Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond

Name: Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond | Master Azure administration and pass the AZ-104 exam with confidence
Brand: Packt Publishing
Price: 29.99 EUR
Availability: OnlineOnly

Master Azure administration and pass the AZ-104 exam with confidence

Donovan Kelly(Autor*in)

Packt Publishing

1. Auflage

Erschienen am 30. September 2024

824 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

978-1-80512-619-5 (ISBN)

29,99 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Cover
FM
Copyright
Contributors
Table of Contents
Preface
Chapter 1: Managing Microsoft Entra ID Objects
Making the Most Out of This Book - Your Certification and Beyond
Technical Requirements
Microsoft Entra P1 Trial
Microsoft Entra ID
Users, Groups, and Administrative Units
Users
Groups
AUs
Common Microsoft Entra ID Concepts
Microsoft Entra ID versus Active Directory (On-Premises)
AD DS
Administration
Integration
B2C
B2B
Creating Users and Groups
Creating Users in Microsoft Entra ID
Creating Groups in Microsoft Entra ID
Creating Microsoft Entra ID AUs
Managing User and Group Properties
User Account Properties
Microsoft Entra ID group settings
Summary
Chapter 2: Devices in Microsoft Entra ID
Technical Requirements
Configuring and Managing Devices
Configuring Device Identities
Microsoft Entra Device Registration
Microsoft Entra Join
Microsoft Entra Hybrid Join
Device Settings
Enterprise State Roaming
Managing Device Settings
Device Audit Logs
Licensing
Try/Buy License Products for Microsoft Entra
Assigning a License
Configuring Microsoft Entra Join
Microsoft Entra Join Methods
Microsoft Entra Join Management
Microsoft Entra Join Scenarios
Configuring Microsoft Entra Join
Performing Bulk Operations
Performing Bulk Updates Using the Azure Portal
Downloading a User List
Bulk User Deletion Operations
Updating Multiple Users
Performing Bulk Creations Using PowerShell
Navigating Guest Accounts
Managing Guest Accounts
Configuring SSPR
Configuring SSPR
Summary
Chapter 3: Managing Role-Based Access Control in Azure
Technical Requirements
Understanding Azure Regions
Managing RBAC across Multiple Regions
Managing Azure Subscriptions and Management Hierarchy
Billing Profiles
Azure Management Hierarchy
Core Concepts
Key Considerations of the Hierarchy of Management for Enterprise Agreements
Relationship Between Microsoft Entra and Subscriptions
Why Have Multiple Subscriptions in an Environment?
Configuring Management Groups
Creating a Management Group
Understanding role-based-access-control
RBAC Requirements
RBAC built-in Roles
Getting Started with Azure RBAC
Role Definitions
Scope
Role Assignments
Example of Role Assignment
Creating a custom RBAC role
Assigning Access to Resources by Assigning a Custom Role
Confirming the Role Assignment Steps
Interpreting Access Assignments
Summary
Exam Readiness Drill - Chapters 1-3
HOW TO GET STARTED
Chapter 4: Creating and Managing Governance
Technical Requirements
Understanding Azure Policies
How Does Azure Policy work?
Azure Policy versus RBAC
Working with Azure Policy
Constructing a Policy Definition
Effect Types
Example Policy Definition
Creating a Policy Definition
Creating an Initiative Definition
Assigning a Policy Definition and Initiative
Policy Compliance
Applying and Managing Tags on Resources
How Tags Look in Azure
Tagging Strategy
Applying a Resource Tag
PowerShell Scripts
Summary
Chapter 5: Managing Governance and Costs
Technical Requirements
Managing Resource Groups
Deploying a Resource Group
Listing Resource Groups
Deleting a Resource Group
Migrating or Moving Resource Groups
PowerShell Scripts
Configuring Resource Locks
Permissions Required for Creating or Deleting Locks
Built-In Azure Roles
Custom RBAC Roles
Adding a Resource Lock
Creating a Read-only Lock
PowerShell Scripts
Applying a Resource Lock to a Resource
Applying a Resource Lock to a Resource Group
Viewing Resource Locks in Effect
ARM Templates
Managing Costs
Cost Management
Cost Analysis
Scheduled Reports
Budgets
Example Budget
Modifying an Existing Budget
Cost Alerts
Creating a New Alert
Viewing Alert Details
Modifying an Existing Alert
Advisor Recommendations
Reservations
Summary
Chapter 6: Understanding Storage Accounts
Technical Requirements
Understanding Azure Storage Accounts
Storage Account Performance Categories
Standard
Premium
Storage Account Types
Standard GPv2
Premium Block Blobs
Premium File Shares
Premium Page Blobs
Legacy Storage Account Types
Storage Access Tiers
Hot
Cool
Cold
Archive
Service-Level Agreement for Storage Accounts
Azure Disk Storage
Standard Disk Storage
Premium Disk Storage
Ultra Disk Storage
Unmanaged versus Managed Disks
Redundancy
LRS
ZRS
GRS
GZRS
Storage Encryption
Need for Encryption and the Value it Brings
Difference between Storage Encryption on Azure and Infrastructure Encryption
Different Encryption Types on a Storage Account
Creating and Configuring Storage Accounts
Creating a storage account
PowerShell scripts
Summary
Exam Readiness Drill - Chapters 4-6
HOW TO GET STARTED
Chapter 7: Copying Data To and From Azure
Technical Requirements
Using Azure Data Box (Previously, Import/Export)
Importing into an Azure Job
Exporting from an Azure Job
Installing and Using Azure Storage Explorer
Installation
Configuring Azure Files and Azure Blob Storage
Creating an Azure Files Share
Accessing Your Azure File Shares from the Portal
Connecting an Azure Files Share to Windows Using SMB
Configuring Azure Blob Storage
Configuring Storage Tiers
Azure URL Paths for Storage
PowerShell Scripts
Summary
Chapter 8: Securing Storage
Technical Requirements
Configuring Network Access to Storage Accounts
Public Endpoints
Azure Virtual Network (VNet) Integration
Configuring Storage Account Network Security
Private Endpoints
Network Routing from Storage Accounts
PowerShell Scripts
Storage Access Keys
Managing Access Keys
Rotating Storage Access Keys
Working with SAS Tokens
Types of SAS
Forms of SAS
Generating SAS Tokens
Stored Access Policies
Creating a Stored Access Policy
Editing a Storage Access Policy
Removing an Existing Storage Access Policy
Configuring Access and Authentication
Configuring AD DS Authentication for a Storage Account
Configuring Access to Azure Files
Assigning Share-Level Permissions
Mounting the File Share
Configuring File-Level Permissions
Summary
Chapter 9: Storage Management and Replication
Technical Requirements
Copying Data by Using AzCopy
Downloading and Installing
Copying Data by Using AzCopy
Copying Data between Containers Using AzCopy
Configuring Storage Replication and Lifecycle Management
Storage Replication and Management Services
Azure File Sync
Blob Object Replication
Blob Life Cycle Management
Blob Data Protection
Blob Versioning
Immutable Storage
Storage Account Deletion
Creating and Configuring an Azure File Sync Instance
Working with Azure File Snapshots
Implementing Azure Storage Redundancy
Configuring Blob Object Replication
Configuring Blob Life Cycle Management
Lifecycle Management Policy Deployed as Code
Deleting a Life Cycle Management Rule
Configuring Blob Data Protection
Summary
Exam Readiness Drill - Chapters 7-9
HOW TO GET STARTED
Chapter 10: Azure Resource Manager Templates
Technical Requirements
Understanding ARM Templates
Benefits of ARM
Understanding the ARM Template Structure
Object Types
Schema
Content Version
Parameters
Variables
Functions
Resources
Outputs
Creating an ARM Template
Using VS Code to Create ARM Templates
Modifying an Existing ARM Template
Deploying an ARM Template - Azure Portal
Deploying an ARM Template - Azure PowerShell
Saving a Deployment as an ARM Template
Exporting an ARM Template
Azure QuickStart Templates
Accessing Azure QuickStart Templates
Summary
Chapter 11: Azure Bicep
Technical Requirements
Understanding Azure Bicep
Benefits of Azure Bicep
Comparing Azure Bicep to ARM Templates
Setting up the Bicep Extension for VS Code and the Bicep CLI
Understanding the Bicep Template Structure
Metadata
Target Scope
User-Defined Data Types
User-Defined Functions
Parameters
Variables
Resources
Modules
Outputs
Creating a Bicep Template
Modifying an Existing Bicep Template
Deploying a Bicep Template - Azure PowerShell
Converting ARM to Bicep
Prerequisites
Converting an Existing ARM File to Bicep
Converting Bicep to ARM
Prerequisites
Converting an Existing Bicep File to ARM
Summary
Chapter 12: Understanding Virtual Machines
Technical Requirements
Understanding Azure Disk Storage
Disk Management Options
Disk Performance
Disk Caching
Calculating Expected Caching Performance
Disk Types
Ultra Disk
Premium SSD
Premium SSD v2
Standard SSD
Standard HDD
Disk Summary Table
Disk Redundancy Options
Understanding Azure VMs
VM Sizes
Networking
Network Security Groups
Availability Sets
Fault Domain versus Update Domain
Availability Zones
Scale Sets
Allocation Policy
Comparing Horizontal and Vertical Scaling
VM Security Types
Standard
Trusted Launch
Confidential VMs
VM Images
VM Architectures
Hibernation
Licensing
Azure Spot VMs
Reserved Instances
Capacity Reservation
Proximity Placement Groups
Deploying a VM in Azure
Exercise 12.1
PowerShell Scripts
Deploying and Configuring Scale Sets
Exercise 12.2
Summary
Exam Readiness Drill - Chapters 10-12
HOW TO GET STARTED
Chapter 13: Managing Virtual Machines
Technical Requirements
Managing VM Sizes
Exercise 13.1: Resizing Your VM Using the Azure Portal
Exercise 13.2: Resizing a VM Using the CLI
Adding Data Disks to VMs
Exercise 13.3: Adding Data Disks
Troubleshooting VM Networking
Exercise 13.4: Troubleshooting VM Networking
Moving VMs between Resource Groups
Exercise 13.5: Moving VMs from One Resource Group to Another
Redeploying VMs
Exercise 13.6: Redeploying VMs
Exercise 13.7: Redeploying a VM from PowerShell
Disk Encryption in Azure
Exercise 13.8: Configuring ADE
Automating Configuration Management
Deploying VM Extensions
Exercise 13.9: Deploying a VM Extension Using the Portal
Configuring and Deploying a VM ARM Template
Summary
Chapter 14: Creating and Configuring Containers
Technical Requirements
Docker
Introduction to Containers
The Problems Containers Solve
Complexity
Resource Requirements and Costs
Scalability
Portability and Consistency
The Differences between VMs and Containers
Isolation
OS
Deployment
Storage Persistence
Fault Tolerance
Azure Container Instances
Container Groups
Common Scenarios for Using Multi-Container Groups
Resources
Networking
Deployment
Docker Platform
Docker Terminology
Setting Up Docker
Creating Your First Docker Image
Azure Kubernetes Services
Upgrading an AKS Cluster
Node Security Channel Types
Authentication and Authorization
AKS Networking Options
Private Access
Public Access
Network Configuration
Network Policy
Traffic Routing
AKS Security
Creating an Azure Container Registry
Deploying Your First Container Instance
Configuring Container Groups for ACI
Configuring Sizing and Scaling for ACI
Deploying AKS
Configuring Storage for AKS
Configuring Scaling for AKS
Upgrading an AKS Cluster
Summary
Chapter 15: Creating and Configuring App Service
Technical Requirements
Understanding Azure App Service and App Service Plans
App Service Plans
Runtime Stacks
Operating Systems
SKUs/Sizes
Authentication Settings
Continuous Deployment
Creating an App Service Plan
Creating an App Service Instance
PowerShell Scripts
Configuring Scaling
Vertical Scaling
Horizontal Scaling
PowerShell Scripts
Securing Azure App Service
Environment Variables
Configuration settings
General settings
Path mappings
Error pages
Authentication Settings
Identity Settings
Backups
Certificates
Networking
CORS
Additional Considerations
Configuring Custom Domain Names
Configuring a Backup for an App Service Instance
Configuring Networking Settings
Configuring Deployment Settings
Summary
Exam Readiness Drill - Chapters 13-15
HOW TO GET STARTED
Chapter 16: Implementing and Managing Virtual Networking
Technical Requirements
Creating and Configuring Virtual Networks
IP Addressing Overview
Creating a VNet
VNet Peering
Configuring a VNet Peer
Testing your VNet Peer
Creating Private and Public IP Addresses
Configuring a Private IP Address
Configuring a Public IP Address
User-defined Routing
Creating a Route Table
Implementing Subnets
Adding a Subnet to a VNet
Configuring Endpoints on Subnets
Configuring a Service Endpoint
Configuring Private Endpoints
Creating a Private Endpoint
Integrating into a VNet
Configuring Azure DNS
Creating an Azure Private DNS Zone
Testing Private DNS
Summary
Chapter 17: Securing Access to Virtual Networks
Technical requirements
Network Security Groups
Creating an NSG
Associating an NSG with a Subnet
Configuring NSG Rules
Evaluating Effective Security Rules
Azure Firewall
Traffic Flow Direction
Firewall Rules
Rule Processing Logic
Azure Firewall SKUs
Azure Firewall Basic
Azure Firewall Standard
Azure Firewall Premium
Comparing Firewall SKUs
Azure Bastion
Deploying Azure Bastion and Azure Firewall
Summary
Chapter 18: Configuring Load Balancing
Technical Requirements
Azure Load-Balancing Services
Regional Services
Global Services
Multi-Cloud Considerations
Load Balancer Service Options
Non-HTTP(S) Workloads
HTTP(S) Workloads
SSL Offloading
Path-Based Load-Balancing
Session Affinity
WAF
Deciding on the Right Load Balancer Solution
Azure Load Balancer
Features and Capabilities
Load-Balancing
Port Forwarding
Automatic reconfiguration
Outbound Connections (SNAT)
Health Probes
Metrics
Security
Load Balancer SKUs
Basic
Standard
Gateway
Configuring an ILB
Creating the VNet
Creating the VMs
Creating a Load Balancer
Creating the Health Probes
Creating Load-Balancing Rules
Testing the Load Balancer
Configuring a Public Load Balancer
Creating the Public Load Balancer
Creating the VNet and NSG
Creating Backend Servers
Testing the Load Balancer
Troubleshooting Load Balancing
Azure Application Gateway
Features and Capabilities
Configuring Azure Application Gateway
Creating an Azure Application Gateway
Deploying Your Web App
Testing the Application Gateway
Azure Front Door
Summary
Exam Readiness Drill - Chapters 16-18
HOW TO GET STARTED
Chapter 19: Integrating On-Premises Networks with Azure
Technical Requirements
Azure VPN Gateway
Azure VPN Gateway SKUs
Generation 1 VPN SKUs
Generation 2 VPN SKUs
Pricing Considerations
Point-to-Site VPN Connections
Site-to-Site VPN Connections
Multi-Site VPN Connections
VNet-to-VNet VPN Connections
ExpressRoute
Creating and Configuring an Azure VPN Gateway
VPN Server Deployment
S2S VPN Configuration
Verify Connectivity via the Azure Portal
VNet-to-VNet Connections
Creating and Configuring Azure ExpressRoute
Azure Virtual WAN
Configuring Azure Virtual WAN
Creating a VPN Site
Connecting Your VPN Site to the Hub
Connecting to Your VPN Site
Summary
Chapter 20: Monitoring and Troubleshooting Virtual Networking
Technical Requirements
Understanding Network Watcher
Monitoring
Topology
Connection Monitor
Traffic Analytics
Network Diagnostic Tools
IP Flow Verify
NSG Diagnostics
Next Hop
Effective Security Rules
VPN Troubleshoot
Packet Capture
Connection Troubleshoot
Metrics
Usage + Quotas
Logs
Flow Logs
Migrate Flow Logs
Diagnostic Logs
Configuring Network Watcher
Network Resource Monitoring
Installing the Network Watcher Agent
Enabling Network Watcher
Monitoring Network Connectivity
Managing VNet Connectivity
Network Topology
Monitoring On-Premises Connectivity
Configuring Next Hop
VPN Troubleshoot
Troubleshooting External Networking
IP Flow Verify
Using IP Flow Verify
Effective Security Rules
Connection Troubleshoot
Summary
Chapter 21: Monitoring Resources with Azure Monitor
Technical Requirements
Understanding Azure Monitor
Metrics versus Logs
What Data Azure Monitor Collects
Data Sources
Data Collection
Application Instrumentation with the SDK
Azure Monitor Agent
Data Collection Rules
Automatic Data Collection (Zero Configuration)
Azure Diagnostic Settings
Azure Monitor REST API
Data Collection Best Practices
Data Platform
Metrics
Log Analytics
Traces
Changes
Consumption
Insights
Application Insights
Container Insights
VM Insights
Network Insights
The Activity Log
Alerts
Action Groups
Service Health
Active Events
History
Resource Health
Alerts
Working with Metrics and Alerts
Creating a VM
Viewing a Metric
Creating a Dashboard
Creating an Alert
Configuring Diagnostic Settings on Resources
Triggering an Alert
Querying Log Analytics
Creating a Log Analytics Workspace
Utilizing Log Search Query Functions
Querying Logs in Azure Monitor
Monitoring with Workbooks
Configuring Application Insights
Creating Your Application
Creating Your Application Insights Resource
Associating Your Web App with Application Insights
Summary
Chapter 22: Implementing Backup and Recovery Solutions
Technical Requirements
Understanding Azure Backup Vaults
Understanding Azure Recovery Services Vaults
Creating a Recovery Services Vault
Understanding Backup Policies
Creating and Configuring Backup Policies
Backing Up via Azure Backup Center
Restoring a Backup via Azure Backup Center
Recovering from a Disaster with Azure Site Recovery
Configuring and Reviewing Backup Reports
Summary
Exam Readiness Drill - Chapters 19-22
HOW TO GET STARTED
Chapter 23: Accessing the Online Practice Resources
Index
Other Books You May Enjoy

Systemvoraussetzungen

Als PDF speichern Als Link merken