MCA Microsoft Certified Associate Azure Administrator Study Guide: Exam AZ–104: Sybex Study Guide

ABOUT THE AUTHOR RITHIN SKARIA is a cloud evangelist, speaker, consultant, and a published author with an interest in cloud architecture design and optimization. With a decade of experience managing, implementing, and designing IT infrastructure solutions for public and private clouds, he is currently working with Microsoft as a Customer Engineer, focusing on Azure solutions. Rithin has over 18 certifications in different technologies such as Azure, Linux, Microsoft 365, and Kubernetes; he is also a Microsoft Certified Trainer. Rithin has been recognized has one of the engagement leads for his contributionsto the Microsoft Worldwide Open Source Community. He has presented at various events and conferences, including Microsoft Spark.

Introduction xxiii Assessment Test xxx Chapter 1 Identity: Azure Active Directory 1 Chapter 2 Compliance and Cloud Governance 49 Chapter 3 Virtual Networking 109 Chapter 4 Intersite Connectivity 153 Chapter 5 Network Traffic Management 203 Chapter 6 Azure Storage 245 Chapter 7 Azure Virtual Machines 307 Chapter 8 Automation, Deployment, and Configuration of Resources 349 Chapter 9 PaaS Compute Options 387 Chapter 10 Data Protection 445 Chapter 11 Monitoring Resources 475 Appendix Answers to the Review Questions 515 Chapter 1: Identity: Azure Active Directory 516 Chapter 2: Compliance and Cloud Governance 517 Chapter 3: Virtual Networking 519 Chapter 4: Intersite Connectivity 520 Chapter 5: Network Traffic Management 521 Chapter 6: Azure Storage 522 Chapter 7: Azure Virtual Machines 524 Chapter 8: Automation, Deployment, and Configuration of Resources 526 Chapter 9: PaaS Compute Options 528 Chapter 10: Data Protection 529 Chapter 11: Monitoring Resources 530 Index 533 Table of Exercises Exercise 1.1 Viewing Users in Your Directory 9 Exercise 1.2 Creating Users in Azure AD 14 Exercise 1.3 Modifying and Deleting Users 16 Exercise 1.4 Performing Bulk Operations 20 Exercise 1.5 Viewing Groups in Azure AD 27 Exercise 1.6 Adding Security Groups to Azure AD 29 Exercise 1.7 Adding Microsoft 365 Groups in Azure AD 32 Exercise 2.1 Creating a Resource Group from the Azure Portal 61 Exercise 2.2 Listing Resource Groups from the Azure Portal 63 Exercise 2.3 Deleting Resource Groups from the Azure Portal 64 Exercise 2.3 Implementing a Custom Policy . 73 Exercise 2.4 Creating a Custom Role Using PowerShell 87 Exercise 2.5 Assigning Roles from the Azure Portal 91 Exercise 3.1 Creating Virtual Networks 114 Exercise 3.2 Creating Virtual Networks Using Azure PowerShell 116 Exercise 3.3 Creating Public IP Addresses 117 Exercise 3.4 Creating a Route Table 121 Exercise 3.5 Creating a Custom Route 122 Exercise 3.6 Associating a Routing Table to a Subnet 124 Exercise 3.7 Creating an Azure DNS Zone 130 Exercise 3.8 Adding Records to an Azure DNS Zone 132 Exercise 3.9 Creating a Private DNS Zone and Validating Resolution 134 Exercise 3.10 Creating NSG and NSG Rules 139 Exercise 4.1 Implementing Virtual Network Peering in the Azure Portal 159 Exercise 4.2 Implementing the Virtual Network to Virtual Network VPN in the Azure Portal 173 Exercise 4.3 Implementing a P2S VPN in the Azure Portal 183 Exercise 5.1 Implementing Load Balancing in Azure 215 Exercise 5.2 Implementing Azure Application Gateway 227 Exercise 6.1 Uploading Blobs 262 Exercise 6.2 Working with SAS Keys 273 Exercise 6.3 Working with AzCopy 294 Exercise 7.1 Creating a Windows Virtual Machine 316 Exercise 7.2 Connecting to a Windows VM Using RDP 321 Exercise 7.3 Connecting to a Linux VM Using a Password 325 Exercise 7.4 Connecting to Linux VM Using SSH Keys 327 Exercise 7.5 Connecting to Linux VM Using SSH Keys 329 Exercise 8.1 Composing an ARM Template 362 Exercise 9.1 Creating an App Service Plan 392 Exercise 9.2 Creating an App Service Plan 397 Exercise 9.3 Building and Running Containers in Azure 416 Exercise 9.4 Running Applications in an AKS Cluster 435 Exercise 10.1 Implementing a VM Backup 455 Exercise 11.1 Creating Alerts 486 Exercise 11.2 Ingesting Logs to the Log Analytics Workspace 497