AZ-104 · Hands-on practice

AZ-104 Hands-on Labs — practise in a simulated Azure portal

Learn it. Practise it. Make it stick.

41 practical tasks + 6 troubleshooting challenges. Familiar administration workflows, gradual hints and explanations. Independent simulation — no real tenant, device or cloud resources.

First five tasks are free, repeatable and have no expiry. No credit card required.

AZ-104 Hands-on Labs

14.99

All labs for this course. 30 days from payment confirmation.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your five free tasks.

Best value

AZ-104 Practice Exam + Hands-on Labs

29.99

Save €3.99. Exam and all labs each get 60 days.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your five free tasks.

Your learning path

LAB 01 · FREE

Organize resources with groups and tags

Resource groups · 8–10 min

Open lab →

LAB 02 · FREE

Onboard a cloud user and a scoped security group

Entra users and groups · 16–20 min

Open lab →

LAB 03 · FREE

Invite and safely offboard a project guest

Entra external identities · 18–22 min

Open lab →

LAB 04 · FREE

Prepare a scoped self-service password reset pilot

Entra password reset · 18–22 min

Open lab →

LAB 05 · FREE

Assign least-privileged access at the right scope

Access control (IAM) · 10–12 min

Open lab →

LAB 06 · LOCKED

Place a training subscription under the right guardrails

Management groups · 14–18 min

Included with full AZ-104 lab access

LAB 07 · LOCKED

Protect a resource group from accidental deletion

Resource locks · 8–10 min

Included with full AZ-104 lab access

LAB 08 · LOCKED

Remediate missing cost tags without overwriting owners

Policy · 18–22 min

Included with full AZ-104 lab access

LAB 09 · LOCKED

Catch forecast overspend before the actual bill grows

Cost Management · 12–16 min

Included with full AZ-104 lab access

LAB 10 · LOCKED

Create storage without anonymous blob access

Storage accounts · 15–18 min

Included with full AZ-104 lab access

LAB 11 · LOCKED

Prepare a bounded SMB share for a migration

Classic file shares · 15–20 min

Included with full AZ-104 lab access

LAB 12 · LOCKED

Repair SMB access without granting storage-wide privileges

File share identity access · 22–28 min

Included with full AZ-104 lab access

LAB 13 · LOCKED

Transfer a report pack and verify what actually arrived

Storage data tools · 20–25 min

Included with full AZ-104 lab access

LAB 14 · LOCKED

Rotate a storage encryption key without cutting off access

Storage encryption · 22–28 min

Included with full AZ-104 lab access

LAB 15 · LOCKED

Protect blobs and containers against deletion

Data protection · 10–12 min

Included with full AZ-104 lab access

LAB 16 · LOCKED

Recover the correct file without rolling back the share

File share snapshots · 14–18 min

Included with full AZ-104 lab access

LAB 17 · LOCKED

Move older reports to a cooler storage tier

Lifecycle management · 12–15 min

Included with full AZ-104 lab access

LAB 18 · LOCKED

Issue and revoke a policy-bound service SAS

Container access policies · 18–22 min

Included with full AZ-104 lab access

LAB 19 · LOCKED

Rotate both storage keys without breaking the consumer

Access keys · 15–20 min

Included with full AZ-104 lab access

LAB 20 · LOCKED

Replicate only approved report blobs

Object replication · 16–20 min

Included with full AZ-104 lab access

LAB 21 · LOCKED

Build a segmented virtual network

Virtual networks · 12–15 min

Included with full AZ-104 lab access

LAB 22 · LOCKED

Protect the web subnet with an NSG

Network security groups · 15–18 min

Included with full AZ-104 lab access

LAB 23 · LOCKED

Connect two virtual networks with peering

Peerings · 15–18 min

Included with full AZ-104 lab access

LAB 24 · LOCKED

Route web traffic through a network appliance

Route tables · 15–18 min

Included with full AZ-104 lab access

LAB 25 · LOCKED

Resolve a private name from two linked virtual networks

Private DNS zones · 20–25 min

Included with full AZ-104 lab access

LAB 26 · LOCKED

Restrict storage to the application subnet

Storage networking · 15–18 min

Included with full AZ-104 lab access

LAB 27 · LOCKED

Connect to storage privately and verify DNS

Private endpoints · 18–22 min

Included with full AZ-104 lab access

LAB 28 · LOCKED

Repair and deploy a reusable storage template

Deploy a custom template · 20–25 min

Included with full AZ-104 lab access

LAB 29 · LOCKED

Review and safely deploy a Bicep change

Bicep deployments · 18–22 min

Included with full AZ-104 lab access

LAB 30 · LOCKED

Deploy a private Linux virtual machine

Virtual machines · 18–20 min

Included with full AZ-104 lab access

LAB 31 · LOCKED

Resize a VM and attach storage without losing existing data

VM maintenance · 20–25 min

Included with full AZ-104 lab access

LAB 32 · LOCKED

Reach a private VM through Azure Bastion

Bastions · 20–25 min

Included with full AZ-104 lab access

LAB 33 · LOCKED

Publish a versioned image to a protected container registry

Container registries · 22–28 min

Included with full AZ-104 lab access

LAB 34 · LOCKED

Deploy and verify a public sample container

Container instances · 20–25 min

Included with full AZ-104 lab access

LAB 35 · LOCKED

Prepare a staging slot without touching production

Deployment slots · 12–15 min

Included with full AZ-104 lab access

LAB 36 · LOCKED

Scale an App Service plan with CPU demand

Scale out (App Service plan) · 18–20 min

Included with full AZ-104 lab access

LAB 37 · LOCKED

Create and secure an App Service web app

App Services · 20–25 min

Included with full AZ-104 lab access

LAB 38 · LOCKED

Send platform logs to Log Analytics and alert on failures

Monitor · 20–25 min

Included with full AZ-104 lab access

LAB 39 · LOCKED

Alert the operations team about sustained high CPU

Monitor alerts · 15–18 min

Included with full AZ-104 lab access

LAB 40 · LOCKED

Protect the VM and run an initial backup

Backup · 18–20 min

Included with full AZ-104 lab access

LAB 41 · LOCKED

Recover a VM safely from a failed backup job

Backup center · 20–25 min

Included with full AZ-104 lab access

Troubleshooting challenges

Inspect evidence, identify the cause, make a safe fix and verify it. Six separate exercises, included with full AZ-104 lab access.

The website is unreachable

5–8 min

Locked · Full lab access required

Access for one hour, not forever

5–8 min

Locked · Full lab access required

Deployment failed: policy denied

5–8 min

Locked · Full lab access required

Recover the approved report

5–8 min

Locked · Full lab access required

One backend is missing from the load balancer

7–10 min

Locked · Full lab access required

Find the resource behind repeated failures

7–10 min

Locked · Full lab access required

AZ-104 hands-on labs — questions

Does AZ-104 have labs, and can I practise them without a tenant?
Yes. ExamIT Lab gives you 41 guided AZ-104 labs in a simulated Azure portal. Nothing is deployed to a real Microsoft tenant, subscription or device, so there is nothing to set up, nothing to pay Microsoft for, and nothing you can break.
Are the AZ-104 labs free?
The first 5 labs in the learning order are free, repeatable and never expire — no credit card and no sign-up required to start. The full course of 41 labs plus 6 troubleshooting challenges is a one-time purchase with no subscription.
What does a AZ-104 lab look like?
Each lab opens a realistic simulation of the Azure portal — resource groups, IAM, virtual networks, NSGs, storage accounts and virtual machines. You get a task brief, a guided or independent mode, progressive hints and a "Check configuration" button that grades the actual end state you left behind — not just the buttons you clicked.
Do the labs cover the current AZ-104 exam outline?
The labs are mapped to the objectives in Microsoft's current AZ-104 study guide, and we re-audit the mapping when Microsoft updates the skills measured. Combine them with the AZ-104 practice test on ExamIT Lab for full coverage.
How is this different from a Microsoft Learn sandbox or a trial tenant?
A trial tenant gives you a blank environment and no feedback. These labs give you a pre-built scenario with fictional users, devices and policies, a clear goal, and automatic checking of your result — so you practise the exact administration workflows the AZ-104 exam expects, in minutes, not hours of setup.

Access is per course. Sign in for account progress. After paid access expires, your saved progress is retained and the first five tasks remain free.