Question 1

Manage Azure identities and governance (15–20%)

Accepted Answer

Manage Azure AD objects
•	Create users and groups
•	Manage licenses in Azure AD
•	Create administrative units
•	Manage user and group properties
•	Manage device settings and device identity
•	Perform bulk updates
•	Manage guest accounts
•	Configure self-service password reset

Manage access control
•	Create custom role-based access control (RBAC) and Azure AD roles
•	Provide access to Azure resources by assigning roles at different scopes
•	Interpret access assignments

Manage Azure subscriptions and governance
•	Configure and manage Azure Policy
•	Configure resource locks
•	Apply and manage tags on resources
•	Manage resource groups
•	Manage subscriptions
•	Manage costs by using alerts, budgets, and recommendations
•	Configure management groups

Question 2

Implement and manage storage (15–20%)

Accepted Answer

Configure access to storage
•	Configure network access to storage accounts
•	Create and configure storage accounts
•	Generate shared access signature tokens
•	Configure stored access policies
•	Manage access keys
•	Configure Azure AD authentication for a storage account
•	Configure storage encryption
 
Manage data in Azure storage accounts
•	Create import and export jobs
•	Manage data by using Azure Storage Explorer and AzCopy
•	Implement Azure Storage redundancy
•	Configure object replication

Configure Azure Files and Azure Blob Storage
•	Create an Azure file share
•	Configure Azure Blob Storage
•	Configure storage tiers
•	Configure blob lifecycle management

Question 3

Deploy and manage Azure compute resources (20–25%)

Accepted Answer

Automate deployment of resources by using templates
•	Modify an ARM template
•	Deploy a template
•	Save a deployment as an ARM template
•	Deploy virtual machine (VM) extensions

Create and configure VMs
•	Create a VM
•	Manage images by using the Azure Compute Gallery
•	Configure Azure Disk Encryption
•	Move VMs from one resource group to another
•	Manage VM sizes
•	Add data disks
•	Configure VM network settings
•	Configure VM availability options
•	Deploy and configure VM scale sets

Create and configure containers
•	Configure sizing and scaling for Azure Container Instances
•	Configure container groups for Azure Container Instances
•	Create and configure Azure Container Apps
•	Configure storage for Azure Kubernetes Service (AKS)
•	Configure scaling for AKS
•	Configure network connections for AKS
•	Upgrade an AKS cluster
 
Create and configure an Azure App Service
•	Create an App Service plan
•	Configure scaling settings in an App Service plan
•	Create an App Service
•	Secure an App Service
•	Configure custom domain names
•	Configure backup for an App Service
•	Configure networking settings
•	Configure deployment settings

Question 4

Configure and manage virtual networking (20–25%)

Accepted Answer

Configure virtual networks
•	Create and configure virtual networks and subnets
•	Create and configure virtual network peering
•	Configure private and public IP addresses
•	Configure user-defined network routes
•	Configure Azure DNS

Configure secure access to virtual networks
•	Create and configure network security groups (NSGs) and application security groups (ASGs)
•	Evaluate effective security rules
•	Implement Azure Bastion
•	Configure service endpoints
•	Configure private endpoints

Configure load balancing
•	Configure Azure Application Gateway
•	Configure an internal or public load balancer
•	Troubleshoot load balancing

Monitor virtual networking
•	Monitor on-premises connectivity
•	Configure and use Azure Monitor for networks
•	Use Azure Network Watcher
•	Troubleshoot external networking
•	Troubleshoot virtual network connectivity

Question 5

Monitor and maintain Azure resources (10–15%)

Accepted Answer

Monitor resources by using Azure Monitor
•	Configure and interpret metrics
•	Configure Azure Monitor Logs
•	Query and analyze logs
•	Set up alerts and actions
•	Configure monitoring of VMs, storage accounts, and networks by using VM insights

Implement backup and recovery
•	Create an Azure Recovery Services vault
•	Create an Azure Backup vault
•	Create and configure backup policy
•	Perform backup and restore operations by using Azure Backup
•	Configure Azure Site Recovery for Azure resources
•	Perform failover to a secondary region by using Azure Site Recovery
•	Configure and review backup reports

Azure Administrator Associate (AZ-104) Course Details:

Course Duration

Course Eligibility

Course Curriculum

Manage Azure identities and governance (15–20%)

Implement and manage storage (15–20%)

Deploy and manage Azure compute resources (20–25%)

Configure and manage virtual networking (20–25%)

Monitor and maintain Azure resources (10–15%)