CertifyDeckAZ-104 · CHEAT SHEET
Azure Administrator
Conceptos clave agrupados según el peso oficial del examen.
Descargar en PDF (gratis, sin registro)1. Manage Azure identities and governance
20–25%Manage Microsoft Entra users and groups
- Create users and groups, including bulk import and Microsoft 365/security groups
- Manage user and group properties, including licenses and dynamic membership rules
- Manage guest accounts and external collaboration settings
- Configure self-service password reset
Manage access to Azure resources
- Create custom roles and assign built-in roles (RBAC)
- Interpret access assignments, including scope (management group/subscription/resource group/resource)
- Configure Azure resource permissions using RBAC versus Microsoft Entra roles
Manage Azure subscriptions and governance
- Implement and manage Azure Policy, including initiatives and compliance
- Configure resource locks, tags, and management groups
- Configure and manage Azure Cost Management, budgets, and alerts
- Manage subscriptions and move resources across subscriptions/resource groups
2. Implement and manage storage
15–20%Configure access to storage
- Configure Azure Storage firewalls and virtual networks
- Create and use shared access signatures (SAS) and stored access policies
- Manage storage account access keys and Microsoft Entra authentication for storage
Configure Azure Storage accounts
- Configure storage account replication options (LRS/ZRS/GRS/RA-GRS)
- Configure storage account access tiers (Hot/Cool/Archive) and lifecycle management
- Migrate storage accounts between tiers/regions
Configure Azure Blob Storage and Azure Files
- Configure blob storage, including containers and object replication
- Configure Azure Files shares and file share snapshots
- Implement Azure File Sync, including sync groups and cloud tiering
- Configure blob versioning, soft delete, and immutability policies
3. Deploy and manage Azure compute resources
20–25%Configure and manage virtual machines
- Create a VM, including selecting an appropriate size and disk configuration
- Configure Azure Disk Encryption and managed disks
- Configure VM availability, including availability sets and availability zones
- Configure VM scale sets and autoscale rules
- Manage VM sizes and redeploy/resize a VM
Automate deployment of virtual machines
- Modify an Azure Resource Manager (ARM)/Bicep template
- Configure VMs for remote access, including Azure Bastion and just-in-time access
- Automate configuration management using custom script extensions
Configure containers and web apps
- Create and manage an Azure Container Registry
- Manage sizing and scaling for containers, including Azure Container Instances and AKS node pools
- Create and configure an App Service plan and Web App
4. Implement and manage virtual networking
15–20%Configure virtual networks
- Create and configure virtual networks and subnets
- Configure private and public IP addresses, network routes, and peering
- Configure Azure DNS, including private DNS zones
Secure access to virtual networks
- Create and configure network security groups (NSGs) and application security groups (ASGs)
- Evaluate effective security rules and NSG flow logs
- Implement Azure Firewall and Azure Bastion
Configure load balancing and monitor networking
- Configure Azure Load Balancer, including health probes and backend pools
- Configure Azure Application Gateway, including routing rules and WAF policies
- Troubleshoot network connectivity using Network Watcher
5. Monitor and maintain Azure resources
10–15%Monitor resources
- Configure and interpret Azure Monitor metrics and Log Analytics queries
- Configure Azure Monitor alerts and action groups
- Monitor Azure costs and usage using Azure Advisor recommendations
Implement backup and recovery
- Configure and review backups using Azure Backup, including backup policies
- Perform backup and restore operations, including cross-region restore
- Configure Azure Site Recovery for VM disaster recovery