Skip to main content

AZ-104 Labs and Hands-on Practice

Azure Administrator certification isn’t earned by reading alone. The AZ-104 exam tests your ability to perform real administrative tasks—creating resources, configuring services, managing identities, monitoring systems, and troubleshooting common issues. This labs section provides guided, practical exercises designed to build the muscle memory and operational confidence you need for both the exam and day-to-day Azure administration.

Each lab focuses on a specific administrative skill, walking you through the steps you would take in a production environment. By the end of this section, you will be comfortable navigating the Azure portal, using Azure CLI and PowerShell, and making informed decisions about Azure resource configuration.

What AZ-104 Labs Cover​

The labs are organised around the core skill areas defined in the official Microsoft AZ-104 exam objectives. Each category targets a set of administrative competencies you must demonstrate.

  • Identity and Access Management – Create and manage users, groups, and roles. Implement and test Azure RBAC. Configure managed identities for secure, credential‑free access.
  • Storage Management – Provision storage accounts, configure blob storage and file shares, set access policies, and manage storage security with shared access signatures and encryption.
  • Azure Compute – Deploy and configure virtual machines, availability sets, and scale sets. Automate VM configuration with extensions. Understand scaling concepts and VM maintenance.
  • Networking – Design and implement virtual networks, subnets, and peering. Configure network security groups, Azure Load Balancer, and Application Gateway. Practice DNS and hybrid connectivity.
  • Monitoring and Governance – Set up Azure Monitor alerts, build Log Analytics queries, create dashboards, apply resource tags, and enforce compliance with Azure Policy.
  • Security Administration – Secure resources with network and identity controls. Implement Azure Key Vault, configure backup and site recovery, and manage update compliance.

Azure Administrator Core Lab Categories​

Below is an overview of each lab category. Start with the area where you have the least practical experience, or follow the recommended learning path below.

Identity and Access Labs​

What you will practice: Creating Microsoft Entra ID tenants, managing users and groups, assigning Azure roles, and working with managed identities.

Why it matters: Identity is the first security perimeter. Misconfiguring role assignments or using shared credentials leads to security incidents and exam question traps. You must know how to implement least privilege.

Example services: Microsoft Entra ID, Azure RBAC, managed identities, Privileged Identity Management.

Storage Labs​

What you will practice: Deploying Azure Storage accounts, configuring blob and file storage, setting up lifecycle management, and applying access keys, SAS tokens, and Azure AD authentication.

Why it matters: Data is at the center of most Azure workloads. Understanding access tiers, replication, and security directly influences cost, durability, and compliance.

Example services: Azure Blob Storage, Azure Files, Storage Account, Azure Data Lake Storage.

Compute Labs​

What you will practice: Creating and connecting to Windows and Linux virtual machines, configuring availability sets and zones, scaling with Virtual Machine Scale Sets, and automating configuration.

Why it matters: You must be able to choose the right compute option for a workload, ensure high availability, and manage VM state. Many exam questions center on VM configuration and troubleshooting.

Example services: Azure Virtual Machines, Virtual Machine Scale Sets, Azure Bastion, Azure Compute Gallery.

Networking Labs​

What you will practice: Building custom virtual networks, segmenting with subnets, filtering traffic with NSGs, implementing load balancers, and setting up VNet peering and VPN gateways.

Why it matters: Networking underlies connectivity for all Azure resources. Misconfiguring DNS, routes, or firewalls breaks applications. The exam frequently tests your ability to design and diagnose network topologies.

Example services: Azure Virtual Network, Network Security Groups, Azure Load Balancer, Azure Application Gateway, Azure DNS.

Monitoring and Management Labs​

What you will practice: Creating alert rules, analysing logs with Kusto queries, deploying Azure Backup, and automating operations tasks.

Why it matters: Administrators are responsible for the health of the environment. You need to detect failures, respond to incidents, and maintain business continuity.

Example services: Azure Monitor, Log Analytics, Azure Backup, Azure Site Recovery, Azure Automation.

Security Administration Labs​

What you will practice: Applying Azure Policy, configuring Azure Key Vault with access policies, enabling Microsoft Defender for Cloud, and managing security recommendations.

Why it matters: Governance and security are not optional. The exam expects you to enforce standards and protect sensitive configuration at scale.

Example services: Azure Policy, Azure Key Vault, Microsoft Defender for Cloud, Azure Firewall.

How to Use These Labs Effectively​

Reading a lab document and executing steps mechanically will not prepare you for the exam. Use this workflow to turn lab time into deep learning:

  1. Understand the concept – Before you start, read the related skill or service overview on CloudCertPro. Know what you are building and why.
  2. Read the service overview – Review the relevant Azure service page to understand limits, SKUs, and design constraints.
  3. Complete the hands-on lab – Follow the steps in your own Azure subscription or a sandbox. Do not just copy commands; observe the results and any errors.
  4. Review design decisions – Ask yourself why a particular configuration was chosen. What would change if cost were the primary concern? What if the workload needed higher availability?
  5. Apply the knowledge to real scenarios – Connect the lab to a scenario exercise. Could you solve a business problem with what you just built?

If you are new to Azure administration, follow this phased progression. Each phase builds on the previous one and mirrors the growing complexity of the AZ-104 exam.

Phase 1: Azure Fundamentals and Resource Management Start with basics: navigate the portal, use az commands, deploy a simple resource group, and understand tagging and locks. This builds the operational muscle memory you need for every other lab.

Phase 2: Identity and Security Move to Microsoft Entra ID. Create users, groups, and custom roles. Practice RBAC assignments until you can instantly spot a missing role. Configure managed identities and Key Vault.

Phase 3: Storage and Compute Administration Provision storage accounts with different replication options. Deploy VMs and configure availability options. Practice attaching and resizing disks. Automate a basic VM deployment.

Phase 4: Networking and Monitoring Build a multi-subnet virtual network with NSG rules. Implement a load balancer. Set up monitoring alerts and a backup policy. These labs integrate everything you have learned into a working system.

Labs vs Certification Knowledge​

CloudCertPro separates these components so you know how each contributes to your AZ-104 success:

  • Skills pages explain what you need to know, structured around the official Microsoft objectives.
  • Services pages provide detailed knowledge about each Azure resource and its administrative features.
  • Labs (this section) give you the practical experience of building and configuring real Azure resources.
  • Scenarios challenge you to apply your knowledge and hands‑on skill to realistic business problems.

Each element reinforces the others. Don’t study them in isolation.

What to Do Next​

Choose a lab category that matches your current study focus. If you are unsure where to begin, go to Phase 1: Azure Fundamentals and Resource Management and complete the introductory lab. It will take under an hour and set you up for everything that follows.

Start with identity and access if you are building your first secure Azure environment, or jump to networking if you need to deepen your connectivity skills. Each lab will link you to the next recommended exercise when you finish.