Reading Time: < 1 minute
Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email

A lot of people have been asking me for a study guide for the new Azure Exams. I decided I would start on the AZ-104 (Microsoft Azure Administrator). At the time of writing this guide, the exam is not even out. The Beta should be coming soon, around the end of March 2020. The old Exam AZ-103 will still be around for 90 days after the AZ-104 becomes available.

Below, you will find the study guide. This time around its all hosted in GitHub so feel free to create a pull request with updated links or resources. You can find the GitHub repo at https://github.com/PixelRobots/Azure-Study-Guides.

Last updated
06/03/2020

Links you may find useful

Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.


Skyline Academy:
https://courses.skylinesacademy.com/p/az-100

Scott Duffy:
https://www.udemy.com/course/70533-azure/


Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.


Administer infrastructure resources in Azure (12 Modules)
https://docs.microsoft.com/en-us/learn/paths/administer-infrastructure-resources-in-azure

Architect storage infrastructure in Azure (7 Modules)
https://docs.microsoft.com/learn/paths/architect-storage-infrastructure

Architect network infrastructure in Azure (12 Modules)
https://docs.microsoft.com/learn/paths/architect-network-infrastructure

Architect infrastructure operations in Azure (5 Modules)
https://docs.microsoft.com/learn/paths/architect-infrastructure-operations

Architect compute infrastructure in Azure (9 Modules)
https://docs.microsoft.com/learn/paths/architect-compute-infrastructure

Architect migration, business continuity, and disaster recovery in Azure (9 Modules)
https://docs.microsoft.com/learn/paths/architect-migration-bcdr

Manage resources in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/manage-resources-in-azure

Manage identity and access in Azure Active Directory (7 Modules)
https://docs.microsoft.com/learn/paths/manage-identity-and-access

Manage security operations in Azure (8 Modules)
https://docs.microsoft.com/learn/paths/manage-security-operations

Implement resource management security in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/implement-resource-mgmt-security

Administer containers in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/administer-containers-in-azure


Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-104


The study guide

Manage Azure Identities and Governance (15-20%)


Manage Azure AD objects

Create users and groups
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal

Manage user and group properties
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal

Manage device settings
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Perform bulk user updates
https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/

Manage guest accounts
https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

Configure Azure AD Join
https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network
https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains

Configure self-service password reset
https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr


Manage role-based access control (RBAC)

Create a custom role
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Provide access to Azure resources by assigning roles: subscriptions, resource groups and resources (VM, disk, etc.)
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment

Interpret access assignments
https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments

Manage multiple directories
https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428


Manage subscriptions and governance

Configure Azure policies
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Configure resource locks
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Apply tags
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Create and manage resource groups

Move resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

Remove RGs
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal

Manage subscriptions
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory

Configure Cost Management
https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview

Configure management groups
https://docs.microsoft.com/en-us/azure/governance/management-groups/create


Implement and Manage Storage (10-15%)

Manage storage accounts

Configure network access to the storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Create and configure storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Generate shared access signature
https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1

Manage access keys
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Implement Azure storage replication
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

configure Azure AD Authentication for a storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad


Manage data in Azure Storage

Export from Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Import into Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs

Install and use Azure Storage Explorer
https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

Copy data by using AZCopy
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10


Configure Azure files and Azure blob storage

Create an Azure file share
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Create and configure Azure File Sync service
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Configure Azure blob storage
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

Configure storage tiers for Azure blobs
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal


Deploy and Manage Azure Compute Resources (25-30%)

Configure VMs for high availability and scalability

Configure high availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

Deploy and configure scale sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal


Automate deployment and configuration of VMs

Modify Azure Resource Manager (ARM) template
https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource

Configure VHD template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized

Deploy from template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Save a deployment as an ARM template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

Automate configuration management by using custom script extensions
https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/


Create and configure VMs

Configure Azure Disk Encryption
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart

Move VMs from one resource group to another
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Manage VM sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

Add data discs
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

Configure networking
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

Redeploy VMs
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows


Create and configure containers

Create and configure Azure Kubernetes Service (AKS)
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Create and configure Azure Container Instances (ACI)
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart


Create and configure Web Apps

Create and configure App Service
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create and configure App Service Plans
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage


Configure and Manage Virtual Networking (30-35%)

Implement and manage virtual networking

Create and configure VNET peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

Configure private and public IP addresses network routes, network interface, subnets, and virtual network
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet
https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network


Configure name resolution

Configure Azure DNS
https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Configure custom DNS settings
https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

Configure a private or public DNS zone
https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns


Secure access to virtual networks

Create security rules
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Associate an NSG to a subnet or network interface
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Evaluate effective security rules
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Deploy and configure Azure Firewall
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Deploy and configure Azure Bastion Service
https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal


Configure load balancing

Configure Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell

Configure an internal load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal

Configure load balancing rules
https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli

Configure a public load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell

Troubleshoot load balancing
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot


Monitor and troubleshoot virtual networking

Monitor on-premises connectivity
https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/

Use Network resource monitoring
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor

Use Network Watcher
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create

Troubleshoot external networking
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

Troubleshoot virtual network connectivity
https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks


Integrate an on-premises network with an Azure virtual network

Create and configure Azure VPN Gateway
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell

Create and configure VPNs
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Configure ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

Verify on premises connectivity
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Configure Azure Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan


Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

Configure and interpret metrics

analyze metrics across subscriptions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts

Configure Log Analytics

implement a Log Analytics workspace
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace

configure diagnostic settings
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace

Query and analyze logs

create a query
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

save a query to the dashboard
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries

interpret graphs
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query

Set up alerts and actions

create and test alerts
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

create action groups
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

view alerts in Azure Monitor
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal

analyze alerts across subscriptions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

Configure Application Insights
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start


Implement backup and recovery

Configure and review backup reports
https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

Perform backup and restore operations by using Azure Backup Service
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Create a Recovery Services Vault

use soft delete to recover Azure VMs
https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault
https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/

Create and configure backup policy
https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest

Perform site-to-site recovery by using Azure Site Recovery
https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv

Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email

Pixel Robots.

I’m Richard Hooper aka Pixel Robots. I started this blog in 2016 for a couple reasons. The first reason was basically just a place for me to store my step by step guides, troubleshooting guides and just plain ideas about being a sysadmin. The second reason was to share what I have learned and found out with other people like me. Hopefully, you can find something useful on the site.

0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *