Microsoft Azure Administrator

Course overview

Skills Measured

  • Manage Azure identities and governance (15–20%)
  • Implement and manage storage (15–20%)
  • Deploy and manage Azure compute resources (20–25%)
  • Configure and manage virtual networking (20-25%)
  • Monitor and maintain Azure resources (10–15%)

Functional groups

Manage Azure identities and governance (15–20%)

Manage Azure AD objects

  • Create users and groups
  • Manage licenses in Azure AD
  • Create administrative units
  • Manage user and group properties
  • Manage device settingsand device identity
  • Perform bulk updates
  • Manage guest accounts•Configure self-service password resetManage access control
  • Create custom role-based access control (RBAC) and Azure AD roles
  • Provide access to Azure resources by assigning rolesat different scopes
  • Interpret access assignmentsManage Azure subscriptions and governance
  • Configure and manage Azure Policy
  • Configure resource locks
  • Apply and manage tags on resources
  • Manage resource groups
  • Manage subscriptions
  • Manage costs by using alerts, budgets, and recommendations

Configure management groupsImplement and manage storage(15–20%)

  • Configure access to storage
  • Configure network access to storage accounts
  • Create and configure storage accounts
  • Generate shared access signaturetokens
  • Configure stored access policies
  • Manage access keys
  • Configure Azure AD authentication for a storage account
  • Configure storage encryption

Manage data in Azure storage accounts

  • Create import and export jobsManage data by usingAzure Storage ExplorerandAzCopy
  • Implement Azure Storage redundancy
  • Configure object replicationConfigure Azure Files and Azure Blob Storage
  • Create an Azure file share
  • Configure Azure Blob Storage
  • Configure storage tiers
  • Configure blob lifecycle management

Deploy and manage Azure compute resources (20–25%)

Automate deployment of resources by using templates

  • Modify an ARM template•Deploy a template
  • Save a deployment as an ARM template
  • Deploy virtual machine (VM) extensionsCreate and configure VMs
  • Create a VM•Manage images by using the Azure Compute Gallery
  • Configure Azure Disk Encryption
  • Move VMs from one resource group to another
  • Manage VM sizes•Add data disks
  • Configure VM networksettings
  • Configure VMavailabilityoptions
  • Deploy and configure VM scale setsCreate and configure containers
  • Configure sizing and scaling for Azure Container Instances
  • Configure container groups for Azure Container Instances
  • Create and configure Azure Container Apps
  • Configure storage for Azure Kubernetes Service (AKS)
  • Configure scaling for AKS•Configure network connections for AKS
  • Upgrade an AKS clusterCreate and configure an Azure App Service
  • Create anApp Service plan•Configure scaling settings in an App Service plan

Create an App Service

  • Secure an App Service
  • Configure custom domain names
  • Configure backup for an App Service
  • Configure networking settings

Configure deployment settingsConfigure and manage virtual networking(20–25%)

Configure virtual networks

  • Create and configure virtual networks and subnets
  • Create and configure virtual network peering
  • Configure private and public IP addresses
  • Configureuser-defined network routes
  • Configure Azure DNSConfigure secure access to virtual networks
  • Create and configure network security groups (NSGs) and application security groups (ASGs)
  • Evaluate effective security rules•ImplementAzure Bastion
  • Configure service endpoints on subnets
  • Configure private endpointsConfigure load balancing
  • Configure Azure Application Gateway
  • Configure an internalor publicload balancer
  • Troubleshoot load balancingMonitorvirtual networking
  • Monitor on-premises connectivity
  • Configure and use AzureMonitorfor networks
  • Use Azure Network Watcher•Troubleshoot external networking

Troubleshoot virtual network connectivityMonitor and maintainAzure resources (10–15%)

Monitor resources by using Azure Monitor

  • Configure and interpret metrics
  • Configure Azure Monitor Logs
  • Query and analyze logs
  • Set up alerts and actions

Configure monitoring of VMs, storage accounts, and networks by using VM insightsImplement backup and recovery

  • Create an AzureRecovery Services vault
  • Create an Azure Backup vault
  • Create and configure backup policy
  • Perform backup and restore operations by using Azure Backup
  • ConfigureAzure Site Recoveryfor Azure resources
  • Perform failover to a secondary regionby using Azure Site Recovery
  • Configure and review backup reports