Microsoft Azure Administrator (AZ-104) Online Training & Certification Prep
Master the core administrative tasks required to manage Azure infrastructure. This AZ-104 course takes you from identity and governance through virtual networking, storage, compute, and monitoring — the skills that define a working Azure Administrator.
Course Overview
The Microsoft Azure Administrator (AZ-104) certification is the primary associate-level credential for IT professionals who implement, manage, and monitor Azure environments on behalf of an organisation. It validates the operational depth that AZ-900 introduces conceptually — moving from understanding what Azure services exist to configuring, securing, and troubleshooting them in production contexts.
This course is structured around the five AZ-104 exam skill domains. You begin with identity and governance: configuring Microsoft Entra ID, managing users and groups at scale, implementing Multi-Factor Authentication, and applying Azure Policy and management groups to enforce compliance across subscriptions. These governance patterns underpin everything else an administrator does.
The storage domain covers the full lifecycle of Azure storage accounts — from choosing the right account kind and replication option to configuring lifecycle management policies, shared access signatures, and Azure File Sync. You will work through both REST-based Blob access and SMB-mounted Azure Files shares.
The compute domain goes well beyond VM deployment. You will manage VM availability sets and scale sets, configure custom script extensions, implement Azure Automation for patching, and work with Azure App Service — including deployment slots, autoscale rules, and App Service plans. Azure Container Instances and Azure Kubernetes Service basics are also covered to reflect the exam’s increasing container coverage.
Virtual networking is the most operationally dense domain in AZ-104. You will design and implement virtual networks, configure network security groups, route tables, and application security groups, establish VNet peering across regions, and deploy Azure Load Balancer and Application Gateway. DNS configuration — both Azure-provided and custom — is covered in full.
The course closes with monitoring and backup: configuring Azure Monitor, creating alert rules, setting up Log Analytics workspaces, and implementing Azure Backup and Azure Site Recovery. Hands-on Live Labs run in real Azure environments for every major domain. All content is delivered by Certified Partner instructors and is backed by the Boost eLearning Pass Guarantee.
What You'll Learn
- Create and manage Microsoft Entra ID users, groups, and guest accounts at enterprise scale
- Configure Multi-Factor Authentication and Conditional Access policies
- Implement Azure RBAC with custom role definitions and scope inheritance
- Deploy and manage Azure Policy definitions, initiatives, and compliance remediation tasks
- Configure Azure storage accounts, blob containers, access tiers, and lifecycle management policies
- Generate and manage Shared Access Signatures and configure storage firewalls and virtual network rules
- Deploy Windows and Linux Virtual Machines, configure extensions, and manage VM availability and scale
- Create and configure App Service plans, web apps, deployment slots, and autoscale settings
- Design and implement Azure Virtual Networks, NSGs, route tables, and VNet peering
- Deploy and configure Azure Load Balancer, Application Gateway, and Azure DNS zones
- Configure VPN Gateways and point-to-site and site-to-site VPN connections
- Set up Azure Monitor alerts, metrics, diagnostic settings, and Log Analytics queries (KQL basics)
- Implement Azure Backup for virtual machines and Azure Site Recovery for disaster recovery
Who This Course Is For
- Systems administrators and infrastructure engineers moving workloads to Azure
- Cloud engineers managing existing Azure environments
- IT professionals targeting the AZ-305 Solutions Architect Expert certification
- DevOps engineers who manage the infrastructure layer of Azure-hosted applications
- Network engineers expanding into cloud networking
Course Outline
- Microsoft Entra ID u2014 tenants, users, and groups
- Bulk user creation and dynamic group membership
- External identities and guest (B2B) access
- Multi-Factor Authentication and Self-Service Password Reset
- Conditional Access policies and named locations
- Privileged Identity Management (PIM) overview
- Azure AD Connect and hybrid identity basics
- Management groups and subscription hierarchy
- Azure RBAC u2014 built-in and custom role definitions
- Azure Policy u2014 definitions, initiatives, and assignments
- Policy remediation tasks and compliance dashboard
- Resource locks and blueprint concepts
- Azure Cost Management and budgets
- Storage account types: standard vs. premium, LRS/ZRS/GRS/GZRS
- Blob storage u2014 containers, access tiers, lifecycle management
- Shared Access Signatures: service, account, and user delegation SAS
- Stored access policies
- Azure Files u2014 SMB shares and Azure File Sync
- Azure Import/Export and AzCopy
- Storage firewalls, virtual network rules, and private endpoints
- VM sizes, families, and pricing tiers
- Managed disks u2014 types, snapshots, and disk encryption
- Availability sets and availability zones
- VM scale sets u2014 scaling policies and update modes
- Custom Script Extension and Run Command
- Azure Bastion and Just-In-Time VM access
- VM image management with Azure Compute Gallery
- Azure App Service plans and web app deployment
- Deployment slots, slot swap, and traffic splitting
- Azure Container Instances and intro to AKS node pools
- Virtual Network design u2014 address spaces, subnets, and IP addressing
- Network Security Groups u2014 inbound/outbound rules and effective security
- Application Security Groups
- Azure Route Tables and user-defined routes
- VNet peering u2014 regional and global
- Azure DNS u2014 public zones, private zones, and auto-registration
- Azure Load Balancer (Standard) u2014 backend pools, health probes, rules
- Azure Application Gateway u2014 listeners, routing rules, and WAF overview
- Azure VPN Gateway u2014 site-to-site and point-to-site VPN
- Network Watcher u2014 IP flow verify, topology, and connection troubleshoot
- Azure Monitor u2014 metrics, logs, and data sources
- Diagnostic settings and resource logs
- Log Analytics workspace and KQL fundamentals
- Metric alerts, log query alerts, and action groups
- Azure Service Health and resource health
- Insights u2014 VM Insights, Container Insights overview
- Recovery Services vault u2014 backup policies and retention
- Azure Backup for VMs, Azure Files, and SQL in VM
- Azure Site Recovery u2014 replication, failover, and failback
- Azure Backup Center overview
- RTO and RPO planning considerations
- AZ-104 exam format and question types walkthrough
- Domain-weighted practice questions
- Timed mock exam with review
- Common exam traps and how to avoid them
About the Certification Exam
- Exam code
- AZ-104
- Length
- 100u2013120 minutes
- Questions
- 40u201360 questions (multiple choice, multi-select, drag-and-drop, case studies)
- Passing score
- 700/1000
- Exam cost
- ~$165 USD
- Where
- Pearson VUE / online proctored
The certification exam fee is paid separately to the testing provider and is not included in the course price unless stated otherwise.
Live Labs Included
Hands-on practice on real environments
This course includes Live Labs — direct access to real hardware and cloud environments so you build the skills the exam actually tests.
- Array
- Array
- Array
- Array
- Array
- Array
Pass Guarantee Included
Complete this course and if you don't pass the certification exam on your first attempt, we'll refund your course fee or give you a free retake — your choice.
