The Azure Administrator certification path is one of the most structured and well-defined career tracks in cloud computing. Microsoft has laid out a clear progression from foundational understanding all the way to expert-level architecture and security â and each step builds meaningfully on the last.
Whether you're an IT professional pivoting to cloud, a sysadmin adding Azure to your toolkit, or a developer who needs to understand how your applications are deployed and managed, this guide maps every step of the path with realistic timelines and clear role targets.
The Azure Administrator Certification Roadmap
Step 1: AZ-900 â Microsoft Azure Fundamentals
The optional-but-recommended starting point. AZ-900 establishes the Azure vocabulary and mental model â cloud service types, core Azure services, pricing, compliance, and the Azure portal. If you have zero Azure exposure, start here. If you already use Azure at work, you may skip directly to AZ-104.
Best for: Complete beginners, non-technical stakeholders, sales/account teams, and professionals transitioning from other IT roles.
Step 2: AZ-104 â Microsoft Azure Administrator (Core Cert)
The primary Azure Administrator credential. AZ-104 validates real operational skills: managing identities via Microsoft Entra ID, implementing storage solutions, deploying and managing virtual machines, configuring virtual networks and NSGs, and monitoring resources with Azure Monitor.
This is the certification employers ask for when hiring Azure Administrators, Cloud Engineers, and Infrastructure Engineers working with Microsoft Azure. It's the most important cert on this path and the one to prioritize.
Best for: IT administrators, cloud engineers, infrastructure engineers, and system administrators adding Azure to their skill set.
Step 3 (Optional): AZ-500 â Azure Security Engineer
If your role involves securing Azure workloads, identities, and data, AZ-500 is the natural addition to AZ-104. It covers Entra ID Conditional Access, Azure Defender, Microsoft Sentinel, Key Vault, and network security in depth. Many Azure Administrators pursue this as their second cert to differentiate themselves in security-focused roles.
Best for: Security engineers, cloud security architects, and Azure admins in organizations with strong security requirements.
Step 4: AZ-305 â Designing Azure Infrastructure Solutions (Expert Path)
The expert-level architecture credential. AZ-305 tests your ability to design â not just operate â Azure solutions: identity architectures, data storage architectures, business continuity, and infrastructure solutions. You must hold AZ-104 as a co-requisite to earn the Azure Solutions Architect Expert badge.
This is the credential that unlocks principal-level and architect roles. Azure Solutions Architect Experts are among the highest-paid cloud professionals globally.
Best for: Senior cloud engineers, cloud architects, principal engineers, and CTOs of cloud-native organizations.
Azure Administrator Salary by Certification Level
| Certification | Role | US Median Salary |
|---|---|---|
| AZ-900 only | Cloud Support / Junior Admin | $55,000â$75,000 |
| AZ-104 | Azure Administrator / Cloud Engineer | $90,000â$120,000 |
| AZ-104 + AZ-500 | Cloud Security Engineer | $110,000â$140,000 |
| AZ-104 + AZ-305 (Expert) | Azure Solutions Architect | $130,000â$175,000 |
| Multiple Expert certs | Principal Cloud Architect | $160,000â$220,000+ |
How Long Does the Azure Administrator Path Take?
| Path | Timeline (studying 1â2 hrs/day) |
|---|---|
| AZ-900 â AZ-104 | 3â5 months |
| AZ-104 only (with Azure experience) | 6â10 weeks |
| AZ-104 â AZ-305 (Expert) | 5â8 months total |
| AZ-104 â AZ-500 â AZ-305 | 8â14 months total |
Practice AZ-104 Questions Free
200+ Azure Administrator practice questions covering all five exam domains. Start practicing now â no account required.
Start Free Practice âAZ-104 Core Skills: What the Exam Actually Tests
The AZ-104 exam is organized into five domains. Here's the skill breakdown you need to master for each:
Identity and Governance (20â25%)
Microsoft Entra ID user and group management, RBAC role assignments at all scope levels, management groups, Azure Policy creation and assignment, resource locks, and cost management basics. Many candidates underestimate Entra ID depth â know Conditional Access, PIM, and privileged identity management.
Storage (15â20%)
Storage account types (Standard vs. Premium), blob access tiers (hot/cool/archive), lifecycle management policies, Azure Files and file shares, SAS tokens, storage firewall and virtual network integration, and AzCopy/Azure Storage Explorer operations.
Compute (20â25%)
VM creation and management (portal, CLI, PowerShell, ARM templates), VM scale sets and autoscaling, availability sets vs. availability zones, Azure App Service plans and deployment slots, Azure Container Instances, and basic AKS concepts.
Networking (15â20%)
VNet creation and subnetting, NSG rules and application security groups, VNet peering, Azure Load Balancer (Basic vs. Standard), Application Gateway vs. Azure Front Door, VPN Gateway configurations, Azure DNS zones, and Private Endpoints.
Monitoring (10â15%)
Azure Monitor metrics and logs, Log Analytics workspace configuration, diagnostic settings, alerts and action groups, Azure Backup vault setup, Recovery Services vault, backup policies, and Azure Site Recovery basics.
AZ-104 Study Approach That Works
The most effective AZ-104 study method combines three elements â and the order matters:
- Concept learning first â Use Microsoft Learn's official AZ-104 learning path. Read, don't just watch. Microsoft's documentation is the exam's source of truth.
- Hands-on Azure practice â Create a free Azure account ($200 credit) and build the things you're reading about. Create a VM, set an NSG rule, configure a storage account, set up a VPN gateway. You cannot pass AZ-104 from reading alone.
- Practice exams to close gaps â Take 2â3 full practice exams in the final 2 weeks. Wrong answers are your study guide â look up every concept behind an incorrect answer, not just the correct answer itself.
Frequently Asked Questions
Is AZ-900 required before AZ-104?
No. AZ-900 is not a formal prerequisite for AZ-104. You can register for and take AZ-104 directly. AZ-900 is recommended if you have no Azure experience whatsoever, but most working IT professionals are better served by going straight to AZ-104 and covering foundational topics as part of that study.
How long is AZ-104 certification valid?
AZ-104 is valid for one year. Microsoft offers a free renewal assessment through Microsoft Learn â you don't need to repay the exam fee to renew. The renewal assessment covers recent changes to the exam objectives and takes about 45 minutes.
What's the difference between AZ-104 and AZ-305?
AZ-104 validates operational skills â you know how to manage an Azure environment. AZ-305 validates design skills â you can architect large-scale Azure solutions for complex enterprise requirements. AZ-104 is the associate level; AZ-305 is expert. AZ-104 is a co-requisite for AZ-305 (you must hold AZ-104 to earn the Solutions Architect Expert badge).
Which Azure cert pays the most?
The Azure Solutions Architect Expert (requiring AZ-104 + AZ-305) consistently commands the highest salaries â $130,000â$175,000 US median. Azure Security Engineers (AZ-500) are also highly compensated at $110,000â$140,000. AZ-104 alone typically earns $90,000â$120,000.
Start Your Azure Administrator Journey
Free practice exams for AZ-900, AZ-104, and more â real exam-style questions with explanations written by Azure experts.
Start Practicing Free â