Azure Admin
Azure Admin
aspx
https://docs.microsoft.com/en-us/learn/
https://microsoftlearning.github.io/AZ-103-MicrosoftAzureAdministrator/
https://www.microsoft.com/handsonlabs/selfpacedlabs
Introduction
Starting on May 1, 2019, you only need to pass Exam AZ-103 to earn the
Azure Administration certification. This new exam combines the skills covered
in AZ-100 and AZ-101 (which retired on May 1, 2019), with the majority of the
new exam coming from AZ-100.
Candidates for this exam are Azure Administrators who manage cloud
services that span storage, security, networking, and compute cloud
capabilities. Candidates have a deep understanding of each service across
the full IT lifecycle, and take requests for infrastructure services, applications,
and environments. They make recommendations on services to use for
optimal performance and scale, as well as provision, size, monitor, and adjust
resources as appropriate.
Candidates for this exam should have proficiency in using PowerShell, the
Command Line Interface, Azure Portal, ARM templates, operating systems,
virtualization, cloud infrastructure, storage structures, and networking
There are different tools to interact with Azure you should be familiar with all of them.
Azure Portal and Cloud Shell: Azure Portal in combination with Cloud Shell allow you to build, manage, and
monitor everything from simple web apps to complex cloud applications in a single, unified console and CLI.
https://docs.microsoft.com/en-us/azure/azure-portal/
https://docs.microsoft.com/en-us/azure/cloud-shell/overview
Azure PowerShell and CLI: Azure PowerShell and CLI are designed for managing and administering Azure
resources from the command line. Use them when you want to build automated tools that use the Azure
Resource Manager model and combine them with Azure Cloud Shell.
https://docs.microsoft.com/en-us/powershell/azure/get-started-azureps?view=azps-2.2.0
https://docs.microsoft.com/en-us/cli/azure/get-started-with-azure-cli?view=azure-cli-latest
Resource Manager: is the deployment and management service for Azure, as an administrator you should be
familiar with ARM, it provides a consistent management layer that enables you to create, update, and delete
resources in your Azure subscription.
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview
ARM Templates: Resource Manager templates are JSON files that define the resources you need to deploy for
your solution and allow you to interact with ARM in a declarative form. Be familiar with the sintax of an ARM
template and its elements.
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-
create-templates-use-visual-studio-code?tabs=CLI
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-
create-templates-use-the-portal
https://docs.microsoft.com/en-us/azure/azure-resource-manager/vs-azure-tools-resource-groups-
deployment-projects-create-deploy
After you are familiar with the concepts of the Azure Administrative tools, practice using the HoL. For that
Access the website https://www.microsoft.com/handsonlabs under the self-paced labs.
https://docs.microsoft.com/en-us/learn/paths/administer-infrastructure-resources-in-azure/
This will take you though different modules to learn this part of Azure Administration. You will review how to create,
manage, secure and scale virtual machine resources.
After finishing the Learning Path you can review the documentation to get a deeper understanding.
Creating Virtual Machines: be familiar on how to create both Windows and Linux VMs using the different
administration tools described previously. For that review the quickstarts:
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-portal
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-powershell
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-cli
• https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-cli
• https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-portal
• https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-powershell
After finishing the Learning Path you can review the documentation to get a deeper understanding.
Virtual Machine Availability: become familiar with the different High Availability solutions for VMs on Azure, know
their differences and SLAs.
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
• https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
• https://docs.microsoft.com/en-us/azure/best-practices-availability-paired-regions#what-are-paired-regions
Virtual Machine Extensions: extensions are small applications that provide post-deployment configuration and
automation tasks on Azure VMs, as an administrator you should know how to create them and use them to customize
your deployments.
• https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/features-linux
• https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/features-windows
After you are familiar with the concepts of the Azure Virtual Machines, practice using the HoL. For that Access
the website https://www.microsoft.com/handsonlabs under the self-paced labs.
Create and configure storage Accounts: • Configure Azure content delivery network (CDN)
endpoints
• Configure network access to the storage account
• Create and configure storage account Configure Azure files:
• Generate shared access signature • Create Azure file share
• Install and use Azure Storage Explorer • Create Azure File Sync service
• Manage access keys • Create Azure sync group
• Monitor activity log by using Log Analytics • Troubleshoot Azure File Sync
• Implement Azure storage replication
Implement Azure backup:
Import and export data to Azure:
• Configure and review backup reports
• Create export from Azure job • Perform backup operation
• Create import into Azure job • Create Recovery Services Vault
• Use Azure Data Box • Create and configure backup policy
• Configure and use Azure blob Storage • Perform a restore operation
For this topic there is a learning path available that can be found on:
• https://docs.microsoft.com/en-us/learn/paths/store-data-in-azure/
This will take you though different modules to learn this part of Azure Administration. You will review how to create a
Storage Account, and how to choose the right model for the data you want to store in the cloud.
You also have a specific learning path for Azure Storage Accounts:
• https://docs.microsoft.com/en-us/learn/modules/create-azure-storage-account/
As far as security in Azure Storage you should complete this other learning path:
• https://docs.microsoft.com/en-us/learn/modules/secure-azure-storage-account/
After finishing the Learning Path you can review the documentation to get a deeper understanding.
Storage Accounts: an Azure storage account contains all of your Azure Storage data objects: blobs, files, queues,
tables, and disks. You should know its concepts, types of storage accounts and how to create and manage one:
• https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
• https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?tabs=azure-
portal
Azure Blobs:
• https://docs.microsoft.com/es-es/azure/storage/blobs/storage-blob-storage-tiers
• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-create-account-block-blob
Azure Files:
• https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction
• https://docs.microsoft.com/en-us/azure/storage/files/storage-files-quick-create-use-windows
Azure Backup:
• https://docs.microsoft.com/en-us/azure/backup/
Data Box:
• https://docs.microsoft.com/en-us/azure/databox/data-box-overview
Another important topic in Storage is Data Protection:
Data Replication
• https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
• https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
Also follow the How-to Guide and Step-by-steps for Azure File Sync
• https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-
portal
• https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-networking/
This will take you though different modules to learn this part of Azure Administration. You will
• Learn how virtual networking helps you isolate network and compute resources
• Learn how Azure Load Balancer helps improve resiliency, or the ability to recover when your service goes down
• Learn how Traffic Manager can route traffic to different endpoints, including the endpoint with the lowest latency
to the user
Review the documentation to get a deeper understanding on Azure Networking
Virtual Networks: Azure Virtual Networks are a foundational concept of networking in Azure.
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview
IP Addressing and Endpoints: after understanding vNETs you should know service endpoints and how to create
vNET peerings
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-ip-addresses-overview-arm
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
Review the documentation to get a deeper understanding on Azure Networking
Azure DNS: you should really know DNS concepts and records and then become familiar with Azure DNS service
• https://docs.microsoft.com/en-in/azure/dns/dns-overview
ExpressRoute Connections:
• https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction
• https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager
Review the documentation to get a deeper understanding on Azure Networking
Networking Resources:
• Network Routing:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
After you are familiar with the concepts of the Azure Netwoking, practice using the HoL. For that Access the
website https://www.microsoft.com/handsonlabs under the self-paced labs.
Also it is important to be familiar with Azure DNS, there is no HoL available at this point, but you should review
the How-to guides:
• https://docs.microsoft.com/en-in/azure/dns/dns-delegate-domain-azure-dns
Also follow the step by steps of Azure Traffic Manager and Load Balancer:
• https://docs.microsoft.com/en-us/azure/traffic-manager/#step-by-step-tutorials
• https://docs.microsoft.com/en-us/azure/load-balancer/#step-by-step-tutorials
• https://docs.microsoft.com/en-us/learn/modules/intro-to-governance/
This will take you though different modules to learn this part of Azure Administration. You will
• Apply policies to control and audit resource creation
• Learn how role-based security can fine-tune access to your resources
• Understand Microsoft's policies and privacy guarantees
• Learn how to monitor your resources
Review the documentation to get a deeper understanding on Azure Management
• https://docs.microsoft.com/en-us/azure/governance/management-groups/
• https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
• https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/#5-minute-quickstarts
Azure Policy:
• https://docs.microsoft.com/en-us/azure/governance/policy/overview
• https://docs.microsoft.com/en-us/azure/governance/policy/#step-by-step-tutorials
Review the documentation to get a deeper understanding on Azure Management
Azure Monitor:
• https://docs.microsoft.com/en-us/azure/azure-monitor/overview, https://docs.microsoft.com/en-
us/azure/azure-monitor/learn/quick-collect-azurevm
Azure Alerts:
• https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview
• https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response
• https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-alert
Review the documentation to get a deeper understanding on Azure Management
Log Analytics:
• https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview
• https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace
• https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent
Network Watcher:
• https://docs.microsoft.com/en-in/azure/network-watcher/
After you are familiar with the concepts of the Azure Management, practice using the HoL. For that Access the
website https://www.microsoft.com/handsonlabs under the self-paced labs.
Also it is important to be familiar with Azure tools, there is no HoL available at this point for all of them, but
you should review the How-to guides:
• RBAC: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
• Network Watcher: https://docs.microsoft.com/en-in/azure/network-watcher/#step-by-step-tutorials
Manage Azure Active Directory (AD) Implement and manage hybrid identities
• Add custom domains • Install Azure AD Connect, including password hash and
• Azure AD Join pass-through synchronization
• Configure self-service password reset • Use Azure AD Connect to configure federation with on-
• Manage multiple directories premises Active Directory Domain Services (AD DS)
• Manage Azure AD Connect
Manage Azure AD objects (users, groups, and devices) • Manage password sync and password writeback
• Create users and groups
• Manage user and group properties Implement multi-factor authentication (MFA)
• Manage device settings • Configure user accounts for MFA, enable MFA by using
• Perform bulk user updates bulk update, configure fraud alerts, configure bypass
• Manage guest Accounts options, configure Trusted IPs, configure verification
methods
Review the documentation to get a deeper understanding on Azure Identity
• https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
Azure AD Connect:
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identity
Azure AD Join:
• https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan
Review the documentation to get a deeper understanding on Azure Identity
Multi-Factor Authentication:
• https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks
• https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview
• https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
After you are familiar with the concepts of the Azure Manage Identities, practice with a more hands-on
approach. There is no HoL available at this point for this section, but you should review the How-to guides: