Introduction
The AZ-104 Microsoft Azure Administrator certification exam tests and validates your expertise as an Azure Administrator. Candidates should also have a strong understanding of core Azure services, workloads, security, and governance.
Module Covers
1) Manage Azure identities and governance
2) Implement and manage storage
3) Deploy and manage Azure compute resources
4) Configure and manage virtual networking
5) Monitor and back up Azure resources
Weighting / Score
| Module | Score Covered |
|---|---|
| Manage Azure identities and governance | 15% to 20% |
| Implement and manage storage | 10% to 15% |
| Deploy and manage Azure compute resources | 25% to 30% |
| Configure and manage virtual networking | 30% to 35% |
| Monitor and back up Azure resources | 10% to 15% |
What you need to know?
1. Management of Azure identities and governance
| Module Sub-Topic | Microsoft Docs |
|---|---|
| Managing Azure Active Directory (AD) objects. | Links |
| Management of role-based access control (RBAC). | Links |
| Managing subscriptions and governance. | Links |
2. Implementation and management of storage
| Module Sub-Topic | Microsoft Docs |
|---|---|
| Managing storage accounts. | Links |
| Data management for Azure Storage. | Links |
| Configuring Azure files and Azure blob storage. | Blob Storage File Share |
3. Deploy and manage Azure compute resources
| Module Sub-Topic | Microsoft Docs |
|---|---|
| Configuring virtual machines for higher availability and scalability. | Links Tutorial |
| Automating the deployment and configuration of virtual machines. | Links |
| Creating and configuring virtual machines. | Links |
| Creation and configuration of containers. | |
| Creating and configuring Web Apps. | Links |
4. Configure and manage virtual networking
| Module Sub-Topic | Microsoft Docs |
|---|---|
| Implementing and managing virtual networks. | Links |
| Configuration of name resolution. | Links |
| Secure access to virtual networks. | Links |
| Configuration of load balancing. | Links |
| Monitoring and troubleshooting virtual networks. | Monitor Troubleshoot |
| Integration of on-premises network with Azure virtual networks. | Links |
5. Monitor and back up Azure resources
| Module Sub-Topic | Microsoft Docs |
|---|---|
| Monitoring resources by using Azure Monitor. | Links |
| Implementing backup and recovery. | Links |
The following are Course and Questions Dump that used to prepare myself for the Exam.
AZ-104 Online Course
- Udemy :AZ-103 / AZ-104 Azure Administrator Exam Certification 2020 (US$ 13.99)
This course listed most purchased in Udemy website and i found it very useful for anyone want to get into modules covered in AZ-104 Exam. The Trainer, Scott Duffy really used simple English which I think everyone will understand at the beginning of his course. The explanation in every sections easy to follow and section also come with Resources and Hand-On Practice which give you opportunity to create and manage resource in your Free Trial Azure account.
AZ-104 Exam Dump
- Exam Topics - Free
This is free Exam question dump, but some of questions listed in this website something it gave the wrong answers, hence you should open the "discussion" button to see the correct answer. I suggest you may refer and do the exam question here but make sure you also need to be careful because there are some question's need to do additional research for the valid answer.
2. Whizlabs - Free + Paid
I find Whizlabs question more reliable and convincing, because each question's answer they explained it very well attached with Microsoft's Document website reference. Hence you feel more comfortable and confident when you answered and passed each of the Test sets.
Additional Valuable URLs
- Manage Azure Identities and Governance
Manage Azure AD objects
Create users and groups
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal
Manage user and group properties
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal
Manage device settings
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
Perform bulk user updates
https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/
Manage guest accounts
https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal
Configure Azure AD Join
https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network
https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains
Configure self-service password reset
https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr
Manage role-based access control (RBAC)
Create a custom role
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell
Provide access to Azure resources by assigning roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment
Interpret access assignments
https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments
Manage multiple directories
https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428
Manage subscriptions and governance
Configure Azure policies
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage
Configure resource locks
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources
Apply tags
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
Create and manage resource groups
1. Move resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources
2. Remove RGs
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal
Configure Cost Management
https://www.youtube.com/watch?v=el4yN5cHsJ0
Configure management groups
https://docs.microsoft.com/en-us/azure/governance/management-groups/create
- Implement and Manage Storage
Manage storage accounts
Configure network access to the storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security
Create and configure storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage
Generate shared access signature
https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1
Manage access keys
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage
Configure Azure AD Authentication for a storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app
Manage data in Azure Storage
Export from Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs
Import into Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs
Install and use Azure Storage Explorer
https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer
Copy data by using AZCopy
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10
Configure Azure files and Azure blob storage
Create an Azure file share
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share
Create and configure Azure File Sync service
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal
Configure Azure blob storage
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal
Configure storage tiers for Azure blobs
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal
- Deploy and Manage Azure Compute Resources
Configure high availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
https://www.youtube.com/watch?v=7tXoWN6Ucuw
Deploy and configure scale sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal
Automate deployment and configuration of VMs
Modify Azure Resource Manager (ARM) template
https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource
Configure VHD template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized
Deploy from template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template
Save a deployment as an ARM template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template
Automate configuration management by using custom script extensions
https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/
Create and configure VMs
Configure Azure Disk Encryption
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart
Move VMs from one resource group to another
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm
Manage VM sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes
Add data discs
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps
Configure networking
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview
Redeploy VMs
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows
Create and configure containers
Create and configure Azure Kubernetes Service (AKS)
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal
Create and configure Azure Container Instances (ACI)
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart
Create and configure Web Apps
Create and configure App Service
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet
Create and configure App Service Plans
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage
- Configure and Manage Virtual Networking
Implement and manage virtual networking
Create and configure VNET peering
https://www.youtube.com/watch?v=SKGsf6J4IVI
Configure private and public IP addresses, network routes, network interface, subnets, and virtual network
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet
https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network
Configure name resolution
Configure Azure DNS
https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal
Configure custom DNS settings
https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain
Configure a private or public DNS zone
https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
Secure access to virtual networks
Create security rules
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group
Associate an NSG to a subnet or network interface
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group
Evaluate effective security rules
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
Deploy and configure Azure Firewall
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal
Deploy and configure Azure Bastion Service
https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal
Configure load balancing
Configure Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell
Configure an internal load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal
Configure load balancing rules
https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli
Configure a public load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell
Troubleshoot load balancing
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot
Monitor and troubleshoot virtual networking
Monitor on-premises connectivity
https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/
Use Network resource monitoring
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor
Use Network Watcher
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create
Troubleshoot external networking
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect
Troubleshoot virtual network connectivity
https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks
Integrate an on-premises network with an Azure virtual network
Create and configure Azure VPN Gateway
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell
Create and configure VPNs
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
Configure ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager
Verify on premises connectivity
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager
Configure Azure Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan
- Monitor and back up Azure resources
Monitor resources by using Azure Monitor
Configure and interpret metrics
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts
Configure Log Analytics
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace
Query and analyze logs
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query
Set up alerts and actions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances
Configure Application Insights
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start
Implement backup and recovery
Configure and review backup reports
https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports
Perform backup and restore operations by using Azure Backup Service
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
Create a Recovery Services Vault
https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault
https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/
Create and configure backup policy
https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest
Perform site-to-site recovery by using Azure Site Recovery
https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv
