Microsoft AZ-104 Exam Syllabus Topics:

Reference: https://docs.microsoft.com/en-us/learn/certifications/exams/az-104

Main Topics and Subtopics of Microsoft AZ-104 Exam

There are a few different objectives included in the AZ-104 certification test, so the candidates will need to work hard on them. These topics cover the following areas:

• Manage and Configure Virtual Networking (30-35%)

  In this topic, the candidates must confirm that they have expertise in implementing and managing virtual networking (designing and customizing VNET peering; customizing private and public IP addresses, subnets, network routes, virtual network, and network interface); customizing name resolution (customizing Azure DNS; customizing custom DNS settings; customizing a private or public DNS zone); securing access to virtual networks (designing security rules; associating an NSG to network interface or a subnet; assessing effective security rules; deploying and configuring Azure Firewall; deploying and customizing Azure Bastion Service); customizing load balancing (customizing Application Gateway; customizing an internal load balancer; customizing load balancing rules; customizing a public load balancer; fixing load balancing); monitoring and fixing virtual networking (monitoring on-premises connectivity; utilizing Network Performance Monitor; utilizing Network Watcher; fixing external networking; troubleshooting virtual network connectivity); integrating an on-premises network with an Azure virtual network (designing and customizing Azure VPN Gateway; designing and customizing VPNs; customizing ExpressRoute; customizing Azure Virtual WAN).

• Monitor and Back Up Azure Resources (10-15%)

  This subject area is designed to check the examinees’ knowledge and skills in the following areas: monitoring resources with the help of Azure Monitor (customizing and interpreting metrics; customizing Log Analytics; querying and analyzing logs; setting up actions and alerts; customizing Application Insights); implementing recovery and backup (customizing and reviewing backup reports; executing backup and restore operations with the help of Azure Backup; designing a Recovery Services Vault; designing and customizing backup policy; executing site-to-site recovery with the help of Azure Site Recovery).

• Manage Azure Governance and Identities (15-20%)

  This objective encompasses the following competencies: managing Azure Active Directory objects (designing users and groups; managing group and user properties; managing device settings; executing bulk user updates; managing guest accounts; customizing Azure AD Join; customizing self-service password reset); managing role-based access control (designing a custom role; accessing Azure resources through assigning roles; interpreting access assignments; managing multiple directories); managing governance and subscriptions (customizing Azure policies; customizing resource locks; applying tags; designing and managing resource groups; managing subscriptions; customizing Cost Management; customizing management groups).

• Deploy and Manage Azure Compute Resources (25-30%)

  In the framework of this topic, the test takers are required to show that they have a grasp of the following skills: monitoring resources with the help of Azure Monitor (monitoring a network; customizing and interpreting metrics; customizing Log Analytics; querying and analyzing logs; setting up actions and alerts; customizing Application Insights); executing recovery and backup (customizing and reviewing backup reports; executing restore and backup operations with the help of Azure Backup; designing Recovery Services Vault; designing and customizing backup policy; executing site-to-site recovery with the help of Azure Site Recovery).

• Implement and Manage Storage (10-15%)

  Within this domain, the applicants need to demonstrate the abilities, such as managing storage accounts (customizing network access to storage accounts; designing and customizing storage accounts; generating shared access signature; managing access keys; executing Azure storage replication; customizing Azure AD Authentication for a storage account); managing data in Azure Storage (exporting from Azure job; importing into Azure job; installing and utilizing Azure Storage Explorer; copying data with the help of AZCopy); customizing Azure files and Azure blob storage (designing an Azure file share; designing and customizing Azure File Sync service; customizing Azure blob storage; customizing storage tiers for Azure blobs).