AZ-104 Microsoft Azure Administrator w/ AZ104 Practice Tests

Learn how on-premises Active Directory creates user identities and authenticates access to company resources, using a domain like abc.com, and how Azure Active Directory serves as the cloud authentication layer.

Learn how to configure self-service password reset (SSPR) in Azure Active Directory, including premium licensing with a minimum P1 (P2 trial), and enabling it for groups rather than individuals.

Learn how self-service password reset (SSPR) works in a hybrid Azure AD environment, including group-based registration, P1 licensing, supported authentication methods, and password write back.

Learn to collaborate with external organizations by inviting guest users in Azure Active Directory, sending invitations, and accepting them to enable B2B collaboration without creating a user.

Learn how to resolve guest user invitation errors in Azure AD by enabling external collaboration settings to allow inviting external guests.

Learn how Azure AD administrative units create logical boundaries between locations, enabling region-specific admins to manage only unit members with a user administrator role, limited by P1/P2 licensing.

Learn how administrative units define scope in Azure AD by adding groups versus direct members, and how to grant local admins by creating administrative units as logical boundaries.

Discover how Azure regions group data centers into geographic areas connected by low-latency networks. Explore availability zones, regional pairs, and sovereign regions for resilience and disaster recovery.

Discover what a free subscription includes, like a $200 credit for 30 days and 12 months of free services. Learn to view subscriptions and perform cost analysis in Azure.

Organize Azure management infrastructure by linking a subscription to resource groups and resources. A resource group acts as a container where resources reside, can span regions, and move between groups.

Provision a Windows VM inside the existing virtual network subnet (10.0.0.0/24) and automatically create a public IP, a network interface card, and an OS disk for Windows Server 2019.

Learn how to connect two Azure virtual networks across regions using private IPs through virtual network pairing, with portal setup steps and testing via two virtual machines.

Create application security groups to logically cluster VMs, then use NSG inbound rules with ASG destinations to control ports like 80 and 1433.

Discover how a load balancer distributes traffic across back end servers using front end and back end IPs, health probes, rules, and availability set, with basic and standard skews.

Understand session persistence in load balancers, using client IP or client IP and protocol to route a user to the same backend instance, via hash-based distribution.

Explore the application gateway components—listener, routing rules, sdp setting, and the backend pool—and learn how requests traverse to the backend via a listener that matches port, protocol, host, and IP.

Create and run docker containers with the nginx image, map host ports 8080 and 8081 to container port 80, and access via a public IP after NSG rules.

Compare containers with Azure Container Instances; learn to deploy containers directly to Azure without managing virtual machines or Docker installations, using Docker Hub images like nginx.

Create an Azure web app with app service, select resource group and domain, compare ASP.NET on Windows with dotnet core on Linux or Windows, and review app service plan tiers.

Learn to implement an Azure availability set by distributing your app across multiple virtual machines for better availability and SLA. Understand fault domains, update domains, and planned maintenance.

Explore availability zones as a high availability solution that protects against data center failures by spreading VMs across separate zones with independent power, cooling, and networking, delivering a 99.99% SLA.

Examine how NSGs control traffic in a VNet with subnet-level and VM-level rules, showing inbound checks subnet before VM and outbound checks VM before subnet.

Learn how point-to-site VPN lets individual clients securely connect to Azure virtual network via a VPN gateway, using certificate-based authentication with root and client certificates and IKEv2 OpenVPN SSTP protocols.

Configure a point-to-site VPN by creating a tunnel from an on-premises VM to the Azure vnet via the virtual network gateway, using IKEv2 or OpenVPN SSL with cert-based authentication.

Configure Azure private DNS zone to map VM names like vm1.contoso.local to IPs, using record sets within virtual networks; compare public DNS hosting with registrar domains.

Explore Arm template deployment modes, including incremental and complete, and learn how incremental preserves existing resources while complete deletes those not defined in the template, with template file usage.

Learn to register a resource provider through PowerShell using the register-az resource provider command with the provider namespace, enabling resources such as Microsoft.Compute.

Create a storage account using a bicep template in Visual Studio Code, with the bicep extension for intellisense, then deploy it in the Azure portal to East US.

Deploy a storage account by using a bicep template via PowerShell or CLI, after installing the Azure module and connecting to your subscription; the bicep transpiles to json ARM template.

Learn to verify backups in the recovery services vault, understand snapshot and recovery points, and perform file recovery on a VM using restore points and a PowerShell script.

The soft delete feature in recovery services vault keeps deleted backups for 14 days by default and can be extended to 180 days, with default enabled and can be disabled.

Learn to delete backup data in Azure, stopping backups and using soft delete for a 14-day retention. Undelete restores protection; permanently delete data after the retention period.

Answer exam-style questions on Azure backup: perform file-level recovery via mount points and PowerShell, and manage retention, soft delete, and vault deletion prerequisites.

Collect logs from a virtual machine using data collection rules and the Azure Monitor Agent to send Windows event logs to a Log Analytics workspace.

Discover how to query logs in the log analytics workspace using kusto query language, filter event data with where clauses, and compare kql to sql in azure monitor.

Azure Monitor alerts enable proactive detection by configuring alert rules with scope, signal, and conditions, and routing notifications through action groups to emails and ITSM tools.

Learn how network watcher monitors Azure networking health with topology visualization, connection monitor for end-to-end latency, and diagnostic tools like IP flow verify and NSG analysis.

Explore Azure storage, a massively scalable cloud storage via a storage account with a globally unique namespace, offering blobs, tables, queues, and file shares, plus standard and premium tiers.

General purpose v2 storage accounts support blob, file, queue, and table services; create containers to store blobs, upload files, and manage access with urls.

Learn to use the easy copy azcopy tool to copy blobs and files between storage accounts, configure path environment, authenticate with Azure Active Directory, and run via PowerShell.

Learn about storage access tiers—hot, cool, and archive—and how each tier affects pricing, including storage, transaction costs, and egress, with practical guidance on changing tiers in the Azure portal.

Explore immutable blob storage in Azure: configure time-based and legal hold policies at the container level to prevent deletion or modification of critical data.