Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== AZ-104 Study Guide 2024 ====== ====== Assorted Resources ====== * [[https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-104|Microsoft AZ-104 Study Guide]] * [[https://learn.microsoft.com/en-us/training/browse/|Microsoft Learn Modules]] * [[https://learn.microsoft.com/en-us/azure/?product=popular|MS Learn Azure Documentation]] * [[https://learn.microsoft.com/en-us/training/courses/az-104t00|Microsoft Learn AZ-104]] * [[https://www.examtopics.com/exams/microsoft/az-104/view/]] ---- * [[https://www.youtube.com/watch?v=0Knf9nub4-k|John Savill AZ-104 Study Cram]] * [[https://github.com/johnthebrit/CertificationMaterials|]] * [[https://tutorialsdojo.com/]] * [[https://www.exam-answer.com/]] ---- * [[https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/overview|Cloud Adoption Framework]] * [[https://learn.microsoft.com/en-us/credentials/certifications/azure-administrator/practice/assessment?assessment-type=practice&assessmentId=21&practice-assessment-type=certification|MS Learn Practice Exam]] * [[azure:AZ-104 Learning In-progress]] ====== Meta Notes ====== <callout type="warning"> There are somethings in the AZ-104 subject matter that are counterintuitive gotchas. In this guide those things will be called out in a box like the one containing this note. </callout> ====== Exam Topics ====== * Manage Azure identities and governance (20–25%) * Implement and manage storage (15–20%) * Deploy and manage Azure compute resources (20–25%) * Implement and manage virtual networking (15–20%) * Monitor and maintain Azure resources (10–15%) ====== Exam Topics Details ====== ====== §§§ Manage Azure identities and governance (20–25%) ====== * [[azure:az-104_2024:identity_and_access_management|Identity and Access Management]] ===== Manage Microsoft Entra users and groups ===== * Create users and groups * Manage user and group properties * Manage licenses in Microsoft Entra ID * Manage external users * Configure self-service password reset (SSPR) ===== Manage access to Azure resources ===== * Manage built-in Azure roles * Assign roles at different scopes * Interpret access assignments ===== Manage Azure subscriptions and governance ===== * Implement and manage Azure Policy * Configure resource locks * Apply and manage tags on resources * Manage resource groups * Manage [[azure:subscriptions]] * Manage costs by using alerts, budgets, and Azure Advisor recommendations\ * Configure management groups * [[azure:Azure Policy]] * Management groups * [[azure:resource locks]] * resource groups ====== §§§ Implement and manage storage (15–20%) ====== * [[azure:az-104_2024:Azure Storage]] ===== Configure access to storage ===== * [[azure:az-104_2024:Storage Access]] * Configure Azure Storage firewalls and virtual networks * Create and use [[https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview|shared access signature (SAS)]] tokens * Configure stored access policies * Manage access keys * Configure identity-based access for Azure Files ====== §§§ Deploy and manage Azure compute resources (20–25%) ====== ===== Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files ===== * [[azure:az-104_2024:Azure Compute]] * [[azure:az-104:Automated Deployments]] * [[https://learn.microsoft.com/en-us/training/paths/deploy-manage-resource-manager-templates/]] * [[https://learn.microsoft.com/en-us/training/paths/fundamentals-bicep/]] * Interpret an Azure Resource Manager template or a Bicep file * Modify an existing Azure Resource Manager template * Modify an existing Bicep file * Deploy resources by using an Azure Resource Manager template or a Bicep file * Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file * [[azure:ARM Templates]] * [[https://github.com/Azure/azure-quickstart-templates]] ===== Create and configure virtual machines ===== * Create a virtual machine * Configure Azure Disk Encryption * Move a virtual machine to another resource group, subscription, or region * Manage virtual machine sizes * Manage virtual machine disks * Deploy virtual machines to availability zones and availability sets * Deploy and configure an Azure Virtual Machine Scale Sets ===== Provision and manage containers in the Azure portal ===== * Create and manage an Azure container registry * Provision a container by using Azure Container Instances * Provision a container by using Azure Container Apps * Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps ===== Create and configure Azure App Service ===== * [[azure:Azure App Service]] * Provision an App Service plan * Configure scaling for an App Service plan * Create an App Service * Configure certificates and Transport Layer Security (TLS) for an App Service * Map an existing custom DNS name to an App Service * Configure backup for an App Service * Configure networking settings for an App Service * Configure deployment slots for an App Service ====== §§§ Implement and manage virtual networking (15–20%) ====== * [[azure:az-104_2024:azure_networking|Azure Networking]] ==== Configure and manage virtual networks in Azure ===== * [[azure:Virtual Networks]] * Create and configure virtual networks and subnets * Create and configure virtual network peering * Configure public IP addresses * Configure user-defined network routes * Troubleshoot network connectivity === Configure secure access to virtual networks === * Create and configure [[https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works|network security groups (NSGs)]] and application security groups * Evaluate effective security rules in NSGs * Implement Azure Bastion * Configure service endpoints for Azure platform as a service (PaaS) * Configure private endpoints for Azure PaaS === Configure name resolution and load balancing === * Configure Azure DNS * Configure an internal or public load balancer * Troubleshoot load balancing ====== §§§ Monitor and maintain Azure resources (10–15%) ====== * [[azure:az-104:monitoring_in_azure|Monitoring in Azure]] * [[azure:az-104:Backup and Recovery]] * [[azure:az-104:Azure Resource Management]] === Monitor resources in Azure === * Interpret metrics in Azure Monitor * Configure log settings in Azure Monitor * Query and analyze logs in Azure Monitor * Set up alert rules, action groups, and alert processing rules in Azure Monitor\ * Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights * Use Azure Network Watcher and Connection Monitor === Implement backup and recovery === * Create a Recovery Services vault * Create an Azure Backup vault * Create and configure a backup policy * Perform backup and restore operations by using Azure Backup * Configure Azure Site Recovery for Azure resources * Perform a failover to a secondary region by using Site Recovery * Configure and interpret reports and alerts for backups azure/az-104_2024/az-104_study_guide_2024.txt Last modified: 2024/10/16 19:45by mmuze