+353-1-416-8900REST OF WORLD
+44-20-3973-8888REST OF WORLD
1-917-300-0470EAST COAST U.S
1-800-526-8630U.S. (TOLL FREE)

MCA Microsoft Certified Associate Azure Administrator Study Guide with Online Labs: Exam AZ-104. Edition No. 1

  • Book

  • 592 Pages
  • January 2023
  • John Wiley and Sons Ltd
  • ID: 5838944
Your complete guide to passing the MCA Microsoft Certified Associate Azure Administrator Exam, Now with 11 Online Lab Modules!

Achieving Microsoft Certified Associate Azure Administrator certification shows that you are adept at deploying and managing infrastructure in Microsoft Azure cloud environments. This Sybex Study Guide with Online Labs covers everything you need to master in order to pass the challenging AZ-104 exam. It leads you through the skills and knowledge you must demonstrate in all the essential exam domains, including managing Azure subscriptions and resources, implementing and managing storage, configuring and managing virtual networks, and managing identities. Add access to the Sybex interactive online learning environment and test bank and take your test preparation to the next level.

Coverage of 100% of all exam objectives in this Study Guide with Online Labs means you’ll be ready for:

- Managing Azure identities and governance - Implementing and managing storage - Deploying and managing Azure compute resources - Configuring and managing virtual networking - Monitoring and backing up Azure resources - Access to Exam AZ-104 Practice Lab modules

ABOUT THE MCA AZURE ADMINISTRATOR CERTIFICATION

Candidates for the MCA Microsoft Certified Associate Azure Administrator certification have proven their skills in implementing, monitoring, and maintaining Microsoft Azure solutions, including major services related to compute, storage, network, and security.

XtremeLabs provides IT training environments for Fortune 500 companies and organizations of any size. With a library of more than 900 IT hands-on labs, students and classes have experienced XtremeLabs in more than 150 countries.

Interactive learning environment

Take your exam prep to the next level with Sybex’s superior interactive online study tools.3333px;"> - Interactive test bank with 2 practice exams to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you’re ready to take the certification exam. - 100 electronic flashcards to reinforce learning and last-minute prep before the exam - Comprehensive glossary in PDF format gives you instant access to the key terms so you are fully prepared

ABOUT THE XTREMELABS AZURE ONLINE LABS

So you can practice with hands-on learning in a real environment, Sybex has bundled XtremeLabs Azure virtual labs that run from your browser. The registration code is included with the book and gives you 6 months of unlimited access to XtremeLabs MCA Azure Administrator Labs with 11 unique lab modules based on the book.

Table of Contents

Introduction xxiii

Assessment Test xxx

Chapter 1 Identity: Azure Active Directory 1

Azure Active Directory 2

Benefits 2

Concepts 4

Azure AD vs. Active Directory Domain Services 4

Azure AD: Licensing 5

Custom Domains in Azure AD 7

Users and Groups 8

User Accounts 8

Group Accounts 26

Azure AD Roles 36

Azure AD Join 37

Benefits 37

Connection Options 38

Self-Service Password Reset 39

Enabling SSPR 39

Authentication Methods 40

Managing Multiple Directories 42

Summary 43

Exam Essentials 44

Review Questions 45

Chapter 2 Compliance and Cloud Governance 49

Azure Regions 50

Facts 51

Regional Pairs 52

Azure Accounts and Subscriptions 53

Azure Accounts 54

Azure Subscriptions 54

Azure Cost Management 57

Plan and Control Expenses 58

Cost Saving Techniques 59

Resource Groups 60

Management Groups 65

Azure Policy 68

Implementing Azure Policy 69

Implementing Initiatives 77

Role-Based Access Control 79

Concepts 80

Azure RBAC Roles 82

Custom RBAC Roles 84

Role Assignment 91

Resource Locks 95

Configuring Locks 97

Resource Tags 99

Use Cases 99

Applying Tags 100

Summary 102

Exam Essentials 102

Review Questions 104

Chapter 3 Virtual Networking 109

Virtual Networks 110

VNet Concepts 111

Address Space 111

Subnets 111

Regions 111

Subscription 112

IP Addressing 113

Static and Dynamic Addressing 113

Private IP Addresses 113

Public IP Address 116

Network Routes 118

System Routes 119

User-Defined Routes 119

Service Endpoints 125

Supported Services 127

Private Endpoint 127

Azure DNS 129

Record Management 131

Private DNS Zones 133

Network Security Groups 137

NSG Concepts 137

NSG Effective Rules 141

Azure Firewall 142

Azure Firewall Rules 142

Implementing Azure Firewall 144

Summary 145

Exam Essentials 146

Review Questions 148

Chapter 4 Intersite Connectivity 153

Azure-to-Azure Connectivity 154

Internet 155

Virtual Network Peering 156

VPN Gateway 165

Virtual Network Peering vs. VPN Gateway 177

Azure to On-Premises Connectivity 178

VPN Gateways 178

ExpressRoute Connections 189

Intersite Connectivity Architecture 193

Virtual WAN 196

Summary 197

Exam Essentials 198

Review Questions 199

Chapter 5 Network Traffic Management 203

Availability Options 204

Availability Sets 205

Availability Zones 207

Service Level Agreement 208

Azure Load Balancer 208

Types of Load Balancers 209

Load Balancer SKUs 212

Configuring Load Balancer 212

Implementing Azure Load Balancer 214

Azure Application Gateway 221

Request Handling Process 222

Routing Methods 223

Configuring Application Gateway 224

Implementing Application Gateway 226

Azure Front Door 235

Azure Traffic Manager 237

Comparing the Load Balancing Solutions 239

Summary 239

Exam Essentials 240

Review Questions 241

Chapter 6 Azure Storage 245

Azure Storage Account 246

Azure Storage Services 247

Azure Blob Storage 247

Azure Files 248

Azure Queues 249

Azure Tables 249

Azure Disks 249

Storage Replication 250

Locally Redundant Storage 250

Zone Redundant Storage 251

Georedundant Storage 252

Geo-zone-Redundant Storage 253

Storage Account Types 255

Storage Account Endpoints 256

Accessing Storage 256

Custom Domain Configuration 256

Securing Storage Endpoints 257

Azure Blob Storage 258

Blob Containers 259

Blob Access Tiers 259

Blob Lifecycle Management 260

Uploading Blobs 261

Storage Security 268

Authorization Options 268

Shared Access Signatures 269

Storage Service Encryption 275

Azure Files and File Sync 276

Azure Files vs. Azure Blobs 276

Managing File Shares 277

Mapping File Shares 279

File Share Snapshots 282

Azure File Sync 285

Managing Storage 288

Azure Storage Explorer 289

AzCopy 291

Import/Export Service 297

Summary 299

Exam Essentials 300

Review Questions 302

Chapter 7 Azure Virtual Machines 307

Virtual Machine Planning 309

Virtual Network 309

Name 309

Location and Pricing 310

Size 311

Storage 312

Operating System 315

Deploying Virtual Machines 315

Connecting to Virtual Machines 320

Windows Connections 320

Linux Connections 324

Azure Bastion 329

Availability of Virtual Machines 334

Scaling Concepts 335

Vertical Scaling 335

Horizontal Scaling 336

Virtual Machine Scale Sets 336

Implementing a Scale Set 337

Autoscaling 340

Summary 342

Exam Essentials 342

Review Questions 343

Chapter 8 Automation, Deployment, and Configuration of Resources 349

Azure Resource Manager 350

ARM Templates 352

Template Design 352

Template Modes 354

Template Sections 355

Composing Templates 361

Exporting Templates 370

Configuring Virtual Hard Disk Templates 374

Create a VM from a VHD 375

Virtual Machine Extensions 376

Custom Script Extension 378

Desired State Configuration 379

Summary 380

Exam Essentials 381

Review Questions 382

Chapter 9 PaaS Compute Options 387

Azure App Service Plans 388

Pricing Tiers 389

Scaling 391

Azure App Services 396

Continuous Deployment 400

Deployment Slots 402

Securing App Service 405

Custom Domains 408

Backup 409

Container Instances 411

Docker 412

Azure Container Instances 415

Container Groups 421

Azure Kubernetes Service 422

Terminology 424

Cluster Components 425

Networking 426

Storage 429

Cluster Upgrade 431

Scaling 432

Summary 438

Exam Essentials 439

Review Questions 440

Chapter 10 Data Protection 445

File and Folder Backups 446

Azure Backup 446

Creating Recovery Services Vault 447

Configuring a Recovery Services Vault 448

Virtual Machine Data Protection 451

Virtual Machine Snapshots 452

Azure Backup 453

Azure Backup Server 463

Azure Site Recovery 466

Summary 469

Exam Essentials 470

Review Questions 471

Chapter 11 Monitoring Resources 475

Azure Monitor 476

Metrics 477

Logs 478

Data Sources 479

Activity Log 480

Azure Alerts 482

Creating Alert Rules 483

Alert States 484

Action Groups 484

Log Analytics 492

Workspace 493

Data Sources 493

Agents Configuration 496

Query Language 497

Network Watcher 502

IP Flow Verify 503

Next Hop 503

Effective Security Rules 505

VPN Troubleshoot 505

Packet Capture 506

Connection Troubleshoot 506

NSG Flow Logs 507

Topology 509

Summary 509

Exam Essentials 510

Review Questions 511

Appendix Answers to the Review Questions 515

Chapter 1: Identity: Azure Active Directory 516

Chapter 2: Compliance and Cloud Governance 517

Chapter 3: Virtual Networking 519

Chapter 4: Intersite Connectivity 520

Chapter 5: Network Traffic Management 521

Chapter 6: Azure Storage 522

Chapter 7: Azure Virtual Machines 524

Chapter 8: Automation, Deployment, and Configuration of Resources 526

Chapter 9: PaaS Compute Options 528

Chapter 10: Data Protection 529

Chapter 11: Monitoring Resources 530

Index 533

Authors

Rithin Skaria