Microsoft Azure Administrator (AZ-104T00)
This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.
Contact Us for Exclusive Service Member Pricing
Course Delivery Options
Check out our full list of training locations and learning formats. Please note that the location you choose may be an Established HD-ILT location with a virtual live instructor.
Train face-to-face with the live instructor.
Access to on-demand training content anytime, anywhere.
Attend the live class from the comfort of your home or office.
Interact with a live, remote instructor from a specialized, HD-equipped classroom near you. An SLI sales rep will confirm location availability prior to registration confirmation.
All Sunset Learning dates are guaranteed to run!
Register
Prerequisites:
- Microsoft Azure Fundamentals: Describe cloud concepts
- Azure Fundamentals: Describe Azure architecture and services
- Azure Fundamentals: Describe Azure management and governance
Target Audience:
This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate. Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.
- Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
- Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory concepts, including users, groups, and role-based access control.
- Understanding of resilience and disaster recovery, including backup and restore operations.
Course Objectives:
Students will learn to:
- Prerequisites for Azure Administrators
- Manage identities and governance in Azure
- Configure and manage virtual networks for Azure administrators
- Implement and manage storage in Azure
Course Outline:
Prerequisites for Azure Administrators:
Learn the basic Azure concepts you need to know as an Azure administrator. Here are the learning paths in the AZ-104
Azure Administrator series.
- Use Azure Resource Manager:
- Review Azure Resource Manager benefits
- Review Azure resource terminology
- Create resource groups3 min
- Create Azure Resource Manager locks
- Reorganize Azure resources3 min
- Remove resources and resource groups
- Determine resource limits
- Introduction to Azure Cloud Shell:
- What is Azure Cloud Shell?
- How does Azure Cloud Shell work?
- When should you use Azure Cloud Shell?
- Introduction to Bash:
- What is Bash?
- Bash fundamentals
- Bash commands and operators
- Exercise – Try Bash
- Exercise – Terminate a misbehaving process
- Exercise – Use Bash and grep to filter CLI output
- Introduction to PowerShell:
- What is PowerShell?
- Exercise – Run your first PowerShell commands
- Locate commands
- Exercise – Locate commands
Manage identities and governance in Azure
Learn how to manage Azure Active Directory objects, role-based access control (RBAC), subscriptions, and governance in Azure. Here are the learning paths in the AZ-104 Azure Administrator series:
- Understand Microsoft Entra ID:
- Examine Microsoft Entra ID
- Compare Microsoft Entra ID and Active Directory Domain Services
- Examine Microsoft Entra ID as a directory service for cloud apps
- Compare Microsoft Entra ID P1 and P2 plans
- Examine Microsoft Entra Domain Services
- Configure User & Group Accounts:
- Create user accounts
- Manage user accounts
- Create bulk user accounts
- Create group accounts
- Create administrative units
- Configure Subscriptions:
- Identify Azure regions
- Implement Azure subscriptions
- Obtain an Azure subscription
- Identify Azure subscription usage
- Implement Microsoft Cost Management
- Apply resource tagging
- Apply cost savings
- Configure Azure Policy:
- Create management groups
- Implement Azure policies
- Create Azure policies
- Create policy definitions
- Create an initiative definition
- Scope the initiative definition
- Determine compliance
- Interactive lab simulation
- Configure role-based access control:
- Implement role-based access control
- Create a role definition
- Create a role assignment
- Compare Azure roles to Microsoft Entra roles
- Apply role-based access control
- Review fundamental Azure RBAC roles
- Interactive lab simulation
- Create Azure users and groups in Microsoft Entra ID:
- What are user accounts in Microsoft Entra ID?
- Exercise – Add and delete users in Microsoft Entra ID
- Manage app and resource access by using Microsoft Entra groups
- Exercise – Assign users to Microsoft Entra groups
- Collaborate by using guest accounts and Microsoft Entra B2B
- Exercise – Give guest users access in Microsoft Entra B2B
- Secure your Azure resources with Azure role-based access control (Azure RBAC):
- What is Azure RBAC?
- Knowledge check – What is Azure RBAC?
- Exercise – List access using Azure RBAC and the Azure portal
- Exercise – Grant access using Azure RBAC and the Azure portal
- Exercise – View activity logs for Azure RBAC changes
- Knowledge check – Using Azure RBAC
- Allow users to reset their password with Microsoft Entra self-service password reset:
- What is self-service password reset in Microsoft Entra ID?
- Implement Microsoft Entra self-service password reset
- Exercise – Set up self-service password reset
- Exercise – Customize directory branding
Manage identities and governance in Azure:
Learn how to manage Azure Active Directory objects, role-based access control (RBAC), subscriptions, and governance in Azure. Here are the learning paths in the AZ-104 Azure Administrator series:
- Understand Microsoft Entra ID:
- Examine Microsoft Entra ID
- Compare Microsoft Entra ID and Active Directory Domain Services
- Examine Microsoft Entra ID as a directory service for cloud apps
- Compare Microsoft Entra ID P1 and P2 plans
- Examine Microsoft Entra Domain Services
- Configure User & Group Accounts:
- Create user accounts
- Manage user accounts
- Create bulk user accounts
- Create group accounts
- Create administrative units
- Configure Subscriptions:
- Identify Azure regions
- Implement Azure subscriptions
- Obtain an Azure subscription
- Identify Azure subscription usage
- Implement Microsoft Cost Management
- Apply resource tagging
- Apply cost savings
- Configure Azure Policy:
- Create management groups
- Implement Azure policies
- Create Azure policies
- Create policy definitions
- Create an initiative definition
- Scope the initiative definition
- Determine compliance
- Interactive lab simulation
- Configure role-based access control:
- Implement role-based access control
- Create a role definition
- Create a role assignment
- Compare Azure roles to Microsoft Entra roles
- Apply role-based access control
- Review fundamental Azure RBAC roles
- Interactive lab simulation
- Create Azure users and groups in Microsoft Entra ID:
- What are user accounts in Microsoft Entra ID?
- Exercise – Add and delete users in Microsoft Entra ID
- Manage app and resource access by using Microsoft Entra groups
- Exercise – Assign users to Microsoft Entra groups
- Collaborate by using guest accounts and Microsoft Entra B2B
- Exercise – Give guest users access in Microsoft Entra B2B
- Secure your Azure resources with Azure role-based access control (Azure RBAC):
- What is Azure RBAC?
- Knowledge check – What is Azure RBAC?
- Exercise – List access using Azure RBAC and the Azure portal
- Exercise – Grant access using Azure RBAC and the Azure portal
- Exercise – View activity logs for Azure RBAC changes
- Knowledge check – Using Azure RBAC
- Allow users to reset their password with Microsoft Entra self-service password reset:
- What is self-service password reset in Microsoft Entra ID?
- Implement Microsoft Entra self-service password reset
- Exercise – Set up self-service password reset
- Exercise – Customize directory branding
Configure and manage virtual networks for Azure administrators:
Learn how to configure and manage Azure network capabilities like connectivity services, application protection, application delivery, and network monitoring services.
- Configure Virtual Networks:
- Plan Virtual Networks
- Create Subnets
- Create Virtual Networks
- Plan IP Addressing
- Create Public IP Addressing
- Associate Public IP Addresses
- Allocate or Assign Private IP Addresses
- Interactive Lab Simulation
- Configure Network Security Groups:
- Implement Network Security Groups
- Determine Network Security Group Rules
- Determine Network Security Group Effective Rules
- Create Network Security Group Rules
- Implement Application Security Groups
- Interactive Lab Simulation
- Configure Azure Virtual Network Peering:
- Determine Azure Virtual Networks Peering Uses
- Determine Gateway Transit & Connectivity
- Create Virtual Network Peering
- Extend Peering with User-Defined Routes & Service Chaining
- Interactive Lab Simulation
- Configure Networking Routing & Endpoints:
- Review System Routes
- Identify User-Defined Routes
- Determine Service Endpoint Uses
- Determine Service Endpoint Services
- Identify Private Link Uses
- Interactive Lab Simulation
- Configure Azure Load Balancer:
- Determine Azure Load Balancer uses
- Implement a public load balancer
- Implement an internal load balancer
- Determine load balancer SKUs
- Create back-end pools
- Create health probes
- Create load balancer rules
- Interactive lab simulation
- Configure Azure Application Gateway:
- Implement Azure Application Gateway
- Determine Azure Application Gateway routing
- Configure Azure Application Gateway components
- Design an IP addressing schema for your Azure deployment:
- Network IP addressing and integration
- Public and private IP addressing in Azure
- Plan IP addressing for your networks
- Exercise – Design and implement IP addressing for Azure virtual networks
- Distribute your services across Azure virtual networks and integrate them by using virtual network peering:
- Connect services by using virtual network peering
- Exercise – Prepare virtual networks for peering by using Azure CLI commands
- Exercise – Configure virtual network peering connections by using Azure CLI commands
- Exercise – Verify virtual network peering by using SSH between Azure virtual machines
- Host your domain on Azure DNS:
- What is Azure DNS?
- Configure Azure DNS to host your domain
- Exercise – Create a DNS zone and an A record by using Azure DNS
- Dynamically resolve resource name by using alias record
- Exercise – Create alias records for Azure DNS
- Manage and control traffic flow in your Azure deployment with routes:
- Identify routing capabilities of an Azure virtual network
- Exercise – Create custom routes
- What is an NVA?
- Exercise – Create an NVA and virtual machines
- Exercise – Route traffic through the NVA
- Improve application scalability and resiliency by using Azure Load Balancer:
- Azure Load Balancer features and capabilities
- Configure a public load balancer
- Exercise – Configure a public load balancer
- Internal load balancer
Implement and manage storage in Azure:
Learn how to manage storage accounts, data in Azure Storage, and Azure File and Blob storage.
- Configure storage accounts:
- Implement Azure Storage
- Explore Azure Storage services
- Determine storage account types
- Determine replication strategies
- Access storage
- Secure storage endpoints
- Configure Azure Blob Storage:
- Implement Azure Blob Storage
- Create blob containers
- Assign blob access tiers
- Add blob lifecycle management rules
- Determine blob object replication
- Upload blobs
- Determine Blob Storage pricing
- Interactive lab simulation
- Configure Azure Storage security:
- Review Azure Storage security strategies
- Create shared access signatures
- Identify URI and SAS parameters
- Determine Azure Storage encryption
- Create customer-managed keys
- Apply Azure Storage security best practices
- Interactive lab simulation
- Configure Azure Files and Azure File Sync:
- Compare storage for file shares and blob data
- Manage Azure file shares
- Create file share snapshots
- Implement soft delete for Azure Files
- Use Azure Storage Explorer
- Deploy Azure File Sync
- Configure Azure Files and Azure File Sync:
- Compare storage for file shares and blob data
- Manage Azure file shares
- Create file share snapshots
- Implement soft delete for Azure Files
- Use Azure Storage Explorer
- Deploy Azure File Sync
- Create an Azure Storage account:
- Decide how many storage accounts you need
- Choose your account settings
- Choose an account creation tool
- Exercise – Create a storage account using the Azure portal
- Create a Storage Account
- Control access to Azure Storage with shared access signatures:
- Authorization options for Azure Storage
- Use shared access signatures to delegate access to Azure Storage
- Exercise – Use shared access signatures to delegate access to Azure Storage
- Use stored access policies to delegate access to Azure Storage
- Exercise – Use stored access policies to delegate access to Azure Storage
- Upload, download, and manage data with Azure Storage Explorer:
- Connect Azure Storage Explorer to Azure Data Lake Storage
Deploy and manage Azure compute resources:
Learn how to deploy and configure virtual machines, containers, and Web Apps in Azure. Here are the learning paths in the AZ-104 Azure Administrator series.
- Configure virtual machines:
- Review cloud services responsibilities
- Plan virtual machines
- Determine virtual machine sizing
- Determine virtual machine storage
- Create virtual machines in the Azure portal
- Connect to virtual machines
- Interactive lab simulation
- Configure virtual machine availability:
- Plan for maintenance and downtime
- Create availability sets
- Review update domains and fault domains
- Review availability zones
- Compare vertical and horizontal scaling
- Implement Azure Virtual Machine Scale Sets
- Create Virtual Machine Scale Sets
- Implement autoscale
- Configure autoscale
- Interactive lab simulation
- Configure Azure App Service plans:
- Implement Azure App Service plans
- Determine Azure App Service plan pricing
- Scale up and scale out Azure App Service
- Configure Azure App Service autoscale
- Configure Azure App Service:
- Implement Azure App Service
- Create an app with App Service
- Explore continuous integration and deployment
- Create deployment slots
- Add deployment slots
- Secure your App Service app
- Create custom domain names
- Back up and restore your App Service app
- Use Azure Application Insights
- Interactive lab simulation
- Configure Azure Container Instances:
- Compare containers to virtual machines
- Review Azure Container Instances
- Implement container groups
- Review Azure Container Apps
- Interactive lab simulation
- Manage virtual machines with the Azure CLI:
- What is the Azure CLI?
- Exercise – Create a virtual machine
- Exercise – Test your new virtual machine
- Exercise – Explore other VM images
- Exercise – Sizing VMs properly
- Exercise – Query system and runtime information about the VM
- Exercise – Start and stop your VM with the Azure CLI
- Exercise – Install software on your VM
- Summary and cleanup
- Create a Windows virtual machine in Azure:
- Create a Windows virtual machine in Azure
- Exercise – Create a Windows virtual machine
- Use RDP to connect to Windows Azure virtual machines
- Exercise – Connect to a Windows virtual machine using RDP
- Configure Azure virtual machine network settings
- Host a web application with Azure App Service:
- Create a web app in the Azure portal
- Exercise – Create a web app in the Azure portal
- Prepare the web application code
- Exercise – Write code to implement a web application
- Deploy code to App Service
- Exercise – Deploy your code to App Service