AZ-104 - Azure Administrator

AZ-104

Links you may find useful

Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.

Skyline Academy:

https://courses.skylinesacademy.com/p/az-104

Scott Duffy:

https://www.udemy.com/course/70533-azure/

Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.

Administer infrastructure resources in Azure (12 Modules)

https://docs.microsoft.com/en-us/learn/paths/administer-infrastructure-resources-in-azure

Architect storage infrastructure in Azure (7 Modules)

https://docs.microsoft.com/learn/paths/architect-storage-infrastructure

Architect network infrastructure in Azure (12 Modules)

https://docs.microsoft.com/learn/paths/architect-network-infrastructure

Architect infrastructure operations in Azure (5 Modules)

https://docs.microsoft.com/learn/paths/architect-infrastructure-operations

Architect compute infrastructure in Azure (9 Modules)

https://docs.microsoft.com/learn/paths/architect-compute-infrastructure

Architect migration, business continuity, and disaster recovery in Azure (9 Modules)

https://docs.microsoft.com/learn/paths/architect-migration-bcdr

Manage resources in Azure (6 Modules)

https://docs.microsoft.com/learn/paths/manage-resources-in-azure

Manage identity and access in Azure Active Directory (7 Modules)

https://docs.microsoft.com/learn/paths/manage-identity-and-access

Manage security operations in Azure (8 Modules)

https://docs.microsoft.com/learn/paths/manage-security-operations

Implement resource management security in Azure (6 Modules)

https://docs.microsoft.com/learn/paths/implement-resource-mgmt-security

Administer containers in Azure (6 Modules)

https://docs.microsoft.com/learn/paths/administer-containers-in-azure

Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-104

The study guide

Manage Azure Identities and Governance (15-20%)

Manage Azure AD objects

Create users and groups

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal

Manage user and group properties

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal

Manage device settings

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Perform bulk user updates

https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/

Manage guest accounts

https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

Configure Azure AD Join

https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains

Configure self-service password reset

https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr

Manage role-based access control (RBAC)

Create a custom role

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Provide access to Azure resources by assigning roles: subscriptions, resource groups and resources (VM, disk, etc.)

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment

Interpret access assignments

https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments

Manage multiple directories

https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428

Manage subscriptions and governance

Configure Azure policies

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Configure resource locks

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Apply tags

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Create and manage resource groups

Move resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

Remove RGs

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal

Manage subscriptions

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory

Configure Cost Management

https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview

Configure management groups

https://docs.microsoft.com/en-us/azure/governance/management-groups/create

Implement and Manage Storage (10-15%)

Manage storage accounts

Configure network access to the storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Create and configure storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Generate shared access signature

https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1

Manage access keys

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Implement Azure storage replication

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

Configure Azure AD Authentication for a storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad

Manage data in Azure Storage

Export from Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Import into Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs

Install and use Azure Storage Explorer

https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

Copy data by using AZCopy

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

Configure Azure files and Azure blob storage

Create an Azure file share

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Create and configure Azure File Sync service

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Configure Azure blob storage

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

Configure storage tiers for Azure blobs

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

Deploy and Manage Azure Compute Resources (25-30%)

Configure VMs for high availability and scalability

Configure high availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

Deploy and configure scale sets

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

Automate deployment and configuration of VMs

Modify Azure Resource Manager (ARM) template

https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource

Configure VHD template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized

Deploy from template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Save a deployment as an ARM template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

Automate configuration management by using custom script extensions

https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/

Create and configure VMs

Configure Azure Disk Encryption

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Move VMs from one resource group to another

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart

Manage VM sizes

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

Add data discs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

Configure networking

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

Redeploy VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows

Create and configure containers

Create and configure Azure Kubernetes Service (AKS)

https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Create and configure Azure Container Instances (ACI)

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Create and configure Web Apps

Create and configure App Service

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create and configure App Service Plans

https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage

Configure and Manage Virtual Networking (30-35%)

Implement and manage virtual networking

Create and configure VNET peering

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

Configure private and public IP addresses network routes, network interface, subnets, and virtual network

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network

Configure name resolution

Configure Azure DNS

https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Configure custom DNS settings

https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

Configure a private or public DNS zone

https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell

https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

Secure access to virtual networks

Create security rules

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Associate an NSG to a subnet or network interface

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Evaluate effective security rules

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Deploy and configure Azure Firewall

https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Deploy and configure Azure Bastion Service

https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

Configure load balancing

Configure Application Gateway

https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell

Configure an internal load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal

Configure load balancing rules

https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli

Configure a public load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell

Troubleshoot load balancing

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

Monitor and troubleshoot virtual networking

Monitor on-premises connectivity

https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/

Use Network resource monitoring

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor

Use Network Watcher

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create

Troubleshoot external networking

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

Troubleshoot virtual network connectivity

https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks

Integrate an on-premises network with an Azure virtual network

Create and configure Azure VPN Gateway

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell

Create and configure VPNs

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Configure ExpressRoute

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

Verify on premises connectivity

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Configure Azure Virtual WAN

https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

Configure and interpret metrics

Analyze metrics across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts

Configure Log Analytics

Implement a Log Analytics workspace

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace

Configure diagnostic settings

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace

Query and analyze logs

Create a query

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

Save a query to the dashboard

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries

Interpret graphs

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query

Set up alerts and actions

Create and test alerts

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

Create action groups

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

View alerts in Azure Monitor

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal

Analyze alerts across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

Configure Application Insights

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start

Implement backup and recovery

Configure and review backup reports

https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

Perform backup and restore operations by using Azure Backup Service

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Create a Recovery Services Vault

https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault

Use soft delete to recover Azure VMs

https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/

Create and configure backup policy

https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest

Perform site-to-site recovery by using Azure Site Recovery

https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv