AZ-104: Microsoft Azure Administrator

Prove you know your stuff with the latest Microsoft Azure certification.

Course cost – $2600

Course length:

Full time – 4 days: Monday-Thursday 9:00AM-5:00PM

Part time – 6 days – Tuesday and Thursday 6:00PM-9:30PM and Saturday 9:00AM-5:00PM

This course covers the following areas:

Manage Azure identities and governance (15-20%)

Manage Azure AD objects
– create users and groups
– manage user and group properties
– manage device settings
– perform bulk user updates
– manage guest accounts
– configure Azure AD Join
– configure self-service password reset
– NOT: Azure AD Connect; PIM
Manage role-based access control (RBAC)
– create a custom role
– provide access to Azure resources by assigning roles
o subscriptions
o resource groups
o resources (VM, disk, etc.)
– interpret access assignments
– manage multiple directories
Manage subscriptions and governance
– configure Azure policies
– configure resource locks
– apply tags
– create and manage resource groups
o move resources
o remove RGs
– manage subscriptions
– configure Cost Management
– configure management groups

Implement and manage storage (10-15%)

Manage storage accounts
– configure network access to storage accounts
– create and configure storage accounts
– generate shared access signature
– manage access keys
– implement Azure storage replication
– configure Azure AD Authentication for a storage account
Manage data in Azure Storage
– export from Azure job
– import into Azure job
– install and use Azure Storage Explorer
– copy data by using AZCopy
Configure Azure files and Azure blob storage
– create an Azure file share
– create and configure Azure File Sync service
– configure Azure blob storage
– configure storage tiers for Azure blobs

Deploy and manage Azure compute resources (25-30%)

Configure VMs for high availability and scalability
– configure high availability
– deploy and configure scale sets
Automate deployment and configuration of VMs
– modify Azure Resource Manager (ARM) template
– configure VHD template
– deploy from template
– save a deployment as an ARM template
– automate configuration management by using custom script extensions
Create and configure VMs
– configure Azure Disk Encryption
– move VMs from one resource group to another
– manage VM sizes
– add data discs
– configure networking
– redeploy VMs
Create and configure containers
– create and configure Azure Kubernetes Service (AKS)
– create and configure Azure Container Instances (ACI)
– NOT: selecting an container solution architecture or product; container registry settings
Create and configure Web Apps
– create and configure App Service
– create and configure App Service Plans

Configure and manage virtual networking (30-35%)

Implement and manage virtual networking
– create and configure VNET peering
– configure private and public IP addresses, network routes, network interface, subnets,
and virtual network
Configure name resolution
– configure Azure DNS
– configure custom DNS settings
– configure a private or public DNS zone
Secure access to virtual networks
– create security rules
– associate an NSG to a subnet or network interface
– evaluate effective security rules
– deploy and configure Azure Firewall
– deploy and configure Azure Bastion Service
– NOT: Implement Application Security Groups; DDoS
Configure load balancing
– configure Application Gateway
– configure an internal load balancer
– configure load balancing rules
– configure a public load balancer
– troubleshoot load balancing
– NOT: Traffic Manager and FrontDoor and PrivateLink
Monitor and troubleshoot virtual networking
– monitor on-premises connectivity
– use Network Performance Monitor
– use Network Watcher
– troubleshoot external networking
– troubleshoot virtual network connectivity
Integrate an on-premises network with an Azure virtual network
– create and configure Azure VPN Gateway
– create and configure VPNs
– configure ExpressRoute
– configure Azure Virtual WAN

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor
– configure and interpret metrics
o analyze metrics across subscriptions
– configure Log Analytics
o implement a Log Analytics workspace
o configure diagnostic settings
– query and analyze logs
o create a query
o save a query to the dashboard
o interpret graphs
– set up alerts and actions
o create and test alerts
o create action groups
o view alerts in Azure Monitor
o analyze alerts across subscriptions
– configure Application Insights

Implement backup and recovery
– configure and review backup reports
– perform backup and restore operations by using Azure Backup Service
– create a Recovery Services Vault
o use soft delete to recover Azure VMs
– create and configure backup policy
– perform site-to-site recovery by using Azure Site Recovery