Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email
Reading Time: < 1 minute

A lot of people have been asking me for a study guide for the new Azure Exams. I decided I would start on the AZ-104 (Microsoft Azure Administrator). At the time of writing this guide, the exam is not even out. The Beta should be coming soon, around the end of March 2020. The old Exam AZ-103 will still be around for 90 days after the AZ-104 becomes available.

Below, you will find the study guide. This time around its all hosted in GitHub so feel free to create a pull request with updated links or resources. You can find the GitHub repo at https://github.com/PixelRobots/Azure-Study-Guides.

Last updated
06/03/2020

Links you may find useful

Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.


Skyline Academy:
https://courses.skylinesacademy.com/p/az-100

Scott Duffy:
https://www.udemy.com/course/70533-azure/


Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.


Administer infrastructure resources in Azure (12 Modules)
https://docs.microsoft.com/en-us/learn/paths/administer-infrastructure-resources-in-azure?WT.mc_id=AZ-MVP-5003450

Architect storage infrastructure in Azure (7 Modules)
https://docs.microsoft.com/learn/paths/architect-storage-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect network infrastructure in Azure (12 Modules)
https://docs.microsoft.com/learn/paths/architect-network-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect infrastructure operations in Azure (5 Modules)
https://docs.microsoft.com/learn/paths/architect-infrastructure-operations?WT.mc_id=AZ-MVP-5003450

Architect compute infrastructure in Azure (9 Modules)
https://docs.microsoft.com/learn/paths/architect-compute-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect migration, business continuity, and disaster recovery in Azure (9 Modules)
https://docs.microsoft.com/learn/paths/architect-migration-bcdr?WT.mc_id=AZ-MVP-5003450

Manage resources in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/manage-resources-in-azure?WT.mc_id=AZ-MVP-5003450

Manage identity and access in Azure Active Directory (7 Modules)
https://docs.microsoft.com/learn/paths/manage-identity-and-access?WT.mc_id=AZ-MVP-5003450

Manage security operations in Azure (8 Modules)
https://docs.microsoft.com/learn/paths/manage-security-operations?WT.mc_id=AZ-MVP-5003450

Implement resource management security in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/implement-resource-mgmt-security?WT.mc_id=AZ-MVP-5003450

Administer containers in Azure (6 Modules)
https://docs.microsoft.com/learn/paths/administer-containers-in-azure?WT.mc_id=AZ-MVP-5003450


Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-104?WT.mc_id=AZ-MVP-5003450


The study guide

Manage Azure Identities and Governance (15-20%)


Manage Azure AD objects

Create users and groups
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal?WT.mc_id=AZ-MVP-5003450

Manage user and group properties
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal?WT.mc_id=AZ-MVP-5003450

Manage device settings
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal?WT.mc_id=AZ-MVP-5003450

Perform bulk user updates
https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/?WT.mc_id=AZ-MVP-5003450

Manage guest accounts
https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal?WT.mc_id=AZ-MVP-5003450

Configure Azure AD Join
https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains?WT.mc_id=AZ-MVP-5003450

Configure self-service password reset
https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr?WT.mc_id=AZ-MVP-5003450


Manage role-based access control (RBAC)

Create a custom role
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell?WT.mc_id=AZ-MVP-5003450

Provide access to Azure resources by assigning roles: subscriptions, resource groups and resources (VM, disk, etc.)
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment?WT.mc_id=AZ-MVP-5003450

Interpret access assignments
https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments?WT.mc_id=AZ-MVP-5003450

Manage multiple directories
https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428?WT.mc_id=AZ-MVP-5003450


Manage subscriptions and governance

Configure Azure policies
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage?WT.mc_id=AZ-MVP-5003450

Configure resource locks
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources?WT.mc_id=AZ-MVP-5003450

Apply tags
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags?WT.mc_id=AZ-MVP-5003450

Create and manage resource groups

Move resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources?WT.mc_id=AZ-MVP-5003450

Remove RGs
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal?WT.mc_id=AZ-MVP-5003450

Manage subscriptions
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory?WT.mc_id=AZ-MVP-5003450

Configure Cost Management
https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview?WT.mc_id=AZ-MVP-5003450

Configure management groups
https://docs.microsoft.com/en-us/azure/governance/management-groups/create?WT.mc_id=AZ-MVP-5003450


Implement and Manage Storage (10-15%)

Manage storage accounts

Configure network access to the storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?WT.mc_id=AZ-MVP-5003450

Create and configure storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450

Generate shared access signature
https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1?WT.mc_id=AZ-MVP-5003450

Manage access keys
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450

Implement Azure storage replication
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450

configure Azure AD Authentication for a storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?WT.mc_id=AZ-MVP-5003450


Manage data in Azure Storage

Export from Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs?WT.mc_id=AZ-MVP-5003450

Import into Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs?WT.mc_id=AZ-MVP-5003450

Install and use Azure Storage Explorer
https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer?WT.mc_id=AZ-MVP-5003450

Copy data by using AZCopy
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?WT.mc_id=AZ-MVP-5003450


Configure Azure files and Azure blob storage

Create an Azure file share
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?WT.mc_id=AZ-MVP-5003450

Create and configure Azure File Sync service
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal?WT.mc_id=AZ-MVP-5003450

Configure Azure blob storage
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal?WT.mc_id=AZ-MVP-5003450

Configure storage tiers for Azure blobs
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal?WT.mc_id=AZ-MVP-5003450


Deploy and Manage Azure Compute Resources (25-30%)

Configure VMs for high availability and scalability

Configure high availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets?WT.mc_id=AZ-MVP-5003450

Deploy and configure scale sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal?WT.mc_id=AZ-MVP-5003450


Automate deployment and configuration of VMs

Modify Azure Resource Manager (ARM) template
https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource?WT.mc_id=AZ-MVP-5003450

Configure VHD template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized?WT.mc_id=AZ-MVP-5003450

Deploy from template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template?WT.mc_id=AZ-MVP-5003450

Save a deployment as an ARM template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template?WT.mc_id=AZ-MVP-5003450

Automate configuration management by using custom script extensions
https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/?WT.mc_id=AZ-MVP-5003450


Create and configure VMs

Configure Azure Disk Encryption
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart?WT.mc_id=AZ-MVP-5003450

Move VMs from one resource group to another
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm?WT.mc_id=AZ-MVP-5003450

Manage VM sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes?WT.mc_id=AZ-MVP-5003450

Add data discs
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps?WT.mc_id=AZ-MVP-5003450

Configure networking
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview?WT.mc_id=AZ-MVP-5003450

Redeploy VMs
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows?WT.mc_id=AZ-MVP-5003450


Create and configure containers

Create and configure Azure Kubernetes Service (AKS)
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal?WT.mc_id=AZ-MVP-5003450

Create and configure Azure Container Instances (ACI)
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart?WT.mc_id=AZ-MVP-5003450


Create and configure Web Apps

Create and configure App Service
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet?WT.mc_id=AZ-MVP-5003450

Create and configure App Service Plans
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage?WT.mc_id=AZ-MVP-5003450


Configure and Manage Virtual Networking (30-35%)

Implement and manage virtual networking

Create and configure VNET peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=AZ-MVP-5003450

Configure private and public IP addresses network routes, network interface, subnets, and virtual network
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network?WT.mc_id=AZ-MVP-5003450


Configure name resolution

Configure Azure DNS
https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal?WT.mc_id=AZ-MVP-5003450

Configure custom DNS settings
https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain?WT.mc_id=AZ-MVP-5003450

Configure a private or public DNS zone
https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns?WT.mc_id=AZ-MVP-5003450


Secure access to virtual networks

Create security rules
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group?WT.mc_id=AZ-MVP-5003450

Associate an NSG to a subnet or network interface
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group?WT.mc_id=AZ-MVP-5003450

Evaluate effective security rules
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface?WT.mc_id=AZ-MVP-5003450

Deploy and configure Azure Firewall
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal?WT.mc_id=AZ-MVP-5003450

Deploy and configure Azure Bastion Service
https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal?WT.mc_id=AZ-MVP-5003450


Configure load balancing

Configure Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell?WT.mc_id=AZ-MVP-5003450

Configure an internal load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal?WT.mc_id=AZ-MVP-5003450

Configure load balancing rules
https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli?WT.mc_id=AZ-MVP-5003450

Configure a public load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell?WT.mc_id=AZ-MVP-5003450

Troubleshoot load balancing
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot?WT.mc_id=AZ-MVP-5003450


Monitor and troubleshoot virtual networking

Monitor on-premises connectivity
https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/?WT.mc_id=AZ-MVP-5003450

Use Network resource monitoring
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor?WT.mc_id=AZ-MVP-5003450

Use Network Watcher
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create?WT.mc_id=AZ-MVP-5003450

Troubleshoot external networking
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect?WT.mc_id=AZ-MVP-5003450

Troubleshoot virtual network connectivity
https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks?WT.mc_id=AZ-MVP-5003450


Integrate an on-premises network with an Azure virtual network

Create and configure Azure VPN Gateway
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell?WT.mc_id=AZ-MVP-5003450

Create and configure VPNs
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal?WT.mc_id=AZ-MVP-5003450

Configure ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager?WT.mc_id=AZ-MVP-5003450

Verify on premises connectivity
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager?WT.mc_id=AZ-MVP-5003450

Configure Azure Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan?WT.mc_id=AZ-MVP-5003450


Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

Configure and interpret metrics

analyze metrics across subscriptions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts?WT.mc_id=AZ-MVP-5003450

Configure Log Analytics

implement a Log Analytics workspace
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace?WT.mc_id=AZ-MVP-5003450

configure diagnostic settings
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace?WT.mc_id=AZ-MVP-5003450

Query and analyze logs

create a query
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries?WT.mc_id=AZ-MVP-5003450

save a query to the dashboard
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries?WT.mc_id=AZ-MVP-5003450

interpret graphs
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query?WT.mc_id=AZ-MVP-5003450

Set up alerts and actions

create and test alerts
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric?WT.mc_id=AZ-MVP-5003450

create action groups
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups?WT.mc_id=AZ-MVP-5003450

view alerts in Azure Monitor
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal?WT.mc_id=AZ-MVP-5003450

analyze alerts across subscriptions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances?WT.mc_id=AZ-MVP-5003450

Configure Application Insights
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start?WT.mc_id=AZ-MVP-5003450


Implement backup and recovery

Configure and review backup reports
https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports?WT.mc_id=AZ-MVP-5003450

Perform backup and restore operations by using Azure Backup Service
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms?WT.mc_id=AZ-MVP-5003450

Create a Recovery Services Vault

use soft delete to recover Azure VMs
https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault?WT.mc_id=AZ-MVP-5003450
https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/?WT.mc_id=AZ-MVP-5003450

Create and configure backup policy
https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest?WT.mc_id=AZ-MVP-5003450

Perform site-to-site recovery by using Azure Site Recovery
https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv?WT.mc_id=AZ-MVP-5003450

Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email

Pixel Robots.

I’m Richard Hooper aka Pixel Robots. I started this blog in 2016 for a couple reasons. The first reason was basically just a place for me to store my step by step guides, troubleshooting guides and just plain ideas about being a sysadmin. The second reason was to share what I have learned and found out with other people like me. Hopefully, you can find something useful on the site.

1 Comment

Study guide for the AZ-304 Microsoft Azure Architect Design exam - Pixel Robots. · September 30, 2020 at 11:45 am

[…] a study guide for the new Azure Exams. I started with the AZ-104 (Microsoft Azure Administrator). https://pixelrobots.co.uk/2020/02/study-resources-for-the-az-104-microsoft-certified-azure-administr&#8230; and then the AZ-303 (Microsoft Azure Architect Technologies) Study resources for the AZ-303 […]

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *