AZ-104 (Microsoft Azure Administrator) – Full Course Syllabus

1. Manage Azure Identities and Governance (15-20%)

  • Manage Azure Active Directory (Azure AD) objects
    • Users, groups, administrative units, devices
    • Manage guest accounts using Azure AD B2B
  • Manage access control
    • Role-Based Access Control (RBAC)
    • Custom roles
    • Azure AD Privileged Identity Management (PIM)
  • Manage subscriptions and governance
    • Configure Azure Policy
    • Configure resource locks
    • Implement and configure resource tagging
    • Create and manage resource groups

2. Implement and Manage Storage (15-20%)

  • Configure access to storage
    • Shared access signatures (SAS)
    • Azure AD-based access for storage
    • Manage storage account keys
  • Manage data in Azure Storage
    • Import and export data
    • Use AzCopy, Azure Storage Explorer
  • Configure Azure Files and Azure Blob Storage
    • Configure storage tiers
    • Configure lifecycle management
    • Configure blob object replication
    • Configure Azure Files and Azure File Sync

3. Deploy and Manage Azure Compute Resources (20-25%)

  • Configure VMs for high availability and scalability
    • Availability sets
    • Availability zones
    • Scale sets
  • Automate deployment and configuration of VMs
    • ARM templates
    • Azure Bicep
    • Azure VM extensions
  • Create and configure containers
    • Azure Container Instances (ACI)
    • Azure Kubernetes Service (AKS) basics
  • Create and configure App Service resources
    • App Service Plans
    • Web Apps
    • Custom domains, SSL bindings
    • Backup and restore web apps

4. Configure and Manage Virtual Networking (20-25%)

  • Implement and manage virtual networks (VNets)
    • Subnets
    • Virtual network peering
  • Configure name resolution
    • Azure DNS
    • Private DNS zones
  • Secure access to virtual networks
    • Network security groups (NSGs)
    • Application security groups (ASGs)
    • Azure Firewall basics
  • Configure load balancing
    • Azure Load Balancer
    • Azure Application Gateway
    • Azure Front Door basics
  • Monitor and troubleshoot virtual networking
    • Network Watcher
    • Connection troubleshooters
  • Integrate on-premises networks with Azure
    • Site-to-site VPN
    • Point-to-site VPN
    • ExpressRoute basics

5. Monitor and Maintain Azure Resources (10-15%)

  • Monitor resources using Azure Monitor
    • Log Analytics
    • Metrics, alerts
    • Action groups
  • Implement backup and recovery
    • Azure Backup
    • Restore files and VMs
  • Perform environment maintenance
    • Apply updates to VMs
    • Use Update Management