AZ-104 Instructor-led training (Microsoft Official Courses)

Articles / Blog Posts Per Objective

Manage Azure identities and governance (15-20%)

Manage Azure AD objects

• create users and groups

1. Add or delete users using Azure Active Directory
2. Create a basic group and add members using Azure Active Directory
3. Creating a new user in Azure AD
4. New-AzureADUser
5. New-AzureADGroup
6. New-AzureADMSGroup

• manage user and group properties

1. Edit your group information using Azure Active Directory
2. Add or update a user’s profile information using Azure Active Directory
3. Bulk create users in Azure Active Directory
4. Set-AzureADUser
5. Set-AzureADGroup
6. Set-AzureADMSGroup

• manage device settings

1. How to manage devices using the Azure portal

• perform bulk user updates

1. Importing data into my directory
2. Bulk add group members in Azure Active Directory

• manage guest accounts

1. What is guest user access in Azure Active Directory B2B?
2. Add Azure Active Directory B2B collaboration users in the Azure portal
3. Manage guest access with Azure AD access reviews
4. Quickstart: Add guest users to your directory in the Azure portal

• configure Azure AD Join

1. How to: Plan your Azure AD join implementation
2. How To: Plan your hybrid Azure Active Directory join implementation
3. Tutorial: Configure hybrid Azure Active Directory join for managed domains

• configure self-service password reset

1. Plan an Azure Active Directory self-service password reset deployment
2. How it works: Azure AD self-service password reset
3. Customize the user experience for Azure Active Directory self-service password reset

Manage role-based access control (RBAC)

• create a custom role

1. Azure custom roles
2. Tutorial: Create a custom role for Azure resources using Azure PowerShell
3. Tutorial: Create a custom role for Azure resources using Azure CLI
4. Create custom roles for Azure resources using Azure PowerShell

• provide access to Azure resources by assigning roles
  • subscriptions

1. Add or remove Azure role assignments using the Azure portal
2. Add or change Azure subscription administrators
3. Classic subscription administrator roles, Azure roles, and Azure AD roles
4. Elevate access to manage all Azure subscriptions and management groups

• resource groups

1. Tutorial: Grant a group access to Azure resources using Azure PowerShell

• resources (VM, disk, etc.)

1. What is role-based access control (RBAC) for Azure resources?
2. Built-in roles for Azure resources

• interpret access assignments
  • List Azure role assignments using the Azure portal
  • Understand Azure deny assignments
• manage multiple directories
  • Understand how multiple Azure Active Directory organizations interact

Manage subscriptions and governance

• configure Azure policies

1. What is Azure Policy?
2. Azure Subscription Governance – Controlling resources with Tags, Policies, and Locks
3. Tutorial: Create and manage policies to enforce compliance
4. Quickstart: Create a policy assignment to identify non-compliant resources
5. Quickstart: Create a policy assignment to identify non-compliant resources using Azure PowerShell
6. Quickstart: Create a policy assignment to identify non-compliant resources with Azure CLI

• configure resource locks

1. Lock resources to prevent unexpected changes

• apply tags

1. Use tags to organize your Azure resources
2. Tutorial: Manage tag governance with Azure Policy

• create and manage resource groups
  • Manage Azure Resource Manager resource groups by using the Azure portal
  • Manage Azure resources by using Azure PowerShell
  • Manage Azure resources by using Azure CLI
  • move resources

1. Move resources to new resource group or subscription
2. Move a Windows VM to another Azure subscription or resource group

• remove RGs

1. Azure Resource Manager resource group deletion

• manage subscriptions

1. Add or change Azure subscription administrators
2. Create an additional Azure subscription
3. Export and view your top-level Subscription information

• configure Cost Management

1. Prevent unexpected charges with Azure billing and cost management
2. What is Azure Cost Management and Billing?
3. How to optimize your cloud investment with Azure Cost Management
4. Quickstart: Explore and analyze costs with cost analysis

• configure management groups

1. Organize your resources with Azure management groups
2. Create management groups for resource organization and management

Implement and manage storage (10-15%)

Manage storage accounts

• configure network access to storage accounts

1. Manage storage account settings in the Azure portal
2. Configure Azure Storage firewalls and virtual networks

• create and configure storage accounts

1. Azure storage account overview
2. Create an Azure Storage account

• generate shared access signature

1. Getting Started with Shared Access Signatures (SAS)
2. Delegate access with a shared access signature
3. Using shared access signatures (SAS)

• manage access keys

1. Manage storage account access keys
2. Manage storage account keys with Key Vault and the Azure CLI

• implement Azure storage replication

1. Azure Storage redundancy
2. Change how a storage account is replicated

• configure Azure AD Authentication for a storage account
  • Authorize access to blobs and queues using Azure Active Directory

Manage data in Azure Storage

• export from Azure job

1. What is Azure Import/Export service?
2. Creating an export job for the Azure Import/Export service

• import into Azure job

1. Creating an import job for the Azure Import/Export service

• install and use Azure Storage Explorer

1. Introduction to Microsoft Azure Storage Explorer
2. Get started with Storage Explorer
3. Quickstart: Use Azure Storage Explorer to create a blob in object storage

• copy data by using AZCopy

1. Transfer data with AzCopy and file storage
2. Get started with AzCopy

Configure Azure files and Azure blob storage

• create an Azure file share

1. Create a file share in Azure Files
2. Quickstart: Create and manage Azure file shares with Azure Storage Explorer
3. Quickstart: Create and manage Azure Files share with Windows virtual machines
4. Quickstart: Create and manage Azure file shares with the Azure portal
5. Quickstart: Create and manage an Azure file share with Azure PowerShell
6. Quickstart: Create and manage Azure file shares using Azure CLI

• create and configure Azure File Sync service

1. Deploy Azure File Sync
2. Planning for an Azure File Sync deployment
3. Tutorial: Extend Windows file servers with Azure File Sync

• configure Azure blob storage

1. Introduction to Azure Blob storage
2. Quickstart: Upload, download, and list blobs with the Azure portal
3. Manage Azure Blob Storage resources with Storage Explorer

• configure storage tiers for Azure blobs

1. Azure Blob storage: hot, cool, and archive access tiers

Deploy and manage Azure compute resources (25-30%)

Configure VMs for high availability and scalability

• configure high availability

1. Availability options for virtual machines in Azure
2. Manage the availability of Windows virtual machines in Azure
3. Manage the availability of Linux virtual machines
4. Tutorial: Create and deploy highly available virtual machines with the Azure CLI

• deploy and configure scale sets

1. What are virtual machine scale sets?
2. Quickstart: Create a virtual machine scale set in the Azure portal
3. Quickstart: Create a Windows virtual machine scale set with an Azure template
4. Tutorial: Create a virtual machine scale set and deploy a highly available app on Windows with Azure PowerShell

Automate deployment and configuration of VMs

• modify Azure Resource Manager (ARM) template

1. Deploy resources with Resource Manager templates and Azure portal
2. Update a resource in an Azure Resource Manager template
3. Create Azure Resource Manager template
4. Quickstart: Create and deploy Azure Resource Manager templates by using the Azure portal

• configure VHD template

1. Create a VM from a VHD by using the Azure portal

• deploy from template

1. Create a Windows virtual machine from a Resource Manager template
2. Quickstart: Create and deploy Azure Resource Manager templates by using the Azure portal
3. Deploy a Windows Virtual Machine with Azure Resource Manager Templates and PowerShell [Video]

• save a deployment as an ARM template

1. Download the template for a VM

• automate configuration management by using custom script extensions

1. Custom Script Extension for Windows
2. Use the Azure Custom Script Extension Version 2 with Linux virtual machines

Create and configure VMs

• configure Azure Disk Encryption

1. Azure Disk Encryption for Linux VMs
2. Azure Disk Encryption for Windows VMs

• move VMs from one resource group to another

1. Move resources to new resource group or subscription
2. Move a Windows VM to another Azure subscription or resource group
3. Resize virtual machines

• manage VM sizes

1. Resize a Windows VM
2. Sizes for Windows virtual machines in Azure

• add data discs

1. Attach a data disk to a Windows VM with PowerShell
2. Add a disk to a Linux VM using CLI
3. Use the portal to attach a data disk to a Linux VM
4. Attach a managed data disk to a Windows VM by using the Azure portal

• configure networking

1. Quickstart: Create a virtual network using the Azure portal
2. How to open ports to a virtual machine with the Azure portal

• redeploy VMs

1. Redeploy Windows virtual machine to new Azure node
2. Redeploy Linux virtual machine to new Azure node
3. Redeploy a VM in a lab in Azure DevTest Labs

Create and configure containers

• create and configure Azure Kubernetes Service (AKS)

1. Tutorial: Deploy an Azure Kubernetes Service (AKS) cluster
2. Quickstart: Deploy an Azure Kubernetes Service cluster using the Azure CLI

• create and configure Azure Container Instances (ACI)

1. Quickstart: Deploy a container instance in Azure using the Azure portal

Create and configure Web Apps

• create and configure App Service

1. Configure an App Service app in the Azure portal

• create and configure App Service Plans

1. Manage an App Service plan in Azure
2. Azure App Service plan overview

Configure and manage virtual networking (30-35%)

Implement and manage virtual networking

• create and configure VNET peering

1. Virtual network peering
2. Create, change, or delete a virtual network peering
3. Tutorial: Connect virtual networks with virtual network peering using the Azure portal

• configure private and public IP addresses, network routes, network interface, subnets, and virtual network

1. What is Azure Virtual Network?
2. Create, change, or delete a virtual network
3. Virtual network traffic routing
4. Tutorial: Route network traffic with a route table using the Azure portal
5. IP address types and allocation methods in Azure
6. Create, change, or delete a public IP address
7. Add, change, or remove IP addresses for an Azure network interface
8. Configure private IP addresses for a virtual machine using the Azure portal
9. Add, change, or delete a virtual network subnet

Configure name resolution

• configure Azure DNS

1. Azure DNS Documentation
2. Quickstart: Create an Azure DNS zone and record using the Azure portal
3. Quickstart: Create an Azure DNS zone and record using Azure PowerShell
4. Quickstart: Create an Azure DNS zone and record using Azure CLI

• configure custom DNS settings

1. Use Azure DNS to provide custom domain settings for an Azure service
2. Tutorial: Map an existing custom DNS name to Azure App Service

• configure a private or public DNS zone

1. Create an Azure DNS private zone using Azure PowerShell
2. Use Azure DNS for private domains
3. Tutorial: Host your domain in Azure DNS

Secure access to virtual networks

• create security rules

1. Security groups
2. Create, change, or delete a network security group

• associate an NSG to a subnet or network interface

1. Create, change, or delete a network security group

• evaluate effective security rules

1. Microsoft Azure Network Security Group effective security rules evaluation [Blog]
2. Create, change, or delete a network security group

• deploy and configure Azure Firewall

1. Tutorial: Deploy and configure Azure Firewall using the Azure portal
2. Tutorial: Deploy and configure Azure Firewall in a hybrid network using the Azure portal
3. Deploy and configure Azure Firewall using Azure PowerShell
4. Deploy and configure Azure Firewall in a hybrid network using Azure PowerShell

• deploy and configure Azure Bastion Service

1. Create an Azure Bastion host using the portal
2. Create an Azure Bastion host using Azure PowerShell

Configure load balancing

• configure Application Gateway

1. Application Gateway configuration overview
2. Frequently asked questions about Application Gateway
3. Quickstart: Direct web traffic with Azure Application Gateway – Azure portal
4. Configure an application gateway with an internal load balancer (ILB) endpoint
5. Tutorial: Create an application gateway with a Web Application Firewall using the Azure portal

• configure an internal load balancer

1. Internal Load Balancing
2. Tutorial: Balance internal traffic load with a Standard load balancer in the Azure portal
3. Create an internal load balancer by using the Azure PowerShell module
4. Create an internal load balancer to load balance VMs using Azure CLI
5. Create an internal load balancer using a template

• configure load balancing rules

1. Quickstart: Create a Load Balancer to load balance VMs using the Azure portal
2. Configure load balancing and outbound rules in Standard Load Balancer using Azure CLI
3. Quickstart: Create a public load balancer to load balance VMs using Azure PowerShell

• configure a public load balancer

1. Creating a public load balancer using a template

• troubleshoot load balancing

1. Troubleshoot Azure Load Balancer
2. Standard Load Balancer diagnostics with metrics, alerts and resource health

Monitor and troubleshoot virtual networking

• monitor on-premises connectivity

1. Diagnose on-premises connectivity via VPN gateways
2. Choose a solution for connecting an on-premises network to Azure

• use Network Performance Monitor

1. Network Performance Monitor solution in Azure
2. Network Performance Monitor solution: Performance monitoring

• use Network Watcher

1. What is Azure Network Watcher?
2. Introduction to resource troubleshooting in Azure Network Watcher
3. Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher

• troubleshoot external networking
  • Troubleshoot Virtual Network Gateway and Connections using Azure Network Watcher PowerShell
• troubleshoot virtual network connectivity

1. Troubleshoot virtual network peering issues
2. Troubleshooting connectivity problems between Azure VMs
3. Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher

Integrate an on-premises network with an Azure virtual network

• create and configure Azure VPN Gateway

1. Tutorial: Create and manage a VPN gateway using PowerShell
2. About VPN Gateway configuration settings
3. Create a route-based VPN gateway using the Azure portal
4. Create a route-based VPN gateway using CLI
5. Create a route-based VPN gateway using PowerShell

• create and configure VPNs

1. Create a Site-to-Site connection in the Azure portal
2. Create a virtual network with a Site-to-Site VPN connection using CLI
3. Configure a site-to-site VPN over ExpressRoute Microsoft peering

• configure ExpressRoute

1. Connect an on-premises network to Azure using ExpressRoute

• configure Azure Virtual WAN

1. About Azure Virtual WAN
2. Tutorial: Create a Site-to-Site connection using Azure Virtual WAN

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

• configure and interpret metrics

1. Getting started with Azure Metrics Explorer
2. Metrics in Azure Monitor
3. Custom metrics in Azure Monitor (Preview)

• analyze metrics across subscriptions

1. Azure Monitor data platform
2. Advanced features of Azure Metrics Explorer

• configure Log Analytics

1. Create a Log Analytics workspace in the Azure portal

• implement a Log Analytics workspace

1. Collect and analyze Azure activity logs in Log Analytics workspace in Azure Monitor
2. Manage access to log data and workspaces in Azure Monitor
3. Collect and analyze Azure Activity log in Azure Monitor

• configure diagnostic settings

1. Automatically enable Diagnostic Settings at resource creation using a Resource Manager template

• query and analyze logs

1. Overview of log queries in Azure Monitor
2. Get started with log queries in Azure Monitor
3. Azure Monitor log query examples

• create a query

1. Tutorial: Get started with Log Analytics queries

• set up alerts and actions
  • create and test alerts

1. Overview of alerts in Microsoft Azure
2. Create, view, and manage activity log alerts using Azure Monitor
3. Create, view, and manage log alerts using Azure Monitor
4. Alerts on activity log
5. Log alerts in Azure Monitor

• create action groups

1. Create and manage action groups in the Azure portal

• view alerts in Azure Monitor

1. Create, view, and manage activity log alerts using Azure Monitor
2. Create, view, and manage log alerts using Azure Monitor

• analyze alerts across subscriptions

1. Azure Monitor alerting just got better!

• configure Application Insights

1. What is Application Insights?
2. Application Insights for Azure cloud services

Implement backup and recovery

• configure and review backup reports

1. Configure Azure Backup reports
2. Microsoft Azure : Azure Backup Report with Recovery Services Vault & Power BI

• perform backup and restore operations by using Azure Backup Service

1. Azure Backup service documentation
2. Back up a virtual machine in Azure
3. Back up a virtual machine in Azure with PowerShell
4. Back up a virtual machine in Azure with the CLI
5. Use Azure portal to back up multiple virtual machines
6. Introducing backup for Azure file shares
7. Recover files from Azure virtual machine backup
8. How to restore Azure VM data in Azure portal

• create a Recovery Services Vault

1. Recovery Services vaults overview
2. Monitor and manage Recovery Services vaults
3. Back up Azure VMs in a Recovery Services vault

• use soft delete to recover Azure VMs

1. Soft delete for virtual machines in Azure Backup
2. Soft delete for Azure Backup
3. Soft delete for virtual machines

• create and configure backup policy

1. Manage Azure VM backups with Azure Backup service

• perform site-to-site recovery by using Azure Site Recovery

1. About Site Recovery
2. Quickstart: Set up disaster recovery to a secondary Azure region for an Azure VM
3. Set up disaster recovery for Azure VMs
4. Monitor Site Recovery
5. Monitor Site Recovery with Azure Monitor Logs

Follow me on Social Media and Share this article with your friends!

Additional Tips

I think the best thing that you can do after reading this, or even meanwhile, is to open a free Azure Trial (or a few), and play with those features, follow the tutorials and you shouldn’t have any problems with the exam!

If you have enjoyed this AZ-104 Study Guide, make sure to check out all of my other Microsoft Certification Study Guides!

Did I miss any cool links in this guide? Let me know in the comments!