AZ-104T00: Microsoft Azure Administrator Training

Understand Microsoft Entra ID

• Describe Microsoft Entra ID.
• Compare Microsoft Entra ID to Active Directory Domain Services (AD DS).
• Describe how Microsoft Entra ID is used as a directory for cloud apps.
• Describe Microsoft Entra ID P1 and P2.
• Describe Microsoft Entra Domain Services.

Configure user and group accounts

• Configure user's accounts and user account properties
• Create new user accounts
• Import bulk user accounts with a template
• Configure group accounts and assignment types

Configure subscriptions

• Determine the correct region to locate Azure services
• Review features and use cases for Azure subscriptions
• Obtain an Azure subscription
• Understand billing and features for different Azure subscriptions
• Use Microsoft Cost Management for cost analysis
• Discover when to use Azure resource tagging
• Identify ways to reduce costs

Configure Azure Policy

• Create management groups to target policies and spending budgets.
• Implement Azure Policy with policy and initiative definitions.
• Scope Azure policies and determine compliance.

Configure role-based access control

• Identify features and use cases for role-based access control.
• List and create role definitions.
• Create role assignments.
• Identify differences between Azure RBAC and Microsoft Entra roles.
• Manage access to subscriptions with RBAC.
• Review built-in Azure RBAC roles.

Create Azure users and groups in Microsoft Entra ID

• Add users to Microsoft Entra ID
• Manage app and resource access by using Microsoft Entra groups
• Give guest users access in Microsoft Entra business-to-business (B2B)

Secure your Azure resources with Azure role-based access control (Azure RBAC)

• Verify access to resources for yourself and others.
• Grant access to resources.
• View activity logs of Azure RBAC changes.

Allow users to reset their password with Microsoft Entra self-service password reset

• Decide whether to implement a self-service password reset.
• Implement self-service password reset to meet your requirements.
• Configure self-service password reset to customize the experience.

Configure virtual networks

• Describe Azure virtual network features and components.
• Identify features and usage cases for subnets and subnetting.
• Identify usage cases for private and public IP addresses.
• Create a virtual network and assign IP address.

Configure network security groups

• Determine when to use network security groups.
• Create network security groups.
• Implement and evaluate network security group rules.
• Describe the function of application security groups.

Configure Azure Virtual Network peering

• Identify usage cases and product features of Azure Virtual Network peering.
• Configure your network to implement Azure VPN Gateway for transit connectivity.
• Extend peering by using a hub and spoke network with user-defined routes and service chaining.

Configure network routing and endpoints

• Implement system routes and user-defined routes.
• Configure a custom route.
• Implement service endpoints.
• Identify features and usage cases for Azure Private Link and endpoint services.

Configure Azure Load Balancer

• Identify features and usage cases for Azure Load Balancer.
• Implement public and internal Azure load balancers.
• Compare features of load balancer SKUs and configuration differences.
• Configure back-end pools, load-balancing rules, session persistence, and health probes.

Configure Azure Application Gateway

• Identify features and usage cases for Azure Application Gateway.
• Implement an Azure application gateway, including selecting a routing method.
• Configure gateway components, such as listeners, health probes, and routing rules.

Design an IP addressing schema for your Azure deployment

• Identify the private IP addressing capabilities of Azure virtual networks.
• Identify the public IP addressing capabilities of Azure.
• Identify the requirements for IP addressing when integrating with on-premises networks.

Distribute your services across Azure virtual networks and integrate them by using virtual network peering

• Identify use cases for virtual network peering.
• Identify the features and limitations of virtual network peering.
• Configure peering connections between virtual networks.

Host your domain on Azure DNS

• Configure Azure DNS to host your domain.

Manage and control traffic flow in your Azure deployment with routes

• Identify the routing capabilities of an Azure virtual network
• Configure routing within a virtual network
• Deploy a basic network virtual appliance
• Configure routing to send traffic through a network virtual appliance

Improve application scalability and resiliency by using Azure Load Balancer

• Identify the features and capabilities of Azure Load Balancer.
• Deploy and configure an Azure Load Balancer.

Configure storage accounts

• Identify features and usage cases for Azure storage accounts.
• Select between different types of Azure Storage and create storage accounts.
• Select a storage replication strategy.
• Configure secure network access to storage endpoints.

Configure Azure Blob Storage

• Understand the purpose and benefits of Azure Blob Storage.
• Create and configure Azure Blob Storage accounts.
• Manage containers and blobs within Azure Blob Storage.
• Optimize blob storage performance and scalability.
• Implement lifecycle management policies to automate data movement and deletion.
• Determine the best pricing plans for your Azure Blob Storage.

Configure Azure Storage security

• Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
• Configure Azure Storage encryption.
• Implement customer-managed keys.
• Recommend opportunities to improve Azure Storage security.

Configure Azure Files and Azure File Sync

• Identify storage for file shares versus blob data.
• Configure Azure file shares and file share snapshots.
• Identify features and use cases of Azure File Sync.
• Identify Azure File Sync components and configuration steps.

Create an Azure Storage account

• Decide how many storage accounts you need for your project
• Determine the appropriate settings for each storage account
• Create a storage account using the Azure portal

Control access to Azure Storage with shared access signatures

• Identify the features of a shared access signature for Azure Storage.
• Identify the features of stored access policies.
• Programmatically generate and use a shared access signature to access storage.

Upload, download, and manage data with Azure Storage Explorer

• Describe the features of Azure Storage Explorer.
• Install Storage Explorer.
• Use Storage Explorer to connect to Azure Storage services and manipulate stored data.

Configure virtual machines

• Determine the responsibilities of cloud service providers and customers in a cloud computing environment.
• Identify the key considerations and factors involved in planning for virtual machines. Considerations include workload requirements, resource allocation, and secure access.
• Configure virtual machine storage and virtual machine sizing.
• Create a virtual machine in the Azure portal.
• Practice deploying an Azure virtual machine and verify the configuration.

Configure virtual machine availability

• Implement availability sets and availability zones.
• Implement update and fault domains.
• Implement Azure Virtual Machine Scale Sets.
• Autoscale virtual machines.

Configure Azure App Service plans

• Identify features and usage cases for Azure App Service.
• Select an appropriate Azure App Service plan pricing tier.
• Scale an Azure App Service plan.

Configure Azure App Service

• Identify features and usage cases for Azure App Service.
• Create an app with Azure App Service.
• Configure deployment settings, specifically deployment slots.
• Secure your Azure App Service app.
• Configure custom domain names.
• Back up and restore your Azure App Service app.
• Configure Azure Application Insights.

Configure Azure Container Instances

• Identify when to use containers versus virtual machines.
• Identify the features and usage cases of Azure Container Instances.
• Implement Azure container groups.

Manage virtual machines with the Azure CLI

• Create a virtual machine with the Azure CLI.
• Resize virtual machines with the Azure CLI.
• Perform basic management tasks using the Azure CLI.
• Connect to a running VM with SSH and the Azure CLI.

Create a Windows virtual machine in Azure

• Create a Windows virtual machine using the Azure portal.
• Connect to a running Windows virtual machine using Remote Desktop.
• Install software and change the network configuration on a VM using the Azure portal.

Host a web application with Azure App Service

• Use the Azure portal to create an Azure App Service web app.
• Use developer tools to create the code for a starter web application.
• Deploy your code to Azure App Service.

Introduction to Azure Backup

• Evaluate whether Azure Backup is appropriate to use for your backup needs.
• Describe how the features of Azure Backup work to provide backup solutions for your needs.

Configure virtual machine backups

• Identify features and usage cases for different Azure backup methods.
• Configure virtual machine snapshots and backup options.
• Implement virtual machine backup and restore, including soft delete.
• Perform site-to-site recovery by using Azure Site Recovery.

Configure Azure Monitor

• Identify the features and usage cases for Azure Monitor.
• Configure and interpret metrics and logs.
• Identify the Azure Monitor components and data types.
• Configure the Azure Monitor activity log.

Configure Log Analytics

• Identify the features and usage cases for Log Analytics.
• Create a Log Analytics workspace.
• Structure a Log Analytics query and review results.

Configure Network Watcher

• Identify the features and usage cases for Azure Network Watcher.
• Configure diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.

Improve incident response with Azure Monitor alerts

• Configure alerts on events in your Azure resources based on metrics, log events, and activity log events.
• Learn how to use action groups in response to an alert, and how to use alert processing rules to override action groups when necessary.

Analyze your Azure infrastructure by using Azure Monitor logs

• Identify the features and capabilities of Azure Monitor logs.
• Create basic Azure Monitor log queries to extract information from log data.

Monitor your Azure virtual machines with Azure Monitor

• Understand which monitoring data you need to collect from your VM.
• Enable and view recommended alerts and diagnostics.
• Use Azure Monitor to collect and analyze VM host metrics data.
• Use Azure Monitor Agent to collect VM client performance metrics and event logs.

Microsoft Azure Administrator is designed for IT professionals to gain knowledge of the right methodologies. This will further help them in tasks like managing Azure subscriptions, implementing storage solutions, and building and scaling digital machines.

Yes, you can opt to take AZ-305 Exam before completing AZ-104 exam. However, for completing Azure Solutions Architect Expert on is supposed to complete both certifications.

No, since AZ-104 is a role-based exam, one will be accessing Microsoft Learn while taking the examination. Hence, it is not an open-book exam.

AZ-104 certification validity expires after one year. However, you can renew this certification for free online before it expires.