How to Study for AZ-104 in One Month: Pre-Planning Essentials
Assessing Your Baseline Knowledge and Azure Access
Before initiating an intensive AZ-104 preparation phase, you must perform a gap analysis against the official Exam Skills Outline. The AZ-104 exam is weighted heavily toward Networking (25-30%) and Compute (20-25%), meaning deficiencies in these areas will likely lead to failure. Start by reviewing the Objective Domain document provided by Microsoft. If you cannot explain the difference between a Network Security Group (NSG) and an Azure Firewall, or if you are unfamiliar with the concept of an Azure AD (now Microsoft Entra ID) Tenant, you must allocate more time to the first two weeks of the plan. Simultaneously, ensure you have an active Azure Subscription. The Azure Free Account provides $200 in credits for 30 days, which is perfect for this timeline. Without a live environment to test Role-Based Access Control (RBAC) or virtual network peering, the abstract concepts will not stick during high-pressure exam scenarios.
Gathering Core Resources for an Intensive Sprint
Efficiency is the cornerstone of a fast track Azure administrator exam strategy. Do not overwhelm yourself with multiple 40-hour video courses. Instead, prioritize the Microsoft Learn documentation as your primary text source because the exam questions are derived directly from this material. Supplement this with a reputable practice exam provider that offers detailed explanations for both correct and incorrect answers. Look for resources that include Case Studies, as these represent a significant portion of the AZ-104 scoring blocks and require you to synthesize information from multiple tabs (Business Requirements, Technical Requirements, and Constraints). Finally, download the Azure CLI and Azure PowerShell modules on your local machine. The exam frequently tests your ability to identify the correct syntax for resource deployment, often presenting four nearly identical command strings where only a single parameter differs.
Setting Up a Strict Daily and Weekly Calendar
A one month exam study guide only works if it is treated as a non-negotiable professional commitment. Divide your 30 days into four themed weeks, allocating 2 hours on weeknights for theory and 5 hours on weekends for deep-dive labs. Use a "Review-Learn-Practice" cycle: spend the first 20 minutes reviewing the previous day's notes, 60 minutes on new content, and 40 minutes in the Azure Portal. You should aim for a total of 80 to 100 hours of preparation. Use a Kanban board or a simple spreadsheet to track your progress through the exam domains. If you find yourself falling behind on a specific topic, such as Kubernetes Service (AKS), do not let it stall your entire schedule; mark it for a deep-dive session during the weekend and move on to maintain momentum.
Week 1: Foundation - Identities, Governance, and Storage
Mastering Azure AD and RBAC (Days 1-3)
The first three days focus on Identity and Governance, which accounts for 15-20% of the exam. You must understand the mechanics of Microsoft Entra ID (formerly Azure Active Directory), specifically focusing on User and Group management, Administrative Units, and Device Settings. Pay close attention to the Self-Service Password Reset (SSPR) requirements and the different license tiers (P1 vs. P2) required for features like Conditional Access and Identity Protection. Understanding RBAC is critical; you must know how to apply the principle of least privilege using built-in roles like Contributor, Owner, and Reader. A common exam scenario involves determining the effective permissions of a user who belongs to multiple groups with conflicting role assignments. Remember the rule: Explicit Deny always wins, and permissions are inherited from the Management Group down to the Resource level.
Implementing Policy and Storage Solutions (Days 4-5)
Days 4 and 5 shift toward Azure Policy and Azure Storage. You need to know how to create and assign Policy Definitions and Initiatives to enforce compliance, such as restricting resource deployment to specific regions. Transitioning to storage, focus on the different types of Storage Accounts (General Purpose v2, Premium) and their replication strategies: LRS, ZRS, GRS, and GZRS. You must be able to calculate the availability levels of each and understand the failover process. Study the implementation of Azure Files and Azure Blob Storage, specifically the access tiers (Hot, Cool, Archive) and lifecycle management rules. The exam often tests your knowledge of Shared Access Signatures (SAS) and Storage Service Encryption, requiring you to know when to use a stored access policy versus a granular SAS token for secure data delegation.
Weekend Lab: Building a Governance and Storage Framework
Your first weekend lab should involve creating a multi-tenant or multi-subscription environment. Start by creating a custom RBAC role using a JSON template and assigning it to a test user via the CLI. Next, deploy a Storage Account and configure a Network Rule to allow access only from a specific virtual network. Practice using Azure Storage Explorer and the AzCopy utility, as these are frequently mentioned in data migration questions. Finally, implement a policy that prevents the creation of any storage account that does not have "Secure Transfer Required" enabled. This hands-on session reinforces the relationship between identity, security, and resource configuration, providing a practical context for the theoretical concepts covered during the week. Use the Resource Graph Explorer to query your newly created resources, mimicking the way an administrator would audit an environment.
Week 2: Core Services - Compute and Networking Fundamentals
Deploying and Configuring Virtual Machines (Days 6-8)
Compute is a pillar of the AZ-104. You must master Virtual Machine (VM) deployment, including the selection of appropriate sizes, disk types (Standard HDD, Standard SSD, Premium SSD), and availability options. Understand the mechanics of Availability Sets (Update Domains and Fault Domains) versus Availability Zones. You should be comfortable configuring Virtual Machine Scale Sets (VMSS), specifically the auto-scaling triggers based on CPU metrics or schedules. Learn how to use Custom Script Extensions and Desired State Configuration (DSC) to automate post-deployment tasks. A key exam topic is the move/resize operation; remember that changing a VM size may require a deallocation, which affects the temporary disk data and potentially the IP address if not configured as static.
Building Virtual Networks and Connectivity (Days 9-10)
Networking is the most challenging domain for many candidates. Start with the basics of Virtual Networks (VNet) and subnets. You must understand IP Addressing (Public vs. Private) and the nuances of Network Security Groups (NSGs) and Application Security Groups (ASGs). Focus on how NSG rules are processed based on priority (lower numbers have higher priority) and how the default "AllowVNetInbound" and "DenyAllInbound" rules interact with your custom configurations. Study VNet Peering extensively, including the requirements for non-overlapping address spaces and the "Allow Gateway Transit" setting. You should also be able to troubleshoot connectivity using Network Watcher tools like IP Flow Verify and Next Hop, which are frequent subjects of "drag and drop" or "hotspot" exam questions.
Weekend Lab: Integrating VMs into a Secure Network
This weekend's lab is a comprehensive build. Create two VNets in different regions and establish Global VNet Peering. Within one VNet, deploy a VMSS and configure an Internal Load Balancer to distribute traffic. Apply an NSG to the subnet that only allows traffic on port 80 from the Load Balancer's IP address. Practice "re-homing" a VM by moving it between subnets and observe the impact on connectivity. Use the Serial Console to troubleshoot a VM that has lost RDP/SSH access. This lab is vital because it simulates the real-world complexity of the AZ-104, where multiple services must be interconnected correctly. Ensure you can successfully execute these tasks using both the Portal and a Bicep or ARM template, as infrastructure-as-code is a recurring theme in the modern Azure administrator's toolkit.
Week 3: Advanced Configuration and Integration
Managing App Services, Containers, and Databases (Days 11-13)
As you enter the third week of your AZ-104 cram schedule, focus on Platform-as-a-Service (PaaS) offerings. Azure App Service is a major topic; you must understand App Service Plans, deployment slots, and the swapping process. Learn how scaling works here—Scale Up (changing the tier) versus Scale Out (adding instances). Transition to Azure Container Instances (ACI) and Azure Kubernetes Service (AKS). For AKS, you don't need to be a developer, but you must know how to configure network settings, scaling, and the integration with Azure Container Registry (ACR). While the AZ-104 is not a database exam, you should be familiar with the basic administrative tasks for Azure SQL Database, such as configuring firewalls and understanding the difference between the DTU and vCore purchasing models.
Advanced Networking: VPN, Load Balancers, Firewall (Days 14-15)
Expand your networking knowledge into hybrid connectivity and high availability. Study Azure VPN Gateway (Point-to-Site and Site-to-Site) and the scenarios where ExpressRoute is required for dedicated, high-bandwidth connections. You must distinguish between the Azure Load Balancer (Layer 4 - TCP/UDP) and Azure Application Gateway (Layer 7 - HTTP/HTTPS with WAF capabilities). Understand the configuration of backend pools, health probes, and load balancing rules. Another critical component is Azure DNS, including public and private zones and how to link a private zone to a VNet. Be prepared for questions regarding Azure Firewall and how it differs from NSGs in terms of centralized management and application-level filtering. Knowing when to use a User-Defined Route (UDR) to force traffic through a Network Virtual Appliance (NVA) is a common "expert-level" question on the exam.
Weekend Lab: Deploying a Multi-Tier Application
For the Week 3 lab, deploy a multi-tier architecture. Place a web front-end on an App Service, a logic tier on a set of VMs behind an Application Gateway, and a backend on an Azure SQL Database. Configure VNet Integration for the App Service so it can securely communicate with the VMs. Implement a Private Endpoint for the SQL Database to ensure it is not accessible over the public internet. This lab will test your understanding of how different Azure services interact and the security boundaries required for a production-grade environment. Finish by configuring Azure Front Door or Traffic Manager to demonstrate global load balancing. Successfully completing this setup confirms that you have moved beyond basic administration into complex architectural integration, which is the hallmark of a successful AZ-104 candidate.
Week 4: Monitoring, Backup, Review, and Practice
Implementing Monitoring with Azure Monitor and Backup (Days 16-17)
The final domain covers Monitoring and Backup (10-15%). You must be proficient with Azure Monitor, specifically Log Analytics workspaces and Kusto Query Language (KQL) basics. You should know how to create alerts based on metrics and logs, and how to use Action Groups to automate responses (like sending an email or triggering a Logic App). Study Azure Backup for both VMs and on-premises workloads. Understand the Recovery Services Vault configuration, backup policies, and the process of performing a file-level recovery versus a full VM restoration. Additionally, review Azure Site Recovery (ASR) for disaster recovery scenarios. The exam often asks about the "soft delete" feature and how to recover deleted backups, so ensure you are familiar with the retention periods and security settings within the vault.
Comprehensive Review and Weak Area Drilling (Days 18-19)
With the core syllabus covered, use these two days to revisit your weakest areas. If your practice scores are low in Networking, spend time re-reading the documentation on SNET and VNet peering. Use this time to memorize "fact sheets"—small details that are easy to forget, such as the maximum number of peerings per VNet, the specific ports required for certain services, or the different tiers of Azure Bastion. Review the Case Study logic: practice reading a business requirement and immediately identifying which Azure service satisfies it. For example, if a requirement mentions "SSL termination at the edge," your mind should immediately go to Application Gateway. This mental mapping is essential for saving time during the actual 100-minute exam window.
Final Sprint: Timed Practice Exams and Exam Strategy (Days 20-21)
The final two days of your one month exam study guide should be spent in a simulated exam environment. Take at least three full-length practice tests under timed conditions. Do not look at your notes. This builds the mental stamina required for the 40-60 questions you will face. Analyze your results using the Score Report to see which sections need a final 30-minute review. On the day before the exam, stop studying by mid-afternoon. Ensure your testing environment is ready if you are taking the exam remotely—perform the system check, clear your desk, and have your identification ready. Remember the exam strategy: you cannot return to certain sections (like the "Yes/No" series or Case Studies) once you leave them. Manage your time wisely, and do not spend more than 2 minutes on any single multiple-choice question.
Staying Motivated and Avoiding Burnout
The Importance of Scheduled Breaks
An intensive AZ-104 preparation is a marathon, not a sprint, despite the short duration. To maintain peak cognitive function, you must implement a system of scheduled breaks, such as the Pomodoro Technique (50 minutes of study followed by a 10-minute break). Azure's terminology can become a "word salad" after several hours of reading; stepping away from the screen allows your brain to consolidate the complex hierarchies of Management Groups, Subscriptions, and Resource Groups. Burnout often manifests as reading the same paragraph multiple times without comprehension. If this happens, stop for the day. A well-rested mind is far more effective at troubleshooting a complex JSON deployment template than a fatigued one.
Joining a Study Group for Accountability
Preparing for the AZ-104 in isolation can be daunting. Engaging with a community or a study group provides a platform to discuss difficult concepts like User-Defined Routes or Identity Federation. Explaining a concept to someone else is one of the most effective ways to solidify your own understanding—a phenomenon known as the Protégé Effect. Online forums and technical communities often share "lessons learned" from recent exam takers (without violating NDA rules), which can give you a feel for the current emphasis of the question pool. Accountability partners also ensure you stick to your 30-day timeline, providing the social pressure needed to stay on track when the material becomes particularly dense.
Tracking Progress and Celebrating Milestones
Quantify your progress to maintain morale throughout the month. Use a checklist of the Skills Measured and check them off only when you can successfully perform the task in the Azure Portal without following a guide. Celebrate the completion of each week’s lab as a major milestone. Passing the AZ-104 is not just about getting a certificate; it is about proving you can manage a complex cloud ecosystem. By the end of Week 4, compare your initial baseline assessment to your current practice exam scores. Seeing a jump from 50% to 85% is a powerful motivator. This structured approach ensures that when you finally click "Start Exam," you are doing so with the confidence of someone who has not just studied the material, but has lived it for thirty days.