Azure AZ-104 Study Guide and Exam Discount Code

Manage Azure identities and governance (15-20%)
-----------------------------------------------


Add or delete users using Azure Active Directory
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory
https://docs.microsoft.com/en-us/powershell/azure/active-directory/new-user-sample
https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduser

manage user and group properties
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal

manage device settings
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/devices/manage-stale-devices

perform bulk user updates
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-bulk-import-members

manage guest accounts
https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b
https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-guest-access-with-access-reviews
https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

configure Azure AD Join
https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan
https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains

configure self-service password reset
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing

Manage role-based access control (RBAC)

create a custom role
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-cli

provide access to Azure resources by assigning roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

interpret access assignments
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-list-portal
https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments

manage multiple directories
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-directory-independence

Manage subscriptions and governance

configure Azure policies
https://docs.microsoft.com/en-us/azure/governance/policy/overview
https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

configure resource locks
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

apply tags
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources

create and manage resource groups
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resource-groups-portal
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resources-powershell

manage subscriptions
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/switch-azure-offer

configure Cost Management
https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview
https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/quick-acm-cost-analysis

configure management groups
https://docs.microsoft.com/en-us/azure/governance/management-groups/create
https://docs.microsoft.com/en-us/azure/governance/management-groups/manage


Implement and manage storage (10-15%)
-------------------------------------


Manage storage accounts
configure network access to storage accounts
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

create and configure storage accounts
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-upgrade

generate shared access signature
https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

manage access keys
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage

implement Azure storage replication
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

configure Azure AD Authentication for a storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad

Manage data in Azure Storage
export from Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

import into Azure job
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs

install and use Azure Storage Explorer
https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

copy data by using AZCopy
https://docs.microsoft.com/en-us/cli/azure/what-is-azure-cli
https://docs.microsoft.com/en-us/cli/azure/get-started-with-azure-cli

Configure Azure files and Azure blob storage
create an Azure file share
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-portal
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

create and configure Azure File Sync service
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-planning
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-extend-servers

configure Azure blob storage
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

configure storage tiers for Azure blobs
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers


Deploy and manage Azure compute resources (25-30%)
--------------------------------------------------


Configure VMs for high availability and scalability
configure high availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

deploy and configure scale sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview

Automate deployment and configuration of VMs
modify Azure Resource Manager (ARM) template
https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template

configure VHD template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized-portal

deploy from template
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal

save a deployment as an ARM template
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

automate configuration management by using custom script extensions
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-linux

configure Azure Disk Encryption
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

move VMs from one resource group to another
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

manage VM sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/resize-vm

add data discs
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

configure networking
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-common-network-ref
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/nsg-quickstart-portal
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/multiple-nics

redeploy VMs
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows

Create and configure containers
create and configure Azure Kubernetes Service (AKS)
https://docs.microsoft.com/en-us/azure/aks/intro-kubernetes
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

create and configure Azure Container Instances (ACI)
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart-portal
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Create and configure Web Apps
create and configure App Service
https://docs.microsoft.com/en-us/azure/app-service/overview
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

create and configure App Service Plans
https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage


Configure and manage virtual networking (30-35%)
------------------------------------------------

Implement and manage virtual networking
create and configure VNET peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#vnet-peering
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal
https://docs.microsoft.com/en-us/azure/virtual-network/create-peering-different-deployment-models
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints

configure private and public IP addresses, network routes, network interface, subnets, and virtual network
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview
https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-portal
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#networking-limits
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-addresses
https://docs.microsoft.com/en-us/azure/virtual-network/associate-public-ip-address-vm
https://docs.microsoft.com/en-us/azure/virtual-network/subnet-extension
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-vm

Configure name resolution
configure Azure DNS
https://docs.microsoft.com/en-us/azure/dns/dns-overview
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview
https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal
https://docs.microsoft.com/en-us/azure/dns/dns-faq

configure custom DNS settings
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances
https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

configure a private or public DNS zone
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-portal

Secure access to virtual networks
create security rules
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

associate an NSG to a subnet or network interface
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

evaluate effective security rules
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

deploy and configure Azure Firewall
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

deploy and configure Azure Bastion Service
https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

Configure load balancing
configure Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/configuration-overview

configure an internal load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal

configure load balancing rules
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-ilb-arm-ps

configure a public load balancer
https://docs.microsoft.com/en-us/azure/load-balancer/quickstart-load-balancer-standard-public-portal

troubleshoot load balancing
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

Monitor and troubleshoot virtual networking
monitor on-premises connectivity
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-diagnose-on-premises-connectivity

use Network Performance Monitor
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor-performance-monitor

use Network Watcher
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

troubleshoot external networking
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-troubleshoot-manage-cli

troubleshoot virtual network connectivity
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-connectivity-portal

Integrate an on-premises network with an Azure virtual network
create and configure Azure VPN Gateway
https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal

create and configure VPNs
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

configure ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

configure Azure Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-site-to-site-portal


Monitor and back up Azure resources (10-15%)
--------------------------------------------

Monitor resources by using Azure Monitor
configure and interpret metrics
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-monitor-azure-resource

configure Log Analytics
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal

query and analyze logs
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview

set up alerts and actions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-dynamic-thresholds
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric-logs

configure Application Insights
https://docs.microsoft.com/en-us/azure/azure-monitor/app/powershell

Implement backup and recovery
configure and review backup reports
https://docs.microsoft.com/en-us/azure/backup/configure-reports

perform backup and restore operations by using Azure Backup Service
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
https://docs.microsoft.com/en-us/azure/backup/tutorial-restore-disk

create a Recovery Services Vault
https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault

create and configure backup policy
https://docs.microsoft.com/en-us/azure/backup/backup-azure-manage-vms

perform site-to-site recovery by using Azure Site Recovery
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
https://docs.microsoft.com/en-us/azure/site-recovery/vmware-physical-secondary-disaster-recovery