Microsoft Azure Administrator

This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.
 

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.
 

Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.
• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations.
Prerequisite courses (or equivalent knowledge and hands-on experience): This free online training will give you the experience you need to be successful in this course.
• Microsoft Azure Fundamentals: Describe cloud concepts
• Azure Fundamentals: Describe Azure architecture and services
• Azure Fundamentals: Describe Azure management and governance
• AZ-104: Prerequisites for Azure administrators - Learn | Microsoft Docs

Configure Azure Active Directory

• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement Azure Active Directory self-service password reset
• Knowledge check
• Summary and resources

Configure user and group accounts

• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure subscriptions

• Identify Azure regions
• Implement Azure subscriptions
• Obtain an Azure subscription
• Identify Azure subscription usage
• Implement Microsoft Cost Management
• Apply resource tagging
• Apply cost savings
• Knowledge check
• Summary and resources

Configure Azure Policy

• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create an initiative definition
• Scope the initiative definition
• Determine compliance
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure role-based access control

• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Review fundamental Azure RBAC roles
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure resources with tools

• Use the Azure portal
• Use Azure Cloud Shell
• Use Azure PowerShell
• Interactive lab simulation (Azure PowerShell)
• Use Azure CLI
• Interactive lab simulation (Azure CLI)
• Knowledge check
• Summary and resources

Use Azure Resource Manager

• Review Azure Resource Manager benefits
• Review Azure resource terminology
• Create resource groups
• Create Azure Resource Manager locks
• Reorganize Azure resources
• Remove resources and resource groups
• Determine resource limits
• Knowledge check
• Summary and resources

Configure resources with Azure Resource Manager templates

• Review Azure Resource Manager template advantages
• Explore the Azure Resource Manager template schema
• Explore the Azure Resource Manager template parameters
• Consider Bicep templates
• Review QuickStart templates
• Interactive lab simulation - templates
• Knowledge check
• Summary and resources

Configure virtual networks

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Associate private IP addresses
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure network security groups

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure Firewall

• Determine use cases for Azure Firewall
• Create an Azure Firewall implementation
• Create Azure Firewall rules
• Knowledge check
• Summary and resources

Configure Azure DNS

• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for Azure Private DNS zones
• Review Azure Private DNS zone scenarios
• Knowledge check
• Summary and resources

Configure Azure Virtual Network peering

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure VPN Gateway

• Determine Azure VPN Gateway uses
• Create site-to-site connections
• Create the gateway subnet
• Create the VPN gateway
• Determine the VPN gateway type
• Determine gateway SKU and generation
• Create the local network gateway
• Configure the on-premises VPN device
• Create the VPN connection
• Determine high availability scenarios
• Knowledge check
• Summary and resources

Configure Azure ExpressRoute and Azure Virtual WAN

• Determine Azure ExpressRoute uses
• Determine Azure ExpressRoute capabilities
• Coexist site-to-site and Azure ExpressRoute
• Compare intersite connection options
• Determine Azure Virtual WAN uses
• Knowledge check
• Summary and resources

Configure network routing and endpoints

• Review system routes
• Identify user-defined routes
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure Load Balancer

• Determine Azure Load Balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create back-end pools
• Create health probes
• Create load balancer rules
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure Application Gateway

• Implement Azure Application Gateway
• Determine Azure Application Gateway routing
• Configure Azure Application Gateway components
• Knowledge check
• Summary and resources

Configure storage accounts

• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints
• Knowledge check
• Summary and resources

Configure Azure Blob Storage

• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing
• Interactive lab simulation
• Knowledge check
• Summary and resources

Configure Azure Storage security

• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices
• Interactive lab simulation
• Knowledge check

Configure Azure Files and Azure File Sync

• Introduction
• Compare storage for file shares and blob data
• Manage Azure Files shares
• Create file share snapshots
• Implement Azure File Sync
• Identify Azure File Sync components
• Deploy Azure File Sync
• Knowledge check

Configure Azure Storage with tools

• Introduction
• Use Azure Storage Explorer
• Use the Azure Import/Export service
• Use the WAImportExport tool
• Use the AzCopy tool

Configure virtual machines

• Introduction
• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines
• Interactive lab simulation

Configure virtual machine availability

• Introduction
• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale
• Interactive lab simulation

Configure virtual machine extensions

• Introduction
• Implement virtual machines extensions
• Implement Custom Script Extensions
• Implement Desired State Configuration

Configure Azure App Service plans

• Introduction
• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale

Configure Azure Container Instances

• Introduction
• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review the Docker platform
• Interactive lab simulation

Configure Azure Kubernetes Service

• Introduction
• Explore Azure Kubernetes Service terminology
• Explore the AKS cluster and node architecture
• Configure Azure Kubernetes Service networking
• Configure Azure Kubernetes Service storage
• Configure Azure Kubernetes Service scaling
• Configure AKS burst scaling to Azure Container Instances
• Interactive lab simulation

Configure file and folder backups

• Introduction
• Describe Azure Backup benefits
• Implement Backup center for Azure Backup
• Configure Azure Recovery Services vault backup options
• Use the Microsoft Azure Recovery Services (MARS) agent
• Configure on-premises file and folder backups
• Interactive lab simulation

Configure virtual machine backups

• Introduction
• Explore options to protect virtual machine data
• Create virtual machine snapshots in Azure Backup
• Set up Azure Recovery Services vault backup options
• Back up your virtual machines
• Restore your virtual machines
• Implement System Center DPM and Azure Backup Server
• Compare the MARS agent and Azure Backup Server
• Implement soft delete for your virtual machines
• Implement Azure Site Recovery
• Interactive lab simulation

Configure Azure Monitor

• Introduction
• Describe Azure Monitor key capabilities
• Describe Azure Monitor components
• Define metrics and logs
• Identify monitoring data and tiers
• Describe activity log events
• Query the activity log
• Interactive lab simulation

Configure Azure alerts

• Introduction
• Describe Azure Monitor alerts
• Manage Azure Monitor alerts
• Create alert rules
• Create action groups

Configure Log Analytics

• Introduction
• Determine Log Analytics uses
• Create a Log Analytics workspace
• Create Kusto (KQL) queries
• Structure Log Analytics queries

Configure Azure Network Watcher

• Introduction
• Describe Azure Network Watcher features
• Review IP flow verify diagnostics
• Review next hop diagnostics
• Visualize the network topology