AZ104 - Further Reading

Questions

• How to use Managed Identities to connect to Azure Key Vault
• How to use Stored Access Policies for Storage Account SAS tokens

Prerequisites

Configure Azure Resources with Tools

• Azure Portal Documentation
• Azure Cloudshell Overview
• Azure Powershell Documentation
• Azure CLI Reference
• Azure Resource Manager
• Bicep Overview

Azure Resource Manager

• Azure Resource Manager Documentation

Configure Resources with ARM templates

• ARM Template Documentation
• Azure Quickstart Templates
• Create Resources using ARM templates

Azure Automation with Powershell

• Automate Administrative Tasks with Powershell

Control Azure Services with CLI

Deploy Infrastructure with JSON ARM Templates

• ARM Tools for VS Code
• ARM Template Syntax
• ARM overview
• Resource Providers
• ARM Templates
• ARM Template Outputs
• ARM Template Parameters

Identity and Governance

Configure AAD

• AAD Documentation
• AAD Device Identity
• AAD Self-Service Password Reset
• AAD Join
• Hybrid Identity

Configure User and Groups

• Azure Built-In Roles
• Azure Custom Roles
• Create User and Groups
• AAD Fundamentals

Configure Subscriptions

• Cost Management and Billing
• Create Subscriptions
• Analyse Costs and Create Budgets

Configure Azure Policy

• Azure Policy Documentation
• Built-in Policy Definitions
• Built-in Policy Initiatives
• Recommended Policies
• Pricing Details
• Policy Samples
• Create a Custom Policy
• Create and Assign a Policy Programatically
• Create a Policy for Non-Compliant Resources

Configure RBAC

• RBAC Documentation
• RBAC Role Definitions
• RBAC Built-in Role Definitions
• RBAC Custom Roles
• AAD Administrator Roles

Create Users and Groups in AAD

• AAD Documentation

SSPR

• Quickstart
• How it Works
• Deploy SSPR

Implement and Manage Storage

Configure Storage Accounts

• Azure Storage
• Configure Storage Disaster Recovery

Configure Blob Storage

• Blob Storage
• Blob Storage Access Tiers
• Blob Replication
• Blob Lifecycle Management

Configure Azure Storage Security

• Create an Account SAS
• Create a Service Level SAS
• Create a User Delegation SAS
• Customer-Managed Keys

Configure Azure Files and File Sync

• Azure Files Documentation
• Azure Files Deployment
• Azure File Sync Deployment
• Cloud Tiering Overview

Configure Azure Storage with Tools

• Azure Storage Explorer
• AzCopy
• Azure Import/Export Service

Create an Azure Storage account

Shared Access Signatures

• SAS Overview

Azure Storage Explorer

• Storage Explorer with ADLS Gen2

Deploy and Manage Compute

Configure Virtual Machines

• VM Documentation
• Disk Storage for VMs
• Azure Quickstart Templates

Configure Virtual Machine Availability

• VM Availability
• VMSS Autoscale
• Deploy Application on VMSS
• Fault Domains
• Windows Custom Script Extension
• Linux Custom Script Extension

Configure Virtual Machine Extensions

• Azure Automation State Configuration
• DSC 2.0
• Deploy Windows apps
• Azure Automation State Configuration Sandbox

Configure Azure App Service Plans

• App Service Plans
• App Service Tutorial

Configure Azure App Service

• App Service Docs
• Web App Sandbox

Configure Azure Container Instances

• Azure Container Instances Documentation
• Build a Containerised Web App

Manage Azure VMs with Azure CLI

• Architect Compute in Azure

Host a Web App in Azure App Service

Configure Virtual Networks

Configure Virtual Networks

• Virtual Network Documentation
• Azure Networking Documentation
• IP Address Sandbox

Configure Network Security Groups

• NSG Documentation
• ASG Documentation
• NSG and Service Endpoints Sandbox

Configure Azure DNS

• Azure DNS Documentation
• Azure Private DNS Documentation
• DNS Zones and Records
• DNS Sandbox

Configure Azure VNET Peering

• VNet Peering Documentation
• VPN Gateway Transit
• Troubleshoot VNet Peering

Configure Network Routing and Endpoints

• VNet Routing
• Private Link Introduction

Configure Azure Load Balancer

• Load Balancer Documentation
• Create a Public Load Balancer
• Create an Internal Load Balancer
• Gateway Load Balancer
• Load Balancer Sandbox

Configure Azure Application Gateway

• Azure Application Gateway Documentation
• WAF on AGW
• Multi-Site Routing
• Hands-On HTTPS traffic

Design IP Address Schema

VNet Peering

Host Your Domain with Azure DNS

• DNS Zones and Records

Custom Routing

• High-Availability NVAs

Azure Load Balancer

Monitor and Backup Azure Resources

Configure File and Folder Backups

• Azure Backup
• Azure File Share Backup
• Azure Recovery Services Vault
• Backup Center
• MARS Agent

Configure Virtual Machine Backups

• Azure Site Recovery
• System Center Data Protection Manager
• Microsoft Azure Backup Server
• DPM and MABS protection agent

Configure Azure Monitor

• Azure Monitor Documentation
• Azure Monitor Metrics
• Azure Monitor Logs
• Log Queries
• Azure Monitor Alerts
• Design a Monitoring Strategy
• Security Events in Entra ID
• Monitor Azure Storage

Configure Azure Alerts

• Azure Monitor Alerts
• Alert Types
• Alert Rules
• Azure Monitor Best Practice
• Alerting Sandbox
• Monitor VMs with Metrics and Alerts

Configure Log Analytics

• Log Analytics Documentation
• KQL
• Create a Log Analytics Workspace
• Analysis Best Practice
• KQL Reference
• Azure Monitor Logs Table Reference
• Log Analytics REST API

Configure Network Watcher

• Network Watcher Documentation
• VM Routing troubleshooting tutorial
• VPN routing troubleshooting tutorial
• Network Infrastructure troubleshooting tutorial
• Configure Monitoring for Virtual Networks

Incident Response

• Metric Alerts
• Log Alerts
• Activity Log Alerts

Analyse Azure Infrastructure

• Log Query Starters
• Optimise Log Queries
• Create Dashboards
• Analysis Best Practice

Monitor VM Performance

• Azure Monitor Documentation
• Azure Monitor Agents