AZ-104 Microsoft Azure Administrator course with SIMULATIONS

Learn how assignments and simulations work, including opening simulations in a new tab, submitting, and the checkbox check-off, while understanding certificates aren't affected. Engage with hands-on practice and feedback.

Create a free Azure account by clicking start free, receive $200 credit for 30 days, access free services for 12 months, and log in at portal.azure.com.

Learn to convert a personal Azure account to a business account by changing the user principal name in Microsoft Entra ID and sign in with the new account.

Explore how Microsoft Entra ID stores and manages user identities, service principals, and device identities, including on-premises AD synchronization, portal options, and join and register scenarios.

Create user identities across three portals using Microsoft Entra ID. Add user principal names, passwords (with first login change), licenses, and profile attributes, and assign to groups or roles.

Create users in bulk by downloading a CSV template from the Azure portal bulk operations, fill details, and upload to enroll them via Entra ID or the Microsoft 365 portal.

Explore the four group types in intra ID: Microsoft 365 groups, distribution groups, mail enabled security groups, and security groups, and learn how they manage access, emails, and devices.

Create and manage Microsoft 365 groups in the admin center, including distribution lists and security groups, with owners, members, and privacy options.

Learn to create and manage groups in Microsoft intra ID via Azure portal, covering Microsoft 365 and security groups with dynamic rules and membership based on user properties and devices.

Explore Microsoft Entra ID licensing, including P1, P2, and free options, compare pricing and features, view licenses in portal and Microsoft 365 admin center, and understand pay-as-you-go licensing.

Invite external users as guests via portal.azure.com using Microsoft Entra ID, creating a guest invite and granting access to Azure resources, possibly through groups or roles.

Turn on self-service password reset (SSPR) for all users in the Azure portal, and configure authentication methods and password write-back for synced users.

Learn how to redo simulations after completing an assignment on Udemy by going to summary, returning to the assignment, opening instructions, and clicking the simulation link.

Gain a foundation in PowerShell with an intuitive verb-noun syntax, enabling bulk automation, remote administration, and scripting across servers and cloud services like Azure and Microsoft 365.

Install the Azure AZ commands from the PowerShell Gallery, handle Nougat prompts, and connect to your Azure environment with Connect-Az to manage resources like virtual machines, resource groups, and networks.

Microsoft Graph provides a single unified API endpoint for Microsoft 365 and Azure services, enabling URL-based access, OAuth 2.0, cross-platform automation, and replacing traditional PowerShell for modern operations.

Learn to connect PowerShell to Microsoft Graph for Entra ID management, view and create users, bulk import via CSV, assign licenses, and create groups.

Use Cloud Shell to run PowerShell or Azure CLI in a browser, with a storage account; switch between PowerShell and bash and use bash commands within PowerShell.

Learn to use the Azure CLI (bash) alongside PowerShell, follow the docs, and run az commands to create an Azure AD user with display name, password, and user principal name.

Install the Azure CLI locally on Windows or Mac and run it from PowerShell. Access Azure commands with az login, mirroring the cloud shell experience.

Explain Azure RBAC roles and Entra ID roles across Azure, Microsoft 365, and Entra ID, applying least privilege with scope from management groups to resources, plus PIM and JIT benefits.

Explore role-based access control in Azure, assigning security principals—users, groups, service principals, and managed identities—to roles defined with specific permissions, including activation, MFA, and temporary access via privileged identity management.

Explore how Azure RBAC applies across a resource hierarchy—from management groups to subscriptions and resource groups—and grant scoped access using IAM blades at each level.

Learn to manage Azure resource permissions by creating a resource group, assigning roles, and building a custom role for VM management, while understanding the control plane and data plane.

Apply the access control concepts by viewing effective rights for a resource, checking user access, and exploring role assignments, PIM eligibility, and deny assignments in Azure IAM.

Navigate portal.azure.com to manage subscriptions, add and configure billing accounts, budgets, alerts, and assign contributor roles via the IAM blade for pay-as-you-go, azure student, and imagine subscriptions.

Organize multiple Azure subscriptions by creating a root management group and linking subscriptions under it, using a Contoso example to categorize resources across regions.

Learn to estimate and manage Azure costs using the pricing calculator, view cost analysis by subscription and resource groups, set budgets and alerts, and apply Azure Advisor recommendations.

Enable resource groups as logical containers for Azure resources to manage RBAC and cost analysis. Span regions, cannot be nested, and deleting a group removes all contained resources.

Apply and manage tags on Azure resources using key-value pairs to organize assets, track costs, enable automation, and support governance, including searching and filtering by tags.

Explore how to apply read-only and delete locks to an Azure storage account within a resource group, preventing changes or deletions and illustrating lock removal.

Learn how azure policy enforces rules across your azure environment by applying allowed locations, tagging, encryption, and remediation; explore policy definitions, initiatives, and how compliance is measured and enforced.

Explore Azure storage accounts, their unique namespaces and endpoints, and how blobs, file shares, queues, and tables store and serve data with different redundancy options and performance tiers.

Learn to create and configure an Azure storage account in the Azure portal, selecting blob storage or Data Lake, and configure security, networking, data protection, and encryption.

configure Azure storage firewalls and virtual networks by managing public network access, selecting all networks or virtual networks, and using private endpoints with Microsoft or internet routing.

Discover how shared access signature tokens grant time-limited, permissioned access to Azure storage resources, enabling controlled access to blob containers and on-the-fly token generation for developers.

Discover how to configure stored access policies for containers, assign permissions and dates, edit policies on the fly, and leverage immutable blob storage with write-once, read-many for retention.

Enable administrative access to a storage account with two base64 encoded secret keys, and rotate keys when compromised.

Enable identity based access for Azure file shares in a storage account, using Active Directory Domain Services, intra domain services, intra Kerberos with synced identities, and set share level permissions.

Azure storage redundancy options, balancing cost and availability through synchronous and asynchronous replication across primary and secondary regions, including LRS, ZRS, GRS, and RA-enabled configurations.

Explore configuring storage redundancy in Azure, from adjusting an existing account to creating a new one with GRS, balancing primary in East US and secondary in West US.

Configure object replication between storage accounts by creating a destination container, selecting source and destination containers, and saving a policy with prefixes or everything, including cross-tenant replication.

Discover storage account encryption in Azure, including data at rest protection, on-the-fly decryption, and options for Microsoft managed keys or customer managed keys via Azure Key Vault.

Learn to manage data across Azure storage accounts with Azure Storage Explorer and AzCopy, including uploading to blob containers, navigating the storage browser, and using SAS tokens via PowerShell.

Configure Azure storage file shares to serve as a cloud file server via SMB, with mapped drives, authentication options, and tiered access plus soft delete and backups.

Create and configure blob containers within a storage account and organize items with directories. Upload files and control access levels using shared access tokens and IAM RBAC.

Identify the right storage tier for blob data in Azure: hot, cool, cold, and archive. Balance online access, latency, minimum retention, and cost to choose the most cost-efficient solution.

Configure soft delete for blobs and containers in a storage account to undelete deleted items within a retention period of 1 to 365 days, with optional permanent delete.

Explore Azure file snapshots and soft delete for Azure file shares to enable point-in-time backups, browse and restore specific files, and protect against accidental deletions.

Configure blob lifecycle management in a storage account to move blobs to cool, cold, or archive storage, or delete after specified days, based on last modified or created dates.

Configure blob versioning to automatically maintain previous versions with a data lifecycle to optimize costs and delete older versions after seven days.

Interpret ARM templates and Bicep to deploy repeatable Azure resources using declarative syntax, leveraging parameters, variables, and outputs for orchestration and sharing.

Learn to deploy a virtual machine using an Azure resource manager template by exporting, editing parameters like admin password and disk settings, and deploying to a resource group.

Install Visual Studio Code and the Bicep extension, create or modify a Bicep file with a subscription target scope, define a region parameter, and deploy via Azure CLI.

Export ARM templates and their corresponding Bicep files from resources, and convert ARM templates to Bicep in Visual Studio Code using the latest extension.