Microsoft Certified: Azure Administrator Associate (AZ-104)

Manage Microsoft Entra users and groups including creating users and groups, managing properties, licenses, external users, and self-service password reset. Manage access to Azure resources including built-in Azure roles, role assignments at different scopes, and interpreting access assignments. Manage Azure subscriptions and governance including Azure Policy, resource locks, tags, resource groups, subscriptions, cost management with alerts and budgets, Azure Advisor recommendations, and management groups.

Configure access to storage including Azure Storage firewalls and virtual networks, shared access signature (SAS) tokens, stored access policies, access keys, and identity-based access for Azure Files. Configure and manage storage accounts including creation, Azure Storage redundancy, object replication, storage account encryption, and data management using Azure Storage Explorer and AzCopy. Configure Azure Files and Azure Blob Storage including file shares, containers, storage tiers, soft delete for blobs and containers, snapshots, blob lifecycle management, and blob versioning.

Automate deployment of resources using Azure Resource Manager (ARM) templates or Bicep files including interpreting, modifying, deploying templates, and exporting deployments. Create and configure virtual machines including VM creation, Azure Disk Encryption, moving VMs between resource groups/subscriptions/regions, managing VM sizes and disks, deploying to availability zones and availability sets, and configuring Azure Virtual Machine Scale Sets. Provision and manage containers including Azure Container Registry, Azure Container Instances, Azure Container Apps, and managing sizing and scaling. Create and configure Azure App Service including App Service plans, scaling, App Service creation, certificates and TLS, custom DNS mapping, backup, networking settings, and deployment slots.

Configure and manage virtual networks in Azure including creating and configuring virtual networks and subnets, virtual network peering, public IP addresses, user-defined network routes, and troubleshooting network connectivity. Configure secure access to virtual networks including network security groups (NSGs) and application security groups, evaluating effective security rules, implementing Azure Bastion, configuring service endpoints and private endpoints for Azure PaaS. Configure name resolution and load balancing including Azure DNS, internal or public load balancers, and troubleshooting load balancing.

Monitor resources in Azure including interpreting metrics in Azure Monitor, configuring log settings, querying and analyzing logs, setting up alert rules and action groups, configuring monitoring for virtual machines, storage accounts, and networks using Azure Monitor Insights, and using Azure Network Watcher and Connection Monitor. Implement backup and recovery including creating Recovery Services vault and Azure Backup vault, creating and configuring backup policies, performing backup and restore operations, configuring Azure Site Recovery, performing failover to secondary regions, and configuring reports and alerts for backups.