New AI/AB Certs
Skip to content

AZ-104 Study Guide Course

Manage Azure identities and governance (20–25%)

Section titled “Manage Azure identities and governance (20–25%)”

Manage Microsoft Entra users and groups

Section titled “Manage Microsoft Entra users and groups”

Create users and groups

Section titled “Create users and groups”

Manage user and group properties

Section titled “Manage user and group properties”

Manage licenses in Microsoft Entra ID

Section titled “Manage licenses in Microsoft Entra ID”

Manage external users

Section titled “Manage external users”

Configure self-service password reset (SSPR)

Section titled “Configure self-service password reset (SSPR)”

Manage access to Azure resources

Section titled “Manage access to Azure resources”

Manage built-in Azure roles

Section titled “Manage built-in Azure roles”

Assign roles at different scopes

Section titled “Assign roles at different scopes”

Interpret access assignments

Section titled “Interpret access assignments”

Manage Azure subscriptions and governance

Section titled “Manage Azure subscriptions and governance”

Implement and manage Azure Policy

Section titled “Implement and manage Azure Policy”

Configure resource locks

Section titled “Configure resource locks”

Apply and manage tags on resources

Section titled “Apply and manage tags on resources”

Manage resource groups

Section titled “Manage resource groups”

Manage subscriptions

Section titled “Manage subscriptions”

Manage costs by using alerts, budgets, and Azure Advisor recommendations

Section titled “Manage costs by using alerts, budgets, and Azure Advisor recommendations”

Configure management groups

Section titled “Configure management groups”

Implement and manage storage (15–20%)

Section titled “Implement and manage storage (15–20%)”

Configure access to storage

Section titled “Configure access to storage”

Configure Azure Storage firewalls and virtual networks

Section titled “Configure Azure Storage firewalls and virtual networks”

Create and use shared access signature (SAS) tokens

Section titled “Create and use shared access signature (SAS) tokens”

Configure stored access policies

Section titled “Configure stored access policies”

Manage access keys

Section titled “Manage access keys”

Configure identity-based access for Azure Files

Section titled “Configure identity-based access for Azure Files”

Configure and manage storage accounts

Section titled “Configure and manage storage accounts”

Create and configure storage accounts

Section titled “Create and configure storage accounts”

Configure Azure Storage redundancy

Section titled “Configure Azure Storage redundancy”

Configure object replication

Section titled “Configure object replication”

Configure storage account encryption

Section titled “Configure storage account encryption”

Manage data by using Azure Storage Explorer and AzCopy

Section titled “Manage data by using Azure Storage Explorer and AzCopy”

Configure Azure Files and Azure Blob Storage

Section titled “Configure Azure Files and Azure Blob Storage”

Create and configure a file share in Azure Files

Section titled “Create and configure a file share in Azure Files”

Create and configure a container in Azure Blob Storage

Section titled “Create and configure a container in Azure Blob Storage”

Configure storage tiers

Section titled “Configure storage tiers”

Configure soft delete for blobs and containers

Section titled “Configure soft delete for blobs and containers”

Configure snapshots and soft delete for Azure Files

Section titled “Configure snapshots and soft delete for Azure Files”

Configure blob lifecycle management

Section titled “Configure blob lifecycle management”

Configure blob versioning

Section titled “Configure blob versioning”

Deploy and manage Azure compute resources (20–25%)

Section titled “Deploy and manage Azure compute resources (20–25%)”

Automate deployment of resources by using ARM templates or Bicep files

Section titled “Automate deployment of resources by using ARM templates or Bicep files”

Interpret an Azure Resource Manager template or a Bicep file

Section titled “Interpret an Azure Resource Manager template or a Bicep file”

Modify an existing Azure Resource Manager template

Section titled “Modify an existing Azure Resource Manager template”

Modify an existing Bicep file

Section titled “Modify an existing Bicep file”

Deploy resources by using an Azure Resource Manager template or a Bicep file

Section titled “Deploy resources by using an Azure Resource Manager template or a Bicep file”

Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file

Section titled “Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file”

Create and configure virtual machines

Section titled “Create and configure virtual machines”

Create a virtual machine

Section titled “Create a virtual machine”

Configure encryption at host for Azure virtual machines

Section titled “Configure encryption at host for Azure virtual machines”

Move a virtual machine to another resource group, subscription, or region

Section titled “Move a virtual machine to another resource group, subscription, or region”

Manage virtual machine sizes

Section titled “Manage virtual machine sizes”

Manage virtual machine disks

Section titled “Manage virtual machine disks”

Deploy virtual machines to availability zones and availability sets

Section titled “Deploy virtual machines to availability zones and availability sets”

Deploy and configure an Azure Virtual Machine Scale Sets

Section titled “Deploy and configure an Azure Virtual Machine Scale Sets”

Provision and manage containers in the Azure portal

Section titled “Provision and manage containers in the Azure portal”

Create and manage an Azure Container Registry

Section titled “Create and manage an Azure Container Registry”

Provision a container by using Azure Container Instances

Section titled “Provision a container by using Azure Container Instances”

Provision a container by using Azure Container Apps

Section titled “Provision a container by using Azure Container Apps”

Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps

Section titled “Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps”

Create and configure Azure App Service

Section titled “Create and configure Azure App Service”

Provision an App Service plan

Section titled “Provision an App Service plan”

Configure scaling for an App Service plan

Section titled “Configure scaling for an App Service plan”

Create an App Service

Section titled “Create an App Service”

Configure certificates and Transport Layer Security (TLS) for an App Service

Section titled “Configure certificates and Transport Layer Security (TLS) for an App Service”

Map an existing custom DNS name to an App Service

Section titled “Map an existing custom DNS name to an App Service”

Configure backup for an App Service

Section titled “Configure backup for an App Service”

Configure networking settings for an App Service

Section titled “Configure networking settings for an App Service”

Configure deployment slots for an App Service

Section titled “Configure deployment slots for an App Service”

Implement and manage virtual networking (15–20%)

Section titled “Implement and manage virtual networking (15–20%)”

Configure and manage virtual networks in Azure

Section titled “Configure and manage virtual networks in Azure”

Create and configure virtual networks and subnets

Section titled “Create and configure virtual networks and subnets”

Create and configure virtual network peering

Section titled “Create and configure virtual network peering”

Configure public IP addresses

Section titled “Configure public IP addresses”

Configure user-defined routes

Section titled “Configure user-defined routes”

Troubleshoot network connectivity

Section titled “Troubleshoot network connectivity”

Configure secure access to virtual networks

Section titled “Configure secure access to virtual networks”

Create and configure network security groups (NSGs) and application security groups

Section titled “Create and configure network security groups (NSGs) and application security groups”

Evaluate effective security rules in NSGs

Section titled “Evaluate effective security rules in NSGs”

Implement Azure Bastion

Section titled “Implement Azure Bastion”

Configure service endpoints for Azure platform as a service (PaaS)

Section titled “Configure service endpoints for Azure platform as a service (PaaS)”

Configure private endpoints for Azure PaaS

Section titled “Configure private endpoints for Azure PaaS”

Configure name resolution and load balancing

Section titled “Configure name resolution and load balancing”

Configure Azure DNS

Section titled “Configure Azure DNS”

Configure an internal or public load balancer

Section titled “Configure an internal or public load balancer”

Troubleshoot load balancing

Section titled “Troubleshoot load balancing”

Monitor and maintain Azure resources (10–15%)

Section titled “Monitor and maintain Azure resources (10–15%)”

Monitor resources in Azure

Section titled “Monitor resources in Azure”

Interpret metrics in Azure Monitor

Section titled “Interpret metrics in Azure Monitor”

Configure log settings in Azure Monitor

Section titled “Configure log settings in Azure Monitor”

Query and analyze logs in Azure Monitor

Section titled “Query and analyze logs in Azure Monitor”

Set up alert rules, action groups, and alert processing rules in Azure Monitor

Section titled “Set up alert rules, action groups, and alert processing rules in Azure Monitor”

Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights

Section titled “Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights”

Use Azure Network Watcher and Connection monitor

Section titled “Use Azure Network Watcher and Connection monitor”

Implement backup and recovery

Section titled “Implement backup and recovery”

Create a Recovery Services vault

Section titled “Create a Recovery Services vault”

Create an Azure Backup vault

Section titled “Create an Azure Backup vault”

Create and configure a backup policy

Section titled “Create and configure a backup policy”

Perform backup and restore operations by using Azure Backup

Section titled “Perform backup and restore operations by using Azure Backup”

Configure Azure Site Recovery for Azure resources

Section titled “Configure Azure Site Recovery for Azure resources”

Perform a failover to a secondary region by using Site Recovery

Section titled “Perform a failover to a secondary region by using Site Recovery”

Configure and interpret reports and alerts for backups

Section titled “Configure and interpret reports and alerts for backups”