AZ-104 · 9 min read

How to Pass AZ-104: A 6-Week Study Plan Weighted by the Official Domains

At a glance

Time allotted
100 minutes
Passing score
700 out of 1000
Plan length
6 weeks at roughly 1 to 1.5 hours a day
Heaviest domains
Identity and governance, Compute (20 to 25 percent each)
Lightest domain
Monitoring and maintenance (10 to 15 percent)
Prerequisite exams
None, AZ-900 is not required

Six weeks at roughly an hour to an hour and a half a day is a realistic AZ-104 timeline for someone with some IT background: five weeks working through the five official domains with hands-on practice, then a final week of timed simulations. If you already administer Azure every day, compress it. If you have never used a cloud portal, add two weeks and consider starting with AZ-900.

The plan follows the official weights from the April 2026 skills outline, so the hours go where the points are.

Before week one

  • An Azure subscription. You need to use the portal and the CLI yourself. New accounts include free amounts of many services; delete what you create at the end of each session to keep costs near zero.
  • The official learning path for AZ-104 on Microsoft Learn.
  • The official lab instructions. Microsoft publishes the AZ-104 course labs on GitHub in the MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator repository. They are written for instructor-led courses but are easy to follow on your own.
  • A baseline. Take the free Microsoft Practice Assessment or our free AZ-104 sample cold. The score does not matter yet. What matters is seeing which domain is weakest before you start.

The six weeks at a glance

WeekFocusOfficial weightHands-on goal
1Identities and governance20 to 25 percentUsers and groups, RBAC at different scopes, a policy assignment and a lock
2Storage15 to 20 percentStorage account with firewall rules, a SAS, a lifecycle rule, a file share, AzCopy
3Compute20 to 25 percentVM from a Bicep file, a scale set, a container app, App Service with a deployment slot
4Virtual networking15 to 20 percentTwo peered VNets, NSG and ASG rules, a private endpoint, an internal load balancer
5Monitoring and backup, then review10 to 15 percentAlert rule with an action group, a log query, VM backup and restore
6Timed simulationsAll fiveThree or more full timed attempts, every miss reviewed

Week 1: Identities and governance

Start here because everything else depends on it. Know the difference between Microsoft Entra roles and Azure RBAC roles, how role assignments inherit from management group to subscription to resource group to resource, and what Azure Policy does that RBAC does not. RBAC controls who can act; Policy controls what the resulting resources are allowed to look like. Locks, tags, budgets and cost alerts are quick points once you have configured each of them once.

Week 2: Storage

The traps are access methods and redundancy. Be able to say when to use an account key, a SAS token, a stored access policy or identity-based access, and what each redundancy option (LRS, ZRS, GRS, GZRS) survives. Configure lifecycle management, soft delete and versioning yourself, because questions describe those exact settings screens.

Week 3: Compute

The broadest domain. Deploy a VM from an ARM template or Bicep file at least once and read the template rather than just running it, since questions ask you to complete or fix one. Understand availability sets versus availability zones, scale set scaling rules, and App Service plans, scaling and deployment slots.

Week 4: Virtual networking

Give networking more time than its weight suggests. It is 15 to 20 percent, but questions combine NSGs, routing and peering in one scenario, and it is the domain candidates most often underestimate, as covered in the five AZ-104 mistakes. Practice reading effective security rules and predicting whether traffic will flow before you test it.

Week 5: Monitoring, backup and review

The lightest domain and the cheapest to finish. Know which tool answers which question: Azure Monitor for metrics, logs and alerts, Network Watcher for connectivity, Recovery Services vaults for backup, Site Recovery for failover. Spend the rest of the week on a full untimed practice attempt and on re-studying whichever domain scores lowest.

Week 6: Timed simulations

Switch to exam conditions: 100 minutes, no notes, no feedback until the end. After each attempt, review every wrong answer and every lucky guess. Re-study the weakest domain between attempts instead of immediately retaking.

The readiness test

Book the exam when all five domains clear the pass mark with margin across three consecutive attempts on fresh questions. An overall score can hide one weak domain, and one weak domain is enough to fail. If a domain stays stuck for three attempts, change how you study it, with more hands-on work or a different documentation page, rather than just repeating questions.

Remember that 700 is a scaled score, not 70 percent, which is another reason to leave margin.

Exam week

  • Open the Microsoft Exam Sandbox once to see the interface and question types.
  • If you test online, run the system check on the same computer and network you will use on the day.
  • The day before, review only the notes for your weakest domain. No new material.
  • During the exam, flag long scenarios and come back to them. Do not let one question take ten minutes.

Bottom line

Five weeks of domain-by-domain study with real hands-on work, weighted toward identity, compute and networking, then a week of timed simulations judged per domain. Our AZ-104 practice exam is built around that loop: practice by competency in weeks one to five, timed 0 to 1000 simulations in week six, and a per-domain report after every attempt. The AZ-104 bank also includes spaced-repetition flashcard decks for the facts that only stick with repetition.

Frequently asked questions

How long does it take to prepare for AZ-104?

It depends on your background. With some IT experience, about six weeks at one to one and a half hours a day is realistic. People who administer Azure daily can often prepare in two to three weeks, while complete beginners should plan for longer and consider AZ-900 first.

Can I pass AZ-104 without hands-on experience?

It is possible but much harder. Microsoft expects experience with the Azure portal, PowerShell, Azure CLI, ARM templates or Bicep, and Microsoft Entra ID, and many questions describe portal settings and template snippets you only recognize from using them.

What is the hardest part of AZ-104?

For most candidates it is virtual networking. Its official weight is 15 to 20 percent, but questions combine network security groups, routing, peering and DNS in a single scenario.

Do I need AZ-900 before AZ-104?

No. Microsoft lists no prerequisite exams for the Azure Administrator Associate certification.

Sources

Exam details change. Verify against Microsoft Learn before booking.

Ready to put this into practice?

Try 20 free questions →