<p><span>Navigate Microsoft Azure cloud services like storage, security, networking, and compute cloud capabilities with ease and pass the AZ-104 exam while developing skills for daily use</span></p><h4><span>Key Features</span></h4><ul><li><span><span>Get to grips with AZ-104 exam topics like infra
Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond: A pragmatic guide to achieving the Azure administration certification, 2nd Edition
β Scribed by Riaan Lowe, Donovan Kelly
- Publisher
- Packt Publishing
- Year
- 2022
- Tongue
- English
- Leaves
- 776
- Edition
- 2
- Category
- Library
No coin nor oath required. For personal study only.
β¦ Synopsis
Navigate Microsoft Azure cloud services like storage, security, networking, and compute cloud capabilities with ease and pass the AZ-104 exam while developing skills for daily use
Key Features
- Get to grips with AZ-104 exam topics like infrastructure and applications to help with Azure administration
- Experience Azure through practical labs based on real-world administrative tasks
- Learn practical management tips from experienced professionals
Book Description
Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond covers all the exam objectives and will help you to earn the Microsoft Azure Administrator certification with ease. Whether you're studying to pass the AZ-104 exam or just want hands-on experience in administering Azure, this AZ-104 study guide will help you to achieve your objectives.
This book covers the latest Azure features and capabilities around configuring, managing, and securing Azure resources. Adhering to Microsoft's AZ-104 exam syllabus, this guide is divided into five modules. The first module will show you how to manage Azure identities and governance. You'll find out how to configure Azure subscription policies at the Azure subscription level and use Azure policies for resource groups. After that, the book covers techniques related to implementing and managing storage in Azure, enabling you to create and manage Azure Storage, including File and Blob storage. In the second module, you'll learn how to deploy and manage Azure compute resources. The third and fourth modules will teach you about configuring and managing virtual networks and monitoring and backing up Azure resources. Finally, you'll work through mock tests, with answers provided, to prepare for this exam.
By the end of this book, you'll have the skills needed to pass the AZ-104 exam and be able to expertly manage Azure.
What you will learn
- Manage Azure Active Directory users and groups along with role-based access control (RBAC)
- Discover how to handle subscriptions and implement governance
- Implement and manage storage solutions
- Modify and deploy Azure Resource Manager templates
- Create and configure containers and Microsoft Azure app services
- Implement, manage, and secure virtual networks
- Find out how to monitor resources via Azure Monitor
- Implement backup and recovery solutions
Who this book is for
This book is for cloud administrators, engineers, and architects looking to understand Azure better and gain a firm grasp on administrative functions or anyone preparing to take the Microsoft Azure Administrator (AZ-104) exam. A basic understanding of the Azure platform is needed, but astute readers can comfortably learn all the concepts without having worked on the platform before by following all examples in the book.
Table of Contents
- Managing Azure Active Directory Objects
- Managing Role-Based Access Control
- Creating and Managing Governance
- Managing Governance and Costs
- Practice Labs and Tips: Managing Azure Identities and Governance
- Managing Storage
- Securing Storage
- Practice Labs and Tips: Implementing and Managing Storage
- Automating VM Deployments Using ARM Templates
- Configuring Virtual Machines
- Creating and Configuring Containers
- Creating and Configuring App Services
- Practice Labs and Tips: Deploying and Managing Azure Compute Resources
- Implementing and Managing Virtual Networking
- Securing Access to Virtual Networks
- Configuring Load Balancing
- Integrating On-Premises Networks with Azure
(N.B. Please use the Look Inside option to see further chapters)
β¦ Table of Contents
Cover
Title Page
Contributors
Table of Contents
Preface
Copyright and Credits
Part 1: Managing Azure Identities and Governance
Chapter 1: Managing Azure Active Directory Objects
Technical requirements
Creating Azure AD users and groups
Creating users in Azure AD
Creating groups in Azure AD
Creating Azure AD AUs
Managing user and group properties
Managing device settings
Performing bulk updates
Managing guest accounts
Configuring Azure AD join
Configuring SSPR
Summary
Chapter 2: Managing Role-Based Access Control
Technical requirements
Creating a custom RBAC role
Creating a custom role
Providing access to resources by assigning the custom RBAC role
Confirming the role assignment steps
Interpreting access assignments
Summary
Chapter 3: Creating and Managing Governance
Technical requirements
Understanding Azure policies
How does Azure Policy work?
Azure Policy versus RBAC
Working with Azure Policy
Further reading
Applying and managing tags on resources
Tagging strategy
Applying a resource tag
Further reading
Summary
Chapter 4: Managing Governance and Costs
Technical requirements
Managing resource groups
Deploying a resource group
Listing resource groups
Deleting a resource group
PowerShell scripts
Further reading
Configuring resource locks
Permissions required for creating or deleting locks
Adding a resource lock
PowerShell scripts
ARM templates
Further reading
Managing subscriptions
Relationship between Azure AD and subscriptions
Why do we have multiple subscriptions in an environment?
Further reading
Managing costs
Cost Management
Budgets
Cost alerts
Advisor recommendations
Reservations
Further reading
Configuring management groups
Creating a management group
Further reading
Summary
Chapter 5: Practice Labs β Managing Azure Identities and Governance
Technical requirements
Managing Azure AD objects
Lab scenario one
Managing RBAC
Lab scenario two
Lab scenario three
Part 2: Implementing and Managing Storage
Chapter 6: Understanding and Managing Storage
Technical requirements
Understanding Azure storage accounts
Types of storage accounts
Storage access tiers
Azure disk storage
Redundancy
Further reading
Creating and configuring storage accounts
Creating a storage account
PowerShell scripts
Further reading
Using Azure Import/Export
Importing into an Azure job
Exporting from an Azure job
Further reading
Installing and using Azure Storage Explorer
Installation
Configuring Azure Files and Azure Blob storage
Creating an Azure file share
Configuring Azure Blob storage
Configuring storage tiers
Azure URL paths for storage
PowerShell scripts
Further reading
Summary
Chapter 7: Securing Storage
Technical requirements
Configuring network access to storage accounts
Public endpoint and Azure Virtual Network (VNet) integration
Private endpoints
Network routing from storage accounts
PowerShell scripts
Further reading
Storage access keys
Managing access keys
Working with SAS tokens
Types of SAS
Forms of SAS
Generating SAS tokens
Storage access policies
Further reading
Configuring access and authentication
Configuring Azure AD authentication for a storage account
Configuring access to Azure files
Further reading
Copying data by using AzCopy
Downloading and installing
Copying data by using AzCopy
Copying data between containers using AzCopy
Further reading
Configuring storage replication and life cycle
Storage replication and management services
Creating and configuring the Azure File Sync service
Implement Azure Storage replication
Configuring blob object replication
Configuring blob life cycle management
Configuring blob data protection
Further reading
Summary
Chapter 8: Practice Labs β Implementing and Managing Storage
Technical requirements
Managing the Azure Storage lab
The Azure Functions AzCopy lab
Lab steps
Prerequisites
Connecting storage using a private endpoint lab
Lab steps
Summary
Part 3: Deploying and Managing Azure Compute Resources
Chapter 9: Automating VM Deployments Using ARM Templates
Technical requirements
Modifying an ARM template
Configure a VHD template
Deploy from a template
Saving a deployment as an ARM template
Deploying VM extensions
Summary
Chapter 10: Configuring Virtual Machines
Technical requirements
Understanding Azure disks
Disk management options
Disk performance
Disk caching
Disk types
Disk redundancy options
Understanding Azure VMs
VM sizes
Networking
Fault domain versus update domain
Scale sets
Availability sets
Deploying a VM in Azure
PowerShell scripts
Deploying and configuring scale sets
VM management tasks
Managing VM sizes
Adding data disks
Configuring networking
Moving VMs from one resource group to another
Redeploying VMs
Disk encryption in Azure
Configuring ADE
Automating configuration management
Summary
Chapter 11: Creating and Configuring Containers
Technical requirements
Introduction to containers
Containers versus VMs
Isolation
OS
Deployment
Storage persistence
Fault tolerance
ACI
Container groups
Common scenarios
Resources
Networking
Deployment
Docker platform
Docker terminology
Setting up Docker
Creating our first Docker image
AKS
Creating an Azure container registry
Deploying your first Azure container instance
Configuring container groups for Azure container instances
Configuring sizing and scaling for Azure container instances
Deploying AKS
Configuring storage for AKS
Configuring scaling for AKS
Configuring network connections for AKS
Network configuration
Traffic routing
Security
Upgrading an AKS cluster
Summary
Chapter 12: Creating and Configuring App Services
Technical requirements
Understanding App Service plans and App Service
App Service plans
Creating an App Service plan
Creating an app service
PowerShell scripts
Configuring the scaling settings of an App Service plan
PowerShell scripts
Securing an app service
Configuring custom domain names
Configuring a backup for an app service
Configuring networking settings
Configuring deployment settings
Summary
Chapter 13: Practice Labs β Deploying and Managing Azure Compute Resources
Technical requirements
Downloading and extracting files for labs
Managing virtual machines lab
Deploying an Azure Container Instances lab
Deploying an Azure Kubernetes Service lab
Deploying Web App service lab
Summary
Part 4: Configuring and Managing Virtual Networking
Chapter 14: Implementing and Managing Virtual Networking
Technical requirements
Creating and configuring virtual networks, including peering
A VNet overview
An IP addressing overview
Create private and public IP addresses
User-defined routing
Implementing subnets
Configuring endpoints on subnets
Configuring private endpoints
Configuring Azure DNS
Summary
Chapter 15: Securing Access to Virtual Networks
Technical requirements
Associating an NSG with a subnet
Creating NSG rules
Evaluating effective security rules
Implementing Azure Firewall and Azure Bastion
Azure Firewall
Azure Bastion
Summary
Chapter 16: Configuring Load Balancing
Technical requirements
Azure load balancing services
Regional services
Global services
Load balancer service options
SSL offloading
Path-based load balancing
Session affinity
Web application firewall
Azure Load Balancer
Features and capabilities
Load Balancer SKUs
Configuring an ILB
Creating the VNet
Creating the VMs
Creating the load balancer
Creating the health probes
Creating load balancing rules
Testing the load balancer
Configuring a public load balancer
Creating the public load balancer
Creating the VNet and NSG
Creating backend servers
Testing the load balancer
Troubleshooting load balancing
Azure Application Gateway
Configuring Azure Application Gateway
Creating an Azure application gateway
Deploying your web app
Testing the application gateway
Azure Front Door
Summary
Chapter 17: Integrating On-Premises Networks with Azure
Technical requirements
Azure VPN Gateway
S2S VPN connections
Multi-site VPN connections
P2S VPN connections
ExpressRoute
Creating and configuring an Azure VPN gateway
Creating and configuring an Azure VPN gateway
VPN server deployment
S2S VPN Configuration
Verify connectivity via the Azure portal
VNet to VNet connections
Create and configure Azure ExpressRoute
Azure Virtual WAN
Configuring Azure Virtual WAN
Creating a VPN Site
Connecting your VPN site to the hub
Connect to your VPN site
Summary
Chapter 18: Monitoring and Troubleshooting Virtual Networking
Technical requirements
Network Watcher
Monitoring
Network diagnostic tools
Metrics
Logs
Configuring Network Watcher
Network resource monitoring
Managing VNet connectivity
Monitoring on-premises connectivity
Troubleshooting external networking
Summary
Chapter 19: Practice Labs β Configuring and Managing Virtual Networking
Technical requirements
Downloading and extracting files for labs
Virtual network subnetting lab
Global peering interconnectivity Lab
Traffic management lab
Summary
Part 5: Monitoring and Backing Up Azure Resources
Chapter 20: Monitoring Resources with Azure Monitor
Technical requirements
Azure Monitor
The Activity log
Metrics
Alerts
Insights
Diagnostic settings
Service Health
Creating and analyzing metrics and alerts
Creating a VM
Creating a metric
Creating a dashboard
Creating an alert
Configuring diagnostic settings on resources
Triggering an alert
Querying Log Analytics
Creating a Log Analytics workspace
Utilizing log search query functions
Querying logs in Azure Monitor
Configuring Application Insights
Creating your application
Creating your Application Insights resource
Associate your web app with Application Insights
Summary
Chapter 21: Implementing Backup and Recovery Solutions
Technical requirements
Creating a Recovery Services vault
Creating and configuring backup policies
Performing backup and restore operations via Azure Backup
Performing site-to-site recovery via Azure Site Recovery
Configuring and reviewing backup reports
Summary
Chapter 22: Practice Labs β Monitoring and Backing Up Azure Resources
Technical requirements
Downloading and extracting files for labs
Azure Recovery Services Vault with VM backup lab
Azure Monitor lab
Summary
Chapter 23: Mockup Test Questions
Managing Azure identities and governance (15-20%)
Implement and manage storage (15-20%)
Deploy and manage Azure compute resources (20-25%)
Configure and manage virtual networking (25-30%)
Monitor and back up Azure resources (10-15%)
Mockup test answers
Manage Azure identities and governance
Implement and manage storage
Configure and manage virtual networking (30-35%)
Monitor and back up Azure resources
Index
Other Books You May Enjoy
π SIMILAR VOLUMES
Microsoft Certified Exam guide - Azure Fundamentals (AZ-900) Unlock the Power of Azure with Confidence! Are you ready to embark on a journey into the world of Microsoft Azure? Look no further than the "Microsoft Certified Exam Guide - Azure Fundamentals (AZ-900)." This comprehensive book is yo
<p><span>Learn what it takes to be an Azure Administrator and efficiently prepare for Exam AZ-104</span><span>Β with this authoritative resource</span><span>Β </span></p><p><span>MCA Microsoft 365 Azure Administrator Study Guide</span><span>:Β Exam AZ-104</span><span>Β prepares readers to take the AZ-10
<p><span>Prepare for Microsoft Exam AZ-104</span><span>βand help demonstrate your real-world mastery of Microsoft Azure administration. Designed for working Azure administrators, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified S