Course Overview
The Microsoft Azure Administrator (AZ-104) course is designed for IT professionals responsible for implementing, managing, and monitoring Microsoft Azure environments. This instructor-led course provides the knowledge and hands-on experience required to administer Azure subscriptions, identities, governance, storage, virtual networking, compute resources, security, monitoring, and backup solutions.
Participants will learn how to deploy and manage Azure resources using the Azure Portal, Azure PowerShell, Azure CLI, Azure Resource Manager (ARM), and Bicep. The course also covers Microsoft Entra ID, Azure governance, virtual machines, containers, Azure App Service, Azure Storage, Azure Backup, Microsoft Defender for Cloud, Azure Monitor, and Azure networking services.
Through extensive hands-on labs and real-world scenarios, learners will develop the practical skills needed to administer enterprise Azure environments and prepare for the Microsoft Certified: Azure Administrator Associate (AZ-104) certification exam.
Course Objective
Upon successful completion of this course, participants will be able to:
- Manage Azure subscriptions, management groups, resource groups, and governance.
- Configure and administer Microsoft Entra ID users, groups, and identity services.
- Implement Role-Based Access Control (RBAC), Azure Policy, and resource governance.
- Deploy and manage Azure resources using the Azure Portal, Azure PowerShell, Azure CLI, ARM Templates, and Bicep.
- Configure Azure Virtual Networks, VPN Gateway, ExpressRoute, Azure Firewall, and Private Link.
- Implement and manage Azure Storage accounts, Blob Storage, Azure Files, and storage security.
- Deploy and administer Azure Virtual Machines, VM Scale Sets, App Services, Azure Container Instances, and Azure Kubernetes Service (AKS).
- Protect workloads using Azure Backup, Recovery Services Vault, and Microsoft Defender for Cloud.
- Monitor Azure resources using Azure Monitor, Log Analytics, Application Insights, and Network Watcher.
- Prepare for the Microsoft Certified: Azure Administrator Associate (AZ-104) certification exam.
Pre-requisites
Participants should have:
- Basic understanding of cloud computing concepts.
- Experience with operating systems, networking, and virtualization.
- Knowledge of TCP/IP, DNS, VPNs, and firewalls.
- Familiarity with PowerShell or Azure CLI.
- Basic understanding of identity management concepts.
- Recommended: Microsoft Azure Fundamentals (AZ-900) certification or equivalent knowledge.
Course Curriculum
- Microsoft Entra ID architecture
- Users and Groups
- Administrative Units
- Self-Service Password Reset (SSPR)
- Multi-Factor Authentication (MFA)
- Conditional Access
- Managed Identities
- Azure Subscriptions
- Management Groups
- Resource Groups
- Resource Locks
- Tags
- Azure Policy
- Azure Blueprints (concept)
- Azure Cost Management
- Azure Advisor
- Role-Based Access Control (RBAC)
- Azure Portal
- Azure Cloud Shell
- Azure PowerShell
- Azure CLI
- Azure Resource Manager (ARM)
- Bicep
- Resource deployment
- Manage Microsoft Entra ID
- Configure RBAC
- Implement Azure Policy
- Deploy Azure resources using ARM and Bicep
- Virtual Networks
- Subnets
- Public and Private IP Addresses
- Azure DNS
- Private DNS Zones
- Network Security Groups (NSGs)
- Azure Firewall
- Azure Bastion
- Private Link
- Private Endpoints
- VNet Peering
- VPN Gateway
- Site-to-Site VPN
- Point-to-Site VPN
- ExpressRoute
- Virtual WAN
- User Defined Routes (UDRs)
- Azure Load Balancer
- Azure Application Gateway
- Web Application Firewall (WAF)
- Traffic routing strategies
- Configure VNets and NSGs
- Implement VPN Gateway
- Deploy Azure Load Balancer
- Configure Application Gateway
- Storage Accounts
- Blob Storage
- Azure Files
- Azure Queue Storage
- Azure Tables
- Storage Replication
- Shared Access Signatures (SAS)
- Lifecycle Management
- Storage Security
- Storage Explorer
- Virtual Machine deployment
- Availability Sets
- Availability Zones
- Virtual Machine Scale Sets
- Managed Disks
- VM Extensions
- Azure Bastion access
- Deploy Storage Accounts
- Configure Blob Storage
- Deploy and manage Virtual Machines
- Configure VM Scale Sets
- App Service Plans
- Web Apps
- Deployment Slots
- Scaling Applications
- Azure Container Instances (ACI)
- Azure Kubernetes Service (AKS)
- Container deployment
- Container management
- Azure SQL Database
- Azure SQL Managed Instance
- Azure Synapse Analytics
- Database security
- Backup and recovery
- Deploy Web Apps
- Deploy Azure Container Instances
- Create AKS Cluster
- Configure Azure SQL Database
- Azure Monitor
- Log Analytics
- Azure Alerts
- Action Groups
- Application Insights
- Network Watcher
- Workbooks
- Performance monitoring
- Microsoft Defender for Cloud
- Azure Key Vault
- Backup and Restore
- Recovery Services Vault
- Azure Site Recovery
- Security recommendations
- Azure Migrate
- Business continuity planning
- Migration strategies
- Cost optimization
- Best practices
- AZ-104 certification preparation
- Practice scenarios and review
- Configure Azure Monitor
- Create Alerts
- Configure Azure Backup
- Implement Microsoft Defender for Cloud
