Microsoft Azure Administrator AZ-103

AZ-103: MICROSOFT ADMINISTRATOR 

COURSE OVERVIEW 

This course teaches IT Professionals how to manage their Azure Infrastructure including Manage Subscriptions and  Resources, Configure and Manage Virtual Network, Implement and Manage Storage, Deploy and manage with VM,  Manage Identities using Azure Active Directory 

This, Microsoft Azure training is targeted for ANYONE who wants to move their current skillset to Microsoft Azure  cloud, taking the benefit of unlimited computing, storing and networking power, for the personal career growth. 

PREREQUISITES: 

This course is an essential for all those I.T Professionals or Administrators who either directly or indirectly work on  or provides solutions on Microsoft Platform for building, maintaining and monitoring enterprise scale applications  using latest Cloud Computing features and services.  

Applicable careers include 

• Solution Architects / Enterprise Architects / Team Leads 

• Storage Administrators / Security Administrators 

• Network Engineers / Server Engineers / Virtualization Engineers 

WHAT YOU’LL LEARN / COURSE OBJECTIVE 

• Manage Azure subscriptions and billing, and implement Azure policies. 

• Implement access management with Azure users, groups, and role-based access control. • Use Azure Monitor to configure Azure alerts and review the Azure Activity Log. 

• Query and analyze Log Analytics data. 

• Deploy resources with ARM templates and organize Azure resources. 

• Optimize your use of Azure tools like the Azure portal, Azure PowerShell, Cloud Shell and the Azure CLI. • Create Azure storage accounts for different data replication, pricing, and content scenarios.  • Implement virtual machine storage, blob storage, Azure files, and structured storage. • Secure and manage storage with shared access keys, Azure backup, and Azure File Sync. • Store and access data using Azure Content Delivery Network, and the Import and Export service. • Monitor Azure storage with metrics and alerts, and the Activity Log. 

• Understand virtual networking components, IP addressing, and network routing options.  • Implement Azure DNS domains, zones, record types, and resolution methods.  

• Configure network security groups, service endpoints, logging, and network troubleshooting.

About AZ-103 Course 

• Use Azure Migrate to discover and assess on-premises virtual machine migration to Azure.  • Use Azure Site Recovery to migrate Hyper-V infrastructures to Azure. 

• Review migration strategies for VMWare and System Center VMM virtual machines.  • Implement use cases and configuration options for Azure App Services and App Service Environments. • Manage and secure web apps with backup, restore, snapshot, and cloning.  

• Optimize your web app performance with Scale Up, Scale Out, Autoscale, and Grow out strategies. • Deploy serverless computing features like Azure Functions, Event Grid, and Service Bus. • Implement and configure Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway. • Implement and configure Site-to-Site VPN connections and ExpressRoute. 

• Implement and configure Network Watcher and troubleshooting common network issues.  • Implement site connectivity schemas including VNet-to-VNet connections and virtual network peering. • Explain virtual machine usage cases, storage options, pricing, operating systems, networking capabilities, and  general planning considerations. 

• Create Windows virtual machines in the Azure Portal, with Azure PowerShell, or using ARM Templates. • Deploy custom server images and Linux virtual machines.  

• Configure virtual machine networking and storage options. 

• Implement virtual machine high availability, scalability, and custom scripts extensions.  • Backup, restore, and monitor virtual machines. 

• Implement Azure Active Directory, Self-Service Password Reset, Azure AD Identity Protection, and integrated  SaaS applications. 

• Configure domains and tenants, users and groups, roles, and devices.  

• Implement and manage Azure Active Directory integration options and Azure AD Application Proxy.

• Use Azure RBAC to grant a granular level of access based on an administrator’s assigned tasks. 

• Use Azure Multi-Factor Authentication to configure a strong authentication for users at sign-in.

• User Azure AD Privileged Identity Management to configure access rights based on just-in-time administration. 

CERTIFICATION 

Part of requirements for: Azure Administrator 

With Microsoft Certification, technology professionals are more likely to get  hired, demonstrate clear business impact, and advance their careers. 

ABOUT THE CERTIFICATION 

COURSE SYLLABUS 

Cloud Computing Introduction 

• What is Cloud Computing

About AZ-103 Course 

• Cloud Characteristics  

• Cloud Computing Service Models 

• Deployment Models in Cloud Computing 

• Advantages and Disadvantages of Cloud Computing 

• Cloud Computing Job Roles. 

• Cloud Computing Platforms and Certifications. 

Getting Starting with Azure 

• Introduction to Azure 

• Why, What and Benefits of Azure 

• Azure Hosting Models 

• Azure Services 

• Subscribing to Microsoft Azure 

• Azure Portals 

• Azure Key Concepts 

• Azure Resource Group 

• Installing Microsoft Azure SDK 

Configure and Manage Azure Virtual Networks 

• Overview of Azure Networking 

• Virtual Network Benefits 

• Understanding Network Resources 

• Implement and manage virtual networking 

o Create a VNet using Azure Portal 

o Create a Subnet 

o Configure private and public IP addresses 

o Create Network Interface Card with public, and private IP addresses o Create a Virtual Machine 

• Setup Network Security Group 

o Create security rules 

o Associate NSG to a subnet or network interface 

o Identify required ports 

o Evaluate effective security rules 

• Understanding Azure DNS  

o Configure Azure DNS3 

About AZ-103 Course 

o Public and Private DNS Zones 

• Create connectivity between virtual networks 

o Create and configure VNET peering  

o Create and configure VNET to VNET  

o Verify virtual network connectivity 

Managing Azure with Windows PowerShell and Azure CLI. 

• Installing the required modules 

• Login to Azure Portal 

• Managing Resource Group and Resources 

• Azure CLI Introduction and Setup 

• Creating Resources 

• Listing and Formatting output 

• Connect a Web App to SQL Database 

• Deleting Resources 

• Interactive Mode 

Azure Storage 

• Importance of Azure Storage Service 

Configure network access to the storage account 

• Creating Storage Account 

• Install and use Azure Storage Explorer 

• Manage access keys 

• Implement Storage Replication Models 

o Locally Redundant Storage 

o Zone Redundant Storage 

o Geo Redundant Storage 

o Read Access Geo Redundant Storage 

• Implement Azure storage blobs  

o Read data, change data, set metadata on a container, store data using block and page blobs,  stream data using blobs, access blobs securely, implement async blob copy, configure a Content  Delivery Network (CDN), design blob hierarchies, configure custom domains, scale blob storage • Configure Azure Files  

o Create Azure file share 

o Create Azure File Sync service

About AZ-103 Course 

o Create Azure sync group 

o Troubleshoot Azure File Sync 

• Manage Access 

o Create and manage shared access signatures, use stored access policies, regenerate keys.  o Configure and use Cross-Origin Resource Sharing (CORS) 

• Azure Table Storage 

• Azure Queue Storage 

• Monitor activity log by using Log Analytics 

Deploy and Manage Virtual Machines 

• About Virtual Machine Workloads 

• Create and configure VM 

o Create a Virtual Machine using Portal  

o Create a Virtual Machine using PowerShell  

o Understand and Capture VM Images 

o Upload an on-premise VHD to Storage Account 

o Deploy a New VM from the Captured Image 

o Configure high availability 

o Virtual Machine Scale Sets 

• Automate deployment of VMs  

o Modify ARM Templates  

o Configure Location of new VMs 

o Configure VHD template 

o Save and Deploy from template 

• Manage Azure VM 

o Virtual Machine Sizes  

o Virtual Machine Disks 

o Redeploy VMs 

• Perform configuration management  

o VM Extensions & VM Agents 

o Custom Script Extensions  

o Desired State Configuration (DSC)  

• Monitoring, Debugging and Diagnosis 

o Retrieve Diagnostics data 

o View Streaming Logs

About AZ-103 Course 

o Configure endpoint monitoring 

o Configuring Alerts 

o Configure diagnostics 

o Use remote debugging 

o Monitor Web App resources 

o Azure Application Insights 

• Configure serverless computing 

o Create and manage objects;  

o Manage a Logic App resource;  

o Manage Azure Function app settings 

o Manage Event Grid 

o Manage Service Bus 

Manage resource groups  

• Use Azure policies for resource groups 

• Configure resource locks 

• Configure resource policies 

• Implement and set tagging on resource groups 

• Move resources across resource groups 

• Remove resource groups 

Manage Azure Subscriptions 

• Assign administrator permissions 

• Configure cost center quotas and tagging  

• Configure Azure subscription policies at Azure subscription level 

Analyze resource utilization and consumption 

• Configure diagnostic settings on resources 

• Create baseline for resources  

• Create and test alerts.  

• Analyze alerts across subscription  

• Analyze metrics across subscription  

• Create action groups  

• Monitor for unused resources 

• Monitor spend; report on spend; 

About AZ-103 Course 

• Utilize Log Search query functions 

• View alerts in Log Analytics 

Implement Azure backup 

• Configure VM backup 

• Perform backup operation 

• Create Recovery Services Vault  

• Create and configure backup policy 

• Perform a restore operation 

• Configure and review backup reports 

Managing Identities 

• Manage Azure Active Directory (AD) 

o Azure AD Introduction 

o Adding a custom domain name to Azure AD 

o Multiple Active Directories 

o Configure Azure AD Identity Protection 

o Azure AD Join, and Enterprise State Roaming 

o Configure self-service password reset 

o Implement conditional access policies 

o Perform an access review 

• Manage Azure AD Objects 

o Managing Users, Groups and Devices 

o Manage user and group properties 

o Manage device settings  

o Perform bulk user updates 

• Implement and manage hybrid identities 

o Manage Azure AD Connect 

o Synchronizing On-Premise AD Identities with Azure AD Connect o Using Single Sign-On with Azure AD 

o Manage Password Sync and Writeback 

• Integrating Gallery Applications with Azure AD 

Implement Advanced Virtual Networking 

• Load Balancing

About AZ-103 Course 

o Configure external and internal Azure Load balancer 

o Load Balancing Rules 

o Implement front end IP configuration 

o Azure Application Gateway 

o Azure Traffic Manager 

• Integrate on-premises network with Azure virtual network  o Point-to-Site Network using Azure VPN Gateway 

o Site-to-Site VPN 

o Express Route Solution 

• Monitor and Manage Networking 

o Verify, Manage and Monitor on-premises connectivity; 

o Use network resource monitoring and Network Watcher o Manage external networking and virtual network connectivity 

Implement and Manage Application Services  

• Introduction 

• App Service – Application Types 

• Deploy Web Apps 

o Deploying Web App directly from Visual Studio 

o Automate deployment from Dropbox and One Drive 

o Create, configure and deploy packages  

o Implement pre- and post-deployment actions;  

• App Service plans;  

o Create App Service Plan 

o Migrate Web Apps between App Service plans;  

o Create a Web App within an App Service plan 

• Configuring Web Apps 

o Application Settings Configuration,  

o Database Connection Strings,  

o Configuring Handlers and Virtual Directories,  

• Manage App Services 

o Configure a custom domain name 

o Enable SSL for your custom domain 

o Understanding Deployment Slots and Rollback deployments;  o App Service Protection 

o Manage Roles for an App service

About AZ-103 Course 

• Configure Web Apps for scale and resilience 

o Horizontal and Vertical Scaling of a Web App 

o Configure auto-scale 

o Change the size of an instance 

• Monitoring, Debugging and Diagnosis 

o Retrieve Diagnostics data 

o View Streaming Logs 

o Configure endpoint monitoring 

o Configuring Alerts 

o Configure diagnostics 

o Use remote debugging 

o Monitor Web App resources 

• Azure Traffic Manager to Scale out Globally 

• Manage Azure Logic App resource 

• Manage Azure Functions App Settings 

• Manage Event Grid 

• Manage Service Bus 

Secure Identities 

• Implement Multi-Factor Authentication 

o Enable MFA for an Azure AD tenant 

o Configure user accounts for MFA 

o Configure fraud alerts 

o Configure bypass options 

o Configure trusted IPs 

o Configure verification methods 

• Configuring Role Based Access Control 

o Create a custom role 

o Configure access to Azure resources by assigning roles 

o Configure management access to Azure 

o Troubleshoot RBAC 

o Implement RBAC policies 

o Assign RBAC roles 

• Implement Azure Active Director (AD) Privileged Identity Management (PIM)  o Activate a PIM role

About AZ-103 Course 

o Configure just-in-time access, permanent access, PIM management access, and time-bound  access 

o Create a Delegated Approver account 

o Enable PIM 

o Process pending approval requests 

Migrate Servers to Azure 

• Managing Azure Active Directory 

o Overview of Cloud Migration 

o Azure Migrate: The Process 

• Azure Site Recovery 

o Overview of ASR 

o Preparing the Infrastructure 

o Completing the Migration Process 

• Additional Migration Scenarios 

o VMWare Migration 

o System Center VMM Migration 

Azure Automation 

• Introduction 

• Azure Automation Account 

• New Automation Runbook 

• PowerShell Runbook 

• Graphical Runbook 

• Runbook Input Parameters 

• Azure Automation DSC