Skip to main content

Microsoft Azure Administrator – Exam AZ-103

Course

Intro Video

Photo of Gary McLeary

Gary McLeary

Azure Training Architect I in Content

Length

25:55:40

Difficulty

Intermediate

Videos

89

Hands-on Labs

14

Quizzes/Exams

1

Course Details

This course will help preparing your for the AZ-103 exam wth practical labs and demonstrations with the focus on these 5 domains:

Manage Azure subscriptions and resourcesImplement and manage storageDeploy and manage virtual machines (VMs)Configure and manage virtual networksManage identities

Syllabus

Course Introduction

About the Training Architect and the Course

About the Training Architect

00:01:14

Lesson Description:

Hello! My name is Gary McLeary. I am a Microsoft Certified Trainer and I will be the training architect for this course!

About the Course

00:07:20

Lesson Description:

This course covers the following domains. Manage Azure subscriptions and resourcesImplement and manage storageDeploy and manage virtual machines (VMs)Configure and manage virtual networksManage identities

Course Features and Tools

00:05:55

Lesson Description:

On the course syllabus page, there is a Course Features section which includes the course scheduler, hands-on labs, practice exams, flash cards, a community section, and study tools.

Manage Azure Subscriptions and Resources(15-20%)

Manage Azure Subscriptions

Assigning Administrator Permissions-Part 1

00:07:48

Lesson Description:

In this video lesson we go through the steps of creating a subscription and providing the applicable permissions to manage the subscription. Being able to create and manage a subscription is a crucial task in Azure. There are many ways to assign permissions including Azure Active Directory, Azure RBAC Roles, and the Classic Subscription. The goal of this section is to understand each of these and how to effectively manage our users and groups. https://docs.microsoft.com/en-us/azure/role-based-access-control/classic-administrators https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

Assigning Administrator Permissions-Part 2

00:07:14

Lesson Description:

In this video lesson we go through the steps of creating a subscription and providing the applicable permissions to manage the subscription. Being able to create and manage a subscription is a crucial task in Azure. There are many ways to assign permissions including Azure Active Directory, Azure RBAC Roles, and the Classic Subscription. The goal of this section is to understand each of these and how to effectively manage our users and groups. https://docs.microsoft.com/en-us/azure/role-based-access-control/classic-administrators https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

Configuring Cost Center Quotas and Tagging

00:10:54

Lesson Description:

Cost is a major factor for any organization, especially when costs can rise unexpectedly due to one simple change. We can track these changes over time with cost management tools such as tags, advisors, and by adjusting our quotas. In this lesson, we gain visibility into organizing our resources to better track spending via tags. Additionally, we go through the steps to increase quotas.

Configuring Azure Subscription Policies at the Azure Subscription Level

00:12:07

Lesson Description:

Policies enact rules for building infrastructure in Azure. These rules can be used to deny the creation of resources or report on the compliance. There are a number of built-in policies which provide us with common security compliance definitions. In this lesson, we discover how to create and remove policies using the Portal. https://docs.microsoft.com/en-us/azure/governance/policy/

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Analyze Resource Utilization and Consumption

Creating Action Groups

00:04:07

Lesson Description:

This video covers creating action groups, an alert system that performs an action when an alert is triggered. The Microsoft documentation for creating an action group can be found at the link below. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

Configuring Diagnostic Settings on Resources

00:07:51

Lesson Description:

In this video, we discuss Azure Monitor and the type of logs available: tenant and resource logs. We also discuss the key capabilities of Azure Monitor: Monitor and visualize metricsQuery and analyze logsSetup alerts and actions

Creating and Resting Alerts

00:07:58

Lesson Description:

In this video lesson, we define Azure alerts and also discuss the benefits of an Azure alert. Additonally, we provide instructions on creating alert rules and discuss the 3 main components: The alert conditionThe alert detailsThe action group If you are trying to follow along in this video, you may need to run this command below in cloud shell within Powershell in order to add alert rule(run the command without the quotes) "azure provider register microsoft.insights"

Analyzing Alerts/Metrics Across Subscriptions

00:07:32

Lesson Description:

In this video lesson we discuss what a metric is and how it can be used. We also provide a demonstration on reviewing information as it relates to alerts and metrics. The following link connects to the Microsoft documentation for Azure Monitor's data platform. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform

Creating a Baseline for Resources

00:09:03

Lesson Description:

In this video lesson we discuss how to create a baseline for your resources and how to utilize Metric Alerts with Dynamic Threshold to get the maximum performance from your resources. We also demonstrate how to setup Dynamic Thresholds within the Azure portal. The following link connects to Microsoft's documentation about Metric Alerts with Dynamic Thresholds. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-dynamic-thresholds

Monitoring for Unused Resources

00:08:44

Lesson Description:

In this video lesson, we utilize Azure Advisor to assist in monitoring for unused resources as well as help us follow the best practices for our Azure infrastructure. With Azure Advisor, you can: Get proactive, actionable, and personalized best practice recommendations.Improve the performance, security, and availability of your resources as you identify opportunities to reduce your overall Azure expenses.Get recommendations with proposed actions inline. The following link connects to the Microsoft documentation for Azure Advisor. https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

Monitoring Spending/Report on Spending

00:10:27

Lesson Description:

In this video lesson we go over billing services in the Azure portal which allow us to monitor our spending and prepare reports to view spending history and possible trends. The following links to Microsoft documentation provide additional information. https://docs.microsoft.com/en-us/azure/cost-management/quick-acm-cost-analysis https://azure.microsoft.com/Pricing/Calculator

Utilizing Log Search Query Functions

00:13:01

Lesson Description:

In this video lesson, we discuss the procedures to setup Log Analytics within the Azure Portal and query the logs for more specific information. Additionally, we discuss the basic syntax required for a query. The following links to Microsoft documentation dicsuss collecting log information as well as querying the logs. https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview

Viewing Alerts in Log Analytics

00:05:08

Lesson Description:

In this video, we utilize the Alert Management solution to view alerts in Log Analytics. We discuss the uses of Alert Management and demonstrate how to set it up. The following Microsoft documentation discusses the Alert Management solution. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alert-management-solution Note: Alert Management is now found in the Marketplace.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:15:00

Manage Resource Groups

Using Azure Policies for Resource Groups

00:14:41

Lesson Description:

In this video lesson, we'll discuss how to utilize policies to restrict some resources within a resource group. We will also go over the basics of what a resource group is and how it is used.

Configuring Resource Locks

00:04:30

Lesson Description:

In this video lesson, we'll discuss how to lock resources to prevent them from being accidentally modified or deleted. This is important because when a team of individuals or contractors are working on the same project, some members may be unfamiliar with the project dependencies and unable to distinguish between production resources and testing resources. No one should delete production resources under any circumstances, and locking these resources prevents that from happening.

Configuring Resource Policies and Removing Resource Groups

00:05:44

Lesson Description:

In this video lesson, we'll set a policy with a scope of the resource group. The same command could be used to set a scope to a resource, subscription, or management group. We'll utilize the Azure CLI to create a policy that ensures resources are only created in the East US location. The commands used are listed below. Create the Policy Definition (Subscription Scope) $definition = New-AzPolicyDefinition -Name "allowed-locations" -DisplayName "Allowed locations" -description "This policy enables you to restrict the locations your organization can specify when deploying resources. Use to enforce your geo-compliance requirements. Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and resources that use the 'global' region." -Policy 'https://raw.githubusercontent.com/Azure/azure-policy/master/samples/built-in-policy/allowed-locations/azurepolicy.rules.json' -Parameter 'https://raw.githubusercontent.com/Azure/azure-policy/master/samples/built-in-policy/allowed-locations/azurepolicy.parameters.json' -Mode Indexed Set the Scope to a Resource Group $scope = Get-AzResourceGroup -Name 'YourResourceGroup' Set the Policy Parameter (JSON Format) $policyparam = '{ "listOfAllowedLocations": { "value": [ "eastus"] } }' Create the Policy Assignment $assignment = New-AzPolicyAssignment -Name 'allowed-locations-assignment' -DisplayName 'Allowed locations Assignment' -Scope $scope.ResourceId -PolicyDefinition $definition -PolicyParameter $policyparam https://docs.microsoft.com/en-us/azure/governance/policy/samples/allowed-locations

Identifying Auditing Requirements

00:15:47

Lesson Description:

In this video lesson, we'll go over the process of identifying auditing requirements using both Azure Security Center and Azure policies. https://docs.microsoft.com/en-us/azure/security/azure-log-audit https://docs.microsoft.com/en-us/azure/security-center/security-center-intro

Implementing and Setting Tagging on Resource Groups

00:10:28

Lesson Description:

In this video lesson, we'll discuss how to create tags for resource groups using PowerShell. We will also go over the limitations of tags and what they are used for. https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Moving Resources Across Resource Groups

00:08:27

Lesson Description:

In this video lesson, we'll discuss the process of moving resoures to other resource groups, both within the same subscription and between different subscriptions. We will also talk about the different resources that can and cannot be moved. https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

Manage Role-Based Access Control (RBAC)

Creating a Custom Role

00:08:47

Lesson Description:

In this video lesson, we will go over role-based access control (RBAC) and the steps to create a custom role. We will also demonstrate creating a custom role using PowerShell. Links:https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-powershell Commands:1) PS C:> Get-AzProviderOperation "Microsoft.Compute/virtualMachines/*" | FT OperationName, Operation, Description -AutoSize 2) $role = Get-AzRoleDefinition "Virtual Machine Contributor" $role.Id = $null $role.Name = "Virtual Machine Operator" $role.Description = "Can monitor and restart virtual machines." $role.Actions.Clear() $role.Actions.Add("Microsoft.Storage/*/read") $role.Actions.Add("Microsoft.Network/*/read") $role.Actions.Add("Microsoft.Compute/*/read") $role.Actions.Add("Microsoft.Compute/virtualMachines/start/action") $role.Actions.Add("Microsoft.Compute/virtualMachines/restart/action") $role.Actions.Add("Microsoft.Authorization/*/read") $role.Actions.Add("Microsoft.ResourceHealth/availabilityStatuses/read") $role.Actions.Add("Microsoft.Resources/subscriptions/resourceGroups/read") $role.Actions.Add("Microsoft.Insights/alertRules/*") $role.Actions.Add("Microsoft.Support/*") $role.AssignableScopes.Clear() $role.AssignableScopes.Add("/subscriptions/00000000-0000-0000-0000-000000000000") $role.AssignableScopes.Add("/subscriptions/11111111-1111-1111-1111-111111111111") New-AzRoleDefinition -Role $rol

Configuring Access to Azure Resources by Assigning Roles

00:06:48

Lesson Description:

In this video lesson, we will assign the custom role that we created in the previous video to an existing user. Additionally, we will review the types of AD security principals that the role can be assigned to (users, groups, and service principals). Lastly, we will revisit the Administrator and Global Administrator permissions that we discussed in the Assigning Administrator Permissions video lesson.

Configuring Management Access to Azure-Troubleshooting RBAC-Implementing RBAC Policies- and Assigning RBAC Roles

00:08:12

Lesson Description:

In this video lesson, we will discuss the errors that you can receive while using RBAC and different ways to resolve them. Additionally, we will go over the main elements of IAM and review those sections within the Azure Portal. https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Implement and Manage Storage (15-20%)

Create and Configure Storage Accounts

Configuring Network Access to the Storage Account

00:08:22

Lesson Description:

In this video lesson, we go over the steps to secure our storage account by limiting the network access. https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Creating and Configuring a Storage Account

00:07:39

Lesson Description:

In this video lesson, we demonstrate how to create a storage account. We also cover the different types of storage accounts: General Purpose V1, General Purpose V2, Blob storage. https://azure.microsoft.com/sv-se/blog/announcing-the-public-preview-of-azure-archive-blob-storage-and-blob-level-tiering/

Generating Shared Access Signatures

00:09:28

Lesson Description:

In this video lesson we provide steps to use shared access signature (SAS) to protect your storage accounts. We also provide details on the different components of SAS.

Installing and Using Azure Storage Explorer

00:13:05

Lesson Description:

In this video, we talk about the Azure Storage Explorer. For more information, have a look at Microsoft's documentation. https://azure.microsoft.com/en-us/features/storage-explorer/

Managing Access Keys

00:06:09

Lesson Description:

In this video lesson, we explain how to view the access keys and how to regenerate access keys without impacting the existing applications connecting to the storage account. https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Monitoring the Activity Log by Using Log Analytics

00:08:33

Lesson Description:

In this video lesson, we discuss the main components of the Activity Log and what information it contains. We also discuss how to utilize Event Hubs in scenarios where we want to get log entries from one subscription to another subcription with a different owner. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-log-collect-tenants

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Import and Export Data to Azure

Creating an Export From an Azure Job

00:08:19

Lesson Description:

In this video lesson, we provide a high-level overview of the process of creating an export from an Azure job. We also discuss the requirements. https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-servicehttps://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Creating an Import Into an Azure Job

00:06:12

Lesson Description:

In this video lesson, we provide a high-level overview of the process of creating an import from an Azure job. We also discuss the requirements. https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-servicehttps://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

Using the Azure Data Box

00:13:37

Lesson Description:

In this video, we cover the offline and online methods to transport data to Azure datacenters via Data Box. https://docs.microsoft.com/en-us/azure/databox-family/https://docs.microsoft.com/en-us/azure/databox-online/data-box-gateway-overview

Configuring and Using Azure Blob Storage

00:06:44

Lesson Description:

In this video lesson, we provide details on how to utilize the Blob storage, the different types of access levels (private, blob, container), and the different types of blobs (append, page, block).

Configuring Azure Content Delivery Network (CDN) Endpoints

00:11:56

Lesson Description:

In this video, we explain what a content delivery is and explain what it's doing in the background. We also cover the benefits of the Content Delivery Network (CDN) and its uses. We conclude with a demonstration of creating the content delivery network. The main components of the CDN are the following: CDN ProfileCDN EndPointCDN Time-to-LiveCDN Compression https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:00:00

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:15:00

Configure Azure Files

Creating an Azure File Share

00:08:11

Lesson Description:

In this video lesson, we discuss the process of creating a file share within the Azure Portal and demonstrate how to mount the share using the command line.

Creating an Azure File Sync Service

00:03:19

Lesson Description:

In this video lesson, we discuss the advantages of Azure File Sync and provide a high-level overview of the process. https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Creating an Azure Sync Group

00:11:31

Lesson Description:

In this video lesson, we discuss the process of creating a sync group and provide details on the different components of the File Sync service. https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal#create-a-sync-group-and-a-cloud-endpoint

Troubleshooting Azure File Sync

00:08:32

Lesson Description:

In this video lesson, we explore different methods and steps to take when troubleshooting Azure File Sync. https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-troubleshoot

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Implement Azure backup

Configuring and Reviewing Backup Reports

00:06:14

Lesson Description:

In this video lesson, we demonstrate the necessary steps to configure backup reports within the Azure Portal. https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports?tabs=portal1%2Cazure-portal

Performing a Backup Operation

00:10:41

Lesson Description:

In this video lesson, we demonstrate how to set up Azure Backup. There are four main steps: Create a recovery service vault.Download the files.Install and register the backup agent.Backup your files and folders. https://docs.microsoft.com/en-us/azure/backup/backup-azure-microsoft-azure-backup

Creating a Recovery Services Vault

00:03:33

Lesson Description:

In this video lesson, we discuss the components of the Recovery Services vault and what type of data can be stored there.

Creating and Configuring a Backup Policy

00:06:31

Lesson Description:

In this video lesson, we provide instructions on how to add a backup policy when creating a virtual machine. We also explain how to add and modify an existing backup policy. https://docs.microsoft.com/en-us/azure/backup/backup-during-vm-creation

Performing a Restore Operation

00:10:15

Lesson Description:

In this video lesson, we demonstrate recovering data in three different scenarios: Recover the entire Azure virtual machine.Recover a specific file or folder for an Azure virtual machineRecover a specific file or folder for an on-premises virtual machine.

Deploy and Manage Virtual Machines (VMs) (15-20%)

Create and Configure a VM for Windows and Linux

Configuring High Availability

00:12:24

Lesson Description:

In this video lesson, we go over the steps to create a virtual machine and three scenarios that can lead to a VM being inaccessible (unplanned maintance, unexpected downtime, and planned maintance). We also provide steps on how to configure the availablity set.

Configuring Monitoring, Networking, Storage, and Virtual Machine Size

00:12:06

Lesson Description:

In this video lesson, we discuss how to configure networking, storage, and virtual machine size when deploying a virtual machine. We also discuss the different monitoring options and available diagnostics.

Deploying and Configuring Scale Sets

00:10:47

Lesson Description:

In this video lesson, we show the steps required to create a scale set. We also cover the benfits of using a scale set such as autoscaling.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:45:00

Automate Deployment of VMs

Modifying the Azure Resource Manager (ARM) Template

00:06:22

Lesson Description:

In this video lesson, we discuss the ARM template process as well as how to modify and enter information for an Azure Quickstart Template. We also cover the main elements within an Azure ARM template: $schema, ContentVersion, parameters, variables, Functions, Resources, and Outputs. Azure Quickstart Templates: https://azure.microsoft.com/en-us/resources/templates/

Configuring the Location of New VMs, Configuring VHD Template, and Deployment of VHD Templates

00:07:33

Lesson Description:

In this video lesson, we discuss the proceess of creating an Azure Template that utilizes a generalized VHD for deployment. We also cover how to modify paramaters as they relate to the template, such as location. https://docs.microsoft.com/en-us/azure/virtual-machines/windows/capture-image-resourcehttps://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-vm-generalized-vhd-new-or-existing-vnet/azuredeploy.jsonhttps://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Saving a Deployment as an ARM Template

00:08:07

Lesson Description:

In this video, we provide a demonstation on saving a storage deployment as an ARM template and then provide steps on how to create ongoing storage accounts through the saved template.

Deploying Windows and Linux VMs

00:04:19

Lesson Description:

In this video lesson, we provide steps to add a virtual machine through a script within cloud shell. This is useful because we can automate the process of deploying a virtual machine with the parameters already entered. This makes the process much faster. The link below has the applicable sample script. https://docs.microsoft.com/en-us/azure/virtual-machines/scripts/virtual-machines-linux-cli-sample-create-vm-nginx

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Manage an Azure VM

Adding Data Disks

00:11:53

Lesson Description:

In this video lesson, we provide the steps to add a data disk to an existing virtual machine. We also explain the differences between the virtual machine disks: operating system disk, data disk, and temporary disk. Additionally, we cover managed disk storage and unmanaged disk storage.

Adding Network Interfaces

00:04:31

Lesson Description:

Depending on the size of the VM, we can attach up to eight network interfaces to it. In this lesson, we go through attaching and detaching the network interface to a VM using the Azure Portal.

Automating Configuration Management Using PowerShell Desired State Configuration (DSC) and VM Agent Using Custom Script Extensions

00:08:25

Lesson Description:

PowerShell DSC can manage the configuration of thousands of servers, both in Azure and on-premises. This configuration tool is useful for machines that need to stay consistent with a particular configuration and helps us save time monitoring our VMs. In this lesson, we go through how to set up Powershell DSC for an Azure VM. The following code is used in this video:

configuration IISInstall
{
    node "localhost"
    {
        WindowsFeature IIS
        {
            Ensure = "Present"
            Name = "Web-Server"
        }
    }
}

Managing VM Sizes and Moving VMs From One Resource Group to Another

00:05:52

Lesson Description:

There are multiple ways to resize VMs. While running, VMs can only be resized within a certain hardware category. If we need to move to a different hardware category, we must stop our VM beforehand. Furthermore, if the VM is in an availability set, we must resize all the VMs within the availability set at the same time. In this lesson, we demonstrate how to do this via PowerShell and then, once the VM is successfully resized, we move it to a new resource group.

Redeploying VMs

00:04:10

Lesson Description:

In this video lesson, we demonstrate how to redeploy a virtual machine via Azure Portal and PowerShell.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Manage VM Backups

Configuring VM Backup

00:07:13

Lesson Description:

In this video, we discuss the backup process and provide details about the best practices when it comes to Azure Backup. https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-introduction

Defining Backup Policies and Implementing Backup Policies

00:06:49

Lesson Description:

In this video, we discuss changes to our backups and their associated policies.

Performing VM Restore

00:04:30

Lesson Description:

In this video lesson, we demonstrate how to restore a virtual machine from a file-system consistent backup. We also go through the different options available for a restore: Restore files and folders from a VM disk mount.Restore files and folders from an on-premises backup agent.Restore a VM to a new VM or replace an existing VM.

Azure Site Recovery

00:07:42

Lesson Description:

In this lesson, we give an overview of Azure Site Recovery, including the scenarios when we would use it. Additionally, we discuss the main features of Azure Site Recovery: Eliminates the need for disaster recovery sitesReduces infrastructure costsAutomatically replicates to AzureSafeguards against outages of complex workloadsExtends or boosts capacityContinuous health monitoring https://azure.microsoft.com/en-us/services/site-recovery/

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

02:15:00

Configure and Manage Virtual Networks (30-35%)

Create Connectivity Between Virtual Networks

Creating and Configuring VNET Peering

00:09:42

Lesson Description:

Creating a peering between two virtual networks is very similar to having two subnets, as the connection between the two is private. Peering two virtual networks together allows you to have the same connection speeds to the peered virtual network as you would a single virtual network. This is all handled for you in the background by Azure infrastructure as a service.

Creating and Configuring VNET to VNET

00:03:04

Lesson Description:

In this video, we provide an overview and the steps to configure a VNET-to-VNET VPN Gateway through the Azure Portal. For reference, see: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Creating a Virtual Network Gateway & Verifying Virtual Network Connectivity

00:12:00

Lesson Description:

In this lesson, we talk about virtual network gateways being a way to connect Azure virtual networks to our on-premises networks. The options for virtual network gateways are VPN or ExpressRoute.

Implementing and Managing Virtual Networking

Configuring Private and Public IP Addresses, Network Routes, Network Interfaces, Subnets, and Virtual Networks

00:20:38

Lesson Description:

In this video lesson, we discuss the private IP address and public IP address. We provide details on the difference between dynamic and static assignment. We also provide the steps and demonstrate how to set up a user-defined route. https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal

Configure Name Resolution

Configuring Azure DNS

00:12:14

Lesson Description:

DNS zones are used to resolve names to addresses in Azure. Using Azure DNS allows us to resolve names faster due to the many name servers located around the world. In this lesson, we go through the different elements for Azure DNS and discuss the different types of records.

Configuring Custom DNS Settings

00:06:40

Lesson Description:

DNS zones are used to resolve names to addresses in Azure. Using Azure DNS allows us to resolve names faster due to the many name servers located around the world. In this lesson, we go through how to set up a DNS zone, point to a custom domain to a static web page within Blob Storage, and resolve the DNS name to the address of the Blob Storage Account. https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain

Configuring the Private and Public DNS Zone

00:07:19

Lesson Description:

In this video lesson, we cover the differences between a private DNS zone and a public DNS zone. We also demonstrate how to create a private DNS zone within the Azure Portal.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Create and Configure a Network Security Group (NSG)

Creating Security Rules and Evaluating Effective Security Rules

00:05:27

Lesson Description:

In this lesson, we go over what network security groups are and some common uses. For more on Azure network security groups, see the following article. https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Associating an NSG to a Subnet or Network Interface

00:06:19

Lesson Description:

In this lesson, we demostrate how to create a network security group, how to add rules, and how to associate an NSG to a subnet.

Identifying Required Ports

00:09:22

Lesson Description:

Here are some common ports we see when building services using Azure infrastructure. It's important to follow the practice of least privilege to allow only what the user or service needs and nothing more. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:45:00

Implement an Azure Load Balancer

Configuring an Internal Load Balancer, Load Balancing Rules, a Public Load Balancer, and Troubleshooting Load Balancing

00:16:14

Lesson Description:

In this video lesson, we provide instructions on how to create an internal load balancer and discuss steps to troubleshoot potential problems with the load balancer. https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

Monitor and Troubleshoot Virtual Networking

Monitoring On-Premises Connectivity, Using Network Resource Monitoring or Network Watcher, and Troubleshooting External Networking and Virtual Network Connectivity

00:14:50

Lesson Description:

In this video lesson, we discuss the different diagnostic tools within Network Watcher. We also show how to use these tools to troubleshoot potential communication issues between devices within the Azure infrastructure as well as on-premises devices.

Integrate On-Premises Network With Azure Virtual Network

Creating and Configuring Azure VPN Gateways, Site-to-Site VPN, Express Route, and Troubleshooting On-Premises Connectivity with Azure

00:20:02

Lesson Description:

In this video, we discuss the different methods to connect your on-premises environment to the Azure infrastructure. We cover the usage of Express Route and site-to-site VPN. Additionally, we provide the main steps to create a site-to-site VPN. Create VNet and subnets.Specify the DNS server.Create gateway subnet.Create VPN gateway.Create local network gateway.Configure the VPN device.Create the VPN connection. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices https://azure.microsoft.com/en-us/services/expressroute/ https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:30:00

Manage Identities (15-20%)

Manage Azure Active Directory (AD)

Adding Custom Domains

00:09:24

Lesson Description:

Azure AD is different from on-premises Active Directory, but has features that integrate very easily. Azure AD allows us to manage authentication at a very granular level. In this lesson, we go through how to configure Azure Active Directory and also add a custom domain.

Azure AD Join

00:10:59

Lesson Description:

In this video lesson, we provide details on the difference between registering a device and joining. We also provide a demonstration on joining a VM to Azure Active Directory.

Configuring Self-Service Password Reset

00:05:46

Lesson Description:

Streamlining operations from an administrator perspective is a good idea, as long as the methods to do so are secure. Azure Active Directory manages access reviews and password resets, so we don’t have to worry about securing access for every single person within our organization. For more on authentication methods in Azure, see: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

Managing Multiple Directories

00:07:06

Lesson Description:

In this video lesson, we go through the steps to create another Azure Directory. The steps include: Create the AD instance.Create an admin for the new instance.Have the admin associate subscription with the instance.

Creating and Managing Users and Groups

00:08:19

Lesson Description:

In this video lesson, we go through the different properties and attributes associated with users and groups. We also discuss the different types of identities and groups. https://azure.microsoft.com/en-us/pricing/details/active-directory/

Manage Azure AD Objects_ Users Groups and Devices

Managing Device Settings

00:05:14

Lesson Description:

In this video lesson, we discuss the difference between registered devices, AD joined devices, and hybrid joined devices. We also demonstrate how to add a Windows 10 device using AD Join and how to monitor the device once it's added. Additionally, we go over the device settings within Azure Active Directory.

Performing Bulk User Updates

00:04:16

Lesson Description:

Using the Azure Portal to add a couple of users is a pretty straightforward process. But there may be a situation calling for adding hundreds of users. Although we can do this via Azure Portal, it would be more efficient to do a bulk user update through PowerShell. In this video, we provide an overview of the process.

Managing Guest Accounts

00:03:54

Lesson Description:

Guest users are from outside Azure. In this video lesson, we provide the steps to add a guest user and provide them access to an app in Azure.

Implement and Manage Hybrid Identities

Installing Azure AD Connect Through Synchronization, Including Password Hash and Pass

00:12:22

Lesson Description:

In this video lesson, we discuss Azure AD Connect and the components associated with AD Connect such as sync services, health monitor, and AD FS. We also demonstrate how to install it on an on-premises computer. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tutorial-password-hash-sync https://azure.microsoft.com/en-us/resources/templates/active-directory-new-domain/

Using Azure AD Connect to Configure Federation with On-Premises Active Directory Domain Services (AD DS)

00:14:40

Lesson Description:

AD Single Sign-On (SSO) is a service that allows us to authenticate users without the users needing to enter their username and password. This process is seamless, and the user's experience seems like accessing their email via an application. In the background, the processes exchange a Kerberos ticket and authenticate the user via an agent in the on-premises environment. The ticket is requested versus sent, to reduce the potential for attack. Here's a link for a free trial on a full SSL certificate: https://www.geotrust.com/ssl/free-ssl-certificate/ PowerShell command to add a self-signed certificate. However, this certificate us not usable for AD FS. We need an SSL certificate from a provider like Comodo, Thawte, Geotrust, etc. New-SelfSignedCertificate -DnsName "ad2.garymcleary.com", "www.ad2.garymcleary.com" -CertStoreLocation "cert:LocalMachineMy"

Managing Azure AD Connect

00:06:56

Lesson Description:

In this video lesson, we discuss the different configuration options available within Azure AD Connect such as privacy settings, manage federation, troubleshooting tools, and Azure AD Connect health.

Managing Password Sync and Password Writeback

00:03:52

Lesson Description:

In this video lesson, we discuss the main steps to setup password writeback. We also describe what happens in the background when password writeback is enabled. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

Implement Multi-Factor Authentication (MFA)

Configuring User Accounts for MFA, MFA Using Bulk Update, Fraud Alerts, Bypass Options, Trusted IPs, and Verification Methods

00:08:54

Lesson Description:

In this video, we express the importance of MFA (multi-factor authentiction). We also demonstrate how to set up MFA and fraud alerts to help prevent fraud attempts.

Final Steps

Course Completion and How to Prepare for the Exam

00:03:39

Lesson Description:

This lesson covers how to schedule and prepare for the AZ-103 exam.

Practice Exam

AZ-103: Microsoft Azure Administrator Exam

02:00:00

Take this course and learn a new skill today.

Transform your learning with our all access plan.

Start 7-Day Free Trial