Prepare for the AZ-104 Microsoft Azure Administrator Exam
Implement, manage, and monitor an organization's Microsoft Azure environment.
A complete prep system — free study guide, adaptive practice exams, spaced-repetition flashcards, and a personalized learning journey that tracks when you're ready.
For administrators managing and monitoring Microsoft Azure environments.
Content last updated
Try Free Practice Questions & Flashcards
Get 40 exam-style questions and 40 flashcards with detailed explanations — free, no credit card required.
Every answer counts toward your progress. Enroll to access 747 practice questions, 324 flashcards, and a learning journey that targets your weaknesses.
Free AZ-104 Practice Questions (With Answers)
5 real questions from the AZ-104 bank, with the full explanation for each answer. No sign-up needed to read them.
- Question 1Implement and manage storage [Storage Account Types]
You need to create a new Azure storage account that will host both frequently accessed block blobs for a web application and Azure file shares for shared documents. Which storage account type is recommended for this scenario, offering the latest features and optimal pricing?
- A.General-purpose v1 (GPv1)
- B.FileStorage
- C.BlobStorage
- D.General-purpose v2 (GPv2)
Show answer and explanation
Correct answer: D
Correct. General-purpose v2 (GPv2) storage accounts support all Azure storage services (blobs, files, queues, tables, disks) and are recommended for most scenarios due to their comprehensive features and optimal pricing, aligning with the first principle of providing scalable, secure, and durable storage for diverse workloads.
Why the other options are wrong
A. Incorrect. GPv1 accounts are legacy; General-purpose v2 (GPv2) offers more features and better pricing.
B. Incorrect. FileStorage accounts are optimized for premium file shares but do not support blobs.
C. Incorrect. BlobStorage accounts are optimized for block and append blobs but do not support Azure Files.
- Question 2Deploy and manage Azure compute resources [Load Balancing - Application Gateway vs. Load Balancer]
A solutions architect is selecting a load balancing service for a new application. For HTTP/HTTPS workloads needing cookie-based session persistence and URL path routing, she leans toward Application Gateway. A colleague asks her to confirm the fundamental technical difference between Load Balancer and Application Gateway. What is it?
- A.Load Balancer supports custom domains and SSL; Application Gateway handles TCP/UDP only
- B.Load Balancer operates at Layer 4 (TCP/UDP); Application Gateway operates at Layer 7 (HTTP/HTTPS)
- C.Load Balancer operates at Layer 7 (HTTP/HTTPS); Application Gateway operates at Layer 4 (TCP/UDP)
- D.Load Balancer is a global service; Application Gateway is scoped to a single Azure region
Show answer and explanation
Correct answer: B
Correct. Azure Load Balancer is a Layer 4 service — it distributes TCP/UDP flows based on IP and port without inspecting content. Application Gateway is a Layer 7 service — it understands HTTP/HTTPS, enabling path routing, host routing, cookie affinity, and WAF.
Why the other options are wrong
A. Incorrect. Custom domains and SSL termination are Application Gateway features, not Load Balancer. Load Balancer does not inspect or terminate TLS — it passes TCP connections through at Layer 4.
C. Incorrect. This is the reverse of the correct answer. Load Balancer is Layer 4 (TCP/UDP); Application Gateway is Layer 7 (HTTP/HTTPS). Confusing the layers is a common exam trap.
D. Incorrect. Both Load Balancer and Application Gateway are regional services. Azure Front Door is the global HTTP load balancer, and Azure Traffic Manager provides DNS-based global routing — neither is Application Gateway.
- Question 3Implement and manage virtual networking [VNet Purpose]
A developer new to Azure asks why the team deploys VMs inside Azure Virtual Networks rather than directly in Azure. What does an Azure Virtual Network (VNet) provide?
- A.A secure, isolated network environment where your Azure resources communicate privately using private IP addresses
- B.A global network that routes traffic between all Azure services across all regions automatically, ensuring seamless connectivity
- C.A user identity and access management system for controlling who can connect to Azure resources and managing their permissions
- D.A scalable blob storage tier for large datasets that need high-throughput network access and continuous replication across regions
Show answer and explanation
Correct answer: A
Correct. A VNet creates a logical network boundary in Azure. Resources within a VNet communicate using private IP addresses and are isolated from other customers' networks. VNets control ingress/egress via NSGs, route tables, and gateways.
Why the other options are wrong
B. Incorrect. VNets are regional resources — they do not span regions automatically. Global routing across regions uses VNet Peering, VPN Gateway, or Azure Virtual WAN.
C. Incorrect. User identity and access management is provided by Microsoft Entra ID and Azure RBAC. VNets are network infrastructure resources, not identity systems.
D. Incorrect. Azure Blob Storage is the service for large-scale unstructured data storage. VNets are network constructs — they enable private IP communication between compute resources, not data storage.
- Question 4Monitor and maintain Azure resources [Workbooks - Collaboration]
Your team has created a custom troubleshooting guide in an Azure Workbook. What feature allows you to share this workbook with other team members for consistent monitoring and troubleshooting?
- A.Sharing it within Azure by saving it to a resource group.
- B.Emailing the exported workbook JSON file directly to team members.
- C.Saving it to a local drive only.
- D.Exporting it as a PDF document.
Show answer and explanation
Correct answer: A
Correct. Azure Workbooks can be saved to a resource group, making them Azure Resource Manager (ARM) resources that can be shared with teams. This enables collaboration and ensures consistent monitoring and troubleshooting across the organization.
Why the other options are wrong
B. Incorrect. Workbooks are not typically shared as email attachments.
C. Incorrect. Saving locally doesn't enable sharing within Azure.
D. Incorrect. Exporting as PDF creates a static document, not an interactive shared resource.
- Question 5Implement and manage storage [Access Tiers]
A blob in the Archive tier needs to be read immediately for an urgent legal request. What is the fastest rehydration option?
- A.High-priority rehydration to Hot or Cool tier
- B.Contact Microsoft Support for emergency data retrieval
- C.Direct read from Archive tier
- D.Copy the blob to a Premium storage account
Show answer and explanation
Correct answer: A
Correct. Archive rehydration offers two priorities: Standard (up to 15 hours) and High (typically under 1 hour for smaller blobs). High-priority rehydration costs more but provides the fastest access. The blob must be rehydrated to Hot or Cool before it can be read — there is no way to read directly from Archive.
Why the other options are wrong
B. Incorrect. Rehydration is a self-service operation. High-priority rehydration is the fastest available method without involving support.
C. Incorrect. Archive tier blobs are offline and cannot be read directly. Rehydration to an online tier (Hot or Cool) is required before any read operation.
D. Incorrect. You cannot copy directly from Archive. The blob must first be rehydrated to Hot or Cool tier, then it can be copied. Rehydration is the prerequisite step.
Those are 5 of the 40 questions in the free sample exam. Sign up to take the remaining 35 under exam conditions, get scored, and see which topics are holding you back.
Exam Topics Covered
- Manage Azure identities and governance
- Implement and manage storage
- Deploy and manage Azure compute resources
- Implement and manage virtual networking
- Monitor and maintain Azure resources
What's Included with Enrollment
- Personalized Learning Journey – a guided path built around your weak spots
- Readiness Score & Weakness Analytics – know exactly when you're ready
- Unlimited Practice Exams – build confidence with real test conditions
- Memory-First Flashcards – lock in knowledge that lasts
- Integrated Study Guide – streamline your prep in one place
Your free practice progress carries over. Enroll for full access for $39.99.
Free Account vs. Enrolled
| Feature | Free | Enrolled |
|---|---|---|
| Practice questions | 40 | 747 |
| Flashcards | 40 | 324 |
| Full study guide | ✓ | ✓ |
| Explanations for every answer | ✓ | ✓ |
| Full-length timed practice exams | — | ✓ |
| Spaced-repetition review | — | ✓ |
| Learning Journey and personal study plan | Preview | ✓ |
Start Free. Upgrade When You're Ready.
Stay on your structured path while adding targeted practice with the full set of exam-like questions, expanded flashcards to reinforce concepts, and readiness tracking to identify and address weaknesses when needed.
Related Certifications
[AZ-900] Microsoft Azure Fundamentals
Recommended prerequisite · Beginner
[AZ-305] Designing Microsoft Azure Infrastructure Solutions
Next step · Advanced
[SC-500] Microsoft Cloud and AI Security Engineer
Next step · Intermediate
[AZ-700] Designing and Implementing Microsoft Azure Networking Solutions
Next step · Intermediate
Frequently Asked Questions
The Microsoft Azure Administrator consists of 60 questions. You are given 100 minutes to complete the exam.
The Microsoft Azure Administrator exam reports a scaled score from 1 to 1,000, and you need at least 700 to pass. A scaled score is not the percentage of questions you answered correctly. Our practice exams use 70% as their pass mark.
You have 100 minutes to complete the Microsoft Azure Administrator. That works out to roughly 100 seconds per question, so time management is important during your preparation.
The Microsoft Azure Administrator covers the following domains: Manage Azure identities and governance, Implement and manage storage, Deploy and manage Azure compute resources, Implement and manage virtual networking, Monitor and maintain Azure resources. Each domain carries a different weight on the exam, so focus your study time on the areas that count most.
The Microsoft Azure Administrator is rated Intermediate. This means candidates should have hands-on experience and foundational knowledge before attempting this exam.
Before attempting the Microsoft Azure Administrator, it is recommended to complete AZ-900 Microsoft Azure Fundamentals. These certifications build the foundational knowledge you'll need to succeed.
The Microsoft Azure Administrator is part of 2 career paths:
• Azure Administrator Journey: AZ-900 → AZ-104
• Azure Solutions Architect Journey: AZ-900 → AZ-104 → AZ-305
After passing, the recommended next step is AZ-305 Designing Microsoft Azure Infrastructure Solutions.
MindMesh Academy provides multiple study modes to match your preparation style. Timed Practice simulates real exam conditions with a countdown timer. Review Mode shows detailed explanations after every question so you can learn as you go. Section-Based Practice lets you focus on specific exam domains to target weak areas. Flashcards support spaced repetition (SRS) for long-term retention, plus burst, deep study, and cram modes for flexible review. A guided Learning Journey ties everything together into a structured study path. All modes are fully mobile-friendly, so you can study on any device.
Official vendor practice tests typically offer a limited number of questions with minimal explanations. MindMesh Academy provides a comprehensive question bank with detailed explanations for every answer choice — both correct and incorrect — so you understand the reasoning behind each answer. You also get flashcards with spaced repetition, a complete study guide covering every exam domain, section-based practice, progress analytics that identify your weakest topics, and a guided learning journey. All study materials are accessible on desktop and mobile.
Yes. Our team reviews and updates the question bank to reflect the latest exam objectives and real-world scenarios. When exam versions change or new topics are added, we update our practice questions, flashcards, and study guide to ensure you are always studying current material.
MindMesh Academy offers practice exams that simulate real test conditions, flashcards with spaced repetition to strengthen long-term retention, and an integrated study guide covering every exam domain. You can also track your progress with analytics that pinpoint your weak areas so you know exactly where to focus.
Written by
Alvin Varughese
Founder, MindMesh Academy
Alvin Varughese is the founder of MindMesh Academy and holds 20 professional certifications including Microsoft Agentic AI Business Solutions Architect, AWS Solutions Architect Professional, and Azure DevOps Engineer Expert. He's held senior engineering and architecture roles at Humana (Fortune 50) and GE Appliances. He built MindMesh Academy to share the study methods and first-principles approach that helped him pass each exam.
Start Your Certification Journey Today
Join thousands of students who have successfully prepared for their certifications with MindMesh Academy's comprehensive practice exams and study materials.