AZ-103 Study Guide

Domain Domain Goals

Manage Azure subscriptions and resources (15-20%)

Manage Azure subscriptions

Analyze resource utilization and consumption

 Manage resource groups

Manage Role Based Access Control (RBAC)

Implement and manage storage (20-25%)

Create and configure storage accounts

Import and export data to Azure

 Configure Azure files

Implement Azure backup

Deploy and manage virtual machines (VMs) (20-25%)

Create and configure a VM for Windows and Linux

Automate deployment of VMs

Manage Azure VM

Manage VM backups
Configure and manage virtual networks (20-25%)

Create connectivity between virtual networks

Implement and manage virtual networking

Configure name resolution

Create and configure a Network Security Group (NSG)

 Implement Azure Load Balancer

Monitor and Troubleshoot Virtual Networking

Integrate On-Premises Network with an Azure Virtual Network

Manage identities (15-20%)

Manage Azure Active Directory (AD)

Manage Azure AD objects (users, groups, and devices)

Implement and manage hybrid identities

Implement Multi-Factor Authentication (MFA)

Domain Objectives *pls refer
to
https://www.microsoft.com/
en-us/learning/exam-az-
103.aspx for any updates

Assign administrator permissions

Configure cost center quotas

Configure tagging
Configure subscription policies

Configure diagnostic settings on resources

Create baseline for resources

Create and test alerts

Analyze alerts across subscriptions
Analyze metrics across subscriptions

Create Action groups

Monitor for unused resources

Monitor spend
Report on spend

Utilize Log Search Query functions

View alerts in Log Analytics

Allocate resource policies

Configure resource locks

Configure resource policies
Implement and set tagging on resource groups

Move resources across resource groups

Move resources across subscriptions

Remove resource groups

Create a custom role

Configure access to Azure resources by assigning roles

Configure management access to Azure
Troubleshoot RBAC
Implement RBAC policies
Assign RBAC roles

Configure network access to the storage account

Create and configure storage account

Generate shared access signature

Install and use Azure Storage Explorer

Manage access keys

Monitor activity log by using Log Analytics

Implement Azure storage replication

Create export from Azure job

Create import into Azure job

Use Azure Data Box

Configure and use Azure blob storage

Configure Azure content delivery network (CDN)
endpoints

Create Azure file share

Create Azure file sync service

Create Azure file sync group

Troubleshoot Azure file sync

Configure and review backup reports

Perform and review backup operations

Create Recovery Services Vault

Create and configure backup policy

Perform a restore operation

Configure high availability
Configure monitoring

Configure networking

Configure storage
Configure virtual machine size

Deploy and configure scale sets

Modify Azure Resource Manager (ARM) template

Configure location of new virtual machines
Configure VHD template
Deploy from template
Save deployment as an ARM template

Deploy Windows and Linux virtual machines

Add data disks

Add network interfaces

Automate configuration management by using

PowerShell Desired State Configuration (DSC)

Automate configuration management by using Virtual

machine agent by using custom script extensions
Manage virtual machine sizes
Move virtual machines from one resource group to
another

Redeploy virtual machines

Configure virtual machine backup

Define backup policies
Implement backup policies

Perform virtual machine restores

Create and configure VNET peering

Create and configure VNET to VNET

Verify virtual network connectivity

Create virtual network gateway

Configure private and public IP addresses

Configure network routes

Configure network interfaces

Configure network subnets

Configure virtual network

Configure Azure DNS

Configure custom DNS settings

Configure Public and Private DNS zones

 Create security rules

Associate NSG to a subnet

Associate NSG to a network interface

Identify required ports

Evaluate effective security rules

Configure internal load balancer

Configure load balancing rules
Configure public load balancer
Troubleshoot load balancing

Monitor on-premises connectivity

Use Network Resource monitoring
Use Network Watcher
Troubleshoot External networking
Troubleshoot Virtual Network Connectivity

e Virtual Network
Create and configure Azure VPN Gateway
Create and configure site to site VPN
Configure ExpressRoute
Verify on-premises connectivity
Troubleshoot on-premises connectivity with Azure

Add custom domains

Configure Azure AD Identity Protection

Configure Azure AD Join

Configure Enterprise State Roaming

Configure self-service password reset

Implement conditional access policies

Manage multiple directories

Perform an access review

Create users and groups

Manage users and group properties

Manage device settings
Perform bulk user updates

Install and configure Azure AD Connect

Configure federation and single sign-on

Manage Azure AD Connect

Manage password sync and writeback

Configure users accounts for MFA

Enable MFA by using Bulk Update
Configure Fraud Alerts
Configure Bypass Options
Configure Trusted Ips
Configure Verification Methods
Microsoft Links

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-
roles/directory-assign-admin-roles

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
group-using-tags
https://docs.microsoft.com/en-us/azure/governance/policy/overview

Using a Template: https://docs.microsoft.com/en-us/azure/monitoring-and-

diagnostics/monitoring-enable-diagnostic-logs-using-template
https://docs.microsoft.com/en-us/azure/monitoring-and-
diagnostics/monitoring-overview-of-diagnostic-logs

Dynamic Thresholds: https://docs.microsoft.com/en-us/azure/monitoring-

and-diagnostics/monitoring-alerts-dynamic-thresholds
DSC:https://docs.microsoft.com/en-us/azure/automation/automation-dsc-
overview
https://docs.microsoft.com/en-us/azure/monitoring-and-
diagnostics/monitoring-overview-alerts

https://docs.microsoft.com/en-us/azure/monitoring-and-
diagnostics/monitoring-action-groups
https://docs.microsoft.com/en-us/azure/azure-monitor/overview
https://docs.microsoft.com/en-us/azure/monitoring-and-
diagnostics/monitoring-usage-and-estimated-costs
https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
https://docs.microsoft.com/en-us/azure/log-analytics/query-language/get-
started-queries
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-queries

https://docs.microsoft.com/en-us/azure/governance/policy/overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
group-lock-resources
https://docs.microsoft.com/en-us/azure/governance/policy/overview
See above
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
group-move-resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
group-move-resources

Portal: https://docs.microsoft.com/en-us/azure/azure-resource-
manager/resource-group-portal#move-resources
PowerShell: https://docs.microsoft.com/en-
us/powershell/module/azurerm.resources/remove-azurermresourcegroup?
view=azurermps-6.11.0

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-
security
https://docs.microsoft.com/en-us/azure/storage/common/storage-
quickstart-create-account?tabs=portal
https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-
shared-access-signature-part-1
https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-
with-storage-explorer?tabs=windows
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-
manage

https://docs.microsoft.com/en-us/azure/storage/common/storage-
redundancy
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-
export-data-from-blobs
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-
export-data-to-files
https://azure.microsoft.com/en-us/blog/expanding-the-azure-data-box-
family/
https://docs.microsoft.com/en-us/azure/storage/common/storage-
quickstart-create-account?toc=%2Fazure%2Fstorage%2Fblobs
%2Ftoc.json&tabs=portal

https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-
file-share
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-
deployment-guide?tabs=portal

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-
deployment-guide?tabs=portal#create-a-sync-group-and-a-cloud-endpoint

https://docs.microsoft.com/en-us/azure/storage/files/storage-troubleshoot-
windows-file-connection-problems
https://docs.microsoft.com/en-us/azure/storage/files/storage-troubleshoot-
linux-file-connection-problems
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-
troubleshoot?tabs=portal1%2Cportal

https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-
reports

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
https://docs.microsoft.com/en-us/azure/backup/tutorial-backup-windows-
server-to-azure
https://docs.microsoft.com/en-us/azure/backup/backup-azure-files
Review the other backup scenarios
https://docs.microsoft.com/en-us/azure/backup/backup-azure-manage-
windows-server
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-
look-arm#defining-a-backup-policy
Review for the other scenarios.
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-
virtual machines
Review for the other scenarios
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-
availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-
virtual-network
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-
managed-disk-portal
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-
create-vmss
https://docs.microsoft.com/en-us/azure/azure-resource-manager/
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
manager-quickstart-create-templates-use-the-portal

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-
group-template-deploy-portal

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/attach-disk-
portal
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-
managed-disk-portal
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-
disk-ps

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
network-interface-virtual machine
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
network-interface

https://docs.microsoft.com/en-us/azure/automation/automation-dsc-
overview
https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-
dsc-configuration

https://docs.microsoft.com/en-us/azure/virtual-
machines/extensions/custom-script-windows

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-
vm

https://docs.microsoft.com/en-us/azure/virtual-
machines/troubleshooting/redeploy-to-new-node-windows
https://docs.microsoft.com/en-us/azure/virtual-
machines/troubleshooting/redeploy-to-new-node-linux

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-
look-arm#defining-a-backup-policy

https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-
from-virtual machine
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-
virtual machines
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-
encryption

https://docs.microsoft.com/en-us/azure/virtual-network/
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
peering-overview
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-
vnet-vnet-resource-manager-portal
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-
vnet-vnet-resource-manager-portal#VerifyConnection
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-
site-to-site-resource-manager-portal#VNetGateway
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-ip-
addresses-overview-arm
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-
static-private-ip-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-
udr-overview
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
network-interface-vm
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
manage-subnet

https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-portal
https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-
powershell

https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-
tutorial-custom-domain
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview
https://docs.microsoft.com/en-us/azure/dns/dns-zones-records
https://docs.microsoft.com/en-us/azure/dns/dns-alias

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-
security-group
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-
security-group
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-
security-group
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/nsg-
quickstart-portal

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
network-interface#view-effective-security-rules
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-
nsg-manage-log

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/azure/load-balancer/quickstart-create-basic-load-balancer-portal

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot

https://docs.microsoft.com/en-us/azure/azure-monitor/overview

https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

https://docs.microsoft.com/en-us/azure/vpn-gateway/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
https://docs.microsoft.com/en-ca/azure/expressroute/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-
custom-domain
https://docs.microsoft.com/en-us/azure/security-center/security-center-
aadip-integration

https://docs.microsoft.com/en-us/azure/active-directory/devices/overview
https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-
state-roaming-overview
https://docs.microsoft.com/en-us/azure/active-
directory/authentication/howto-sspr-deployment
https://docs.microsoft.com/en-us/azure/active-directory/conditional-
access/overview
https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/active-directory-how-subscriptions-associated-
directory
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-
reviews-overview

https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/active-directory-groups-create-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-
users-azure-active-directory

https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/active-directory-groups-members-azure-portal
https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/active-directory-groups-delete-group
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-
management-azure-portal

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-
connect-install-express

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-
connect-install-custom
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-
connect-password-hash-synchronization
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-
connect-device-writeback

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
LIL Links - some content may be a little out of date.

https://www.linkedin.com/learning/azure-enterprise-development-1-governance-and-infrastructure-deployments/implementi

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-dia

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-alerts
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/analyze-alert
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/analyze-metr

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/utilize-log-se
https://www.linkedin.com/learning/microsoft-azure-secure-resources/azure-locks-and-policies?u=104
https://www.linkedin.com/learning/microsoft-azure-secure-resources/azure-locks-and-policies?u=104

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-a-cust

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-ma

https://www.linkedin.com/learning/microsoft-azure-design-and-deploy-arm-templates/assigning-rbac?u=104

https://www.linkedin.com/learning/azure-administration-implement-and-manage-storage?u=104

https://www.linkedin.com/learning/microsoft-azure-design-and-implement-a-storage-strategy/creating-a-storage-account?u=1

https://www.linkedin.com/learning/microsoft-azure-design-and-implement-a-storage-strategy/managing-access?u=104

https://www.linkedin.com/learning/azure-weekly-insights/azure-storage-explorer?u=104

https://www.linkedin.com/learning/microsoft-azure-design-and-implement-a-storage-strategy/storage-access-keys?u=104
https://www.linkedin.com/learning/microsoft-azure-design-and-implement-a-storage-strategy/configure-a-content-delivery-ne
https://www.linkedin.com/learning/deploying-azure-file-sync?u=104

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-an-az

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-an-az

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-an-az

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/troubleshoot
https://www.linkedin.com/learning/microsoft-azure-backup-and-disaster-recovery/what-you-need-to-know?u=104

https://www.linkedin.com/learning/microsoft-azure-backup-and-disaster-recovery/create-a-recovery-services-vault?u=104
** LIL course will be available in April 2019

https://www.linkedin.com/learning/microsoft-azure-create-and-manage-virtual-machines/create-availability-sets?u=104

https://www.linkedin.com/learning/microsoft-azure-create-and-manage-virtual-machines/create-virtual-machine-scale-sets?u

https://www.linkedin.com/learning/microsoft-azure-create-and-manage-virtual-machines/configure-disk-storage?u=104

https://www.linkedin.com/learning/microsoft-azure-design-and-implement-a-storage-strategy/back-up-an-azure-virtual-mach
https://www.linkedin.com/learning/microsoft-azure-virtual-network-implementation/welcome?u=104 ***Updated course com

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-and-c

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-and-c

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-a-virt

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-az
 https://www.linkedin.com/learning/microsoft-azure-virtual-network-implementation/configure-nsgs?u=104

cer-overview
create-basic-load-balancer-portal

cer-troubleshoot

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/monitor-on-p
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/use-network
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/use-network

y-about-vpngateways
y-howto-site-to-site-resource-manager-portal

y-troubleshoot-site-to-site-cannot-connect

https://www.linkedin.com/learning/microsoft-azure-implement-azure-active-directory/azure-ad-connect-overview?u=104

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/add-custom-

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-az

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-az
 https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-en

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-se

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-se

https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/manage-mul
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/create-an-ac
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/perform-an-

https://www.linkedin.com/learning/microsoft-azure-secure-resources/azure-active-directory-connect?u=104

https://www.linkedin.com/learning/microsoft-azure-secure-resources/federated-identities-using-adfs?u=104

cation/concept-mfa-howitworks
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-us
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/enable-mfa-f
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-mf
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-mf
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-mf
https://www.linkedin.com/learning/cert-prep-microsoft-azure-administrator-certification-transition-exam-az-102/configure-mf
Notes Completed!
Assign administrator permissions
Configure cost center quotas
Configure tagging
Configure subscription policies