AZ-104 Exam Prep: Microsoft Azure Administrator

In this lab, you will gain hands-on experience with Microsoft Entra ID by creating and configuring a new user account in the Microsoft Entra Admin Center. This process is fundamental for managing identities within an organization, and you will explore key features such as adding user details and configuring user properties.

By the end of the lab, you will understand how to effectively manage user accounts in Entra ID, ensuring that users have the correct permissions and settings for accessing resources within your environment.

In this lab, you will explore how to manage user properties in Microsoft Entra ID (formerly Azure Active Directory). Effective user management goes beyond creating accounts—it involves configuring and updating user properties to ensure proper identity management and security. In this hands-on experience, you will learn how to modify key user attributes, such as company name, job titles, and group memberships. By the end of the lab, you will have the skills needed to effectively update and maintain user properties to meet organizational needs.

In this lab, you will learn how to assign licenses to users in Microsoft Entra ID (formerly Azure Active Directory) to ensure they have access to the necessary cloud services and applications. Managing user licenses is a key aspect of identity and access management in Microsoft Entra ID. You will explore how to assign licenses through both the Entra Admin Center and the Microsoft 365 Admin Center. By the end of the lab, you will have the skills to manage user licenses efficiently, ensuring proper access control for your organization.

In this lab, you will learn how to create a security group within Microsoft Entra ID (formerly Azure Active Directory). Security groups are an essential part of controlling access to resources and applications in a cloud-based environment. You will explore how to create a security group, add members, and assign owners. By the end of this lab, you will have the practical skills needed to implement group-based access controls, enhancing security and simplifying user management.

Use the labIT PRO lab simulator to import users into Azure AD using a CSV template.

Use the labIT PRO lab simulator to create a new administrative unit in Microsoft Azure.

In this interactive labIT PRO Azure simulation, you will be guided through the process of allowing a specific user to join devices to Azure Active Directory.

In this lab simulation, you'll create a policy that ensures that an Environment tag is applied to all resource groups that get created.

Resource locks are a critical tool for preventing accidental or unauthorized modifications to important resources. In this lab, you’ll learn how to add and remove resource locks in Microsoft Azure.

By locking resources, you ensure that they cannot be modified or deleted unintentionally. This lab guides you through the process of applying a “Delete” lock to a virtual machine, testing the lock’s effectiveness, by attempting to delete the resource, and then removing the lock.

In this lab simulation, you'll create a new budget in Azure Cost Management, scope it to a specific resource group, and configure a notification email.

In this lab, you will learn how to effectively tag resources in Microsoft Azure to better organize and manage your cloud infrastructure.

Tagging allows you to assign metadata to Azure resources, such as virtual machines, making it easier to track and categorize them based on specific criteria like environment, department, or cost center.

Through a step-by-step process, you will tag multiple resources, such as virtual machines, and use the tags to filter and display resources based on their assigned tags. By the end of this lab, you will have a clear understanding of how to implement and utilize tags to improve the management and accessibility of Azure resources.

In this lab, you will configure Self-Service Password Reset (SSPR) in Microsoft Entra ID (formerly Azure Active Directory). Self-Service Password Reset allows users to reset their own passwords without needing to contact IT support, reducing help desk workload and improving user experience. You will explore how to enable and configure SSPR, set up authentication methods for password recovery, and test the functionality from a user perspective. By the end of the lab, you will understand how to implement and manage SSPR to enhance the efficiency and security of your organization’s password management processes.

In this lab, you will learn how to assign Role-Based Access Control (RBAC) roles to users in Microsoft Azure. You will be guided through the process of selecting a resource group, assigning the “Virtual Machine Contributor” role to a specific user, and verifying the role assignment. This exercise ensures you can effectively manage access within a resource group, allowing team members to perform tasks according to their assigned roles while maintaining security and compliance.

In this lab, you’ll learn how to create and configure an Azure Storage Account using the Azure portal.

The lab provides step-by-step instructions, walking you through the process of setting up a storage account, selecting key configuration options, and enabling advanced features like geographic redundancy, network access controls, and blob versioning.

By the end of the lab, you’ll have hands-on experience with setting up a storage account, configuring its security settings, and deploying it within a specific Azure environment.

In this labITpro lab simulation, you'll use the Azure portal to configure network access for an Azure storage account. You'll scope the access to a single subnet on a single virtual network.

In this hands-on lab, you will learn how to create a Shared Access Signature (SAS) token in Azure Storage.

A SAS token is a secure way to grant limited access to storage resources within an Azure Storage account. It allows for time-bound, controlled access to specific resources such as blobs, files, and queues, without exposing the storage account’s access keys.

This lab will guide you through the steps to create a SAS token, configure its permissions, set its access scope, and restrict access based on IP addresses, dates, and other parameters.

By the end of the lab, you will have created a SAS token with read-only permissions for a blob container, ensuring secure access to the storage resources while preventing write, delete, or modify operations.

In this labIT PRO Azure simulation, you will be guided through the process of regenerating both storage account access keys.

In this lab, you will learn how to create and configure an Azure File Share within an existing Azure storage account. Azure File Share allows you to set up a fully managed file share in the cloud, accessible through standard protocols like SMB and NFS.

This lab will guide you through the step-by-step process of creating a file share, selecting appropriate access tiers, and reviewing important configuration settings. By the end of this lab, you will have hands-on experience creating a file share that is optimized for frequent data access and ready to be used for storing and sharing files.

In this lab, you’ll learn how to create and configure a blob container in an Azure Storage Account. You’ll go through the steps of setting up a new container, configuring access permissions, and enabling anonymous access for blob data.

Additionally, you’ll adjust network settings to allow public access to the container, ensuring that it can be accessed over the internet.

By the end of this lab, you’ll understand how to configure blob containers for different access scenarios, including anonymous and public access.

In this detailed hands-on demonstration, you will learn how to deploy a Windows virtual machine into an Availability Set, using the Azure Portal. You'll also learn how to configure the necessary network settings to support a new VM, along with how to add a data disk to a VM.

In this detailed hands-on demonstration, you will learn how to deploy a Windows virtual machine into an Availability Set, using the Azure Portal. You'll also learn how to configure the necessary network settings to support a new VM, along with how to add a data disk to a VM.

In this lab, you’ll learn how to deploy and configure an Azure Virtual Machine (VM) using the Azure portal. The lab walks you through the steps of creating a new virtual machine, configuring its settings, including availability zones, security options, and network configuration.

You’ll also learn how to attach and configure disks for your VM, manage network access, and ensure that resources such as IPs and NICs are properly deleted when the VM is removed.

In this Azure simulation, you will create a new data disk and attach it to an existing virtual machine.

In this demonstration, you'll be taken by the hand through the process of resizing an Azure virtual machine.

In this lab, you’ll learn how to resize an existing Azure Virtual Machine using the Azure portal. Resizing a VM is a critical task when you need to adjust the resources allocated to your virtual machine, such as increasing or decreasing CPU and memory to match workload requirements.

The lab will guide you through the process of selecting a different size, applying filters to find the appropriate VM size, and resizing the VM.

By the end of this lab, you’ll understand how to effectively resize a virtual machine to optimize its performance or cost.

In this lab, you will learn how to manually deploy and configure Azure Bastion to securely connect to a virtual machine in a virtual network without exposing the machine to the public internet.

Azure Bastion provides secure and seamless RDP/SSH connectivity to your VMs directly from the Azure portal over SSL, without requiring a public IP address on the virtual machine.

Throughout the lab, you will deploy a Bastion service, configure it to work with an existing virtual network, and test your configuration by securely connecting to a virtual machine.

This hands-on demonstration will show you how to redeploy a VM and explain why you would want to do so.

In this labIT PRO interactive hands-on Azure simulation, you will be guided through the redeployment of an Azure VM. After you redeploy a VM, you will reapply it.

Learn, firsthand, how to move an Azure virtual machine from one resource group to another.

This lab is designed to guide participants through the process of relocating a virtual machine (VM) within the Azure environment.

In this lab, you’ll practice the steps required to move a VM and its associated resources to a different resource group, which is useful for organizing or restructuring resources within Azure.

Participants will gain hands-on experience with the Azure portal, learning how to navigate the interface and execute the move operation efficiently.

This detailed hands-on demonstration will teach you how to leverage Azure Key Vault to encrypt a disk on an Azure virtual machine.

Learn what a scale set is, how to deploy one, and how to configure auto-scaling.

In this lab, you’ll learn how to deploy and configure an Azure Virtual Machine Scale Set (VMSS) using the Azure portal.

A VM Scale Set is an Azure compute resource that allows you to deploy and manage a set of identical VMs. This lab walks you through the process of setting up the scale set, configuring auto-scaling based on CPU usage, and attaching storage to the VMs.

You’ll also configure network settings and management options to ensure smooth operations.

By the end of this lab, you’ll have deployed a scalable, flexible infrastructure capable of automatically scaling in or out based on workload demands.