AZ-104 Microsoft Azure Administrator Certification Bootcamp

Explore Azure global infrastructure, including regions, geography, data centers, availability zones, and zone redundant services, and learn how these components enable high availability, low latency, and data residency planning.

Introduce Azure Active Directory as a cloud-based, multi-tenant identity and access management service with single sign-on, on premise integration, and federation, and compare it to on premise AD.

Learn to create and manage Azure AD users and groups, including member and guest accounts, Microsoft 365 groups, and dynamic membership, using the portal, PowerShell, and the Azure CLI.

Learn how Azure Active Directory manages device identity with registration, AD join, and hybrid AD join, and enable self-service password reset with prerequisites, SSO, and Intune integration.

Explore role-based access control in Azure and Azure Active Directory, including built-in and custom roles, security principals, role definitions, and scope at subscription, resource group, or resource levels.

Explore Azure governance, its hierarchy from management groups to subscriptions, resource groups, and resources. Learn when to create multiple subscriptions for billing, policy, and organization structure.

Azure policies define, assign, and manage rules to control and audit resources, enforcing updates, security requirements like MFA, and tagging across hierarchical levels.

Learn how resource groups and tags organize Azure resources, and use cost calculators and Microsoft Cost Management to estimate and control cloud spending.

Explore Azure management groups and resource groups by creating a HQ management group, attaching subscription two, and defining access control, policies, and role assignments to manage resources.

Master Azure Virtual Network basics, including VNet components, subnets, and private and public IPs, to securely connect resources like virtual machines and on-prem networks.

Azure dns provides a hosting service for dns zones in the Azure infrastructure, enabling public and private name resolution with anycast reliability, rbac security, and easy custom domain validation.

Configure Azure network security groups to control traffic with source, destination, port, and protocol rules applied to subnets and NICs; use application security groups to group VMs and simplify policies.

Discover Azure Firewall, a Microsoft managed service for virtual networks that enforces NAT, network, and application rules with threat intelligence filtering, high availability, monitoring, and hybrid network limits.

Protect your Azure network with DDoS protection, private link, Azure Bastion, and just-in-time access to enable multi-layer security via private endpoints.

Learn to manage Azure VNet connectivity with VNet peering across regional and global scopes. Explore hub networking and service chaining, using custom routes and VPN gateways to reach on-premise resources.

Explore vpn gateway to connect on premise environments with site-to-site, point-to-site, and VNet-to-VNet connectivity, and learn Expressroute for private, global connectivity via partner edge.

Learn how Azure network load balancer distributes traffic at layer 4 with public and internal options, guided by health probes and rules; explore application gateway, URL routing and ssl termination.

Explore Azure storage types and storage accounts to understand data storage options. Compare redundancy options like LRS, ZRS, GRS, and GZRS and premium versus standard storage.

Learn how Azure blob storage stores unstructured data in storage accounts, containers, and blobs. Understand hot, cold, and archival tiers, plus Azure Data Box migration and Storage Explorer access.

Explore Azure files and file sync, including file share structure, SMB/NFS access, tier options, and how Azure file sync caches shares on on-premises Windows servers for hybrid environments.

Enforce end-to-end Azure AD authentication, RBAC, and encryption at rest and in transit, including SAS-based access.

Explore configuring Azure virtual machines, including image options, sizing, storage, network and security settings, and learn about dedicated hosts and spot VMs for AZ-104 compute domain.

Explore Azure virtual machine scale sets to manage a load-balanced group of VMs with horizontal and vertical scaling, including auto scaling and scheduled scaling for high availability and resiliency.

Learn how ARM templates deploy cloud infrastructure with declarative JSON. Define parameters, variables, resources, and outputs to automate efficient, secure deployments across management groups, subscriptions, and resource groups.

Learn to create an Azure virtual machine by selecting a Windows Server Gen 2 image from the Azure Marketplace and configuring region, resource group, and size.

Explore Azure App Service as a managed, scalable HTTP hosting platform for web apps, APIs, and back ends, with multi-language support, App Service plans, auto scaling, DevOps readiness, and pricing.

Configure app service in azure by selecting runtime stacks, regions, and an app service plan; learn deployment slots, cloning settings, security with authentication and SSL, and backup options.

Discover how Azure containers enable lightweight, isolated app deployment with Docker and Azure Container Instance, while emphasizing security, minimal data storage, and straightforward management.

Explore Azure Kubernetes Service (AKS) and Kubernetes architecture, including clusters, control plane, nodes, pods, deployments, and manifests, plus security with RBAC and Azure AD integration.

Explore Azure Monitor, a resource for collecting logs and metrics from virtual machines, apps, and Azure Active Directory. Analyze data with Log Analytics and Application Insights, and set alerts.

Define and automate Azure alerts and alert rules, configure actions with action groups, and use log analytics workspaces to query, save, and export monitoring data.

Explore Azure backup center to manage backups with Recovery Services Vault, backup policies, and cross-region restore for Azure and on-premise data, including file shares and app service data.

Review the az-104 syllabus and course content, and prepare a topic checklist with six to eight weeks of study. Register on microsoft site; renewal is an open-book 20–25 question module.