Azure AZ-104 Microsoft Azure Administrator (

Manage Azure identities and governance (15–20%) Manage Azure AD objects • Create users and groups • Manage licenses in Azure AD • Create administrative units • Manage user and group properties • Manage device settings and device identity • Perform bulk updates • Manage guest accounts • Configure self-service password reset Manage access control • Create custom role-based access control (RBAC) and Azure AD roles • Provide access to Azure resources by assigning roles at different scopes • Interpret access assignments Manage Azure subscriptions and governance • Configure and manage Azure Policy • Configure resource locks • Apply and manage tags on resources • Manage resource groups • Manage subscriptions • Manage costs by using alerts, budgets, and recommendations • Configure management groups Implement and manage storage (15–20%) Configure access to storage • Configure network access to storage accounts • Create and configure storage accounts • Generate shared access signature tokens • Configure stored access policies • Manage access keys • Configure Azure AD authentication for a storage account • Configure storage encryptione • Deploy virtual machine (VM) extensions Create and configure VMs • Create a VM • Manage images by using the Azure Compute Gallery • Configure Azure Disk Encryption • Move VMs from one resource group to another • Manage VM sizes • Add data disks • Configure VM network settings • Configure VM availability options • Deploy and configure VM scale sets Create and configure containers • Configure sizing and scaling for Azure Container Instances • Configure container groups for Azure Container Instances • Create and configure Azure Container Apps • Configure storage for Azure Kubernetes Service (AKS) • Configure scaling for AKS • Configure network connections for AKS • Upgrade an AKS cluster Exam AZ-104: Microsoft Azure Administrator 5 Create and configure an Azure App Service • Create an App Service plan • Configure scaling settings in an App Service plan • Create an App Service • Secure an App Service • Configure custom domain names • Configure backup for an App Service • Configure networking settings • Configure deployment settings Configure and manage virtual networking (20–25%) Configure virtual networks • Create and configure virtual networks and subnets • Create and configure virtual network peering • Configure private and public IP addresses • Configure user-defined network routes • Configure Azure DNS Configure secure access to virtual networks • Create and configure network security groups (NSGs) and application security groups (ASGs) • Evaluate effective security rules • Implement Azure Bastion • Configure service endpoints • Configure private endpoints Configure load balancing • Configure Azure Application Gateway • Configure an internal or public load balancer • Troubleshoot load balancing Monitor virtual networking • Monitor on-premises connectivity • Configure and use Azure Monitor for networks • Use Azure Network Watcher • Troubleshoot external networking • Troubleshoot virtual network connectivity Exam AZ-104: Microsoft Azure Administrator 6 Monitor and maintain Azure resources (10–15%) Monitor resources by using Azure Monitor • Configure and interpret metrics • Configure Azure Monitor Logs • Query and analyze logs • Set up alerts and actions • Configure monitoring of VMs, storage accounts, and networks by using VM insights Implement backup and recovery • Create an Azure Recovery Services vault • Create an Azure Backup vault • Create and configure backup policy • Perform backup and restore operations by using Azure Backup • Configure Azure Site Recovery for Azure resources • Perform failover to a secondary region by using Azure Site Recovery • Configure and review backup reports