The technology landscape has evolved rapidly in the past decade, and cloud computing is now at the center of digital transformation. One of the key players in this space is Microsoft Azure, a cloud platform that continues to grow and dominate in enterprise environments. To meet the demands of businesses adopting the cloud, Microsoft developed a structured certification path that helps professionals validate their skills and advance their careers.
Among these certifications, the Azure Solutions Architect Expert stands out as a top-tier credential. This certification demonstrates a professional’s ability to design cloud and hybrid solutions that run on Microsoft Azure, covering areas like compute, networking, storage, and security.
However, before you can earn the Azure Solutions Architect Expert certification, you first need to pass the AZ-104 exam, which grants you the Azure Administrator Associate credential. This is a foundational certification that ensures you have hands-on experience with managing Azure services and resources.
The AZ-104 exam is a crucial step for anyone serious about working with Azure, whether you’re aiming to become a cloud administrator, architect, or engineer. It not only provides a strong base of cloud administration skills but also serves as a prerequisite for more advanced roles and certifications.
Why the AZ-104 Certification Matters
The AZ-104, also known as the Microsoft Certified: Azure Administrator Associate exam, is designed for professionals responsible for implementing, monitoring, and maintaining Azure resources. These responsibilities often span across compute, storage, network, identity, and security.
In modern IT environments, cloud administrators play a vital role. They ensure that the infrastructure is scalable, secure, and running efficiently. They are also tasked with provisioning resources, managing access through identity controls, setting up virtual networks, and monitoring the health of services deployed in the cloud.
By earning the AZ-104 certification, you demonstrate that you can confidently manage day-to-day cloud operations using Microsoft Azure. You also show employers that you understand best practices for deploying workloads to Azure securely and cost-effectively.
Beyond the skills validation, the AZ-104 opens doors to new career opportunities. Organizations across various industries are looking for certified Azure professionals to help manage their cloud transformation efforts. Whether you’re already working in IT or planning to enter the field, having this certification on your resume increases your marketability and earning potential.
How AZ-104 Fits into Microsoft’s Certification Ladder
Microsoft has structured its certifications to match real-world job roles. This helps professionals choose the right certifications based on their career goals. The path typically begins with foundational certifications and progresses to associate and expert levels.
Here is how the AZ-104 certification fits into the overall Azure certification path:
- AZ-900 (Azure Fundamentals): This is an entry-level certification for individuals new to cloud computing. It covers general cloud concepts and an overview of Azure services. While not mandatory for taking the AZ-104, it’s a great starting point for absolute beginners.
- AZ-104 (Azure Administrator Associate): This is the associate-level certification focused on managing Azure environments. It requires hands-on experience and is essential for individuals pursuing careers as cloud administrators or operations engineers.
- AZ-305 (Azure Solutions Architect Expert): This is the expert-level certification. Once you’ve passed the AZ-104, you become eligible to attempt the AZ-305. This certification focuses on designing end-to-end Azure solutions that meet specific business requirements.
By starting with the AZ-104, you build a strong foundation in managing cloud infrastructure, which prepares you for higher-level design and architecture tasks covered in the AZ-305.
Why Learn Azure Now?
Microsoft Azure has become one of the most widely adopted cloud platforms in the world. It’s used by startups, large enterprises, government agencies, and educational institutions alike. With hundreds of services and a global infrastructure, Azure offers solutions for just about every business need, from simple web hosting to advanced AI and machine learning.
Microsoft continues to invest heavily in Azure, releasing new features and expanding its services at a rapid pace. As a result, organizations are constantly on the lookout for IT professionals who understand Azure and can manage its resources effectively.
Learning Azure now positions you at the forefront of the cloud computing revolution. It gives you the skills to work with modern technologies, automate infrastructure deployment, scale applications globally, and ensure security compliance in cloud environments.
From a career standpoint, having Azure skills makes you more competitive in the job market. As cloud adoption increases, so does the demand for certified professionals who can help businesses transition to and manage cloud infrastructure. Roles like cloud administrator, systems engineer, DevOps engineer, and security analyst all benefit from Azure knowledge.
High Demand and Better Pay
The demand for cloud professionals is only increasing, and certifications like the AZ-104 are becoming a key differentiator for job seekers. Employers see these certifications as proof that a candidate has real, practical skills.
According to industry salary surveys, Azure administrators can earn between 80,000 and 120,000 USD per year, depending on experience, location, and specific job responsibilities. In some regions and roles, salaries can go even higher.
Certified professionals also tend to have better career progression, with more opportunities for promotions and higher-level responsibilities. In a competitive job market, having an Azure certification like the AZ-104 shows that you’re serious about your career and willing to invest the time to learn cutting-edge technologies.
Learn Azure with ExamLabs
Preparing for the AZ-104 exam requires a well-structured study plan and access to reliable resources. That’s where ExamLabs comes in.
ExamLabs offers high-quality Azure training designed to help you succeed in the AZ-104 exam. Their courses are aligned with Microsoft’s exam objectives and are created by experienced instructors with real-world Azure expertise.
With ExamLabs, you get access to:
- On-demand video lessons that walk you through each topic covered on the exam
- Practice exams that simulate the actual test environment, helping you identify knowledge gaps
- Interactive quizzes after each module to reinforce what you’ve learned
- Hands-on labs and exercises to give you practical experience with Azure tools and services
- Personalized coaching and support to keep you on track
These features are designed to help both beginners and experienced IT professionals build their skills and confidence as they prepare for the exam.
Ideal for Beginners and Experienced IT Professionals
Whether you’re just beginning your IT career or have years of experience working in on-premises environments, the AZ-104 is an accessible and valuable certification.
If you’re new to Azure or the cloud in general, the AZ-104 course on ExamLabs starts with the fundamentals and gradually builds up to more complex tasks. The explanations are clear, and the hands-on labs give you the chance to try out what you’re learning in a safe, sandboxed environment.
If you already have experience in system administration, networking, or virtualization, you’ll find that many of the concepts in the AZ-104 overlap with what you already know. The course will help you apply that knowledge in a cloud-native context using Azure services.
No matter your background, ExamLabs helps make Azure approachable and manageable. The flexible learning pace means you can study during lunch breaks, on weekends, or whenever it fits your schedule.
Try ExamLabs with a Free Trial
If you’re unsure about committing right away, ExamLabs offers a seven-day free trial. This gives you access to the full learning platform, so you can explore the content, try out a few lessons, and get a feel for the teaching style.
During the trial period, you can see how the platform works, check out practice questions, and begin your study plan for the AZ-104. It’s a great way to start preparing without making a financial commitment upfront.
Once you’re confident that the course is a good fit, you can choose a monthly or yearly subscription based on your learning goals and timeline.
Getting Started with AZ-104
The AZ-104 exam is more than just a certification—it’s a gateway to a rewarding career in cloud computing. By passing this exam, you gain the skills needed to manage real-world cloud infrastructure and prepare yourself for more advanced roles and certifications.
With Azure’s rapid growth and continued adoption across industries, now is the perfect time to get started. Whether you’re aiming for a new job, a promotion, or just want to future-proof your skillset, earning your Azure Administrator Associate certification is a smart investment.
Using a trusted training platform like ExamLabs can make your journey smoother, more structured, and more effective. The resources, hands-on labs, and practice tests provided by ExamLabs are specifically designed to help you master Azure and pass the AZ-104 exam with confidence.
In the next section, we’ll dive into the structure of the AZ-104 exam itself and explore the key topics it covers—so you know exactly what to expect and how to prepare.
Let’s continue your journey toward becoming a certified Azure professional.
Deep Dive into the AZ-104 Exam – What You Need to Know
What is the AZ-104 Exam?
The AZ-104 exam, officially titled Microsoft Azure Administrator, is a certification test that assesses your ability to manage Azure-based cloud environments. It’s a hands-on, role-based certification designed for IT professionals who are responsible for implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks in a cloud environment.
This exam plays a central role in Microsoft’s Azure certification pathway and is often the first major milestone for those pursuing advanced Azure credentials. Whether you are a systems administrator transitioning to the cloud or an aspiring cloud professional, AZ-104 is your gateway to working confidently with Azure infrastructure.
After passing the AZ-104, you will earn the Azure Administrator Associate certification. This credential verifies that you can manage Azure resources in a production environment and gives you the foundation necessary to move on to the AZ-305 Solutions Architect Expert exam.
Who Should Take the AZ-104 Exam?
The AZ-104 exam is ideal for individuals who have a background in IT and are looking to expand their skills into the cloud domain. If you are currently working in roles like system administrator, support engineer, network administrator, or DevOps associate, this certification is a natural progression for your career.
While there are no strict prerequisites for taking the AZ-104, candidates should ideally have:
- A general understanding of networking, virtualization, and storage concepts
- Familiarity with operating systems, especially Windows and Linux
- Basic experience using PowerShell or Azure CLI for managing infrastructure
- Practical knowledge of using the Azure Portal and tools like Azure Resource Manager (ARM)
You don’t need to be an expert before you start, but hands-on practice is important. That’s why platforms like ExamLabs are useful—they combine video instruction with practice labs to help you build real-world experience as you learn.
How is the AZ-104 Exam Structured?
The AZ-104 exam typically consists of 40 to 60 questions. The exact number may vary because Microsoft frequently updates exams to keep up with changes in Azure.
Here are some of the question formats you might encounter:
- Multiple choice
- Drag-and-drop
- Case studies
- Interactive scenarios
- Commands and scripting questions (via CLI or PowerShell)
The exam is timed, and candidates usually have 150 minutes to complete it. The passing score is 700 out of 1000. Your performance in each domain is assessed separately, and Microsoft provides feedback in the score report on areas that may need improvement.
Cost and Scheduling
As of now, the AZ-104 exam costs around 165 USD, although pricing can vary slightly depending on your location. You can schedule the exam through Pearson VUE, either as an in-person proctored exam at a test center or as an online proctored exam from your home or office.
When scheduling online, be sure to test your system ahead of time to avoid technical issues during the exam. Also, make sure your workspace is clean, well-lit, and free of distractions. Microsoft is strict about its online proctoring policies.
What Topics Are Covered on the AZ-104 Exam?
The AZ-104 exam focuses on six main subject areas. Each domain represents a real-world responsibility that an Azure administrator would encounter regularly. Understanding the weight of each domain helps you prioritize your study efforts accordingly.
Here’s a breakdown of the AZ-104 exam domains:
1. Manage Azure Identities and Governance (15–20%)
This section tests your ability to manage users, groups, and role-based access control (RBAC) in Azure. You’ll also be asked about Azure Active Directory (Azure AD), which is the core identity service used across all Microsoft cloud services.
Key topics include:
- Creating and managing Azure AD users and groups
- Implementing RBAC to control access to Azure resources
- Managing subscriptions, resource groups, and policies
- Using Azure Blueprints to ensure consistent deployments
- Configuring multi-factor authentication (MFA)
Identity and governance are foundational to security in the cloud. Misconfigurations here can lead to data leaks or unauthorized access. Be sure you understand the difference between Azure AD roles and Azure RBAC, and when to use each.
2. Implement and Manage Storage (15–20%)
Storage is a key component of any cloud infrastructure, and this domain focuses on provisioning and managing different types of storage solutions.
Topics covered include:
- Creating and configuring storage accounts
- Implementing blob containers, file shares, and tables
- Managing data access using shared access signatures (SAS)
- Configuring Azure Storage replication options
- Implementing Azure Storage security and lifecycle management
- Import/export data using tools like AzCopy or Azure Data Box
You should understand how to work with storage tiers (hot, cool, archive) and when to use them for cost optimization. Familiarity with performance levels (standard vs. premium) and encryption settings is also important.
3. Deploy and Manage Azure Compute Resources (20–25%)
This is one of the most important and heavily weighted domains in the exam. Azure compute resources power most services in the cloud, from web servers to databases to containerized applications.
Expect questions about:
- Deploying and managing virtual machines (VMs)
- Configuring VM sizes, storage, availability sets, and scale sets
- Managing VM backups and snapshots
- Creating and configuring Azure App Services for web applications
- Deploying containerized apps using Azure Container Instances (ACI) or Azure Kubernetes Service (AKS)
Hands-on experience with deploying and managing VMs through the Azure Portal, PowerShell, or CLI will be incredibly valuable here. Make sure you understand how to automate deployments using ARM templates or Bicep.
4. Configure and Manage Virtual Networking (25–30%)
Networking is the highest-weighted domain in the exam, reflecting how essential connectivity and network configuration are in Azure environments.
Topics you’ll need to understand include:
- Configuring virtual networks (VNets), subnets, and address spaces
- Creating and managing network security groups (NSGs)
- Configuring Azure DNS and private endpoints
- Implementing virtual network peering
- Configuring load balancers, firewalls, and VPN gateways
- Setting up ExpressRoute and hybrid networking connections
Understanding the difference between public and private IPs, how traffic flows within Azure, and how to control traffic using routing tables and NSGs is crucial for this part of the exam.
5. Monitor and Back Up Azure Resources (10–15%)
Monitoring ensures your Azure resources are functioning properly, and backup provides a safety net for critical data and applications. This domain focuses on how to track, audit, and recover cloud resources.
Topics include:
- Configuring and analyzing Azure Monitor logs and metrics
- Setting up alerts and diagnostics
- Using Azure Log Analytics for insights
- Implementing Azure Backup for VMs and workloads
- Creating and testing recovery plans using Azure Site Recovery
You should know how to use tools like Azure Monitor, Application Insights, and Network Watcher to gain visibility into the health and performance of your environment.
Study Tips for the AZ-104 Exam
Now that you know what the exam covers, here are some tips to help you prepare effectively:
- Use ExamLabs for structured video lessons and guided labs. Their content aligns with Microsoft’s objectives and provides real-world examples.
- Create a free Azure account and spend time in the Azure Portal. Practice creating VMs, setting up storage, configuring networks, and deploying web apps.
- Take practice exams to assess your knowledge and get comfortable with the question format. ExamLabs offers these as part of their training package.
- Read Microsoft Learn documentation for deeper insights and updates on specific services.
- Join forums and study groups to share resources and ask questions.
- Don’t just memorize—practice. The exam tests real-world skills, not just theory.
Managing Azure Identities and Governance for the AZ-104 Exam
One of the foundational topics for any cloud administrator is identity and access management. In Azure, identity governs who has access to what, while governance ensures that resources are created and managed according to organizational standards. This section of the AZ-104 exam accounts for roughly 15–20% of the questions, so it’s essential to fully understand its components.
Overview of Identity and Governance in Azure
Azure provides a robust set of identity and governance tools to help organizations maintain secure and well-regulated cloud environments. You’ll need to understand how these tools work together to protect data, streamline permissions, and enforce policies across services.
Here are the key areas covered:
- Azure Active Directory (Azure AD)
- Role-Based Access Control (RBAC)
- Azure Subscriptions and Resource Groups
- Azure Policy and Blueprints
- Multi-Factor Authentication (MFA)
Each topic builds on the others, creating a layered approach to managing resources and access in Azure.
Azure Active Directory (Azure AD)
Azure AD is Microsoft’s cloud-based identity and access management service. It enables users to sign in and access both Microsoft cloud services and thousands of third-party SaaS applications.
Key Concepts in Azure AD
Users and Groups
Users in Azure AD are typically individual people, each with their own set of login credentials. Groups are collections of users used to apply policies or permissions at scale.
You’ll need to know how to:
- Create users manually through the Azure portal
- Assign users to groups.
- Set user location and licensing.g
- Configure group types (security vs. Microsoft 365)
- Manage dynamic membership rules for automatic group assignment.t
Creating users is a straightforward process, but real-world scenarios often involve syncing on-premises identities using Azure AD Connect. Understanding how that sync works (and how to troubleshoot it) can be helpful, though it’s not heavily tested on AZ-104.
Azure AD Roles vs. Azure RBAC
One of the most common sources of confusion is the difference between Azure AD roles and Azure RBAC roles.
- Azure AD roles control access to Azure AD itself (like managing users, groups, and devices).
- Azure RBAC roles manage access to Azure resources (like VMs, storage accounts, etc.).
You’ll need to know which role type to apply for based on the task. For example, assigning the User Administrator role in Azure AD lets someone manage user creation, but doesn’t permit them to spin up virtual machines unless they’re granted RBAC rights.
Devices and Identity Protection
Azure AD also manages device identities. Devices like laptops, phones, or desktops can be registered or joined to Azure AD. This enables conditional access policies, where access to cloud services can depend on the device’s health or compliance status.
You should also be familiar with:
- Device registration vs. device join
- Conditional access policies
- Identity Protection (risk-based sign-ins and user risk detection)
These tools help prevent compromised accounts from accessing sensitive systems.
Role-Based Access Control (RBAC)
RBAC is the system used in Azure to assign granular access permissions to resources. Unlike traditional IT roles, Azure RBAC lets you specify who can access what and at what level (subscription, resource group, or resource).
Core RBAC Concepts
- Security Principal: The object being granted access (user, group, service principal, or managed identity)
- Role Definition: A set of permissions (e.g., Reader, Contributor, Owner)
- Scope: The level at which access is granted (e.g., resource group, subscription)
Understanding how these three components interact is critical for the AZ-104 exam.
You’ll need to practice how to:
- Assign RBAC roles through the portal, PowerShell, or Azure CLI
- View effective permissions for a user or group.
- Remove or modify the role assignment.s
- Use custom roles when built-in roles don’t fit your needs.s
For example, if you want a user to have read-only access to a specific storage account, you’d assign the Reader role at the scope of that storage account.
Built-in Roles to Know
There are over 70 built-in roles in Azure, but the exam focuses mainly on a few key ones:
- Owner: Full access, including assigning roles
- Contributor: Full access except role assignments
- Reader: View-only access
- User Access Administrator: Can manage access to Azure resources
Other roles, like Virtual Machine Contributor or Storage Account Contributor, are more specialized but may appear on scenario-based questions.
Azure Subscriptions and Resource Groups
Subscriptions
An Azure subscription is a logical container for billing and management purposes. It groups resources and tracks their usage. Organizations may use multiple subscriptions to separate environments (e.g., production, development) or business units.
You should understand:
- How to create and manage subscriptions
- How to assign subscription-level roles
- How to associate subscriptions with management groups for hierarchy
Resource Groups
Resource groups are containers that hold related Azure resources. When you delete a resource group, all the resources within it are also deleted, so it’s important to structure them wisely.
You’ll need to know how to:
- Create resource groups
- Move resources between groups.
- Apply tags to group and organize resources.s
- Manage access at the resource group level.l
A common exam scenario might involve giving a user access to resources in one group but not another, or moving resources between groups for better organization.
Azure Policy
Azure Policy is used to enforce organizational standards and assess compliance at scale. It allows you to define rules that Azure resources must follow — for example, restricting the deployment of VMs in certain regions or requiring tagging on all resources.
Key things to understand:
- Policy definitions: The rules being applied
- Initiatives: A collection of policies grouped together
- Assignments: The act of applying a policy or initiative to a specific scope
You can assign policies at different levels (management group, subscription, resource group) depending on how broadly they should apply.
The exam may ask you to identify which policy would prevent developers from deploying public IP addresses or how to ensure all storage accounts are encrypted.
Azure Blueprints
Blueprints are a way to automate the setup of environments according to pre-defined governance and compliance requirements. A blueprint can include:
- Role assignments
- Policy assignments
- Resource templates
- Resource groups
They are especially useful for setting up standardized environments for different teams or projects.
Blueprints are being gradually phased out in favor of Deployment Stacks, but they’re still relevant for the exam. You should understand:
- How to create and publish a blueprint
- How to assign it to a subscription
- How to update and version a blueprint
The exam won’t expect deep knowledge of JSON templates, but understanding the structure of a blueprint assignment is helpful.
Multi-Factor Authentication (MFA)
Multi-Factor Authentication adds a layer of security by requiring users to provide a second form of verification, like a code from a mobile app or biometric data.
Azure MFA can be:
- Enabled per-user
- Enforced through Conditional Access
- Integrated with policies for privileged roles
You’ll need to know how to:
- Configure MFA settings
- Require MFA for high-privilege roles.
- Troubleshoot common MFA issues (like device registration or token expiration)
While the exam won’t test deeply on MFA configurations, knowing how to enable and enforce it through conditional access is important.
Real-World Scenarios to Practice
To prepare for the AZ-104 exam, you should explore the following scenarios in a test environment (you can use Azure’s free tier for this):
- Create a user in Azure AD and assign them to a security group
- Use RBAC to grant that group contributor access to a resource group.
- Create a policy to require tags on all resources.
- Assign the policy to a subscription and check compliance.
- Deploy a VM using a template inside a blueprin.t
- Set up MFA for a specific group of users.s
Hands-on practice like this not only reinforces your knowledge but also helps you feel confident during scenario-based questions on the exam.
Summary of Key Terms and Tools
Here’s a quick summary of the tools and concepts you should be comfortable with:
- Azure AD: Users, groups, roles, and conditional access
- RBAC: Role assignments, scopes, custom roles
- Resource groups and subscriptions: Structure, organization, access
- Azure Policy: Definitions, initiatives, compliance reporting
- Blueprints: Automated deployment templates with built-in governance
- MFA: Security enhancement using two-factor verification
Studying This Section with ExamLabs
If you’re using ExamLabs to prepare for AZ-104, this domain is covered extensively in their video modules, lab exercises, and practice exams. You can watch walkthroughs on identity setup, follow along with guided labs on role assignment, and test your understanding with realistic scenario questions.
ExamLabs also offers quizzes at the end of each section to reinforce learning, making it easier to identify any gaps in your knowledge before moving on.
Part 4: Implementing and Managing Azure Storage
Azure storage is one of the most widely used services in the cloud. Whether you’re hosting an application, storing user data, or managing virtual machine disks, understanding Azure’s storage options is essential. In the AZ-104 exam, storage topics make up around 10–15% of the content. This section helps you develop a solid foundation in Azure storage services and teaches you how to manage them effectively.
Overview of Azure Storage Services
Azure provides several types of storage accounts, each designed for different needs. Key services include:
- Blob storage
- File storage (Azure Files)
- Disk storage (used with VMs)
- Queue storage
- Table storage
While you’re not expected to become an expert in every type, knowing their purpose, how to configure them, and how they fit into real-world use cases is vital.
Azure Storage Accounts
Before using any of the storage services, you need a storage account. A storage account is a top-level container that allows you to group different types of storage services.
Types of Storage Accounts
Azure offers multiple storage account types:
- General-purpose v2 (most common) – Supports all storage services (blob, files, queues, tables)
- General-purpose v1 (legacy) – Older version, limited features
- Blob storage account – Optimized for storing blobs only
The general-purpose v2 account is the most versatile and supports the latest features and pricing models.
Replication Options
Storage accounts also offer different replication options to ensure durability and availability:
- LRS (Locally-redundant storage): Data is replicated three times within a single data center
- GRS (Geo-redundant storage): Replicates data to a secondary region for disaster recovery
- ZRS (Zone-redundant storage): Data is replicated across availability zones in the same region
- RA-GRS (Read-access geo-redundant storage): Same as GRS, but allows read access to the secondary region
The choice of replication affects cost and resilience. You should be able to identify which option is best for a given business need on the exam.
Managing Azure Blob Storage
Blob storage is used to store unstructured data like images, videos, backups, and logs. It’s scalable and cost-effective, making it suitable for many applications.
Blob Storage Basics
Blobs are organized into containers inside a storage account. You can think of containers as folders and blobs as files.
Blob types include:
- Block blobs – Ideal for large files
- Append blobs – Optimized for append-only scenarios like logs
- Page blobs – Used for VHDs and virtual machine disks
Access Tiers
Azure blob storage offers three access tiers:
- Hot: Optimized for frequent access, higher storage cost
- Cool: Lower cost for infrequently accessed data, higher retrieval costs
- Archive: Lowest cost, data is offline and must be rehydrated to access
The exam may include scenarios where you need to determine the best tier based on usage patterns.
Securing Blob Storage
There are multiple ways to secure blob storage:
- Shared access signatures (SAS): Grant limited-time access
- Azure RBAC: Control who can manage or read blob data
- Storage account keys: Full access to the storage account
- Private endpoint: Secure access using private IPs
You should know how to generate SAS tokens, configure access policies, and restrict access to specific users or networks.
Azure File Storage (Azure Files)
Azure Files provides fully managed file shares in the cloud. These shares can be mounted by VMs or accessed via SMB or REST API.
Key Features
- Supports Windows and Linux VMs
- Can be mounted on-premises using Azure File Sync
- Offers SMB and NFS support
Azure Files is often used for lift-and-shift scenarios, centralized file storage, and hybrid environments.
Azure File Sync
Azure File Sync allows you to sync files between an on-premises file server and Azure Files. It supports:
- Multi-site sync
- Cloud tiering (hot files stay on-prem, cold files go to Azure)
- Backup and disaster recovery through integration with Recovery Services
This feature is very relevant for hybrid cloud scenarios, so expect exam questions that involve setting up Azure File Sync and configuring sync groups.
Azure Disk Storage
Azure VMs use disk storage for their operating systems and data. Disk types include:
- OS Disk: Required for booting the VM
- Data Disk: Optional, for storing app data, logs, etc.
- Temporary Disk: Ephemeral storage for the VM, not persisted after a restart
Disk Types
Azure offers several managed disk performance tiers:
- Standard HDD: Budget-friendly, good for infrequent access
- Standard SSD: Better performance, still economical
- Premium SSD: High-performance, low-latency disks
- Ultra Disk: Extremely high performance, best for heavy I/O workloads
You’ll need to know how to:
- Attach and detach disks to VMs
- Resize and manage disk performance.
- Configure encryption (by default, managed disks are encrypted)
Azure Disk Encryption is integrated with Azure Key Vault, allowing for customer-managed keys.
Table and Queue Storage
While blob and file storage are more commonly used, Azure also provides specialized services for structured data and messaging.
Table Storage
Azure Table Storage is a NoSQL key-value store. It’s simple, fast, and scalable for scenarios like device data, logs, and sensor data.
Key points:
- Schema-less data model
- Low-latency access
- Supports the OData protocol
Table Storage is a low-cost alternative to Azure Cosmos DB for some use cases.
Queue Storage
Azure Queue Storage provides message queuing for communication between application components. It supports:
- Storing millions of messages
- FIFO behavior
- Integration with Azure Functions or other compute services.
This service is useful for decoupling application components and handling background tasks.
Managing Storage Using the Azure Portal, CLI, and PowerShell
For the exam, you should be comfortable managing storage through all major interfaces:
- Azure Portal: Intuitive UI for managing accounts, blobs, files, disks, and access
- Azure CLI: Useful for automation and scripting (az storage commands)
- Azure PowerShell: Great for administrators managing resources in bulk
Expect questions where you need to choose the best tool or command to accomplish a task. Familiarity with command syntax is helpful, but not deeply tested.
Monitoring and Securing Storage
Monitoring
Azure provides several tools to monitor storage accounts:
- Azure Monitor: Centralized platform for metrics and alerts
- Activity Log: Tracks management operations
- Metrics: Shows storage capacity, transactions, latency, and errors
- Diagnostic settings: Enables logging to Log Analytics or Event Hubs
You’ll need to know how to enable diagnostics and configure alerts when thresholds are breached (e.g., high latency or failed requests).
Security
Azure storage can be secured using a mix of native tools:
- Azure Defender for Storage: Monitors for threats like malware uploads or data exfiltration
- Firewalls and virtual networks: Restrict access to specific IP ranges or VNets
- Private endpoints: Provide secure connectivity over the Azure backbone
- Encryption: Storage is encrypted at rest by default using Microsoft-managed keys; you can configure customer-managed keys using Azure Key Vault
The exam may present scenarios involving securing sensitive data and restricting access based on IP or identity.
Common Storage Scenarios on the AZ-104 Exam
Here are some examples of real-world scenarios you may encounter on the exam:
- A company wants to store backup files that are rarely accessed. Which storage tier should they use? (Answer: Archive)
- You need to allow an external application to access blobs for one hour only. What should you configure? (Answer: Shared Access Signature)
- A developer needs read-only access to a blob container. What’s the best way to grant this? (Answer: Assign the Storage Blob Data Reader role)
- A VM is running slowly due to disk latency. How can you improve performance? (Answer: Upgrade to a Premium SSD or Ultra Disk)
Being able to analyze these scenarios and apply your knowledge will greatly increase your chances of passing the exam.
Preparing for This Section with ExamLabs
ExamLabs provides hands-on labs, guided videos, and practice questions that cover all the storage topics discussed in this section. You’ll find exercises like:
- Creating and configuring a storage account
- Managing blob containers and setting access levels
- Deploying a VM with managed disks and configuring encryption
- Setting up Azure File Sync with on-premises servers
Using ExamLabs as your study platform helps you move from theory to practice, making you better prepared for the certification and for real-world storage tasks in Azure.
