitor and maintain Azure resources
14 %Azure Monitor metrics, logs, KQL, alerts, action groups, alert processing rules, Insights, Network Watcher and Connection monitor; Recovery Services and Backup vaults, backup policies, restores, Site Recovery failover and backup reports and alerts. Official range 10–15 %.
Practice domain 5 →
Domain names and weights come from the official AZ-104 exam objectives (checked 2026-10-27). Always check it for the authoritative scope.
Includes 24 performance-style items (put in order, match, read an exhibit) — practice them with the “Order / match” filter.
The real exam's full hot-area and case-study and lab simulations (labs in a live interface) are not reproduced.
Sources · checked 2026-10-27
- Microsoft Learn — AZ-104 study guide (skills measured as of April 17, 2026; 20–25 / 15–20 / 20–25 / 15–20 / 10–15 %; pass 700) ↗
- Microsoft Learn — Azure Administrator Associate certification (100 minutes; interactive components possible) ↗
- Microsoft Learn — exam duration and experience (Fundamentals 45 min; associate 100–120 min; most exams 40–60 questions) ↗
Sample questions
Two of this exam's original questions, with the explanation you get after every answer.
Sample 1Select one
An administrator must create 300 new Microsoft Entra user accounts for an incoming class of students using the Microsoft Entra admin center, without writing a script. What is the most efficient method?
- AUse Bulk operations > Bulk create and upload the completed CSV template
- BInvite the students one by one as B2B guest users
- CCreate one account and copy it 299 times with Azure Resource Mover
- DCreate a dynamic group, which creates the accounts automatically
Show answer & explanation
Correct: A. The Users blade has Bulk operations: download the CSV template, fill in one row per user and upload it with Bulk create. The same blade offers bulk invite, bulk delete and download of the user list.
Sample 2Select 2
Which statements about Microsoft Entra group membership types are correct? (Select TWO.)
- AA security group can use dynamic device membership
- BA Microsoft 365 group can use dynamic device membership
- CMembers of a dynamic group can also be added manually
- DDynamic membership rules require a Microsoft Entra ID P1 or P2 license
- EAssigned groups update their members automatically when user attributes change
Show answer & explanation
Correct: A, D. Membership can be Assigned, Dynamic user or Dynamic device. Dynamic device membership is only possible for security groups, and dynamic rules need Microsoft Entra ID P1 (or P2) for the users in scope.