AZ-104: Microsoft Azure Administrator

Cloud Computing Introduction  

∙ What is Cloud Computing 

∙ Cloud Characteristics  

∙ Cloud Computing Service Models 

∙ Deployment Models in Cloud Computing 

∙ Advantages and Disadvantages of Cloud Computing 

∙ Cloud Computing Job Roles. 

∙ Cloud Computing Platforms and Certifications. 

Getting Starting with Azure 

∙ Introduction to Azure 

∙ Why, What and Benefits of Azure 

∙ Azure Hosting Models 

∙ Azure Services 

∙ Subscribing to Microsoft Azure 

∙ Azure Portals 

∙ Azure Key Concepts 

∙ Azure Resource Group 

∙ Installing Microsoft Azure SDK 

Configure and Manage Azure Virtual Networks  

∙ Overview of Azure Networking 

∙ Virtual Network Benefits 

∙ Understanding Network Resources 

∙ Implement and manage virtual networking 

o Create a VNet using Azure Portal 

o Create a Subnet 

o Configure private and public IP addresses 

o Create Network Interface Card with public, and private IP addresses o Create a Virtual Machine 

∙ Setup Network Security Group 

o Create security rules 

o Associate NSG to a subnet or network interface 

o Identify required ports 

o Evaluate effective security rules

∙ Load Balancer 

o Configure external and internal Azure Load balancer 

o Load Balancing Rules 

o Implement front end IP configuration 

o Configure NAT rules 

∙ Azure Firewall 

∙ Understanding Azure DNS  

o Configure Azure DNS 

o Public and Private DNS Zones 

∙ Understanding and Creating Availability Set 

∙ Understanding Availability Zones 

∙ Azure Front Door Service 

∙ Monitoring and Troubleshooting Network Connectivity 

Implement Advanced Virtual Networking  

∙ Azure Application Gateway 

∙ Azure Traffic Manager 

∙ Create connectivity between virtual networks 

o Create and configure VNET peering  

o Create and configure VNET to VNET  

o Verify virtual network connectivity 

∙ Integrate on-premises network with Azure virtual network  o Site-to-Site VPN 

o Express Route Solution 

∙ Monitor and Manage Networking 

o Verify, Manage and Monitor on-premises connectivity; 

o Use network resource monitoring and Network Watcher o Manage external networking and virtual network connectivity 

Managing Azure with Windows PowerShell and Azure CLI. 

∙ Installing the required modules 

∙ Login to Azure Portal 

∙ Managing Resource Group 

∙ Managing App Service Plans and App Service Web Apps ∙ Create and Configure a Storage Account 

∙ Managing Storage Accounts using PowerShell

∙ Azure CLI Introduction and Setup 

∙ Creating Resources 

∙ Listing and Formatting output 

∙ Connect a Web App to SQL Database 

∙ Deleting Resources 

∙ Interactive Mode 

Manage resource groups  

∙ Use Azure policies for resource groups ∙ Configure resource locks 

∙ Configure resource policies 

∙ Implement and set tagging on resource groups ∙ Move resources across resource groups ∙ Remove resource groups 

Managing ARM Templates. 

∙ Understanding Azure Resource Manager (ARM) ∙ Exporting and Importing ARM templates. ∙ ARM Resource Providers 

∙ Deploy ARM Templates 

o Using PowerShell 

o Azure CLI 

o Azure Portal 

∙ Incremental and Complete Deployments 

Azure Storage Service 

∙ About Storage Service and Account 

∙ Creating a Storage Account 

∙ Working with Blob Storage 

o Types of Blobs (Block, Append, Page) 

o Container and Metadata 

o Soft Copy  

o Azure Storage Explorer 

o Transfer Data using AzCopy 

o Programming Blob Storage 

o Async Blob Copy

o Import and Export Service 

o Implement and Configure CDN 

o Configure Custom Domain 

o Scale Blob Storage 

o Storage Service Encryption 

∙ Manage Access / Securing Storage 

o Create and Manage Shared Access Signature 

o Account SAS vs Service SAS 

o Using Stored Access Policies 

o Regenerating Keys 

o Encrypt Keys using Azure Key Vault integration 

∙ Working with Table Storage 

o Understanding NoSQL Database 

o Creating Table and Entities using Storage Explorer 

o Entities and Properties 

o Table storage vs COSMOS DB Table API 

∙ Azure Queues Storage 

o Understanding Async Communication using Queues 

o Comparing Azure Queues and Service Bus Queues 

∙ Azure SMB File Storage  

o Common usage of File Storage 

o Shares, Directory and File 

o Managing Using Azure Portal 

∙ Azure File Sync 

Azure Virtual Machine 

∙ Introduction 

∙ About Virtual Machine Workloads 

∙ Create a Windows Virtual Machine using Portal / PowerShell / ARM Templates ∙ Deploy popular application frameworks by using Azure Resource Manager templates ∙ Virtual Machine Disk  

∙ Convert Unmanaged Disk to Managed Disk 

∙ Generalizing VM and Capture VM Images 

∙ Upload an on-premise VHD to Storage Account and attach to VM as Data Disk ∙ Working with Disk Snapshot 

∙ VM Disk Types

∙ VM Sizes in Azure 

∙ Configuring VM Disk Encryption 

∙ Perform configuration management  

o VM Extensions & VM Agents 

o Custom Script Extensions  

o Desired State Configuration (DSC)  

o Access Extension 

∙ Virtual Machine Scale Sets 

∙ Configure VM monitoring, configure alerts, diagnostic and monitoring storage location. 

Implement Azure Backup and Restore 

∙ Overview of Azure Backup 

∙ Configure VM backup 

∙ Create Recovery Services Vault  

∙ Define and Implement backup policies 

∙ Perform VM restore 

∙ Perform backup operation 

∙ Configure and review backup reports 

Azure Monitoring and Log Analytics Workspace 

∙ Azure Monitor Overview 

∙ Monitoring Metrics 

∙ Monitoring Logs 

∙ Log Analytic Workspace 

∙ Collect data from an Azure VM / Windows computer 

∙ Azure Activity Logs 

∙ Azure Diagnostics Logs 

∙ Configure and Analyze Application Insight 

Manage Azure Subscriptions and Azure  

∙ Understanding Azure Subscriptions 

∙ Configuring Role Based Access Control 

∙ RBAC using Portal 

∙ RBAC using PowerShell and CLI 

∙ Custom Roles for RBAC 

∙ Managing Subscription Policies

∙ Locking Resources 

∙ Checking Resources Limits 

∙ Resource Tags 

Managing and Securing Identities using Azure Active Directory ∙ Azure AD Introduction 

∙ Azure AD Editions 

∙ Managing Active Directories 

∙ Adding a custom domain name to Azure AD ∙ Managing Azure AD Users, Groups and Devices ∙ Adding Partner Users from other organization ∙ Configure Windows 10 with Azure AD domain join ∙ Synchronizing On-Premise AD Identities with Azure AD ∙ Azure AD Connect  

∙ Azure AD User Sign-In Options 

o Password Synchronization 

o Passthrough Authentication 

o Federated SSO 

∙ Multi Factory Authentication 

∙ Conditional Access Policy 

∙ Access Reviews  

∙ Privilege Identity Management  

∙ Integrating SaaS Applications with Azure AD for SSO o Add Users and Groups to Application 

o Revoke access to SaaS Applications 

∙ Managed Identities 

∙ Multi-Tenant vs Single-Tenant Applications