AZ-104 (Microsoft Azure Administrator) Exam Study Guide

The AZ-104 Azure Administrator exam will replace the older AZ-103 exam in June 2020. Since I received requests to continue to create study guides for the new Azure exams, I have prepared the AZ-104 Study Guide, although the exam comes into beta only around March 2020.

If you haven’t read about the exam changes and how they will impact your certification journey, read here

This post contains a curated list of articles from Microsoft documentation for each objective of the AZ-104 exam. Please share the post within your circles so it helps them to prepare for the exam.

AZ-104 Course (Online Training)

Whizlabs [Learning Path]	Microsoft Azure Administrator Exam Certification
Pluralsight (Learning Path)	Azure Administrator Path
SkillShare (2 months free)	Microsoft Azure Administrator Certification
LinkedIn Learning (Free Trial)	Azure Cert. Prep. for Administrators [Learning Path]
Udemy	Administrator Role Certification Course

AZ-104 Practice Tests & Labs

Whizlabs Practice Tests	5 Practice Tests (a total of 275 questions)
Udemy Practice Tests	Azure Admin. (Labs + 180 Practice Tests)
Skylines Academy (Labs)	Labs for Azure Administrator Certification

AZ-104 Exam Reference Books (PDF)

Amazon

Exam Reference Book

Note: No study materials are available for AZ-104. Since most of the content from AZ-103 will be applicable for AZ-104, I am referring to them here. I will update this blog as and when the study resources are available.

To view other Azure Certificate Study Guides, check here

Full Disclosure: Some of the links in this post are affiliate links. I receive a commission when you purchase through them.

Manage Azure Identities and Governance (15-20%)

Manage Azure AD objects

Create users and groups

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal

Manage user and group properties

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal

Manage device settings

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Perform bulk user updates

https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/

Manage guest accounts

https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

Configure Azure AD Join

https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains

Configure self-service password reset

https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr

Manage role-based access control (RBAC)

Create a custom role

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Provide access to Azure resources by assigning roles
o subscriptions
o resource groups
o resources (VM, disk, etc.)

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment

Interpret access assignments

https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments

Manage multiple directories

https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428

Manage subscriptions and governance

Configure Azure policies

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Configure resource locks

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Apply tags

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Create and manage resource groups

Move resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

2. Remove RGs

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal

Manage subscriptions

Pluralsight Course on Managing Subscriptions

Configure Cost Management

https://www.youtube.com/watch?v=el4yN5cHsJ0

Configure management groups

https://docs.microsoft.com/en-us/azure/governance/management-groups/create

Check the FAQs on Azure Certification

Implement and Manage Storage (10-15%)

Manage storage accounts

Create and Configure Storage Accounts

Configure network access to the storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Create and configure storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Generate shared access signature

https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1

Manage access keys

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Implement Azure storage replication

MSDN Blog: Azure Storage Replication Implementation

Configure Azure AD Authentication for a storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app

Manage data in Azure Storage

Export from Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Import into Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs

Install and use Azure Storage Explorer

https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

Copy data by using AZCopy

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

Configure Azure files and Azure blob storage

Create an Azure file share

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Create and configure Azure File Sync service

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Configure Azure blob storage

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

Configure storage tiers for Azure blobs

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

Amazon link (affiliate)

Deploy and Manage Azure Compute Resources (25-30%)

Configure VMs for high availability and scalability

Check this free course on Azure VM

Configure high availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

https://www.youtube.com/watch?v=7tXoWN6Ucuw

Deploy and configure scale sets

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

Automate deployment and configuration of VMs

Modify Azure Resource Manager (ARM) template

https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource

Configure VHD template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized

Deploy from template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Save a deployment as an ARM template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

Automate configuration management by using custom script extensions

https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/

Create and configure VMs

Configure Azure Disk Encryption

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart

Move VMs from one resource group to another

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Manage VM sizes

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

Add data discs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

Configure networking

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

Redeploy VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows

Create and configure containers

Create and configure Azure Kubernetes Service (AKS)

https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Create and configure Azure Container Instances (ACI)

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Create and configure Web Apps

Create and configure App Service

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create and configure App Service Plans

https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage

Amazon link (affiliate)

Configure and Manage Virtual Networking (30-35%)

Implement and manage virtual networking

Create and configure VNET peering

https://www.youtube.com/watch?v=SKGsf6J4IVI

Configure private and public IP addresses, network routes, network interface, subnets, and virtual network

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network

Configure name resolution

Configure Azure DNS

https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Configure custom DNS settings

https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

Configure a private or public DNS zone

https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell

https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

Secure access to virtual networks

Create security rules

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Associate an NSG to a subnet or network interface

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Evaluate effective security rules

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Deploy and configure Azure Firewall

https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Deploy and configure Azure Bastion Service

https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

Configure load balancing

Configure Application Gateway

https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell

Configure an internal load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal

Configure load balancing rules

https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli

Configure a public load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell

Troubleshoot load balancing

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

Monitor and troubleshoot virtual networking

Monitor on-premises connectivity

https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/

Use Network resource monitoring

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor

Use Network Watcher

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create

Troubleshoot external networking

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

Troubleshoot virtual network connectivity

https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks

Integrate an on-premises network with an Azure virtual network

Create and configure Azure VPN Gateway

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell

Create and configure VPNs

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Configure ExpressRoute

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

Verify on premises connectivity

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Configure Azure Virtual WAN

https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan

Amazon link (affiliate)

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

Configure and interpret metrics
o analyze metrics across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts

Configure Log Analytics
o implement a Log Analytics workspace
o configure diagnostic settings

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace

Query and analyze logs
o create a query
o save a query to the dashboard
o interpret graphs

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query

Set up alerts and actions
o create and test alerts
o create action groups
o view alerts in Azure Monitor
o analyze alerts across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

Configure Application Insights

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start

Implement backup and recovery

Configure and review backup reports

https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

Perform backup and restore operations by using Azure Backup Service

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Create a Recovery Services Vault
o use soft delete to recover Azure VMs

https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault

https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/

Create and configure backup policy

https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest

Perform site-to-site recovery by using Azure Site Recovery

https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv

This brings us to the end of AZ-104 Study Guide

What do you think? Let me know in the Comments section if I have missed out on anything. Also, I love to hear from you how your preparation is going on!

In case you are looking for other Azure certification exams check out this page

Sign up for Newsletter

Want to be notified as soon as I post? Subscribe to RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.