Skills measured

• Manage Azure identities and governance
• Implement and manage storage
• Deploy and manage Azure compute resources
• Configure and manage virtual networking
• Monitor and back up Azure resources

WHAT YOU'LL LEARN

MANAGE AZURE IDENTITIES AND GOVERNANCE

Manage Azure Active Directory (Azure AD) objects

• Create users and groups
• Manage user and group properties
• Manage device settings
• Perform bulk user updates
• Manage guest accounts
• Configure Azure AD join
• Configure self-service password reset

Manage role-based access control (RBAC)

• Create a custom role
• Provide access to Azure resources by assigning roles at different scopes
• Interpret access assignments

Manage subscriptions and governance

• Configure Azure policies
• Configure resource locks
• Apply and manage tags on resources
• Manage resource groups
• Manage subscriptions
• Manage costs
• Configure management groups

IMPLEMENT AND MANAGE STORAGE

Secure storage

• Configure network access to storage accounts
• Create and configure storage accounts • generate shared access signature (SAS) tokens
• Manage access keys
• Configure Azure AD authentication for a storage account
• Configure access to Azure Files

Manage storage

• Export from Azure job
• Import into Azure job
• Install and use Azure Storage Explorer
• Copy data by using AZCopy
• Implement Azure Storage replication
• Configure blob object replication

Configure Azure files and Azure Blob Storage

• Create an Azure file share
• Create and configure Azure File Sync service
• Configure Azure Blob Storage
• Configure storage tiers for Azure Blob Storage
• Configure blob lifecycle management

DEPLOY AND MANAGE AZURE COMPUTE RESOURCES

Automate deployment of virtual machines (VMs) by using Azure Resource Manager templates

• Modify an Azure Resource Manager template
• Configure a virtual hard disk template
• Deploy from a template
• Save a deployment as an Azure Resource Manager template
• Deploy virtual machine extensions

Configure VMs

• Configure Azure Disk Encryption
• Move VMs from one resource group to another
• Manage VM sizes
• Add data disks
• Configure networking
• Redeploy VMs
• Configure high availability
• Deploy and configure scale sets

Create and configure containers

• Configure sizing and scaling for Azure Container Instances
• Configure container groups for Azure Container Instances
• Configure storage for Azure Kubernetes Service (AKS)
• Configure scaling for AKS
• Configure network connections for AKS
• Upgrade an AKS cluster

Create and configure Azure App Service

• Create an App Service plan
• Configure scaling settings in an App Service plan
• Create an App Service
• Secure an App Service
• Configure custom domain names
• Configure backup for an App Service
• Configure networking settings
• Configure deployment settings

CONFIGURE AND MANAGE VIRTUAL NETWORKING

Implement and manage virtual networking

• Create and configure virtual networks, including peering
• Configure private and public IP addresses
• Configure user-defined network routes
• Implement subnets
• Configure endpoints on subnets
• Configure private endpoints
• Configure Azure DNS, including custom DNS settings and private or public DNS zones

Secure access to virtual networks

• Create security rules
• Associate a network security group (NSG) to a subnet or network interface
• Evaluate effective security rules
• Implement Azure Firewall
• Implement Azure Bastion Service

Configure load balancing

• Configure Azure Application Gateway
• Configure an internal or public load balancer
• Troubleshoot load balancing

Monitor and troubleshoot virtual networking

• Monitor on-premises connectivity
• Configure and use Network Performance Monitor
• Use Azure Network Watcher
• Troubleshoot external networking
• Troubleshoot virtual network connectivity

Integrate an on-premises network with an Azure virtual network

• Create and configure Azure VPN Gateway
• Create and configure Azure ExpressRoute
• Configure Azure Virtual WAN

MONITOR AND BACK UP AZURE RESOURCES

Monitor resources by using Azure Monitor

• Configure and interpret metrics
• Configure Azure Monitor logs
• Query and analyze logs
• Set up alerts and actions
• Configure Application Insights

Implement backup and recovery

• Create a Recovery Services vault
• Create and configure backup policy
• Perform backup and restore operations by using Azure Backup
• Perform site-to-site recovery by using Azure Site Recovery
• Configure and review backup reports

PREREQUISITES

Successful Azure Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
• Understanding of resilience and disaster recovery, including backup and restore operations.