AZ-104 Skills Measured Breakdown

Microsoft lists five current AZ-104 skills areas: Manage Azure identities and governance (20–25%), Implement and manage storage (15–20%), Deploy and manage Azure compute resources (20–25%), Implement and manage virtual networking (15–20%), and Monitor and maintain Azure resources (10–15%). Use these ranges as study guidance rather than local bank distribution.

Identity and governance includes Microsoft Entra users and groups, SSPR, RBAC, Azure Policy, resource locks, tags, resource groups, subscriptions, costs, and management groups. Storage includes SAS, access keys, identity-based Azure Files access, redundancy, blob tiers, soft delete, lifecycle management, and storage network security. Compute includes ARM or Bicep, VMs, disks, availability options, scale sets, containers, Azure Container Registry, App Service plans, TLS, custom domains, backups, networking, and deployment slots. Networking includes VNets, subnets, peering, public IPs, UDRs, NSGs, ASGs, Bastion, service endpoints, private endpoints, Azure DNS, and load balancers. Monitoring and maintenance includes Azure Monitor metrics and logs, Log Analytics, alerts, action groups, Network Watcher, Connection Monitor, Recovery Services vaults, Azure Backup, Site Recovery, failover, and backup reports.