AZ-104 Microsoft Azure Administrator - Complete Exam Prep

Provide a high-level overview of Azure services, highlighting virtual machines, virtual networking, and storage, plus Microsoft Entra identity, and explain how these core components underpin the exam objectives.

Explore unmanaged storage accounts, scalable to petabytes with blobs, queues, tables, and file shares, plus redundancy and access tiers; examine relational SQL and non-relational data services like Cosmos DB.

Explore microservices and serverless patterns in Azure, using containers, Azure Container Apps, API management, and event-driven functions, while mastering connectivity, security, delivery, and monitoring in cloud networking.

Master the predictable az command pattern to guess Azure CLI tasks. Try az vm list and az vm create in Cloud Shell, and explore Get-AzVM in PowerShell.

Learn to use PowerShell 7 and the CLI across platforms, install and update the AZ module, and connect to Azure via cloud shell or local PowerShell.

Install PowerShell 7 on Windows 11, update the Az module to the latest release, and log into Azure with Connect-AzAccount to list resource groups using Get-AzResourceGroup.

Switch between multiple Azure subscriptions in PowerShell by listing subscriptions with Get-AzSubscription and selecting one with Set-AzContext using its ID, making subsequent actions apply to the chosen tenant.

Compare Entra ID pricing tiers—free, P1, and P2—and summarize which features are included (authentication, SSO, cloud sync) and which are restricted (SLA, advanced reporting, conditional access, self-service password reset, governance).

Learn how to manage multiple tenants, understand the relationship between accounts, tenants, and subscriptions, and assign roles to users while using managed identities for applications.

Create a brand new Azure Active Directory tenant and become the global administrator. Choose a unique domain and region, and understand where the tenant's resources are stored.

Discover how to switch between Entra ID tenants using manage tenants or switch directory, understand the global administrator role in Azure AD, and navigate tenant licenses and user management.

Learn how to upgrade from a free trial to Entra ID premium P2 in the Azure admin center, including tenant switching, global administrator setup, and purchasing licenses.

Create and manage Azure AD / Microsoft Entra ID users, assign domains, log in with unique usernames and auto-generated passwords, view and edit properties, and delete users.

Explore bulk operations in Azure Active Directory, using a CSV template to bulk create users and assign group memberships, enabling rapid handling of large datasets.

Explore self-service password reset in Azure Active Directory, enabling group-based resets with licenses and requiring multifactor authentication.

Explore role-based access control (rbac) in Azure, and learn how assigning permissions to roles simplifies management, enforces least privilege, and reduces risk by avoiding one-off permissions.

Explore Azure Active Directory administrative roles, including built-in roles like Application Administrator, Global Administrator, and Global Reader, and distinguish admin versus reader permissions, license administration, and RBAC usage.

Disable storage account key access and enable Azure AD access, then grant myself storage blob owner to manage containers and data.

Assign container-level permissions in Azure blob storage using AD user authentication and data owner permissions. Grant data reader access to teachers on a container, with scope from container to subscription.

Enforce resource group scope to assign development and production access using roles like full contributor and reader, and note that permissions merge and deny assignments require blueprints mapping to subscriptions.

Interpret access assignments in the Azure portal by examining role assignments across resource groups and subscriptions, and compare Azure AD roles to Azure roles.

Explore how Azure subscriptions act as the billing unit, link to a single tenant while supporting multiple subscriptions and types like pay-as-you-go, with RBAC, cost analysis, invoices, and quotas.

Explore Azure cost management by analyzing spending with cost analysis, setting budgets and alerts, understanding anomalies, and leveraging the advisor for subscription cost recommendations.

Azure policy restricts resources to approved regions, causing validation to fail for disallowed regions such as Japan, and enabling deployment only in regions like East US.

Create a custom Azure policy from a JSON template to enforce https encryption on storage accounts, duplicating definitions and assigning with an adjustable effect (deny or audit) at subscription scope.

Discover how to create and apply resource tags as metadata to define environment, billing codes, and contact details, and use Azure Policy with tags for cost analysis and resource management.

Move resources between regions, subscriptions, or resource groups; disks are copied, not moved, and verify support in the resource mover documentation.

Explore Azure subscriptions and management groups to organize billing across departments and clients; create, nest, and assign subscriptions within a root group, set budgeting, owners, and billing plans.

Learn to create an Azure storage account by selecting subscription, resource group, and a unique name, choosing a region, and noting blob storage and data residency considerations.

Explore Azure storage redundancy options, including locally redundant storage, zone-redundant storage, geo-redundant storage, and geo-zone redundant storage. Understand how three copies across data centers and regions influence availability and cost.

Explore advanced storage account options in the Azure portal, including secure transfer, anonymous access, keys vs Entra RBAC, Data Lake Gen2, and blob access tiers.

Review data protection options in the storage account setup, including point-in-time restore, soft delete, versioning, and immutability. Use change feed and access control to manage retention and recovery.

Choose who manages storage encryption by default using Microsoft-managed keys with Transparent Data Encryption, or switch to customer-managed keys stored in Key Vault; consider enabling infrastructure encryption for added security.

Discover how to use storage account access keys and shared access signatures to grant secure, time-bounded read access, rotate keys, and revoke tokens.

Explore object replication in Azure storage to copy asynchronously from a source account to a destination across regions or subscriptions, with rules to copy only new objects or all objects.

Navigate the storage browser to manage blob containers and file shares, copy and paste files, clone items, and generate SAS when enabled; learn desktop access with Azure Storage Explorer.

Create Azure file shares to host a cloud file server with SMB and NFS, and learn about backups, Azure file sync, and AD authentication.

Create and manage point-in-time snapshots of Azure file shares to recover deleted or modified files, stored as incremental backups in the same storage account, manually or via backup policy.