Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
PracticeVideosBlogFlashcardsEspañol
All Practice Exams

200+ Free Azure AZ-104 Practice Questions

Pass your Microsoft Azure Administrator Associate (AZ-104) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published by Microsoft Pass Rate
200+ Questions
100% Free
1 / 200
Question 1
Score: 0/0

What are the three access tiers available for Azure Blob Storage?

A
B
C
D
to track
Same family resources

Explore More Microsoft Azure Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

Azure AZ-900

Practice QuestionsStudy GuideCheat SheetFlashcards3 videos5 blogs

Azure AI-900

Practice QuestionsStudy GuideCheat SheetFlashcards2 videos4 blogs

Azure DP-700

Practice QuestionsStudy GuideCheat SheetFlashcards1 video4 blogs

Azure DP-600

Practice QuestionsStudy GuideCheat SheetFlashcards1 blog

Azure DP-900

Practice QuestionsStudy GuideCheat SheetFlashcards1 blog

Azure AI-102

Practice QuestionsStudy Guide1 blog

More From This Family

Videos and articles for deeper review.

VideoAZ-104 Study Plan 2026: Pass Azure Administrator ExamThis examVideoAzure vs AWS Certification 2026: Which Cloud Cert Should You Get First?This examVideoFREE MD-102 Exam Guide 2026: Pass Microsoft Endpoint Administrator (Intune, Autopilot, Windows 11)This examVideoFREE MS-102 Exam Guide 2026: Pass Microsoft 365 Administrator (Entra, Defender XDR, Purview)This examArticleFREE AZ-700 Exam Guide 2026: 5 Domains, $165, Pass Score 700/100017 min readArticleAZ-104 Study Plan 2026: Pass Azure Administrator Exam17 min readArticleAzure vs AWS Certification 2026: Which Cloud Cert Should You Get First?19 min readArticleFREE MD-102 Exam Guide 2026: Pass Microsoft Endpoint Administrator (Intune, Autopilot, Windows 11)24 min read
2026 Statistics

Key Facts: Azure AZ-104 Exam

700+

Passing Score

Microsoft Learn AZ-104 study guide

100 min

Assessment Time

Microsoft certification page

40-60

Typical Question Count

Microsoft exam-experience guidance

12 months

Renewal Frequency

Microsoft certification page

04/17/2026

Current Skills Update

Microsoft certification page

5 domains

Skills Areas

Microsoft Learn AZ-104 study guide

AZ-104 is an intermediate Microsoft role-based exam for Azure administrators. Microsoft lists 100 minutes to complete the assessment, a passing score of 700 or greater, typical Microsoft Certification question counts of 40-60 with variation, annual no-cost renewal on Microsoft Learn, and five skills areas: identities/governance 20-25%, storage 15-20%, compute 20-25%, networking 15-20%, and monitoring/maintenance 10-15%.

Sample Azure AZ-104 Practice Questions

Try these sample questions to test your Azure AZ-104 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 200+ question experience with AI tutoring.

1An administrator needs to create a new user account in Microsoft Entra ID that can be used for automated scripts and applications. What type of account should be created?
A.Member user
B.Guest user
C.Service principal
D.External user
Explanation: A service principal is the correct account type for automated scripts and applications. It represents an identity for an application or service that needs to access Azure resources. Member users are regular user accounts for employees. Guest users are external users invited to collaborate. While you could use a regular user account, service principals provide better security through credential separation and granular permissions.
2Where can an administrator configure self-service password reset (SSPR) settings in Microsoft Entra ID?
A.Microsoft Entra admin center > Password reset
B.Azure portal > Active Directory > Security
C.Microsoft 365 admin center > Users
D.Azure Security Center > Identity
Explanation: Self-service password reset settings are configured in the Microsoft Entra admin center under the Password reset section. This allows administrators to enable and configure SSPR for different user groups, set authentication methods required for reset, and configure notifications. The setting is not found in the Azure portal under Active Directory security or in Microsoft 365 admin center.
3Which authentication method allows users to sign in without using a password?
A.Multi-factor authentication (MFA)
B.Passwordless authentication
C.Conditional Access
D.Single sign-on (SSO)
Explanation: Passwordless authentication allows users to sign in without using a password. Instead, users authenticate using methods like Windows Hello for Business, Microsoft Authenticator app, or FIDO2 security keys. While MFA adds an additional layer of security, it still requires a password. Conditional Access is a policy engine, not an authentication method. SSO allows access to multiple applications with one set of credentials but typically still requires a password initially.
4A company needs to create a group where membership is automatically updated based on user attributes like department or job title. What type of group should be created?
A.Assigned group
B.Dynamic group
C.Security group
D.Microsoft 365 group
Explanation: A dynamic group automatically updates membership based on rules that evaluate user or device attributes. For example, you can create a rule that automatically includes all users with Department = "Sales". Assigned groups require manual membership management. Security groups and Microsoft 365 groups refer to group purpose/permissions, not how membership is managed. Dynamic groups require Azure AD Premium P1 or P2.
5What is the primary purpose of a security group in Microsoft Entra ID?
A.To create a shared mailbox and calendar
B.To manage access to resources like applications and SharePoint sites
C.To facilitate team collaboration in Microsoft Teams
D.To store shared documents
Explanation: Security groups in Microsoft Entra ID are primarily used to manage access to resources such as applications, SharePoint sites, and other Azure resources. You can assign permissions and roles to the group, and all members inherit those permissions. Microsoft 365 groups (not security groups) create shared mailboxes, facilitate Teams collaboration, and include shared document libraries.
6Which group type provides a shared mailbox, shared calendar, SharePoint document library, and can be used with Microsoft Teams?
A.Security group
B.Mail-enabled security group
C.Microsoft 365 group
D.Distribution list
Explanation: Microsoft 365 groups provide collaboration features including a shared mailbox, shared calendar, SharePoint document library, and integration with Microsoft Teams. Security groups are only for access management and do not include these collaboration features. Mail-enabled security groups can be used for both access control and email distribution but lack SharePoint and Teams integration.
7An administrator needs to grant a user permission to manage virtual machines in a specific resource group only. What should be used?
A.Azure Policy
B.Azure RBAC
C.Management groups
D.Resource locks
Explanation: Azure Role-Based Access Control (RBAC) should be used to grant permissions to manage resources at various scopes including resource groups. You can assign built-in roles like "Virtual Machine Contributor" or create custom roles scoped to a specific resource group. Azure Policy enforces rules and effects over resources but does not grant permissions. Management groups are for organizing subscriptions. Resource locks prevent accidental deletion or modification.
8What is the lowest level scope at which Azure RBAC roles can be assigned?
A.Management group
B.Subscription
C.Resource group
D.Individual resource
Explanation: Azure RBAC roles can be assigned at the individual resource level, which is the lowest and most granular scope. The hierarchy is: Management group (highest) > Subscription > Resource group > Individual resource (lowest). Assigning at a higher scope gives access to all child resources. For least privilege, assign roles at the lowest scope necessary.
9Which built-in Azure RBAC role allows a user to view all resources but not make any changes?
A.Contributor
B.Reader
C.User Access Administrator
D.Owner
Explanation: The Reader role allows users to view all resources but not make any changes. The Contributor role allows managing resources but not managing access. The Owner role has full access including the ability to manage access. User Access Administrator can manage user access to Azure resources. For read-only access, always use the Reader role.
10What is the primary purpose of Azure Policy?
A.To assign permissions to users and groups
B.To enforce organizational standards and assess compliance
C.To monitor resource performance
D.To backup Azure resources
Explanation: Azure Policy is used to enforce organizational standards and assess compliance at-scale. It enables you to create, assign, and manage policies that enforce rules over your resources. For example, you can ensure all resources have specific tags, restrict which regions resources can be deployed to, or enforce specific SKUs. RBAC is for permissions, Azure Monitor is for performance monitoring, and Azure Backup is for backups.

About the Azure AZ-104 Exam

The Microsoft Azure Administrator Associate (AZ-104) exam validates the ability to implement, manage, secure, and monitor Azure environments across identity, governance, storage, compute, networking, monitoring, backup, and recovery. The current Microsoft Learn certification page was updated on April 17, 2026 and lists a 12-month renewal frequency.

Questions

60 scored questions

Time Limit

100 minutes assessment time

Passing Score

700 or greater

Exam Fee

Price varies by country/region; US exam page commonly lists US$165 (Microsoft / Pearson VUE)

Azure AZ-104 Exam Content Outline

20-25%

Manage Azure Identities and Governance

Microsoft Entra users and groups, Azure RBAC, access assignments, subscriptions, resource groups, Azure Policy, locks, tags, management groups, costs, budgets, and Advisor recommendations.

15-20%

Implement and Manage Storage

Storage account access, firewalls, SAS, access keys, Azure Files identity access, redundancy, encryption, object replication, Storage Explorer, AzCopy, Blob tiers, soft delete, lifecycle, and versioning.

20-25%

Deploy and Manage Azure Compute Resources

ARM templates and Bicep, virtual machines, disks, encryption at host, VM movement, sizes, availability zones/sets, VM Scale Sets, containers, Container Apps, ACR, and App Service.

15-20%

Implement and Manage Virtual Networking

VNets, subnets, peering, public IPs, user-defined routes, NSGs, ASGs, effective rules, Bastion, service endpoints, private endpoints, Azure DNS, load balancers, and connectivity troubleshooting.

10-15%

Monitor and Maintain Azure Resources

Azure Monitor metrics and logs, alert rules, action groups, alert processing, Insights, Network Watcher, Connection Monitor, Recovery Services vaults, Azure Backup, Site Recovery, failover, and backup reporting.

How to Pass the Azure AZ-104 Exam

What You Need to Know

  • Passing score: 700 or greater
  • Exam length: 60 questions
  • Time limit: 100 minutes assessment time
  • Exam fee: Price varies by country/region; US exam page commonly lists US$165

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

Azure AZ-104 Study Tips from Top Performers

1Use the April 17, 2026 Microsoft Learn study guide as the source of truth before using third-party summaries.
2Practice hands-on Azure administration with the portal, Azure CLI, PowerShell, ARM templates, and Bicep.
3Prioritize identity/governance, compute, and networking because each can reach 20-25% or high scenario density.
4Train Microsoft Learn lookup discipline: know what to look up quickly, because the exam clock continues.
5Build troubleshooting labs for storage firewalls, RBAC scopes, NSG effective rules, private endpoints, VM connectivity, Azure Monitor alerts, Backup, and Site Recovery.

Frequently Asked Questions

How long is the AZ-104 exam?

Microsoft lists 100 minutes to complete the AZ-104 assessment. Its exam-experience guidance says associate and expert role-based exams without labs normally have 100 minutes of exam duration and 120 minutes of seat duration, while exams that may contain labs can use longer timing shown at registration.

How many questions are on AZ-104?

Microsoft does not publish a fixed AZ-104 question count. Its exam-experience guidance says most Microsoft Certification exams typically contain 40-60 questions, but the number can vary as exams are updated.

What score do I need to pass AZ-104?

The Microsoft Learn AZ-104 study guide states that candidates need a score of 700 or greater to pass. Microsoft uses scaled scoring, so candidates should not treat 700 as a simple raw 70 percent.

What are the current AZ-104 exam domains?

The April 17, 2026 skills outline lists five areas: Manage Azure identities and governance 20-25%, Implement and manage storage 15-20%, Deploy and manage Azure compute resources 20-25%, Implement and manage virtual networking 15-20%, and Monitor and maintain Azure resources 10-15%.

Does AZ-104 include Microsoft Learn access during the exam?

Microsoft says role-based exams can provide Microsoft Learn access during the exam, but no extra time is added and access excludes Q&A, Practice Assessments, and the candidate profile. It is a targeted lookup aid, not a substitute for preparation.

How long is AZ-104 certification valid?

Microsoft role-based certifications, including Azure Administrator Associate, must be renewed every 12 months. Renewal is completed at no cost by passing an online assessment on Microsoft Learn before expiration.

What is the AZ-104 retake policy?

If you fail the first attempt, Microsoft requires a 24-hour wait before retaking. After subsequent failed attempts, a 14-day waiting period applies, and you may not take the same exam more than five times within a 12-month period from the first attempt.