AZ-104: Microsoft Azure Administrator

Successfully provision and manage services in Microsoft Azure.

Log in to Enroll

Summary

  • intermediate
  • azure
  • In response to the coronavirus (COVID-19) situation, Microsoft is implementing several temporary changes to our training and certification program. Learn more.Candidates for this exam should have subject matter expertise implementing, managing, and monitoring an organization’s Microsoft Azure environment.Responsibilities for an Azure Administrator include implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks in a cloud environment, plus provision, size, monitor, and adjust resources, when needed.An Azure Administrator often serves as part of a larger team dedicated to implementing your organization’s cloud infrastructure.A candidate for this exam should have at least six months of hands-on experience administering Azure, along with a strong understanding of core Azure services, Azure workloads, security, and governance. In addition, this role should have experience using PowerShell, Azure CLI, Azure portal, and Azure Resource Manager templates.

Learning paths

6 hr 30 min
Learn the basic concepts you'll need to know as an Azure administrator and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Apply and monitor infrastructure standards with Azure Policy
    8 Units
    46 min

    Learn about governance and management in Azure services.

  • Build a cloud governance strategy on Azure
    12 Units
    48 min

    Learn how to access policies, resource locks, and tags, as well as how Azure services such as Azure Policy and Azure Blueprints can help you build a comprehensive cloud governance strategy.

  • Introduction to Azure virtual machines
    8 Units
    1 hr 7 min

    Learn about the decisions you make before creating a virtual machine, the options to create and manage the VM, and the extensions and services you use to manage your VM.

  • Fundamentals of computer networking
    6 Units
    47 min

    You’ll learn the fundamental principles of computer networking to prepare you for the Azure admin and developer learning paths.

  • Fundamentals of network security
    6 Units
    36 min

    Explore the fundamentals of computer networking security and monitoring.

  • Control Azure services with the CLI
    6 Units
    34 min

    Install the Azure CLI locally and use it to manage Azure resources.

  • Automate Azure tasks using scripts with PowerShell
    9 Units
    1 hr 11 min

    Install Azure PowerShell locally and use it to manage Azure resources.

  • Secure your identities with Azure Active Directory
    6 Units
    27 min

    Secure internal resources, external resources, SaaS applications, and more with Azure Active Directory. Learn about the features and capabilities available in Azure AD.

  • Introduction to Docker containers
    6 Units
    32 min

    Describes the benefits of using Docker containers as a containerization platform. Discuss the infrastructure provided by the Docker platform.

  • Choose a data storage approach in Azure
    6 Units
    30 min

    Learn how using Azure Storage, Azure SQL Database, and Azure Cosmos DB – or a combination of them – for your business scenario is the best way to get the most performant solution.

7 hr 17 min
Learn how to manage identities and governance in Azure and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Plan and manage your Azure costs
    8 Units
    43 min

    Migration to the cloud presents new ways to think about your IT expenses. This module teaches you about the factors that influence cost and tools you can use to help estimate and manage your cloud spend.

  • Create Azure users and groups in Azure Active Directory
    8 Units
    41 min

    Create users in Azure Active Directory. Understand different types of groups. Create a group and add members. Manage business-to-business guest accounts.

  • Manage users and groups in Azure Active Directory
    7 Units
    50 min

    Manage users and groups in Azure Active Directory

  • Allow users to reset their password with Azure Active Directory self-service password reset
    6 Units
    31 min

    Evaluate self-service password reset to allow users in your organization to reset their passwords or unlock their accounts. Set up, configure, and test self-service password reset.

  • Manage access to an Azure subscription with Azure role-based access control (RBAC)
    5 Units
    21 min

    To grant access to a subscription, identify the appropriate role to assign to an employee. Understand when you might need to temporarily elevate your own access to regain access to a subscription.

  • Secure your Azure resources with role-based access control (RBAC)
    8 Units
    37 min

    Learn how to use RBAC to manage access to resources in Azure.

  • Create custom roles for Azure resources with role-based access control (RBAC)
    6 Units
    30 min

    Understand the structure of role definitions for access control. Identify the role properties to use that define your custom role permissions. Create a custom Azure role and assign to a user.

  • Control and organize Azure resources with Azure Resource Manager
    8 Units
    46 min

    Use Azure Resource Manager to organize resources, enforce standards, and protect critical assets from deletion.

  • Predict costs and optimize spending for Azure
    9 Units
    1 hr 14 min

    Cost is one of the most important aspects of the cloud and can have a massive impact on your business. Azure has several tools available to help you get a better understanding of cloud spend and some best practices that you can leverage to help you save money.

  • Analyze costs and create budgets with Azure Cost Management
    7 Units
    40 min

    Learn how to use cost analysis to understand how your costs accrue each month. Use this understanding to create an Azure budget to monitor and alert on your costs.

  • Move Azure resources to another resource group
    8 Units
    42 min

    Identify Azure resources that you can move to a different resource group. Use the Azure portal to move resources.

  • Manage device identity with Azure AD join and Enterprise State Roaming
    5 Units
    25 min

    Evaluate options to manage device identities in Azure AD. Allow users to join devices in Azure AD. Require devices to be marked as compliant. Enable Enterprise State Roaming.

5 hr 12 min
Learn how to manage storage in Azure and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Provide disaster recovery by replicating storage data across regions and failing over to a secondary location
    7 Units
    46 min

    Learn how to provide disaster recovery by replicating storage data across regions and failing over to a secondary location.

  • Create an Azure Storage account
    7 Units
    30 min

    Create an Azure Storage account with the correct options for your business needs.

  • Choose the right disk storage for your virtual machine workload
    5 Units
    24 min

    Azure provides a variety of disk storage options for virtual machine workloads. Identify the features of capabilities of each type to ensure your application performs optimally.

  • Secure your Azure Storage account
    8 Units
    45 min

    Learn how Azure Storage provides multilayered security to protect your data. Find out how to use access keys, to secure networks, and to use Advanced Threat Protection to proactively monitor your system.

  • Store and share files in your application with Azure Files
    7 Units
    51 min

    Azure Files provides a cloud-based file share for storing and sharing files to applications. Whether it’s an application hosted in Azure App Service, an Azure VM, or an on-premises app, Azure Files can store and share file access between one or more applications and systems in a secure and failure-resilient manner.

  • Upload, download, and manage data with Azure Storage Explorer
    6 Units
    37 min

    Azure Storage Explorer allows you to quickly view all the storage services under your account and navigate, read, and edit data stored in those services through a user-friendly graphical interface.

  • Export large amounts of data from Azure by using Azure Import/Export
    5 Units
    24 min

    Evaluate Azure Import/Export to copy data from Azure Blob storage to an on-premises server. Create an export job in your Azure Storage account. Get the BitLocker keys to unlock the drives that you receive.

  • Move large amounts of data to the cloud by using Azure Data Box family
    5 Units
    25 min

    Evaluate Azure Data Box family to import terabytes (TBs) of data from a local computer to Azure Blob storage. Order disks. Copy data to disks and return them. Verify that the data is uploaded to Azure.

  • Extend your on-premises file share capacity using Azure File Sync
    12 Units
    1 hr 16 min

    Evaluate and deploy Azure File Sync to extend the capacity of your on-premises file share.

11 hr 15 min
Learn how to deploy and configure Azure compute resources and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Create a Linux virtual machine in Azure
    9 Units
    1 hr 26 min

    In this module, we discuss how to create a Linux virtual machine using the Azure portal.

  • Create a Windows virtual machine in Azure
    7 Units
    51 min

    Azure virtual machines (VMs) enable you to create dedicated compute resources in minutes that can be used just like a physical desktop or server machine.

  • Manage virtual machines with the Azure CLI
    9 Units
    51 min

    Learn how to use the cross-platform Azure CLI to create, start, stop, and perform other management tasks related to virtual machines in Azure.

  • Add and size disks in Azure virtual machines
    7 Units
    36 min

    Understand and create the different types of disk storage available to Azure virtual machines (VMs).

  • Secure your Azure virtual machine disks
    8 Units
    59 min

    Use Azure Disk Encryption (ADE) to encrypt OS and data disks on existing and new VMs.

  • Keep your virtual machines updated
    6 Units
    35 min

    Deploy the Azure Update Management solution to update virtual machines in your cloud environment.

  • Build Azure Resource Manager templates
    7 Units
    37 min

    Learn how Resource Manager templates express your deployments as code, enabling you to deploy faster and more reliably.

  • Deploy Azure virtual machines from VHD templates
    6 Units
    39 min

    Standardize and automate your virtual machine deployments to minimize manual configuration, variance, and errors.

  • Build a scalable application with virtual machine scale sets
    8 Units
    57 min

    Enable your application to automatically adjust to changes in load while minimizing costs with virtual machine scale sets.

  • Protect your virtual machine settings with Azure Automation State Configuration
    5 Units
    54 min

    Create a desired state configuration script that checks that IIS is installed. Onboard virtual machines (VMs) for management by Azure Automation. Automatically install IIS on the VMs where that feature is missing.

  • Deploy and run a containerized web app with Azure App Service
    8 Units
    46 min

    Create a Docker image and store it in a repository in Azure Container Registry. Use Azure App Service to deploy a web application based on the Docker image. Configure continuous deployment for the web app by using a webhook that monitors the Docker image for changes.

  • Scale an App Service web app to efficiently meet demand with App Service scale up and scale out
    6 Units
    46 min

    Respond to periods of increased activity by incrementally increasing the resources available and then, to reduce costs, decreasing these resources when activity drops.

  • Run Docker containers with Azure Container Instances
    7 Units
    48 min

    Learn how to run containerized apps using Docker containers with Azure Container Instances (ACI).

  • Introduction to Azure Kubernetes Service
    6 Units
    25 min

    Determine the types of business problems that can be solved using Azure Kubernetes Service. Describe the benefits of container orchestration with features like deployment management, automatic updates, and self-healing.

11 hr 2 min
Learn how to configure key Azure network capabilities and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Connect to virtual machines through the Azure portal by using Azure Bastion
    8 Units
    40 min

    Learn how to deploy Azure Bastion to securely connect to Azure Virtual Machines directly within the Azure portal.

  • Configure the network for your virtual machines
    8 Units
    1 hr 34 min

    Learn how to configure networking in a secure way for your Azure virtual machines.

  • Design an IP addressing schema for your Azure deployment
    6 Units
    37 min

    A good Azure IP addressing schema provides flexibility, room for growth, and integration with on-premises networks. The schema ensures that communication works for deployed resources, minimizes public exposure of systems, and gives the organization flexibility in its network. If not properly designed, systems might not be able to communicate, and additional work will be required to remediate.

  • Host your domain on Azure DNS
    7 Units
    43 min

    Create a DNS zone for your domain name. Create DNS records to map the URL to an IP address. Test that the domain name resolves to your web server.

  • Distribute your services across Azure virtual networks and integrate them by using virtual network peering
    6 Units
    42 min

    Use virtual network peering to enable communication across virtual networks in a way that’s secure and minimally complex.

  • Manage and control traffic flow in your Azure deployment with routes
    7 Units
    50 min

    Learn how to control Azure virtual network traffic by implementing custom routes.

  • Connect your on-premises network to Azure with VPN Gateway
    5 Units
    39 min

    VPN Gateway in Azure provides secure connectivity between your on-premises networks and clients.

  • Connect your on-premises network to the Microsoft global network by using ExpressRoute
    5 Units
    40 min

    Connect your on-premises systems and users to Azure and Office 365 by using ExpressRoute for private, dedicated, and guaranteed throughput connectivity.

  • Secure and isolate access to Azure resources by using network security groups and service endpoints
    6 Units
    43 min

    Network security groups and service endpoints help you secure your virtual machines and Azure services from unauthorized network access.

  • Load balance your web service traffic with Application Gateway
    7 Units
    1 hr 32 min

    Improve application resilience by distributing load across multiple servers and use path-based routing to direct web traffic.

  • Improve application scalability and resiliency by using Azure Load Balancer
    6 Units
    47 min

    Discuss the different load balancers in Azure and how to choose the right Azure load balancer solution to meet your requirements.

  • Troubleshoot inbound network connectivity for Azure Load Balancer
    6 Units
    1 hr 38 min

    Review multidimensional metrics for the load balancer in Azure Monitor Metrics, and check health probe status for the load balancer.

  • Monitor and troubleshoot your end-to-end Azure network infrastructure by using network monitoring tools
    6 Units
    37 min

    Use Network Watcher tools, diagnostics, and logs to help find and fix networking issues in your Azure infrastructure.

6 hr 27 min
Learn how to monitor and back up Azure resources and prepare for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

  • Design a holistic monitoring strategy on Azure
    8 Units
    57 min

    Use monitoring services on Azure to bring operational excellence to your applications and infrastructure.

  • Monitor performance of virtual machines by using Azure Monitor for VMs
    6 Units
    48 min

    Learn how to use Azure Monitor for VMs to monitor your organization’s Azure virtual machines.

  • Monitor the health of your Azure virtual machine by collecting and analyzing diagnostic data
    9 Units
    43 min

    Evaluate monitoring options for an Azure virtual machine (VM). Enable diagnostics to get data about your VM. View VM metrics and create an alert to monitor performance.

  • Analyze your Azure infrastructure by using Azure Monitor logs
    5 Units
    34 min

    Use Azure Monitor logs to extract valuable information about your infrastructure from log data.

  • Improve incident response with alerting on Azure
    9 Units
    53 min

    Respond to incidents and activities in your infrastructure through alerting capabilities in Azure Monitor.

  • Capture and view page load times in your Azure web app with Application Insights
    6 Units
    45 min

    Application Insights is an Azure service that you can use to monitor the behavior and performance of a web application. If you run a web app in Azure, you can take advantage of several benefits provided by Application Insights simply by enabling it, without changing any of your code. When you complete this module, you’ll know how to enable Application Insights and client-side monitoring and view metrics in the portal.

  • Protect your virtual machines by using Azure Backup
    7 Units
    35 min

    Use Azure Backup to help protect the data for on-premises servers, virtual machines, virtualized workloads, SQL Server, Azure Files, and more.

  • Protect your Azure infrastructure with Azure Site Recovery
    9 Units
    59 min

    Provide disaster recovery for your Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery.

  • Microsoft Azure Well-Architected Framework – Reliability
    5 Units
    59 min

    Learn how to recover from infrastructure and service failure, loss of data, and disasters by incorporating reliability into your architecture.

Additional courses

The learning paths above prepare you for the knowledge and skills needed to pass the exam and become certified. Enrolling in this track also enrolls you in the Microsoft Official Classroom course below, which was designed for the previous version of this exam. You can use this course as an extra reference to prepare for the exam above. A fair part of the course is still a valid for this exam.

Microsoft Azure Administrator

Summary

Length
4 days
Level
Intermediate
Language
English

About this course

This course teaches IT Professionals how to manage their Azure subscriptions, create and scale virtual machines, implement storage solutions, configure virtual networking, back up and share data, connect Azure and on-premises sites, manage network traffic, implement Azure Active Directory, secure identities, and monitor your solution.

Prerequisites

  • Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
  • Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
  • Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
  • Understanding of resilience and disaster recovery, including backup and restore operations.