AZ-104T00 Microsoft Azure Administrator
1. Use Azure Resource Manager
– Review Azure Resource Manager benefits
– Review Azure resource terminology
– Create resource groups
– Create Azure Resource Manager locks
– Reorganize Azure resources
– Remove resources and resource groups
– Determine resource limits
2. Introduction to Azure Cloud Shell
– What is Azure Cloud Shell?
– How does Azure Cloud Shell work?
– When should you use Azure Cloud Shell?
3. Introduction to Bash
– What is Bash?
– Bash fundamentals
– Bash commands and operators
4. Introduction to PowerShell
– What is PowerShell?
– Locate commands
5. Configure resources with Azure Resource Manager templates
– Review Azure Resource Manager template advantages
– Explore the Azure Resource Manager template schema
– Explore the Azure Resource Manager template parameters
– Consider Bicep templates
– Review QuickStart templates
6. Understand Microsoft Azure Active Directory (AD)
– Examine Microsoft Azure AD
– Compare Microsoft Azure AD and Active Directory Domain Services
– Examine Microsoft Azure AD as a directory service for cloud apps
– Compare Microsoft Azure AD P1 and P2 plans
– Examine Microsoft Azure Domain Services
7. Configure user and group accounts
– Create user accounts
– Manage user accounts
– Create bulk user accounts
– Create group accounts
– Create administrative units
8. Configure subscriptions
– Identify Azure regions
– Implement Azure subscriptions
– Obtain an Azure subscription
– Identify Azure subscription usage
– Implement Microsoft Cost Management
– Apply resource tagging
– Apply cost savings
9. Configure Azure Policy
– Create management groups
– Implement Azure policies
– Create Azure policies
– Create policy definitions
– Create an initiative definition
– Scope the initiative definition
– Determine compliance
10. Configure role-based access control
– Implement role-based access control
– Create a role definition
– Create a role assignment
– Compare Azure roles to Microsoft Azure AD roles
– Apply role-based access control
– Review fundamental Azure RBAC roles
11. Create Azure users and groups in Microsoft Azure AD
– What are user accounts in Microsoft Azure AD?
– Manage app and resource access by using Microsoft Azure groups
– Collaborate by using guest accounts and Microsoft Azure B2B
12. Secure your Azure resources with Azure role-based access control (Azure RBAC)
– What is Azure RBAC?
13. Allow users to reset their password with Microsoft Azure self-service password reset
– What is self-service password reset in Microsoft Azure AD?
– Implement Microsoft Azure self-service password reset
14. Configure virtual networks
– Plan virtual networks
– Create subnets
– Create virtual networks
– Plan IP addressing
– Create public IP addressing
– Associate public IP addresses
– Allocate or assign private IP addresses
15. Configure network security groups
– Implement network security groups
– Determine network security group rules
– Determine network security group effective rules
– Create network security group rules
– Implement application security groups
16. Configure Azure Virtual Network peering
– Determine Azure Virtual Network peering uses
– Determine gateway transit and connectivity
– Create virtual network peering
– Extend peering with user-defined routes and service chaining
17. Configure network routing and endpoints
– Review system routes
– Identify user-defined routes
– Determine service endpoint uses
– Determine service endpoint services
– Identify private link uses
18. Configure Azure Load Balancer
– Determine Azure Load Balancer uses
– Implement a public load balancer
– Implement an internal load balancer
– Determine load balancer SKUs
– Create back-end pools
– Create health probes
– Create load balancer rules
19. Configure Azure Application Gateway
– Implement Azure Application Gateway
– Determine Azure Application Gateway routing
– Configure Azure Application Gateway components
20. Design an IP addressing schema for your Azure deployment
– Network IP addressing and integration
– Public and private IP addressing in Azure
– Plan IP addressing for your networks
21. Distribute your services across Azure virtual networks and integrate them by using virtual network peering
– Connect services by using virtual network peering
22. Host your domain on Azure DNS
– What is Azure DNS?
– Configure Azure DNS to host your domain
– Dynamically resolve resource name by using alias record
23. Manage and control traffic flow in your Azure deployment with routes
– Identify routing capabilities of an Azure virtual network
– What is an NVA?
24. Improve application scalability and resiliency by using Azure Load Balancer
– Azure Load Balancer features and capabilities
– Configure a public load balancer
– Internal load balancer
25. Configure storage accounts
– Implement Azure Storage
– Explore Azure Storage services
– Determine storage account types
– Determine replication strategies
– Access storage
– Secure storage endpoints
26. Configure Azure Blob Storage
– Implement Azure Blob Storage
– Create blob containers
– Assign blob access tiers
– Add blob lifecycle management rules
– Determine blob object replication
– Upload blobs
– Determine Blob Storage pricing
27. Configure Azure Storage security
– Review Azure Storage security strategies
– Create shared access signatures
– Identify URI and SAS parameters
– Determine Azure Storage encryption
– Create customer-managed keys
– Apply Azure Storage security best practices
28. Configure Azure Files and Azure File Sync
– Compare storage for file shares and blob data
– Manage Azure file shares
– Create file share snapshots
– Implement soft delete for Azure Files
– Use Azure Storage Explorer
– Deploy Azure File Sync
29. Create an Azure Storage account
– Decide how many storage accounts you need
– Choose your account settings
– Choose an account creation tool
30. Control access to Azure Storage with shared access signatures
– Authorization options for Azure Storage
– Use shared access signatures to delegate access to Azure Storage
– Use stored access policies to delegate access to Azure Storage
31. Upload, download, and manage data with Azure Storage Explorer
– Connect Azure Storage Explorer to a storage account
– Connect Azure Storage Explorer to Azure Data Lake Storage
32. Configure virtual machines
– Review cloud services responsibilities
– Plan virtual machines
– Determine virtual machine sizing
– Determine virtual machine storage
– Create virtual machines in the Azure portal
– Connect to virtual machines
33. Configure virtual machine availability
– Plan for maintenance and downtime
– Create availability sets
– Review update domains and fault domains
– Review availability zones
– Compare vertical and horizontal scaling
– Implement Azure Virtual Machine Scale Sets
– Create Virtual Machine Scale Sets
– Implement autoscale
– Configure autoscale
34. Configure Azure App Service plans
– Implement Azure App Service plans
– Determine Azure App Service plan pricing
– Scale up and scale out Azure App Service
– Configure Azure App Service autoscale
35. Configure Azure App Service
– Implement Azure App Service
– Create an app with App Service
– Explore continuous integration and deployment
– Create deployment slots
– Add deployment slots
– Secure your App Service app
– Create custom domain names
– Back up and restore your App Service app
– Use Azure Application Insights
36. Configure Azure Container Instances
– Compare containers to virtual machines
– Review Azure Container Instances
– Implement container groups
– Review Azure Container Apps
37. Manage virtual machines with the Azure CLI
– What is the Azure CLI?
38. Create a Windows virtual machine in Azure
– Create a Windows virtual machine in Azure
– Use RDP to connect to Windows Azure virtual machines
– Configure Azure virtual machine network settings
39. Host a web application with Azure App Service
– Create a web app in the Azure portal
– Prepare the web application code
– Deploy code to App Service
40. Introduction to Azure Backup
– What is Azure Backup?
– How Azure Backup works
– When to use Azure Backup
41. Configure virtual machine backups
– Explore options to protect virtual machine data
– Create virtual machine snapshots in Azure Backup
– Set up Azure Recovery Services vault backup options
– Back up your virtual machines
– Restore your virtual machines
– Implement soft delete for your virtual machines
– Implement Azure Site Recovery
42. Configure Azure Monitor
– Describe Azure Monitor key capabilities
– Describe Azure Monitor components
– Define metrics and logs
– Identify monitoring data and tiers
– Describe activity log events
– Query the activity log
43. Configure Log Analytics
– Determine Log Analytics uses
– Create a Log Analytics workspace
– Create Kusto (KQL) queries
– Structure Log Analytics queries
44. Configure Network Watcher
– Describe Azure Network Watcher features
– Review IP flow verify diagnostics
– Review next hop diagnostics
– Visualize the network topology
45. Improve incident response with Azure Monitor alerts
– Explore the different alert types that Azure Monitor supports
– Use metric alerts for alerts about performance issues in your Azure environment
– Use log alerts to alert on events in your application
– Use activity log alerts to alert on events within your Azure infrastructure
– Use action groups and alert processing rules to send notifications when an alert is fired
46. Analyze your Azure infrastructure by using Azure Monitor logs
– Features of Azure Monitor logs
– Create basic Azure Monitor log queries to extract information from log data
47. Monitor your Azure virtual machines with Azure Monitor
– Monitoring for Azure VMs
– Monitor VM host data
– Use Metrics Explorer to view detailed host metrics
– Collect client performance counters by using VM insights
– Collect VM client event logs