Exampractice
Microsoft & Azure

How Hard Is the Azure Administrator Exam?

An honest look at AZ-104 difficulty — the question styles, the domains that trip candidates up, and why people actually fail the Azure Administrator exam.

Daniel Carter · 9 min read
Signpost showing five climbing routes of different difficulty, each labelled with an AZ-104 exam domain

Short answer: the Azure Administrator exam (AZ-104) is genuinely difficult for candidates without hands-on Azure experience, and moderately challenging even for working administrators. It is a significant step up from Azure Fundamentals (AZ-900): the exam assumes you can actually operate Azure — identities, storage, compute, networking and monitoring — not merely describe it. Most people who fail do so on breadth and on the networking domain, not on trick questions.

That is the honest verdict. The rest of this article unpacks why AZ-104 has the reputation it does: what the exam actually asks, which domains punish weak preparation hardest, what the scoring really means, and the failure patterns that show up again and again. It deliberately stops short of telling you how to study — that is covered step by step in our guide to preparing for the Azure Administrator certification.

What makes AZ-104 harder than it looks on paper

On paper, AZ-104 is a 100-minute, proctored, associate-level exam from Microsoft with no formal prerequisites and a passing score of 700 out of 1,000. Nothing about that sounds alarming. The difficulty lives in three places the spec sheet doesn't show.

First, the breadth. The exam covers five domains — managing Azure identities and governance, implementing and managing storage, deploying and managing compute resources, virtual networking, and monitoring and maintaining resources. Each of those is a full job responsibility in a real organisation. You are being examined on the working surface of an entire role, and weakness in any one domain can drag your scaled score under 700 even when the others are solid.

Second, the tooling expectation. Microsoft lists no formal prerequisites, but it does recommend experience with the Azure portal, PowerShell, the Azure CLI, ARM templates and Bicep, and Microsoft Entra ID. Questions freely assume you recognise what a CLI command does, which portal blade a setting lives in, or how a template deploys a resource. Candidates who have only watched videos meet this wall immediately: the exam is written for people who have clicked, scripted and broken things.

Third, the question formats. AZ-104 may include interactive components, and Microsoft's official Exam Sandbox shows the range of styles you can meet — not just single-answer multiple choice but case-study-style scenarios and interactive item types. Performance-flavoured questions test whether you can apply a sequence of steps, which is much harder to bluff than a definition. If you have never seen these formats, try the Exam Sandbox before booking so the interface itself costs you nothing on the day.

Is there an official AZ-104 pass rate?

No. If you have seen a specific AZ-104 pass rate quoted online, treat it as folklore — no official pass-rate statistic appeared in Microsoft's published exam documentation during our research, and the numbers circulating on forums are guesses. The same goes for question counts: Microsoft does not publish how many questions the exam contains, only the 100-minute time limit. Any site that promises "exactly 54 questions" is inventing precision.

What Microsoft does publish is the scoring model, and it matters more than any rumoured pass rate.

700 out of 1,000 is not 70%

AZ-104 uses scaled scoring: your result is placed on a 1–1,000 scale, and 700 is the pass line. That is not the same as answering 70% of questions correctly, because questions can carry different weight and different exam forms are calibrated against each other. Two practical consequences follow. You cannot compute a "questions I can afford to miss" budget, so aiming for a comfortable margin beats aiming for the line. And a near-miss score genuinely means near — the section feedback on your score report tells you which domain to shore up before a retake, which Microsoft allows after a 24-hour wait for a first retake (with longer waits for later attempts).

The hardest topics on AZ-104, ranked by how often they sink candidates

Every candidate's weak spot is personal, but the domains are not equally forgiving. Here is how they tend to rank, hardest first, based on what each one demands.

1. Virtual networking

Networking is the domain most frequently named as the exam's steepest climb, and the structure of the topic explains why. Azure networking questions stack concepts: a single scenario can require you to reason about virtual networks, subnets, peering, network security groups, routing and name resolution at once. If your mental model of how traffic flows between two Azure resources is fuzzy, you cannot eliminate wrong answers — every option looks plausible. This is also the domain where portal experience helps least, because the difficulty is conceptual rather than navigational.

2. Identities and governance

Microsoft Entra ID, role-based access control, and governance controls such as policies and locks look administrative and simple until questions start layering scope. Who can do what, at which scope, with which role, and what happens when assignments conflict — these questions punish candidates who memorised role names without understanding inheritance. Governance is also where Microsoft tests the "least privilege, right scope" judgement that separates an administrator from someone who grants Owner to make errors go away.

3. Compute

Deploying and managing compute resources is broad rather than deep: virtual machines, scale sets, containers and App Service each bring their own configuration surface. The difficulty here is coverage — candidates from a VM-heavy background stumble on container questions and vice versa. Template-based deployment (ARM and Bicep) sits in this territory too, and reading an unfamiliar template under time pressure is a skill in itself.

4. Storage

Storage questions are fair but detail-hungry: redundancy options, access tiers, security of storage endpoints, and the differences between storage services. This is the classic "I knew it generally but not precisely" domain — the options in a question often differ by one property.

5. Monitoring and maintenance

Usually the most approachable domain, but not free marks: you need to know which monitoring tool answers which question, and backup and recovery concepts well enough to pick the right protection for a scenario.

One caution: do not build your revision plan around this ranking alone. Microsoft publishes the official domain weightings in the AZ-104 study guide, and that document — not any blog's ranking, including this one — is the authoritative statement of what the exam emphasises.

How hard is AZ-104 for complete beginners?

Hard enough that "start smaller" is usually the right advice. There is no rule stopping a beginner from booking AZ-104 directly — it has no prerequisites, and you can take it without ever sitting AZ-900. But the exam's assumption of operational familiarity means a candidate with zero cloud background is fighting on two fronts at once: learning what cloud services are while also learning how to run them. Whether you should warm up with Azure Fundamentals first is a decision with its own trade-offs, which we work through in Azure Fundamentals vs Azure Administrator.

A rough self-assessment, by profile:

  • A working Azure administrator (a year or more of portal, CLI and PowerShell use): the exam will still require deliberate revision — nobody's day job covers all five domains evenly — but the difficulty is manageable. Your risk is the domains your organisation doesn't use.
  • An on-premises sysadmin moving to cloud: moderate-to-hard. Your networking and identity instincts transfer partially, but Azure's implementations differ in exactly the details the exam probes.
  • A helpdesk analyst or career-changer with study-only exposure: hard. The gap is not intelligence; it is hours in the portal. Lab time is the difference-maker, and the study plan linked above is built around that.

Why people actually fail AZ-104

Understanding realistic failure causes is more useful than any difficulty score, because each one is avoidable.

  1. Studying to recognise rather than to do. Video courses create familiarity; the exam tests operation. Candidates who can nod along to every lecture but have never built a virtual network peering fail the questions that describe one misbehaving.
  2. Ignoring the command-line and template layer. Portal-only candidates lose marks whenever a question shows PowerShell, CLI or Bicep. You do not need to write these fluently from memory, but you must read them.
  3. Uneven domain coverage. Because 700/1,000 is scaled across the whole exam, a domain you skipped is a hole below the waterline. The most common shape of a failing score report is one strong area and one neglected one.
  4. Never rehearsing under exam conditions. One hundred minutes is comfortable only if you have practised pacing. Candidates who first meet timed pressure on exam day burn minutes on early scenario questions and guess through the final stretch. A timed AZ-104 practice test run is the cheapest way to find out whether pacing — rather than knowledge — is your real risk, and the score breakdown shows which domain would have sunk you.
  5. Outdated study material. Microsoft refreshed the AZ-104 content in April 2026, and the exam evolves as Azure does. Preparation built on a course recorded years ago quietly drills you on retired details.

How does AZ-104 difficulty compare with the exams around it?

Against AZ-900 (Azure Fundamentals), the jump is substantial: AZ-900 is a 45-minute conceptual exam about what Azure services are; AZ-104 is a 100-minute operational exam about running them. Treat them as different kinds of test, not two rungs of the same ladder.

Against AZ-305 (Azure Solutions Architect Expert), AZ-104 is the more mechanical exam and AZ-305 the more judgement-based one — AZ-305 asks you to design solutions rather than operate them, and it requires AZ-104 as a prerequisite for the certification. If the architect exam is on your horizon, its distinct flavour of difficulty is examined in How Hard Is the Azure Solutions Architect Exam?, and the broader role comparison lives in Azure Administrator vs Azure Solutions Architect.

One consolation on the far side: passing is the hard part. The certification renews annually through a free, open-book online assessment on Microsoft Learn — the pressure of the proctored exam is a one-time cost, not an annual one.

So, should the difficulty put you off?

No — but it should shape your booking decision. AZ-104 is hard in a fair way: it rewards hands-on operational competence and punishes passive study, which is exactly what an employer wants the credential to mean. If you can navigate the portal without hunting, read a CLI snippet without panic, and explain how traffic moves between two Azure resources, the exam is within reach with focused revision. If any of those made you wince, the difficulty is real for you today — and entirely fixable before you book.

Two closing pointers. Whether the effort pays off in career terms is a separate question from how hard the exam is — we weigh that in Is the Azure Administrator Certification Worth It?. And exam logistics — cost in your country, scheduling through Pearson VUE, online versus test-centre proctoring — are covered in the full Azure Administrator certification guide; fees vary by country or region, so confirm the current price on Microsoft's official AZ-104 page before booking.

Frequently asked questions

How many questions are on the AZ-104 exam?

Microsoft does not publish a question count for AZ-104 — only the 100-minute duration is official. Question-count figures you see elsewhere are unverified. Plan your pacing around time per screen rather than a fixed number of items.

Can I fail one domain and still pass AZ-104?

There is no per-domain pass requirement; only the overall scaled score of 700/1,000 matters. In practice, though, a very weak domain usually pulls the total under the line, because every domain contributes meaningful weight.

How soon can I retake AZ-104 if I fail?

Microsoft's retake policy allows a first retake after 24 hours, with longer waiting periods for subsequent attempts. Use the domain-level feedback on your score report to target the retake rather than re-studying everything.

Is the AZ-104 exam harder online or at a test centre?

The content is identical through both Pearson VUE delivery options. The difference is environmental: online proctoring adds equipment checks and workspace rules, while a test centre removes those variables. Choose whichever setting lets you concentrate.

Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.

Put it into practice

Test what you have just read

Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.

You may also like