Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond: A pragmatic guide to achieving the Azure administration certification, 2nd Edition

Cover
Title Page
Contributors
Table of Contents
Preface
Copyright and Credits
Part 1: Managing Azure Identities and Governance
Chapter 1: Managing Azure Active Directory Objects
	Technical requirements
	Creating Azure AD users and groups
		Creating users in Azure AD
		Creating groups in Azure AD
	Creating Azure AD AUs
	Managing user and group properties
	Managing device settings
	Performing bulk updates
	Managing guest accounts
	Configuring Azure AD join
	Configuring SSPR
	Summary
Chapter 2: Managing Role-Based Access Control
	Technical requirements
	Creating a custom RBAC role
		Creating a custom role
	Providing access to resources by assigning the custom RBAC role
		Confirming the role assignment steps
	Interpreting access assignments
	Summary
Chapter 3: Creating and Managing Governance
	Technical requirements
	Understanding Azure policies
		How does Azure Policy work?
		Azure Policy versus RBAC
		Working with Azure Policy
		Further reading
	Applying and managing tags on resources
		Tagging strategy
		Applying a resource tag
		Further reading
	Summary
Chapter 4: Managing Governance and Costs
	Technical requirements
	Managing resource groups
		Deploying a resource group
		Listing resource groups
		Deleting a resource group
		PowerShell scripts
		Further reading
	Configuring resource locks
		Permissions required for creating or deleting locks
		Adding a resource lock
		PowerShell scripts
		ARM templates
		Further reading
	Managing subscriptions
		Relationship between Azure AD and subscriptions
		Why do we have multiple subscriptions in an environment?
		Further reading
	Managing costs
		Cost Management
		Budgets
		Cost alerts
		Advisor recommendations
		Reservations
		Further reading
	Configuring management groups
		Creating a management group
		Further reading
	Summary
Chapter 5: Practice Labs – Managing Azure Identities and Governance
	Technical requirements
	Managing Azure AD objects
		Lab scenario one
	Managing RBAC
		Lab scenario two
		Lab scenario three
Part 2:  Implementing and Managing Storage
Chapter 6: Understanding and Managing Storage
	Technical requirements
	Understanding Azure storage accounts
		Types of storage accounts
		Storage access tiers
		Azure disk storage
		Redundancy
		Further reading
	Creating and configuring storage accounts
		Creating a storage account
		PowerShell scripts
		Further reading
	Using Azure Import/Export
		Importing into an Azure job
		Exporting from an Azure job
		Further reading
	Installing and using Azure Storage Explorer
		Installation
	Configuring Azure Files and Azure Blob storage
		Creating an Azure file share
		Configuring Azure Blob storage
		Configuring storage tiers
		Azure URL paths for storage
		PowerShell scripts
		Further reading
	Summary
Chapter 7: Securing Storage
	Technical requirements
	Configuring network access to storage accounts
		Public endpoint and Azure Virtual Network (VNet) integration
		Private endpoints
		Network routing from storage accounts
		PowerShell scripts
		Further reading
	Storage access keys
		Managing access keys
	Working with SAS tokens
		Types of SAS
		Forms of SAS
		Generating SAS tokens
		Storage access policies
		Further reading
	Configuring access and authentication
		Configuring Azure AD authentication for a storage account
		Configuring access to Azure files
		Further reading
	Copying data by using AzCopy
		Downloading and installing
		Copying data by using AzCopy
		Copying data between containers using AzCopy
		Further reading
	Configuring storage replication and life cycle
		Storage replication and management services
		Creating and configuring the Azure File Sync service
		Implement Azure Storage replication
		Configuring blob object replication
		Configuring blob life cycle management
		Configuring blob data protection
		Further reading
	Summary
Chapter 8: Practice Labs – Implementing and Managing Storage
	Technical requirements
	Managing the Azure Storage lab
	The Azure Functions AzCopy lab
		Lab steps
		Prerequisites
	Connecting storage using a private endpoint lab
		Lab steps
	Summary
Part 3: Deploying and Managing Azure Compute Resources
Chapter 9: Automating VM Deployments Using ARM Templates
	Technical requirements
	Modifying an ARM template
		Configure a VHD template
		Deploy from a template
	Saving a deployment as an ARM template
	Deploying VM extensions
	Summary
Chapter 10: Configuring Virtual Machines
	Technical requirements
	Understanding Azure disks
		Disk management options
		Disk performance
		Disk caching
	Disk types
		Disk redundancy options
	Understanding Azure VMs
		VM sizes
		Networking
		Fault domain versus update domain
		Scale sets
		Availability sets
	Deploying a VM in Azure
		PowerShell scripts
	Deploying and configuring scale sets
	VM management tasks
		Managing VM sizes
		Adding data disks
		Configuring networking
		Moving VMs from one resource group to another
		Redeploying VMs
	Disk encryption in Azure
		Configuring ADE
	Automating configuration management
	Summary
Chapter 11: Creating and Configuring Containers
	Technical requirements
	Introduction to containers
	Containers versus VMs
		Isolation
		OS
		Deployment
		Storage persistence
		Fault tolerance
	ACI
	Container groups
		Common scenarios
		Resources
		Networking
		Deployment
	Docker platform
		Docker terminology
		Setting up Docker
		Creating our first Docker image
	AKS
	Creating an Azure container registry
	Deploying your first Azure container instance
	Configuring container groups for Azure container instances
	Configuring sizing and scaling for Azure container instances
	Deploying AKS
	Configuring storage for AKS
	Configuring scaling for AKS
	Configuring network connections for AKS
		Network configuration
		Traffic routing
		Security
	Upgrading an AKS cluster
	Summary
Chapter 12: Creating and Configuring App Services
	Technical requirements
	Understanding App Service plans and App Service
		App Service plans
	Creating an App Service plan
	Creating an app service
		PowerShell scripts
	Configuring the scaling settings of an App Service plan
		PowerShell scripts
	Securing an app service
	Configuring custom domain names
	Configuring a backup for an app service
	Configuring networking settings
	Configuring deployment settings
	Summary
Chapter 13: Practice Labs – Deploying and Managing Azure Compute Resources
	Technical requirements
		Downloading and extracting files for labs
	Managing virtual machines lab
	Deploying an Azure Container Instances lab
	Deploying an Azure Kubernetes Service lab
	Deploying Web App service lab
	Summary
Part 4: Configuring and Managing Virtual Networking
Chapter 14: Implementing and Managing Virtual Networking
	Technical requirements
	Creating and configuring virtual networks, including peering
		A VNet overview
		An IP addressing overview
	Create private and public IP addresses
	User-defined routing
	Implementing subnets
	Configuring endpoints on subnets
	Configuring private endpoints
	Configuring Azure DNS
	Summary
Chapter 15: Securing Access to Virtual Networks
	Technical requirements
	Associating an NSG with a subnet
	Creating NSG rules
	Evaluating effective security rules
	Implementing Azure Firewall and Azure Bastion
		Azure Firewall
		Azure Bastion
	Summary
Chapter 16: Configuring Load Balancing
	Technical requirements
	Azure load balancing services
		Regional services
		Global services
		Load balancer service options
		SSL offloading
		Path-based load balancing
		Session affinity
		Web application firewall
	Azure Load Balancer
		Features and capabilities
		Load Balancer SKUs
	Configuring an ILB
		Creating the VNet
		Creating the VMs
		Creating the load balancer
		Creating the health probes
		Creating load balancing rules
		Testing the load balancer
	Configuring a public load balancer
		Creating the public load balancer
		Creating the VNet and NSG
		Creating backend servers
		Testing the load balancer
		Troubleshooting load balancing
	Azure Application Gateway
	Configuring Azure Application Gateway
		Creating an Azure application gateway
		Deploying your web app
		Testing the application gateway
	Azure Front Door
	Summary
Chapter 17: Integrating On-Premises Networks with Azure
	Technical requirements
	Azure VPN Gateway
		S2S VPN connections
		Multi-site VPN connections
		P2S VPN connections
		ExpressRoute
	Creating and configuring an Azure VPN gateway
		Creating and configuring an Azure VPN gateway
		VPN server deployment
		S2S VPN Configuration
		Verify connectivity via the Azure portal
		VNet to VNet connections
	Create and configure Azure ExpressRoute
	Azure Virtual WAN
	Configuring Azure Virtual WAN
		Creating a VPN Site
		Connecting your VPN site to the hub
		Connect to your VPN site
	Summary
Chapter 18: Monitoring and Troubleshooting Virtual Networking
	Technical requirements
	Network Watcher
		Monitoring
		Network diagnostic tools
		Metrics
		Logs
	Configuring Network Watcher
		Network resource monitoring
		Managing VNet connectivity
		Monitoring on-premises connectivity
		Troubleshooting external networking
	Summary
Chapter 19: Practice Labs – Configuring and Managing Virtual Networking
	Technical requirements
		Downloading and extracting files for labs
	Virtual network subnetting lab
	Global peering interconnectivity Lab
	Traffic management lab
	Summary
Part 5: Monitoring and Backing Up Azure Resources
Chapter 20: Monitoring Resources with Azure Monitor
	Technical requirements
	Azure Monitor
		The Activity log
		Metrics
		Alerts
		Insights
		Diagnostic settings
		Service Health
	Creating and analyzing metrics and alerts
		Creating a VM
		Creating a metric
		Creating a dashboard
		Creating an alert
		Configuring diagnostic settings on resources
		Triggering an alert
	Querying Log Analytics
		Creating a Log Analytics workspace
		Utilizing log search query functions
		Querying logs in Azure Monitor
	Configuring Application Insights
		Creating your application
		Creating your Application Insights resource
		Associate your web app with Application Insights
	Summary
Chapter 21: Implementing Backup and Recovery Solutions
	Technical requirements
	Creating a Recovery Services vault
	Creating and configuring backup policies
	Performing backup and restore operations via Azure Backup
	Performing site-to-site recovery via Azure Site Recovery
	Configuring and reviewing backup reports
	Summary
Chapter 22: Practice Labs – Monitoring and Backing Up Azure Resources
	Technical requirements
		Downloading and extracting files for labs
	Azure Recovery Services Vault with VM backup lab
	Azure Monitor lab
	Summary
Chapter 23: Mockup Test Questions
	Managing Azure identities and governance (15-20%)
	Implement and manage storage (15-20%)
	Deploy and manage Azure compute resources (20-25%)
	Configure and manage virtual networking (25-30%)
	Monitor and back up Azure resources (10-15%)
	Mockup test answers
		Manage Azure identities and governance
		Implement and manage storage
		Configure and manage virtual networking (30-35%)
		Monitor and back up Azure resources
Index
Other Books You May Enjoy