AZ-104: Microsoft Azure Administrator

Learning Path 1: Manage identities and governance in Azure

Module 1: Administer Identity

This module explains Microsoft Entra ID (Formerly Azure AD). You'll compare Microsoft Entra ID (Formerly Azure AD). to Active Directory DS, learn about Microsoft Entra ID (Formerly Azure AD) P1 and P2, and explore Microsoft Entra Domain Services for managing domain-joined devices and apps in the cloud.

Lessons

• Understand Microsoft Entra ID (Formerly Azure AD)
• Create, configure and manage identities

Lab:

• Manage Microsoft Entra ID Identities

After completing this module, students will be able to:

• Secure and manage identities with Azure Active Directory.
• Implement and manage users and groups.

Module 02: Administer Governance and Compliance

This module, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

Lessons

• Describe the core architectural components of Azure
• Azure Policy Initiatives
• Configure Role Based Access Control

Labs:

• Manage Subscriptions and RBAC
• Manage Governance via Azure Policy Labs name

After completing this module, students will be able to:

• Implement and manage Azure subscriptions and accounts.
• Implement Azure Policy, including custom policies.
• Use RBAC to assign permissions.

Module 03: Administer Azure Resources

This module, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates.

Lessons

• Configure Azure Resources with Tools
• Deploy Resources with ARM Templates

Lab:

• Manage Azure resources by Using ARM Templates

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources.
• Use the Azure Portal and Cloud Shell.
• Use Azure PowerShell and CLI.
• Use ARM Templates to deploy resources.

Learning Path 2: Configure and manage virtual networks for Azure administrators

Module 04: Administer Virtual Networking

This module, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.

Lessons

• Configure Virtual Networks
• Configure Network Security Groups
• Host your domain on Azure DNS

Lab:

• Implement Virtual Networking

After completing this module, students will be able to:

• Implement virtual networks and subnets.
• Configure public and private IP addressing.
• Configure network security groups.
• Configure Azure Firewall.
• Configure private and public DNS zones.

Module 05: Administer Intersite Connectivity

This module, you will learn about intersite connectivity features including VNet Peering, Virtual Network Gateways, and Site-to-Site Connections.

Lessons

• Configure VNet Peering
• Manage and control traffic flows with Routes

Lab:

• Implement intersite connectivity

After completing this module, students will be able to:

• Configure VNet Peering.
• Configure VPN gateways.
• Choose the appropriate intersite connectivity solution.

Module 06: Administer Network Traffic Management

This module, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

Lessons

• Introduction to Azure Load Balancer
• Introduction to Application Gateway
• Introduction Network Watcher

Lab:

• Implement traffic management

After completing this module, students will be able to:

• Configure network routing including custom routes and service endpoints.
• Configure an Azure Load Balancer.
• Configure and Azure Application Gateway.
• Choose the appropriate network traffic solution.

Learning Path 3: Implement and manage storage in Azure

Module 07: Administer Azure Storage

This module, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

Lessons

• Configure Storage Accounts
• Configure Blob Storage
• Configure Storage Security
• Configure Azure Files

Lab:

• Manage Azure Storage

After completing this module, students will be able to:

• Create Azure storage accounts.
• Configure blob containers.
• Secure Azure storage.
• Configure Azure files shares and file sync.
• Manage storage with tools such as Storage Explorer.

Learning Path 4: Deploy and manage Azure compute resources

Module 08: Administer Azure Virtual Machines

This module, you will learn about Azure virtual machines including planning, creating, availability and extensions.

Lessons

• Introduction to Virtual Machines
• Configure Virtual Machine Availability

Lab:

• Manage Virtual Machine

After completing this module, students will be able to:

• Plan for virtual machine implementations.
• Create virtual machines.
• Configure virtual machine availability, including scale sets.
• Use virtual machine extensions.

Module 09: Administer PaaS Compute Options

This module, you will learn administer serverless computing features like Azure App Service, Azure Container Instances, and Kubernetes.

Lessons

• Configure Azure App Service Plans
• Configure Azure App Services
• Configure Azure Container instances

Labs:

• Implement Web Apps
• Implement Azure Container
• Implement Azure Container Instances

After completing this module, students will be able to:

• Create an app service plan.
• Create a web app.
• Implement Azure Container Instances.

Learning Path 5: Administer Data Protection

Module 10: Administer Data Protection

This module, you will learn about backing up files and folders, and virtual machine backups.

Lessons

• Introduction to Azure Backup
• Protect your virtual machine using Azure Backups

Lab:

• Implement Data Protection

After completing this module, students will be able to:

• Backup and restore file and folders.
• Backup and restore virtual machines.

Module 11: Administer Monitoring

This module, you will learn about monitoring your Azure infrastructure including Azure Monitor, alerting, and log analytics.

Lessons

• Introduction to Azure Monitor
• Improve incident response with alerting on Azure
• Analyze your infrastructure using Azure Monitor logs

Lab:

• Implementing Monitoring

After completing this module, students will be able to:

• Use Azure Monitor.
• Create Azure alerts.
• Query using Log Analytics.
• Use Network Watcher.

This course is for Azure Administrators. Azure Administrators manage cloud services that span storage, networking, and compute cloud capabilities, with a deep understanding of each service across the full IT lifecycle. They take end-user requests for new cloud applications and make recommendations on services to use for optimal performance and scale, as well as provision, size, monitor and adjust as appropriate. This role requires communicating and coordinating with vendors. Azure Administrators use the Azure Portal and as they become more proficient, they use PowerShell and the Command Line Interface.

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate. Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations