Overview

Candidates for this exam should have subject matter expertise in implementing, managing, and monitoring an organization's Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.An Azure administrator often serves as part of a larger team dedicated to implementing an organization's cloud infrastructure. Azure administrators also coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.Candidates for this exam should be familiar with operating systems, networking, servers, and virtualization. In addition, professionals in this role should have experience using PowerShell, Azure Command-Line Interface (CLI), the Azure portal, Azure Resource Manager (ARM) templates, and Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra.The practice questions cover the below concepts:Manage Azure identities and governance Implement and manage storage Deploy and manage Azure compute resources Implement and manage virtual networking Monitor and maintain Azure resources Manage Azure identities and governance (20-25%)Manage Azure AD users and groupsCreate users and groupsManage user and group propertiesManage licenses in Azure ADManage external usersConfigure self-service password reset (SSPR)Manage access to Azure resourcesManage built-in Azure rolesAssign roles at different scopesInterpret access assignmentsManage Azure subscriptions and governanceImplement and manage Azure PolicyConfigure resource locksApply and manage tags on resourcesManage resource groupsManage subscriptionsManage costs by using alerts, budgets, and Azure Advisor recommendationsConfigure management groupsImplement and manage storage (15-20%)Configure access to storageConfigure Azure Storage firewalls and virtual networksCreate and use shared access signature (SAS) tokensConfigure stored access policiesManage access keysConfigure identity-based access for Azure FilesConfigure and manage storage accountsCreate and configure storage accountsConfigure Azure Storage redundancyConfigure object replicationConfigure storage account encryptionManage data by using Azure Storage Explorer and AzCopyConfigure Azure Files and Azure Blob StorageCreate and configure a file share in Azure StorageCreate and configure a container in Blob StorageConfigure storage tiersConfigure snapshots and soft delete for Azure FilesConfigure blob lifecycle managementConfigure blob versioningDeploy and manage Azure compute resources (20-25%)Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep filesInterpret an ARM template or a Bicep fileModify an existing ARM templateModify an existing Bicep fileDeploy resources by using an ARM template or a Bicep fileExport a deployment as an ARM template or compile a deployment as a Bicep fileCreate and configure virtual machinesCreate a virtual machineConfigure Azure Disk EncryptionMove a virtual machine to another resource group, subscription, or regionManage virtual machine sizesManage virtual machine disksDeploy virtual machines to availability zones and availability setsDeploy and configure an Azure Virtual Machine Scale SetsProvision and manage containers in the Azure portalCreate and manage an Azure container registryProvision a container by using Azure Container InstancesProvision a container by using Azure Container AppsManage sizing and scaling for containers, including Azure Container Instances and Azure Container AppsCreate and configure Azure App ServiceProvision an App Service planConfigure scaling for an App Service planCreate an App ServiceConfigure certificates and TLS for an App ServiceMap an existing custom DNS name to an App ServiceConfigure backup for an App ServiceConfigure networking settings for an App ServiceConfigure deployment slots for an App ServiceImplement and manage virtual networking (15-20%)Configure and manage virtual networks in AzureCreate and configure virtual networks and subnetsCreate and configure virtual network peeringConfigure public IP addressesConfigure user-defined network routesTroubleshoot network connectivityConfigure secure access to virtual networksCreate and configure network security groups (NSGs) and application security groupsEvaluate effective security rules in NSGsImplement Azure BastionConfigure service endpoints for Azure platform as a service (PaaS)Configure private endpoints for Azure PaaSConfigure name resolution and load balancingConfigure Azure DNSConfigure an internal or public load balancerTroubleshoot load balancingMonitor and maintain Azure resources (10-15%)Monitor resources in AzureInterpret metrics in Azure MonitorConfigure log settings in Azure MonitorQuery and analyze logs in Azure MonitorSet up alert rules, action groups, and alert processing rules in Azure MonitorConfigure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor InsightsUse Azure Network Watcher and Connection MonitorImplement backup and recoveryCreate a Recovery Services vaultCreate an Azure Backup vaultCreate and configure a backup policyPerform backup and restore operations by using Azure BackupConfigure Azure Site Recovery for Azure resourcesPerform a failover to a secondary region by using Site RecoveryConfigure and interpret reports and alerts for backupsI hope this course helps with your studies,Happy learning!Neil

Skills

Reviews