AZ-104 Exam Study Guide (Azure Administrator)

The AZ-104 Azure Administrator exam will replace the older AZ-103 exam in September 2020. Since I received requests to continue to create study guides for the new Azure exams, I have prepared the AZ-104 Study Guide. This exam is in beta now

If you haven't read about the exam changes and how they will impact your certification journey, read here

This post contains a curated list of articles from Microsoft documentation for each objective of the AZ-104 exam. Please share the post within your circles so it helps them to prepare for the exam.

AZ-104 Azure Administrator Course (Online)

Whizlabs [AZ-104 Course]	AZ-104 Azure Administrator Course
Skylines Academy (AZ-104)	NEW! AZ-104: Azure Administrator
Pluralsight (Learning Path)	Azure Administrator Preparation [Free Trial]
Udemy	Administrator Role Certification Course

AZ-104 Azure Administrator Practice Test

Whizlabs Tests [AZ-104]	4 Practice Tests (a total of 220 questions)
Udemy Practice Tests	Azure Admin. (120 Practice Test Questions)

AZ-104 Azure Administrator Other Material

LinkedIn Learning [Free Trial]	Exam Tips: AZ-104 – Microsoft Azure Administrator
Skylines Labs	Microsoft AZ-104 Lab Guide
Amazon e-book (PDF)	Azure Administrator Exam Reference Book

In case, if you are looking for the older Azure Administrator exam, check out AZ-103 Study Guide. To view other Azure certificate study guides, click here

Full Disclosure: Some of the links in this post are affiliate links. I receive a commission when you purchase through them.

Looking for AZ-104 dumps? Read this!

Using az-104 exam dumps can get you permanently banned from taking any future Microsoft certificate exam. Read the FAQ page for more information. However, I strongly suggest you validate your understanding with practice questions.

Manage Azure Identities and Governance (15-20%)

Manage Azure AD objects

Create users and groups

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal

Manage user and group properties

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal

Manage device settings

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Perform bulk user updates

https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/

Manage guest accounts

https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

Configure Azure AD Join

https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains

Configure self-service password reset

https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr

Manage role-based access control (RBAC)

Create a custom role

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Provide access to Azure resources by assigning roles
o subscriptions ([Watch video] on Subscriptions & Accounts)
o resource groups
o resources (VM, disk, etc.)

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment

Interpret access assignments

https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments

Manage multiple directories

https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428

Manage subscriptions and governance

Configure Azure policies

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Configure resource locks

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Apply tags

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

[Watch video]: on Resource Groups & Tagging

Create and manage resource groups

Move resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

2. Remove RGs

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal

Manage subscriptions

Pluralsight Course on Managing Subscriptions

Configure Cost Management

https://www.youtube.com/watch?v=el4yN5cHsJ0

Configure management groups

https://docs.microsoft.com/en-us/azure/governance/management-groups/create

AZ-104 Microsoft Azure Administrator Exam Certification

Implement and Manage Storage (10-15%)

Manage storage accounts

Configure network access to the storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Create and configure storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Generate shared access signature

https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1

Manage access keys

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Implement Azure storage replication

MSDN Blog: Azure Storage Replication Implementation

Configure Azure AD Authentication for a storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app

Manage data in Azure Storage

Export from Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Import into Azure job

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs

Install and use Azure Storage Explorer

https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

Copy data by using AZCopy

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

Configure Azure files and Azure blob storage

Create an Azure file share

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Create and configure Azure File Sync service

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Configure Azure blob storage

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

Configure storage tiers for Azure blobs

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

Amazon link (affiliate)

Deploy and Manage Azure Compute Resources (25-30%)

Configure VMs for high availability and scalability

Check out this course on Azure VM

Configure high availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

https://www.youtube.com/watch?v=7tXoWN6Ucuw

Deploy and configure scale sets

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

Automate deployment and configuration of VMs

Modify Azure Resource Manager (ARM) template

https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource

Configure VHD template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized

Deploy from template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Save a deployment as an ARM template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

Automate configuration management by using custom script extensions

https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/

Create and configure VMs

Configure Azure Disk Encryption

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart

Move VMs from one resource group to another

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Manage VM sizes

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

Add data discs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

Configure networking

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

Redeploy VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows

Create and configure containers

Create and configure Azure Kubernetes Service (AKS)

https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Create and configure Azure Container Instances (ACI)

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Create and configure Web Apps

Create and configure App Service

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create and configure App Service Plans

https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage

Amazon link (affiliate)

Configure and Manage Virtual Networking (30-35%)

Implement and manage virtual networking

Create and configure VNET peering

https://www.youtube.com/watch?v=SKGsf6J4IVI

Configure private and public IP addresses, network routes, network interface, subnets, and virtual network

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network

Configure name resolution

Configure Azure DNS

https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Configure custom DNS settings

https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

Configure a private or public DNS zone

https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell

https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

Secure access to virtual networks

Create security rules

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Associate an NSG to a subnet or network interface

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Evaluate effective security rules

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Deploy and configure Azure Firewall

https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Deploy and configure Azure Bastion Service

https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

Configure load balancing

Configure Application Gateway

https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell

Configure an internal load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal

Configure load balancing rules

https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli

Configure a public load balancer

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell

Troubleshoot load balancing

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

Monitor and troubleshoot virtual networking

Monitor on-premises connectivity

https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/

Use Network resource monitoring

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor

Use Network Watcher

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create

Troubleshoot external networking

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

Troubleshoot virtual network connectivity

https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks

Integrate an on-premises network with an Azure virtual network

Create and configure Azure VPN Gateway

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell

Create and configure VPNs

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Configure ExpressRoute

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

Verify on premises connectivity

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Configure Azure Virtual WAN

https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan

Amazon link (affiliate)

Monitor and back up Azure resources (10-15%)

Monitor resources by using Azure Monitor

Configure and interpret metrics
o analyze metrics across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts

Configure Log Analytics
o implement a Log Analytics workspace
o configure diagnostic settings

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace

Query and analyze logs
o create a query
o save a query to the dashboard
o interpret graphs

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query

Set up alerts and actions
o create and test alerts
o create action groups
o view alerts in Azure Monitor
o analyze alerts across subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

Configure Application Insights

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start

Implement backup and recovery

Configure and review backup reports

https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

Perform backup and restore operations by using Azure Backup Service

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Create a Recovery Services Vault
o use soft delete to recover Azure VMs

https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault

https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/

Create and configure backup policy

https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest

Perform site-to-site recovery by using Azure Site Recovery

https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv

This brings us to the end of AZ-104 Study Guide

What do you think? Let me know in the Comments section if I have missed out on anything. Also, I love to hear from you how your preparation is going on!

In case you are looking for other Azure certification exams check out this page

Follow/Like ravikirans.com to receive updates

Sign up for Newsletter

Want to be notified as soon as I post? Subscribe to RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.

Sharing is Caring

2
4
6
Shares