Coverage matrix

Every skill from the official AZ-104 study guide (as of April 17, 2026) mapped to the challenge that covers it.

Manage Azure identities and governance (20–25%)

Manage Microsoft Entra users and groups

Skill	Challenge
Create users and groups	Challenge 01
Manage user and group properties	Challenge 01
Manage licenses in Microsoft Entra ID	Challenge 01
Manage external users	Challenge 01
Configure self-service password reset (SSPR)	Challenge 01

Manage access to Azure resources

Skill	Challenge
Manage built-in Azure roles	Challenge 02
Assign roles at different scopes	Challenge 02
Interpret access assignments	Challenge 02

Manage Azure subscriptions and governance

Skill	Challenge
Implement and manage Azure Policy	Challenge 03
Configure resource locks	Challenge 03
Apply and manage tags on resources	Challenge 03
Manage resource groups	Challenge 03
Manage subscriptions	Challenge 03
Manage costs by using alerts, budgets, and Azure Advisor	Challenge 03, Challenge 18
Configure management groups	Challenge 03, Challenge 17

Implement and manage storage (15–20%)

Configure access to storage

Skill	Challenge
Configure Azure Storage firewalls and virtual networks	Challenge 04
Create and use shared access signature (SAS) tokens	Challenge 04
Configure stored access policies	Challenge 04
Manage access keys	Challenge 04
Configure identity-based access for Azure Files	Challenge 06

Configure and manage storage accounts

Skill	Challenge
Create and configure storage accounts	Challenge 04
Configure Azure Storage redundancy	Challenge 04
Configure object replication	Challenge 06
Configure storage account encryption	Challenge 04, Challenge 20
Manage data by using Azure Storage Explorer and AzCopy	Challenge 04, Challenge 19

Configure Azure Files and Azure Blob Storage

Skill	Challenge
Create and configure a file share in Azure Files	Challenge 05
Create and configure a container in Azure Blob Storage	Challenge 05
Configure storage tiers	Challenge 05
Configure soft delete for blobs and containers	Challenge 05
Configure snapshots and soft delete for Azure Files	Challenge 05
Configure blob lifecycle management	Challenge 06
Configure blob versioning	Challenge 05

Deploy and manage Azure compute resources (20–25%)

Automate deployment of resources by using ARM templates or Bicep files

Skill	Challenge
Interpret an Azure Resource Manager template or a Bicep file	Challenge 07
Modify an existing Azure Resource Manager template	Challenge 07
Modify an existing Bicep file	Challenge 07
Deploy resources by using an ARM template or a Bicep file	Challenge 07
Export a deployment as an ARM template or convert ARM to Bicep	Challenge 07

Create and configure virtual machines

Skill	Challenge
Create a virtual machine	Challenge 08
Configure encryption at host for Azure virtual machines	Challenge 08, Challenge 22
Move a virtual machine to another resource group, subscription, or region	Challenge 08
Manage virtual machine sizes	Challenge 08
Manage virtual machine disks	Challenge 08, Challenge 22
Deploy virtual machines to availability zones and availability sets	Challenge 08
Deploy and configure an Azure Virtual Machine Scale Sets	Challenge 08

Provision and manage containers in the Azure portal

Skill	Challenge
Create and manage an Azure Container Registry	Challenge 09
Provision a container by using Azure Container Instances	Challenge 09
Provision a container by using Azure Container Apps	Challenge 09
Manage sizing and scaling for containers	Challenge 09

Create and configure Azure App Service

Skill	Challenge
Provision an App Service plan	Challenge 10
Configure scaling for an App Service plan	Challenge 10
Create an App Service	Challenge 10
Configure certificates and TLS for an App Service	Challenge 10, Challenge 23
Map an existing custom DNS name to an App Service	Challenge 10
Configure backup for an App Service	Challenge 10
Configure networking settings for an App Service	Challenge 10, Challenge 23
Configure deployment slots for an App Service	Challenge 10

Implement and manage virtual networking (15–20%)

Configure and manage virtual networks in Azure

Skill	Challenge
Create and configure virtual networks and subnets	Challenge 11
Create and configure virtual network peering	Challenge 11
Configure public IP addresses	Challenge 11
Configure user-defined routes	Challenge 11, Challenge 24
Troubleshoot network connectivity	Challenge 11, Challenge 26

Configure secure access to virtual networks

Skill	Challenge
Create and configure NSGs and application security groups	Challenge 12
Evaluate effective security rules in NSGs	Challenge 12
Implement Azure Bastion	Challenge 12
Configure service endpoints for Azure PaaS	Challenge 12, Challenge 25
Configure private endpoints for Azure PaaS	Challenge 12, Challenge 25

Configure name resolution and load balancing

Skill	Challenge
Configure Azure DNS	Challenge 13
Configure an internal or public load balancer	Challenge 13
Troubleshoot load balancing	Challenge 13

Monitor and maintain Azure resources (10–15%)

Monitor resources in Azure

Skill	Challenge
Interpret metrics in Azure Monitor	Challenge 14
Configure log settings in Azure Monitor	Challenge 14, Challenge 27
Query and analyze logs in Azure Monitor	Challenge 14, Challenge 27
Set up alert rules, action groups, and alert processing rules	Challenge 14
Configure and interpret monitoring of VMs, storage, and networks using Azure Monitor Insights	Challenge 14
Use Azure Network Watcher and Connection monitor	Challenge 14, Challenge 26

Implement backup and recovery

Skill	Challenge
Create a Recovery Services vault	Challenge 15
Create an Azure Backup vault	Challenge 15
Create and configure a backup policy	Challenge 15
Perform backup and restore operations by using Azure Backup	Challenge 15
Configure Azure Site Recovery for Azure resources	Challenge 15
Perform a failover to a secondary region by using Site Recovery	Challenge 15
Configure and interpret reports and alerts for backups	Challenge 15

---

Total skills covered: 57/57 (100%) | 28 challenges provide comprehensive coverage with deep dives into advanced topics.

This matrix is aligned with the AZ-104 study guide as of April 17, 2026.