Microsoft Azure Administrator (Exam AZ-104)

Navigate the Azure portal, a web-based graphical user interface to log in, manage resources, and customize dashboards with themes, default views, and multiple dashboards for applications.

Manage Azure resources on the go with the Azure mobile app, checking virtual machines and resource health from a mobile device. Restart or connect to vm via rdp while traveling.

Explore the Azure cloud shell in the portal, initialize a storage account and file share, authenticate to your subscription, and run PowerShell and CLI commands without local installs.

Connect to your Azure subscription with Azure PowerShell, install the Az module, and manage resources with scripts, list virtual machines, and create resource groups for automated workflows.

Learn how Azure Resource Manager simplifies governance by grouping resources into resource groups, using declarative templates, tagging for billing, and applying RBAC across regions via portal, CLI, or API.

Use resource locks to prevent deletion at the resource or resource group level, applying a delete lock to protect items like databases while allowing other actions.

Demystify ARM templates and learn how to customize parameters, manage networks, and deploy resources—storage, public IP, network security groups, and a virtual machine—across regions.

Deploy a Windows VM in Azure using an ARM template; import the template, configure subscription, resource group, admin credentials, DNS label, OS, and VM size for repeatable deployments.

Create a container to store binary objects in an Azure storage account and apply lifecycle rules to move blobs, delete, or rehydrate archived blobs across hot, cool, and archive tiers.

Create a file share in an Azure storage account via the portal, then map it as a drive over SMB from Windows, Linux, or Mac using the given commands.

centralize file shares with the azure file sync service, creating an on-premises cached copy accessible via smb across multiple offices.

Create a virtual network in the Azure portal or via the command-line interface, configure address space and two subnets, and assign it to a resource group.

Manage private and public IP addresses in Azure virtual networks, with dynamic or static allocations, IP reservations, and on-premises routing via site-to-site VPN, for load balancers and gateways.

Create a network security group in the portal, attach it to a resource group, and configure inbound and outbound rules with priorities to control traffic.

Add up to 900 custom domains to a single Azure Active Directory tenant, verify ownership via DNS TXT or MX records, and set a primary domain for new objects.

Plan Azure virtual machines by considering virtual networks, naming conventions, region availability, and pricing to balance performance, proximity, and compliance.

Create an availability set to distribute virtual machines across fault and update domains, ensuring high availability during unplanned maintenance and outages through live migration, automatic recovery, and planned maintenance.

Learn how to create an availability set in the portal, configure fault and update domains, and deploy multiple Windows VMs for high availability in a single resource group.

Explore how virtual machine scale sets automatically deploy identical virtual machines to scale out and in with demand, enabling stateless deployments without pre provisioning and scaling to a thousand instances.

Learn how to use Azure virtual machine extensions to provision anti-malware and custom scripts, support desired state configuration, and deploy extensions during or after VM setup.

Use VNet peering to connect two virtual networks over the private Microsoft network, reducing latency and avoiding internet exposure, with regional and global options and differences in capabilities.

Explore ExpressRoute, a private, low-latency link from on-prem to Azure that supports data migration, business continuity, and disaster recovery without relying on the internet.

Learn how to create and configure an Azure load balancer in the portal, including front-end public or internal IPs, back-end pools, health probes, and routing rules.

Explore the Azure Monitor service in the portal, set up alert rules with action groups and email notifications, and analyze metrics and log analytics for virtual machines.

Explore how the Azure Network Watcher analyzes and troubleshoots virtual network traffic, showing topology, NSG rules, connection monitoring, IP flow verify, next hop, and packet capture.

Explore how Azure Active Directory delivers cloud-based identity and access management with multi-factor authentication, device registration, and self-service password reset, plus just-in-time privilege identity management and on-premises integration.

Join devices to Azure Active Directory to create trusted devices and enable single sign-on to Azure SaaS apps; support hybrid join for cloud and on-prem resources.

Configure self-service password reset in Azure Active Directory, assign who can reset, and select authentication methods; enable password writeback with Azure AD Connect for on-premises synchronization.