Do not judge a question bank by its size. What matters for the AZ-104 exam is validity and accuracy, and TorrentExam's Microsoft Azure Administrator bank is built on exactly that — expert-verified answers over inflated question counts.
Microsoft AZ-104 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Microsoft Azure Administrator |
| Exam Number: | AZ-104 |
| Certificate Validity Period: | 1 year (renewable free via online assessment) |
| Real Exam Qty: | 40–60 |
| Exam Price: | USD 165 |
| Exam Duration: | 120 minutes |
| Related Certifications: | Microsoft Certified: Azure Solutions Architect Expert Microsoft Certified: Azure DevOps Engineer Expert |
| Passing Score: | 700 / 1000 |
| Available Languages: | German, Chinese (Simplified), Italian, English, French, Portuguese (Brazil), Chinese (Traditional), Korean, Spanish, Japanese |
| Exam Format: | Case studies, Multiple choice, Drag-and-drop, Multiple response, Performance-based labs |
| Recommended Training: | Instructor-Led Course AZ-104T00 Microsoft Learn Free Learning Path |
| Exam Registration: | Pearson VUE Microsoft Learn Registration |
| Sample Questions: |  |
| Exam Way: | Online proctored or Onsite at authorized test centers |
| Pre Condition: | No mandatory prerequisites; recommended: 6+ months hands-on experience administering Azure, familiarity with Azure Portal, PowerShell, Azure CLI, ARM templates or Bicep, networking, servers, and virtualization concepts |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-104 |
Microsoft AZ-104 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Manage Azure identities and governance | 20–25% | - Manage access to Azure resources
|
| Topic 2: Implement and manage virtual networking | 15–20% | - Secure network access
|
| Topic 3: Monitor and maintain Azure resources | 10–15% | - Monitor resources and performance
|
| Topic 4: Deploy and manage Azure compute resources | 20–25% | - Manage containerized workloads
|
| Topic 5: Implement and manage storage | 15–20% | - Configure storage accounts
|
AZ-104 Exam Facts: What to Know Before You Commit
Microsoft recommends the following official training resources:
Choose the format that fits your schedule, then reinforce it with regular question practice.
The latest exam information lists 40–60 questions for the AZ-104 exam, to be completed within 120 minutes minutes. Knowing the format cold is half the battle — timed practice handles the other half.
These are the core domains of the Microsoft Azure Administrator blueprint:
- Manage Azure identities and governance (20–25%)
- Implement and manage storage (15–20%)
- Deploy and manage Azure compute resources (20–25%)
The remaining domains appear in the full official outline, all of which our bank addresses.
Microsoft sets the following prerequisites for the Microsoft Azure Administrator: No mandatory prerequisites; recommended: 6+ months hands-on experience administering Azure, familiarity with Azure Portal, PowerShell, Azure CLI, ARM templates or Bicep, networking, servers, and virtualization concepts.
Check the current requirements on the official certification page before scheduling.
Validity is maintained, not assumed. Our dedicated IT team checks the system and pushes new versions to the site continuously, so the AZ-104 bank on sale is always the latest — with expert-verified answers across the Microsoft Azure Administrator objectives. You can also pick the format that fits your devices: an easy-to-read PDF, a Windows PC test engine, or a browser-based online engine for Windows, Mac, Android, and iOS. Questions? Support replies to instant messages and emails within two hours.
Upon successful payment, the complete materials are available immediately: a download link on screen and an automatic email to your mailbox within about a minute. If nothing arrives within two hours, check spam and contact support. Every purchase carries a 365-day service warranty — you can download the latest valid version free whenever it is released, no matter when you bought — and a 50% renewal discount follows when the period ends.
Use the official registration channels below:
Pick a center or online appointment that suits your timeline, and book early for the best selection of dates.
Yes, we keep our promises — in writing. If you fail the corresponding exam within 60 days of purchase, email us a scanned copy of your enrollment slip and your official Score Report PDF within two days of the exam date; we process verified refunds in full within seven days. The exclusions are plain: exams taken within three days of purchase, candidate names that do not match the payer, and free or expired products. If you prefer, we will exchange your product for two others of equal value at no charge.
As of the latest information, the AZ-104 exam's passing score is 700 / 1000 and the registration fee is USD 165. Microsoft can adjust either figure, so verify both on the official site before you book.
Microsoft Azure Administrator Sample Questions:
You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.
You create a private Azure DNS zone named adatum.com. You configure the adatum.com zone to allow auto registration from VNET1.
Which A records will be added to the adatum.com zone for each virtual machine? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
Correct Answer:
Explanation:
Detailed Explanation
Azure Private DNS zone auto registration creates A records using each virtual machine ' s private IP address on the linked virtual network only; it never registers a VM ' s public IP address, regardless of any in-guest DNS suffix configured in Windows Server, which has no bearing on the Azure platform ' s auto-registration behavior. Both VM1 and VM2 are attached to VNET1, which is linked to the adatum.com zone with auto registration enabled, so both receive an A record pointing to their respective private IP (10.1.0.4 and 10.1.0.5).
The differing in-guest DNS suffixes (Adatum.com vs. Contoso.com) shown in the table are a distractor - auto-registered record names are derived from the VM ' s Azure hostname within the zone, not from any client-side DNS suffix setting. This matches the source document ' s answer key.
Official Reference
Azure Private DNS - Autoregistration - https://learn.microsoft.com/en-us/azure/dns/private-dns- autoregistration
You have an Azure subscription that contains a storage account named storage1. The subscription is linked to a Microsoft Entra tenant named contoso.com that syncs with an on-premises Active Directory domain. The domain contains the security principals shown in the following table.
In the Microsoft Entra tenant you create a user named User2.
The storage1 account contains a file share named share! and has the following configurations.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point
Exhibit
Exhibit
Correct Answer:
Explanation:
Detailed Explanation
Azure RBAC role assignments (IAM) can only target objects that exist in Microsoft Entra ID with a resolvable object ID - users, groups, service principals, or managed identities. User1 is a hybrid identity synchronized into Microsoft Entra ID, so Azure Files data-plane roles (Storage File Data SMB Share Contributor/Reader/Elevated Contributor) can be assigned to it - statement 1 is Yes. Computer1 is a plain on- premises AD DS ' Computer ' object; Microsoft Entra Connect does not synchronize generic AD computer accounts as assignable directory principals, so no matching Entra ID object exists to select in IAM, and the role assignment cannot be created - statement 2 is No. User2 is a normal (cloud-only) Entra ID user object, and RBAC assignment only requires a valid directory object - it does not validate whether the user also has an on-premises AD twin for actual Kerberos authentication - so the assignment itself can be created - statement 3 is Yes.
Official Reference
Azure Files identity-based authentication over SMB for AD DS - https://learn.microsoft.com/en-us/azure
/storage/files/storage-files-identity-auth-active-directory-enable
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You have a CSV file that contains the names and email addresses of 500 external users.
You need to create a guest user account in contoso.com for each of the 500 external users.
Solution: From Azure AD in the Azure portal, you use the Bulk create user operation.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: B 🗳️
Explanation: Only visible for TorrentExam members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: B 🗳️
Explanation: Only visible for TorrentExam members. You can sign-up / login (it's free).
Your company has an Azure subscription named Subscription1.
The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016.
Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.
You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:
The DNS Manager console
Azure PowerShell
Azure CLI 2.0
You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.
What should you use?
- A. the DNS Manager console
- B. the Azure portal
- C. Azure PowerShell
- D. Azure CLI
Correct Answer: C 🗳️
Explanation: Only visible for TorrentExam members. You can sign-up / login (it's free).
Viewing page 1 out of 96 pages.
Viewing questions 1-5 out of 480 questions.
Dwight 
Augustine 
Carey 
Adela 
Marcus 
Lyle 
King 
Jean 
Margaret 
Nigel 
Ivan 
Gale 
Kenneth 
Mandy 
Hayden 
Jo 
