Course Overview:

This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.

Who Should Attend?

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate. Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.

Course Prerequisites

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including users, groups, and role-based access control.
• Understanding of resilience and disaster recovery, including backup and restore operations.

Course Content:

Module 1: Configure Microsoft Entra ID
Define Microsoft Entra concepts, including identities, accounts, and tenants.
Describe Microsoft Entra features to support different configurations.
Understand differences between Microsoft Entra ID and Active Directory Domain Services (AD DS).
Choose between supported editions of Microsoft Entra ID.
Use the Microsoft Entra self-service password reset feature.

Module 2: Configure user and group accounts
Configure users accounts and user account properties.
Create new user accounts.
Import bulk user accounts with a template.
Configure group accounts and assignment types.

Module 3: Configure subscriptions
Determine the correct region to locate Azure services.
Review features and use cases for Azure subscriptions.
Obtain an Azure subscription.
Understand billing and features for different Azure subscriptions.
Use Microsoft Cost Management for cost analysis.
Discover when to use Azure resource tagging.
Identify ways to reduce costs.

Module 4: Configure Azure Policy
Create management groups to target policies and spending budgets.
Implement Azure Policy with policy and initiative definitions.
Scope Azure policies and determine compliance.

Module 5: Configure role-based access control
Identify features and use cases for role-based access control.
List and create role definitions.
Create role assignments.
Identify differences between Azure RBAC and Azure Active Directory roles.
Manage access to subscriptions with RBAC.
Review built-in Azure RBAC roles.

Module 6: Configure Azure resources with tools
Manage resources with the Azure portal.
Manage resources with Azure Cloud Shell.
Manage resources with Azure PowerShell.
Manage resources with Azure CLI

Module 7: Use Azure Resource Manager
Identify the features and usage cases for Azure Resource Manager.
Describe each Azure Resource Manager component and its usage.
Organize your Azure resources with resource groups.
Apply Azure Resource Manager locks.
Move Azure resources between groups, subscriptions, and regions.
Remove resources and resource groups.
Apply and track resource limits.

Module 8: Configure resources with Azure Resource Manager templates
List the advantages of Azure templates.
Identify the Azure template schema components.
Specify Azure template parameters.
Locate and use Azure Quickstart Templates.

Module 9: Configure virtual networks
Describe virtual network features and components.
Identify features and usage cases for subnets and subnetting.
Identify usage cases for private and public IP addresses.
Create and determine which resources require public IP addresses.
Create and determine which resources require private IP addresses.
Create virtual networks.

Module 10: Configure network security groups
Determine when to use network security groups.
Implement network security group rules.
Evaluate network security group effective rules.

Module 11: Configure Azure DNS
Identify features and usage cases for domains, custom domains, and private zones.
Verify custom domain names using DNS records.
Implement DNS zones, DNS delegation, and DNS record sets.

Module 12: Configure Azure Virtual Network peering
Identify usage cases and product features of virtual network peering.
Configure gateway transit, connectivity, and service chaining.

Module 13: Configure network routing and endpoints
Implement system routes and user-defined routes.
Configure a custom route.
Implement service endpoints.
Identify features and usage cases for private links and endpoint services.

Module 14: Configure Azure Load Balancer
Identify features and usage cases for Azure load balancer.
Implement public and internal Azure load balancers.
Configure load balancer SKUs, backend pools, session persistence, and health probes.

Module 15: Configure Azure Application Gateway
Identify features and usage cases for Azure Application Gateway.
Implement Azure Application Gateway, including selecting a routing method.
Configure gateway features such as routing rules.

Module 16: Configure storage accounts
Identify features and usage cases for Azure storage accounts.
Select between different types of Azure Storage and storage accounts.
Select a storage replication strategy.
Configure network access to storage accounts.
Secure storage endpoints.

Module 17: Configure Azure Blob Storage
Identify features and usage cases for Azure Blob Storage.
Configure Blob Storage and Blob access tiers.
Configure Blob lifecycle management rules.
Configure Blob object replication.
Upload and price Blob Storage.

Module 18: Configure Azure Storage security
Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
Configure Azure Storage encryption.
Implement customer-managed keys.
Recommend opportunities to improve Azure Storage security.

Module 19: Configure Azure Files and Azure File Sync
Identify storage for file shares and blob data.
Configure Azure Files shares and file share snapshots.
Identify features and usage cases of Azure File Sync.
Identify Azure File Sync components and configuration steps.

Module 20: Configure virtual machines
Create a virtual machine planning checklist.
Determine virtual machine locations and pricing models.
Determine the correct virtual machine size.
Configure virtual machine storage.

Module 21: Configure virtual machine availability
Implement availability sets and availability zones.
Implement update and fault domains.
Implement Virtual Machine Scale Sets.
Autoscale virtual machines.

Module 22: Configure Azure App Service plans
Identify features and usage cases of the Azure App Service.
Select an appropriate Azure App Service plan pricing tier.
Scale the App Service Plan.
Scale out the App Service Plan.

Module 23: Configure Azure App Service
Identify features and usage cases for the Azure App Service.
Create an App Service.
Configure deployment settings, specifically deployment slots.
Secure the App Service.
Configure custom domain names.
Back up the App Service.
Configure Application Insights.

Module 24: Configure Azure Container Instances
Identify when to use containers versus virtual machines.
Identify the features and usage cases of Azure Container Instances.
Implement Azure Container Groups.

Module 25: Configure file and folder backups
Identify features and usage cases for Azure Backup.
Configure Recovery Services Vault backup options.
Implement on-premises file and folder backup.
Configure the Microsoft Azure Recovery Services Agent.

Module 26: Configure virtual machine backups
Identify features and usage cases for different Azure backup methods.
Configure virtual machine snapshots and backup options.
Implement virtual machine backup and restore, including soft delete.
Compare the Azure Backup (MARS) agent to the Azure Backup Server (MABS).
Perform site-to-site recovery by using Azure Site Recovery.

Module 27: Configure Azure Monitor
Identify the features and usage cases for Azure Monitor.
Configure and interpret metrics and logs.
Identify the Azure Monitor components and data types.
Configure the Activity Log.

Module 28: Improve incident response with alerting on Azure
Configure Azure Monitor alerts.
Create alert rules and action groups.

Module 29: Configure Log Analytics
Identify the features and usage cases for Log Analytics.
Create a Log Analytics workspace.
Structure a Log Analytics query and review results.

Module 30: Configure Network Watcher
Identify the features and usage cases for Azure Network Watcher.
Configure diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.