Featured resource
2026 Tech Forecast
2026 Tech Forecast

1,500+ tech insiders, business leaders, and Pluralsight Authors share their predictions on what’s shifting fastest and how to stay ahead.

Download the forecast

AZ-104T00-A: Microsoft Azure Administrator

Course Summary

This Microsoft Certification Prep course prepares IT professionals to take the Microsoft Certified: Azure Administrator Associate exam. Participants will learn how to implement, manage, and monitor an organization’s Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance. Azure administrators serve as part of a larger team dedicated to implementing an organization's cloud infrastructure, and coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.

Prerequisites:

In order to succeed in this course, you will need:

  • Familiarity with operating systems, networking, servers and virtualization
  • Experience with PowerShell, Azure CLI, the Azure Portal, Azure Resource Manager and Microsoft Entra
Purpose
Learn what is covered on the Microsoft Certified: Azure Administrator Associate exam
Audience
Azure Administrators who implement, manage, and monitor identity, governance, storage, compute, and virtual networks in a cloud environment
Role
Systems Administrators | Cloud Solutions Architects | DevOps Engineers | Network Engineers
Skill level
Intermediate
Style
Lecture | Hands-on Activities | Labs
Duration
4 days
Related technologies
PowerShell | Microsoft Entra ID

 

Learning objectives
  • Manage Microsoft Entra users and groups
  • Configure access to storage by setting up Azure Storage firewalls and virtual networks
  • Automate deployment of resources utilizing Azure Resource Manager (ARM) templates or Bicep files
  • Configure and manage virtual networks in Azure
  • Monitor resources in Azure

What you'll learn:

In this AZ-104T00-A: Microsoft Azure Administrator course, you'll learn:

Manage identities and Governance in Azure

  • Manage Microsoft Entra users and groups
    • Create users and groups
    • Manage user and group properties
    • Manage licenses in Microsoft Entra ID
    • Manage external users
    • Configure self-service password reset (SSPR)
  • Manage access to Azure resources
    • Manage built-in Azure roles
    • Assign roles at different scopes
    • Interpret access assignments
  • Manage Azure subscriptions and governance
    • Implement and manage Azure Policy
    • Configure resource locks
    • Apply and manage tags on resources
    • Manage resource groups
    • Manage subscriptions
    • Manage costs by using alerts, budgets, and Azure Advisor recommendations
    • Configure management groups

Implement and Manage Storage

  • Configure access to storage
    • Configure Azure Storage firewalls and virtual networks
    • Create and use shared access signature (SAS) tokens
    • Configure stored access policies
    • Manage access keys
    • Configure identity-based access for Azure Files
    • Configure and manage storage accounts
  • Create and configure storage accounts
    • Configure Azure Storage redundancy
    • Configure object replication
    • Configure storage account encryption
    • Manage data by using Azure Storage Explorer and AzCopy
  • Configure Azure Files and Azure Blob Storage
    • Create and configure a file share in Azure Files
    • Create and configure a container in Azure Blob Storage
    • Configure storage tiers
    • Configure soft delete for blobs and containers
    • Configure snapshots and soft delete for Azure Files
    • Configure blob lifecycle management
    • Configure blob versioning

Deploy and Manage Azure Compute Resources

  • Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files
    • Interpret an Azure Resource Manager template or a Bicep file
    • Modify an existing Azure Resource Manager template
    • Modify an existing Bicep file
    • Deploy resources by using an Azure Resource Manager template or a Bicep file
    • Export a deployment as an Azure Resource Manager template or convert an Azure Resource Manager template to a Bicep file
  • Create and configure virtual machines
    • Create a virtual machine
    • Configure encryption at host for Azure virtual machines
    • Move a virtual machine to another resource group, subscription, or region
    • Manage virtual machine sizes
    • Manage virtual machine disks
    • Deploy virtual machines to availability zones and availability sets
    • Deploy and configure an Azure Virtual Machine Scale Sets
  • Provision and manage containers in the Azure Portal
    • Create and manage an Azure Container Registry
    • Provision a container by using Azure Container Instances
    • Provision a container by using Azure Container Apps
    • Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps
  • Create and configure Azure App Service
    • Provision an App Service plan
    • Configure scaling for an App Service plan
    • Create an App Service
    • Configure certificates and Transport Layer Security (TLS) for an App Service
    • Map an existing custom DNS name to an App Service
    • Configure backup for an App Service
    • Configure networking settings for an App Service
    • Configure deployment slots for an App Service

Implement and Manage Virtual Networks in Azure

  • Configure and manage virtual networks in Azure
    • Create and configure virtual networks and subnets
    • Create and configure virtual network peering
    • Configure public IP addresses
    • Configure user-defined routes
    • Troubleshoot network connectivity
  • Configure secure access to virtual networks
    • Create and configure network security groups (NSGs) and application security groups
    • Evaluate effective security rules in NSGs
    • Implement Azure Bastion
    • Configure service endpoints for Azure platform as a service (PaaS)
    • Configure private endpoints for Azure PaaS
  • Configure name resolution and load balancing
    • Configure Azure DNS
    • Configure an internal or public load balancer
    • Troubleshoot load balancing

Monitor and Maintain Azure Resources

  • Monitor resources in Azure
    • Interpret metrics in Azure Monitor
    • Configure log settings in Azure Monitor
    • Query and analyze logs in Azure Monitor
    • Set up alert rules, action groups, and alert processing rules in Azure Monitor
    • Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights
    • Use Azure Network Watcher and Connection monitor
  • Implement backup and recovery
    • Create a Recovery Services vault
    • Create an Azure Backup vault
    • Create and configure a backup policy
    • Perform backup and restore operations by using Azure Backup
    • Configure Azure Site Recovery for Azure resources
    • Perform a failover to a secondary region by using Site Recovery
    • Configure and interpret reports and alerts for backups

Dive in and learn more

When transforming your workforce, it’s important to have expert advice and tailored solutions. We can help. Tell us your unique needs and we'll explore ways to address them.

Let's chat

By clicking submit, you agree to our Privacy Policy and Terms of Use, and consent to receive marketing emails from Pluralsight.