Guia de Estudos AZ-103 (Study Guide AZ-103)

Faaala galera, 100%!

No último dia 30 (30/11/19) fui aprovado no exame AZ-103 e com isso conquistei o título de Azure Administrator Associate. Nesse artigo quero compartilhar com você qual foi minha estratégia de estudo e quais materiais utilizei pra a prepação. Além disso você terá um lista de links úteis para cada assunto abordado no exame! Let’s rock!!

O início

O primeiro passo para ter sucesso em qualquer coisa, da mais simples a mais complexa, é começar pelo começo. Pode parecer óbvio mas MUITA gente tenta começar o estudo de uma nova tecnologia ou o desenvolvimento de alguma habilidade do meio. No caso de uma prova de certificação, o primeiros passos são:

• Por que quero fazer essa prova?
• Já tenho experiencia de campo o suficiente para me tornar certificado?
• O que a prova vai me cobrar?

O lance de começar pelo meio é “tirar do bolso” a ideia de fazer uma prova e começar a estudar sem nenhum planejamento! Se não sabe o que será cobrado, como se começa a estudar?! Se não tem bagagem em ambiente local (on-premisse) como ir para a nuvem?!

No meu caso eu decidi fazer a prova de certificação para testar as investidas de estudo que tenho feito a algum tempo, além de questões profissionais. Eu comecei a estudar com foco na prova em Maio, 6 meses antes da data do exame.

A preparação – Material utilizado

Como eu comentei comecei a estudar com foco na certificação em maio, lendo as documentações da própria Microsoft. Depois de algum tempo busquei treinamento presencial com boa referencia e ainda “suplementei” a preparação com mais um Path online e muito lab.

Basicamente o que eu fiz foi:

• Workshop Azure – Azure Academy (Presencial em SP)

Esse workshop foi muito bacana por conta da pegada prática. A parte teórica é vista mas com aplicação imediata, por isso você consegue assimilar o conteúdo e a forma como “a nuvem” trabalha. O instrutor, Rubens Guimaraes, tem MUITA experiencia com ambientes Azure e uma didática invejável. Como também sou docente consegue identificar que o workshop foi de fato planejado com cuidado.

• Treinamento Azure Infrastrucute – Azure Academy (Presencial SP)

Como curti  bastante o primeiro treinamento com a galera da Azure Academy decidi voltar e fazer a trilha com foco em Infra. Basicamente vimos questões relacionadas a Networking. Esse treinamento em específico me ajudou bastante no exame. Novamente um ótimo trabalho da galera do Azure Academy.

• Path AZ-103 Plurasight

Como VMware vExpert tenho acesso ao Pluralsight, que é uma plataforma de treinamentos voltados a TI. Aproveitei e busquei alguma vídeo aula sobre. Para minha surpresa os caras tem um “path” específico para a AZ-103 (https://www.pluralsight.com/paths/microsoft-azure-administrator-az-103). Um Path é um conjunto de cursos que, juntos, abordam todos os tópicos da prova.

É importante dizer aqui que alguns cursos estavam com versão do Azure “desatualizada” mas não perdeu em qualidade. Detalhe, tudo em inglês!! Se você não sabe inglês, já passou da hora de aprender e eu posso te ajudar com isso =D.

• Docs Microsoft

Por incrível que pareça, dessa vez, não utilize nenhum livro base. Pesquisei um pouco e vi que o Exam-Ref continuava muito superficial, então preferi utilizar a própria documentação da Microsoft para validar a parte teórica. Mesmo que esteja em partes “quebradas” ainda foi muito útil.

Rotina de Estudos

Quando você quer aprender uma nova habilidade a ÚNICA forma de conseguir isso é exercitando e tendo contato o máximo possível. E foi isso que fiz, TODO SANTO DIA, estudar pelo menos 1h. Particularmente tenho maior foco pela manhã e a noite, então, separa de 1 a 2h dia nesses dois períodos para ler e/ou assistir uma vídeo aula.

Eu tenho uma forma própria de aprender, eu não consigo simplesmente clicar nos botões e ver o que acontece, preciso ter a base teórica, saber o que acontece depois do clique, por “debaixo dos panos”, então, eu buscava um assunto, lia a documentação, assistia as vídeos aulas e depois aplicava no Azure. Além disso eu preciso escrever, então tenho sempre caneta e papel para as minhas anotações.

“Nathan, quero muito fazer essa prova, vou estudar 5 horas por dia”. Hey, take it easy, volume é diferente de qualidade. E cá entre nós, quem consegue se concentrar por mais de 30min é privilegiado. A dica que deixo é vá aos poucos e com qualidade, no final, uma coisa linka com a outra e tudo vai fluindo.

Outra técnica que uso é baseada na Técnica de Feyman. Você deve ter notado a quantidade de artigos sobre Azure que postei no mês de outubro, né? Esse foi o mês mais intenso em relação a consumo de teoria de Azure. A técnica de Feyman diz que, você sabe sobre um assunto quando consegue explicar para alguém como tal coisa funciona. Os artigos são minha forma de passar o que eu aprendi sobre determinado assunto de uma maneira mais simples. Uso isso desde sempre, até mesmo nas aulas que lecionada na faculdade, e funciona SUPER bem!

O exame – Impressões Gerais

Essa, sem dúvida, foi um dos exames mais difíceis e chatos que fiz. No meu foram 46 questões de multipla escolha, 1 estudo de caso com 4 questões e 2 labs, cada um com 8 task (tarefas). De forma geral achei o exame cansativo de ser feito, as questão foram gigantes e como blueprit é extenso, não foi tarefa fácil juntas todas as peças para entregar a resposta correta.

Por incrível que pareça a parte do Lab foi a mais tranquila. Tive que:

• Criar Storage Account com cota especifíca
• Criar peering e permitir encaminhamento de tráfego entre vNets
• Criação de DNS Zone via Azure CLI
• Criar VMs com detalhes específicos
• Criar NSG com regras específicas

Claro que tiverem mais alguns detalhes mas basicamente os assunto abordados foram esses.

Na parte de múltipla escolha o que mais caiu foram questões de vNet e AD. Por incrível que pareça, nenhuma questão pediu comandos PowerShell ou CLI.

A parte do estudo de caso, eu, particularmente, não gostei nadinha. Eram quatro questões baseadas em um cenário pequeno mas com enunciado gigantesco e com vários detalhes que não foram úteis para a resolução das questões. Pelo visto, a ideia era confundir.

Dicas Gerais

• Se de fato quer passar no exame tenha em mente que não será fácil, a não ser que você já tenha um baita conhecimento em Azure e queria apenas valida-lo com o exame.
• NÃO EXISTE RECEITA MÁGICA, não existe técnica secreta dos jedis, não existe conhecimento oculto, o tal “abrir a caixa preta”. Tudo isso é balela, a única coisa que existe é disciplina, foco e muito estudo.
• O livro Exam-Ref é super supercial, se decidir adquiri-lo, utilize como base e não como material principal.
• Abuse dos labs. Algumas questões pedem detalhes de configurações que só pondo a mão na massa para entender.
• Desconfie de treinamentos que prometam te tornar um Expert ou te entregar anos de conteúdo em poucos dias, isso simplesmente não existe!

Conclusão

Consegui atingir minha meta de ser aprovado no exame e fechei minha meta anual de certificações e treinamentos.

“Então agora, Nathan, você é um Expert em Azure?!”. Eu não to estou nem próximo disso. A certificação não foi feita para criar Experts, a certf é apenas uma validação do seu esforço em relação aos estudos.

O próximo passo agora é a AZ-300 e AZ-500 que ficarão para 2020. Compartilharei minha jornada nesse exames também!

Espero que tenha curtido! Um grande abraço \,,/

 

Study Guide

Manage Azure subscriptions and resources (15-20%)

Manage Azure subscriptions

• assign administrator permissions

1. Add or change Azure subscription administrators [Microsoft – Docs – Azure]
2. Administrator role permissions in Azure Active Directory [Microsoft – Docs – Azure]
3. View and assign administrator roles in Azure Active Directory [Microsoft – Docs – Azure]
4. Assign administrator and non-administrator roles to users with Azure Active Directory [Microsoft – Docs – Azure]

• configure cost center quotas and tagging

1. Azure subscription and service limits, quotas, and constraints [Microsoft – Docs – Azure]
2. Manage and request quotas for Azure resources [Microsoft – Docs – Azure]
3. Use tags to organize your Azure resources [Microsoft – Azure – Resource Manager]
4. Sample – Enforce tag and its value [Microsoft – Docs – Azure]
5. Sample – Billing tags policy initiative [Microsoft – Docs – Azure]
6. Use tags to organize your Azure resources [Microsoft – Docs – Azure]
7. Prevent unexpected charges with Azure billing and cost management [Microsoft – Docs – Azure]

• configure Azure subscription policies at Azure subscription level

1. Add or change Azure subscription administrators [Microsoft – Azure – Billing]
2. Overview of the Azure Policy service [Microsoft – Docs – Azure]
3. Tutorial: Create and manage policies to enforce compliance [Microsoft – Docs – Azure]
4. Azure Policy definition structure [Microsoft – Docs – Azure]

Analyze resource utilization and consumption

• configure diagnostic settings on resources

1. Collect and consume log data from your Azure resources [Microsoft – Azure – Azure Monitor]
2. Automatically enable Diagnostic Settings at resource creation using a Resource Manager template [Microsoft – Azure – Azure Monitor]

• create baseline for resources
• create and test alerts

1. Overview of alerts in Microsoft Azure [Microsoft – Azure – Azure Monitor]
2. Create, view, and manage activity log alerts using Azure Monitor [Microsoft – Docs – Azure]
3. Create, view, and manage log alerts using Azure Monitor [Microsoft – Azure – Azure Monitor]
4. Alerts on activity log [Microsoft – Azure – Azure Monitor]
5. Log alerts in Azure Monitor [Microsoft – Azure – Azure Monitor]

• analyze alerts across subscription

1. Azure Monitor alerting just got better! [Microsoft – Azure – Blog]
2. Monitor at scale in Azure Monitor with multi-resource metric alerts [Microsoft – Azure – Blog]

• analyze metrics across subscription

1. Azure Monitor data platform [Microsoft – Docs – Azure]
2. Advanced features of Azure Metrics Explorer [Microsoft – Azure – Azure Monitor]

• create action groups

1. Create and manage action groups in the Azure portal [Microsoft – Azure – Azure Monitor]

• monitor for unused resources
• monitor spend

1. Use cost alerts to monitor usage and spending [Microsoft – Docs – Azure]
2. Understand Azure spending limit and how to remove it [Microsoft – Docs – Azure]
3. Tutorial: Create and manage Azure budgets [Microsoft – Docs – Azure]

• report on spend

1. What is Azure Cost Management? [Microsoft – Docs – Azure]
2. Quickstart: Explore and analyze costs with Cost analysis [Microsoft – Docs – Azure]

• utilize Log Search query functions

1. Using functions in Azure Monitor log queries [Microsoft – Azure – Azure Monitor]
2. Get started with Azure Monitor log queries [Microsoft – Azure – Azure Monitor]
3. Analyze log data in Azure Monitor [Microsoft – Azure – Azure Monitor]
4. Writing advanced queries in Azure Monitor [Microsoft – Azure – Azure Monitor]
5. Azure Monitor log queries [Microsoft – Azure – Azure Monitor]
6. Search queries in Azure Monitor logs [Microsoft – Azure – Azure Monitor]
7. Azure Monitor log query examples [Microsoft – Azure – Azure Monitor]

• view alerts in Log Analytics

1. View or analyze data collected with Log Analytics log search [Microsoft – Azure – Azure Monitor]
2. Log alert queries in Azure Monitor [Microsoft – Azure – Azure Monitor]

Manage resource groups

• use Azure policies for resource groups

1. Tutorial: Create and manage policies to enforce compliance [Microsoft – Docs – Azure]

• configure resource locks

1. Lock resources to prevent unexpected changes [Microsoft – Docs – Azure]
2. Using Azure resource manager policy and Azure lock to control your Azure resources [Microsoft – Blog – Developer]

• configure resource policies

1. Portal Preview of Azure Resource Policy [Microsoft – Blog – Azure]
2. Announcing Azure Resource Policy general availability [Microsoft – Blog – Azure]
3. Azure Subscription Governance – Controlling resources with Tags, Policies, and Locks [Microsoft – Blog – TechNet]

• identify auditing requirements

1. Azure logging and auditing [Microsoft – Docs – Azure]

• implement and set tagging on resource groups

1. Resource naming and tagging decision guide [Microsoft – Docs – Azure]
2. Everything you need to know about resource tagging in Azure [Blog]

• move resources across resource groups

1. Move resources to new resource group or subscription [Microsoft – Docs – Azure]
2. Move a Windows VM to another Azure subscription or resource group [Microsoft – Docs – Azure]
3. Move a Recovery Services vault across Azure Subscriptions and Resource Groups [Microsoft – Docs – Azure]

• remove resource groups

1. Azure Resource Manager resource group deletion [Microsoft – Docs – Azure]

Managed role based access control (RBAC)

• create a custom role

1. Custom roles for Azure resources [Microsoft – Docs – Azure]
2. Tutorial: Create a custom role for Azure resources using Azure PowerShell [Microsoft – Docs – Azure]
3. Tutorial: Create a custom role for Azure resources using Azure CLI [Microsoft – Docs – Azure]
4. Create custom roles for Azure resources using Azure PowerShell [Microsoft – Docs – Azure]

• configure access to Azure resources by assigning roles

1. What is role-based access control (RBAC) for Azure resources? [Microsoft – Docs – Azure]
2. Built-in roles for Azure resources [Microsoft – Docs – Azure]

• configure management access to Azure

1. Manage access to Azure resources using RBAC and the Azure portal [Microsoft – Docs – Azure]
2. Manage access to Azure management with conditional access [Microsoft – Docs – Azure]

• troubleshoot RBAC

1. Troubleshoot RBAC for Azure resources [Microsoft – Docs – Azure]
2. Common problem when using Azure resource groups & RBAC [Microsoft – Blog – Developer]
3. View activity logs for RBAC changes to Azure resources [Microsoft – Docs – Azure]

• implement RBAC policies
• assign RBAC Roles

1. Set RBAC roles for administrative access [Microsoft – Docs – Azure]
2. Understanding Role Based Access Control [Microsoft – Docs – Exchange]
3. Tutorial: Grant a group access to Azure resources using RBAC and Azure PowerShell [Microsoft – Docs – Azure]
4. Manage access to Azure resources using RBAC and Azure CLI [Microsoft – Docs – Azure]

Implement and manage storage (15-20%)

Create and configure storage accounts

• configure network access to the storage account

1. Configure Azure Storage firewalls and virtual networks [Microsoft – Azure – Storage]
2. Manage storage account settings in the Azure portal [Microsoft – Azure – Storage]
3. Authorizing access to Azure Storage [Microsoft – Azure – Storage]

• create and configure storage account

1. Create a storage account [Microsoft – Azure – Storage]
2. Azure storage account overview [Microsoft – Azure – Storage]

• generate shared access signature

1. Using shared access signatures (SAS) [Microsoft – Azure – Storage]
2. Generate SAS token [Microsoft – Docs – Azure]
3. Getting Started with Shared Access Signatures (SAS) [Microsoft – Azure – Storage account]

• install and use Azure Storage Explorer

1. Get started with Storage Explorer [Microsoft – Docs – Azure]
2. Quickstart: Use Azure Storage Explorer to create a blob in object storage [Microsoft – Azure – Storage]
3. Connect storage explorer to an Azure Stack subscription or a storage account [Microsoft – Docs – Azure stack]
4. Introduction to Microsoft Azure Storage Explorer [Microsoft – Azure – Storage]

• manage access keys

1. Manage storage account settings in the Azure portal – Access Keys [ Microsoft Docs]
2. Authorize with Shared Key [Microsoft Docs]

• monitor activity log by using Log Analytics

1. Collect and analyze Azure activity logs in Log Analytics workspace in Azure Monitor [Microsoft – Azure – Azure Monitor]

• implement Azure storage replication

1. Azure Storage redundancy [Microsoft – Azure – Storage]
2. Geo-redundant storage (GRS): Cross-regional replication for Azure Storage [Microsoft – Azure – Storage]
3. Designing highly available applications using RA-GRS [Microsoft – Azure – Storage]
4. Locally redundant storage (LRS): Low-cost data redundancy for Azure Storage [Microsoft – Azure – Storage]

Import and export data to Azure

• create export from Azure job

1. What is Azure Import/Export service? [Microsoft – Azure – Storage]
2. Creating an export job for the Azure Import/Export service [Microsoft – Azure – Storage

• create import into Azure job

1. Creating an import job for the Azure Import/Export service [Microsoft – Azure – Storage]

• Use Azure Data Box

1. What is Azure Data Box? [Microsoft – Azure – Data box family]
2. Azure Data Box Documentation – Offline Transfer [Microsoft – Azure – Data box family]
3. Quickstart: Deploy Azure Data Box using the Azure portal [Microsoft – Azure – Data box family]
4. What is Azure Data Box Edge? [Microsoft – Azure – Data box family]
5. What is Azure Data Box Disk? [Microsoft – Azure – Data box family]

• configure and use Azure blob storage

1. Introduction to Azure Blob storage [Microsoft – Azure – Storage]
2. Quickstart: Upload, download, and list blobs with the Azure portal [Microsoft – Azure – Storage]
3. Manage Azure Blob Storage resources with Storage Explorer [Microsoft – Azure – Storage]

• configure Azure content delivery network (CDN) endpoints

1. What is a content delivery network on Azure? [Microsoft – Azure – CDN]
2. Quickstart: Create an Azure CDN profile and endpoint [Microsoft – Azure – CDN]
3. Tutorial: Add Azure CDN to an Azure App Service web app [Microsoft – Azure – CDN]

Configure Azure files

• create Azure file share

1. Create a file share in Azure Files [Microsoft – Azure – Storage]
2. Quickstart: Create and manage Azure file shares with Azure Storage Explorer [Microsoft – Azure – Storage]
3. Quickstart: Create and manage Azure Files share with Windows virtual machines [Microsoft – Azure – Storage]
4. Quickstart: Create and manage Azure file shares with the Azure portal [Microsoft – Azure – Storage]
5. Quickstart: Create and manage an Azure file share with Azure PowerShell [Microsoft – Azure – Storage]
6. Quickstart: Create and manage Azure file shares using Azure CLI [Microsoft – Azure – Storage]

• create Azure File Sync service

1. Deploy Azure File Sync [Microsoft – Azure – Storage]
2. Planning for an Azure File Sync deployment [Microsoft – Azure – Storage]
3. Tutorial: Extend Windows file servers with Azure File Sync [Microsoft – Azure – Storage]

• create Azure sync group

• troubleshoot Azure File Sync

1. Troubleshoot Azure File Sync [Microsoft – Azure – Storage]
2. Troubleshoot Azure Files problems in Windows [Microsoft – Azure – Storage]
3. Monitor Azure File Sync [Microsoft – Azure – Storage]

Implement Azure backup

• configure and review backup reports

1. Configure Azure Backup reports [Microsoft – Azure – Backup]
2. Preview: Azure Backup reports through Power BI [Microsoft – Azure – Backup]
3. Update the Azure Backup central reporting content pack [Microsoft – Azure – Backup]
4. Microsoft Azure : Azure Backup Report with Recovery Services Vault & Power BI [Microsoft – TechNet – Article]

• perform backup operation

1. Introducing backup for Azure file shares [Microsoft – Blog – Storage]

• create Recovery Services Vault

1. Recovery Services vaults overview [Microsoft – Azure – Backup]
2. Monitor and manage Recovery Services vaults [Microsoft – Azure – Backup]
3. Back up Azure VMs in a Recovery Services vault [Microsoft – Azure – updates]

• create and configure backup policy

• perform a restore operation

Deploy and manage virtual machines (VMs) (15-20%)

Create and configure a VM for Windows and Linux

• configure high availability

1. Manage the availability of Windows virtual machines in Azure [Microsoft – Azure – Virtual Machine]
2. Manage the availability of Linux virtual machines [Microsoft – Azure – Virtual Machine]
3. Tutorial: Create and deploy highly available virtual machines with the Azure CLI [Microsoft – Azure – Virtual Machine]

• configure monitoring, networking, storage, and virtual machine size

1. How to monitor virtual machines in Azure [Microsoft – Azure – Virtual Machines]
2. Quickstart: Create a virtual network using the Azure portal [Microsoft – Azure – Virtual Network]
3. Create a virtual network [Microsoft – Docs – Virtualization]
4. Tutorial: Create and manage Azure virtual networks for Windows virtual machines with Azure PowerShell [Microsoft – Azure – Virtual Machines]
5. Add network interfaces to or remove network interfaces from virtual machines [Microsoft – Azure – Virtual Network]
6. Sizes for Windows virtual machines in Azure [Microsoft – Azure – Virtual Machine]
7. General purpose virtual machine sizes [Microsoft – Azure – Virtual Machine]

• deploy and configure scale sets

1. What are virtual machine scale sets? [Microsoft – Azure – Virtual Machine]
2. Quickstart: Create a virtual machine scale set in the Azure portal [Microsoft – Azure – Virtual Machine Scale Sets]
3. Resize a Windows VM [Microsoft – Azure – Virtual Machine]
4. Quickstart: Create a Windows virtual machine scale set with an Azure template [Microsoft – Azure – Virtual Machine]
5. Tutorial: Create a virtual machine scale set and deploy a highly available app on Windows with Azure PowerShell [Microsoft – Azure – Virtual Machine]

Automate deployment of VMs

• modify Azure Resource Manager (ARM) template

1. Quickstart: Create and deploy Azure Resource Manager templates by using the Azure portal [Microsoft – Azure – Resource Manager]
2. Deploy resources with Resource Manager templates and Azure portal [Microsoft – Azure – Resource Manager]
3. Update a resource in an Azure Resource Manager template [Microsoft – Azure – Architecture]
4. Create Azure Resource Manager template [Microsoft – Azure – Resource Manager]

• configure location of new VMs

1. Quickstart: Create a Windows virtual machine in Azure with PowerShell [Microsoft – Docs]
2. Quickstart: Create a Windows virtual machine with the Azure CLI [Microsoft – Docs]

•  configure VHD template

1. Virtual hard disk deployment template [Microsoft – Docs – Azure]

• deploy from template

1. Create a Windows virtual machine from a Resource Manager template [Microsoft – Azure – Virtual Machine]
2. Download the template for a VM [Microsoft – Azure – Virtual Machine]
3. Deploy a Windows Virtual Machine with Azure Resource Manager Templates and PowerShell [Microsoft – Azure – Virtual Machine]
4. Tutorial: create a VM using a community template [Microsoft – Azure – Azure Stack]
5. Build an Azure virtual machine using an Azure RM template [Microsoft – Docs – Azure DevOps]

• save a deployment as an ARM template

1. How to use/create ARM templates for deployments [Microsoft – Blog – Developer]
2. Creating Azure Resources with ARM Templates Step by Step [Microsoft – Blog – Developer]

• deploy Windows and Linux VMs

1. Quickstart: Create a Windows virtual machine in Azure with PowerShell [Microsoft – Docs]
2. Quickstart: Create a Windows virtual machine with the Azure CLI [Microsoft – Docs]
3. Quickstart: Create a Linux virtual machine in Azure with PowerShell [Microsoft – Docs]
4. Quickstart: Create a Linux virtual machine with the Azure CLI [Microsoft – Docs]

Manage Azure VM

• add data discs

1. Attach a data disk to a Windows VM with PowerShell [Microsoft – Azure – Virtual Machine]
2. Add a disk to a Linux VM using CLI [Microsoft – Azure – Virtual Machine]
3. Use the portal to attach a data disk to a Linux VM [Microsoft – Azure – Virtual Machine]
4. Attach a managed data disk to a Windows VM by using the Azure portal [Microsoft – Azure – Lab services]

• add network interfaces

1. Add network interfaces to or remove network interfaces from virtual machines [Microsoft – Azure – Virtual Machine]
2. Create, change, or delete a network interface [Microsoft – Azure – Virtual Networks]

• automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent by using custom script extensions

1. Azure Automation State Configuration Overview [Microsoft – Azure – Automation]
2. Getting started with Azure Automation State Configuration [Microsoft – Azure – Automation]
3. Introduction to the Azure Desired State Configuration extension handler [Microsoft – Azure – Virtual Machine]
4. Custom Script Extension for Windows [Microsoft – Azure – Virtual Machine]
5. Virtual machine extensions and features for Windows [Microsoft – Azure – Virtual Machine]
6. Using DSC on Microsoft Azure [Microsoft – Docs – PowerShell]
7. Configure a Linux virtual machine with Desired State Configuration [Microsoft – Azure – Automation]
8. Using Azure Custom Script Extension to execute scripts on Azure VMs [Microsoft – Blog – TechNet]
9. Use the Azure Custom Script Extension Version 2 with Linux virtual machines [Microsoft – Azure – Virtual Machine]

• manage VM sizes; move VMs from one resource group to another

1. Manage the availability of Windows virtual machines in Azure [Microsoft – Azure – Virtual Machine]
2. Move resources to new resource group or subscription [Microsoft – Azure – Azure Stack]
3. Resize virtual machines [Microsoft – Azure – Blog]

• redeploy VMs

1. Redeploy Windows virtual machine to new Azure node [Microsoft – Azure – Virtual Machine]
2. Redeploy Linux virtual machine to new Azure node [Microsoft – Azure – Virtual Machine]
3. Redeploy a VM in a lab in Azure DevTest Labs [Microsoft – Azure – Lab Services]

Manage VM backups

• configure VM backup

1. Back up a virtual machine in Azure [Microsoft – Azure – Backup]
2. Backing up and restoring virtual machines [Microsoft – Docs – Windows]
3. Back up an Azure VM from the VM settings [Microsoft – Azure – Backup]
4. About Azure VM backup [Microsoft – Azure – Backup]
5. Back up Azure VMs in a Recovery Services vault [Microsoft – Azure – Backup]
6. Frequently asked questions-Back up Azure VMs [Microsoft – Azure – Backup]

• define backup policies

1. Manage backup policy for a VM [Microsoft]

• implement backup policies
• perform VM restore

1. Restore Azure VMs [Microsoft – Azure – Backup]
2. Instantly restore your Azure Virtual Machines using Azure Backup [Microsoft – Blog – Backup]

• Azure Site Recovery

1. About Site Recovery [Microsoft – Azure – Site Recovery]
2. Azure Site Recovery: Disaster Recovery as a Service (DRaaS) for Azure, by Azure [Microsoft – Blog – Virtual Machine]
3. Set up disaster recovery to Azure for on-premises physical servers [Microsoft – Azure – Site Recovery]

Configure and manage virtual networks (30-35%)

Create connectivity between virtual networks

• create and configure VNET peering

1. Virtual network peering [Microsoft – Azure – Virtual Network]
2. Create, change, or delete a virtual network peering [Microsoft – Azure – Virtual Network]
3. Tutorial: Connect virtual networks with virtual network peering using the Azure portal [Microsoft – Azure – Virtual Network]

• create and configure VNET to VNET

1. Configure a VNet-to-VNet connection (classic) [Microsoft – Azure – VPN Gateway]
2. Configure a VNet-to-VNet VPN gateway connection by using the Azure portal [Microsoft – Azure – VPN Gateway]
3. Configure a VNet-to-VNet VPN gateway connection using PowerShell [Microsoft – Azure – VPN Gateway]
4. Configure a VNet-to-VNet VPN gateway connection using Azure CLI [Microsoft – Azure – VPN Gateway]

• verify virtual network connectivity

1. Verify a VPN Gateway connection [Microsoft – Azure – VPN Gateway]
2. Configuring and validating VNet or VPN connections [Microsoft – Support]

• create virtual network gateway

1. Create a route-based VPN gateway using the Azure portal [Microsoft – Azure – VPN Gateway]
2. Configure a virtual network gateway for ExpressRoute using PowerShell [Microsoft – Azure – ExpressRoute]
3. Configure a virtual network gateway for ExpressRoute using the Azure portal [Microsoft – Azure – ExpressRoute]

Implement and manage virtual networking

• configure private and public IP addresses network routes, network interface, subnets, and virtual network

1. Tutorial: Route network traffic with a route table using the Azure portal [Microsoft – Azure – Virtual Network]
2. IP address types and allocation methods in Azure [Microsoft – Azure – Virtual Network]
3. Virtual network traffic routing [Microsoft – Azure – Virtual Network]
4. Create, change, or delete a public IP address [Microsoft – Azure – Virtual Network]
5. Add, change, or remove IP addresses for an Azure network interface [Microsoft – Azure – Virtual Network]
6. Configure private IP addresses for a virtual machine using the Azure portal [Microsoft – Azure – Virtual Network]
7. How to reset network interface for Azure Windows VM [Microsoft – Azure – Virtual Machine]
8. Configure private IP addresses for a virtual machine using the Azure CLI [Microsoft – Azure – Virtual Network]
9. Create a virtual network (classic) with multiple subnets [Microsoft – Azure – Virtual Network]
10. Add, change, or delete a virtual network subnet [Microsoft – Azure – Virtual Network]
11. Create, change, or delete a virtual network [Microsoft – Azure – Virtual Network]

Configure name resolution

• configure Azure DNS

1. Azure DNS Documentation [Microsoft – Azure – DNS]
2. Quickstart: Create an Azure DNS zone and record using the Azure portal [Microsoft – Azure – DNS]
3. Quickstart: Create an Azure DNS zone and record using Azure PowerShell [Microsoft – Azure – DNS]
4. Quickstart: Create an Azure DNS zone and record using Azure CLI [Microsoft – Azure – DNS]

• configure custom DNS settings

1. Use Azure DNS to provide custom domain settings for an Azure service [Microsoft – Azure – DNS]
2. Tutorial: Map an existing custom DNS name to Azure App Service [Microsoft – Azure – App Service]

• configure private and public DNS zones

1. Create an Azure DNS private zone using Azure PowerShell [Microsoft – Azure – DNS]
2. Use Azure DNS for private domains [Microsoft – Azure – DNS]
3. Tutorial: Host your domain in Azure DNS [Microsoft – Azure – DNS]

Create and configure a Network Security Group (NSG)

• create security rules

1. Security groups [Microsoft – Azure – Virtual Network]
2. Create, change, or delete a network security group [Microsoft – Azure – Virtual Network]

• associate NSG to a subnet or network interface

1. Securing Azure Virtual Machines using Network Security Groups (NSGs) [Blog] [Microsoft – Azure – Virtual Network]

• identify required ports

1. Security groups [Microsoft – Azure – Virtual Network]

• evaluate effective security rules

1. Microsoft Azure Network Security Group effective security rules evaluation [Blog] [Microsoft – Azure – Security]

Implement Azure load balancer

• configure internal load balancer

1. Internal Load Balancing [Microsoft – Azure – Blog]
2. Create an internal load balancer by using the Azure PowerShell module [Microsoft – Azure – Load Balancer]
3. Create an internal load balancer to load balance VMs using Azure CLI [Microsoft – Azure – Load Balancer]
4. Create an internal load balancer using a template [Microsoft – Azure – Load Balancer]

• configure load balancing rules

1. Configure load balancing and outbound rules in Standard Load Balancer using Azure CLI [Microsoft – Azure – Load Balancer]

• configure public load balancer

1. Creating a public load balancer using a template [Microsoft – Azure – Load Balancer]

• troubleshoot load balancing

1. Troubleshoot Azure Load Balancer [Microsoft – Azure – Load Balancer]
2. Metrics and health diagnostics for Standard Load Balancer [Microsoft – Azure – Load Balancer]

Monitor and troubleshoot virtual networking

• monitor on-premises connectivity

1. Diagnose on-premises connectivity via VPN gateways [Microsoft – Azure – Network Watcher]
2. Choose a solution for connecting an on-premises network to Azure [Microsoft – Azure – Architecture]

• use Network resource monitoring

1. Network Performance Monitor solution in Azure [Microsoft – Azure – Azure Monitor]
2. Network Performance Monitor solution: Performance monitoring [Microsoft – Azure – Azure Monitor]

• use Network Watcher

1. What is Azure Network Watcher? [Microsoft – Azure – Network Watcher]
2. Introduction to resource troubleshooting in Azure Network Watcher [Microsoft – Azure – Network Watcher]
3. Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher [Microsoft – Azure – Network Watcher]

• troubleshoot external networking

• troubleshoot virtual network connectivity

1. Troubleshooting connectivity problems between Azure VMs [Microsoft – Azure – Virtual Network]
2. Troubleshoot Virtual Network gateway and Connections using Azure Network Watcher [Microsoft – Azure – Network Watcher]

Integrate on premises network with Azure virtual network

• create and configure Azure VPN Gateway

1. Tutorial: Create and manage a VPN gateway using PowerShell [Microsoft – Azure – VPN Gateway]
2. About VPN Gateway configuration settings [Microsoft – Azure – VPN Gateway]
3. Create a route-based VPN gateway using CLI [Microsoft – Azure – VPN Gateway]
4. Create a route-based VPN gateway using PowerShell

• create and configure site to site VPN

1. Create a Site-to-Site connection in the Azure portal [Microsoft – Azure – VPN Gateway]
2. Create a virtual network with a Site-to-Site VPN connection using CLI [Microsoft – Azure – VPN Gateway]
3. Configure a site-to-site VPN over ExpressRoute Microsoft peering [Microsoft – Azure – Expressroute]

• configure Express Route

1. Connect an on-premises network to Azure using ExpressRoute [Microsoft – Azure – Architecture]

• verify on premises connectivity

1. Verifying ExpressRoute connectivity [Microsoft – Azure – Expressroute]

• troubleshoot on premises connectivity with Azure

1. Diagnose on-premises connectivity via VPN gateways [Microsoft – Azure – Network Watcher]
2. Troubleshoot VPN Gateway [Microsoft – Azure – VPN Gateway]

Manage identities (15-20%)

Manage Azure Active Directory (AD)

• add custom domains

1. Add your custom domain name using the Azure Active Directory portal [Microsoft – Azure – Active Directory]
2. Configure a custom domain name [Microsoft – Docs – Enterprise Mobility + Security]

Manage Azure AD objects (users, groups, and devices)

• create users and groups

1. Add or delete users using Azure Active Directory [Microsoft – Azure – Active Directory]
2. Create a basic group and add members using Azure Active Directory [Microsoft – Azure – Active Directory]

• manage user and group properties

1. Edit your group information using Azure Active Directory [Microsoft – Azure – Active Directory]
2. Add or remove a group from another group using Azure Active Directory [Microsoft – Azure – Active Directory]

• manage device settings

1. How to manage devices using the Azure portal [Microsoft – Azure – Active Directory]
2. Manage your connected devices from the My Profile (preview) portal [Microsoft – Azure – Active Directory]

• perform bulk user updates

1. Importing data into my directory [Azure PowerShell]

• manage guest accounts

Implement and manage hybrid identities

• install Azure AD Connect including password hash and pass-through synchronization

1. Azure AD Connect and Azure AD Connect Health installation roadmap [Microsoft Docs]
2. Migrate from federation to password hash synchronization for Azure Active Directory [Microsoft – Azure – Active Directory]
3. Azure Active Directory Pass-through Authentication: Quick start [Microsoft – Azure – Active Directory]
4. What is password hash synchronization with Azure AD? [Microsoft – Azure – Active Directory]
5. Azure AD Connect: Accounts and permissions [Microsoft – Azure – Active Directory]
6. Azure Active Directory Pass-through Authentication: Current limitations [Microsoft – Azure – Active Directory]
7. Implement password hash synchronization with Azure AD Connect sync [Microsoft – Azure – Active Directory]

• use Azure AD Connect to configure federation with on-premises Active Directory Domain Services (AD DS)

1. Integrate on-premises Active Directory domains with Azure Active Directory [Microsoft – Azure – architecture]
2. Choose a solution for integrating on-premises Active Directory with Azure [Microsoft – Azure – architecture]

• manage Azure AD Connect

1. Next steps and how to manage Azure AD Connect [Microsoft – Azure – Active Directory]

• manage password sync and password writeback

1. Tutorial: Enabling password writeback [Microsoft – Azure – Active Directory]
2. How-to: Configure password writeback [Microsoft – Azure – Active Directory]

Implement multi-factor authentication (MFA)

• configure user accounts for MFA

1. Configure Azure Multi-Factor Authentication settings [Microsoft – Azure – Active Directory]

• enable MFA by using bulk update

1. PowerShell: Enable/Enforce Multifactor Authentication for All (Bulk) Users in Office 365 [Microsoft – Blog – TechNet]

• configure fraud alerts

1. Fraud alert [Azure AD Docs]

• configure bypass options

1. One-time bypass [Azure AD Docs]

• configure Trusted IPs

1. Trusted IPs [Microsoft – Azure – Active Directory]

• configure verification methods

1. Choose verification options [Microsoft – Azure – Active Directory]

Referencias de apoio:

AZ-103 Study Guide: Microsoft Azure Administrator

https://docs.microsoft.com/en-us/learn/certifications/exams/az-103

https://github.com/patpicos/AZ-103