Filters
How to search
  • Plain words find names, texts and examples.
  • "two words" finds the exact phrase.
  • --name or -x finds an option.
  • #word looks only inside commands.
  • @grep finds lessons and labs that use grep.
  • Filters: cat:network · in:labs · in:notes · level:rhcsa · ch:8 · root:yes. Put ! before a word to leave it out. OR between words means one of them.
  • ↑ ↓ to move · Enter to open · Esc to close · / to search

Microsoft Azure Administrator (AZ-104)

Run Azure as an admin: identities and governance, storage, virtual machines and containers, networking, monitoring and backup. Phase 2 of my path.

Course by
Microsoft
Course code
AZ-104
Version
2026
Lessons
87

These summaries follow the public outline of the course. I wrote every lesson in my own words and tested the commands on RHEL 10. They are not Red Hat training material. Take the official course for the full content and the hands-on labs.

Next course: Terraform

Parts and chapters

Part 1

Identity and governance (20–25 %)

  1. 1Find your way in Azure and its toolsPrerequisites for Azure administrators6 lessons
    Lessons
    1. 1.1 Know the hierarchy of Azure
    2. 1.2 Choose regions and zones
    3. 1.3 Use the Azure portal
    4. 1.4 Use Azure CLI
    5. 1.5 Use Azure PowerShell and Cloud Shell
    6. 1.6 Understand limits and quotas
  2. 2Manage users and groups in Microsoft Entra IDManage Microsoft Entra users and groups7 lessons
    Lessons
    1. 2.1 Know the identity objects
    2. 2.2 Create users
    3. 2.3 Invite guest users
    4. 2.4 Use groups for access
    5. 2.5 Assign licenses
    6. 2.6 Let users reset their own password
    7. 2.7 Join and manage devices
  3. 3Control access, policies, locks, tags and costsManage access to Azure resources and governance7 lessons
    Lessons
    1. 3.1 Give access with Azure RBAC
    2. 3.2 Write a custom role
    3. 3.3 Enforce rules with Azure Policy
    4. 3.4 Protect resources with locks
    5. 3.5 Organise with tags
    6. 3.6 Manage subscriptions and management groups
    7. 3.7 Watch and control costs

Part 2

Storage (15–20 %)

  1. 4Create and secure storage accountsConfigure access to storage and storage accounts7 lessons
    Lessons
    1. 4.1 Choose the account type
    2. 4.2 Choose the redundancy
    3. 4.3 Use access keys with care
    4. 4.4 Give limited access with SAS
    5. 4.5 Give data access with Entra roles
    6. 4.6 Limit network access
    7. 4.7 Know the encryption options
  2. 5Work with blobs, file shares and data toolsConfigure Azure Blob Storage and Azure Files7 lessons
    Lessons
    1. 5.1 Use containers and blobs
    2. 5.2 Choose access tiers
    3. 5.3 Automate tiers with lifecycle rules
    4. 5.4 Protect data from deletion
    5. 5.5 Create Azure Files shares
    6. 5.6 Move data with AzCopy
    7. 5.7 Copy data between regions

Part 3

Compute (20–25 %)

  1. 6Deploy resources from ARM templates and BicepAutomate deployment of resources by using ARM templates or Bicep files5 lessons
    Lessons
    1. 6.1 Read an ARM template
    2. 6.2 Write the same in Bicep
    3. 6.3 Deploy a template
    4. 6.4 Export a template from existing resources
    5. 6.5 Use parameter files
  2. 7Create and run virtual machinesCreate and configure virtual machines8 lessons
    Lessons
    1. 7.1 Create a VM
    2. 7.2 Choose a size
    3. 7.3 Add and manage disks
    4. 7.4 Plan for availability
    5. 7.5 Scale out with scale sets
    6. 7.6 Configure VMs with extensions
    7. 7.7 Encrypt VM disks
    8. 7.8 Move a VM
  3. 8Run containers and web appsProvision and manage containers and Azure App Service7 lessons
    Lessons
    1. 8.1 Store images in Azure Container Registry
    2. 8.2 Run a container with Container Instances
    3. 8.3 Run apps on Container Apps
    4. 8.4 Host a web app on App Service
    5. 8.5 Scale an App Service app
    6. 8.6 Deploy safely with slots
    7. 8.7 Add a domain, TLS and backups

Part 4

Virtual networking (15–20 %)

  1. 9Build virtual networks, peering, routes and DNSConfigure and manage virtual networks in Azure6 lessons
    Lessons
    1. 9.1 Plan the address space
    2. 9.2 Use public IP addresses
    3. 9.3 Connect VNets with peering
    4. 9.4 Make your own routes
    5. 9.5 Use Azure DNS
    6. 9.6 Connect to the office
  2. 10Secure network access to Azure resourcesConfigure secure access to virtual networks5 lessons
    Lessons
    1. 10.1 Filter traffic with NSGs
    2. 10.2 Group servers with ASGs
    3. 10.3 Check the effective rules
    4. 10.4 Log in to VMs with Azure Bastion
    5. 10.5 Keep PaaS traffic private
  3. 11Balance load and fix connection problemsConfigure load balancing and troubleshoot network connectivity5 lessons
    Lessons
    1. 11.1 Choose the right load balancer
    2. 11.2 Build a public load balancer
    3. 11.3 Build an internal load balancer
    4. 11.4 Troubleshoot load balancing
    5. 11.5 Use Network Watcher

Part 5

Monitor and maintain (10–15 %)

  1. 12Watch resources with Azure MonitorMonitor resources in Azure5 lessons
    Lessons
    1. 12.1 Know metrics and logs
    2. 12.2 Collect logs in a workspace
    3. 12.3 Query logs with KQL
    4. 12.4 Create alerts and action groups
    5. 12.5 Use insights and workbooks
  2. 13Back up and recover with Azure Backup and Site RecoveryImplement backup and recovery6 lessons
    Lessons
    1. 13.1 Choose a vault
    2. 13.2 Back up a VM
    3. 13.3 Restore from a backup
    4. 13.4 Back up file shares and blobs
    5. 13.5 Protect backups from attackers
    6. 13.6 Replicate VMs with Site Recovery

Part 6

Review

  1. 14Review AZ-104 and get ready for the examExam preparation6 lessons
    Lessons
    1. 14.1 Identity and governance
    2. 14.2 Storage
    3. 14.3 Compute
    4. 14.4 Networking
    5. 14.5 Monitor and maintain
    6. 14.6 Plan the exam day

What you learn

The main skills of the course and the chapter where you learn each one.

Manage Azure identities and governance

Implement and manage storage

Deploy and manage compute

Implement and manage virtual networking

Monitor and maintain Azure resources