AZ-104: Microsoft Azure Administrator

Course Code: 5019



Microsoft Azure is a popular cloud computing platform for building, deploying and managing services and applications from anywhere and at any time. With Azure, one could add cloud computing capabilities to their existing network through PaaS (Platform-as-a-Service) or IaaS (Infrastructure-as-a-Service) model to explore the IaaS architecture of Microsoft Azure.

Azure administrators implement, manage and monitor identity, governance, storage, compute and virtual networks in a cloud environment. They will also provision, size, monitor and adjust resources, as appropriate. Microsoft’s AZ-104 certification exam has now replaced the AZ-103 examination, as the latter has been retired effective 31 March 2020.

This course prepares participants for earning the Microsoft Azure Administrator certification, which will validate their skills and expertise as an Azure administrator and set them apart from the rest in the field.

Schedule Classes

Looking for more sessions of this class?

Course Delivery

This course is available in the following formats:

Live Classroom
Duration: 11 days

Live Virtual Classroom
Duration: 11 days

What You'll learn

  • Manage Azure identities and governance
  • Implement and manage storage
  • Deploy and manage Azure compute resources
  • Configure and manage virtual networking
  • Monitor and back-up Azure resources


  • Manage Azure AD objects
    • Create users and groups
    • Manage user and group properties
    • Manage device settings
    • Perform bulk user updates
    • Manage guest accounts
    • Configure Azure AD Join
    • Configure self-service password reset
  • Manage role-based access control (RBAC)
    • Create a custom role
    • Provide access to Azure resources by assigning roles
      • Subscriptions
      • Resource groups
      • Resources (VM, disk, etc.)
    • Interpret access assignments
    • Manage multiple directories
  • Manage subscriptions and governance
    • Configure Azure policies
    • Configure resource locks
    • Apply tags
    • Create and manage resource groups
      • Move resources
      • Remove RGs
    • Manage subscriptions
    • Configure cost management
    • Configure management groups
  • Manage storage accounts
    • Configure network access to storage accounts
    • Create and configure storage accounts
    • Generate shared access signatures
    • Manage access keys
    • Implement Azure storage replication
    • Configure Azure AD Authentication for a storage account
  • Manage data in Azure storage
    • Configure network access to storage accounts
    • Create and configure storage accounts
    • Generate shared access signature
    • Manage access keys
    • Implement Azure storage replication
    • Configure Azure AD authentication for a storage account
  • Manage data in Azure storage
    • Export from Azure job
    • Import into Azure job
    • Install and use Azure Storage Explorer
    • Copy data using AZCopy
  • Configure Azure files and Azure blob storage
    • Create an Azure file storage
    • Create and configure Azure File Sync service
    • Configure Azure blob storage
    • Configure storage tiers for Azure blobs
  • Configure VMs for high availability and scalability
    • Configure high availability
    • Deploy and configure scale sets
  • Automate deployment and configuration of VMs
    • Modify Azure Resource Manager (ARM) template
    • Configure VHD template
    • Deploy from template
    • Save a deployment as an ARM template
    • Automate configuration management by using custom script extensions
  • Create and configure VMs
    • Configure Azure Disk Encryption
    • Move VMs from one resource group to another
    • Manage VM sizes
    • Add data discs
    • Configure networking
    • Redeploy VMs
  • Create and configure containers
    • Create and configure Azure Kubernetes Services (AKS)
    • Create and configure Azure Container Instances (ACI)
  • Create and configure web apps
    • Create and configure App Service
    • Create and configure App Service Plans
  • Implement and manage virtual networking
    • Create and configure VNET peering
    • Configure private and public IP addresses, network routes, network interface, subnets, and virtual network
  • Configure name resolution
    • Configure Azure DNS
    • Configure custom DNS settings
    • Configure a private or public DNS zone
  • Secure access to virtual networks
    • Create security rules
    • Associate an NSG to a subnet or network interface
    • Evaluate effective security rules
    • Deploy and configure Azure Firewall
    • Deploy and configure Azure Bastion Service
  • Configure load balancing
    • Configure Application Gateway
    • Configure an internal load balancer
    • Configure load balancing rules
    • Configure a public load balancer
    • Troubleshoot load balancing
  • Monitor and troubleshoot virtual networking
    • Monitor on-premises connectivity
    • Use Network Performance Monitor
    • Use Network Watcher
    • Troubleshoot external networking
    • Troubleshoot virtual network connectivity
  • Integrate on-premises network with an Azure virtual network
    • Create and configure Azure VPN gateway
    • Create and configure VPNs
    • Configure ExpressRoute
    • Configure Azure Virtual WAN
  • Monitor resources by using Azure Monitor
    • Configure and interpret metrics
      • Analyze metrics across subscriptions
    • Configure log analytics
      • Implement a log analytics workspace
      • Configure diagnostics settings
    • Query and analyze logs
      • Create a query
      • Save a query to the dashboard
      • Interpret graphs
    • Set up alerts and actions
      • Create and test alerts
      • Create action groups
      • View alerts in Azure Monitor
      • Analyze alerts across subscriptions
    • Configure application insights
  • Implement backup and recovery
    • Configure and review backup reports
    • Perform backup and restore operations b using Azure Backup Service
    • Create a Recovery Services Vault
      • Use soft delete to recover Azure VMs
    • Create and configure backup policy
    • Perform site-to-site recovery by using Azure site Recovery
  • Manage Azure active directory identities
  • Manage subscriptions and RBAC
  • Manage governance via Azure policy
  • Manage Azure resources using the Azure portal
  • Manage Azure resources by using ARM templates
  • Manage Azure resources by using Azure PowerShell
  • Manage Azure resources by using Azure CLI
  • Implement virtual networking
  • Implement inter-site connectivity
  • Implement traffic management
  • Manage Azure storage
  • Manage virtual machines
  • Implement web apps
  • Implement Azure container instances
  • Implement Azure Kubernetes service
  • Implement data protection
  • Implement monitoring
View More


  • Minimum six months of hands-on experience administering Azure
  • Strong understanding of core Azure services, Azure workloads security and governance
  • Experience using PowerShell, Command Line Interface, Azure portal and ARM templates

Who Should Attend

The course is highly recommended for current and aspiring:

  • Network project engineers
  • Cloud infrastructure specialists
  • Cloud administrators
  • DevOps engineers
  • Application developers
  • Infrastructure administrators
  • Software architects
  • Windows System Administrators
  • Software developers
  • IoT Platform developers

Interested in this course? Let’s connect!


Once all the sessions of the course are completed, you will be evaluated on the basis of multiple parameters such as your attendance in the sessions, your scores in multiple-choice questions-based assessment, etc. Based on your overall performance, you will receive a course completion certificate from Cognixia.

For the Microsoft certification, you would need to schedule and appear for your examination with Microsoft.