AZ-104 A: Microsoft Azure Administrator

Configure Microsoft Entra ID
Learn how to configure Microsoft Entra ID, including features like Microsoft Entra ID join and self-service password reset.

Lessons
•   Describe Microsoft Entra ID benefits and features
•   Describe Microsoft Entra concepts
•   Compare Active Directory Domain Services to Microsoft Entra ID
•   Select Microsoft Entra editions
•   Implement Microsoft Entra self-service password reset

After completing this module, students will be able to:
•   Define Microsoft Entra concepts, including identities, accounts, and tenants.
•   Describe Microsoft Entra features to support different configurations.
•   Understand differences between Microsoft Entra ID and Active Directory Domain Services (AD DS).
•   Choose between supported editions of Microsoft Entra ID.
•   Use the Microsoft Entra self-service password reset feature.

Configure user and group accounts
Learn how to configure user and group accounts.

Lessons
•   Create user accounts
•   Manage user accounts
•   Create bulk user accounts
•   Create group accounts
•   Create administrative units
•   Interactive lab simulation

After completing this module, students will be able to:
•   Configure users accounts and user account properties.
•   Create new user accounts.
•   Import bulk user accounts with a template.
•   Configure group accounts and assignment types.

Configure subscriptions
Learn how to configure Azure subscriptions, including how to obtain a subscription, implement cost management, and apply Azure resource tags.

Lessons
•   Identify Azure regions
•   Implement Azure subscriptions
•   Obtain an Azure subscription
•   Identify Azure subscription usage
•   Implement Microsoft Cost Management
•   Apply resource tagging
•   Apply cost savings

After completing this module, students will be able to:
•   Determine the correct region to locate Azure services.
•   Review features and use cases for Azure subscriptions.
•   Obtain an Azure subscription.
•   Understand billing and features for different Azure subscriptions.
•   Use Microsoft Cost Management for cost analysis.
•   Discover when to use Azure resource tagging.
•   Identify ways to reduce costs.

Configure Azure Policy
Learn how to configure Azure Policy to implement compliance requirements.

Lessons
•   Create management groups
•   Implement Azure policies
•   Create Azure policies
•   Create policy definitions
•   Create an initiative definition
•   Scope the initiative definition
•   Determine compliance
•   Interactive lab simulation

After completing this module, students will be able to:
•   Create management groups to target policies and spending budgets.
•   Implement Azure Policy with policy and initiative definitions.
•   Scope Azure policies and determine compliance.

Configure role-based access control
Learn how to use role-based access control (RBAC) to ensure resources are protected, but users can still access the resources they need.

Lessons
•   Implement role-based access control
•   Create a role definition
•   Create a role assignment
•   Compare Azure roles to Microsoft Entra roles
•   Apply role-based access control
•   Review fundamental Azure RBAC roles
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and use cases for role-based access control.
•   List and create role definitions.
•   Create role assignments.
•   Identify differences between Azure RBAC and Microsoft Entra roles.
•   Manage access to subscriptions with RBAC.
•   Review built-in Azure RBAC roles.

Configure Azure resources with tools
You will learn how to select a tooling option such as Azure portal, Azure PowerShell, Azure CLI, or Azure Cloud Shell.

Lessons
•   Use the Azure portal
•   Use Azure Cloud Shell
•   Use Azure PowerShell
•   Interactive lab simulation (Azure PowerShell)
•   Use Azure CLI
•   Interactive lab simulation (Azure CLI)

After completing this module, students will be able to:
•   Manage resources with the Azure portal.
•   Manage resources with Azure Cloud Shell.
•   Manage resources with Azure PowerShell.
•   Manage resources with Azure CLI.

Use Azure Resource Manager
You’ll learn how to use resource groups to organize your Azure resources.

Lessons
•   Review Azure Resource Manager benefits
•   Review Azure resource terminology
•   Create resource groups
•   Create Azure Resource Manager locks
•   Reorganize Azure resources
•   Remove resources and resource groups
•   Determine resource limits

After completing this module, students will be able to:
•   Identify the features and usage cases for Azure Resource Manager.
•   Describe each Azure Resource Manager component and its usage.
•   Organize your Azure resources with resource groups.
•   Apply Azure Resource Manager locks.
•   Move Azure resources between groups, subscriptions, and regions.
•   Remove resources and resource groups.
•   Apply and track resource limits.

Configure resources with Azure Resource Manager templates
You’ll learn how to use Azure Resource Manager templates to consistently deploy assets.

Lessons
•   Review Azure Resource Manager template advantages
•   Explore the Azure Resource Manager template schema
•   Explore the Azure Resource Manager template parameters
•   Consider Bicep templates
•   Review QuickStart templates
•   Interactive lab simulation – templates

After completing this module, students will be able to:
•   List the advantages of Azure templates.
•   Identify the Azure template schema components.
•   Specify Azure template parameters.
•   Locate and use Azure Quickstart Templates.

Configure virtual networks
Learn to configure virtual networks and subnets, including IP addressing.

Lessons
•   Plan virtual networks
•   Create subnets
•   Create virtual networks
•   Plan IP addressing
•   Create public IP addressing
•   Associate public IP addresses
•   Allocate or assign private IP addresses
•   Interactive lab simulation

After completing this module, students will be able to:
•   Describe Azure virtual network features and components.
•   Identify features and usage cases for subnets and subnetting.
•   Identify usage cases for private and public IP addresses.
•   Create a virtual network and assign IP address.

Configure network security groups
Learn how to implement network security groups, and ensure network security group rules are correctly applied.

Lessons
•   Implement network security groups
•   Determine network security group rules
•   Determine network security group effective rules
•   Create network security group rules
•   Implement application security groups
•   Interactive lab simulation

After completing this module, students will be able to:
•   Determine when to use network security groups.
•   Create network security groups.
•   Implement and evaluate network security group rules.
•   Describe the function of application security groups.

Configure Azure DNS
Learn how to configure Azure DNS including custom domain names and record sets.

Lessons
•   Identify domains and custom domains
•   Verify custom domain names
•   Create Azure DNS zones
•   Delegate DNS domains
•   Add DNS record sets
•   Plan for Azure Private DNS zones
•   Review Azure Private DNS zone scenarios
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and usage cases for domains, custom domains, and private zones.
•   Verify custom domain names by using DNS records.
•   Implement DNS zones, DNS delegation, and DNS record sets.

Configure Azure Virtual Network peering
Learn to configure an Azure Virtual Network peering connection and address transit and connectivity concerns.

Lessons
•   Determine Azure Virtual Network peering uses
•   Determine gateway transit and connectivity
•   Create virtual network peering
•   Extend peering with user-defined routes and service chaining
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify usage cases and product features of Azure Virtual Network peering.
•   Configure your network to implement Azure VPN Gateway for transit connectivity.
•   Extend peering by using a hub and spoke network with user-defined routes and •   service chaining.

Configure network routing and endpoints
Learn how to configure network routes, including endpoints and private links.

Lessons
•   Review system routes
•   Identify user-defined routes
•   Determine service endpoint uses
•   Determine service endpoint services
•   Identify private link uses
•   Interactive lab simulation

After completing this module, students will be able to:
•   Implement system routes and user-defined routes.
•   Configure a custom route.
•   Implement service endpoints.
•   Identify features and usage cases for Azure Private Link and endpoint services.

Configure Azure Load Balancer
Learn how to configure an internal or public load balancer.

Lessons
•   Determine Azure Load Balancer uses
•   Implement a public load balancer
•   Implement an internal load balancer
•   Determine load balancer SKUs
•   Create back-end pools
•   Create health probes
•   Create load balancer rules
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and usage cases for Azure Load Balancer.
•   Implement public and internal Azure load balancers.
•   Compare features of load balancer SKUs and configuration differences.
•   Configure back-end pools, load-balancing rules, session persistence, and health probes.

Configure Azure Application Gateway
Learn how to configure Azure Application Gateway.

Lessons
•   Implement Azure Application Gateway
•   Determine Azure Application Gateway routing
•   Configure Azure Application Gateway components

After completing this module, students will be able to:
•   Identify features and usage cases for Azure Application Gateway.
•   Implement an Azure application gateway, including selecting a routing method.
•   Configure gateway components, such as listeners, health probes, and routing rules.

Configure storage accounts
Learn how to configure storage accounts, including replication and endpoints.

Lessons
•   Implement Azure Storage
•   Explore Azure Storage services
•   Determine storage account types
•   Determine replication strategies
•   Access storage
•   Secure storage endpoints

After completing this module, students will be able to:
•   Identify features and usage cases for Azure storage accounts.
•   Select between different types of Azure Storage and create storage accounts.
•   Select a storage replication strategy.
•   Configure secure network access to storage endpoints.

Configure Azure Blob Storage
Learn how to configure Configure Azure Blob Storage, including tiers and object replication.

Lessons
•   Implement Azure Blob Storage
•   Create blob containers
•   Assign blob access tiers
•   Add blob lifecycle management rules
•   Determine blob object replication
•   Upload blobs
•   Determine Blob Storage pricing
•   Interactive lab simulation

After completing this module, students will be able to:
•   Understand the purpose and benefits of Azure Blob Storage.
•   Create and configure Azure Blob Storage accounts.
•   Manage containers and blobs within Azure Blob Storage.
•   Optimize blob storage performance and scalability.
•   Implement lifecycle management policies to automate data movement and deletion.
•   Determine the best pricing plans for your Azure Blob Storage.

Configure Azure Storage security
Learn how to configure common Azure Storage security features like storage access signatures.

Lessons
•   Review Azure Storage security strategies
•   Create shared access signatures
•   Identify URI and SAS parameters
•   Determine Azure Storage encryption
•   Create customer-managed keys
•   Apply Azure Storage security best practices
•   Interactive lab simulation

After completing this module, students will be able to:
•   Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
•   Configure Azure Storage encryption.
•   Implement customer-managed keys.
•   Recommend opportunities to improve Azure Storage security.

Configure Azure Files and Azure File Sync
Learn how to configure Azure Files and Azure File Sync.

Lessons
•   Compare storage for file shares and blob data
•   Manage Azure file shares
•   Create file share snapshots
•   Implement soft delete for Azure Files
•   Use Azure Storage Explorer
•   Deploy Azure File Sync

After completing this module, students will be able to:
•   Identify storage for file shares versus blob data.
•   Configure Azure file shares and file share snapshots.
•   Identify features and use cases of Azure File Sync.
•   Identify Azure File Sync components and configuration steps.

Configure virtual machines
Learn how to configure virtual machines including sizing, storage, and connections.

Lessons
•   Review cloud services responsibilities
•   Plan virtual machines
•   Determine virtual machine sizing
•   Determine virtual machine storage
•   Create virtual machines in the Azure portal
•   Connect to virtual machines
•   Interactive lab simulation

After completing this module, students will be able to:
•   Determine the responsibilities of cloud service providers and customers in a cloud computing environment.
•   Identify the key considerations and factors involved in planning for virtual machines. Considerations include workload requirements, resource allocation, and secure access.
•   Configure virtual machine storage and virtual machine sizing.
•   Create a virtual machine in the Azure portal.
•   Practice deploying an Azure virtual machine and verify the configuration.

Configure virtual machine availability
Learn how to configure virtual machine availability including vertical and horizontal scaling.

Lessons
•   Plan for maintenance and downtime
•   Create availability sets
•   Review update domains and fault domains
•   Review availability zones
•   Compare vertical and horizontal scaling
•   Implement Azure Virtual Machine Scale Sets
•   Create Virtual Machine Scale Sets
•   Implement autoscale
•   Configure autoscale
•   Interactive lab simulation

After completing this module, students will be able to:
•   Implement availability sets and availability zones.
•   Implement update and fault domains.
•   Implement Azure Virtual Machine Scale Sets.
•   Autoscale virtual machines.

Configure Azure App Service plans
Learn how to configure an Azure App Service plan, including pricing and scaling.

Lessons
•   Implement Azure App Service plans
•   Determine Azure App Service plan pricing
•   Scale up and scale out Azure App Service
•   Configure Azure App Service autoscale

After completing this module, students will be able to:
•   Identify features and usage cases for Azure App Service.
•   Select an appropriate Azure App Service plan pricing tier.
•   Scale an Azure App Service plan.

Configure Azure App Service
Learn how to configure and monitor Azure App Service instances, including deployment slots.

Lessons
•   Implement Azure App Service
•   Create an app with App Service
•   Explore continuous integration and deployment
•   Create deployment slots
•   Add deployment slots
•   Secure your App Service app
•   Create custom domain names
•   Back up and restore your App Service app
•   Use Azure Application Insights
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and usage cases for Azure App Service.
•   Create an app with Azure App Service.
•   Configure deployment settings, specifically deployment slots.
•   Secure your Azure App Service app.
•   Configure custom domain names.
•   Back up and restore your Azure App Service app.
•   Configure Azure Application Insights.

Configure Azure Container Instances
Learn how to configure Azure Container Instances including container groups.

Lessons
•   Compare containers to virtual machines
•   Review Azure Container Instances
•   Implement container groups
•   Review the Docker platform
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify when to use containers versus virtual machines.
•   Identify the features and usage cases of Azure Container Instances.
•   Implement Azure container groups.

Configure file and folder backups
Learn how to configure backup and restore policies that meet your company’s regulatory needs.

Lessons
•   Describe Azure Backup benefits
•   Implement Backup Center for Azure Backup
•   Configure Azure Recovery Services vault backup options
•   Use the Microsoft Azure Recovery Services (MARS) agent
•   Configure on-premises file and folder backups
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and usage cases for Azure Backup.
•   Configure Azure Recovery Services vault backup options.
•   Configure the Microsoft Azure Recovery Services (MARS) agent for Azure Backup.
•   Implement on-premises file and folder backups.

Configure virtual machine backups
Learn how to configure virtual machine backups including restore operations.

Lessons
•   Explore options to protect virtual machine data
•   Create virtual machine snapshots in Azure Backup
•   Set up Azure Recovery Services vault backup options
•   Back up your virtual machines
•   Restore your virtual machines
•   Implement soft delete for your virtual machines
•   Implement Azure Site Recovery
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify features and usage cases for different Azure backup methods.
•   Configure virtual machine snapshots and backup options.
•   Implement virtual machine backup and restore, including soft delete.
•   Perform site-to-site recovery by using Azure Site Recovery.

Configure Azure Monitor
Learn how to configure Azure Monitor, including querying the Azure Monitor activity log.

Lessons
•   Describe Azure Monitor key capabilities
•   Describe Azure Monitor components
•   Define metrics and logs
•   Identify monitoring data and tiers
•   Describe activity log events
•   Query the activity log
•   Interactive lab simulation

After completing this module, students will be able to:
•   Identify the features and usage cases for Azure Monitor.
•   Configure and interpret metrics and logs.
•   Identify the Azure Monitor components and data types.
•   Configure the Azure Monitor activity log.

Improve incident response with alerting on Azure
Respond to incidents and activities in your infrastructure through alerting capabilities in Azure Monitor.

Lessons
•   Explore the different alert types that Azure Monitor supports
•   Use metric alerts for alerts about performance issues in your Azure environment
•   Exercise – Use metric alerts to alert on performance issues in your Azure environment
•   Use log alerts to alert on events in your application
•   Use activity log alerts to alert on events within your Azure infrastructure
•   Use action groups and alert processing rules to send notifications when an alert is fired
•   Exercise -Use an activity log alert and an action group to notify users about events in your Azure infrastructure

After completing this module, students will be able to:
•   Configure alerts on events in your Azure resources based on metrics, log events, and activity log events.
•   Learn how to use action groups in response to an alert, and how to use alert processing rules to override action groups when necessary.

Configure Log Analytics
You will learn how to configure Log Analytics including structuring queries.

Lessons
•   Determine Log Analytics uses
•   Create a Log Analytics workspace
•   Create Kusto (KQL) queries
•   Structure Log Analytics queries

After completing this module, students will be able to:
•   Identify the features and usage cases for Log Analytics.
•   Create a Log Analytics workspace.
•   Structure a Log Analytics query and review results.

Configure Network Watcher
You learn how to configure Network Watcher and troubleshoot common networking problems.

Lessons
•   Describe Azure Network Watcher features
•   Review IP flow verify diagnostics
•   Review next hop diagnostics
•   Visualize the network topology

After completing this module, students will be able to:
•   Identify the features and usage cases for Azure Network Watcher.
•   Configure diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.