The AZ-104 exam is split into five domains, and each one carries a different weight toward your score. Here is how the Microsoft Azure Administrator Associate exam divides its questions.
Domain 1: Manage Azure Identities and Governance (20–25%).
Control who accesses what: RBAC, Entra ID, Azure Policy, and Management Groups.
Domain 2: Implement and Manage Storage (15–20%).
Configure storage accounts, set access controls, manage blob tiers, and automate lifecycle policies.
Domain 3: Deploy and Manage Azure Compute Resources (20–25%).
Deploy virtual machines, configure scale sets, and provision infrastructure using ARM templates and Bicep.
Domain 4: Implement and Manage Virtual Networking (15–20%).
Build VNets, configure NSGs, set up load balancers, DNS zones, and Private Endpoints.
Domain 5: Monitor and Maintain Azure Resources (10–15%).
Set up Azure Monitor alerts, query Log Analytics, configure backup vaults, and plan disaster recovery.
Every question on the AZ-104 exam maps back to one of these five domains, so the Microsoft Azure Administrator Associate exam rewards depth across all of them rather than mastery of just one.