AZ-104 Exam Study Guide - Microsoft Azure Administrator

February 15, 2021

If you are preparing for AZ-104 Microsoft Azure Administrator study guide, this study materials helps you to take the exam confidently.

I have prepared the couple of online resources from Microsoft Docs site based on the AZ-104 objectives and it covers all the topics for the exam.

Manage Azure identities and governance(15-20%)

Manage Azure AD objects

create users and groups
- Create Azure users and groups in Azure Active Directory
- Create a basic group and add members using Azure Active Directory
manage user and group properties
- Add or remove group members using Azure Active Directory
- Edit your group information using Azure Active Directory
manage device settings
- Manage device identities using the Azure portal
perform bulk user updates
- Bulk create users in Azure Active Directory
manage guest accounts
- Quickstart: Add guest users to your directory in the Azure portal
- Manage guest access with Azure AD access reviews
configure Azure AD Join
- How to: Plan your Azure AD join implementation
- Tutorial: Configure hybrid Azure Active Directory join for managed domains
configure self-service password reset
- How it works: Azure AD self-service password reset
- Plan an Azure Active Directory self-service password reset deployment

Manage role-based access control (RBAC)

create a custom role
- Azure custom roles
- Create and assign a custom role in Azure Active Directory
provide access to Azure resources by assigning roles
- subscriptions
- Add or change Azure subscription administrators
- resource groups
- Add a role assignment
- resources (VM, disk, etc.)
- Tutorial: Grant a user access to Azure resources using the Azure portal
interpret access assignments
- List Azure role assignments using the Azure portal
- Understand Azure deny assignments
manage multiple directories
- Understand how multiple Azure Active Directory organizations interact

Manage subscriptions and governance

configure Azure policies
- What is Azure Policy?
- Quickstart: Create a policy assignment to identify non-compliant resources
configure resource locks
- Understand resource locking in Azure Blueprints
- Lock resources to prevent unexpected changes
apply tags
- Tutorial: Manage tag governance with Azure Policy
- Tag support for Azure resources
create and manage resource groups
- move resources
- Move resources to a new resource group or subscription
- remove RGs
- Azure Resource Manager resource group and resource deletion
manage subscriptions
- Add or change Azure subscription administrators
- Create an additional Azure subscription
configure Cost Management
- What is Azure Cost Management + Billing?
- Quickstart: Explore and analyze costs with cost analysis
configure management groups
- Quickstart: Create a management group

Implement and manage storage (10-15%)

Manage storage accounts

configure network access to storage accounts
- Configure Azure Storage firewalls and virtual networks
create and configure storage accounts
- Create an Azure Storage account
generate shared access signature
- Grant limited access to Azure Storage resources using shared access signatures (SAS)
- Delegate access with a shared access signature
manage access keys
- Manage storage account access keys
implement Azure storage replication
- Azure Storage redundancy
configure Azure AD Authentication for a storage account
- Authorize access to blobs and queues using Azure Active Directory

Manage data in Azure Storage

export from Azure job
- Creating an export job for the Azure Import/Export service
import into Azure job
- Creating an export job for the Azure Import/Export service
install and use Azure Storage Explorer
- Get started with Storage Explorer
copy data by using AZCopy
- Get started with AzCopy
- Transfer data with AzCopy and file storage

Configure Azure files and Azure blob storage

create an Azure file share
- Create an Azure file share
- Quickstart: Create and manage an Azure file share with Azure PowerShell
create and configure Azure File Sync service
- Planning for an Azure File Sync deployment
- Tutorial: Extend Windows file servers with Azure File Sync
configure Azure blob storage
- Introduction to Azure Blob storage
- Quickstart: Upload, download, and list blobs with the Azure portal
configure storage tiers for Azure blobs
- Azure Blob storage: hot, cool, and archive access tiers

Deploy and manage Azure compute resources (25-30%)

Configure VMs for high availability and scalability

configure high availability
deploy and configure scale sets
- What are virtual machine scale sets?
- Quickstart: Create a virtual machine scale set in the Azure portal

Automate deployment and configuration of VMs

modify Azure Resource Manager (ARM) template
- What are ARM templates?
- Create a Windows virtual machine from a Resource Manager template
configure VHD template
- Create a VM from a VHD by using the Azure portal
deploy from template
- Deploy Azure virtual machines from VHD templates
save a deployment as an ARM template
- Download the template for a VM
automate configuration management by using custom script extensions
- Custom Script Extension for Windows
- Use the Azure Custom Script Extension Version 2 with Linux virtual machines

Create and configure VMs

configure Azure Disk Encryption
- Azure Disk Encryption for Linux VMs
- Azure Disk Encryption for Windows VMs
move VMs from one resource group to another
- Move resources to new resource group or subscription
manage VM sizes
- Resize a Windows VM
add data discs
- Attach a data disk to a Windows VM with PowerShell
- Add a disk to a Linux VM using CLI
configure networking
- Quickstart: Create a virtual network using the Azure portal
- How to open ports to a virtual machine with the Azure portal
redeploy VMs
- Redeploy Windows virtual machine to new Azure node
- Redeploy Linux virtual machine to new Azure node

Create and configure containers

create and configure Azure Kubernetes Service (AKS)
- Tutorial: Deploy an Azure Kubernetes Service (AKS) cluster
- Quickstart: Deploy an Azure Kubernetes Service cluster using the Azure CLI
create and configure Azure Container Instances (ACI)
- Quickstart: Deploy a container instance in Azure using the Azure portal

Create and configure Web Apps

create and configure App Service
- Configure an App Service app in the Azure portal
create and configure App Service Plans
- Manage an App Service plan in Azure
- Azure App Service plan overview

Configure and manage virtual networking (30-35%)

Implement and manage virtual networking

create and configure VNET peering
- Virtual network peering
- Create, change, or delete a virtual network peering
configure private and public IP addresses, network routes, network interface, subnets, and virtual network

Configure name resolution

configure Azure DNS
- Azure DNS Documentation
- Quickstart: Create an Azure DNS zone and record using the Azure portal
configure custom DNS settings
- Use Azure DNS to provide custom domain settings for an Azure service
- Tutorial: Map an existing custom DNS name to Azure App Service
configure a private or public DNS zone
- Quickstart: Create an Azure private DNS zone using the Azure porta
- Tutorial: Host your domain in Azure DNS

Secure access to virtual networks

create security rules
- Create, change, or delete a network security group
associate an NSG to a subnet or network interface
- Create, change, or delete a network security group
evaluate effective security rules
- Create, change, or delete a network security group
deploy and configure Azure Firewall
- Tutorial: Deploy and configure Azure Firewall using the Azure portal
- Tutorial: Deploy and configure Azure Firewall in a hybrid network using the Azure portal
deploy and configure Azure Bastion Service
- Create an Azure Bastion host using the portal

Configure load balancing

configure Application Gateway
- Application Gateway configuration overview
- Quickstart: Direct web traffic with Azure Application Gateway – Azure portal
configure an internal load balancer
- Internal Load Balancing
- Tutorial: Balance internal traffic load with a Standard load balancer in the Azure portal
configure load balancing rules
- Quickstart: Create a Load Balancer to load balance VMs using the Azure portal
- Configure load balancing and outbound rules in Standard Load Balancer using Azure CLI
configure a public load balancer
- Creating a public load balancer using a template
troubleshoot load balancing
- Troubleshoot Azure Load Balancer

Monitor and troubleshoot virtual networking

monitor on-premises connectivity
- Diagnose on-premises connectivity via VPN gateways
use Network Performance Monitor
- Network Performance Monitor solution: Performance monitoring
use Network Watcher
- What is Azure Network Watcher?
troubleshoot external networking
- Troubleshoot Virtual Network Gateway and Connections using Azure Network Watcher PowerShell
troubleshoot virtual network connectivity
- Troubleshooting connectivity problems between Azure VMs

Integrate an on-premises network with an Azure virtual network

create and configure Azure VPN Gateway
- Create a route-based VPN gateway using the Azure portal
- Tutorial: Create and manage a VPN gateway using PowerShell
create and configure VPNs
- Create a virtual network with a Site-to-Site VPN connection using CLI
- Configure a site-to-site VPN over ExpressRoute Microsoft peering
configure ExpressRoute
- Connect an on-premises network to Azure using ExpressRoute
configure Azure Virtual WAN
- Tutorial: Create a Site-to-Site connection using Azure Virtual WAN

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

configure and interpret metrics
- analyze metrics across subscriptions
- Metrics in Azure Monitor
- Quickstart: Monitor an Azure resource with Azure Monitor
configure Log Analytics
- implement a Log Analytics workspace
- Collect and analyze Azure activity logs in Log Analytics workspace in Azure Monitor
- Manage access to log data and workspaces in Azure Monitor
- configure diagnostic settings
- Automatically enable Diagnostic Settings at resource creation using a Resource Manager template
query and analyze logs
- create a query
- Tutorial: Get started with Log Analytics queries
- save a query to the dashboard
- Get started with log queries in Azure Monitor
- interpret graphs
- Creating charts and diagrams from Azure Monitor log queries
set up alerts and actions
- create and test alerts
- Overview of alerts in Microsoft Azure
- Create, view, and manage activity log alerts using Azure Monitor
- create action groups
- Create and manage action groups in the Azure portal
- view alerts in Azure Monitor
- Create, view, and manage activity log alerts using Azure Monitor
- Create, view, and manage log alerts using Azure Monitor
- analyze alerts across subscriptions
- Azure Monitor alerting just got better!
configure Application Insights
- Manage Application Insights resources using PowerShell

Implement backup and recovery

configure and review backup reports
- Configure Azure Backup reports
perform backup and restore operations by using Azure Backup Service
create a Recovery Services Vault
- use soft delete to recover Azure VMs
- Soft delete for virtual machines in Azure Backup
create and configure backup policy
- Manage Azure VM backups with Azure Backup service
perform site-to-site recovery by using Azure Site Recovery
- About Site Recovery
- Quickstart: Set up disaster recovery to a secondary Azure region for an Azure VM

I hope you enjoyed all the Microsoft Docs for AZ-104 Study Guide. I recommend you to take practice tests before appearing for official exam, so that you will be confident in the actual exam.

Happy blogging!