Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| azure:az-104_2024:az-104_study_guide_2024 [2024/10/03 12:48] – removed - external edit (Unknown date) 127.0.0.1 | azure:az-104_2024:az-104_study_guide_2024 [2024/10/16 19:45] (current) – [§§§ Monitor and maintain Azure resources (10–15%)] mmuze | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== AZ-104 Study Guide 2024 ====== | ||
| + | ====== Assorted Resources ====== | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | ---- | ||
| + | |||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | |||
| + | ---- | ||
| + | |||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | * [[azure: | ||
| + | |||
| + | ====== Meta Notes ====== | ||
| + | <callout type=" | ||
| + | There are somethings in the AZ-104 subject matter that are counterintuitive gotchas. In this guide those things will be called out in a box like the one containing this note. | ||
| + | </ | ||
| + | |||
| + | ====== Exam Topics ====== | ||
| + | * Manage Azure identities and governance (20–25%) | ||
| + | * Implement and manage storage (15–20%) | ||
| + | * Deploy and manage Azure compute resources (20–25%) | ||
| + | * Implement and manage virtual networking (15–20%) | ||
| + | * Monitor and maintain Azure resources (10–15%) | ||
| + | |||
| + | |||
| + | ====== Exam Topics Details ====== | ||
| + | ====== §§§ Manage Azure identities and governance (20–25%) ====== | ||
| + | * [[azure: | ||
| + | ===== Manage Microsoft Entra users and groups ===== | ||
| + | * Create users and groups | ||
| + | * Manage user and group properties | ||
| + | * Manage licenses in Microsoft Entra ID | ||
| + | * Manage external users | ||
| + | * Configure self-service password reset (SSPR) | ||
| + | ===== Manage access to Azure resources ===== | ||
| + | * Manage built-in Azure roles | ||
| + | * Assign roles at different scopes | ||
| + | * Interpret access assignments | ||
| + | ===== Manage Azure subscriptions and governance ===== | ||
| + | * Implement and manage Azure Policy | ||
| + | * Configure resource locks | ||
| + | * Apply and manage tags on resources | ||
| + | * Manage resource groups | ||
| + | * Manage [[azure: | ||
| + | * Manage costs by using alerts, budgets, and Azure Advisor recommendations\ | ||
| + | * Configure management groups | ||
| + | |||
| + | * [[azure: | ||
| + | * Management groups | ||
| + | * [[azure: | ||
| + | * resource groups | ||
| + | |||
| + | |||
| + | ====== §§§ Implement and manage storage (15–20%) ====== | ||
| + | * [[azure: | ||
| + | ===== Configure access to storage ===== | ||
| + | * [[azure: | ||
| + | * Configure Azure Storage firewalls and virtual networks | ||
| + | * Create and use [[https:// | ||
| + | * Configure stored access policies | ||
| + | * Manage access keys | ||
| + | * Configure identity-based access for Azure Files | ||
| + | ====== §§§ Deploy and manage Azure compute resources (20–25%) ====== | ||
| + | ===== Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files ===== | ||
| + | * [[azure: | ||
| + | * [[azure: | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | |||
| + | * Interpret an Azure Resource Manager template or a Bicep file | ||
| + | * Modify an existing Azure Resource Manager template | ||
| + | * Modify an existing Bicep file | ||
| + | * Deploy resources by using an Azure Resource Manager template or a Bicep file | ||
| + | * Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file | ||
| + | |||
| + | * [[azure:ARM Templates]] | ||
| + | * [[https:// | ||
| + | |||
| + | ===== Create and configure virtual machines ===== | ||
| + | * Create a virtual machine | ||
| + | * Configure Azure Disk Encryption | ||
| + | * Move a virtual machine to another resource group, subscription, | ||
| + | * Manage virtual machine sizes | ||
| + | * Manage virtual machine disks | ||
| + | * Deploy virtual machines to availability zones and availability sets | ||
| + | * Deploy and configure an Azure Virtual Machine Scale Sets | ||
| + | |||
| + | ===== Provision and manage containers in the Azure portal ===== | ||
| + | * Create and manage an Azure container registry | ||
| + | * Provision a container by using Azure Container Instances | ||
| + | * Provision a container by using Azure Container Apps | ||
| + | * Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps | ||
| + | |||
| + | ===== Create and configure Azure App Service ===== | ||
| + | * [[azure: | ||
| + | |||
| + | * Provision an App Service plan | ||
| + | * Configure scaling for an App Service plan | ||
| + | * Create an App Service | ||
| + | * Configure certificates and Transport Layer Security (TLS) for an App Service | ||
| + | * Map an existing custom DNS name to an App Service | ||
| + | * Configure backup for an App Service | ||
| + | * Configure networking settings for an App Service | ||
| + | * Configure deployment slots for an App Service | ||
| + | ====== §§§ Implement and manage virtual networking (15–20%) ====== | ||
| + | * [[azure: | ||
| + | ==== Configure and manage virtual networks in Azure ===== | ||
| + | * [[azure: | ||
| + | |||
| + | * Create and configure virtual networks and subnets | ||
| + | * Create and configure virtual network peering | ||
| + | * Configure public IP addresses | ||
| + | * Configure user-defined network routes | ||
| + | * Troubleshoot network connectivity | ||
| + | |||
| + | === Configure secure access to virtual networks === | ||
| + | * Create and configure [[https:// | ||
| + | * Evaluate effective security rules in NSGs | ||
| + | * Implement Azure Bastion | ||
| + | * Configure service endpoints for Azure platform as a service (PaaS) | ||
| + | * Configure private endpoints for Azure PaaS | ||
| + | |||
| + | === Configure name resolution and load balancing === | ||
| + | * Configure Azure DNS | ||
| + | * Configure an internal or public load balancer | ||
| + | * Troubleshoot load balancing | ||
| + | ====== §§§ Monitor and maintain Azure resources (10–15%) ====== | ||
| + | * [[azure: | ||
| + | * [[azure: | ||
| + | * [[azure: | ||
| + | |||
| + | === Monitor resources in Azure === | ||
| + | * Interpret metrics in Azure Monitor | ||
| + | * Configure log settings in Azure Monitor | ||
| + | * Query and analyze logs in Azure Monitor | ||
| + | * Set up alert rules, action groups, and alert processing rules in Azure Monitor\ | ||
| + | * Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights | ||
| + | * Use Azure Network Watcher and Connection Monitor | ||
| + | |||
| + | === Implement backup and recovery === | ||
| + | * Create a Recovery Services vault | ||
| + | * Create an Azure Backup vault | ||
| + | * Create and configure a backup policy | ||
| + | * Perform backup and restore operations by using Azure Backup | ||
| + | * Configure Azure Site Recovery for Azure resources | ||
| + | * Perform a failover to a secondary region by using Site Recovery | ||
| + | * Configure and interpret reports and alerts for backups | ||