AZ-104T00: Microsoft Azure Administrator

Prepare to pass the AZ-104: Microsoft Azure Administrator Certification Exam in an immersive 4-day course.

Web 1920 – 86-min

Course Description

This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.

Who Should Attend?

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.


About this course

Course Outline

  • Manage Azure identities and governance (15–20%)

  • Implement and manage storage (15–20%)

  • Deploy and manage Azure compute resources (20–25%)

  • Configure and manage virtual networking (20–25%)

  • Monitor and maintain Azure resources (10–15%)

Manage Azure identities and governance (15–20%)

Manage Azure AD objects

  • Create users and groups

  • Manage licenses in Azure AD

  • Create administrative units

  • Manage user and group properties

  • Manage device settings and device identity

  • Perform bulk updates

  • Manage guest accounts

  • Configure self-service password reset

Manage access control

  • Create custom role-based access control (RBAC) and Azure AD roles

  • Provide access to Azure resources by assigning roles at different scopes

  • Interpret access assignments

Manage Azure subscriptions and governance

  • Configure and manage Azure Policy

  • Configure resource locks

  • Apply and manage tags on resources

  • Manage resource groups

  • Manage subscriptions

  • Manage costs by using alerts, budgets, and recommendations

  • Configure management groups

Implement and manage storage (15–20%)

Configure access to storage

  • Configure network access to storage accounts

  • Create and configure storage accounts

  • Generate shared access signature tokens

  • Configure stored access policies

  • Manage access keys

  • Configure Azure AD authentication for a storage account

  • Configure storage encryption

Manage data in Azure storage accounts

  • Create import and export jobs

  • Manage data by using Azure Storage Explorer and AzCopy

  • Implement Azure Storage redundancy

  • Configure object replication

Configure Azure Files and Azure Blob Storage

  • Create an Azure file share

  • Configure Azure Blob Storage

  • Configure storage tiers

  • Configure blob lifecycle management

Deploy and manage Azure compute resources (20–25%)

Automate deployment of resources by using templates

  • Modify an ARM template

  • Deploy a template

  • Save a deployment as an ARM template

  • Deploy virtual machine (VM) extensions

Create and configure VMs

  • Create a VM

  • Manage images by using the Azure Compute Gallery

  • Configure Azure Disk Encryption

  • Move VMs from one resource group to another

  • Manage VM sizes

  • Add data disks

  • Configure VM network settings

  • Configure VM availability options

  • Deploy and configure VM scale sets

Create and configure containers

  • Configure sizing and scaling for Azure Container Instances

  • Configure container groups for Azure Container Instances

  • Create and configure Azure Container Apps

  • Configure storage for Azure Kubernetes Service (AKS)

  • Configure scaling for AKS

  • Configure network connections for AKS

  • Upgrade an AKS cluster

Create and configure an Azure App Service

  • Create an App Service plan

  • Configure scaling settings in an App Service plan

  • Create an App Service

  • Secure an App Service

  • Configure custom domain names

  • Configure backup for an App Service

  • Configure networking settings

  • Configure deployment settings

Configure and manage virtual networking (20–25%)

Configure virtual networks

  • Create and configure virtual networks and subnets

  • Create and configure virtual network peering

  • Configure private and public IP addresses

  • Configure user-defined network routes

  • Configure Azure DNS

Configure secure access to virtual networks

  • Create and configure network security groups (NSGs) and application security groups (ASGs)

  • Evaluate effective security rules

  • Implement Azure Bastion

  • Configure service endpoints

  • Configure private endpoints

Configure load balancing

  • Configure Azure Application Gateway

  • Configure an internal or public load balancer

  • Troubleshoot load balancing

Monitor virtual networking

  • Monitor on-premises connectivity

  • Configure and use Azure Monitor for networks

  • Use Azure Network Watcher

  • Troubleshoot external networking

  • Troubleshoot virtual network connectivity

Monitor and maintain Azure resources (10–15%)

Monitor resources by using Azure Monitor

  • Configure and interpret metrics

  • Configure Azure Monitor Logs

  • Query and analyze logs

  • Set up alerts and actions

  • Configure monitoring of VMs, storage accounts, and networks by using VM insights

Implement backup and recovery

  • Create an Azure Recovery Services vault

  • Create an Azure Backup vault

  • Create and configure backup policy

  • Perform backup and restore operations by using Azure Backup

  • Configure Azure Site Recovery for Azure resources

  • Perform failover to a secondary region by using Azure Site Recovery

  • Configure and review backup reports


Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.

  • Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.

  • Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.

  • Understanding of Active Directory concepts, including users, groups, and role-based access control.

  • Understanding of resilience and disaster recovery, including backup and restore operations.


This will be a virtual event hosted on Microsoft Teams. In the Microsoft Teams platform and sessions, your name, email address, or title may be viewable by other participants. By joining this event, you agree to this experience. 

Need to Train a Team?

 Contact a Cloud Training Specialist to schedule a custom training event for your team!