Azure Certifications

Appearance

AZ-104 Training Plan ​

📋 Overview ​

This 8-week intensive training plan is designed to prepare you for the Microsoft Certified: Azure Administrator Associate (AZ-104) certification. The plan follows a structured approach with weekly objectives, hands-on labs, and assessment checkpoints.

🎯 Training Objectives ​

By the end of this training plan, you will:

  • Master all five exam domains
  • Complete 40+ hands-on labs
  • Pass practice assessments with 80%+ score
  • Be fully prepared for the AZ-104 exam

📅 Weekly Schedule ​

WeekFocus AreaWeightHours
1Azure Fundamentals & Identity BasicsFoundation10-12
2Identity & Governance Deep Dive20-25%10-12
3Azure Storage15-20%10-12
4Compute Resources - Part 1 (VMs & IaC)20-25%10-12
5Compute Resources - Part 2 (Containers & App Service)20-25%10-12
6Virtual Networking15-20%10-12
7Monitoring & Maintenance10-15%10-12
8Review & Exam PreparationAll10-12

Week 1: Azure Fundamentals & Identity Basics ​

🎯 Learning Objectives ​

  • Understand Azure global infrastructure
  • Navigate the Azure portal effectively
  • Learn Azure Resource Manager concepts
  • Introduction to Microsoft Entra ID

📚 Topics to Cover ​

Day 1-2: Azure Fundamentals

  • Azure regions and availability zones
  • Resource groups and subscriptions
  • Azure Resource Manager (ARM)
  • Azure portal navigation
  • Azure CLI and PowerShell basics

Day 3-4: Microsoft Entra ID Basics

  • Entra ID vs Active Directory Domain Services
  • Tenants and directories
  • User and group management
  • Authentication methods

Day 5: Hands-on Practice

  • Create and organize resource groups
  • Navigate Azure portal
  • Create users and groups in Entra ID

🧪 Labs ​

  1. Create and manage resource groups
  2. Install and configure Azure CLI
  3. Install and configure Azure PowerShell
  4. Create Microsoft Entra users and groups

📖 Microsoft Learn Modules ​

✅ Week 1 Checkpoint ​

  • [ ] Can navigate Azure portal confidently
  • [ ] Understand resource hierarchy (Management Groups → Subscriptions → Resource Groups)
  • [ ] Can use Azure CLI and PowerShell for basic operations
  • [ ] Created users and groups in Entra ID

Week 2: Identity & Governance Deep Dive ​

🎯 Learning Objectives ​

  • Master RBAC and custom roles
  • Configure Azure policies
  • Implement resource locks
  • Understand management groups

📚 Topics to Cover ​

Day 1-2: Role-Based Access Control

  • Built-in roles (Owner, Contributor, Reader)
  • Custom role definitions
  • Role assignment scope
  • Deny assignments
  • Azure RBAC vs Entra ID roles

Day 3-4: Governance

  • Management groups hierarchy
  • Azure Policy definitions
  • Policy initiatives
  • Compliance reporting
  • Resource locks

Day 5: Advanced Identity

  • Self-service password reset (SSPR)
  • Multi-factor authentication (MFA)
  • Conditional Access policies
  • Privileged Identity Management (PIM)

🧪 Labs ​

  1. Create custom RBAC roles
  2. Assign roles at different scopes
  3. Create and assign Azure policies
  4. Configure SSPR and MFA
  5. Implement resource locks

📖 Microsoft Learn Modules ​

✅ Week 2 Checkpoint ​

  • [ ] Can create and assign custom RBAC roles
  • [ ] Understand policy vs initiative vs assignment
  • [ ] Can configure SSPR and MFA
  • [ ] Understand resource lock types and implications

Week 3: Azure Storage ​

🎯 Learning Objectives ​

  • Configure storage accounts
  • Manage blob storage and access tiers
  • Implement Azure Files
  • Configure storage security

📚 Topics to Cover ​

Day 1-2: Storage Accounts

  • Storage account types and performance tiers
  • Replication options (LRS, ZRS, GRS, RA-GRS, GZRS)
  • Access tiers (Hot, Cool, Cold, Archive)
  • Lifecycle management policies

Day 3: Blob Storage

  • Container and blob types
  • Access levels and policies
  • Blob versioning and soft delete
  • Immutable storage

Day 4: Azure Files

  • SMB and NFS file shares
  • Azure File Sync
  • File share snapshots
  • Premium file shares

Day 5: Storage Security

  • Shared access signatures (SAS)
  • Stored access policies
  • Microsoft Entra authentication
  • Private endpoints
  • Storage firewalls

🧪 Labs ​

  1. Create storage accounts with different replication
  2. Configure blob access tiers and lifecycle policies
  3. Create and mount Azure file shares
  4. Configure Azure File Sync
  5. Implement SAS tokens and private endpoints

📖 Microsoft Learn Modules ​

✅ Week 3 Checkpoint ​

  • [ ] Understand storage redundancy options and use cases
  • [ ] Can configure blob lifecycle management
  • [ ] Can set up Azure Files with File Sync
  • [ ] Understand SAS token types and security implications

Week 4: Compute Resources - Part 1 (VMs & IaC) ​

🎯 Learning Objectives ​

  • Deploy VMs with high availability
  • Configure VM Scale Sets
  • Master ARM templates and Bicep
  • Implement VM extensions

📚 Topics to Cover ​

Day 1-2: Virtual Machines

  • VM sizes and series
  • VM images (marketplace, custom, shared)
  • Availability Sets vs Availability Zones
  • Azure Dedicated Hosts
  • VM extensions

Day 3: VM Scale Sets

  • Scale Set configuration
  • Autoscaling rules
  • Rolling upgrades
  • Fault domains and update domains

Day 4-5: Infrastructure as Code

  • ARM template structure
  • Template functions and parameters
  • Bicep syntax and features
  • Deployment modes
  • What-if analysis

🧪 Labs ​

  1. Create VMs with availability sets
  2. Create VMs across availability zones
  3. Configure VM Scale Sets with autoscaling
  4. Deploy resources with ARM templates
  5. Deploy resources with Bicep
  6. Configure VM extensions

📖 Microsoft Learn Modules ​

✅ Week 4 Checkpoint ​

  • [ ] Understand VM sizing and availability options
  • [ ] Can configure VM Scale Sets with autoscaling
  • [ ] Can write and deploy ARM templates
  • [ ] Can write and deploy Bicep files

Week 5: Compute Resources - Part 2 (Containers & App Service) ​

🎯 Learning Objectives ​

  • Deploy containers with ACI
  • Configure Azure Container Registry
  • Manage Azure Kubernetes Service
  • Configure Azure App Service

📚 Topics to Cover ​

Day 1-2: Containers

  • Azure Container Instances (ACI)
  • Container groups
  • Azure Container Registry (ACR)
  • ACR tasks and geo-replication

Day 3: Azure Kubernetes Service

  • AKS cluster architecture
  • Node pools and scaling
  • AKS networking (kubenet, Azure CNI)
  • AKS storage options
  • AKS upgrades

Day 4-5: Azure App Service

  • App Service plans and pricing
  • Web apps deployment
  • Deployment slots
  • Custom domains and SSL
  • App Service authentication
  • Scaling options

🧪 Labs ​

  1. Deploy containers with ACI
  2. Create and use Azure Container Registry
  3. Create and configure AKS cluster
  4. Deploy applications to AKS
  5. Create and configure App Service
  6. Configure deployment slots
  7. Configure custom domains and SSL

📖 Microsoft Learn Modules ​

✅ Week 5 Checkpoint ​

  • [ ] Can deploy and manage containers with ACI
  • [ ] Understand ACR and image management
  • [ ] Can create and manage AKS clusters
  • [ ] Can configure App Service with deployment slots

Week 6: Virtual Networking ​

🎯 Learning Objectives ​

  • Design and implement virtual networks
  • Configure network security
  • Implement DNS solutions
  • Configure connectivity and load balancing

📚 Topics to Cover ​

Day 1: Virtual Networks

  • VNet address spaces and subnets
  • Subnet delegation
  • Service endpoints
  • Private endpoints

Day 2: Network Security

  • Network Security Groups (NSGs)
  • Application Security Groups (ASGs)
  • Azure Firewall
  • DDoS Protection

Day 3: DNS

  • Azure DNS zones (public and private)
  • DNS record types
  • Alias records
  • Custom DNS servers

Day 4: Connectivity

  • VNet peering
  • VPN Gateway
  • ExpressRoute basics
  • Azure Bastion

Day 5: Load Balancing

  • Azure Load Balancer
  • Application Gateway
  • Traffic Manager
  • Azure Front Door

🧪 Labs ​

  1. Create VNets with subnets and service endpoints
  2. Configure NSGs and ASGs
  3. Create Azure DNS zones
  4. Configure VNet peering
  5. Set up VPN Gateway
  6. Configure Azure Load Balancer
  7. Configure Application Gateway

📖 Microsoft Learn Modules ​

✅ Week 6 Checkpoint ​

  • [ ] Can design VNet topology with proper subnetting
  • [ ] Understand NSG rules and priority
  • [ ] Can configure DNS zones and records
  • [ ] Understand load balancing options and use cases

Week 7: Monitoring & Maintenance ​

🎯 Learning Objectives ​

  • Configure Azure Monitor
  • Create alerts and action groups
  • Use Log Analytics and KQL
  • Implement backup and disaster recovery

📚 Topics to Cover ​

Day 1-2: Azure Monitor

  • Metrics and metric alerts
  • Activity logs
  • Diagnostic settings
  • Application Insights
  • Azure Monitor Workbooks

Day 3: Log Analytics

  • Log Analytics workspaces
  • Kusto Query Language (KQL)
  • Data collection rules
  • Azure Monitor Agent

Day 4: Backup

  • Azure Backup overview
  • Recovery Services vaults
  • VM backup and restore
  • Backup policies

Day 5: Disaster Recovery

  • Azure Site Recovery
  • Replication policies
  • Recovery plans
  • Failover testing

🧪 Labs ​

  1. Configure Azure Monitor metrics
  2. Create dashboards and workbooks
  3. Set up alerts and action groups
  4. Create Log Analytics workspace
  5. Write KQL queries
  6. Configure VM backup
  7. Set up Azure Site Recovery

📖 Microsoft Learn Modules ​

✅ Week 7 Checkpoint ​

  • [ ] Can configure monitoring and alerts
  • [ ] Can write basic KQL queries
  • [ ] Understand backup strategies and retention
  • [ ] Can configure disaster recovery with ASR

Week 8: Review & Exam Preparation ​

🎯 Learning Objectives ​

  • Review all exam domains
  • Complete practice assessments
  • Address knowledge gaps
  • Prepare for exam day

📚 Daily Schedule ​

Day 1: Identity & Governance Review

  • Review Entra ID concepts
  • Practice RBAC scenarios
  • Review policy assignments
  • Complete domain practice questions

Day 2: Storage Review

  • Review storage account options
  • Practice blob and file scenarios
  • Review security configurations
  • Complete domain practice questions

Day 3: Compute Review

  • Review VM configurations
  • Practice IaC deployments
  • Review container and App Service
  • Complete domain practice questions

Day 4: Networking Review

  • Review VNet configurations
  • Practice NSG scenarios
  • Review load balancing options
  • Complete domain practice questions

Day 5: Monitoring Review & Full Practice Exam

  • Review monitoring concepts
  • Complete full practice assessment
  • Identify weak areas
  • Final review of weak areas

🧪 Practice Resources ​

  1. Microsoft Learn Practice Assessment
  2. Review all hands-on labs
  3. Complete scenario-based questions
  4. Time yourself on practice exams

✅ Week 8 Checkpoint ​

  • [ ] Scored 80%+ on practice assessments
  • [ ] Reviewed all weak areas
  • [ ] Completed all hands-on labs
  • [ ] Confident with exam format and timing

📊 Progress Tracking ​

Weekly Assessment Targets ​

WeekTarget ScoreActual ScoreNotes
1Complete labs
270% on identity quiz
370% on storage quiz
470% on compute quiz
570% on compute quiz
670% on networking quiz
770% on monitoring quiz
880%+ on full exam

Hands-on Lab Completion ​

  • [ ] Week 1: 4 labs
  • [ ] Week 2: 5 labs
  • [ ] Week 3: 5 labs
  • [ ] Week 4: 6 labs
  • [ ] Week 5: 7 labs
  • [ ] Week 6: 7 labs
  • [ ] Week 7: 7 labs
  • [ ] Total: 41 labs

🎓 Exam Day Preparation ​

One Week Before ​

  • Schedule your exam
  • Review exam policies
  • Ensure valid ID is ready
  • Test your computer (if online proctored)

Day Before ​

  • Light review only
  • Get good sleep
  • Prepare exam environment
  • Review exam logistics

Exam Day ​

  • Arrive early (or log in 30 min before)
  • Read questions carefully
  • Manage your time (100 minutes)
  • Flag and return to difficult questions
  • Review answers if time permits

After the Exam ​

  • Results are immediate (pass/fail)
  • Detailed score report within 24 hours
  • Certificate available in Certification Dashboard
  • Add to LinkedIn profile

🔗 Additional Resources ​

Released under the MIT License.

Copyright © 2025 Azure Certifications Study Guide