AZ-104 (Quick INDEX)
MANAGE
AZURE IDENTITIES GOVERNANCE
Topics |
Details to learn |
Manage Azure AD objects |
Creating a new user in Azure AD |
Add or delete users using Azure Active
Directory |
|
Create a basic group and add members using
Azure Active Directory |
|
New-AzureADUser |
|
Add or update the user’s profile information
using Azure Active Directory |
|
Edit your group information using Azure Active
Directory |
|
Manage device identities using the Azure portal |
|
How To: Manage stale devices in Azure AD |
|
Bulk import group members (preview) in Azure
Active Directory |
|
What is guest user access in Azure Active
Directory B2B? |
|
Manage guest access with Azure AD access
reviews |
|
QuickStart: Add guest users to your directory
in the Azure portal |
|
How to: Plan your Azure AD join implementation |
|
Licensing requirements for Azure AD
self-service password reset |
|
Tutorial: Configure hybrid Azure Active
Directory join for managed domains |
|
Plan an Azure Active Directory self-service Role-based
reset |
|
|
|
Manage Role based access control |
Create a
custom role for Azure resources using Azure CLI |
Create a custom role for Azure resources using
Azure PowerShell |
|
Add or remove role assignments using Azure RBAC
and the Azure portal |
|
List role assignments using Azure RBAC and the
Azure portal |
|
Understand deny assignments for Azure resources |
|
Understand how multiple Azure Active Directory
tenants interact |
|
|
|
|
Overview of Management services in Azure |
What is Azure Policy? |
|
Create
and manage policies to enforce compliance |
|
QuickStart: Create a policy assignment to
identify non-compliant resources |
|
Lock resources to prevent unexpected changes |
|
Use tags to organize your Azure resources |
|
Manage Azure resource groups by using Azure
PowerShell |
|
Manage Azure Resource Manager resource groups
by using the Azure portal |
|
Create an additional Azure subscription |
|
Change your Azure subscription to a different
offer |
|
What is Azure Cost Management and Billing? |
|
QuickStart: Explore and analyze costs with cost
analysis |
|
Move resources to a new resource group or
subscription |
|
Create management groups for resource
organization and management |
|
Manage your resources with management groups |
IMPLEMENTATION
& MANAGE STORAGE
Topics |
Details to learn |
Implementation & Manage of Storage |
Intro to Azure Storage |
Configure Azure Storage firewalls and virtual
networks |
|
Storage account overview |
|
Create an Azure Storage account |
|
Upgrade to a general-purpose v2 storage account |
|
Delegate access with a shared access signature |
|
Grant limited access to Azure Storage resources
using shared access signatures (SAS) |
|
Manage storage account access keys |
|
Azure Storage redundancy |
|
|
|
Manage data in Azure storage accounts |
Use the Azure Import/Export service to export
data from Azure Blob storage |
Use the Azure Import/Export service to import
data to Azure Blob Storage |
|
Get started with Storage Explorer |
|
Get started with AzCopy |
|
|
|
|
What are Azure Files? |
QuickStart: Create and manage Azure file shares with the Azure portal |
|
Create an Azure file share |
|
Planning for an Azure File Sync deployment |
|
Deploy Azure File Sync |
|
Extend Windows file servers with Azure File
Sync |
|
QuickStart: Upload, download, and list blobs
with the Azure portal |
|
Azure Blob storage: hot, cool, and archive
access tiers |
DEPLOY
& MANAGE AZURE COMPUTE RESOURCE
Topics |
Details to learn |
|
Extend Azure Resource Manager template
functionality |
Azure Resource Manager templates overview |
|
Tutorial: Create and deploy your first Azure Resource Manager template |
|
Update a resource in an Azure Resource Manager
template |
|
Create a Windows virtual machine from a
Resource Manager template |
|
Create a VM from a VHD by using the Azure
portal |
|
QuickStart: Create and deploy Azure Resource
Manager templates by using the Azure portal |
|
Download the template for a VM |
|
Custom Script Extension for Windows |
|
Use the Azure Custom Script Extension Version 2
with Linux virtual machines |
|
|
|
Create and configure VMs |
Azure Disk Encryption for Linux VMs |
Azure Disk Encryption for Windows VMs |
|
Deploy and configure VM scale sets & Configure VM network settings (also availability options) |
|
QuickStart: Create and encrypt a Windows virtual machine with the Azure portal |
|
Move a Windows VM to another Azure subscription or resource group |
|
Sizes for Windows virtual machines in Azure |
|
Resize a Windows VM |
|
Attach a managed data disk to a Windows VM by
using the Azure portal |
|
Attach a data disk to a Windows VM with
PowerShell |
|
Common PowerShell commands for Azure Virtual
Networks |
|
How to open ports to a virtual machine with the
Azure portal |
|
Create and manage a Windows virtual machine
that has multiple NICs |
|
|
|
Create and configure containers |
Azure Disk Encryption for Linux VMs |
Azure Disk Encryption for Windows VMs |
|
QuickStart: Create and encrypt a Windows virtual machine with the Azure portal |
|
Move a Windows VM to another Azure subscription
or resource group |
|
Sizes for Windows virtual machines in Azure |
|
Resize a Windows VM |
|
Attach a managed data disk to a Windows VM by
using the Azure portal |
|
Attach a data disk to a Windows VM with
PowerShell |
|
Common PowerShell commands for Azure Virtual
Networks |
|
How to open ports to a virtual machine with the
Azure portal |
|
Create and manage a Windows virtual machine
that has multiple NICs |
|
|
|
Create and configure containers |
QuickStart: Deploy an Azure Kubernetes Service (AKS) cluster using the Azure portal |
Configure storage for Azure Kubernetes Service (AKS) |
|
Configure scaling for AKS |
|
Configure network connections for AKS |
|
|
|
QuickStart:
Deploy a container instance in Azure using the Azure CLI |
|
QuickStart: Deploy a container instance in Azure using the Azure portal |
|
|
|
Create and configure an Azure App Service |
Create an App Service plan |
Configure scaling settings in an App Service plan |
|
Create an App Service |
|
Secure an App Service |
|
Configure custom domain names |
|
Configure a backup for an App Service |
|
Configure networking settings |
|
Configure deployment settings |
CONFIGURE
& MANAGE VIRTUAL NETWORKING
Topics |
Details to learn |
|
Virtual
network peering |
Implementing & configuring virtual networks |
Create, change, or delete virtual network peering (Create and configure virtual networks and subnets) |
Connect virtual networks with virtual network peering using the Azure portal |
|
Configure
private IP addresses for a virtual machine using the Azure portal |
|
QuickStart:
Create a virtual network using the Azure portal |
|
Create,
change, or delete a network interface |
|
Add,
change, or delete a virtual network subnet |
|
Create,
change, or delete a virtual network |
|
Create and configure network security groups (NSGs) and application security groups (ASGs) |
|
Evaluate effective security rules |
|
|
|
Configure name resolution |
Create, change, or delete a virtual network
peering |
Name resolution for resources in Azure virtual
networks |
|
Use Azure DNS to provide custom domain settings
for an Azure service |
|
How to manage DNS Zones in the Azure portal |
|
QuickStart: Configure Azure DNS for name
resolution using the Azure Portal |
|
Host your
domain in Azure DNS |
|
QuickStart: Create an Azure private DNS zone
using the Azure portal |
|
|
|
Configure secure access to virtual networks |
Work with security roles |
Create, change, or delete a network security
group |
|
Deploy and configure Azure Firewall using the Azure portal |
|
Create an Azure Bastion host |
|
|
|
Configure load balancing |
Application Gateway configuration overview |
QuickStart: Direct web traffic with Azure Application
Gateway using Azure PowerShell |
|
Balance internal traffic load with a Basic load
balancer in the Azure portal |
|
Create an internal load balancer by using the
Azure PowerShell module |
|
Create a Load Balancer to load balance VMs
using the Azure portal |
|
Troubleshoot Azure Load Balancer |
|
|
|
Monitoring
On-Premise Active Directory via Azure AD Connect Health |
|
|
|
|
Diagnose on-premises connectivity via VPN
gateways |
Network Performance Monitor solution:
Performance monitoring |
|
What is Azure Network Watcher? |
|
Create an Azure Network Watcher instance |
|
Troubleshoot Virtual Network Gateway and
Connections using Azure Network Watcher Azure CLI |
|
Troubleshoot connections with Azure Network
Watcher using the Azure portal |
|
|
|
Integrate an On-Premises network with an azure virtual network |
Create and manage a VPN gateway using
PowerShell |
Create a route-based VPN gateway using the
Azure portal |
|
Create a Site-to-Site connection in the Azure
portal |
|
ExpressRoute overview |
|
Create and modify an ExpressRoute circuit |
|
About Azure Virtual WAN |
|
Create a Site-to-Site connection using Azure
Virtual WAN |
|
Connect a VPN Gateway (virtual network gateway)
to Virtual WAN |
MONITOR
& AZURE BACKUP RESOURCES
Topics |
Details to learn |
Monitor resources by using Azure Monitor |
Metrics in Azure Monitor |
Configure and interpret metrics |
|
Advanced features of Azure Metrics Explorer |
|
QuickStart: Monitor an Azure resource with
Azure Monitor |
|
Get started with Log Analytics in Azure Monitor |
|
Get started with log queries in Azure Monitor |
|
Overview of log queries in Azure Monitor |
|
Create, view, and manage metric alerts using
Azure Monitor |
|
Metric Alerts with Dynamic Thresholds in Azure
Monitor |
|
Create Metric Alerts for Logs in Azure Monitor |
|
Manage Application Insights resources using
PowerShell |
|
|
|
|
Create an Azure Recovery Services vault |
Create an Azure Backup vault |
|
Create and configure a backup policy |
|
Perform backup and restore operations by using Azure Backup (How to restore Azure VM data in Azure portal) |
|
Configure Azure Site Recovery for Azure resources (Create a Recovery Services vault) |
|
Manage Azure VM backups with Azure Backup
service |
|
About Site Recovery |
|
Perform failover at a secondary region by using Azure Site Recovery (Set up disaster recovery of on-premises VMware virtual machines or physical servers to a secondary site) |
|
Configure and review backup reports |