Microsoft Azure Administrator (AZ-104T00)

Course Overview

1 - Configure Microsoft Entra ID

• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement Azure Active Directory self-service password reset

2 - Configure user and group accounts

• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units

3 - Configure subscriptions

• Identify Azure regions
• Implement Azure subscriptions
• Obtain an Azure subscription
• Identify Azure subscription usage
• Implement Microsoft Cost Management
• Apply resource tagging
• Apply cost savings

4 - Configure Azure Policy

• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create an initiative definition
• Scope the initiative definition
• Determine compliance

5 - Configure role-based access control

• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Review fundamental Azure RBAC roles

6 - Configure Azure resources with tools

• Use the Azure portal
• Use Azure Cloud Shell
• Use Azure PowerShell
• Use Azure CLI

7 - Use Azure Resource Manager

• Review Azure Resource Manager benefits
• Review Azure resource terminology
• Create resource groups
• Create Azure Resource Manager locks
• Reorganize Azure resources
• Remove resources and resource groups
• Determine resource limits

8 - Configure resources with Azure Resource Manager templates

• Review Azure Resource Manager template advantages
• Explore the Azure Resource Manager template schema
• Explore the Azure Resource Manager template parameters
• Consider Bicep templates
• Review QuickStart templates

9 - Configure virtual networks

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses

10 - Configure network security groups

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups

11 - Configure Azure DNS

• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for Azure Private DNS zones
• Review Azure Private DNS zone scenarios

12 - Configure Azure Virtual Network peering

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining

13 - Configure network routing and endpoints

• Review system routes
• Identify user-defined routes
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses

14 - Configure Azure Load Balancer

• Determine Azure Load Balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create back-end pools
• Create health probes
• Create load balancer rules

15 - Configure Azure Application Gateway

• Implement Azure Application Gateway
• Determine Azure Application Gateway routing
• Configure Azure Application Gateway components

16 - Configure storage accounts

• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints

17 - Configure Azure Blob Storage

• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing

18 - Configure Azure Storage security

• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices

19 - Configure Azure Files and Azure File Sync

• Compare storage for file shares and blob data
• Manage Azure file shares
• Create file share snapshots
• Implement Azure File Sync
• Identify Azure File Sync components
• Deploy Azure File Sync

20 - Configure Azure Storage with tools

• Use Azure Storage Explorer
• Use the Azure Import/Export service
• Use the WAImportExport tool
• Use the AzCopy tool

21 - Configure virtual machines

• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines

22 - Configure virtual machine availability

• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale

23 - Configure Azure App Service plans

• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale

24 - Configure Azure App Service

• Implement Azure App Service
• Create an app with App Service
• Explore continuous integration and deployment
• Create deployment slots
• Add deployment slots
• Secure your App Service app
• Create custom domain names
• Back up and restore your App Service app
• Use Azure Application Insights

25 - Configure Azure Container Instances

• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review the Docker platform

26 - Configure file and folder backups

• Describe Azure Backup benefits
• Implement Backup center for Azure Backup
• Configure Azure Recovery Services vault backup options
• Use the Microsoft Azure Recovery Services (MARS) agent
• Configure on-premises file and folder backups

27 - Configure virtual machine backups

• Explore options to protect virtual machine data
• Create virtual machine snapshots in Azure Backup
• Set up Azure Recovery Services vault backup options
• Back up your virtual machines
• Restore your virtual machines
• Implement System Center DPM and Azure Backup Server
• Compare the MARS agent and Azure Backup Server
• Implement soft delete for your virtual machines
• Implement Azure Site Recovery

28 - Configure Azure Monitor

• Describe Azure Monitor key capabilities
• Describe Azure Monitor components
• Define metrics and logs
• Identify monitoring data and tiers
• Describe activity log events
• Query the activity log

29 - Configure Azure alerts

• Describe Azure Monitor alerts
• Manage Azure Monitor alerts
• Create alert rules
• Create action groups

30 - Configure Log Analytics

• Determine Log Analytics uses
• Create a Log Analytics workspace
• Create Kusto (KQL) queries
• Structure Log Analytics queries

31 - Configure Network Watcher

• Describe Azure Network Watcher features
• Review IP flow verify diagnostics
• Review next hop diagnostics
• Visualize the network topology

Prerequisites

Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage. Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks. Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies. Understanding of Active Directory concepts, including users, groups, and role-based access control. Understanding of resilience and disaster recovery, including backup and restore operations.