LU1 Prerequisites for Azure administrators

Topic 1 Configure Azure resources with tools 

Use the Azure portal

Use Azure Cloud Shell

Use Azure PowerShell

Use Azure CLI3

Topic 2 Use Azure Resource Manager 

Review Azure Resource Manager benefits

Review Azure resource terminology

Create resource groups

Create Azure Resource Manager locks

Reorganize Azure resources

Remove resources and resource groups

Determine resource limits

Topic 3 Configure resources with Azure Resource Manager templates 

Review Azure Resource Manager template advantages

Explore the Azure Resource Manager template schema

Explore the Azure Resource Manager template parameters

Consider Bicep templates

Review QuickStart templates

Topic 4 Automate Azure tasks using scripts with PowerShell 

Decide if Azure PowerShell is right for your tasks

Install PowerShell

Create an Azure Resource using scripts in Azure PowerShell

Create and save scripts in Azure PowerShell

Topic 5 Control Azure services with the CLI 

What is the Azure CLI?

Work with the Azure CLI

Topic 6 Deploy Azure infrastructure by using JSON ARM templates 

• Explore Azure Resource Manager template structure

• Add flexibility to your Azure Resource Manager template by using parameters and outputs

LU2 Manage identities and governance in Azure

Topic 7 Configure Azure Active Directory 

Describe Azure Active Directory benefits and features

Describe Azure Active Directory concepts

Compare Active Directory Domain Services to Azure Active Directory

Select Azure Active Directory editions

Implement Azure Active Directory join

Implement Azure Active Directory self-service password reset

Topic 8 Configure user and group accounts 

Create user accounts

Manage user accounts

Create bulk user accounts

Create group accounts

Create administrative units

Topic 9 Configure subscriptions 

Identify Azure regions

Implement Azure subscriptions

Obtain an Azure subscription

Identify Azure subscription usage

Implement Microsoft Cost Management

Apply resource tagging

Apply cost savings

Topic 10 Configure Azure Policy 

Create management groups

Implement Azure policies

Create Azure policies

Create policy definitions

Create an initiative definition

Scope the initiative definition

Determine compliance

Topic 11 Configure role-based access control 

Implement role-based access control

Create a role definition

Create a role assignment

Compare Azure roles to Azure Active Directory roles

Apply role-based access control

Review fundamental Azure RBAC roles

Topic 12 Create Azure users and groups in Azure Active Directory 

What are user accounts in Azure Active Directory?

Add and delete users in Azure Active Directory

Manage app and resource access by using Azure Active Directory groups

Assign users to Azure Active Directory groups

Collaborate by using guest accounts and Azure Active Directory B2B

Give guest users access in Azure Active Directory B2B

Topic 13 Secure your Azure resources with Azure role-based access control (Azure RBAC) 

What is Azure RBAC?

List access using Azure RBAC and the Azure portal

Grant access using Azure RBAC and the Azure portal

View activity logs for Azure RBAC changes

Topic 14 Allow users to reset their password with Azure Active Directory self-service password reset 

What is self-service password reset in Azure Active Directory?

Implement Azure AD self-service password reset

Set up self-service password reset

Customize directory branding

LU3 Implement and manage storage in Azure

Topic 15 Configure storage accounts 

Implement Azure Storage

Explore Azure Storage services

Determine storage account types

Determine replication strategies

Access storage

Secure storage endpoints

Topic 16 Configure Azure Blob Storage 

Implement Azure Blob Storage

Create blob containers

Assign blob access tiers

Add blob lifecycle management rules

Determine blob object replication

Upload blobs

Determine Blob Storage pricing

Topic 17 Configure Azure Storage security 

Review Azure Storage security strategies

Create shared access signatures

Identify URI and SAS parameters

Determine Azure Storage encryption

Create customer-managed keys

Apply Azure Storage security best practices

Topic 18 Configure Azure Files and Azure File Sync 

Compare storage for file shares and blob data

Manage Azure Files shares

Create file share snapshots

Implement Azure File Sync

Identify Azure File Sync components

Deploy Azure File Sync

Topic 19 Configure Azure Storage with tools 

Use Azure Storage Explorer

Use the Azure Import/Export service

Use the WAImportExport tool

Use the AzCopy tool

Topic 20 Create an Azure Storage account 

Decide how many storage accounts you need

Choose your account settings

Choose an account creation tool

Create a storage account using the Azure portal

Topic 21 Control access to Azure Storage with shared access signatures 

Authorization options for Azure Storage

Use shared access signatures to delegate access to Azure Storage

Use shared access signatures to delegate access to Azure Storage

Use stored access policies to delegate access to Azure Storage

Use stored access policies to delegate access to Azure Storage

Topic 22 Upload, download, and manage data with Azure Storage Explorer 

Connect Azure Storage Explorer to a storage account

Connect Azure Storage Explorer to a storage account

Connect Azure Storage Explorer to Azure Data Lake Storage

Connect Azure Storage Explorer to Azure Data Lake Storage

LU 4 Deploy and manage Azure compute resources and virtual networks for Azure administrators

Topic 23 Configure virtual machines 

Review cloud services responsibilities

Plan virtual machines

Determine virtual machine sizing

Determine virtual machine storage

Create virtual machines in the Azure portal

Connect to virtual machines

Topic 24 Configure virtual machine availability 

Plan for maintenance and downtime

Create availability sets

Review update domains and fault domains

Review availability zones

Compare vertical and horizontal scaling

Implement Azure Virtual Machine Scale Sets

Create Virtual Machine Scale Sets

Implement autoscale

Configure autoscale

Interactive lab simulation

Topic 25 Configure Azure App Service plans 

Implement Azure App Service plans

Determine Azure App Service plan pricing

Scale up and scale out Azure App Service

Configure Azure App Service autoscale

Topic 26 Configure Azure App Service 

Implement Azure App Service

Create an app with App Service

Explore continuous integration and deployment

Create deployment slots

Add deployment slots

Secure your App Service app

Create custom domain names

Back up and restore your App Service app

Use Azure Application Insights

Topic 27 Configure Azure Container Instances 

Compare containers to virtual machines

Review Azure Container Instances

Implement container groups

Review the Docker platform

Topic 28 Manage virtual machines with the Azure CLI 

What is the Azure CLI?

Create a virtual machine

Test your new virtual machine

Explore other VM images

Sizing VMs properly

Query system and runtime information about the VM

Start and stop your VM with the Azure CLI

Install software on your VM

Topic 29 Create a Windows virtual machine in Azure 

Create a Windows virtual machine in Azure

Create a Windows virtual machine

Use RDP to connect to Windows Azure virtual machines

Connect to a Windows virtual machine using RDP

Configure Azure virtual machine network settings

Topic 30 Host a web application with Azure App Service 

Create a web app in the Azure portal

Create a web app in the Azure portal

Prepare the web application code

Write code to implement a web application

Deploy code to App Service

Deploy your code to App Service

Topic 31 Configure virtual networks 

Plan virtual networks

Create subnets

Create virtual networks

Plan IP addressing

Create public IP addressing

Associate public IP addresses

Allocate or assign private IP addresses

Topic 32 Configure network security groups 

Implement network security groups

Determine network security group rules

Determine network security group effective rules

Create network security group rules

Implement application security groups

Topic 33 Configure Azure DNS 

Identify domains and custom domains

Verify custom domain names

Create Azure DNS zones

Delegate DNS domains

Add DNS record sets

Plan for Azure Private DNS zones

Review Azure Private DNS zone scenarios

Topic 34 Configure Azure Virtual Network peering 

Determine Azure Virtual Network peering uses

Determine gateway transit and connectivity

Create virtual network peering

Extend peering with user-defined routes and service chaining

Topic 35 Configure network routing and endpoints 

Review system routes

Identify user-defined routes

Determine service endpoint uses

Determine service endpoint services

Identify private link uses

Topic 36 Configure Azure Load Balancer 

Determine Azure Load Balancer uses

Implement a public load balancer

Implement an internal load balancer

Determine load balancer SKUs

Create back-end pools

Create health probes

Create load balancer rules

Topic 37 Configure Azure Application Gateway 

Implement Azure Application Gateway

Determine Azure Application Gateway routing

Configure Azure Application Gateway components

Topic 38 Design an IP addressing schema for your Azure deployment 

Network IP addressing and integration

Public and private IP addressing in Azure

Plan IP addressing for your networks

Topic 39 Distribute your services across Azure virtual networks and integrate them by using virtual network peering 

Connect services by using virtual network peering8 min

Prepare virtual networks for peering by using Azure CLI commands

Configure virtual network peering connections by using Azure CLI commands

Verify virtual network peering by using SSH between Azure virtual machines

Topic 40 Host your domain on Azure DNS 

What is Azure DNS?

Configure Azure DNS to host your domain

Exercise - Create a DNS zone and an A record by using Azure DNS

Dynamically resolve resource name by using alias record

Exercise - Create alias records for Azure DNS

Topic 41 Manage and control traffic flow in your Azure deployment with routes 

Identify routing capabilities of an Azure virtual network

Create custom routes

What is an NVA?

Create an NVA and virtual machines

Route traffic through the NVA

Topic 42 Improve application scalability and resiliency by using Azure Load Balancer 

Azure Load Balancer features and capabilities

Configure a public load balancer

Configure a public load balancer

Internal load balancer

LU5 Monitor and back up Azure resources

Topic 43 Configure file and folder backups 

Describe Azure Backup benefits

Implement Backup center for Azure Backup

Configure Azure Recovery Services vault backup options

Use the Microsoft Azure Recovery Services (MARS) agent

Configure on-premises file and folder backups

Topic 44 Configure virtual machine backups 

Explore options to protect virtual machine data

Create virtual machine snapshots in Azure Backup

Set up Azure Recovery Services vault backup options

Back up your virtual machines

Restore your virtual machines

Implement System Center DPM and Azure Backup Server

Compare the MARS agent and Azure Backup Server

Implement soft delete for your virtual machines

Implement Azure Site Recovery

Topic 45 Configure Azure Monitor 

Describe Azure Monitor key capabilities

Describe Azure Monitor components

Define metrics and logs

Identify monitoring data and tiers

Describe activity log events

Query the activity log

Topic 46 Configure Azure alerts 

Describe Azure Monitor alerts

Manage Azure Monitor alerts

Create alert rules

Create action groups

Topic 47 Configure Log Analytics 

Determine Log Analytics uses

Create a Log Analytics workspace

Create Kusto (KQL) queries

Structure Log Analytics queries

Topic 48 Configure Network Watcher 

Describe Azure Network Watcher features

Review IP flow verify diagnostics

Review next hop diagnostics

Visualize the network topology

Topic 49 Improve incident response with alerting on Azure 

Explore the different alert types that Azure Monitor supports

Use metric alerts for alerts about performance issues in your Azure environment

Use metric alerts to alert on performance issues in your Azure environment

Use log alerts to alert on events in your application

Use activity log alerts to alert on events within your Azure infrastructure

Use action groups and alert processing rules to send notifications when an alert is fired

Use an activity log alert and an action group to notify users about events in your Azure infrastructure

Topic 49 Analyze your Azure infrastructure by using Azure Monitor logs 

Features of Azure Monitor logs

Create basic Azure Monitor log queries to extract information from log data

Create basic Azure Monitor log queries to extract information from log data

Topic 50 Monitor performance of virtual machines by using Azure Monitor VM Insights

What are Azure Monitor Logs and Azure Monitor VM Insights?

Set up a Log Analytics workspace and Azure Monitor VM Insights

Build log queries by using the Kusto Query Language

Build log queries