Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond
  • Table Of Contents Toc
  • Feedback & Rating feedback
Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond

Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond

By : Donovan Kelly
4.3 (4)
Buy this Book
close
close
Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond

Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond

4.3 (4)
By: Donovan Kelly
Buy this Book

Overview of this book

Take the first step toward excellence in Azure management and achieving Microsoft certification with this practical guide! This third edition of Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond offers comprehensive insights and clear, step-by-step instructions that follow the latest AZ-104 exam objectives. You’ll work your way from foundational topics such as Azure identity management and governance to essential skills such as deploying and managing storage solutions, configuring virtual networks, and effectively monitoring Azure resources. Each chapter is equipped with practice questions to reinforce your understanding and enhance your practical skills. The book also provides you with access to online mock exams, interactive flashcards, and expert exam tips, guaranteeing that you pass with flying colors. By the end of this book, you'll not only be equipped to pass the AZ-104 exam but also possess the expertise needed to expertly manage Azure environments.
Table of Contents (25 chapters)
close
close
close
Preface
Preface
Who This Book Is For
What This Book Covers
Online Practice Resources
Accessing the Code Files
Download the Color Images
Conventions Used
Get in Touch
Setting Up Your Environment
Technical Requirements
Accessing the Microsoft Labs
Lab Files
Share Your Thoughts
Download a free PDF copy of this book
1
Chapter 1: Managing Microsoft Entra ID Objects
Chapter 1: Managing Microsoft Entra ID Objects
Making the Most Out of This Book – Your Certification and Beyond
Technical Requirements
Microsoft Entra P1 Trial
Microsoft Entra ID
Creating Users and Groups
Creating Microsoft Entra ID AUs
Managing User and Group Properties
Summary
Free Chapter
2
Chapter 2: Devices in Microsoft Entra ID
Chapter 2: Devices in Microsoft Entra ID
Technical Requirements
Configuring and Managing Devices
Configuring Microsoft Entra Join
Performing Bulk Operations
Navigating Guest Accounts
Configuring SSPR
Summary
3
Chapter 3: Managing Role-Based Access Control in Azure
Chapter 3: Managing Role-Based Access Control in Azure
Technical Requirements
Understanding Azure Regions
Managing Azure Subscriptions and Management Hierarchy
Configuring Management Groups
Understanding role-based-access-control
Creating a custom RBAC role
Interpreting Access Assignments
Summary
4
Chapter 4: Creating and Managing Governance
Chapter 4: Creating and Managing Governance
Technical Requirements
Understanding Azure Policies
Applying and Managing Tags on Resources
Summary
5
Chapter 5: Managing Governance and Costs
Chapter 5: Managing Governance and Costs
Technical Requirements
Managing Resource Groups
Configuring Resource Locks
Managing Costs
Summary
6
Chapter 6: Understanding Storage Accounts
Chapter 6: Understanding Storage Accounts
Technical Requirements
Understanding Azure Storage Accounts
Creating and Configuring Storage Accounts
Summary
7
Chapter 7: Copying Data To and From Azure
Chapter 7: Copying Data To and From Azure
Technical Requirements
Using Azure Data Box (Previously, Import/Export)
Installing and Using Azure Storage Explorer
Configuring Azure Files and Azure Blob Storage
Summary
8
Chapter 8: Securing Storage
chevron up
Chapter 8: Securing Storage
Technical Requirements
Configuring Network Access to Storage Accounts
Storage Access Keys
Working with SAS Tokens
Configuring Access and Authentication
Summary
9
Chapter 9: Storage Management and Replication
Chapter 9: Storage Management and Replication
Technical Requirements
Copying Data by Using AzCopy
Configuring Storage Replication and Lifecycle Management
Summary
10
Chapter 10: Azure Resource Manager Templates
Chapter 10: Azure Resource Manager Templates
Technical Requirements
Understanding ARM Templates
Benefits of ARM
Understanding the ARM Template Structure
Creating an ARM Template
Modifying an Existing ARM Template
Deploying an ARM Template – Azure Portal
Deploying an ARM Template – Azure PowerShell
Saving a Deployment as an ARM Template
Exporting an ARM Template
Azure QuickStart Templates
Summary
11
Chapter 11: Azure Bicep
Chapter 11: Azure Bicep
Technical Requirements
Understanding Azure Bicep
Understanding the Bicep Template Structure
Creating a Bicep Template
Modifying an Existing Bicep Template
Deploying a Bicep Template – Azure PowerShell
Converting ARM to Bicep
Converting Bicep to ARM
Summary
12
Chapter 12: Understanding Virtual Machines
Chapter 12: Understanding Virtual Machines
Technical Requirements
Understanding Azure Disk Storage
Understanding Azure VMs
Deploying a VM in Azure
Deploying and Configuring Scale Sets
Summary
13
Chapter 13: Managing Virtual Machines
Chapter 13: Managing Virtual Machines
Technical Requirements
Managing VM Sizes
Adding Data Disks to VMs
Troubleshooting VM Networking
Moving VMs between Resource Groups
Redeploying VMs
Disk Encryption in Azure
Automating Configuration Management
Deploying VM Extensions
Configuring and Deploying a VM ARM Template
Summary
14
Chapter 14: Creating and Configuring Containers
Chapter 14: Creating and Configuring Containers
Technical Requirements
Introduction to Containers
Azure Container Instances
Container Groups
Docker Platform
Azure Kubernetes Services
Creating an Azure Container Registry
Deploying Your First Container Instance
Configuring Container Groups for ACI
Configuring Sizing and Scaling for ACI
Deploying AKS
Configuring Storage for AKS
Configuring Scaling for AKS
Upgrading an AKS Cluster
Summary
15
Chapter 15: Creating and Configuring App Service
Chapter 15: Creating and Configuring App Service
Technical Requirements
Understanding Azure App Service and App Service Plans
Creating an App Service Plan
Creating an App Service Instance
Configuring Scaling
Securing Azure App Service
Configuring Custom Domain Names
Configuring a Backup for an App Service Instance
Configuring Networking Settings
Configuring Deployment Settings
Summary
16
Chapter 16: Implementing and Managing Virtual Networking
Chapter 16: Implementing and Managing Virtual Networking
Technical Requirements
Creating and Configuring Virtual Networks
Creating Private and Public IP Addresses
User-defined Routing
Implementing Subnets
Configuring Endpoints on Subnets
Configuring Private Endpoints
Configuring Azure DNS
Summary
17
Chapter 17: Securing Access to Virtual Networks
Chapter 17: Securing Access to Virtual Networks
Technical requirements
Network Security Groups
Azure Firewall
Azure Bastion
Deploying Azure Bastion and Azure Firewall
Summary
18
Chapter 18: Configuring Load Balancing
Chapter 18: Configuring Load Balancing
Technical Requirements
Azure Load-Balancing Services
Azure Load Balancer
Configuring an ILB
Configuring a Public Load Balancer
Azure Application Gateway
Configuring Azure Application Gateway
Azure Front Door
Summary
19
Chapter 19: Integrating On-Premises Networks with Azure
Chapter 19: Integrating On-Premises Networks with Azure
Technical Requirements
Azure VPN Gateway
Creating and Configuring an Azure VPN Gateway
Creating and Configuring Azure ExpressRoute
Azure Virtual WAN
Configuring Azure Virtual WAN
Summary
20
Chapter 20: Monitoring and Troubleshooting Virtual Networking
Chapter 20: Monitoring and Troubleshooting Virtual Networking
Technical Requirements
Understanding Network Watcher
Configuring Network Watcher
Summary
21
Chapter 21: Monitoring Resources with Azure Monitor
Chapter 21: Monitoring Resources with Azure Monitor
Technical Requirements
Understanding Azure Monitor
Working with Metrics and Alerts
Querying Log Analytics
Monitoring with Workbooks
Configuring Application Insights
Summary
22
Chapter 22: Implementing Backup and Recovery Solutions
Chapter 22: Implementing Backup and Recovery Solutions
Technical Requirements
Understanding Azure Backup Vaults
Understanding Azure Recovery Services Vaults
Creating a Recovery Services Vault
Understanding Backup Policies
Creating and Configuring Backup Policies
Backing Up via Azure Backup Center
Restoring a Backup via Azure Backup Center
Recovering from a Disaster with Azure Site Recovery
Configuring and Reviewing Backup Reports
Summary
23
Chapter 23: Accessing the Online Practice Resources
Chapter 23: Accessing the Online Practice Resources
How to Access These Materials
Troubleshooting Tips
Back to the Book
Why subscribe?
24
Other Books You May Enjoy
Other Books You May Enjoy
Now you’ve finished Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond, Third Edition, we’d love to hear your thoughts! If you purchased the book from Amazon, please click here to go straight to the Amazon review page for this book and share your feedback or leave a review on the site that you purchased it from.
Download a Free PDF Copy of This Book

Working with SAS Tokens

SAS tokens are secure access tokens that provide delegated access to resources on your storage account. The storage service confirms the SAS token is valid in order to grant access. The construct of a SAS token includes the permissions granted on the token, the date validity, and the signing key for the storage account. When creating a SAS token, several items that govern the process of granting access at a granular level need to be considered. They are as follows:

  • Resource types that the client might use
  • Permissions on the resource types that are required
  • The period the SAS key should function for

Types of SAS

There are three types of SAS supported by Azure Storage:

  • User-delegated SAS: This is a SAS token that is secured by Entra ID credentials.
  • Account SAS: An account SAS is created and secured using a storage key. The permissions granted can span several services (blob, file, queue, and table), as well as accessing permissions...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
Start a 7-day FREE trial
End of Section 5
Next Section
bookmark search playlist download
font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY