AZ-104T00 Azure Administrator Course Guide
AZ-104T00 Azure Administrator Course Guide
COURSE DATASHEET
Course description
This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the
infrastructure, configure virtual networking, connect Azure and on premises sites, manage network traffic, implement
storage solutions, create, and scale virtual machines, implement web apps and containers, back up and share data, and
monitor your solution.
Audience
This course is for Azure Administrators. Azure Administrators manage the cloud services that span storage, networking,
and compute cloud capabilities, with a deep understanding of each service across the full IT lifecycle. They take end user
requests for new cloud applications and make recommendations on services to use for optimal performance and scale,
as well as provision, size, monitor and adjust as appropriate. This role requires communicating and coordinating with
vendors. Azure Administrators use the Azure Portal and as they become more proficient they use PowerShell and the
Command Line Interface.
The course materials available from Microsoft Learn for Educators are optimized for higher education instructors or
instructors that teach in similar education settings (for example, early college programs in secondary schools, workforce
training programs, and adult education, or continuing education programs). The Microsoft Official Course and
certification exam will be localized into French, German, Japanese, Korean, Simplified Chinese, and Spanish.
Learning objectives
After completing this course, students will be able to:
• Secure identities with Azure Active Directory and users and groups.
• Manage subscriptions, accounts, Azure policies, and Role Based Access Control.
• Administer Azure using the Resource Manager, Azure portal, Cloud Shell, Azure PowerShell, CLI, and ARM
templates.
• Configure virtual networks including planning, IP addressing, Azure DNS, Network Security Groups, and Azure
Firewall.
• Configure intersite connectivity solutions like VNet Peering, virtual network gateways, and Site to Site VPN
connections.
• Manage network traffic using network routing and service endpoints, Azure load balancer, and Azure Application
Gateway.
• Implement, manage, and secure Azure storage accounts, blob storage, and Azure files with File Sync.
• Plan, create, and scale virtual machines.
• Administer Azure App Service, Azure Container Instances, and Kubernetes.
• Backup files, folders, and virtual machines.
• Monitor the Azure infrastructure with Azure Monitor, Azure alerts, Log Analytics, and Network Watcher.
COURSE DATASHEET
Exam Relationship
This course is directly mapped to and supports learning for the AZ 104 Microsoft Azure Administrator certification exam.
The table below outlines the relative weight percentages for each area of the exam. The higher the percentage, the more
questions students are likely to see in that area.
Course Materials
In addition to this course datasheet the following course materials are available through Microsoft Learn for Educators:
• Microsoft Official Course: Eleven, standalone modules. The modules are sub divided into shorter lessons and
facilitated through PowerPoint slide decks that include lecture topics, instructor notes, demonstrations, and hands
on activities..
• Educator Teaching Guide: Guide for educators who plan to implement the course in academic settings. It includes
detailed explanations of the course materials, technical requirements, and setup. It also includes recommended
resources for preparing for the certification exam, accommodating students, and remote teaching.
• Online Training: Self-paced online learning content on Microsoft Learn that aligns directly to AZ 104 Microsoft
Azure Administrator and to the Microsoft Official Course. Each module stands alone and includes explanations of
technical concepts and knowledge checks.
Flexible Format
The course is designed to enable higher education instructors to deliver a complete module from the Microsoft Official
Course during 1-2 class meetings and then direct students to complete the aligned online learning on Microsoft Learn.
However, the modules and online learning have a flexible design that includes standalone lessons and units. This allows
instructors to easily modify the delivery format, supplement the content, or integrate the course with other curricula.
Appendix A
The following table provides a snapshot of the content included in the instructor led course modules, detailed timing,
and a link to the aligned segments of the Online Training on Microsoft Learn:
Module 3: Lesson 1: Configure Azure Resources with AZ-104: Prerequisites for Azure
Administer Azure Tools administrators - Learn | Microsoft Docs
Resources Lesson 2: Use Azure Resource Manager (Learning Path)
2 – 3 hours Lesson 3: Configure Resources with ARM
Templates
Module 4: Lesson 1: Configure Virtual Networks AZ-104: Configure and manage virtual
Administer Virtual Lesson 2: Configure Network Groups networks for Azure administrators -
Networking Lesson 3: Configure Azure Firewall Learn | Microsoft Docs (Learning Path)
2 – 3 hours
Module 5: Lesson 1: Configure VNet Peering AZ-104: Configure and manage virtual
Administer Intersite Lesson 2: Configure VPN Gateway networks for Azure administrators -
Connectivity Lesson 3: Configure ExpressRoute and Virtual Learn | Microsoft Docs (Learning Path)
2 – 3 hours WAN
Module 6: Lesson 1: Configure Network Routing and AZ-104: Configure and manage virtual
Administer Network Endpoints networks for Azure administrators -
Traffic Lesson 2: Configure Azure Load Balancer Learn | Microsoft Docs (Learning Path)
2 – 3 hours Lesson 3: Configure Azure Application
Gateway
Module 8: Lesson 1: Configure Virtual Machines AZ-104: Deploy and manage Azure
Administer Azure Lesson 2: Configure Virtual Machine compute resources - Learn | Microsoft
Virtual Machines Availability Docs (Learning Path)
3 - 4 hours Lesson 3: Configure Virtual Machine
Extensions
Module 9: Lesson 1: Configure Azure App Service Plans AZ-104: Deploy and manage Azure
Administer PaaS Lesson 2: Configure Azure App Service compute resources - Learn | Microsoft
Compute Options Lesson 3: Configure Azure Container Docs (Learning Path)
3 - 4 hours Instances
Lesson 4: Configure Azure Kubernetes
Module 10: Lesson 1: Configure File and Folder Backups AZ-104: Monitor and back up Azure
Administer Data Lesson 2: Configure Virtual Machine Backups resources - Learn | Microsoft Docs
Protection (Learning Path)
2 – 3 hours
Module 11: Lesson 1: Configure Azure Monitor AZ-104: Monitor and back up Azure
Administer Monitoring Lesson 2: Configure Azure Alerts resources - Learn | Microsoft Docs
2 – 3 hours Lesson 3: Configure Log Analytics (Learning Path)
Lesson 4: Configure Network Watcher
Appendix B
Extended outline
This outline provides detailed information about the content included in the instructor led course modules and the
aligned segments of the Online Training on Microsoft Learn.
Module and Lesson Key topics In class demos Aligned Online Training
description and labs on GitHub on Microsoft Learn
Lesson 2: • Introduction
Configure User • Create User Accounts
and Group • Manage User Accounts
Accounts
• Create Bulk User
Accounts
• Create Group Accounts
• Create Administrative
Units
• Demonstration - Users
and Groups
• Knowledge Check
• Summary and Resources
Lesson 2: • Introduction
Configure • Create Management
Azure Policy Groups
• Implement Azure
Policies
• Create Azure Policies
• Create Policy Definitions
• Create Initiative
Definitions
• Scope the Initiative
Definition
• Determine Compliance
• Demonstration -Azure
Policy
• Knowledge Check
• Summary and Resources
• Introduction
Lesson 3: • Implement Role Based
Configure Role Access Control
Based Access • Create a Role Definition
Control
• Create a Role
Assignment
• Compare Azure RBAC
Roles to Azure AD Roles
• Apply RBAC
Authentication
• Determine Azure RBAC
Roles
• Demonstration - Azure
RBAC
• Knowledge check
• Summary and Resources
Lesson 2: • Introduction
Use Azure • Review Resource
Resource Manager Benefits
Manager • Review Azure Resource
Terminology
• Create Resource Groups
• Create Resource
Manager Locks
• Reorganize Azure
Resources
• Remove Resources and
Resource Groups
• Determine Resource
Limits
• Demonstration -
Resource Manager
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure • Review ARM Template
Resources with Advantages
ARM templates • Explore the ARM
Template Schema
• Explore the ARM
Template Parameters
• Review QuickStart
Templates
• Demonstration -
QuickStart Templates
• Demonstration Run
Templates with
PowerShell
• Knowledge Check
• Summary and Resources
Module 4: Lesson 1: • Introduction 04 - Implement Configure virtual
Administer Configure • Plan Virtual Networks Virtual Networking networks - Learn |
Virtual Virtual • Create Subnets Microsoft Docs
Networking Networks • Create Virtual Networks Demos in the MCT
In this module, • Plan IP Addressing Download Center Configure network
you will learn • Create Public IP handout. security groups - Learn |
about virtual Addresses Microsoft Docs
networks, network • Associate Public IP
security groups, Addresses Configure Azure
Azure Firewall, and • Associate Private IP Firewall - Learn |
Azure DNS. Addresses Microsoft Docs
• Demonstration - Create
Virtual Networks Configure Azure DNS -
• Knowledge Check Learn | Microsoft Docs
• Summary and Resources
Lesson 2: • Introduction
Configure • Implement Network
Network Security Groups
Security Groups • Determine NSG Rules
• Determine NSG Effective
Rules
• Create NSG Rules
• Demonstration - NSGs
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure • Determine Azure Firewall
Azure Firewall Uses
• Create Azure Firewalls
• Create Azure Firewall
Rules
• Knowledge Check
• Summary and Resources
Lesson 4: • Introduction
Configure • Identify Domains and
Azure DNS Custom Domains
• Verify Custom Domain
Names
• Create Azure DNS Zones
• Delegate DNS Domains
• Add DNS Record Sets
• Plan for Private DNS
Zones
• Determine Private Zone
Scenarios
• Demonstration - DNS
Name Resolution
• Knowledge check
• Summary and Resources
Module 5: Lesson 1: • Introduction 05 - Implement Configure virtual
Administer Configure VNet • Determine VNet Peering Intersite network peering - Learn
Intersite Peering Uses Connectivity | Microsoft Docs
Connectivity • Determine Gateway
In this module, Transit and Connectivity Demos in the MCT Configure VPN Gateway
you will learn Needs Download Center - Learn | Microsoft Docs
about VNet • Create VNet Peering handout.
peering, VPN • Determine Service Configure ExpressRoute
Gateways, Chaining Uses and Virtual WAN -
ExpressRoute, and • Demonstration - VNet Learn | Microsoft Docs
Virtual WANs. Peering
• Knowledge Check
• Summary and Resources
Lesson 2: • Introduction
Configure VPN • Determine VPN Gateway
Gateway Uses
• Create Site to Site
Connections
• Create the Gateway
Subnet
• Create the VPN Gateway
• Determine the VPN
Gateway Type
• Determine Gateway SKU
and Generation
• Create the Local Network
Gateway
• Setup the On Premises
VPN Device
• Create the VPN
Connection
• Determine High
Availability Scenarios
• Demonstration - VPN
Gateways
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure • Determine ExpressRoute
ExpressRoute Uses
and Virtual • Determine ExpressRoute
WANs Capabilities
• Coexist Site to Site and
ExpressRoute
• Compare Intersite
Connection Options
• Determine Virtual WAN
Uses
• Knowledge check
• Summary and Resources
• Introduction
Lesson 3: • Implement Application
Configure Gateway
Azure • Determine Application
Application Gateway Routing
Gateway • Setup Application
Gateway Components
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure • Review Storage-Security
Storage Strategies
Security • Create Shared Access
Signatures
• Identify URI and SAS
Parameters
• Demonstration - SAS in
the Portal
• Determine Storage
Service Encryption
• Create Customer
Managed Keys
• Apply Storage Security
Best Practices
• Knowledge Check
• Summary and Resources
Lesson 4: • Introduction
Lesson 5: • Introduction
Configure • Use Storage-Explorer
Storage with • Use the Import and
Tools Export Service
• Use AzCopy
• Demonstration- Storage
Explorer
• Demonstration - AzCopy
• Knowledge check
• Summary and Resources
Lesson 2: • Introduction
Configure • Plan for Maintenance
Virtual Machine and Downtime
Availability • Setup Availability Sets
• Review Update and Fault
Domains
• Review Availability Zones
• Compare Vertical and
Horizontal Scaling
• Implement Scale Sets
• Create Scale Sets
• Implement Autoscale
• Configure Autoscale
• Demonstration – Virtual
Machine Scaling
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure • Implement Virtual
Virtual Machine Machine Extensions
Extensions • Implement Custom
Script-Extensions
• Implement Desired State
Configuration
• Demonstration Custom
Script Extensions
• Knowledge Check
• Introduction
Lesson 3: • Compare Containers to
Configure Virtual Machines
Azure • Review Azure Container
Container Instances
Instances • Implement Container
Groups
• Review the Docker
Platform
• Demonstration - Deploy
Azure Container
Instances
• Knowledge Check
• Summary and Resources
• Introduction
Lesson 4: • Explore AKS
Configure Terminology
Azure
Lesson 2: • Introduction
Configure • Protect Virtual Machine
Virtual Machine Data
Backups • Create Virtual Machine
Snapshots
• Setup Recovery Services
Vault Backup Options
• Backup Virtual Machines
• Restore Virtual
Machines
• Implement Azure
Backup Server
• Compare Backup
Options
• Manage Soft Delete
• Implement Azure Site
Recovery
• Demonstration – Virtual
Machine Backups
• Knowledge Check
• Summary and Resources
Lesson 3: • Introduction
Configure Log • Determine Log Analytics
Analytics Uses
• Create a Workspace
• Define Connected
Sources
• Define Data Sources
• Visualize Log Analytics
Data
• Structure Log Analytics
Queries
• Demonstration – Log
Analytics
• Knowledge Check
• Summary and Resources
Lesson 4: • Introduction
Configure • Describe Network
Network Watcher Features
Watcher • Review IP Flow Verify
Diagnostics
• Review Next Hop
Diagnostics
• Visualize the Network
Topology
• Knowledge Check
• Summary and-
Resources