Microsoft Certified Azure Administrator

Manage Subscriptions and Resources (AZ-100T01)

This section teaches IT Professionals how to manage their Azure subscriptions, including access, policies, and compliance, as well as how to track and estimate service usage and related costs. Students also learn how cloud resources are managed in Azure through user and group accounts. Students learn how to grant appropriate access to Azure AD users, groups, and services through Role-based access control (RBAC). Students also discover the core monitoring tools and capabilities provided by Azure, including Azure Alerts and Activity Log. Students are then introduced to Log Analytics as a broad data analytics solution, and use this service to query and analyze operational data. Students then learn about the Azure Resource Manager deployment model, and how to work with resources, resource groups and ARM templates.

Because this section is the first course in the series for the Azure Administrator exams, there is a considerable amount of foundational content that is covered here in order to prepare students for the remaining courses in the curriculum. So students are provided with a lesson that covers tips and tricks for working in the Azure portal, as well as an introduction to key tools used in the Azure environment, such as the Cloud Shell and Resource Explorer. Emphasis is laid on PowerShell and the command line interface (CLI) as important skills to acquire not only in preparation for the exam but for the job role itself.

At completion
After completing this section, students will be able to:
-Manage Azure subscriptions and billing, and implement Azure policies.
-Implement access management with Azure users, groups, and role-based access control.
-Use Azure Monitor to configure Azure alerts and review the Azure Activity Log.
-Query and analyze Log Analytics data.
-Deploy resources with ARM templates and organize Azure resources.
-Optimize your use of Azure tools like the Azure portal, Azure PowerShell, Cloud Shell and the Azure CLI.

Outline
Module 1: Managing Azure Subscriptions
Module 2: Access Management for Cloud Resources
Module 3: Monitoring and Diagnostics
Module 4: Log Analytics
Module 5: Azure Resource Manager
Module 6: Azure Tips, Tricks, and Tools

Implementing and Managing Storage (AZ-100T02)

This section teaches IT Professionals how to implement Azure storage solutions for a variety of scenarios. Students learn about the different storage accounts and services as well as basic data replication concepts and available replication schemes. Students are also introduced to Storage Explorer as a convenient way to work with Azure storage data. Students also learn the types of storage and how to work with managed and custom disks.

Azure blob storage is how Azure stores unstructured data in the cloud, and students learn how to work with blobs and blob containers. They also learn how to use Azure Files to work with file shares that are accessed via the Server Message Block (SMB) protocol. In addition to blob storage, the course covers Table and Queue storage as storage options for structured data.

Students then learn how to secure and manage storage using Shared Access Signatures (SAS) and Azure Backup, using Recovery Services Vault. Next, students learn how to use Azure File Sync to centralize an organization's file Shares in Azure Files. Content Delivery Network (CDN) is used to store cached content on a distributed network of servers that are close to end users. Students learn how to optimize content delivery with Azure CDN, as well as how to transfer large amounts of data using the Azure Import/Export service.

Lastly, students learn how to monitor Azure storage by configuring metrics and alerts and using the Activity Log. Students learn how to analyze usage trends, trace requests, and diagnose issues with a storage account.

At completion
After completing this section, students will be able to:
-Create Azure storage accounts for different data replication, pricing, and content scenarios.
-Implement virtual machine storage, blob storage, Azure files, and structured storage.
-Secure and manage storage with shared access keys, Azure backup, and Azure File Sync.
-Store and access data using Azure Content Delivery Network, and the Import and Export service.
-Monitor Azure storage with metrics and alerts, and the Activity Log.

Outline
Module 1: Overview of Azure Storage
Module 2: Storage Services
Module 3: Securing and Managing Storage
Module 4: Storing and Accessing Data
Module 5: Monitoring Storage

Deploying and Managing Virtual Machines (AZ-100T03)

This section teaches IT Professionals how to create and manage virtual machines as part of an Infrastructure as a Service (IaaS) computing infrastructure. Students learn how to assess their on-premises environment for virtual machine readiness in preparation for moving resources to the cloud, including sizing, pricing, and design considerations.

Students also learn how to create and deploy virtual machines in Azure, using the Azure portal, PowerShell, and ARM templates. The section includes instruction on deploying custom images and Linux virtual machines. Students also learn how to configure the networking and storage components of virtual machines. Deploying highly available virtual machines is critical in the light of planned and unplanned events, and students learn how to use availability sets to ensure that virtual machine resources are available during downtime. Students also learn how to use extensions and Desired State Configuration (DSC) for post deployment automation and configuration tasks.

Finally, students learn how to perform virtual machine backups, and to use Azure's monitoring capabilities to collect, view, and analyze virtual machine diagnostic and log data.

At completion
After completing this section, students will be able to:
-Explain virtual machine usage cases, storage options, pricing, operating systems, networking capabilities, and general planning
considerations.
-Create Windows virtual machines in the Azure Portal, with Azure PowerShell, or using ARM Templates.
-Deploy custom server images and Linux virtual machines.
-Configure virtual machine networking and storage options.
-Implement virtual machine high availability, scalability, and custom scripts extensions.
-Backup, restore, and monitor virtual machines.

Outline
Module 1: Overview of Azure Machines
Module 2: Creating Virtual Machines
Module 3: Deploying Virtual Machine Images
Module 4: Configuring Virtual Machines
Module 5: Configuring Availability and Extensibility
Module 6: Managing and Monitoring Virtual Machines

Configuring and Managing Virtual Networks (AZ-100T04)

This section teaches IT Professional how to configure and manage Azure virtual networks (VNets). The benefits of moving an infrastructure to the cloud, removing the need to maintain expensive datacenters are an appealing proposition for many small and medium-sized companies. Regardless, once resources are moved to Azure, they require the same networking functionality as an on-premises deployment, and this section deals with the basic network configuration tasks.
Students review the basis of IP addressing, with specific emphasis on how public and private IP addressing works in the cloud. Students learn how to configure network routing and how to implement Azure DNS.

Securing the network infrastructure is of key importance and students learn how to use Network Security Groups (NSGs) to limit network traffic to resources in a virtual network, by creating security rules that allow or deny inbound or outbound traffic. Students also learn how to use NSG logging to diagnose and troubleshoot network connectivity problems.

The section also covers different connectivity scenarios for Azure virtual networks and students learn how to connect virtual networks with VNet-to-VNet VPN gateways and virtual network peering.

At completion
After completing this section, students will be able to:
-Understand virtual networking components, IP addressing, and network routing options.
-Implement Azure DNS domains, zones, record types, and resolution methods.
-Configure network security groups, service endpoints, logging, and network troubleshooting.
-Implement site connectivity schemas including VNet-to-VNet connections and virtual network peering

Outline
Module 1: Azure Virtual Networks
Module 2: Azure DNS
Module 3: Securing Virtual Network Resources
Module 4: Connecting Virtual Networks

Manage Identities (AZ-100T05)

This section teaches IT Professional how to use Azure Active Directory (AD) to provide employees and customers with a multi-tenant cloud-based directory and identity management system. Students will learn the differences between Azure AD and Active Directory Domain Services (AD DS), as well the differences in functionality offered by the different editions of Azure AD. Students also learn how to configure self-service password reset, or to use the option of password writeback to reset user passwords regardless of their location. Students are then introduced to Azure AD Identity Protection and learn how they can use it to protect their organizations from compromised accounts, identity attacks, and configuration issues. Students also learn how to integrate Azure AD with the many Software as a Service (SaaS) applications that are used, in order to secure user access to those applications.

Next, the concepts of Azure domains and tenants, and users and groups are explained and students learn how to work with the various Azure AD objects. Students are introduced to Azure role-based access control to be able to provide a more granular access based on the principle of least privilege. An administrator, or user, can do exactly the task they need to accomplish; no more, no less. Students also learn how to work with Azure joined devices and Hybrid AD joined devices, enabling their users to be productive wherever and whenever – but ensuring that corporate assets are protected and that devices meet security and compliance standards.

Students learn how to use Azure AD Connect to integrate their on-premises directories with Azure AD, providing a common identity for their users of Office 365, Azure, and SaaS applications integrated with Azure AD. Lastly, students also learn how to use Azure AD Application Proxy to be able to provide their users with remote access to web application that are published on-premises, such as SharePoint sites, Outlook Web Access, or any other line of business (LOB) applications the organization has.

At completion
After completing this section, students will be able to:
-Implement Azure Active Directory, Self-Service Password Reset, Azure AD Identity Protection, and integrated SaaS applications.
-Configure domains and tenants, users and groups, roles, and devices.
-Implement and manage Azure Active Directory integration options and Azure AD Application Proxy.

Outline
Module 1: Managing Azure Active Directory
Module 2: Managing Azure Active Directory Objects
Module 3: Implementing and Managing Hybrid Identities

Migrate Servers to Azure (AZ-101T01)

This section teaches IT professionals how to discover, assess, plan and implement a migration of on-premises resources and infrastructure to Azure. Students will learn how to use Azure Migrate to perform the discovery and assessment phase that is critical to a successful migration. Students will also learn how to use Azure Site Recovery for performing the actual migration of workloads to Azure. The section focuses primarily on using ASR on a Hyper-V infrastructure to prepare and complete the migration process. In addition, students learn about other scenarios, such as migration of VMware vSphere Hypervisor virtual machines and System Center VMM Hyper-V machines.

At completion
After completing this section, students will be able to:
-Use Azure Migrate to discover and assess on-premises virtual machine migration to Azure.
-Use Azure Site Recovery to migrate Hyper-V infrastructures to Azure.
-Review migration strategies for VMWare and System Center VMM virtual machines.

Outline
Module 1: Managing Azure Active Directory
Module 2: Azure Site Recovery
Module 3: Additional Migration Scenarios

Implementing and Managing Application Services (AZ-101T02)

This section teaches IT Professionals how to manage and maintain the infrastructure for the core web apps and services that developers build and deploy. Students will learn how Azure App Service is used as a Platform as a Service (PaaS) offering for deploying cloud apps for web and mobile environments. Students will learn how to use App Service Environments (ASE) to host a dedicated environment for securing and running App Service apps at scale. Students will also learn how to use deployment slots as staging environments for web apps, that can then be swapped into production when needed. This section also teaches students how to scale up and scale out to meet and adjust for demand, and how bandwidth for web traffic can be optimized using Application Gateways and Content Delivery Networks (CDN). Lastly, the course provides students with an overview of serverless computing solutions, including Azure Functions, Event Grid, Service Bus, and Logic Apps.

At completion
After completing this section, students will be able to:
-Implement use cases and configuration options for Azure App Services and App Service Environments.
-Manage and secure web apps with backup, restore, snapshot, and cloning.
-Optimize your web app performance with Scale Up, Scale Out, Autoscale, and Grow out strategies.
-Deploy serverless computing features like Azure Functions, Event Grid, and Service Bus.

Outline
Module 1: Introducing the Azure App Service Platform
Module 2: Managing and Securing Web Apps
Module 3: Scaling and Performance
Module 4: Deploying Serverless Computing Solutions

Implement Advanced Virtual Networking (AZ-101T03)

This section teaches IT Professionals how to implement and configure different Azure networking traffic distribution mechanisms, including Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway. Students will also learn how to implement site connectivity for multiple scenarios including cross-premises and hybrid configurations, as well as extending on-premises networks into the Microsoft cloud over a dedicated private connection, using Azure ExpressRoute. Lastly, students will learn how to use Network Watcher to monitor and troubleshoot Azure virtual networks. They will also learn how to troubleshoot and remediate common errors in Azure Application Gateway and Azure Load Balancer.

At completion
After completing this section, students will be able to:
-Implement and configure Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway.
-Implement and configure Site-to-Site VPN connections and ExpressRoute.
-Implement and configure Network Watcher and troubleshooting common network issues.

Outline
Module 1: Distributing Network Traffic
Module 2: Site Connectivity
Module 3: Monitoring and Troubleshooting Network Connectivity

Secure Identities (AZ-101T04)

This section teaches IT Professionals to understand the challenges that organizations face in keeping modern IT environments secure, as the more distributed environments that are part of a cloud-first or hybrid world have rapidly created new security challenges for IT. The section focuses on three key areas in the defense against attackers who target security vulnerabilities, resulting particularly from credential theft and compromised identities: Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Azure Active Directory Privileged Identity Management (PIM). Students learn to implement two-step verification to secure the sign-in process, as well has how to use advanced features like trusted IPs and Fraud Alerts with MFA to customize their identity access strategy. Using Privileged Identity Management, students learn how to apply just the right amount of access rights for just the right amount of time to the various administrative roles as well as to resources.

At completion
After completing this section, students will be able to:
-Use Azure RBAC to grant a granular level of access based on an administrator’s assigned tasks.
-Use Azure Multi-Factor Authentication to configure a strong authentication for users at sign-in.
-User Azure AD Privileged Identity Management to configure access rights based on just-in-time administration.

Outline
Module 1: Introduction to Identity Protection in Azure
Module 2: Using Multi-Factor Authentication for Secure Access
Module 3: Azure AD Privileged Identity Management