AZ-104 Reference

--- image: https://images.credly.com/size/110x110/images/336eebfc-0ac3-4553-9a67-b402f491f185/azure-administrator-associate-600x600.png tags: AZ-104, Reference GA: G-DXYJBX6BH8 --- # AZ-104 Reference :::success Date: 20260203 Course ID: 93864 ::: :::info Post Course Survey: [https://aka.ms/az104zhsurvey](https://aka.ms/az104zhsurvey) ::: ## Course Materials [Course AZ-104 English version](https://learn.microsoft.com/en-us/training/paths/az-104-administrator-prerequisites/) [Course AZ-104 简体中文版本](https://learn.microsoft.com/en-us/training/paths/az-104-administrator-prerequisites/) [Course AZ-104 正體中文版本](https://learn.microsoft.com/zh-tw/training/paths/az-104-administrator-prerequisites/) ## Infos [ESI Support](https://aka.ms/esisupport) [Azure Pricing Calculator](https://azure.microsoft.com/en-us/pricing/calculator/) [Azure Architecture Center](https://learn.microsoft.com/en-us/azure/architecture/) ## Lab ### Skillable lab system [ESI Labs](https://aka.ms/esilab) :::success Training key: 61D4796FFFA4929A ::: :::info Only need to redeem once Valid for 6 months ::: ### Instruction [AZ-104 Labs EN](https://aka.ms/AZ104Labs) [AZ-104 Labs ZH](https://aka.ms/az104zhlabs) [AZ-104 Lab files](https://aka.ms/az104labfiles)  ## Course Info ![Course](https://mdcontent.yu.money/contents/31b5b0d6ee886b9be732c5f12.PNG) ![Certification Areas](https://mdcontent.yu.money/contents/n1mzaqlliyggc10aj8mwgxys0.png) ## M01 - Microsoft Entra ID [Active Directory Domain Services Overview](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview) [Compare Active Directory to Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-compare-azure-ad-to-ad) [What is Microsoft Entra? ](https://learn.microsoft.com/en-us/entra/fundamentals/what-is-entra) [Microsoft Entra External ID](https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview) [Microsoft Entra Verified ID](https://learn.microsoft.com/en-us/entra/verified-id/decentralized-identifier-overview) [Microsoft Entra ID terminology](https://learn.microsoft.com/en-us/entra/identity-platform/developer-glossary) [Microsoft Entra ID Role](https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference) [Microsoft Entra ID Custom Role](https://learn.microsoft.com/en-us/azure/active-directory/roles/custom-overview) [Application and service principal objects in Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals) [Microsoft Entra ID Domain Service](https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview) [Compare self-managed Active Directory Domain Services, Microsoft Entra ID, and managed Microsoft Entra Domain Services](https://learn.microsoft.com/en-us/entra/identity/domain-services/compare-identity-solutions) [Microsoft Entra ID Conditional Access](https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview) [Microsoft Entra ID comparison based on licenses](https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#feature-comparison-based-on-licenses) [Zero Turst Security](https://www.microsoft.com/en-us/security/business/zero-trust) [Administrative units in Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units) [Microsoft Entra data retention](https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention) [Microsoft Entra ID joined devices](https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join) [Microsoft Entra ID Connect and Microsoft Entra ID Connect Health installation roadmap](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-roadmap) [Microsoft Entra ID Connect: Staging server and disaster recovery](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-server) [Topologies for Microsoft Entra Connect](https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies) [Tutorial: Enable users to unlock their account or reset passwords using Microsoft Entra ID self-service password reset](https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr) ## M02 - Compliance ### Azure Infrastructure [Azure Speed Test 2.0](https://richorama.github.io/AzureSpeedTest2/) [Azure Products by Region](https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table) [What are Azure availability zones?](https://learn.microsoft.com/en-us/azure/reliability/availability-zones-overview) [Azure regions with availability zones support](https://learn.microsoft.com/en-us/azure/reliability/availability-zones-service-support) [Azure region pairs and nonpaired regions](https://learn.microsoft.com/en-us/azure/reliability/regions-paired) [List of Azure regions](https://learn.microsoft.com/en-us/azure/reliability/regions-list) ### Cost Management [Azure Offer](https://azure.microsoft.com/en-us/support/legal/offer-details/) [Azure Hybrid Benefit](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/hybrid-use-benefit-licensing) [Azure Reservations](https://learn.microsoft.com/en-us/azure/cost-management-billing/reservations/save-compute-costs-reservations) [Azure Savings Plans](https://learn.microsoft.com/en-us/azure/cost-management-billing/savings-plan/savings-plan-compute-overview) [FinOps on Azure](https://learn.microsoft.com/en-us/azure/cost-management-billing/finops/overview-finops) ### Monitoring & Activity [Azure Activity Log](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log) ### Governance [Azure management groups](https://learn.microsoft.com/en-us/azure/governance/management-groups/overview) [Management group design recommendations](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/resource-org-management-groups) [Cloud Adoption Framework - Governance](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/govern/) ### Azure Policy [What is Azure Policy? ](https://learn.microsoft.com/en-us/azure/governance/policy/overview) [Microsoft Cloud Security Benchmark (MCSB)](https://learn.microsoft.com/en-us/security/benchmark/azure/overview) [Regulatory compliance in Azure Policy](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance) [Azure Policy definition structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure) [Azure Policy initiative definition structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/initiative-definition-structure) [Recommended policies for Azure services](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/recommended-policies) [Tutorial: Create a custom policy definition](https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-custom-policy-definition) [Azure Policy built-in policy definitions](https://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-policies) [Details of the ISO 27001:2013 Regulatory Compliance built-in initiative](https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001) ### RBAC [Understand Azure role definitions](https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions) [List Azure role definitions](https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list) [Azure built-in roles](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles) [RBAC Role Changes Tracker](https://rbac-catalog.dev/) [Azure custom roles](https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles) [Tutorial: Create or update Azure custom roles using the Azure portal](https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal) [Built-in policy definitions for Azure RBAC](https://learn.microsoft.com/en-us/azure/role-based-access-control/policy-reference) ## M03 - Administration ### Azure Portal [Azure Portal](https://portal.azure.com/) ### Azure Cloud Shell [Features & tools for Azure Cloud Shell](https://learn.microsoft.com/en-us/azure/cloud-shell/features) ### Azure CLI & PowerShell [Install Azure PowerShell](https://learn.microsoft.com/en-us/powershell/azure/install-az-ps) [Get started with Azure PowerShell](https://learn.microsoft.com/en-us/powershell/azure/get-started-azureps) [Azure PowerShell documentation](https://learn.microsoft.com/en-us/powershell/azure/) [Install Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) [Get started with Azure CLI](https://learn.microsoft.com/en-us/cli/azure/get-started-with-azure-cli) [Azure CLI documentation](https://learn.microsoft.com/en-us/cli/azure/) ### Azure Resource Manager (ARM) [Azure Resource Manager overview](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview) [ARM template overview](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview) [ARM template best practices](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/best-practices) [ARM template functions](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-functions) [ARM template user-defined functions](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-user-defined-functions) [Azure Quickstart Templates](https://github.com/Azure/azure-quickstart-templates) ### Azure Bicep [Azure Bicep overview](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/overview) [Bicep best practices](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices) [Bicep file structure and syntax](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/file) [Bicep modules](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/modules) [Decompiling ARM template JSON to Bicep](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/decompile?tabs=azure-cli) [Comparing JSON and Bicep for templates](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/compare-template-syntax) [Azure Bicep playground](https://azure.github.io/bicep/) ### Deployment Validation [ARM template what-if deployment](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-what-if) [Bicep what-if deployment](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-what-if) [ARM template test toolkit (arm-ttk)](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/test-toolkit) ### Template Management [Azure Template Specs overview](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-specs) [Create and deploy template specs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-specs-create-linked) [Azure deployment stacks overview](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks) [Create and deploy deployment stacks](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks?tabs=azure-cli) ## M04 - Virtual Network ### Basic Networking [What is Azure Virtual Network?](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview) [Azure Virtual Network concepts and best practices](https://learn.microsoft.com/en-us/azure/virtual-network/concepts-and-best-practices) [Plan virtual networks](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm) [Virtual Network FAQ](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq) [Virtual Network business continuity](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-disaster-recovery-guidance) [Azure Networking limits](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-resource-manager-virtual-networking-limits) [Azure network round-trip latency statistics](https://learn.microsoft.com/en-us/azure/networking/azure-network-latency) ### IP Addressing [Public IP addresses](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses) [Private IP addresses](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/private-ip-addresses) [IPv6 for Azure Virtual Network](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview) [Reserved IP addresses in subnets](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#are-there-any-restrictions-on-using-ip-addresses-within-these-subnets) [What is IP address 168.63.129.16?](https://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16) ### DDoS Protection [Azure DDoS Protection overview](https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview) [Azure DDoS Protection SKU comparison](https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison) [DDoS Protection best practices](https://learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices) ### Network Security Group [Network security groups overview](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview) [Security rules](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#security-rules) [Default security rules](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#default-security-rules) [Augmented security rules](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#augmented-security-rules) [Service tags overview](https://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview) [Application security groups](https://learn.microsoft.com/en-us/azure/virtual-network/application-security-groups) [NSG flow logs](https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview) ### Firewall [What is Azure Firewall?](https://learn.microsoft.com/en-us/azure/firewall/overview) [Azure Firewall features by SKU](https://learn.microsoft.com/en-us/azure/firewall/features-by-sku) [Azure Firewall Basic features](https://learn.microsoft.com/en-us/azure/firewall/basic-features) [Azure Firewall Standard features](https://learn.microsoft.com/en-us/azure/firewall/features) [Azure Firewall Premium features](https://learn.microsoft.com/en-us/azure/firewall/premium-features) [Azure Firewall pricing](https://azure.microsoft.com/en-us/pricing/details/azure-firewall/) [Deploy and configure Azure Firewall using Azure portal](https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy) 区别： NSG：功能比较简单（端口开放/关闭），并且不需要创建服务器，是免费使用的防火墙：功能更多；是部署的托管服务器；是收费的 ### Azure Network Security [Azure DDoS Protection overview](https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview) [Azure DDoS Protection SKU comparison](https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison) [Network security groups - augmented security rules](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#augmented-security-rules) [Azure Virtual Network Manager](https://learn.microsoft.com/en-us/azure/virtual-network-manager/overview) [Azure Route Server](https://learn.microsoft.com/en-us/azure/route-server/overview) ### Azure DNS Zone [What is Azure DNS?](https://learn.microsoft.com/en-us/azure/dns/dns-overview) [Azure DNS FAQ](https://learn.microsoft.com/en-us/azure/dns/dns-faq) [Delegate Azure DNS subdomains](https://learn.microsoft.com/en-us/azure/dns/dns-domain-delegation) [Host reverse DNS lookup zones](https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-overview) [Azure DNS Private Resolver](https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview) ### Private DNS [What is Azure Private DNS?](https://learn.microsoft.com/en-us/azure/dns/private-dns-overview) [Azure Private DNS zones](https://learn.microsoft.com/en-us/azure/dns/private-dns-privatednszone) [Private DNS zone virtual network links](https://learn.microsoft.com/en-us/azure/dns/private-dns-virtual-network-links) [Private DNS zone auto registration](https://learn.microsoft.com/en-us/azure/dns/private-dns-autoregistration) [Private DNS scenarios](https://learn.microsoft.com/en-us/azure/dns/private-dns-scenarios) ### DNS Private Resolver [What is Azure DNS Private Resolver?](https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview) [Private Resolver architecture](https://learn.microsoft.com/en-us/azure/dns/private-resolver-architecture) [Resolve Azure and on-premises domains](https://learn.microsoft.com/en-us/azure/dns/private-resolver-hybrid-dns) [DNS Private Resolver endpoints and rulesets](https://learn.microsoft.com/en-us/azure/dns/private-resolver-endpoints-rulesets) ## M05 - Intersite Connectivity ### Peering [Virtual network peering](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview) [Create, change, or delete a virtual network peering](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering) [Virtual network peering FAQ](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#virtual-network-peering) [Configure VPN gateway transit for virtual network peering](https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit) [Choose between virtual network peering and VPN gateways](https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vnet-peering) ### Virtual network Gateway (VPN Gateway) [VPN Gateway SKUs](https://learn.microsoft.com/en-us/azure/vpn-gateway/about-gateway-skus) [VPN Gateway SKU migration guidance](https://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-consolidation) [VPN Gateway High availability](https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable) #### VPN Gateway Implementation [Create Site-to-Site VPN](https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal) [Configure Point-to-Site VPN with certificate authentication](https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal) [Configure Point-to-Site VPN with Azure AD authentication](https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant) [VPN Gateway high availability scenarios](https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable) ### ExpressRoute [ExpressRoute](https://learn.microsoft.com/en-us/azure/expressroute/expressroute-introduction) [ExpressRoute FAQ](https://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs) [Microsoft 365 Routing with ExpressRoute](https://learn.microsoft.com/en-us/microsoft-365/enterprise/routing-with-expressroute?view=o365-worldwide) [ExpressRoute Pricing](https://azure.microsoft.com/en-us/pricing/details/expressroute/) ### Hub-Spoke Architecture [Hub-spoke network topology in Azure](https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke) [Hub-spoke topology with Azure Virtual WAN](https://learn.microsoft.com/en-us/azure/architecture/networking/architecture/hub-spoke-vwan-architecture) ### Virtual WAN [Virtual WAN](https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about) [Virtual WAN FAQ](https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-faq) [Upgrade a virtual WAN from Basic to Standard (SKU Comparsion)](https://learn.microsoft.com/en-us/azure/virtual-wan/upgrade-virtual-wan) [Scenario: Custom Isolation for Virtual Networks and Branches](https://learn.microsoft.com/en-us/azure/virtual-wan/scenario-isolate-virtual-networks-branches) ## M06 - Network Traffic Management ### Secure Connection to PaaS [Azure Service Endpoint](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview) [Azure Private Link](https://learn.microsoft.com/en-us/azure/private-link/private-link-overview) [What is the difference between Service Endpoints and Private Endpoints?](https://learn.microsoft.com/en-us/azure/private-link/private-link-faq#what-is-the-difference-between-service-endpoints-and-private-endpoints-) [Difference between Azure Private Links and Azure Service Endpoints](https://medium.com/awesome-azure/azure-difference-between-azure-private-links-and-azure-service-endpoints-private-links-vs-service-endpoints-8fb0f80ca196) ### Traffic Management [Load balancing options](https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview) [Azure Load Balancer SKU](https://learn.microsoft.com/en-us/azure/load-balancer/skus) [Distribution mode for Azure Load Balancer](https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-distribution-mode) [Cross Region Load Balancer](https://learn.microsoft.com/en-us/azure/load-balancer/cross-region-overview) [Application Gateway Tier Compare](https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant) [Traffic Manager Routing](https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods) [What is Azure Front Door?](https://learn.microsoft.com/en-us/azure/frontdoor/front-door-overview) ## M07 - Storage [Azure Blob Storage Types](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-overview#types-of-storage-accounts) [Azure Storage Explorer](https://azure.microsoft.com/en-us/features/storage-explorer/) [Business continuity and disaster recovery](https://learn.microsoft.com/en-us/azure/best-practices-availability-paired-regions) [Enable and create large file shares](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-how-to-create-large-file-share) [Storage Tier](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal) [Lifecycle management](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview) [Lifecycle management - Move data based on last accessed time](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview#move-data-based-on-last-accessed-time) [Azure Files storage tiers](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-planning#storage-tiers) [Understanding block blobs, append blobs, and page blobs](https://learn.microsoft.com/en-us/rest/api/storageservices/understanding-block-blobs--append-blobs--and-page-blobs) [Copy data from S3 to Azure Storage](https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-s3) [Access to blobs and queues using Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/storage/common/storage-auth-aad) [Azure File scalability and performance targets](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-scale-targets) [Object replication for block blobs](https://learn.microsoft.com/en-us/azure/storage/blobs/object-replication-overview) [Azure Storage redundancy](https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy) [Azure Storage Limitation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-storage-limits) Repulication 复制 = Redundancy 冗余【网络限制】Azure PaaS 服务默认都只提供公网的URL进行访问，若要进行vNET内部的访问： *Service Endpoint *Private Endpoint *也可以通过限制特定的IP地址范围来限制客户端的访问 [Deploy Azure File Sync](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide) [Azure 存儲的授權方式](https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-requests-to-azure-storage) Azure 存储的“共享密钥”，也叫“存储帐户密钥”或“访问密钥” ### Advanced Storage Features [Soft delete for blob containers (考试重点)](https://learn.microsoft.com/en-us/azure/storage/blobs/soft-delete-container-overview) [Soft delete for blobs](https://learn.microsoft.com/en-us/azure/storage/blobs/soft-delete-blob-overview) [Azure Files premium tier SMB Multichannel](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-smb-multichannel-performance) [Azure Blob Storage lifecycle management policies](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-policy-configure) [Immutable storage for blob data](https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview) ## M08 - VM ### Azure VM [VM Size](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/sizes) [Availability options](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/availability) [VM's SLA](https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/) [Azure SPOT VM](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/spot-vms) [Introduction to Azure managed disks](https://learn.microsoft.com/en-us/azure/virtual-machines/managed-disks-overview) [Azure managed disk types](https://learn.microsoft.com/en-us/azure/virtual-machines/disks-types) [FAQs for Azure Disks](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/azure-iaas-vm-disks-managed-unmanaged) [FAQs for Azure IaaS VM disks and managed and unmanaged premium disks](https://learn.microsoft.com/en-us/azure/virtual-machines/faq-for-disks) [How to expand virtual hard disks attached to a Windows virtual machine](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/expand-os-disk) [Azure virtual machine extensions and features](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/overview) [Azure VM Image Builder overview](https://learn.microsoft.com/en-us/azure/virtual-machines/image-builder-overview?tabs=azure-powershell) [Default outbound access in Azure](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access) [Assessment overview (migrate to Azure VMs)](https://learn.microsoft.com/en-us/azure/migrate/concepts-assessment-calculation?view=migrate-classic) #### Modern VM Features [Azure Trusted Launch for VMs](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch) [Azure Confidential Computing](https://learn.microsoft.com/en-us/azure/confidential-computing/overview) [Ephemeral OS disks](https://learn.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks) [Azure VM Image Builder (latest version)](https://learn.microsoft.com/en-us/azure/virtual-machines/image-builder-overview) [Automatic VM guest patching](https://learn.microsoft.com/en-us/azure/virtual-machines/automatic-vm-guest-patching) ### VMSS [VM scale sets](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview) [Orchestration modes for Virtual Machine Scale Sets in Azure](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes) [Considerations for scaling when multiple profiles are configured in an autoscale setting](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-understanding-settings#how-does-autoscale-evaluate-multiple-rules) ### Azure Bastion [What is Azure Bastion?](https://learn.microsoft.com/en-us/azure/bastion/bastion-overview) [Design architecture for Azure Bastion](https://learn.microsoft.com/en-us/azure/bastion/design-architecture) [About Bastion configuration settings](https://learn.microsoft.com/en-us/azure/bastion/configuration-settings) [About Bastion VM connections and features](https://learn.microsoft.com/en-us/azure/bastion/vm-about) ### Others [Custom Script Extension for Windows](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows) [Custom Script Extension for Linux](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-linux) [Desired State Configuration for Windows](https://learn.microsoft.com/en-us/powershell/scripting/dsc/getting-started/wingettingstarted?view=powershell-7.1) [Create Windows VM images with Azure PowerShell](https://learn.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-custom-images) ## M09 - Platform Service Computing ### Azure App Service [App Service plans](https://azure.microsoft.com/en-us/pricing/details/app-service/plans/) [Azure Compute Unit](https://learn.microsoft.com/en-us/azure/virtual-machines/acu) [Local Git deployment to Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/deploy-local-git) [App Service managed certificate](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex#create-a-free-managed-certificate) [Frontdoor](https://learn.microsoft.com/en-us/azure/frontdoor/front-door-lb-with-azure-app-delivery-suite) [Hybrid Connection](https://learn.microsoft.com/en-us/azure/app-service/app-service-hybrid-connections) [Scaling](https://learn.microsoft.com/en-us/learn/modules/app-service-scale-up-scale-out/3-exercise-scale-a-web-app-manually) [Deployment Slots](https://learn.microsoft.com/en-us/learn/modules/stage-deploy-app-service-deployment-slots/3-exercise-create-deployment-slots) [App Service Local Cache](https://learn.microsoft.com/en-us/azure/app-service/overview-local-cache) [Set up staging environments in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots) > `https://blog.amitapple.com/post/2014/11/azure-websites-slots/#.WH-1CeTrtWw` [Azure Web App with Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/general/tutorial-net-create-vault-azure-web-app) [Azure Web App sandbox](https://github.com/projectkudu/kudu/wiki/Azure-Web-App-sandboxs) [Inside the Azure App Service Architecture](https://learn.microsoft.com/en-us/archive/msdn-magazine/2017/february/azure-inside-the-azure-app-service-architecture) ### Container [Azure Container Registry service tiers](https://learn.microsoft.com/en-us/azure/container-registry/container-registry-skus) [Push container image to ACR](https://learn.microsoft.com/en-us/azure/container-instances/container-instances-tutorial-prepare-acr) [Make Azure container registry content publicly available](https://learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access) [Deploy docker image locally](https://code.visualstudio.com/docs/containers/quickstart-aspnet-core) [Containers on Azure](https://azure.microsoft.com/en-us/products/category/containers) [ACI with CLI quickstart](https://learn.microsoft.com/en-us/azure/container-instances/container-instances-quickstart) [ACI using Docker Compose](https://learn.microsoft.com/en-us/azure/container-instances/tutorial-docker-compose) [Container groups in Azure Container Instances](https://learn.microsoft.com/en-us/azure/container-instances/container-instances-container-groups) 容器实例和Web应用中部署容器的区别： - 容器实例不会原生提供TLS的支持； - 容器实例只是提供纯粹的容器运行平台，而不会提供Web管理的功能； - 价格不同； - 实例可以运行任何应用，不仅限于Web应用 ### Azure Container Apps [Azure Container Apps overview](https://learn.microsoft.com/en-us/azure/container-apps/overview) [Azure Container Apps environments](https://learn.microsoft.com/en-us/azure/container-apps/environment) [Comparing Container Apps with other Azure container options](https://learn.microsoft.com/en-us/azure/container-apps/compare-options) [Set up HTTPS ingress in Azure Container Apps](https://learn.microsoft.com/en-us/azure/container-apps/ingress-overview) [Scaling in Azure Container Apps](https://learn.microsoft.com/en-us/azure/container-apps/scale-app) [Microservices with Azure Container Apps](https://learn.microsoft.com/en-us/azure/container-apps/microservices) [Dapr integration with Azure Container Apps](https://learn.microsoft.com/en-us/azure/container-apps/dapr-overview) [Deploy to Azure Container Apps using GitHub Actions](https://learn.microsoft.com/en-us/azure/container-apps/github-actions) **Container Apps vs AKS Decision Guide:** - Use Container Apps for: Serverless microservices, event-driven apps, APIs, background jobs - Use AKS for: Complex stateful apps, custom Kubernetes configurations, CNCF ecosystem tools [ACA vs AKS comparison (2026)](https://www.site24x7.com/learn/azure-aca-vs-aks.html) ### Azure Kubernets Service [Kubernetes core concepts for Azure Kubernetes Service](https://learn.microsoft.com/en-us/azure/aks/concepts-clusters-workloads) [Deploy an AKS using the Azure CLI](https://learn.microsoft.com/en-us/azure/aks/kubernetes-walkthrough) [Scale applications in AKS](https://learn.microsoft.com/en-us/azure/aks/tutorial-kubernetes-scale) [Storage options for applications in AKS](https://learn.microsoft.com/en-us/azure/aks/concepts-storage) [Authenticate with Azure Container Registry from Azure Kubernetes Service](https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli) [Create and configure an Azure Kubernetes Services (AKS) cluster to use virtual nodes](https://learn.microsoft.com/en-us/azure/aks/virtual-nodes) [virtual-kubelet](https://github.com/virtual-kubelet/virtual-kubelet) [Kubenet and Azure CNI](https://learn.microsoft.com/en-us/azure/aks/configure-kubenet) [Simplified application autoscaling with Kubernetes Event-driven Autoscaling (KEDA) add-on (Preview)](https://learn.microsoft.com/en-us/azure/aks/keda-about) ### Azure Container App [Azure Container Apps overview](https://learn.microsoft.com/en-us/azure/container-apps/overview) [Comparing Container Apps with other Azure container options](https://learn.microsoft.com/en-us/azure/container-apps/compare-options) [Azure Container Apps environments](https://learn.microsoft.com/en-us/azure/container-apps/environment) [ACA vs AKS: Which Azure Service Is Better for Running Containers?](https://techcommunity.microsoft.com/t5/startups-at-microsoft/aca-vs-aks-which-azure-service-is-better-for-running-containers/ba-p/3815164) [Dapr integration with Azure Container Apps](https://learn.microsoft.com/en-us/azure/container-apps/dapr-overview) ## M10 - Backup ### Azure Backup [What is the Azure Backup service?](https://learn.microsoft.com/en-us/azure/backup/backup-overview) [Overview of Archive tier in Azure Backup](https://learn.microsoft.com/en-us/azure/backup/archive-tier-support) [Overview of Backup center](https://learn.microsoft.com/en-gb/azure/backup/backup-center-overview) [Backup vaults overview](https://learn.microsoft.com/en-us/azure/backup/backup-vault-overview) [Recovery Services vaults overview](https://learn.microsoft.com/en-us/azure/backup/backup-azure-recovery-services-vault-overview) [Create and configure a Recovery Services vault](https://learn.microsoft.com/en-us/azure/backup/backup-create-rs-vault) [Azure Backup MARS agent](https://learn.microsoft.com/en-us/azure/backup/install-mars-agent) [Back up Windows Server files and folders to Azure](https://learn.microsoft.com/en-us/azure/backup/backup-windows-with-mars-agent#install-and-register-the-agent) [Install and upgrade Azure Backup Server](https://learn.microsoft.com/en-us/azure/backup/backup-azure-microsoft-azure-backup) [Immutable vault for Azure Backup](https://learn.microsoft.com/en-us/azure/backup/backup-azure-immutable-vault-concept?tabs=recovery-services-vault#restricted-operations) ### Site Recovery [About Site Recovery](https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-overview) [General questions about Azure Site Recovery](https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-faq) [Quickstart: Set up disaster recovery to a secondary Azure region for an Azure VM](https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-quickstart) ### Enhanced Protection Features [Azure Backup support for Azure Kubernetes Service](https://learn.microsoft.com/en-us/azure/backup/azure-kubernetes-service-backup-overview) [Multi-user authorization for Azure Backup](https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization-concept) [Azure Backup Metrics and Monitoring](https://learn.microsoft.com/en-us/azure/backup/metrics-overview) ## M11 - Monitor ### Azure Monitor [Azure Monitor](https://learn.microsoft.com/en-us/azure/azure-monitor/overview) [Monitoring your storage service with Azure Monitor Storage insights](https://learn.microsoft.com/en-us/azure/storage/common/storage-insights-overview) [Use the Map feature of VM insights to understand application components](https://learn.microsoft.com/en-us/azure/azure-monitor/vm/vminsights-maps) [Azure Data Explorer](https://learn.microsoft.com/en-us/azure/data-explorer/data-explorer-overview) [Configure PV(persistent volumes) monitoring with Container insights](https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-persistent-volumes) [Azure Monitor REST API](https://learn.microsoft.com/en-us/rest/api/monitor/) [Azure Monitor Videos (YouTube)](https://youtube.com/playlist?list=PLLasX02E8BPCCsHzNLJjcElCwF52rnh6t) [What is Azure Managed Grafana?](https://learn.microsoft.com/en-us/azure/managed-grafana/overview) [Azure Monitor managed service for Prometheus](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/prometheus-metrics-overview) [Azure Monitor SCOM Managed Instance](https://learn.microsoft.com/en-us/azure/azure-monitor/vm/scom-managed-instance-overview)  ### Log Analytics [Log Analytics demo environment](https://portal.azure.com/#blade/Microsoft_Azure_Monitoring_Logs/DemoLogsBlade) [Log Analytics tutorial](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-tutorial) [Kusto Query Language (KQL) overview](https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/) [Tutorial: Use Kusto queries](https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/tutorial?pivots=azuremonitor) [Kusto Function types](https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/functions/) [Run search jobs in Azure Monitor](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/search-jobs) [](https://github.com/Azure-Samples/application-insights-aspnet-sample-opentelemetry) [](https://github.com/Azure-Samples/applicationinsights-mern-todo) ### Modern Observability Stack [Azure Monitor OpenTelemetry overview](https://learn.microsoft.com/en-us/azure/azure-monitor/app/opentelemetry-overview) [Azure Monitor workspace (for Prometheus)](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/azure-monitor-workspace-overview) [Container insights (AKS/Container Apps monitoring)](https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-overview) [Azure Workbooks](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-overview) ## Whiteboard ### Whiteboard ![Whiteboard](https://mdcontent.yu.money/contents/31b5b0d6ee886b9be732c5f11.png) SVG: [Whiteboard.svg](https://mttcontent.yu.money/az104/Whiteboard.svg) ### OneNotes [47392-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/47392-AZ-104.pdf) [49023-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/49023-AZ-104.pdf) [49459-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/49459-AZ-104.pdf) [50101-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/50101-AZ-104.pdf) [50488-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/50488-AZ-104.pdf) [52348-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/52348-AZ-104.pdf) [52357-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/52357-AZ-104.pdf) [55239-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/55239-AZ-104.pdf) [59711-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/59711-AZ-104.pdf) [64357-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/64357-AZ-104.pdf) [65790-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/65790-AZ-104.pdf) [81161-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/81161-AZ-104.pdf) [83715-AZ-104.pdf](https://mttcontent.yu.money/az104/notes/83715-AZ-104.pdf) ## Exam [AZ-104 Exam Page](https://learn.microsoft.com/en-us/learn/certifications/exams/az-104)  [Exam duration and question types](https://learn.microsoft.com/en-us/credentials/support/exam-duration-exam-experience) [AZ-104 Practice Exam](https://learn.microsoft.com/en-us/credentials/certifications/azure-administrator/practice/assessment?assessment-type=practice&assessmentId=21&practice-assessment-type=certification) [AZ-104 Study Guide](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4pCWy) [AZ-104 Exam Prep videos](https://learn.microsoft.com/en-us/shows/exam-readiness-zone/preparing-for-az-104-manage-azure-identities-and-governance-1-of-5/) [Unscheduled breaks now available in most exams without requesting in advance](https://techcommunity.microsoft.com/t5/microsoft-learn-blog/unscheduled-breaks-now-available-in-most-exams-without/ba-p/3287005) [AZ-104 Exam Readiness Zone](https://learn.microsoft.com/en-us/shows/exam-readiness-zone/?terms=AZ-104) [AZ-104 Exam Sandbox](https://aka.ms/examdemo) [Microsoft Exam FAQ](https://learn.microsoft.com/en-us/learn/certifications/online-exams) [Renew your Microsoft Certifications for free. Stay Microsoft Certified!](https://aka.ms/RenewYourCertVideo) [Microsoft Learn for all role-based Microsoft Certification exams](https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870?WT.mc_id=general_Twitter-wwl)  ![exam](https://mdcontent.yu.money/contents/31b5b0d6ee886b9be732c5f03.png) SVG: [exam.svg](https://mttcontent.yu.money/common/exam.svg) ## Contact - Money Yu - Mail: [Money.Yu@microsoft.com](mailto:Money.Yu@microsoft.com) - LinkedIn: [@abc12207](https://www.linkedin.com/in/abc12207/) ## Else [Azure for GCP Professionals](https://learn.microsoft.com/en-us/azure/architecture/gcp-professional/) [Azure for AWS Professionals](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/)