Reading Time: 3 minutes
Follow by Email

On March 20th 2019 Microsoft learning announced changes to the Azure Administrator Associate Certification. Starting May 1st 2019 you now only have to pass one exam, the AZ-103. This new exam combines both the AZ-100 and the AZ-101, well it looks like all of the AZ-100 and some bits from the AZ-101. You can read more about the changes in the official Microsoft learning blog post.

Below you will find a list of what is going to be tested in the new AZ-103 Azure Administrator exam and a link to a resource that I think will help you learn and pass the exam. It is a work in progress at the moment and I will keep updating it. If you do find a link that is not working, or I have linked to the wrong resource. Please let me know. Also if you would like to help fill in the blanks please leave a comment below.

Skills measured from AZ-103: Microsoft Azure Administrator

Manage Azure subscription and resources (15-20%)

Manage Azure subscriptions

Assign administrator permissions

Configure cost center quotas and tagging

Configure Azure subscription policies at Azure subscription level

Analyze resource utilization and consumption

Configure diagnostic settings on resources
Create baseline for resources
Create and rest alerts
Analyze alerts across subscription
Analyze metrics across subscription
Create action groups
Monitor for unused resources
Monitor spend
Report on spend
Utilize Log Search query functions
View alerts in Log Analytics

Manage resource groups

Use Azure policies for resource groups

Configure resource locks

Configure resource policies

Implement and set tagging on resource groups

Move resources across resource groups

Remove resource groups

Manage role-based access control (RBAC)

Create a custom role
Configure access to Azure resources by assigning roles
Configure management access to Azure
Troubleshoot RBAC
Implement RBAC policies
Assign RBAC roles

Implement and manage storage (5-10%)

Create and Configure storage accounts

Configure network access to the storage account
Create and configure storage account
Generate shared access signature
Install and use Azure Storage Explorer
Manage access keys
Monitor activity log by using Log Analytics
Implement Azure storage replication

Import and export data to Azure

Create export from Azure job

Create import into Azure job

Use Azure Data Box

Configure and use Azure blob storage

Configure Azure content delivery network (CDN) endpoints

Configure Azure files

Create Azure file share
Create Azure File Sync service
Create Azure sync group
Troubleshoot Azure File Sync

Implement Azure backup

Configure and review backup reports

Perform backup operation

Create Recovery Services Vault

Create and configure backup policy

Perform a restore operation

Deploy and manage virtual machines (VMs) (20-25%)

Create and configure a VM for Windows and Linux

Configure high availability

Configure monitoring, networking, storage, and virtual machine size

Deploy and configure scale sets

Automate deployment of VMs

Modify Azure Resource Manager (ARM) template

Configure location of new VMs

Configure VHD template

Deploy from template

Save a deployment as an ARM template

Deploy Windows and Linux VMs

Manage Azure VM

Add data disks

Add network interfaces

Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent by using custom script extensions

Manage VM sizes

Move VMs from one resource group to another

Redeploy VMs

Manage VM backups

Configure VM backup
Define backup policies
Implement backup policies
Perform VM restore
Azure Site Recovery

Configure and manage virtual networks (20-25%)

Create connectivity between virtual networks

Create and configure VNET peering
Create and configure VNET to VNET
Verify virtual network connectivity
Create virtual network gateway

Implement and manage virtual networking

Configure private and public IP addresses, network routes, network interface, subnets, and virtual network

Configure name resolution

Configure Azure DNS
Configure custom DNS settings
Configure DNS zones

Create and configure a Network Security Group (NSG)

Create security rules
Associate NSG to a subnet or network interface
Identify required ports
Evaluate effective security rules

Implement Azure load balancer

Configure internal load balancer, configure load balancing rules, configure public load balancer, troubleshoot load balancing

Monitor and troubleshoot virtual networking

Monitor on-premises connectivity, use Network resource monitoring, use Network Watcher, troubleshoot external networking, troubleshoot virtual network connectivity

Integrate on premises network with Azure virtual network

Create and configure Azure VPN Gateway, create and configure site to site VPN, configure Express Route, verify on premises connectivity, troubleshoot on premises connectivity with Azure

Manage Identities (15-20%)

Manage Azure Active Directory (AD)

Add custom domains
Configure Azure AD Join
Configure self-service password reset
Manage multiple directories

Manage Azure AD objects (users, groups, and devices)

Create users and groups
Manage user and group properties
Manage device settings
Perform bulk user updates
Manage guest accounts

Implement and manage hybrid identities

Install Azure AD Connect, including password hash and pass-through synchronization
Use Azure AD Connect to configure federation with on-premises Active Directory Domain Services (AD DS)
Manage Azure AD Connect
Manage password sync and password writeback

Implement multi-factor authentication (MFA)

Configure user accounts for MFA, enable MFA by using bulk update, configure fraud alerts, configure bypass options, configure Trusted IPs, configure verification methods

I hope you found this helpful and Good Luck in your exams!

Follow by Email

Pixel Robots.

I’m Richard Hooper aka Pixel Robots. I started this blog in 2016 for a couple reasons. The first reason was basically just a place for me to store my step by step guides, troubleshooting guides and just plain ideas about being a sysadmin. The second reason was to share what I have learned and found out with other people like me. Hopefully, you can find something useful on the site.


Tony · March 22, 2019 at 9:32 am

Hi, should I bypass AZ102 and focus on AZ103 now?

    Pixel Robots. · March 22, 2019 at 9:39 am

    If you feel you can pass the az-102 before it expires (30th June 2019) then stick with it. If you feel you won’t be able to pass it before then, continue your studies but try and align them to the az-103. You will see a lot of overlap.

      Jayesh Thakare · May 29, 2019 at 7:14 pm

      It’s amazin blogs.I would request you to update troubleshooting docs with step by step and the conclusions behind perform every step. That would help to newguys also.

        Pixel Robots. · May 30, 2019 at 10:25 am

        Do you have any examples?

PxE · March 22, 2019 at 12:10 pm

I was approved today on the AZ-100. I will earn the certification for aproved only this course, or I need to pass the AZ-101 before May 01, to earn the title of Microsoft Certified: Azure Administrator Associate?

    Pixel Robots. · March 22, 2019 at 1:34 pm

    if you pass the AZ-100 before May 1st you will get the full certification.

Michael David Smith · May 13, 2019 at 7:25 am

The link for “Create baseline for resources” > comes to a page on Dynamic Thresholds. This doesn’t seem correct…

nishanth · July 30, 2019 at 8:56 am

Seems like few hyperlinks are missing or is it just me?

    Pixel Robots. · July 31, 2019 at 11:17 am

    Not just you. I need to find some time to update. If you know any please let me know and I will update them.

sarkar · February 17, 2020 at 10:03 am

It’s an awesome blog. It seems a one place solution. Are these doc links mentioned over will be more than sufficient to pass the exam? please reply

    Pixel Robots. · February 19, 2020 at 6:01 pm

    I would also look at Microsoft learn and maybe some video courses.

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *