Official curriculum domains and skills measured for the AZ-104 certification exam.
Manage Microsoft Entra identities, configure users and groups, manage licenses, configure self-service password reset (SSPR), manage role-based access control (RBAC), and manage Azure subscriptions, management groups, cost analysis, and Azure Policy.
Configure storage accounts, access keys, shared access signatures (SAS), Microsoft Entra storage authentication, configure Azure Files and Azure File Sync, and manage Azure Blob Storage including lifecycle management and blob replication.
Automate resource deployment with ARM/Bicep templates, configure and deploy Azure virtual machines (sizing, networking, storage, availability zones, scale sets), and create and manage container resources including Azure Container Instances (ACI) and Azure Kubernetes Service (AKS).
Configure virtual networks, subnets, peering, private endpoints, public/private IP addressing, configure network security groups (NSGs), application security groups (ASGs), user-defined routes (UDR), Azure DNS, Azure Bastion, and load balancing (Azure Load Balancer, Azure Application Gateway).
Monitor resources using Azure Monitor metrics, logs, workbooks, diagnostic settings, and alerts. Implement backup and recovery for Azure VMs and data using Recovery Services vaults and Backup vaults, and configure backup policies and retention.