Professional Training

Audience profile

This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.

Prerequisite

Successful Azure Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.

Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
Understanding of resilience and disaster recovery, including backup and restore operations.

Configure Azure Active Directory

Define Azure AD concepts, including identities, accounts, and tenants.
Describe Azure AD features to support different configurations.
Understand differences between Azure AD and Active Directory Domain Services (AD DS).
Choose between supported editions of Azure AD.
Implement the Azure AD join feature.
Use the Azure AD self-service password reset feature.

Configure subscriptions

Determine the correct region to locate Azure services.
Review features and use cases for Azure subscriptions.
Obtain an Azure subscription.
Understand billing and features for different Azure subscriptions.
Use Microsoft Cost Management for cost analysis.
Discover when to use Azure resource tagging.
Identify ways to reduce costs.

Configure Azure Policy

Create management groups to target policies and spending budgets.
Implement Azure Policy with policy and initiative definitions.
Scope Azure policies and determine compliance.

Configure role-based access control

Identify features and use cases for role-based access control.
List and create role definitions.
Create role assignments.
Identify differences between Azure RBAC and Azure Active Directory roles.
Manage access to subscriptions with RBAC.
Review built-in Azure RBAC roles.

Configure Azure resources with tools

Manage resources with the Azure portal.
Manage resources with Azure Cloud Shell.
Manage resources with Azure PowerShell.
Manage resources with Azure CLI.

Use Azure Resource Manager

Identify the features and usage cases for Azure Resource Manager.
Describe each Azure Resource Manager component and its usage.
Organize your Azure resources with resource groups.
Apply Azure Resource Manager locks.
Move Azure resources between groups, subscriptions, and regions.
Remove resources and resource groups.
Apply and track resource limits.

Configure resources with Azure Resource Manager templates

List the advantages of Azure templates.
Identify the Azure template schema components.
Specify Azure template parameters.
Locate and use Azure Quickstart Templates.

Configure virtual networks

Describe Azure Virtual Network features and components.
Identify features and usage cases for subnets and subnetting.
Identify usage cases for private and public IP addresses.
Create and determine which resources require public IP addresses.
Create and determine which resources require private IP addresses.
Create virtual networks.

Configure network security groups

Determine when to use network security groups.
Implement network security group rules.
Evaluate network security group effective rules.
Examine advantages of application security groups.

Configure Azure Firewall

Determine when to use Azure Firewall.
Implement Azure Firewall including firewall rules.

Configure Azure DNS

Identify features and usage cases for domains, custom domains, and private zones.
Verify custom domain names by using DNS records.
Implement DNS zones, DNS delegation, and DNS record sets.

Configure Azure Virtual Network peering

Identify usage cases and product features of Azure Virtual Network peering.
Configure your network to implement Azure VPN Gateway for transit connectivity.
Extend peering by using a hub and spoke network with user-defined routes and service chaining.

Configure Azure VPN Gateway

Identify features and usage cases for Azure VPN Gateway.
Implement high availability scenarios.
Configure site-to-site VPN connections by using a VPN gateway.

Summary of remaining modules

Configure Azure ExpressRoute and Azure Virtual WAN
Configure network routing and endpoints
Configure Azure Load Balancer
Configure Azure Application Gateway
Configure storage accounts
Configure Azure Blob Storage
Configure Azure Storage security
Configure Azure Files and Azure File Sync
Configure Azure Storage with tools
Configure virtual machines
vConfigure virtual machine availability
Configure virtual machine extensions
Configure Azure App Service plans
Configure Azure App Service
Configure Azure Container Instances
Configure Azure Kubernetes Service
Configure file and folder backups
Configure virtual machine backups
Configure Azure Monitor
Configure Azure alerts
Configure Log Analytics
Configure Network Watcher
Configure network routing and endpoints