AZ-104: Microsoft Azure Administrator
Successfully provision and manage services in Microsoft Azure.
Log in to EnrollSummary
- intermediate
- azure
In response to the coronavirus (COVID-19) situation, Microsoft is implementing several temporary changes to our training and certification program. Learn more.Candidates for this exam should have subject matter expertise implementing, managing, and monitoring an organization’s Microsoft Azure environment.Responsibilities for an Azure Administrator include implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks in a cloud environment, plus provision, size, monitor, and adjust resources, when needed.An Azure Administrator often serves as part of a larger team dedicated to implementing your organization’s cloud infrastructure.A candidate for this exam should have at least six months of hands-on experience administering Azure, along with a strong understanding of core Azure services, Azure workloads, security, and governance. In addition, this role should have experience using PowerShell, Azure CLI, Azure portal, and Azure Resource Manager templates.
Learning paths
Modules in this learning path
-
Apply and monitor infrastructure standards with Azure Policy
8 Units46 minLearn about governance and management in Azure services.
-
Build a cloud governance strategy on Azure
12 Units48 minLearn how to access policies, resource locks, and tags, as well as how Azure services such as Azure Policy and Azure Blueprints can help you build a comprehensive cloud governance strategy.
-
Introduction to Azure virtual machines
8 Units1 hr 7 minLearn about the decisions you make before creating a virtual machine, the options to create and manage the VM, and the extensions and services you use to manage your VM.
-
Fundamentals of computer networking
6 Units47 minYou’ll learn the fundamental principles of computer networking to prepare you for the Azure admin and developer learning paths.
-
Fundamentals of network security
6 Units36 minExplore the fundamentals of computer networking security and monitoring.
-
Control Azure services with the CLI
6 Units34 minInstall the Azure CLI locally and use it to manage Azure resources.
-
Automate Azure tasks using scripts with PowerShell
9 Units1 hr 11 minInstall Azure PowerShell locally and use it to manage Azure resources.
-
Secure your identities with Azure Active Directory
6 Units27 minSecure internal resources, external resources, SaaS applications, and more with Azure Active Directory. Learn about the features and capabilities available in Azure AD.
-
Introduction to Docker containers
6 Units32 minDescribes the benefits of using Docker containers as a containerization platform. Discuss the infrastructure provided by the Docker platform.
-
Choose a data storage approach in Azure
6 Units30 minLearn how using Azure Storage, Azure SQL Database, and Azure Cosmos DB – or a combination of them – for your business scenario is the best way to get the most performant solution.
Modules in this learning path
-
Plan and manage your Azure costs
8 Units43 minMigration to the cloud presents new ways to think about your IT expenses. This module teaches you about the factors that influence cost and tools you can use to help estimate and manage your cloud spend.
-
Create Azure users and groups in Azure Active Directory
8 Units41 minCreate users in Azure Active Directory. Understand different types of groups. Create a group and add members. Manage business-to-business guest accounts.
-
Manage users and groups in Azure Active Directory
7 Units50 minManage users and groups in Azure Active Directory
-
Allow users to reset their password with Azure Active Directory self-service password reset
6 Units31 minEvaluate self-service password reset to allow users in your organization to reset their passwords or unlock their accounts. Set up, configure, and test self-service password reset.
-
Manage access to an Azure subscription with Azure role-based access control (RBAC)
5 Units21 minTo grant access to a subscription, identify the appropriate role to assign to an employee. Understand when you might need to temporarily elevate your own access to regain access to a subscription.
-
Secure your Azure resources with role-based access control (RBAC)
8 Units37 minLearn how to use RBAC to manage access to resources in Azure.
-
Create custom roles for Azure resources with role-based access control (RBAC)
6 Units30 minUnderstand the structure of role definitions for access control. Identify the role properties to use that define your custom role permissions. Create a custom Azure role and assign to a user.
-
Control and organize Azure resources with Azure Resource Manager
8 Units46 minUse Azure Resource Manager to organize resources, enforce standards, and protect critical assets from deletion.
-
Predict costs and optimize spending for Azure
9 Units1 hr 14 minCost is one of the most important aspects of the cloud and can have a massive impact on your business. Azure has several tools available to help you get a better understanding of cloud spend and some best practices that you can leverage to help you save money.
-
Analyze costs and create budgets with Azure Cost Management
7 Units40 minLearn how to use cost analysis to understand how your costs accrue each month. Use this understanding to create an Azure budget to monitor and alert on your costs.
-
Move Azure resources to another resource group
8 Units42 minIdentify Azure resources that you can move to a different resource group. Use the Azure portal to move resources.
-
Manage device identity with Azure AD join and Enterprise State Roaming
5 Units25 minEvaluate options to manage device identities in Azure AD. Allow users to join devices in Azure AD. Require devices to be marked as compliant. Enable Enterprise State Roaming.
Modules in this learning path
-
Provide disaster recovery by replicating storage data across regions and failing over to a secondary location
7 Units46 minLearn how to provide disaster recovery by replicating storage data across regions and failing over to a secondary location.
-
Create an Azure Storage account
7 Units30 minCreate an Azure Storage account with the correct options for your business needs.
-
Choose the right disk storage for your virtual machine workload
5 Units24 minAzure provides a variety of disk storage options for virtual machine workloads. Identify the features of capabilities of each type to ensure your application performs optimally.
-
Secure your Azure Storage account
8 Units45 minLearn how Azure Storage provides multilayered security to protect your data. Find out how to use access keys, to secure networks, and to use Advanced Threat Protection to proactively monitor your system.
-
Store and share files in your application with Azure Files
7 Units51 minAzure Files provides a cloud-based file share for storing and sharing files to applications. Whether it’s an application hosted in Azure App Service, an Azure VM, or an on-premises app, Azure Files can store and share file access between one or more applications and systems in a secure and failure-resilient manner.
-
Upload, download, and manage data with Azure Storage Explorer
6 Units37 minAzure Storage Explorer allows you to quickly view all the storage services under your account and navigate, read, and edit data stored in those services through a user-friendly graphical interface.
-
Export large amounts of data from Azure by using Azure Import/Export
5 Units24 minEvaluate Azure Import/Export to copy data from Azure Blob storage to an on-premises server. Create an export job in your Azure Storage account. Get the BitLocker keys to unlock the drives that you receive.
-
Move large amounts of data to the cloud by using Azure Data Box family
5 Units25 minEvaluate Azure Data Box family to import terabytes (TBs) of data from a local computer to Azure Blob storage. Order disks. Copy data to disks and return them. Verify that the data is uploaded to Azure.
-
Extend your on-premises file share capacity using Azure File Sync
12 Units1 hr 16 minEvaluate and deploy Azure File Sync to extend the capacity of your on-premises file share.
Modules in this learning path
-
Create a Linux virtual machine in Azure
9 Units1 hr 26 minIn this module, we discuss how to create a Linux virtual machine using the Azure portal.
-
Create a Windows virtual machine in Azure
7 Units51 minAzure virtual machines (VMs) enable you to create dedicated compute resources in minutes that can be used just like a physical desktop or server machine.
-
Manage virtual machines with the Azure CLI
9 Units51 minLearn how to use the cross-platform Azure CLI to create, start, stop, and perform other management tasks related to virtual machines in Azure.
-
Add and size disks in Azure virtual machines
7 Units36 minUnderstand and create the different types of disk storage available to Azure virtual machines (VMs).
-
Secure your Azure virtual machine disks
8 Units59 minUse Azure Disk Encryption (ADE) to encrypt OS and data disks on existing and new VMs.
-
Keep your virtual machines updated
6 Units35 minDeploy the Azure Update Management solution to update virtual machines in your cloud environment.
-
Build Azure Resource Manager templates
7 Units37 minLearn how Resource Manager templates express your deployments as code, enabling you to deploy faster and more reliably.
-
Deploy Azure virtual machines from VHD templates
6 Units39 minStandardize and automate your virtual machine deployments to minimize manual configuration, variance, and errors.
-
Build a scalable application with virtual machine scale sets
8 Units57 minEnable your application to automatically adjust to changes in load while minimizing costs with virtual machine scale sets.
-
Protect your virtual machine settings with Azure Automation State Configuration
5 Units54 minCreate a desired state configuration script that checks that IIS is installed. Onboard virtual machines (VMs) for management by Azure Automation. Automatically install IIS on the VMs where that feature is missing.
-
Deploy and run a containerized web app with Azure App Service
8 Units46 minCreate a Docker image and store it in a repository in Azure Container Registry. Use Azure App Service to deploy a web application based on the Docker image. Configure continuous deployment for the web app by using a webhook that monitors the Docker image for changes.
-
Scale an App Service web app to efficiently meet demand with App Service scale up and scale out
6 Units46 minRespond to periods of increased activity by incrementally increasing the resources available and then, to reduce costs, decreasing these resources when activity drops.
-
Run Docker containers with Azure Container Instances
7 Units48 minLearn how to run containerized apps using Docker containers with Azure Container Instances (ACI).
-
Introduction to Azure Kubernetes Service
6 Units25 minDetermine the types of business problems that can be solved using Azure Kubernetes Service. Describe the benefits of container orchestration with features like deployment management, automatic updates, and self-healing.
Modules in this learning path
-
Connect to virtual machines through the Azure portal by using Azure Bastion
8 Units40 minLearn how to deploy Azure Bastion to securely connect to Azure Virtual Machines directly within the Azure portal.
-
Configure the network for your virtual machines
8 Units1 hr 34 minLearn how to configure networking in a secure way for your Azure virtual machines.
-
Design an IP addressing schema for your Azure deployment
6 Units37 minA good Azure IP addressing schema provides flexibility, room for growth, and integration with on-premises networks. The schema ensures that communication works for deployed resources, minimizes public exposure of systems, and gives the organization flexibility in its network. If not properly designed, systems might not be able to communicate, and additional work will be required to remediate.
-
Host your domain on Azure DNS
7 Units43 minCreate a DNS zone for your domain name. Create DNS records to map the URL to an IP address. Test that the domain name resolves to your web server.
-
Distribute your services across Azure virtual networks and integrate them by using virtual network peering
6 Units42 minUse virtual network peering to enable communication across virtual networks in a way that’s secure and minimally complex.
-
Manage and control traffic flow in your Azure deployment with routes
7 Units50 minLearn how to control Azure virtual network traffic by implementing custom routes.
-
Connect your on-premises network to Azure with VPN Gateway
5 Units39 minVPN Gateway in Azure provides secure connectivity between your on-premises networks and clients.
-
Connect your on-premises network to the Microsoft global network by using ExpressRoute
5 Units40 minConnect your on-premises systems and users to Azure and Office 365 by using ExpressRoute for private, dedicated, and guaranteed throughput connectivity.
-
Secure and isolate access to Azure resources by using network security groups and service endpoints
6 Units43 minNetwork security groups and service endpoints help you secure your virtual machines and Azure services from unauthorized network access.
-
Load balance your web service traffic with Application Gateway
7 Units1 hr 32 minImprove application resilience by distributing load across multiple servers and use path-based routing to direct web traffic.
-
Improve application scalability and resiliency by using Azure Load Balancer
6 Units47 minDiscuss the different load balancers in Azure and how to choose the right Azure load balancer solution to meet your requirements.
-
Troubleshoot inbound network connectivity for Azure Load Balancer
6 Units1 hr 38 minReview multidimensional metrics for the load balancer in Azure Monitor Metrics, and check health probe status for the load balancer.
-
Monitor and troubleshoot your end-to-end Azure network infrastructure by using network monitoring tools
6 Units37 minUse Network Watcher tools, diagnostics, and logs to help find and fix networking issues in your Azure infrastructure.
Modules in this learning path
-
Design a holistic monitoring strategy on Azure
8 Units57 minUse monitoring services on Azure to bring operational excellence to your applications and infrastructure.
-
Monitor performance of virtual machines by using Azure Monitor for VMs
6 Units48 minLearn how to use Azure Monitor for VMs to monitor your organization’s Azure virtual machines.
-
Monitor the health of your Azure virtual machine by collecting and analyzing diagnostic data
9 Units43 minEvaluate monitoring options for an Azure virtual machine (VM). Enable diagnostics to get data about your VM. View VM metrics and create an alert to monitor performance.
-
Analyze your Azure infrastructure by using Azure Monitor logs
5 Units34 minUse Azure Monitor logs to extract valuable information about your infrastructure from log data.
-
Improve incident response with alerting on Azure
9 Units53 minRespond to incidents and activities in your infrastructure through alerting capabilities in Azure Monitor.
-
Capture and view page load times in your Azure web app with Application Insights
6 Units45 minApplication Insights is an Azure service that you can use to monitor the behavior and performance of a web application. If you run a web app in Azure, you can take advantage of several benefits provided by Application Insights simply by enabling it, without changing any of your code. When you complete this module, you’ll know how to enable Application Insights and client-side monitoring and view metrics in the portal.
-
Protect your virtual machines by using Azure Backup
7 Units35 minUse Azure Backup to help protect the data for on-premises servers, virtual machines, virtualized workloads, SQL Server, Azure Files, and more.
-
Protect your Azure infrastructure with Azure Site Recovery
9 Units59 minProvide disaster recovery for your Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery.
-
Microsoft Azure Well-Architected Framework – Reliability
5 Units59 minLearn how to recover from infrastructure and service failure, loss of data, and disasters by incorporating reliability into your architecture.
Additional courses
The learning paths above prepare you for the knowledge and skills needed to pass the exam and become certified. Enrolling in this track also enrolls you in the Microsoft Official Classroom course below, which was designed for the previous version of this exam. You can use this course as an extra reference to prepare for the exam above. A fair part of the course is still a valid for this exam.
Summary
- Length
- 4 days
- Level
- Intermediate
- Language
- English
About this course
Prerequisites
- Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Understanding of resilience and disaster recovery, including backup and restore operations.