20250519-777-az104-offical-doc

777-az104-offical-doc

---

source: https://vladtalkstech.com/az-104-study-guide-microsoft-azure-administrator/

---

Articles / Blog Posts Per Objective

Manage Azure identities and governance (15-20%)

Manage Azure AD objects

• create users and groups

• Add or delete users using Azure Active Directory

• Create a basic group and add members using Azure Active Directory

• Creating a new user in Azure AD

• New-AzureADUser

• New-AzureADGroup

• New-AzureADMSGroup

• manage user and group properties

• Edit your group information using Azure Active Directory

• Add or update a user’s profile information using Azure Active Directory

• Bulk create users in Azure Active Directory

• Set-AzureADUser

• Set-AzureADGroup

• Set-AzureADMSGroup

• manage device settings

• How to manage devices using the Azure portal

• perform bulk user updates

• Importing data into my directory

• Bulk add group members in Azure Active Directory

• manage guest accounts

• What is guest user access in Azure Active Directory B2B?

• Add Azure Active Directory B2B collaboration users in the Azure portal

• Manage guest access with Azure AD access reviews

• Quickstart: Add guest users to your directory in the Azure portal

• configure Azure AD Join

• How to: Plan your Azure AD join implementation

• How To: Plan your hybrid Azure Active Directory join implementation

• Tutorial: Configure hybrid Azure Active Directory join for managed domains

• configure self-service password reset

• Plan an Azure Active Directory self-service password reset deployment

• How it works: Azure AD self-service password reset

• Customize the user experience for Azure Active Directory self-service password reset

Manage role-based access control (RBAC)

• create a custom role

• Azure custom roles

• Tutorial: Create a custom role for Azure resources using Azure PowerShell

• Tutorial: Create a custom role for Azure resources using Azure CLI

• Create custom roles for Azure resources using Azure PowerShell

• provide access to Azure resources by assigning roles

  • subscriptions

• Add or remove Azure role assignments using the Azure portal

• Add or change Azure subscription administrators

• Classic subscription administrator roles, Azure roles, and Azure AD roles

• Elevate access to manage all Azure subscriptions and management groups

• resource groups

• Tutorial: Grant a group access to Azure resources using Azure PowerShell

• resources (VM, disk, etc.)

• What is role-based access control (RBAC) for Azure resources?

• Built-in roles for Azure resources

• interpret access assignments

  • List Azure role assignments using the Azure portal
  • Understand Azure deny assignments

• manage multiple directories

  • Understand how multiple Azure Active Directory organizations interact

Manage subscriptions and governance

• configure Azure policies

• What is Azure Policy?

• Azure Subscription Governance – Controlling resources with Tags, Policies, and Locks

• Tutorial: Create and manage policies to enforce compliance

• Quickstart: Create a policy assignment to identify non-compliant resources

• Quickstart: Create a policy assignment to identify non-compliant resources using Azure PowerShell

• Quickstart: Create a policy assignment to identify non-compliant resources with Azure CLI

• configure resource locks

• • Lock resources to prevent unexpected changes

• apply tags

• Use tags to organize your Azure resources

• Tutorial: Manage tag governance with Azure Policy

• create and manage resource groups

  • Manage Azure Resource Manager resource groups by using the Azure portal
  • Manage Azure resources by using Azure PowerShell
  • Manage Azure resources by using Azure CLI
  • move resources
• • • Move resources to new resource group or subscription
    • Move a Windows VM to another Azure subscription or resource group
  • remove RGs
  • • Azure Resource Manager resource group deletion

• manage subscriptions

• Add or change Azure subscription administrators

• Create an additional Azure subscription

• Export and view your top-level Subscription information

• configure Cost Management

• Prevent unexpected charges with Azure billing and cost management

• What is Azure Cost Management and Billing?

• How to optimize your cloud investment with Azure Cost Management

• Quickstart: Explore and analyze costs with cost analysis

• configure management groups

• Organize your resources with Azure management groups

• Create management groups for resource organization and management

Implement and manage storage (10-15%)

Manage storage accounts

• configure network access to storage accounts

• Manage storage account settings in the Azure portal

• Configure Azure Storage firewalls and virtual networks

• create and configure storage accounts

• Azure storage account overview

• Create an Azure Storage account

• generate shared access signature

• Getting Started with Shared Access Signatures (SAS)

• Delegate access with a shared access signature

• Using shared access signatures (SAS)

• manage access keys

• Manage storage account access keys

• Manage storage account keys with Key Vault and the Azure CLI

• implement Azure storage replication

• Azure Storage redundancy

• Change how a storage account is replicated

• configure Azure AD Authentication for a storage account

  • Authorize access to blobs and queues using Azure Active Directory

Manage data in Azure Storage

• export from Azure job

• What is Azure Import/Export service?

• Creating an export job for the Azure Import/Export service

• import into Azure job

• Creating an import job for the Azure Import/Export service

• install and use Azure Storage Explorer

• Introduction to Microsoft Azure Storage Explorer

• Get started with Storage Explorer

• Quickstart: Use Azure Storage Explorer to create a blob in object storage

• copy data by using AZCopy

• Transfer data with AzCopy and file storage

• Get started with AzCopy

Configure Azure files and Azure blob storage

• create an Azure file share

• Create a file share in Azure Files

• Quickstart: Create and manage Azure file shares with Azure Storage Explorer

• Quickstart: Create and manage Azure Files share with Windows virtual machines

• Quickstart: Create and manage Azure file shares with the Azure portal

• Quickstart: Create and manage an Azure file share with Azure PowerShell

• Quickstart: Create and manage Azure file shares using Azure CLI

• create and configure Azure File Sync service

• Deploy Azure File Sync

• Planning for an Azure File Sync deployment

• Tutorial: Extend Windows file servers with Azure File Sync

• configure Azure blob storage

• Introduction to Azure Blob storage

• Quickstart: Upload, download, and list blobs with the Azure portal

• Manage Azure Blob Storage resources with Storage Explorer

• configure storage tiers for Azure blobs

• Azure Blob storage: hot, cool, and archive access tiers

Deploy and manage Azure compute resources (25-30%)

Configure VMs for high availability and scalability

• configure high availability

• Availability options for virtual machines in Azure

• Manage the availability of Windows virtual machines in Azure

• Manage the availability of Linux virtual machines

• Tutorial: Create and deploy highly available virtual machines with the Azure CLI

• deploy and configure scale sets

• What are virtual machine scale sets?

• Quickstart: Create a virtual machine scale set in the Azure portal

• Quickstart: Create a Windows virtual machine scale set with an Azure template

• Tutorial: Create a virtual machine scale set and deploy a highly available app on Windows with Azure PowerShell

Automate deployment and configuration of VMs

• modify Azure Resource Manager (ARM) template

• Deploy resources with Resource Manager templates and Azure portal

• Update a resource in an Azure Resource Manager template

• Create Azure Resource Manager template

• Quickstart: Create and deploy Azure Resource Manager templates by using the Azure portal

• configure VHD template

• Create a VM from a VHD by using the Azure portal

• deploy from template

• Create a Windows virtual machine from a Resource Manager template

• Quickstart: Create and deploy Azure Resource Manager templates by using the Azure portal

• Deploy a Windows Virtual Machine with Azure Resource Manager Templates and PowerShell [Video]

• save a deployment as an ARM template

• Download the template for a VM

• automate configuration management by using custom script extensions

• Custom Script Extension for Windows

• Use the Azure Custom Script Extension Version 2 with Linux virtual machines

Create and configure VMs

• configure Azure Disk Encryption

• Azure Disk Encryption for Linux VMs

• Azure Disk Encryption for Windows VMs

• move VMs from one resource group to another

• Move resources to new resource group or subscription

• Move a Windows VM to another Azure subscription or resource group

• Resize virtual machines

• manage VM sizes

• Resize a Windows VM

• Sizes for Windows virtual machines in Azure

• add data discs

• Attach a data disk to a Windows VM with PowerShell

• Add a disk to a Linux VM using CLI

• Use the portal to attach a data disk to a Linux VM

• Attach a managed data disk to a Windows VM by using the Azure portal

• configure networking

• Quickstart: Create a virtual network using the Azure portal

• How to open ports to a virtual machine with the Azure portal

• redeploy VMs

• Redeploy Windows virtual machine to new Azure node

• Redeploy Linux virtual machine to new Azure node

• Redeploy a VM in a lab in Azure DevTest Labs

Create and configure containers

• create and configure Azure Kubernetes Service (AKS)
  • Tutorial: Deploy an Azure Kubernetes Service (AKS) cluster
  • Quickstart: Deploy an Azure Kubernetes Service cluster using the Azure CLI
• create and configure Azure Container Instances (ACI)
  • Quickstart: Deploy a container instance in Azure using the Azure portal

Create and configure Web Apps

• create and configure App Service

• Configure an App Service app in the Azure portal

• create and configure App Service Plans

• Manage an App Service plan in Azure

• Azure App Service plan overview

Configure and manage virtual networking (30-35%)

Implement and manage virtual networking

• create and configure VNET peering

• Virtual network peering

• Create, change, or delete a virtual network peering

• Tutorial: Connect virtual networks with virtual network peering using the Azure portal

• configure private and public IP addresses, network routes, network interface, subnets, and virtual network

• What is Azure Virtual Network?

• Create, change, or delete a virtual network

• Virtual network traffic routing

• Tutorial: Route network traffic with a route table using the Azure portal

• IP address types and allocation methods in Azure

• Create, change, or delete a public IP address

• Add, change, or remove IP addresses for an Azure network interface

• Configure private IP addresses for a virtual machine using the Azure portal

• Add, change, or delete a virtual network subnet

Configure name resolution

• configure Azure DNS

• Azure DNS Documentation

• Quickstart: Create an Azure DNS zone and record using the Azure portal

• Quickstart: Create an Azure DNS zone and record using Azure PowerShell

• Quickstart: Create an Azure DNS zone and record using Azure CLI

• configure custom DNS settings

• Use Azure DNS to provide custom domain settings for an Azure service

• Tutorial: Map an existing custom DNS name to Azure App Service

• configure a private or public DNS zone

• Create an Azure DNS private zone using Azure PowerShell

• Use Azure DNS for private domains

• Tutorial: Host your domain in Azure DNS

Secure access to virtual networks

• create security rules

• Security groups

• Create, change, or delete a network security group

• associate an NSG to a subnet or network interface

• Create, change, or delete a network security group

• evaluate effective security rules

• Microsoft Azure Network Security Group effective security rules evaluation [Blog]

• Create, change, or delete a network security group

• deploy and configure Azure Firewall

• Tutorial: Deploy and configure Azure Firewall using the Azure portal

• Tutorial: Deploy and configure Azure Firewall in a hybrid network using the Azure portal

• Deploy and configure Azure Firewall using Azure PowerShell

• Deploy and configure Azure Firewall in a hybrid network using Azure PowerShell

• deploy and configure Azure Bastion Service

• Create an Azure Bastion host using the portal

• Create an Azure Bastion host using Azure PowerShell

Configure load balancing

• configure Application Gateway

• Application Gateway configuration overview

• Frequently asked questions about Application Gateway

• Quickstart: Direct web traffic with Azure Application Gateway – Azure portal

• Configure an application gateway with an internal load balancer (ILB) endpoint

• Tutorial: Create an application gateway with a Web Application Firewall using the Azure portal

• configure an internal load balancer

• Internal Load Balancing

• Tutorial: Balance internal traffic load with a Standard load balancer in the Azure portal

• Create an internal load balancer by using the Azure PowerShell module

• Create an internal load balancer to load balance VMs using Azure CLI

• Create an internal load balancer using a template

• configure load balancing rules

• Quickstart: Create a Load Balancer to load balance VMs using the Azure portal

• Configure load balancing and outbound rules in Standard Load Balancer using Azure CLI

• Quickstart: Create a public load balancer to load balance VMs using Azure PowerShell

• configure a public load balancer

• Creating a public load balancer using a template

• troubleshoot load balancing

• Troubleshoot Azure Load Balancer

• Standard Load Balancer diagnostics with metrics, alerts and resource health

Monitor and troubleshoot virtual networking

• monitor on-premises connectivity

• Diagnose on-premises connectivity via VPN gateways

• Choose a solution for connecting an on-premises network to Azure

• use Network Performance Monitor

• Network Performance Monitor solution in Azure

• Network Performance Monitor solution: Performance monitoring

• use Network Watcher

• What is Azure Network Watcher?

• Introduction to resource troubleshooting in Azure Network Watcher

• Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher

• troubleshoot external networking

• Troubleshoot Virtual Network Gateway and Connections using Azure Network Watcher PowerShell

• troubleshoot virtual network connectivity

• Troubleshoot virtual network peering issues

• Troubleshooting connectivity problems between Azure VMs

• Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher

Integrate an on-premises network with an Azure virtual network

• create and configure Azure VPN Gateway

• Tutorial: Create and manage a VPN gateway using PowerShell

• About VPN Gateway configuration settings

• Create a route-based VPN gateway using the Azure portal

• Create a route-based VPN gateway using CLI

• Create a route-based VPN gateway using PowerShell

• create and configure VPNs

• Create a Site-to-Site connection in the Azure portal

• Create a virtual network with a Site-to-Site VPN connection using CLI

• Configure a site-to-site VPN over ExpressRoute Microsoft peering

• configure ExpressRoute

• Connect an on-premises network to Azure using ExpressRoute

• configure Azure Virtual WAN

• About Azure Virtual WAN

• Tutorial: Create a Site-to-Site connection using Azure Virtual WAN

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

• configure and interpret metrics

• Getting started with Azure Metrics Explorer

• Metrics in Azure Monitor

• Custom metrics in Azure Monitor (Preview)

• analyze metrics across subscriptions

• Azure Monitor data platform

• Advanced features of Azure Metrics Explorer

• configure Log Analytics

• Create a Log Analytics workspace in the Azure portal

• implement a Log Analytics workspace

• Collect and analyze Azure activity logs in Log Analytics workspace in Azure Monitor

• Manage access to log data and workspaces in Azure Monitor

• Collect and analyze Azure Activity log in Azure Monitor

• configure diagnostic settings

• Automatically enable Diagnostic Settings at resource creation using a Resource Manager template

• query and analyze logs

• Overview of log queries in Azure Monitor

• Get started with log queries in Azure Monitor

• Azure Monitor log query examples

• create a query

• Tutorial: Get started with Log Analytics queries

• set up alerts and actions

• create and test alerts

• Overview of alerts in Microsoft Azure

• Create, view, and manage activity log alerts using Azure Monitor

• Create, view, and manage log alerts using Azure Monitor

• Alerts on activity log

• Log alerts in Azure Monitor

• create action groups

• Create and manage action groups in the Azure portal

• view alerts in Azure Monitor

• Create, view, and manage activity log alerts using Azure Monitor

• Create, view, and manage log alerts using Azure Monitor

• analyze alerts across subscriptions

• Azure Monitor alerting just got better!

• configure Application Insights

• What is Application Insights?

• Application Insights for Azure cloud services

Implement backup and recovery

• configure and review backup reports

• Configure Azure Backup reports

• Microsoft Azure : Azure Backup Report with Recovery Services Vault & Power BI

• perform backup and restore operations by using Azure Backup Service

• Azure Backup service documentation

• Back up a virtual machine in Azure

• Back up a virtual machine in Azure with PowerShell

• Back up a virtual machine in Azure with the CLI

• Use Azure portal to back up multiple virtual machines

• Introducing backup for Azure file shares

• Recover files from Azure virtual machine backup

• How to restore Azure VM data in Azure portal

• create a Recovery Services Vault

• Recovery Services vaults overview

• Monitor and manage Recovery Services vaults

• Back up Azure VMs in a Recovery Services vault

• use soft delete to recover Azure VMs

• Soft delete for virtual machines in Azure Backup

• Soft delete for Azure Backup

• Soft delete for virtual machines

• create and configure backup policy

• Manage Azure VM backups with Azure Backup service

• perform site-to-site recovery by using Azure Site Recovery

• About Site Recovery

• Quickstart: Set up disaster recovery to a secondary Azure region for an Azure VM

• Set up disaster recovery for Azure VMs

• Monitor Site Recovery

• Monitor Site Recovery with Azure Monitor Logs