Microsoft Azure publishes exactly what the AZ-104 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Domain 1
Manage Azure identities and governance
Microsoft Entra users and groups, access to Azure resources, and subscription-level governance. Official weighting 20–25%.
3 topics in this domain
- Manage Microsoft Entra users and groups
- Manage access to Azure resources
- Manage Azure subscriptions and governance
Domain 2
Implement and manage storage
Storage access control, storage account configuration, and Azure Files and Blob Storage. Official weighting 15–20%.
3 topics in this domain
- Configure access to storage
- Configure and manage storage accounts
- Configure Azure Files and Azure Blob Storage
Domain 3
Deploy and manage Azure compute resources
ARM template and Bicep deployments, virtual machines, containers, and Azure App Service. Official weighting 20–25%.
4 topics in this domain
- Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files
- Create and configure virtual machines
- Provision and manage containers in the Azure portal
- Create and configure Azure App Service
Domain 4
Implement and manage virtual networking
Virtual networks and subnets, secure network access, name resolution, and load balancing. Official weighting 15–20%.
3 topics in this domain
- Configure and manage virtual networks in Azure
- Configure secure access to virtual networks
- Configure name resolution and load balancing
Domain 5
Monitor and maintain Azure resources
Azure Monitor metrics, logs, and alerting, plus backup and disaster recovery. Official weighting 10–15%.
2 topics in this domain
- Monitor resources in Azure
- Implement backup and recovery