Microsoft Azure Administrator (AZ-104)

What you will be able to do

• Manage Microsoft Entra ID identities: users, groups, devices, and licenses
• Assign role-based access control (RBAC) and organize subscriptions, management groups, and Azure Policy
• Implement and secure Azure storage: storage accounts, blob storage, Azure Files, access keys, and SAS tokens
• Deploy and manage compute: virtual machines, scale sets, containers, and Azure App Service
• Configure virtual networking: virtual networks, subnets, NSGs, peering, DNS, and load balancing
• Monitor and maintain resources with Azure Monitor, Log Analytics, Azure Backup, and Site Recovery
• Sit the Microsoft Azure Administrator (AZ-104) exam with confidence

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Manage Azure Identities and Governance

   This module establishes the foundation of Azure administration: identity and governance. You begin with Microsoft Entra ID, learning how users, groups, devices, and licenses are structured and how self-service password reset reduces help desk load. You then move to the governance layer, mastering role-based access control, the subscription and management group hierarchy, Azure Policy guardrails, and Microsoft Cost Management. Together these skills answer the two questions every Azure environment must settle first: who is allowed to do what, and how the environment is organized and paid for. This is the largest AZ-104 exam domain and the base that every later module builds on.

   2 lessons · 5 quiz questions

2. 02

   Implement and Manage Storage

   Azure storage is the foundation under almost every workload you will run as an administrator, from virtual machine disks to application data, file shares, and backups. This module takes you from creating and structuring storage accounts, through choosing redundancy for durability, organizing blob storage, and automating cost with lifecycle rules. You then secure everything: Azure Files with identity-based access, account keys and their rotation, scoped shared access signatures, and the data protection layers (soft delete, versioning, immutability, and encryption) that keep data recoverable and tamper-proof. You finish able to pick the right tier and redundancy for a workload and lock access down to least privilege.

   2 lessons · 5 quiz questions · assignment

3. 03

   Deploy and Manage Compute Resources

   Compute is where your workloads actually run. This module takes you up the Azure compute stack: sizing and deploying virtual machines, attaching the right disks, and engineering availability with availability sets, availability zones, and virtual machine scale sets. You then move to containers with Azure Container Instances and Azure Container Registry, and to fully managed hosting with Azure App Service. By the end you can choose confidently between infrastructure, containers, and platform services for a given workload.

   2 lessons · 5 quiz questions

4. 04

   Configure Networking and Maintain Resources

   This closing module connects your Azure environment and then keeps it healthy. You design virtual networks, subnets, network security groups, peering, private DNS, and load balancing, then stand up Azure Monitor, Log Analytics, alerts, Azure Backup, and Site Recovery. Together these are the final two AZ-104 domains: build the network first, then observe, protect, and recover what runs on it.

   2 lessons · 5 quiz questions · assignment