Microsoft Azure Administrator (AZ-104T00)

Prerequisites:

Successful Azure Administrators start this role with experience in virtualization, networking, Identity and storage.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations.

Prerequisite courses (or equivalent knowledge and hands-on experience):

• Microsoft Azure Fundamentals: Describe cloud concepts
• Azure Fundamentals: Describe Azure architecture and services
• Azure Fundamentals: Describe Azure management and governance
• AZ-104: Prerequisites for Azure administrators – Learn | Microsoft Docs

Target Audience:

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.

Course Objectives:

Upon completion of this course, you will be able to:

• Configure Azure Active Directory
• Configure user and group accounts
• Configure subscriptions
• Configure Azure Policy
• Configure role-based access control
• Configure Azure resources with tools
• Use Azure Resource Manager
• Configure resources with Azure Resource Manager templates
• Configure virtual networks
• Configure network security groups
• Configure Azure Firewall
• Configure Azure DNS
• Configure virtual network peering
• Configure VPN Gateway
• Configure ExpressRoute and Virtual WAN
• Configure network routing and endpoints
• Configure Azure Load Balancer
• Configure Azure Application Gateway
• Configure storage accounts
• Configure Azure Blob Storage
• Configure Azure Storage security
• Configure Azure Files and Azure File Sync
• Configure Azure Storage with tools
• Configure virtual machines
• Configure virtual machine availability
• Configure virtual machine extensions
• Configure app service plans
• Configure Azure App Services
• Configure Azure Container Instances
• Configure Azure Kubernetes Service
• Configure file and folder backups
• Configure virtual machine backups
• Configure Azure Monitor
• Configure Azure alerts
• Configure Log Analytics
• Configure Network Watcher

Course Outline:

Module 1: Configure Azure Active Directory

• Define Azure AD concepts, including identities, accounts, and tenants.
• Describe Azure AD features to support different configurations.
• Understand differences between Azure AD and Active Directory Domain Services (AD DS).
• Choose between supported editions of Azure AD.
• Implement the Azure AD join feature.
• Use the Azure AD self-service password reset feature

Module 2: Configure user and group accounts

• Configure users accounts and user account properties.
• Create new user accounts.
• Import bulk user accounts with a template.
• Configure group accounts and assignment types.

Module 3: Configure subscriptions

• Determine the correct region to locate Azure services.
• Review features and use cases for Azure subscriptions.
• Obtain an Azure subscription.
• Understand billing and features for different Azure subscriptions.
• Use Microsoft Cost Management for cost analysis.
• Discover when to use Azure resource tagging.
• Identify ways to reduce costs.

Module 4: Configure Azure Policy

• Create management groups to target policies and spending budgets.
• Implement Azure Policy with policy and initiative definitions.
• Scope Azure policies and determine compliance.

Module 5: Configure role-based access control

• Identify features and use cases for role-based access control.
• List and create role definitions.
• Create role assignments.
• Identify differences between Azure RBAC and Azure Active Directory roles.
• Manage access to subscriptions with RBAC.
• Review built-in Azure RBAC roles.

Module 6: Configure Azure resources with tools

• Manage resources with the Azure portal.
• Manage resources with Azure Cloud Shell.
• Manage resources with Azure PowerShell.
• Manage resources with Azure CLI.

Module 7: Use Azure Resource Manager

• Identify the features and usage cases for Azure Resource Manager.
• Describe each Azure Resource Manager component and its usage.
• Organize your Azure resources with resource groups.
• Apply Azure Resource Manager locks.
• Move Azure resources between groups, subscriptions, and regions.
• Remove resources and resource groups.
• Apply and track resource limits.

Module 8: Configure resources with Azure Resource Manager templates

• List the advantages of Azure templates.
• Identify the Azure template schema components.
• Specify Azure template parameters.
• Locate and use Azure Quickstart Templates.

Module 9: Configure virtual networks

• Describe virtual network features and components.
• Identify features and usage cases for subnets and subnetting.
• Identify usage cases for private and public IP addresses.
• Create and determine which resources require public IP addresses.
• Create and determine which resources require private IP addresses.
• Create virtual networks.

Module 10: Configure network security groups

• Determine when to use network security groups.
• Implement network security group rules.
• Evaluate network security group effective rules.

Module 11: Configure Azure Firewall

• Determine when to use Azure Firewall.
• Implement Azure Firewall including firewall rules

Module 12: Configure Azure DNS

• Identify features and usage cases for domains, custom domains, and private zones.
• Verify custom domain names using DNS records.
• Implement DNS zones, DNS delegation, and DNS record sets.

Module 13: Configure virtual network peering

• Identify usage cases and product features of virtual network peering.
• Configure gateway transit, connectivity, and service chaining.

Module 14: Configure VPN Gateway

• Identify features and usage cases for VPN gateways.
• Implement high availability scenarios.
• Configure site-to-site VPN connections using a VPN gateway.

Module 15: Configure ExpressRoute and Virtual WAN

• Identify features and usage cases for ExpressRoute.
• Coexist site-to-site and ExpressRoute networks.
• Identify features and usage cases for virtual WAN.

Module 16: Configure Network Routing and Endpoints

• Implement system routes and user-defined routes.
• Configure a custom route.
• Implement service endpoints.
• Identify features and usage cases for private links and endpoint services.

Module 17: Configure Azure Load Balancer

• Identify features and usage cases for Azure load balancer.
• Implement public and internal Azure load balancers.
• Configure load balancer SKUs, backend pools, session persistence, and health probes.

Module 18: Configure Azure Application Gateway

• Identify features and usage cases for Azure Application Gateway.
• Implement Azure Application Gateway, including selecting a routing method.
• Configure gateway features such as routing rules.

Module 19: Configure Storage Accounts

• Identify features and usage cases for Azure storage accounts.
• Select between different types of Azure Storage and storage accounts.
• Select a storage replication strategy.
• Configure network access to storage accounts.
• Secure storage endpoints.

Module 20: Configure Azure Blob Storage

• Identify features and usage cases for Azure Blob Storage.
• Configure Blob Storage and Blob access tiers.
• Configure Blob lifecycle management rules.
• Configure Blob object replication.
• Upload and price Blob Stor

Module 21: Configure Azure Storage security

• Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
• Configure Azure Storage encryption.
• Implement customer-managed keys.
• Recommend opportunities to improve Azure Storage security.

Module 22: Configure Azure Files and Azure File Sync

• Identify storage for file shares and blob data.
• Configure Azure Files shares and file share snapshots.
• Identify features and usage cases of Azure File Sync.
• Identify Azure File Sync components and configuration steps.

Module 23: Configure Azure Storage with tools

• Configure and use Azure Storage Explorer.
• Configure the Azure Import/Export service.
• Use the WAImportExport tool with the Azure Import/Export service.
• Configure and use AZCopy.

Module 24: Configure virtual machines

• Create a virtual machine planning checklist.
• Determine virtual machine locations and pricing models.
• Determine the correct virtual machine size.
• Configure virtual machine storage.

Module 25: Configure virtual machine availability

• Implement availability sets and availability zones.
• Implement update and fault domains.
• Implement Virtual Machine Scale Sets.
• Autoscale virtual machines.

Module 26: Configure virtual machine extensions

• Identify features and usage cases for virtual machine extensions.
• Identify features and usage cases for custom script extensions.
• Identify features and usage cases for desired state configuration.

Module 27: Configure app service plans

• Identify features and usage cases of the Azure App Service.
• Select an appropriate Azure App Service plan pricing tier.
• Scale the App Service Plan.
• Scale out the App Service Plan.

Module 28: Configure Azure App Services

• Identify features and usage cases for the Azure App Service.
• Create an App Service.
• Configure deployment settings, specifically deployment slots.
• Secure the App Service.
• Configure custom domain names.
• Back up the App Service.
• Configure Application Insights.

Module 29: Configure Azure Container Instances

• Identify when to use containers versus virtual machines.
• Identify the features and usage cases of Azure Container Instances.
• Implement Azure Container Groups.

Module 30: Configure Azure Kubernetes Service

• Identify AKS components including pods, clusters, and nodes.
• Configure network connections for AKS.
• Configure storage options for AKS.
• Implement security options for AKS.
• Scale AKS including adding Azure Container Instances.

Module 31: Configure file and folder backups

• Identify features and usage cases for Azure Backup.
• Configure Recovery Services Vault backup options.
• Implement on-premises file and folder backup.
• Configure the Microsoft Azure Recovery Services Agent.

Module 32: Configure virtual machine backups

• Identify features and usage cases for different Azure backup methods.
• Configure virtual machine snapshots and backup options.
• Implement virtual machine backup and restore, including soft delete.
• Compare the Azure Backup (MARS) agent to the Azure Backup Server (MABS).
• Perform site-to-site recovery by using Azure Site Recovery.

Module 33: Configure Azure Monitor

• Identify the features and usage cases for Azure Monitor.
• Configure and interpret metrics and logs.
• Identify the Azure Monitor components and data types.
• Configure the Activity Log.

Module 34: Configure Azure alerts

• Configure Azure Monitor alerts.
• Create alert rules and action groups.

Module 35: Configure Log Analytics

• Identify the features and usage cases for Log Analytics.
• Create a Log Analytics workspace.
• Structure a Log Analytics query and review results.

Module 36: Configure Network Watcher

• Identify the features and usage cases for Azure Network Watcher.
• Configure diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.