Exam AZ-104: Microsoft Azure Administrator
Manage Azure identities and governance (15-20%)
Manage Azure AD objects
• create users and groups
• manage user and group properties
• manage device settings
• perform bulk user updates
• manage guest accounts
• configure Azure AD Join
• configure self-service password reset
• NOT: Azure AD Connect; PIM
Manage role-based access control (RBAC)
create a custom role
• provide access to Azure resources by assigning roles
o subscriptions
o resource groups
o resources (VM, disk, etc.)
• interpret access assignments
• manage multiple directories
Manage subscriptions and governance
• configure Azure policies
• configure resource locks
• apply tags
• create and manage resource groups
o move resources
o remove RGs
• manage subscriptions
• configure Cost Management
• configure management groups
Implement and manage storage (10-15%)
Manage storage accounts
• configure network access to storage accounts
• create and configure storage accounts
• generate shared access signature
• manage access keys
• implement Azure storage replication
• configure Azure AD Authentication for a storage account
Manage data in Azure Storage
• export from Azure job
• import into Azure job
• install and use Azure Storage Explorer
• copy data by using AZCopy
Configure Azure files and Azure blob storage
• create an Azure file share
• create and configure Azure File Sync service
• configure Azure blob storage
• configure storage tiers for Azure blobs
Deploy and manage Azure compute resources (25-30%)
Configure VMs for high availability and scalability
• configure high availability
• deploy and configure scale sets
Automate deployment and configuration of VMs
• modify Azure Resource Manager (ARM) template
• configure VHD template
• deploy from template
• save a deployment as an ARM template
• automate configuration management by using custom script extensions
Create and configure VMs
• configure Azure Disk Encryption
• move VMs from one resource group to another
• manage VM sizes
• add data discs
• configure networking
• redeploy VMs
Create and configure containers
• create and configure Azure Kubernetes Service (AKS)
• create and configure Azure Container Instances (ACI)
• NOT: selecting an container solution architecture or product; container registry settings
Create and configure Web Apps
• create and configure App Service
• create and configure App Service Plans
• NOT: Azure Functions; Logic Apps; Event Grid
Configure and manage virtual networking (30-35%)
Implement and manage virtual networking
• create and configure VNET peering
• configure private and public IP addresses, network routes, network interface, subnets,
and virtual network
Configure name resolution
• configure Azure DNS
• configure custom DNS settings
• configure a private or public DNS zone
Secure access to virtual networks
• create security rules
• associate an NSG to a subnet or network interface
• evaluate effective security rules
• deploy and configure Azure Firewall
• deploy and configure Azure Bastion Service
• NOT: Implement Application Security Groups; DDoS
Configure load balancing
• configure Application Gateway
• configure an internal load balancer
• configure load balancing rules
• configure a public load balancer
• troubleshoot load balancing
• NOT: Traffic Manager and FrontDoor and PrivateLink
Monitor and troubleshoot virtual networking
• monitor on-premises connectivity
• use Network Performance Monitor
• use Network Watcher
• troubleshoot external networking
• troubleshoot virtual network connectivity
Integrate an on-premises network with an Azure virtual network
• create and configure Azure VPN Gateway
• create and configure VPNs
• configure ExpressRoute
• configure Azure Virtual WAN
Monitor and back up Azure resources (10-15%)
Monitor resources by using Azure Monitor
• configure and interpret metrics
o analyze metrics across subscriptions
• configure Log Analytics
o implement a Log Analytics workspace
o configure diagnostic settings
• query and analyze logs
o create a query
o save a query to the dashboard
o interpret graphs
• set up alerts and actions
o create and test alerts
o create action groups
o view alerts in Azure Monitor
o analyze alerts across subscriptions
• configure Application Insights
• NOT: Network monitoring
Implement backup and recovery
• configure and review backup reports
• perform backup and restore operations by using Azure Backup Service
• create a Recovery Services Vault
o use soft delete to recover Azure VMs
• create and configure backup policy
• perform site-to-site recovery by using Azure Site Recovery.
