Exam Preparation and Scope
- AZ-104 is a challenging Azure Administrator exam; at least six months of practical experience is recommended.
- Use self-paced resources, Microsoft documentation, courses, and practice assessments to prepare.
- The exam covers identities and governance, storage, compute, networking, and monitoring, each with different weightings.
Users, Groups, and Entra ID
- Microsoft Entra ID is the renamed Azure Active Directory service.
- Understand cloud, hybrid, and guest users, including when each type is appropriate.
- Know the Microsoft Entra portal and the licensing requirements for identity features.
- Privileged Identity Management and Identity Protection require P2, while self-service password reset requires P1.
- External users are accounts outside the tenant and are granted access through guest invitations.
Roles and Access Control
- Know the differences among User Access Administrator, Contributor, and Owner roles, especially their abilities to manage resources and grant access.
- Custom roles can be created from JSON templates, though writing the templates is not a major exam focus.
- Distinguish Entra administrator roles from Azure resource roles and understand their respective scopes.
Scope and Inheritance
- Permissions and policies can be scoped at management group, subscription, resource group, and resource levels.
- Assignments are inherited by lower levels, and inheritance cannot be broken.
Policies, Compliance, and Locks
- A policy is a single rule, while an initiative definition groups multiple policies.
- Governance and compliance scenarios commonly require Azure Policy solutions.
- Understand the differences and effects of Delete and ReadOnly resource locks.
Resource Groups and Subscriptions
- Resource groups are flat containers that cannot be nested, and every resource must belong to one.
- Resources can be moved between resource groups, and a resource group can contain resources from multiple regions.
- Subscriptions provide billing boundaries and are required to create Azure resources.
- Understand subscription types, budgets, and Azure cost optimization capabilities.
Management and Organization
- Management groups organize and apply security or policy controls across multiple subscriptions.
- Tagging provides metadata that helps organize and manage Azure resources.
- Review access management, user and group properties, and self-service password reset.
Actiepunten
- Gain at least six months of practical Azure administration experience before taking the exam.
- Use Microsoft documentation and practice assessments for further study.
- Review the exam objectives and prioritize weak subject areas.
- Study users, groups, resource groups, role-based access, policies, locks, subscriptions, and management groups.
- Practice hands-on tasks and learn where identity and governance features are located in the Azure portal.
