Microsoft Azure Administrator

After completing this course, students will be able to:
 

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate. Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations.

Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.
• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations.
Prerequisite courses (or equivalent knowledge and hands-on experience): This free online training will give you the experience you need to be successful in this course.
• Microsoft Azure Fundamentals: Describe cloud concepts
• Azure Fundamentals: Describe Azure architecture and services
• Azure Fundamentals: Describe Azure management and governance
• AZ-104: Prerequisites for Azure administrators - Learn | Microsoft Docs

AZ-104: Prerequisites for Azure administrators Introduction to Azure Cloud Shell

• Introduction
• What is Azure Cloud Shell?
• How does Azure Cloud Shell work?
• When should you use Azure Cloud Shell?
• Module assessment

Introduction to PowerShell

• Introduction
• What is PowerShell?
• Exercise - Run your first PowerShell commands
• Locate commands
• Exercise - Locate commands

Deploy Azure infrastructure by using JSON ARM templates

• Introduction
• Explore Azure Resource Manager template structure
• Exercise - Create and deploy an Azure Resource Manager template
• Add flexibility to your Azure Resource Manager template by using parameters and outputs
• Exercise - Add parameters and outputs to your Azure Resource Manager template
• Module assessment

AZ-104: Manage identities and governance in Azure Understand Microsoft Entra ID

• Introduction
• Examine Microsoft Entra ID
• Compare Microsoft Entra ID and Active Directory Domain Services
• Examine Microsoft Entra ID as a directory service for cloud apps
• Compare Microsoft Entra ID P1 and P2 plans
• Examine Microsoft Entra Domain Services

Create, configure, and manage identities

• Introduction
• Create, configure, and manage users
• Exercise - assign licenses to users
• Exercise - restore or remove deleted users
• Create, configure, and manage groups
• Exercise - add groups in Microsoft Entra ID
• Configure and manage device registration
• Manage licenses
• Exercise - change group license assignments
• Exercise - change user license assignments
• Create custom security attributes
• Explore automatic user creation
• Module assessment

Describe the core architectural components of Azure

• Introduction
• What is Microsoft Azure
• Get started with Azure accounts
• Exercise - Explore the Learn sandbox
• Describe Azure physical infrastructure
• Describe Azure management infrastructure
• Exercise - Create an Azure resource
• Module assessment

Azure Policy initiatives

• Introduction
• Cloud Adoption Framework for Azure
• Azure Policy design principles
• Azure Policy resources
• Azure Policy definitions
• Evaluation of resources through Azure Policy
• Check your knowledge

Secure your Azure resources with Azure role-based access control (Azure RBAC)

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC

Allow users to reset their password with Microsoft Entra self-service password reset

• Introduction
• What is self-service password reset in Microsoft Entra ID?
• Implement Microsoft Entra self-service password reset
• Exercise - Set up self-service password reset
• Exercise - Customize directory branding
• Summary

AZ-104: Configure and manage virtual networks for Azure administrators Configure virtual networks

• Introduction
• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses
• Interactive lab simulation

Configure network security groups

• Introduction
• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups
• Interactive lab simulation
• Knowledge check
• Summary and resources

Host your domain on Azure DNS

• Introduction
• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise - Create a DNS zone and an A record by using Azure DNS
• Dynamically resolve resource name by using alias record
• Exercise - Create alias records for Azure DNS
• Summary

Configure Azure Virtual Network peering

• Introduction
• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining
• Interactive lab simulation

Manage and control traffic flow in your Azure deployment with routes

• Introduction
• Identify routing capabilities of an Azure virtual network
• Exercise - Create custom routes
• What is an NVA?
• Exercise - Create an NVA and virtual machines
• Exercise - Route traffic through the NVA

Introduction to Azure Load Balancer

• Introduction
• What is Azure Load Balancer?
• How Azure Load Balancer works
• When to use Azure Load Balancer
• Module assessment

Introduction to Azure Application Gateway

• Introduction
• What is Azure Application Gateway?
• How Azure Application Gateway works
• When to use Azure Application Gateway
• Module assessment
• Summary

Introduction to Azure Network Watcher

• Introduction
• What is Azure Network Watcher?
• How Azure Network Watcher works
• When to use Azure Network Watcher
• Module assessment
• Summary

AZ-104: Implement and manage storage in Azure Configure storage accounts

• Introduction
• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints

Configure Azure Blob Storage

• Introduction
• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing
• Interactive lab simulation

Configure Azure Storage security

• Introduction
• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices
• Interactive lab simulation

Configure Azure Files

• Introduction
• Compare storage for file shares and blob data
• Manage Azure file shares
• Create file share snapshots
• Implement soft delete for Azure Files
• Use Azure Storage Explorer
• Consider Azure File Sync
• Knowledge check

AZ-104: Deploy and manage Azure compute resources Introduction to Azure virtual machines

• Introduction
• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines
• Interactive lab simulation

Configure virtual machine availability

• Introduction
• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale
• Interactive lab simulation
• Knowledge check

Configure Azure App Service plans

• Introduction
• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale
• Knowledge check

Configure Azure App Service

• Introduction
• Implement Azure App Service
• Create an app with App Service
• Explore continuous integration and deployment
• Create deployment slots
• Add deployment slots
• Secure your App Service app
• Create custom domain names
• Back up and restore your App Service app
• Use Azure Application Insights
• Interactive lab simulation

Configure Azure Container Instances

• Introduction
• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review Azure Container Apps
• Interactive lab simulation
• Knowledge check

AZ-104: Monitor and back up Azure resources Introduction to Azure Backup

• Introduction
• What is Azure Backup?
• How Azure Backup works
• When to use Azure Backup
• Knowledge check

Protect your virtual machines by using Azure Backup

• Introduction
• Azure Backup features and scenarios
• Back up an Azure virtual machine by using Azure Backup
• Exercise - Back up an Azure virtual machine
• Restore virtual machine data
• Exercise - Restore Azure virtual machine data
• Summary