AZ-104 is the most practical first Azure credential for anyone with an infrastructure background. It is also the prerequisite that unlocks the Azure DevOps expert path. This roadmap gives you the verified exam facts, the five domains in order of study difficulty, a twelve-week plan, and the renewal rule that catches most candidates twelve months after they pass.
What AZ-104 Certifies and Who Hires For It
Passing AZ-104 earns the Microsoft Certified: Azure Administrator Associate credential. The role it describes is the person who implements, manages and monitors an organisation identity, governance, storage, compute and virtual networking in Azure.
In Pakistan this credential concentrates value in employers running Microsoft estates: banks, insurers, telecom operators, large manufacturing groups, government contractors and export software houses serving UK and Gulf clients who mandate Azure. If your employer already runs Active Directory and Microsoft 365, the internal promotion case for this credential is strong.
Verified Exam Facts
| Attribute | Detail |
| Exam code | AZ-104 |
| Credential earned | Microsoft Certified: Azure Administrator Associate |
| Level | Intermediate |
| Duration | 100 minutes |
| Format | Proctored, with interactive components |
| Formal prerequisites | None |
| Assumed experience | Operating systems, networking, servers, virtualisation, plus PowerShell, Azure CLI, Azure Portal, Resource Manager templates or Bicep, and Microsoft Entra ID |
| Languages | Nine, including English |
| Retake policy | Retake permitted 24 hours after a first failure, longer waits apply to subsequent attempts |
| Renewal | Every 12 months, through a free online assessment on Microsoft Learn |
| Pricing | Set by the country or region in which the exam is proctored |
Note the interactive components. AZ-104 includes hands-on tasks, not only multiple-choice questions. Candidates who prepare exclusively from question banks tend to lose marks precisely there.
The Five Skill Domains
Manage Azure Identities and Governance
Microsoft Entra ID users, groups, roles and administrative units, subscriptions and management groups, role-based access control, policies and resource locks. This domain is where infrastructure administrators from an Active Directory background have the largest head start. Practise assigning a custom role and explaining exactly why a built-in role was insufficient.
Implement and Manage Storage
Storage accounts, replication options, blob tiers and lifecycle rules, file shares, access keys and shared access signatures. The exam probes redundancy choices. Be able to state which replication option survives a regional failure and what it costs you in latency or price.
Deploy and Manage Azure Compute Resources
Virtual machines, availability sets and zones, scale sets, disks and images, containers, and app services. Deployment through templates matters here. You should be able to deploy the same virtual machine from the portal, from the command line and from a template file.
Implement and Manage Virtual Networking
Virtual networks and subnets, network security groups, peering, private endpoints, load balancers, application gateways, DNS and hybrid connectivity. This is the highest-failure domain for candidates without networking foundations. If subnetting and routing are shaky, CCNA networking training fixes the gap faster than repeating Azure labs.
Monitor and Maintain Azure Resources
Azure Monitor, metrics, log queries, alerts, backup and site recovery. Understand what a recovery point objective means in practice and how to configure backup to meet a stated one.
Skills to Have Before You Start
| Prerequisite skill | Why AZ-104 assumes it | If you are weak here |
| Networking fundamentals | The virtual networking domain assumes subnetting, routing and firewall logic | Study networking before Azure, not alongside it |
| Windows and Linux administration | You deploy and troubleshoot both operating systems on Azure virtual machines | Spend two weeks on server administration basics first |
| Identity concepts | Entra ID builds on directory and authentication concepts | Active Directory experience transfers almost directly |
| PowerShell and Azure CLI | Interactive exam tasks and real administration both use them | Practise 20 common commands until they are automatic |
| Templates or Bicep | Declarative deployment appears throughout the exam | Deploy one resource group from a template before exam week |
| Cloud vocabulary | The exam does not stop to define terms | The AZ-900 Azure Fundamentals course removes this gap in four to six weeks |
Twelve-Week Study Roadmap
| Weeks | Domain focus | Lab deliverable |
| 1 to 2 | Azure basics, subscriptions, resource groups, portal and CLI orientation | Deploy and delete a resource group three ways: portal, CLI, template |
| 3 to 4 | Identity and governance | Build a custom role, apply a policy, and lock a production resource |
| 5 to 6 | Storage | Configure lifecycle rules and generate a time-limited shared access signature |
| 7 to 8 | Compute | Deploy a scale set behind a load balancer and test automatic scaling |
| 9 to 10 | Virtual networking | Build two peered networks with a private endpoint and prove traffic isolation |
| 11 | Monitoring, backup, site recovery | Configure an alert tied to an actual failure condition and restore a virtual machine |
| 12 | Revision, timed practice, interactive task drills | Two full-length timed attempts scoring consistently above target |
Lab Plan Under Pakistani Constraints
The most common reason candidates in Pakistan abandon AZ-104 study is not difficulty. It is an unexpected cloud bill or a lab session cut short. Control both from week one.
| Risk | What goes wrong | Control |
| Runaway subscription cost | A forgotten virtual machine or gateway runs all month | Set a hard budget alert on day one and delete every resource group at the end of each session |
| Card and billing friction | Free tier signup requires a card enabled for international transactions | Arrange a dollar-enabled debit card before you begin |
| Power interruption during labs | Half-configured resources left running and billing | Work in short scoped sessions and script teardown so recovery is one command |
| Bandwidth limits | Large image downloads and remote sessions time out | Prefer command line administration over graphical remote sessions |
| Home-proctored exam failure | Session terminated for connection loss, with no refund | Book at an authorised venue such as our Pearson VUE test centre |
The Renewal Rule That Catches People
Microsoft role-based certifications expire. AZ-104 must be renewed every twelve months through a free online assessment taken on Microsoft Learn within the eligibility window. There is no fee, but there is a deadline. Miss it and the credential lapses, and restoring it means sitting the full paid exam again.
Two habits prevent this. Put a calendar reminder eleven months out on the day you pass. Register with a personal Microsoft account rather than a work account, so your transcript and renewal reminders survive a job change.
Where AZ-104 Leads Next
| Next step | Credential | Choose it if |
| DevOps and release engineering | AZ-400, DevOps Engineer Expert | You want pipeline, automation and delivery ownership. AZ-104 satisfies its prerequisite. |
| Solution architecture | AZ-305, Azure Solutions Architect Expert | You want to design rather than operate |
| Security engineering | AZ-500, Azure Security Engineer Associate | Your employer is regulated or under the national SOC deployment mandate |
| Hybrid infrastructure | Windows Server hybrid administration | Your estate remains substantially on premises |
| Security fundamentals first | SC-900 | You want security vocabulary before committing to a specialisation |
The DevOps route is the most common next step for infrastructure professionals, through AZ-400 Azure DevOps training. Architecture-minded candidates progress to the AZ-305 Azure Solutions Architect track. Those in regulated employers should consider the AZ-500 Azure Security Engineer course or start with SC-900 security fundamentals. If your estate is still largely on premises, Windows Server hybrid administration training is the better pairing.
Cost and Return
Budget three items: the exam fee, priced by the region in which you sit it, a modest Azure subscription for labs if you exhaust free credit, and your time. Against that, the credential does three things. It satisfies the prerequisite for the expert DevOps path. It supports employer bids to clients who require certified staff, which often means your employer funds it. It also makes internal promotion cases easier in Microsoft-estate organisations, where certification is frequently a documented criterion.
For a comparison against other Microsoft credentials, see top Microsoft certifications that can boost your IT career. If you are still weighing platforms, how to choose the right cloud certification is the better starting point.
Frequently Asked Questions
Do I need AZ-900 before AZ-104?
No. AZ-104 has no formal prerequisite. AZ-900 is useful only if cloud vocabulary is new to you.
How hard is AZ-104 for someone with no cloud experience?
Manageable if you already administer servers and networks. Difficult if you do not, because the exam assumes operating system, networking and virtualisation knowledge rather than teaching it.
How long should I study?
Twelve weeks at eight to ten hours per week is realistic for a working administrator. Candidates without infrastructure background should plan sixteen to twenty weeks.
Can I retake it quickly if I fail?
A retake is permitted 24 hours after a first failure. Waiting periods lengthen for subsequent attempts, so treat the second attempt as the one that counts.
Does AZ-104 expire?
Yes. Renew every twelve months through a free online assessment on Microsoft Learn within the eligibility window.
Start the Roadmap With Guided Labs
AZ-104 rewards hands-on repetition, and its interactive components punish theory-only preparation. Instructor-led AZ-104 Azure Administrator training provides guided labs, reviewed configurations and exam-style interactive drills. Explore the wider Microsoft certification track, browse the full course catalogue, or speak to a training advisor to confirm you are starting at the right level.
