AZ-104 · Associate

Microsoft Certified: Azure Administrator Associate

Practise the decisions behind running Azure: identity, infrastructure, networking and recovery.

Start Free

Your free account includes a full AZ-104 practice exam.

ExamNova practice

Your first session

Questions: 50
Time limit: 100 min
Coverage: 5 domains

Practise, review your answers and see where to focus next.

Preview a question

Is AZ-104 your next step?

For administrators who implement, manage and monitor Azure environments. Familiarity with operating systems, networking and virtualisation helps connect exam scenarios to day-to-day infrastructure work.

Control access at the right scope

Work through Microsoft Entra users and groups, Azure RBAC, subscriptions and governance.

Connect and run resources

Compare storage access, compute deployment, virtual networking and name-resolution options.

Keep services recoverable

Interpret monitoring needs, backup policies and recovery objectives before choosing a configuration.

Official certification guide ↗

What you’ll study

Explore the domains and topics in your ExamNova study path.

Manage Azure Identities and Governance24.32% practice balance

Explore Manage Azure Identities and Governance

Manage Microsoft Entra Users and Groups

User and Group Management Strategies

Manage Access to Azure Resources

Role-Based Access Control (RBAC) Fundamentals
Deny Assignments and Access Control
Role Inheritance and Identity Types
Governance with Azure Policies

Manage Azure Subscriptions and Governance

Azure Subscription Management
Azure Policy and Compliance
Governance with Azure Policy Initiatives
Resource Management and Cost Optimization

Implement and Manage Storage18.92% practice balance

Explore Implement and Manage Storage

Configure Access to Storage

Container Access Levels and SAS
User Delegation SAS and Key Management
Microsoft Entra ID Authentication for Storage
Storage Firewall and Defender
Data Encryption and Azure Files
Private Endpoints and Access Policies

Configure and Manage Storage Accounts

Replication and Durability Options
SAS, Access Keys, and Identity Access
Network Security and Private Endpoints
Lifecycle, Object Replication, and Management Tools

Configure Azure Files and Azure Blob Storage

Blob Storage and Versioning
Blob Lifecycle Management and CDN Integration
Azure Files Overview and Capabilities
Storage Accounts and Data Management
Accessing and Managing Azure Storage

Deploy and Manage Azure Compute Resources24.33% practice balance

Explore Deploy and Manage Azure Compute Resources

Automate Deployment of Resources by Using Azure Resource Manager (ARM) Templates or Bicep Files

ARM Templates and Parameters
Bicep Syntax and Deployment Scopes
Deployment Validation and Idempotency
App Service, Containers, and Functions

Create and Configure Virtual Machines

Azure VMs, NICs, and IP Configuration
Managed Disks
Virtual Machine Scale Sets

Provision and Manage Containers in the Azure Portal

Azure Container Instances Overview
Azure Container Registry and Image Automation
Azure Container Apps and Serverless Containers

Create and Configure Azure App Service

Azure App Service Overview
App Service Plans
App Settings and Custom Domains
Deployment Slots for Azure App Service

Implement and Manage Virtual Networking18.92% practice balance

Explore Implement and Manage Virtual Networking

Configure and Manage Virtual Networks in Azure

Virtual Network and Load Balancer Features
Application Gateway and Security Groups
Private IP Addressing and DHCP Options
Private Endpoints and Routing

Configure Secure Access to Virtual Networks

Network Security Groups and Application Security
Secure Remote Access Solutions
Private Connectivity Options
Network Monitoring and Troubleshooting

Configure Name Resolution and Load Balancing

DNS Record Management and Integration
Load Balancer and Application Gateway Overview
Private DNS Zones and Resolution

Monitor and Maintain Azure Resources13.51% practice balance

Explore Monitor and Maintain Azure Resources

Monitor Resources in Azure

Azure Activity Log and Alerts
Metrics, Dashboards, and Workbooks
Log Analytics Workspace Design and Retention
KQL Queries and Monitoring Investigations
Diagnostic Settings and Data Collection Rules
Azure Backup and Site Recovery Monitoring

Implement Backup and Recovery

Azure Backup and Recovery Services
Cross-Region Restore Strategies
Backup Security and Retention
Soft Delete and Monitoring
Service Health and Recovery Integration
Recovery Objectives and Policies

Percentages show ExamNova’s practice balance. Consult the official guide for the vendor’s current exam outline.

Try focused practice

Explore a topic with sample questions and explanations.

Deploy and Manage Azure Compute Resources Manage Azure Identities and Governance Implement and Manage Storage Implement and Manage Virtual Networking Monitor and Maintain Azure Resources

Try a question before you start.

Read the scenario. Consider your answer, then reveal the reasoning.

Pair question review with familiarity in the Azure portal, Azure CLI or PowerShell. Configuration details matter for this administrator exam.

In disaster recovery planning, what is the difference between RPO and RTO?

They are the same metric and both describe how quickly it takes to bring systems online.
RPO measures maximum acceptable data loss; RTO measures maximum acceptable time to restore service.
Both terms are deprecated and replaced by VM availability-zone configuration.
RPO is a hardware sizing measure, while RTO is a software licensing measure.

Show answer and explanations

They are the same metric and both describe how quickly it takes to bring systems online. — Different metrics.

RPO measures maximum acceptable data loss; RTO measures maximum acceptable time to restore service. — Correct. RPO answers 'how much data can we lose?' RTO answers 'how long can we be down?' Both drive backup/DR design choices.

Both terms are deprecated and replaced by VM availability-zone configuration. — They are foundational DR concepts.

RPO is a hardware sizing measure, while RTO is a software licensing measure. — Both are time-based business metrics.

A clearer way to prepare.

One place to practise, understand your results and plan the next session.

Practise with purpose

Start with your free exam. Explore Exam, Endless and Custom practice modes as you build your study routine.

Understand the answer

Review the reasoning behind your answers and return to the decisions that need another look.

Find your next focus

Use domain-level performance and readiness to see strengths, gaps and areas you have yet to assess.

Put it into practice.

Explore hands-on tasks connected to AZ-104. These are real Labs from the catalogue.

Lab

Give finance a seven-day recovery window

Edit blob-service-properties.json so the account can restore block blob data to any point in the previous seven days. Do not weaken blob soft delete from where it starts, and leave container soft delete covering at least the restore window.

hard · About 15 min

Lab

Repair private DNS across the two VNets

Repair repair-private-dns.ps1 so application VMs register their records in corp.internal and shared-services VMs can resolve those records without registering their own. Use app-spoke-link for app-spoke and shared-services-link for shared-services. Keep the existing zone in rg-dns-prod and both VNet lookups in rg-network-prod, add no other links, and do not create, remove or replace the zone or either VNet.

medium · About 15 min

Make AZ-104 your next step.

Create your free account. Start practising.

Start Free