Azure Fundamentals Certification Guide
·10 min read
Everything the AZ-900 exam covers — domains, format, cost and passing score — plus a study plan and practice-test strategy for Azure Fundamentals.
Continue readingAn honest look at AZ-104 difficulty — the question styles, the domains that trip candidates up, and why people actually fail the Azure Administrator exam.

Short answer: the Azure Administrator exam (AZ-104) is genuinely difficult for candidates without hands-on Azure experience, and moderately challenging even for working administrators. It is a significant step up from Azure Fundamentals (AZ-900): the exam assumes you can actually operate Azure — identities, storage, compute, networking and monitoring — not merely describe it. Most people who fail do so on breadth and on the networking domain, not on trick questions.
That is the honest verdict. The rest of this article unpacks why AZ-104 has the reputation it does: what the exam actually asks, which domains punish weak preparation hardest, what the scoring really means, and the failure patterns that show up again and again. It deliberately stops short of telling you how to study — that is covered step by step in our guide to preparing for the Azure Administrator certification.
On paper, AZ-104 is a 100-minute, proctored, associate-level exam from Microsoft with no formal prerequisites and a passing score of 700 out of 1,000. Nothing about that sounds alarming. The difficulty lives in three places the spec sheet doesn't show.
First, the breadth. The exam covers five domains — managing Azure identities and governance, implementing and managing storage, deploying and managing compute resources, virtual networking, and monitoring and maintaining resources. Each of those is a full job responsibility in a real organisation. You are being examined on the working surface of an entire role, and weakness in any one domain can drag your scaled score under 700 even when the others are solid.
Second, the tooling expectation. Microsoft lists no formal prerequisites, but it does recommend experience with the Azure portal, PowerShell, the Azure CLI, ARM templates and Bicep, and Microsoft Entra ID. Questions freely assume you recognise what a CLI command does, which portal blade a setting lives in, or how a template deploys a resource. Candidates who have only watched videos meet this wall immediately: the exam is written for people who have clicked, scripted and broken things.
Third, the question formats. AZ-104 may include interactive components, and Microsoft's official Exam Sandbox shows the range of styles you can meet — not just single-answer multiple choice but case-study-style scenarios and interactive item types. Performance-flavoured questions test whether you can apply a sequence of steps, which is much harder to bluff than a definition. If you have never seen these formats, try the Exam Sandbox before booking so the interface itself costs you nothing on the day.
No. If you have seen a specific AZ-104 pass rate quoted online, treat it as folklore — no official pass-rate statistic appeared in Microsoft's published exam documentation during our research, and the numbers circulating on forums are guesses. The same goes for question counts: Microsoft does not publish how many questions the exam contains, only the 100-minute time limit. Any site that promises "exactly 54 questions" is inventing precision.
What Microsoft does publish is the scoring model, and it matters more than any rumoured pass rate.
AZ-104 uses scaled scoring: your result is placed on a 1–1,000 scale, and 700 is the pass line. That is not the same as answering 70% of questions correctly, because questions can carry different weight and different exam forms are calibrated against each other. Two practical consequences follow. You cannot compute a "questions I can afford to miss" budget, so aiming for a comfortable margin beats aiming for the line. And a near-miss score genuinely means near — the section feedback on your score report tells you which domain to shore up before a retake, which Microsoft allows after a 24-hour wait for a first retake (with longer waits for later attempts).
Every candidate's weak spot is personal, but the domains are not equally forgiving. Here is how they tend to rank, hardest first, based on what each one demands.
Networking is the domain most frequently named as the exam's steepest climb, and the structure of the topic explains why. Azure networking questions stack concepts: a single scenario can require you to reason about virtual networks, subnets, peering, network security groups, routing and name resolution at once. If your mental model of how traffic flows between two Azure resources is fuzzy, you cannot eliminate wrong answers — every option looks plausible. This is also the domain where portal experience helps least, because the difficulty is conceptual rather than navigational.
Microsoft Entra ID, role-based access control, and governance controls such as policies and locks look administrative and simple until questions start layering scope. Who can do what, at which scope, with which role, and what happens when assignments conflict — these questions punish candidates who memorised role names without understanding inheritance. Governance is also where Microsoft tests the "least privilege, right scope" judgement that separates an administrator from someone who grants Owner to make errors go away.
Deploying and managing compute resources is broad rather than deep: virtual machines, scale sets, containers and App Service each bring their own configuration surface. The difficulty here is coverage — candidates from a VM-heavy background stumble on container questions and vice versa. Template-based deployment (ARM and Bicep) sits in this territory too, and reading an unfamiliar template under time pressure is a skill in itself.
Storage questions are fair but detail-hungry: redundancy options, access tiers, security of storage endpoints, and the differences between storage services. This is the classic "I knew it generally but not precisely" domain — the options in a question often differ by one property.
Usually the most approachable domain, but not free marks: you need to know which monitoring tool answers which question, and backup and recovery concepts well enough to pick the right protection for a scenario.
One caution: do not build your revision plan around this ranking alone. Microsoft publishes the official domain weightings in the AZ-104 study guide, and that document — not any blog's ranking, including this one — is the authoritative statement of what the exam emphasises.
Hard enough that "start smaller" is usually the right advice. There is no rule stopping a beginner from booking AZ-104 directly — it has no prerequisites, and you can take it without ever sitting AZ-900. But the exam's assumption of operational familiarity means a candidate with zero cloud background is fighting on two fronts at once: learning what cloud services are while also learning how to run them. Whether you should warm up with Azure Fundamentals first is a decision with its own trade-offs, which we work through in Azure Fundamentals vs Azure Administrator.
A rough self-assessment, by profile:
Understanding realistic failure causes is more useful than any difficulty score, because each one is avoidable.
Against AZ-900 (Azure Fundamentals), the jump is substantial: AZ-900 is a 45-minute conceptual exam about what Azure services are; AZ-104 is a 100-minute operational exam about running them. Treat them as different kinds of test, not two rungs of the same ladder.
Against AZ-305 (Azure Solutions Architect Expert), AZ-104 is the more mechanical exam and AZ-305 the more judgement-based one — AZ-305 asks you to design solutions rather than operate them, and it requires AZ-104 as a prerequisite for the certification. If the architect exam is on your horizon, its distinct flavour of difficulty is examined in How Hard Is the Azure Solutions Architect Exam?, and the broader role comparison lives in Azure Administrator vs Azure Solutions Architect.
One consolation on the far side: passing is the hard part. The certification renews annually through a free, open-book online assessment on Microsoft Learn — the pressure of the proctored exam is a one-time cost, not an annual one.
No — but it should shape your booking decision. AZ-104 is hard in a fair way: it rewards hands-on operational competence and punishes passive study, which is exactly what an employer wants the credential to mean. If you can navigate the portal without hunting, read a CLI snippet without panic, and explain how traffic moves between two Azure resources, the exam is within reach with focused revision. If any of those made you wince, the difficulty is real for you today — and entirely fixable before you book.
Two closing pointers. Whether the effort pays off in career terms is a separate question from how hard the exam is — we weigh that in Is the Azure Administrator Certification Worth It?. And exam logistics — cost in your country, scheduling through Pearson VUE, online versus test-centre proctoring — are covered in the full Azure Administrator certification guide; fees vary by country or region, so confirm the current price on Microsoft's official AZ-104 page before booking.
Microsoft does not publish a question count for AZ-104 — only the 100-minute duration is official. Question-count figures you see elsewhere are unverified. Plan your pacing around time per screen rather than a fixed number of items.
There is no per-domain pass requirement; only the overall scaled score of 700/1,000 matters. In practice, though, a very weak domain usually pulls the total under the line, because every domain contributes meaningful weight.
Microsoft's retake policy allows a first retake after 24 hours, with longer waiting periods for subsequent attempts. Use the domain-level feedback on your score report to target the retake rather than re-studying everything.
The content is identical through both Pearson VUE delivery options. The difference is environmental: online proctoring adds equipment checks and workspace rules, while a test centre removes those variables. Choose whichever setting lets you concentrate.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·10 min read
Everything the AZ-900 exam covers — domains, format, cost and passing score — plus a study plan and practice-test strategy for Azure Fundamentals.
Continue reading·10 min read
A full AZ-104 exam guide for IT admins — the five domains, hands-on skills Microsoft expects, format, cost, renewal and a prep strategy that works.
Continue reading·10 min read
The AZ-204 Azure Developer Associate certification is retired. What it covered, what happens to existing holders, and the current path for Azure developers.
Continue reading