MODULE 1: Configure Microsoft Entra ID
Learn how to configure Microsoft Entra ID, including features like Microsoft Entra join and self-service password reset.
In this module, you learn how to:
- Define Microsoft Entra concepts, including identities, accounts, and tenants.
- Describe Microsoft Entra features to support different configurations.
- Understand differences between Microsoft Entra ID and Active Directory Domain Services (AD DS).
- Choose between supported editions of Microsoft Entra ID.
- Implement the Microsoft Entra join feature.
- Use the Microsoft Entra self-service password reset feature.
- Introduction
- Describe Microsoft Entra ID benefits and features
- Describe Microsoft Entra concepts
- Compare Active Directory Domain Services to Microsoft Entra ID
- Select Microsoft Entra editions
- Implement Microsoft Entra join
- Implement Microsoft Entra self-service password reset
- Knowledge check
- Summary and resources
MODULE 2: Configure user and group accounts
Learn how to configure user and group accounts.
In this module, you learn how to:
- Configure users accounts and user account properties.
- Create new user accounts.
- Import bulk user accounts with a template.
- Configure group accounts and assignment types.
- Introduction
- Create user accounts
- Manage user accounts
- Create bulk user accounts
- Create group accounts
- Create administrative units
- Interactive lab simulation
- Knowledge check
MODULE 3: Configure subscriptions
Learn how to configure Azure subscriptions, including how to obtain a subscription, implement cost management, and apply Azure resource tags.
In this module, you learn how to:
- Determine the correct region to locate Azure services.
- Review features and use cases for Azure subscriptions.
- Obtain an Azure subscription.
- Understand billing and features for different Azure subscriptions.
- Use Microsoft Cost Management for cost analysis.
- Discover when to use Azure resource tagging.
- Identify ways to reduce costs.
- Introduction
- Identify Azure regions
- Implement Azure subscriptions
- Obtain an Azure subscription
- Identify Azure subscription usage
- Implement Microsoft Cost Management
- Apply resource tagging
- Apply cost savings
- Knowledge check
- Summary and resources
MODULE 4: Configure Azure Policy
Learn how to configure Azure Policy to implement compliance requirements.
In this module, you learn how to:
- Create management groups to target policies and spending budgets.
- Implement Azure Policy with policy and initiative definitions.
- Scope Azure policies and determine compliance.
- Introduction
- Create management groups
- Implement Azure policies
- Create Azure policies
- Create policy definitions
- Create an initiative definition
- Scope the initiative definition
- Determine compliance
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 5: Configure role-based access control
In this module, you learn how to:
- Identify features and use cases for role-based access control.
- List and create role definitions.
- Create role assignments.
- Identify differences between Azure RBAC and Microsoft Entra roles.
- Manage access to subscriptions with RBAC.
- Review built-in Azure RBAC roles.
- Introduction
- Implement role-based access control
- Create a role definition
- Create a role assignment
- Compare Azure roles to Microsoft Entra roles
- Apply role-based access control
- Review fundamental Azure RBAC roles
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 6: Configure Azure resources with tools
You will learn how to select a tooling option such as Azure portal, Azure PowerShell, Azure CLI, or Azure Cloud Shell.
After completing this module, you will be able to:
- Manage resources with the Azure portal.
- Manage resources with Azure Cloud Shell.
- Manage resources with Azure PowerShell.
- Manage resources with Azure CLI.
- Introduction
- Use the Azure portal
- Use Azure Cloud Shell
- Use Azure PowerShell
- Interactive lab simulation (Azure PowerShell)
- Use Azure CLI
- Interactive lab simulation (Azure CLI)
- Knowledge check
- Summary and resources
MODULE 7: Use Azure Resource Manager
You'll learn how to use resource groups to organize your Azure resources.
After completing this module, you'll be able to:
- Identify the features and usage cases for Azure Resource Manager.
- Describe each Azure Resource Manager component and its usage.
- Organize your Azure resources with resource groups.
- Apply Azure Resource Manager locks.
- Move Azure resources between groups, subscriptions, and regions.
- Remove resources and resource groups.
- Apply and track resource limits.
- Introduction
- Review Azure Resource Manager benefits
- Review Azure resource terminology
- Create resource groups
- Create Azure Resource Manager locks
- Reorganize Azure resources
- Remove resources and resource groups
- Determine resource limits
- Knowledge check
- Summary and resources
MODULE 8: Configure resources with Azure Resource Manager templates
You'll learn how to use Azure Resource Manager templates to consistently deploy assets.
After completing this module, you'll be able to:
- List the advantages of Azure templates.
- Identify the Azure template schema components.
- Specify Azure template parameters.
- Locate and use Azure Quickstart Templates.
- Introduction
- Review Azure Resource Manager template advantages
- Explore the Azure Resource Manager template schema
- Explore the Azure Resource Manager template parameters
- Consider Bicep templates
- Review QuickStart templates
- Interactive lab simulation - templates
- Knowledge check
- Summary and resources
MODULE 10: Configure virtual networks
Learn to configure virtual networks and subnets, including IP addressing.
In this module, you learn how to:
- Describe Azure virtual network features and components.
- Identify features and usage cases for subnets and subnetting.
- Identify usage cases for private and public IP addresses.
- Create a virtual network and assign IP address.
- Introduction
- Plan virtual networks
- Create subnets
- Create virtual networks
- Plan IP addressing
- Create public IP addressing
- Associate public IP addresses
- Allocate or assign private IP addresses
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 11: Configure network security groups
Learn how to implement network security groups, and ensure network security group rules are correctly applied.
In this module, you learn how to:
- Determine when to use network security groups.
- Create network security groups.
- Implement and evaluate network security group rules.
- Describe the function of application security groups.
- Introduction
- Implement network security groups
- Determine network security group rules
- Determine network security group effective rules
- Create network security group rules
- Implement application security groups
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 12: Configure Azure DNS
Learn how to configure Azure DNS including custom domain names and record sets.
In this module, you learn how to:
- Identify features and usage cases for domains, custom domains, and private zones.
- Verify custom domain names by using DNS records.
- Implement DNS zones, DNS delegation, and DNS record sets.
- Introduction
- Identify domains and custom domains
- Verify custom domain names
- Create Azure DNS zones
- Delegate DNS domains
- Add DNS record sets
- Plan for Azure Private DNS zones
- Review Azure Private DNS zone scenarios
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 13: Configure Azure Virtual Network peering
Learn to configure an Azure Virtual Network peering connection and address transit and connectivity concerns.
In this module, you learn how to:
- Identify usage cases and product features of Azure Virtual Network peering.
- Configure your network to implement Azure VPN Gateway for transit connectivity.
- Extend peering by using a hub and spoke network with user-defined routes and service chaining.
- Introduction
- Determine Azure Virtual Network peering uses
- Determine gateway transit and connectivity
- Create virtual network peering
- Extend peering with user-defined routes and service chaining
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 14: Configure network routing and endpoints
Learn how to configure network routes, including endpoints and private links.
In this module, you learn how to:
- Implement system routes and user-defined routes.
- Configure a custom route.
- Implement service endpoints.
- Identify features and usage cases for Azure Private Link and endpoint services.
- Introduction
- Review system routes
- Identify user-defined routes
- Determine service endpoint uses
- Determine service endpoint services
- Identify private link uses
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 15: Configure Azure Load Balancer
Learn how to configure an internal or public load balancer.
In this module, you learn how to:
- Identify features and usage cases for Azure Load Balancer.
- Implement public and internal Azure load balancers.
- Compare features of load balancer SKUs and configuration differences.
- Configure back-end pools, load-balancing rules, session persistence, and health probes.
- Introduction
- Determine Azure Load Balancer uses
- Implement a public load balancer
- Implement an internal load balancer
- Determine load balancer SKUs
- Create back-end pools
- Create health probes
- Create load balancer rules
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 16: Configure Azure Application Gateway
Learn how to configure Azure Application Gateway.
In this module, you learn how to:
- Identify features and usage cases for Azure Application Gateway.
- Implement an Azure application gateway, including selecting a routing method.
- Configure gateway components, such as listeners, health probes, and routing rules.
- Introduction
- Implement Azure Application Gateway
- Determine Azure Application Gateway routing
- Configure Azure Application Gateway components
- Knowledge check
- Summary and resources
MODULE 17: Configure storage accounts
Learn how to configure storage accounts, including replication and endpoints.
In this module, you learn how to:
- Identify features and usage cases for Azure storage accounts.
- Select between different types of Azure Storage and create storage accounts.
- Select a storage replication strategy.
- Configure secure network access to storage endpoints.
- Introduction
- Implement Azure Storage
- Explore Azure Storage services
- Determine storage account types
- Determine replication strategies
- Access storage
- Secure storage endpoints
- Knowledge check
- Summary and resources
MODULE 18: Configure Azure Blob Storage
Learn how to configure Configure Azure Blob Storage, including tiers and object replication.
In this module, you learn how to:
- Understand the purpose and benefits of Azure Blob Storage.
- Create and configure Azure Blob Storage accounts.
- Manage containers and blobs within Azure Blob Storage.
- Optimize blob storage performance and scalability.
- Implement lifecycle management policies to automate data movement and deletion.
- Determine the best pricing plans for your Azure Blob Storage.
- Introduction
- Implement Azure Blob Storage
- Create blob containers
- Assign blob access tiers
- Add blob lifecycle management rules
- Determine blob object replication
- Upload blobs
- Determine Blob Storage pricing
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 19: Configure Azure Storage security
Learn how to configure common Azure Storage security features like storage access signatures.
In this module, you learn how to:
- Configure a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
- Configure Azure Storage encryption.
- Implement customer-managed keys.
- Recommend opportunities to improve Azure Storage security.
- Introduction
- Review Azure Storage security strategies
- Create shared access signatures
- Identify URI and SAS parameters
- Determine Azure Storage encryption
- Create customer-managed keys
- Apply Azure Storage security best practices
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 20: Configure Azure Files and Azure File Sync
Learn how to configure Azure Files and Azure File Sync.
In this module, you learn how to:
- Identify storage for file shares and blob data.
- Configure Azure file shares and file share snapshots.
- Identify features and use cases of Azure File Sync.
- Identify Azure File Sync components and configuration steps.
- Introduction
- Compare storage for file shares and blob data
- Manage Azure file shares
- Create file share snapshots
- Implement Azure File Sync
- Identify Azure File Sync components
- Deploy Azure File Sync
- Knowledge check
- Summary and resources
MODULE 21: Configure Azure Storage with tools
Learn how to configure Azure Storage with tools like Azure Storage Explorer and AZCopy.
In this module, you learn how to:
- Configure and use Azure Storage Explorer.
- Configure the Azure Import/Export service.
- Use the WAImportExport tool with the Azure Import/Export service.
- Configure and use AZCopy.
- Introduction
- Use Azure Storage Explorer
- Use the Azure Import/Export service
- Use the WAImportExport tool
- Use the AzCopy tool
- Knowledge check
- Summary and resources
MODULE 22: Configure virtual machines
Learn how to configure virtual machines including sizing, storage, and connections.
In this module, you learn how to:
- Determine the responsibilities of cloud service providers and customers in a cloud computing environment.
- Identify the key considerations and factors involved in planning for virtual machines. Considerations include workload requirements, resource allocation, and secure access.
- Configure virtual machine storage and virtual machine sizing.
- Create a virtual machine in the Azure portal.
- Practice deploying an Azure virtual machine and verify the configuration.
- Introduction
- Review cloud services responsibilities
- Plan virtual machines
- Determine virtual machine sizing
- Determine virtual machine storage
- Create virtual machines in the Azure portal
- Connect to virtual machines
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 23: Configure virtual machine availability
Learn how to configure virtual machine availability including vertical and horizontal scaling.
In this module, you learn how to:
- Implement availability sets and availability zones.
- Implement update and fault domains.
- Implement Azure Virtual Machine Scale Sets.
- Autoscale virtual machines.
- Introduction
- Plan for maintenance and downtime
- Create availability sets
- Review update domains and fault domains
- Review availability zones
- Compare vertical and horizontal scaling
- Implement Azure Virtual Machine Scale Sets
- Create Virtual Machine Scale Sets
- Implement autoscale
- Configure autoscale
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 24: Configure Azure App Service plans
Learn how to configure an Azure App Service plan, including pricing and scaling.
In this module, you learn how to:
- Identify features and usage cases for Azure App Service.
- Select an appropriate Azure App Service plan pricing tier.
- Scale an Azure App Service plan.
- Introduction
- Implement Azure App Service plans
- Determine Azure App Service plan pricing
- Scale up and scale out Azure App Service
- Configure Azure App Service autoscale
- Knowledge check
- Summary and resources
MODULE 25: Configure Azure App Service
Learn how to configure and monitor Azure App Service instances, including deployment slots.
In this module, you learn how to:
- Identify features and usage cases for Azure App Service.
- Create an app with Azure App Service.
- Configure deployment settings, specifically deployment slots.
- Secure your Azure App Service app.
- Configure custom domain names.
- Back up and restore your Azure App Service app.
- Configure Azure Application Insights.
- Introduction
- Implement Azure App Service
- Create an app with App Service
- Explore continuous integration and deployment
- Create deployment slots
- Add deployment slots
- Secure your App Service app
- Create custom domain names
- Back up and restore your App Service app
- Use Azure Application Insights
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 26: Configure Azure Container Instances
Learn how to configure Azure Container Instances including container groups.
In this module, you learn how to:
- Identify when to use containers versus virtual machines.
- Identify the features and usage cases of Azure Container Instances.
- Implement Azure container groups.
- Introduction
- Compare containers to virtual machines
- Review Azure Container Instances
- Implement container groups
- Review the Docker platform
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 27: Configure file and folder backups
Learn how to configure backup and restore policies that meet your company's regulatory needs.
In this module, you learn how to:
- Identify features and usage cases for Azure Backup.
- Configure Azure Recovery Services vault backup options.
- Configure the Microsoft Azure Recovery Services (MARS) agent for Azure Backup.
- Implement on-premises file and folder backups.
- Introduction
- Describe Azure Backup benefits
- Implement Backup Center for Azure Backup
- Configure Azure Recovery Services vault backup options
- Use the Microsoft Azure Recovery Services (MARS) agent
- Configure on-premises file and folder backups
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 28: Configure virtual machine backups
Learn how to configure virtual machine backups including restore operations.
In this module, you learn how to:
- Identify features and usage cases for different Azure backup methods.
- Configure virtual machine snapshots and backup options.
- Implement virtual machine backup and restore, including soft delete.
- Perform site-to-site recovery by using Azure Site Recovery.
- Compare the Azure Backup agent to the Microsoft Azure Backup Server.
- Introduction
- Explore options to protect virtual machine data
- Create virtual machine snapshots in Azure Backup
- Set up Azure Recovery Services vault backup options
- Back up your virtual machines
- Restore your virtual machines
- Implement System Center DPM and Azure Backup Server
- Compare the MARS agent and Azure Backup Server
- Implement soft delete for your virtual machines
- Implement Azure Site Recovery
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 30: Configure Azure Monitor
Learn how to configure Azure Monitor, including querying the Azure Monitor activity log.
In this module, you learn how to:
- Identify the features and usage cases for Azure Monitor.
- Configure and interpret metrics and logs.
- Identify the Azure Monitor components and data types.
- Configure the Azure Monitor activity log.
- Introduction
- Describe Azure Monitor key capabilities
- Describe Azure Monitor components
- Define metrics and logs
- Identify monitoring data and tiers
- Describe activity log events
- Query the activity log
- Interactive lab simulation
- Knowledge check
- Summary and resources
MODULE 31: Configure Azure alerts
Learn how to configure Azure alerts including action groups.
In this module, you learn how to:
- Identify Azure Monitor alerts, including alert types and alert states.
- Configure Azure Monitor alerts.
- Create alert rules and action groups.
- Introduction
- Describe Azure Monitor alerts
- Manage Azure Monitor alerts
- Create alert rules
- Create action groups
- Knowledge check
- Summary and resources
MODULE 32: Configure Log Analytics
You will learn how to configure Log Analytics including structuring queries.
After completing this module, you will be able to:
- Identify the features and usage cases for Log Analytics.
- Create a Log Analytics workspace.
- Structure a Log Analytics query and review results.
- Introduction
- Determine Log Analytics uses
- Create a Log Analytics workspace
- Create Kusto (KQL) queries
- Structure Log Analytics queries
- Knowledge check
- Summary and resources
MODULE 33: Configure Network Watcher
You learn how to configure Network Watcher and troubleshoot common networking problems.
After completing this module, you'll be able to:
- Identify the features and usage cases for Azure Network Watcher.
- Configure diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.
- Introduction
- Describe Azure Network Watcher features
- Review IP flow verify diagnostics
- Review next hop diagnostics
- Visualize the network topology
- Knowledge check
- Summary and resources
