Microsoft Azure Administrator (AZ-104T00)

This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.

Develop the skills to flourish in the critical areas of Microsoft Azure and prepare for the exam AZ-104.

WHAT YOU’LL LEARN:

• Identity
• Governance and Compliance
• Azure Administration
• Virtual Networking
• Intersite Connectivity
• Network Traffic Management
• Azure Storage
• Azure Virtual Machines
• Serverless Computing
• Data Protection and Monitoring

This course is for Azure Administrators. 

The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.

To fully benefit from this course, you should have the following knowledge:

Successful Azure Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
• Understanding of resilience and disaster recovery, including backup and restore operations.
• Microsoft Azure Fundamentals (AZ-900T01)
• Microsoft Azure Fundamentals (2 Day) (AZ-900T00)

1 - Configure Azure Active Directory

• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement Azure Active Directory self-service password reset

2 - Configure user and group accounts

• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units

3 - Configure subscriptions

• Identify Azure regions
• Implement Azure subscriptions
• Obtain an Azure subscription
• Identify Azure subscription usage
• Implement Microsoft Cost Management
• Apply resource tagging
• Apply cost savings

4 - Configure Azure Policy

• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create an initiative definition
• Scope the initiative definition
• Determine compliance

5 - Configure role-based access control

• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Review fundamental Azure RBAC roles

6 - Configure Azure resources with tools

• Use the Azure portal
• Use Azure Cloud Shell
• Use Azure PowerShell
• Use Azure CLI

7 - Use Azure Resource Manager

• Review Azure Resource Manager benefits
• Review Azure resource terminology
• Create resource groups
• Create Azure Resource Manager locks
• Reorganize Azure resources
• Remove resources and resource groups
• Determine resource limits

8 - Configure resources with Azure Resource Manager templates

• Review Azure Resource Manager template advantages
• Explore the Azure Resource Manager template schema
• Explore the Azure Resource Manager template parameters
• Consider Bicep templates
• Review QuickStart templates

9 - Configure virtual networks

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses

10 - Configure network security groups

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups

11 - Configure Azure DNS

• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for Azure Private DNS zones
• Review Azure Private DNS zone scenarios

12 - Configure Azure Virtual Network peering

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining

13 - Configure network routing and endpoints

• Review system routes
• Identify user-defined routes
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses

14 - Configure Azure Load Balancer

• Determine Azure Load Balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create back-end pools
• Create health probes
• Create load balancer rules

15 - Configure Azure Application Gateway

• Implement Azure Application Gateway
• Determine Azure Application Gateway routing
• Configure Azure Application Gateway components

16 - Configure storage accounts

• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints

17 - Configure Azure Blob Storage

• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing

18 - Configure Azure Storage security

• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices

19 - Configure Azure Files and Azure File Sync

• Compare storage for file shares and blob data
• Manage Azure Files shares
• Create file share snapshots
• Implement Azure File Sync
• Identify Azure File Sync components
• Deploy Azure File Sync

20 - Configure Azure Storage with tools

• Use Azure Storage Explorer
• Use the Azure Import/Export service
• Use the WAImportExport tool
• Use the AzCopy tool

21 - Configure virtual machines

• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines

22 - Configure virtual machine availability

• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale

23 - Configure virtual machine extensions

• Implement virtual machines extensions
• Implement Custom Script Extensions
• Implement Desired State Configuration

24 - Configure Azure App Service plans

• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale

25 - Configure Azure App Service

• Implement Azure App Service
• Create an app with App Service
• Explore continuous integration and deployment
• Create deployment slots
• Add deployment slots
• Secure your App Service app
• Create custom domain names
• Back up and restore your App Service app
• Use Azure Application Insights

26 - Configure Azure Container Instances

• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review the Docker platform

27 - Configure Azure Kubernetes Service

• Explore Azure Kubernetes Service terminology
• Explore the AKS cluster and node architecture
• Configure Azure Kubernetes Service networking
• Configure Azure Kubernetes Service storage
• Configure Azure Kubernetes Service scaling
• Configure AKS burst scaling to Azure Container Instances

28 - Configure file and folder backups

• Describe Azure Backup benefits
• Implement Backup center for Azure Backup
• Configure Azure Recovery Services vault backup options
• Use the Microsoft Azure Recovery Services (MARS) agent
• Configure on-premises file and folder backups

29 - Configure virtual machine backups

• Explore options to protect virtual machine data
• Create virtual machine snapshots in Azure Backup
• Set up Azure Recovery Services vault backup options
• Back up your virtual machines
• Restore your virtual machines
• Implement System Center DPM and Azure Backup Server
• Compare the MARS agent and Azure Backup Server
• Implement soft delete for your virtual machines
• Implement Azure Site Recovery

30 - Configure Azure Monitor

• Describe Azure Monitor key capabilities
• Describe Azure Monitor components
• Define metrics and logs
• Identify monitoring data and tiers
• Describe activity log events
• Query the activity log

31 - Configure Azure alerts

• Describe Azure Monitor alerts
• Manage Azure Monitor alerts
• Create alert rules
• Create action groups

32 - Configure Log Analytics

• Determine Log Analytics uses
• Create a Log Analytics workspace
• Create Kusto (KQL) queries
• Structure Log Analytics queries

33 - Configure Network Watcher

• Describe Azure Network Watcher features
• Review IP flow verify diagnostics
• Review next hop diagnostics
• Visualize the network topology