Free
- Untimed practice across all five domains
- Every question explained, with its domain and task named
Microsoft · AZ-104 · Azure Administrator Associate
Five weighted domains, timed mocks scored the way Microsoft scores, and a readiness range against 700. Free to start.
Free practice across all five domains. No card required.
A contractor must be able to assign built-in Azure roles on a subscription, including at resource-group scope, but must not be able to create or delete the resources in that subscription.
Which role should you assign at the subscription?
One choice only. Your earliest pick was dropped.
Where this question sits in the exam
Manage Azure identities and governance is 20–25% of the scored content. Our mocks use the same mix.
An original item written against the skills outline dated 17 April 2026. Not a real exam question.
Before you book
AZ-900 is reachable by reading. AZ-104 isn't. Microsoft's candidate profile describes someone with subject matter expertise in implementing, managing and monitoring an Azure environment, and expects prior experience with PowerShell, the Azure CLI, the portal, ARM templates or Bicep, and Microsoft Entra ID.
That shows up in what the outline asks you to do. You are expected to interpret an ARM template or a Bicep file, not just name the services. Microsoft's exam page also says you may have interactive components to complete.
AZ-900 is not a prerequisite and many people skip it. But if you haven't deployed a VM, configured an NSG and assigned an RBAC role yourself, budget time in a real subscription rather than more reading.
Scoring
Microsoft reports technical exams on a scale of 1 to 1,000, and 700 or above passes. It's a scaled score, so it doesn't correspond to answering 70% of questions correctly — how many you need depends on the difficulty of the ones you were given. There's no per-domain minimum: only the overall score decides it.
No penalty for a wrong answer, so never leave one blank. Some questions are worth more than one point.
You answered
Now change nothing except which form you were given
Same answers. Harder form, higher scaled score — that's what scaling is for. It's also why nobody can tell you the percentage you need.
Positions here are illustrative. Microsoft publishes the 1–1,000 scale and the 700 pass mark, but not the conversion from raw answers — which is the point. When a number can't be known exactly, a range is the honest way to report it.
The loop
Step 1 is free. Steps 2 to 4 need a subscription.
Practice · untimed
HardA contractor must be able to assign built-in Azure roles on a subscription, including at resource-group scope, but must not be able to create or delete the resources in that subscription.
Which role should you assign at the subscription?
User Access Administrator grants role-assignment rights without also granting resource management. Owner can assign roles but also manage resources; Contributor cannot assign roles. Domain: Manage Azure identities and governance.
Click a step to see it.
What you get back
Your readiness is a range, because it's an inference from the questions you've answered rather than a result you've earned. For a certification the outcome is binary, so the only question is whether the whole range sits above 700. While it straddles the line, you're a coin flip, and we'll say so.
Where you stand
Borderline
530–720
Your range crosses the pass mark. On today's evidence it's a coin flip.
Three states
Try the three states. We won't show you a percentage chance of passing — nobody can calculate one honestly without years of real outcomes to calibrate against.
We won't show you a percentage chance of passing. Nobody can calculate one honestly without years of real outcomes behind it.
Domains
Microsoft publishes weights as ranges. Our mocks follow them, so a domain worth a quarter of the exam gets a quarter of the questions.
| Domain | Weight |
|---|---|
| Manage Azure identities and governance | 20–25% |
| Deploy and manage Azure compute resources | 20–25% |
| Implement and manage storage | 15–20% |
| Implement and manage virtual networking | 15–20% |
| Monitor and maintain Azure resources | 10–15% |
Weights are ranges because Microsoft publishes them as ranges. Skills measured as of 17 April 2026, checked by us on 14 September 2026.
Identity and governance and compute together account for close to half the exam. With limited time, that's the half to protect.
Exam facts
Prices vary by country. Check Microsoft Learn for yours.
Pricing
One subscription covers the Microsoft certifications, AWS, the Claude certifications, TOEFL, IELTS and the SAT.
The exam fee is separate and goes to Microsoft. We're prep, not registration.
Start practicing for freeFAQ
Free practice across all five domains, no card. The timed mocks and the readiness range are there when you want them.
Start practicing for freeAlso available for AZ-900, AI-901, AWS and the Claude certifications on the same subscription.