AZ-104 Azure Administrator Associate Learning Hub

Master Azure administration through architecture-driven learning covering identity, storage, compute, networking, and monitoring.

The AZ-104 certification validates your ability to operate and manage Microsoft Azure environments. At CloudCertPro, you don’t just memorize isolated facts—you learn the architecture and service behaviors that form the backbone of real‑world Azure administration. This hub guides you from domain concepts to hands‑on scenarios, building durable skills for both the exam and your career.

Start AZ-104 Skills Overview →
Explore Azure Domains →

What Is AZ-104?

#

AZ-104: Microsoft Azure Administrator Associate is the core certification for professionals who implement, manage, and monitor Azure resources. It replaces the older AZ-103 and focuses on operational excellence across five key skill areas.

This certification requires you to:

• Manage Azure identities, governance, and compliance
• Implement and manage storage
• Deploy and manage compute resources
• Configure and manage virtual networking
• Monitor and back up Azure resources

The exam is scenario‑driven and tests your ability to select the right service for a given requirement, troubleshoot configuration issues, and apply best practices. Memorizing answers to specific questions will not work; understanding Azure architecture, service interactions, and design trade‑offs is essential.

CloudCertPro prepares you by teaching the architecture behind administration—because an administrator who thinks like an architect solves problems faster, designs more reliable solutions, and passes the exam with confidence.

The AZ-104 Learning Framework

#

We structure every topic through a progressive learning model that turns abstract exam objectives into concrete, actionable knowledge.

• AZ-104 Certification – The target credential that defines the administrator role.
• 5 Core Skills – Identity & Governance, Storage, Compute, Networking, Monitoring.
• Azure Domains – Conceptual knowledge areas like Identity, Networking, Security.
• Azure Services – The specific resources you implement and configure (Entra ID, VMs, VNets, Storage Accounts).
• Architecture Patterns – How services combine into secure, scalable, and highly available designs.
• Guided Labs – Step‑by‑step hands‑on exercises that reinforce architectural understanding.
• Practice Scenarios – Scenario‑based reasoning questions that mimic the real exam’s decision‑focused style.

This framework ensures every service you learn sits within a larger design context.

AZ-104 Skills Overview

#

The five skills below represent the operational foundation of Azure administration. Each skill directly maps to multiple Azure domains and services, and together they cover the full administrative surface of the platform.

Skill 1: Manage Azure Identities and Governance

#

• Microsoft Entra ID tenants, users, groups, and roles
• Subscription governance with Azure Policy, management groups, and resource locks
• Role‑based access control (RBAC) and privileged identity management

Skill 2: Implement and Manage Storage

#

• Storage accounts, blob access tiers, and lifecycle management
• Azure Files, file shares, and SMB protocol
• Storage security (shared access signatures, encryption, access keys)
• Backup and site recovery for storage data

Skill 3: Deploy and Manage Azure Compute Resources

#

• Virtual machines, VM scale sets, and availability options
• App Service plans, web apps, and deployment slots
• Azure Container Instances, Container Apps, and AKS fundamentals
• Automating compute deployment with ARM templates, Bicep, or CLI

Skill 4: Implement and Manage Virtual Networking

#

• Virtual networks, subnets, and IP addressing
• Network security groups (NSGs), application security groups, and Azure Firewall
• Load balancers, application gateway, and traffic management
• DNS, private endpoints, VNet peering, and VPN connectivity

Skill 5: Monitor and Maintain Azure Resources

#

• Azure Monitor, metrics, logs, and Log Analytics workspaces
• Alerts, action groups, and automated remediation
• Backup and disaster recovery for VMs, storage, and databases
• Update management, compliance scanning, and Azure Advisor

These skills are not isolated. An administrator who knows how to design a storage architecture, not just create a storage account, will make better decisions and pass the exam more easily.

Start AZ-104 Skills Overview →

Skills → Domains → Services Mapping

#

Every AZ-104 skill draws on core Azure knowledge domains and specific services. The table below shows the high‑level mapping.

Explore all Azure Domains →
Browse Azure Services Library →

Deep Dive into Each Skill

#

Click into any skill for an architecture‑first learning path with service breakdowns, configuration best practices, and enterprise scenario exercises.

Skill 1: Identity & Governance

#

• Microsoft Entra ID architecture and directory design
• RBAC scoping and custom roles
• Azure Policy initiative design for compliance
• Management groups and hierarchical governance

Identity & Governance Learning Path →

Skill 2: Storage

#

• Storage account architecture (performance tiers, redundancy)
• Blob lifecycle management and immutable storage
• Azure Files with Active Directory authentication
• Storage security: SAS tokens, private endpoints, encryption scopes

Storage Learning Path →

Skill 3: Compute

#

• Virtual machine sizing, availability, and auto‑scaling
• App Service networking, hybrid connections, and scaling
• Container options: when to use ACI vs. Container Apps vs. AKS
• Infrastructure as Code for compute resources

Compute Learning Path →

Skill 4: Networking

#

• VNet design patterns: hub‑spoke, service endpoints, private endpoints
• NSG rule processing and application security groups
• Load balancer vs. application gateway vs. Front Door
• Hybrid connectivity with VPN Gateway and ExpressRoute

Networking Learning Path →

Skill 5: Monitoring

#

• Azure Monitor data platform: metrics, logs, and diagnostics
• Designing alert rules and action groups for proactive operations
• Backup policy design for VMs, SQL, and file shares
• Using Azure Workbooks to visualize operational data

Monitoring Learning Path →

Architecture Perspective: Administration as Foundation for Design

#

AZ-104 is often viewed as the “operations” certification, but every administrative task rests on architectural decisions. An administrator who understands architecture can anticipate failure, design for scale, and manage complexity effectively.

• Identity architecture – How Entra ID tenants, subscriptions, and management groups form the enterprise scaffolding.
• Storage architecture – Choosing between block, file, and object storage, configuring geo‑redundancy, and designing access patterns for security and cost.
• Compute architecture – From single VMs to highly available, multi‑region deployments using scale sets, load balancers, and App Service Environments.
• Network architecture – Hub‑spoke topologies, private connectivity, forced tunneling, and integrating on‑premises with Azure.
• Observability architecture – Building a unified monitoring, alerting, and backup strategy across all resources.

Each AZ-104 skill contributes to a larger system design. When you approach the exam with this mindset, scenario questions become extensions of real‑world problem‑solving.

Explore Azure Architecture →

Real‑World Enterprise Scenario Overview

#

We don’t just teach isolated configuration steps. You’ll learn to apply AZ-104 skills to realistic, multi‑service challenges such as:

• Enterprise identity and access control – Designing RBAC models, conditional access, and managing external identities for partners.
• Multi‑tier application deployment – Placing web, application, and database tiers across subnets with NSGs and private endpoints.
• Secure networking with private endpoints – Locking down PaaS services (Storage, SQL, Key Vault) behind private IPs.
• Highly available compute architecture – Designing VM scale sets across availability zones, fronted by a public load balancer, with automatic instance repair.
• Backup and disaster recovery design – Creating recovery plans for critical workloads using Azure Backup, Azure Site Recovery, and cross‑region restore.

These scenarios bridge administration and architecture, exactly what the AZ-104 exam expects.

Practice Scenario Section

#

AZ-104 is built on case‑based reasoning, not fact recall. Our practice materials immerse you in decision‑making:

• Case‑based reasoning – Given a company’s requirements, select the correct service, SKU, or configuration.
• Service selection decisions – When to choose between Azure Files vs. Blob, Load Balancer vs. Application Gateway, or VM vs. Container.
• Architecture trade‑offs – Balancing cost, performance, security, and operational complexity.
• Security and compliance scenarios – Implementing least privilege, encryption at rest and in transit, and meeting governance requirements.

Try AZ-104 Practice Scenarios →

Related Azure Knowledge Areas

#

AZ-104 does not exist in a vacuum. It connects tightly to the wider Azure ecosystem. Use these resources to deepen your understanding:

• Azure Domains – The conceptual building blocks behind every Azure service.
• Azure Services Library – In‑depth service reference with architecture insights.
• Azure Architecture Center – Design principles, patterns, and Well‑Architected guidance.

Learning Path Navigation

#

• AZ-104 Skills Overview
• Skill: Identity & Governance
• Skill: Storage
• Skill: Compute
• Skill: Networking
• Skill: Monitoring

Next Step: From Administrator to Architect

#

AZ-104 lays the operational foundation. Once you’ve mastered Azure administration, you are ideally positioned to advance into architecture and specialized roles.

Career progression: Administrator → Engineer → Architect

Explore all Azure Certification Paths →