AZ-104 : Microsoft Azure for Administrators

Using Azure Resource Manager

• Identify Azure Resource Manager features and use cases.
• Describe each Azure Resource Manager component and its usage.
• Organize your Azure resources with resource groups.
• Apply Azure Resource Manager locks.
• Move Azure resources between groups, subscriptions, and regions.
• Delete resources and resource groups.
• Apply and monitor resource limits.

Discovering Azure Cloud Shell

• Describe Azure Cloud Shell and its features.
• Determine if Azure Cloud Shell meets your organization’s needs.
• Use Azure Cloud Shell and preserve files across sessions.

Discovering Bash

• Learn about shells and Bash.
• Explore Bash command syntax.
• Review important Bash commands like ls, cat, and ps.
• Use I/O operators to redirect input and output.
• Update the operating system of a server.
• Identify and terminate unauthorized processes.
• Use Bash to filter Azure CLI output.

Discovering PowerShell

• Understand what PowerShell is and its purposes.
• Use commands to automate tasks.

Configuring Resources with Azure Resource Manager Templates

• List the benefits of Azure templates.
• Identify the components of Azure template schema.
• Specify parameters in Azure templates.
• Locate and use Azure quickstart templates.

Understanding Microsoft Entra ID

• Describe Microsoft Entra ID.
• Compare Microsoft Entra ID to Active Directory Domain Services (AD DS).
• Explain how Microsoft Entra ID is used as a directory for cloud applications.
• Describe Microsoft Entra ID P1 and P2.
• Describe Microsoft Entra Domain Services.

Configuring User and Group Accounts

• Configure user accounts and their properties.
• Create user accounts.
• Bulk import user accounts using a template.
• Configure group accounts and assignment types.

Configuring Subscriptions

• Determine the appropriate region to locate Azure services.
• Review the features and use cases of Azure subscriptions.
• Obtain an Azure subscription.
• Understand billing and features of different Azure subscriptions.
• Use Microsoft Cost Management for cost analysis.
• Determine when to use Azure resource tagging.
• Identify ways to reduce costs.

Configuring Azure Policy

• Create management groups to target policies and allocate budgets.
• Implement Azure Policy with policy and initiative definitions.
• Scope Azure policies and determine their compliance.

Configuring Role-Based Access Control (RBAC)

• Identify features and use cases for role-based access control.
• List and create role definitions.
• Create role assignments.
• Identify differences between Azure RBAC and Microsoft Entra roles.
• Manage access to subscriptions with RBAC.
• Review built-in Azure RBAC roles.

Creating Azure Users and Groups in Microsoft Entra ID

• Add users to Microsoft Entra ID.
• Manage access to applications and resources using Microsoft Entra groups.
• Provide guest access in Microsoft Entra business to business (B2B).

Securing Your Azure Resources with Azure RBAC

• Verify access to resources for yourself and others.
• Grant access to resources.
• View activity logs regarding Azure RBAC changes.

Enabling Password Reset with Microsoft Entra Self-Service Password Reset (SSPR)

• Determine whether to implement self-service password reset.
• Implement self-service password reset to meet your needs.
• Configure self-service password reset to customize the experience.

Configuring Storage Accounts

• Identify features and use cases of Azure storage accounts.
• Choose from different types of Azure storage and storage accounts.
• Select a storage replication strategy.
• Configure network access to storage accounts.

Configuring Azure Blob Storage

• Understand the purpose and benefits of Azure Blob Storage.
• Create and configure Azure Blob Storage accounts.
• Manage containers and blobs in Azure Blob Storage.
• Optimize blob storage performance and scalability.
• Implement lifecycle management policies to automate data movement and deletion.
• Determine the best pricing plans for your Azure Blob Storage.

Configuring Azure Storage Security

• Configure a Shared Access Signature (SAS), including URI parameters.
• Configure Azure Storage encryption.
• Implement customer-managed keys.
• Recommend opportunities to improve Azure Storage security.

Configuring Azure Files and Azure File Sync

• Identify storage for file shares and blob data.
• Configure Azure file shares and file share snapshots.
• Identify features and use cases of Azure File Sync.
• Identify Azure File Sync components and configuration steps.

Creating an Azure Storage Account

• Determine the number of storage accounts needed for your project.
• Identify the appropriate settings for each storage account.
• Create a storage account using the Azure portal.

Controlling Access to Azure Storage with Shared Access Signatures

• Identify features of a Shared Access Signature for Azure Storage.
• Identify features of stored access policies.
• Programmatically generate and use a Shared Access Signature to access storage.

Uploading, Downloading, and Managing Data with Azure Storage Explorer

• Discover features of Azure Storage Explorer.
• Install Azure Storage Explorer.
• Use Azure Storage Explorer to connect to Azure Storage services and manipulate stored data.

Configuring Virtual Machines

• Describe components and features of Azure virtual networks.
• Identify features and use cases of subnets and their implementation.
• Identify use cases for private and public IP addresses.
• Create a virtual network and assign an IP address.

Configuring Network Security Groups

• Determine when to use network security groups.
• Create network security groups.
• Implement and evaluate network security group rules.
• Describe the function of application security groups.

Configuring Azure Virtual Network Peering

• Identify use cases and product features of Azure virtual network peering.
• Configure the network to implement the Azure VPN gateway for transit connectivity.
• Extend peering using a hub-and-spoke network with user-defined routes and service chaining.

Configuring Network Routing and Endpoints

• Implement system routes and user-defined routes.
• Configure a custom route.
• Implement service endpoints.
• Identify features and use cases of Azure Private Link and endpoint services.

Configuring Azure Load Balancer

• Identify features and use cases of Azure Load Balancer.
• Implement public and internal Azure Load Balancers.
• Compare features of Load Balancer SKUs and configurations.
• Configure backend pools, load balancing rules, session persistence, and health probes.

Configuring Azure Application Gateway

• Identify features and use cases of Azure Application Gateway.
• Implement an Azure Application Gateway, including selecting a routing method.
• Configure gateway components such as listeners, health probes, and routing rules.

Designing an IP Addressing Scheme for Your Azure Deployment

• Identify features of private IP addressing for Azure virtual networks.
• Identify features of Azure public IP addressing.
• Determine IP addressing requirements when integrating with on-premises networks.

Distributing Your Services Across Azure Virtual Networks and Integrating with Virtual Network Peering

• Identify use cases for virtual network peering.
• Identify features and limitations of virtual network peering.
• Configure peering connections between virtual networks.

Hosting Your Domain on Azure DNS

• Configure Azure DNS to host your domain.

Managing and Controlling Traffic Flow in Your Azure Deployment with Routing

• Identify routing features of an Azure virtual network.
• Configure routing within a virtual network.
• Deploy a basic network virtual appliance.
• Configure routing to direct traffic through a network virtual appliance.

Enhancing Application Scalability and Resilience with Azure Load Balancer

• Identify features and capabilities of Azure Load Balancer.
• Deploy and configure an Azure Load Balancer.

Configuring Virtual Machines

• Determine responsibilities of cloud service providers and customers in a cloud environment.
• Configure virtual machine sizing and storage.
• Create a virtual machine in the Azure portal.
• Identify key considerations and factors involved in virtual machine planning, including workload requirements, resource allocation, and secure access.
• Practice deploying an Azure virtual machine and verify the configuration.

Configuring Virtual Machine Availability

• Implement availability sets and availability zones.
• Implement update and fault domains.
• Implement Azure Virtual Machine Scale Sets.
• Automatically scale virtual machines.

Configuring Azure App Service Plans

• Identify features and use cases of Azure App Service.
• Select an appropriate pricing tier for an Azure App Service plan.
• Scale an Azure App Service plan.

Configuring Azure App Service

• Identify features and use cases of Azure App Service.
• Create an app with Azure App Service.
• Configure deployment settings, including deployment slots.
• Secure your Azure App Service app.
• Configure custom domain names.
• Backup and restore your Azure App Service app.
• Configure Azure Application Insights.

Configuring Azure Container Instances

• Identify when to use containers or virtual machines.
• Identify features and use cases of Azure Container Instances.
• Implement Azure Container Instances.

Managing Virtual Machines with Azure CLI

• Create a virtual machine with Azure CLI.
• Resize virtual machines with Azure CLI.
• Perform basic management tasks using Azure CLI.
• Connect to a running virtual machine with SSH and Azure CLI.

Creating a Windows Virtual Machine in Azure

• Create a Windows virtual machine using the Azure portal.
• Connect to a running Windows virtual machine using Remote Desktop.
• Install software and change network settings on a virtual machine using the Azure portal.

Hosting a Web Application with Azure App Service

• Use the Azure portal to create an Azure App Service web app.
• Deploy your code to Azure App Service.
• Use development tools to create the code for a starter web application.

Configuring Virtual Machine Backups

• Identify features and use cases of different Azure backup methods.
• Configure virtual machine snapshots and backup options.
• Implement virtual machine backup and restore, including soft delete.
• Perform site-to-site recovery with Azure Site Recovery.

Configuring Azure Monitor

• Identify features and use cases of Azure Monitor.
• Configure and interpret metrics and logs.
• Identify components and data types of Azure Monitor.
• Configure the Azure Monitor activity log.

Configuring Log Analytics

• Identify features and use cases of Log Analytics.
• Create a Log Analytics workspace.
• Structure a Log Analytics query and review results.

Configuring Virtual Networks

• Describe components and features of Azure virtual networks.
• Identify features and use cases of subnets and their implementation.
• Identify use cases for private and public IP addresses.
• Create and determine resources that require private and public IP addresses.
• Create virtual networks.

Configuring Network Security Groups

• Determine when to use network security groups.
• Implement network security group rules.
• Evaluate effective network security group rules.
• Review the benefits of application security groups.

Configuring Azure DNS

• Identify features and use cases of domains, custom domains, and private zones.
• Verify custom domain names using DNS records.
• Implement DNS zones, DNS delegation, and DNS record sets.

Configuring Network Watcher

• Identify features and use cases of Azure Network Watcher.
• Configure diagnostic features like IP Flow Verify, Next Hop, and Network Topology.

Enhancing Incident Response with Alerts in Azure

• Configure alerts for events in your Azure resources based on metrics, log events, and activity log events.
• Use action groups in response to an alert and understand how to use alert processing rules to override action groups if necessary.

Analyzing Your Azure Infrastructure with Azure Monitor Logs

• Identify features and capabilities of Azure Monitor Logs.
• Create basic Azure Monitor Log queries to extract information from log data.

Monitoring Your Azure Virtual Machines with Azure Monitor

• Understand which monitoring data you need to collect from your virtual machine.
• Enable and view recommended alerts and diagnostics.
• Use Azure Monitor to collect and analyze host virtual machine metrics data.
• Use the Azure Monitor agent to collect guest virtual machine performance metrics and event logs.

Updated on 04/06/2024

Certification Title and Code: Administering Microsoft Azure Cloud Services – RS5375

Certifying Authority: Microsoft France

Date of Registration: 17/03/2021

In this training, we mix theory with technical workshops to quickly make you operational. Additionally, each participant receives course materials at the end of the training.

One of our consultant trainers conducts the training. With solid field experience, they make the learning process both interactive and enriching.

For assessment, the trainer regularly asks questions and uses various methods to continuously measure your progress. This approach promotes a dynamic and engaging learning experience.

After the training, we ask you to complete a satisfaction questionnaire. Your feedback helps us to maintain and constantly improve the quality of our training.

Finally, we offer the flexibility to deliver this training both in-person and remotely, and it can be customized to meet your company’s specific needs upon request.

Trainees in this training must have at least six months of practical experience in Azure administration, as well as solid knowledge. The necessary skills for this training include:

• Fundamental Azure services,
• Azure workloads,
• Security,
• Governance.

Additionally, participants must be proficient in using PowerShell, Azure CLI, the Azure portal, and Azure Resource Manager templates.

? Ensure you meet the required level by testing your skills with this free questionnaire.

To understand the content of this training, we recommend that you have already completed the “AZ-900 Azure Fundamentals” course.

It is highly recommended to take this course on a computer and have a dual-screen setup for more comfort.

You can register for one of our training courses up to two business days before it starts, if there are still available places and you signed quote.

If you have specific needs related to a disability, please do not hesitate to make a request; we are happy to adjust our services according to the type of disability.

This training prepares you for the AZ-104 “Azure Administrator” exam. We recommend scheduling the exam approximately one month after completing the training. The course materials and labs provided during the training will help you effectively review for your certification.

You can register for certification on the Microsoft site. If you would like to buy a certification voucher from us, or if you would like us to support you in this process, please contact us

Why Get Microsoft Azure Certified?

In a rapidly evolving technological world, staying competitive with your employer or clients is crucial. As an IT professional, you must stay attuned to the latest trends and continually educate yourself to keep up with these changes.

Microsoft Azure certifications are the ideal way to realign yourself with new concepts and practices and demonstrate your skills! Recognition from an industry leader like Microsoft will only enhance your profile and expertise.

How to Prepare for the AZ-104 Certification Exam?

Cellenza Training instructors emphasize that practice and revision are the foundation of good preparation!

Turning to external training organizations is often the best solution for preparing for and passing your AZ-104 certification. The Microsoft Azure Administration training course from Cellenza Training is designed to support you in obtaining Microsoft certifications. Guidance from Microsoft-certified trainers and the sharing of their real-world consulting experience is a significant advantage in your preparation.

During this 4-day training, the instructor provides everything you need to know and master to succeed in this exam. Structured educational resources and practical cases also energize this training and help you understand the key principles covered.