AZ-104 Retake Rules and Waiting Period: Official Microsoft Policy Explained
You failed the Microsoft Azure Administrator (AZ-104) exam and now you’re staring at your score report wondering: when can I actually retake this? The waiting period rules for Microsoft certifications aren’t always obvious, and the confusion costs candidates weeks of wasted time or, worse, expensive retakes scheduled too soon and rejected by the system.
This guide explains the exact retake policies, waiting periods, and what you need to know before scheduling attempt number two.
Direct Answer
You must wait 24 hours after failing the AZ-104 exam before you can retake it. However, Microsoft’s retake rules escalate if you fail multiple times: after three failed attempts within 12 months, you must wait 14 days before your fourth attempt. There is no additional cost to schedule your retake during the 24-hour wait period—you simply cannot sit for the exam during that time. The AZ-104 exam code is registered under Pearson VUE testing centers, and the retake policy is enforced automatically by their system, so you cannot bypass it even with expedited scheduling. Plan your next attempt accordingly, as rescheduling during the mandatory wait period will be rejected.
Why This Happens to Microsoft Azure Administrator Candidates
Azure Administrator candidates face a unique pressure because the exam itself covers so much ground—RBAC (Role-Based Access Control), VNet (Virtual Networks), NSG (Network Security Groups), Storage Accounts, App Service, Azure AD (Active Directory), and Key Vault security are all weighted heavily in the exam objectives. When candidates fail, their instinct is to immediately rebook and try again, thinking they just had a bad day or got unlucky with the question distribution.
But here’s what actually happens: candidates who retake within 48 hours, before they’ve properly processed their score report and identified knowledge gaps, fail again at almost the same score. The 24-hour waiting period exists partly as a technical requirement, but it also serves as a forced pause—one you should use strategically, not waste it by stress-refreshing the Pearson VUE scheduling page every hour.
The confusion around retake rules also stems from the fact that Microsoft delegates all exam administration to Pearson VUE, and many candidates don’t realize the policy is different from other vendors. CompTIA, for example, allows retakes within 24 hours for the first attempt, but subsequent attempts have different rules. Azure follows a stricter escalating penalty structure because Azure certifications carry higher professional stakes.
The Root Cause: Confusion About Vendor-Specific Retake Rules
Microsoft Azure certifications are administered through Pearson VUE, not Prometric or other vendors. This matters because Pearson VUE enforces a specific retake policy that Microsoft has mandated:
First and second failed attempts: 24-hour mandatory wait before retake is allowed.
Third failed attempt within 12 months: You must wait 14 days before attempting again.
Fourth failed attempt and beyond: The 14-day waiting period resets for each subsequent attempt.
Most candidates don’t discover this escalating structure until they’ve already failed twice and expected the same 24-hour rule to apply. They book a fourth attempt, get rejected at the scheduling stage, and then panic.
The root cause of this confusion is that the waiting period is tied to failed attempts within a rolling 12-month window, not to calendar dates or exam registration dates. If you fail on January 10th, that failure counts toward your 12-month rolling window. If you fail again on March 15th, you’ve now hit two failures within the window. Your third attempt on April 20th will trigger the 14-day waiting period rule if it fails.
Additionally, candidates confuse the “waiting period” with the “retake eligibility period.” You are eligible to retake immediately after 24 hours—you don’t have to wait. But you cannot sit for the exam during those 24 hours. Many candidates think they can’t even schedule during the waiting period, so they wait an extra 5-7 days before booking, unnecessarily delaying their next attempt.
How the Microsoft Azure Administrator Exam Actually Tests This
The AZ-104 exam measures your ability to implement and manage Azure resources in real production scenarios. The exam doesn’t test your knowledge of retake policies—it tests whether you can configure RBAC roles to grant appropriate permissions, design VNet topologies with NSG rules that enforce security, manage Storage Account access tiers and encryption, deploy App Service applications with authentication, integrate Azure AD for identity management, and secure secrets in Key Vault.
When you fail, your score report breaks down your performance by objective domain. If you scored below the passing threshold of 700/1000, you likely have gaps in multiple domains, not just one. The vendors’ retake policy isn’t designed to punish you—it’s designed to give you time to identify and fix those gaps using the right study materials.
The exam tests applied knowledge. You might understand the concept that RBAC uses role definitions and scope assignments, but when the exam presents a scenario where you need to assign a custom role with specific data actions, you freeze because you haven’t practiced the exact configuration steps. Similarly, you might know that NSG rules are stateless, but when asked whether an outbound rule will affect return traffic, you second-guess yourself because you haven’t internalized the behavior through hands-on labs.
Example scenario:
Your company hosts a multi-tier application on Azure. The web tier runs in App Service, the data tier uses Azure SQL Database, and configuration data is stored in Key Vault. The application needs to authenticate users via Azure AD and access Key Vault secrets. You need to assign permissions without storing secrets in code.
Which of the following configurations correctly implements identity-based access to Key Vault?
A) Create a service principal, assign it a custom RBAC role with Key Vault secrets read permission, configure the App Service managed identity to assume that service principal role.
B) Create a managed identity for the App Service, assign it the “Key Vault Secrets User” RBAC role scoped to the Key Vault, configure the application to use DefaultAzureCredential.
C) Store an access key in App Service environment variables, configure the variable to refresh every 24 hours, allow the database to validate the key on each request.
D) Create a separate Azure AD app registration, assign it permissions to both App Service and Key Vault, and authenticate the App Service using a shared secret stored in configuration.
The correct answer is B. This tests whether you understand that App Service can use a managed identity (eliminating the need to store secrets), that the appropriate RBAC role is task-specific (not a broad role like “Contributor”), and that Azure AD integration happens automatically with the right identity configuration.
Why the wrong answers trap candidates: Option A sounds technical and mentions managed identity, so candidates who haven’t done hands-on practice think it might work. Option C appeals to candidates who don’t understand managed identities—they think rotating keys manually is a valid pattern. Option D is the old way that candidates with older certifications (like AZ-900 background) might choose because it feels familiar.
How to Fix This Before Your Next Attempt
1. Use the 24-hour waiting period strategically, not passively.
Don’t spend those 24 hours refreshing your score report or re-reading old study notes. Instead, download your score report, identify the objective domains where you scored lowest (typically shown as percentages per domain), and cross-reference those with the official Microsoft Learn paths. If you scored lowest in “Manage identities and governance,” you need to focus on RBAC, Azure AD, and role assignment scenarios. Create a study plan that addresses only the weak domains—not a full reset of all content.
2. Rebuild your understanding through hands-on labs, not memorization.
The AZ-104 exam tests scenario-based application of concepts. If you failed, you likely have gaps in hands-on practice, not just conceptual knowledge. Spend 40% of your remaining study time in the Azure portal doing labs. Specifically: create a custom RBAC role and assign it to a test user; build a VNet with multiple subnets and create NSG rules to restrict traffic between them; configure a Storage Account with encryption and access keys; deploy an App Service and configure Azure AD authentication; create secrets in Key Vault and assign permissions using managed identities.
3. Take a practice exam only after addressing weak domains.
Before you retake the official exam, take a full-length practice exam that accurately reflects the current exam format (AZ-104 has been updated multiple times). Score below 75