AZ-104 Azure Administrator Associate Complete Preparation

Explore the Azure portal and cloud shell, learn to navigate resources, build and monitor dashboards, and use the Azure mobile app for on-the-go management and quick command-line actions.

Learn to use Azure PowerShell and Azure CLI to manage subscriptions, resource groups, and resources, with local or Cloud Shell usage, interactive and scripting modes, and module-based commands.

Learn how Azure Resource Manager provides a consistent management layer to deploy, manage, and monitor all resources as a group using declarative templates, resource groups, and tagging.

Arm templates from overview to schema, parameters, and variables, using quickstart templates and Azure PowerShell to deploy resource groups and deploy infrastructure via code.

Explore Azure virtual machines within infrastructure as a service, covering planning, sizing, storage options, and OS choices. Learn to optimize location, pricing, and disk types for scalable VM deployments.

Create and connect Windows and Linux virtual machines in Azure using the portal and PowerShell. Configure networking, disks, and VM extensions, and connect via RDP or SSH.

Explore virtual machine availability in Azure, covering maintenance scenarios, live migration, and planned downtime; learn to design with availability sets, update and fault domains, and auto scale using skill sets.

Explore Azure virtual machine extensions, focusing on custom script extensions and desired state configuration, to automate post-deployment tasks with PowerShell.

Overview of Azure storage accounts, including blob storage, Azure files, queues, and tables, with standard and premium tiers, access methods, and Storage Explorer demonstration.

Explore Azure blob storage concepts, including containers, access tiers (hot, cool, archive), and blob types (block, append, page); learn uploading, access policies, and a hands-on demonstration.

Explore Azure files and file shares, mapping to Windows and Linux, and compare with blobs. Create shares, enable secure transfer, manage snapshots, and mount them with PowerShell or Linux.

Explore Azure storage security, including shared access signatures, SAS parameter configuration, storage service encryption with customer managed keys, and best practices demonstrated in the portal and Storage Explorer.

Explore virtual networks in Azure, define subnets and IP addressing, configure network security groups, and deploy virtual machines with multiple NICs using portal and PowerShell.

Explore IP addressing in Azure, including public and private IP addresses, static and dynamic assignment. Configure service endpoints to secure Azure services and storage within a virtual network.

Explore Azure DNS coverage of domains and custom domains, verification via DNS records, DNS zones and record sets, and delegation and private zones for secure name resolution.

Learn how to use network security groups to filter inbound and outbound traffic, assign NSGs to subnets or NICs, and implement effective default and custom rules with priority.

Explore VNet peering to connect Azure virtual networks across regions, enabling private, low latency traffic via the Microsoft backbone, with regional and global peering, gateway transit, and hub-and-spoke options.

Set up and verify VNet-to-VNet connections by configuring gateway subnets, VPN gateways, local network gateways, and on-premises devices for secure cross-network Azure connectivity.

Explore express route: private, high-throughput connections from on-premises to Azure, Office 365 and Dynamics 365, with redundancy, dual BGP, and options like cloud exchange, co-location, and MPLS VPN.

Discover Azure Monitor's core capabilities: collect metrics and logs, analyze telemetry with Log Analytics, and set up alerts. Explore the activity log, event categories, and Azure Advisor recommendations.

Explore Azure alerts and the monitor experience, including alert rules and action groups. Learn to manage alerts, signals, and notification workflows across metrics, logs, and activity logs.

Learn to set up a log analytics workspace, connect data sources, and use the log analytics query language syntax and operators to analyze and visualize logs.

Master Azure Network Watcher to monitor, diagnose, and visualize your virtual network with connection monitor, topology, IP flow verify, next hop, VPN diagnostics, and flow logs for security and optimization.

Explore data replication options in Azure storage, including LRS, ZRS, RA-GRS, and GRS, to balance durability, availability, and costs while preparing for regional outages and recovery objectives.

Discover how Azure Backup protects on-premises and cloud data using Recovery Services vaults, file shares backups, agent-based policies, encryption, and dual redundant storage.

Learn to implement Azure Site Recovery for Hyper-V, VMware, and physical machines, enabling automated VM backups, replication, failover, and recovery across Asia regions.

Explore how Azure routing directs traffic between subnets and the internet using system routes, routing tables, and user defined routes with virtual appliances.

Explore how the Azure load balancer delivers high availability and routes TCP and UDP traffic. Balance traffic with front-end IP, back-end pools, health probes, session persistence, and load balancing rules.

Azure Traffic Manager routes user requests to endpoints via DNS using priority, performance, geographic, and weighted routing. It supports profiles, endpoints, and external endpoints with health checks and failover.

Explore Azure Active Directory, a cloud identity service offering single sign-on, MFA, and self-service management for cloud and on-premises apps. Learn edition differences (free, basic, P1, P2) and tenant concepts.

Facilitate hybrid identity by integrating on-premises directories with Azure Active Directory through Azure AD Connect, enabling password hash synchronization, pass-through authentication, and federation with health monitoring.

Explore Azure AD join concepts, including registration vs joining, hybrid join, and management with Intune, enabling single sign-on, conditional access, and secure access to work resources.