Free AZ-104 Exam Questions and Answers
Updated October 13, 2026 | 20 questions with full answers
The short answer
AZ-104 is a 100-minute exam with 40-50 questions and a 700/1000 passing score. Unlike AZ-900 it is a hands-on exam: it tests whether you can administer identities, storage, compute, networking and monitoring. The questions below come from our 1,087-question AZ-104 bank, weighted across all five domains, with answers and explanations.
AZ-104 exam facts
| Questions | 40-50 |
| Time limit | 100 minutes |
| Passing score | 700 / 1000 |
| Cost | $165 USD |
| Delivery | Pearson VUE test centre or online proctored |
| Prerequisites | None formally, but AZ-900 plus hands-on Azure experience is strongly recommended |
What the exam covers, domain by domain
| Domain | Weight | What it tests |
|---|---|---|
| Manage Azure identities and governance | 20-25% | Entra ID users and groups, RBAC, subscriptions, policy, cost management. The heaviest domain. |
| Implement and manage storage | 15-20% | Storage accounts, blob tiers, file shares, AzCopy, storage security. |
| Deploy and manage Azure compute resources | 20-25% | ARM templates, VMs, containers, App Service plans and scaling. |
| Implement and manage virtual networking | 15-20% | VNets, subnets, peering, NSGs, Azure DNS, load balancing. |
| Monitor and maintain Azure resources | 10-15% | Azure Monitor, alerts, Log Analytics, backup and recovery. |
20 free AZ-104 exam questions with answers
Real questions from our 1087-question AZ-104 bank, spread across every domain. The correct answer is marked and every question carries an explanation, so you can check the reasoning and not just the result. The interactive mocks serve the full bank, timed and scaled-scored.
Which Azure VM size family is storage optimized, high throughput?
- ✓ L-series
- ○ F-series
- ○ N-series
- ○ B-series
Which Azure service/feature is blob inventory?
- ✓ Blob Inventory
- ○ Change Feed
- ○ Logs
- ○ Metrics
Which networking service domain name hosting?
- ✓ DNS
- ○ CDN
- ○ Load Balancer
- ○ ExpressRoute
Which Azure cost feature is 1-3 year discount?
- ○ Budget
- ○ Spot pricing
- ○ Hybrid Benefit
- ✓ Reservation
Which KQL is summarize?
- ○ where
- ○ project
- ✓ summarize
- ○ join
A technician is deploying a new Azure VM to host a memory-intensive in-memory database. The VM must support at least 1 TB of RAM and use premium SSD-managed disks. Which VM size series should they select?
- ○ Dsv3 series
- ○ Esv3 series
- ✓ M series
- ○ Fsv2 series
Which Azure storage replication option is described as: "Zone-redundant storage, 3 copies across zones"?
- ✓ ZRS
- ○ GZRS
- ○ RA-GRS
- ○ GRS
Which networking service encrypted site-to-site?
- ○ Private Endpoint
- ○ VNet Peering
- ✓ VPN Gateway
- ○ Service Endpoint
Which Microsoft Entra ID feature periodic review of access rights?
- ✓ Access Reviews
- ○ Hybrid Join
- ○ Device Registration
- ○ Dynamic Groups
Which monitoring service best practice recommendations?
- ○ Monitor
- ○ Log Analytics
- ○ Service Health
- ✓ Advisor
Which Azure feature allows you to create a custom image of a VM that includes the OS, installed software, and configuration for rapid deployment?
- ○ Snapshot
- ○ Managed disk
- ✓ Shared Image Gallery
- ○ Azure Backup
Which Azure storage tier is 30+ days infrequent?
- ✓ Cool
- ○ Archive
- ○ Premium
- ○ Hot
Which Azure network gives private IP to PaaS?
- ○ VPN Gateway
- ○ VNet Peering
- ✓ Private Endpoint
- ○ Service Endpoint
Which Azure compute service managed kubernetes and is best for container orchestration?
- ○ Azure Container Instances
- ✓ Azure Kubernetes Service
- ○ Azure Batch
- ○ Azure Virtual Machine Scale Sets
Which Azure monitoring is APM for web apps?
- ○ Monitor
- ○ Log Analytics
- ○ Advisor
- ✓ Application Insights
Which Azure compute is spot VM?
- ✓ Spot VM
- ○ Reserved
- ○ Pay-as-you-go
- ○ Dedicated
Which storage service vm persistent disks?
- ✓ Disk
- ○ Blob
- ○ Data Lake
- ○ Table
Which Azure networking service private ip for paas service?
- ○ VPN Gateway
- ○ Service Endpoint
- ✓ Private Endpoint
- ○ VNet Peering
Which Azure identity is for customers?
- ○ MFA
- ✓ B2C
- ○ B2B
- ○ PIM
Which Azure backup backs up VMs?
- ○ Data Box
- ✓ Azure Backup
- ○ Site Recovery
- ○ Snapshot
How to use these questions
AZ-104 is the most hands-on of the associate cloud exams. Reading alone is not enough - build a free-tier subscription and actually create the resources. The questions describe real administrative tasks.
Domain 1 is the heaviest and the most commonly failed. RBAC scope inheritance, custom roles, Azure Policy effects and the difference between management groups, subscriptions and resource groups are all fair game.
Expect case studies. The real AZ-104 includes case-study sections with exhibits that you read once and then answer several questions from. Practise holding a scenario in your head while answering.
Networking questions are usually about which construct solves the problem, not how to configure it - NSG versus Azure Firewall, peering versus VPN gateway, Standard versus Basic load balancer.
Frequently asked questions
How hard is the AZ-104 exam?
It is significantly harder than AZ-900. It is a hands-on administrator exam, it includes case studies, and the 700/1000 pass mark is applied to questions that assume practical Azure experience.
How many questions are on AZ-104?
Typically 40-50 questions in 100 minutes, plus one or more case-study sections whose questions are counted within that total.
Does AZ-104 expire?
Yes. Microsoft associate-level certifications are valid for one year and must be renewed annually through a free online assessment on Microsoft Learn.
Should I take AZ-900 first?
It helps but is not required. AZ-900 gives you the vocabulary that AZ-104 assumes, so it is a cheap and fast way to avoid losing marks to terminology.
Ready to test yourself under exam conditions?
1087 questions across 6 timed mock exams, domain-wise drills, and the same scaled scoring as the real thing. Free, no signup.