Microsoft AZ-103 Questions
- Exam Name: Microsoft Azure Administrator
- Certification: Azure Administrator Associate
- Vendor Name: Microsoft
- Exam Code: AZ-103
- Update on: July 15, 2021
- Questions: 376
Candidates for the AZ-103 Microsoft Azure Administrator exam are Azure administrators who manage cloud services that cover storage, security, networking, and cloud computing. Candidates are well versed in each service throughout the IT life cycle, provide recommendations on services that should be used to achieve optimal performance and scale, and provide, measure, monitor and adjust resources depending on the situation.
Candidates for this exam must have the skills to use PowerShell, the command line interface, the Azure portal, ARM templates, operating systems, virtualization, the cloud infrastructure, storage and network structures.
Credit for certification: upon successful passing the AZ-103 exam, you will receive certification:
Microsoft Certified Azure Administrator Associate
This exam assesses your ability to perform the technical tasks listed below.
Manage Azure Subscriptions and Resources (15-20%)
Manage Azure Subscriptions
Assign administrator permissions, configure quotas and cost tags, and configure Azure subscription policies.
Analysis of resource use and consumption
Setting diagnostic parameters for resources; creating a baseline for resources; creating and disabling alerts; analysis of subscription alerts; subscription metrics analysis; creating an action group; tracking unused resources; cost control; expense report; Using the Log Search function View alerts in Log Analytics.
Resource group management
Resource group management, using Azure policy for resource groups; setting resource blocking, resource policies; definition of audit requirements; implementation and tagging for resource groups; moving resources between resource groups; Removing a resource group
Role Based Access Control (RBAC)
Create a user role, configure access to Azure resources, configure access control to Azure, troubleshoot RBAC, implement RBAC policies, assign RBAC roles.
Implementation and storage management (20-25%)
Create and configure storage accounts
Configure network access to the storage account; Create and configure a storage account Generate a shared signature Install and use Azure Storage Explorer access key management; activity log tracking using Log Analytics; Implement Azure Storage Replication
Import and export data in Azure
Creation of export from work (job) Azure; create imports to Azure; Using Azure Data Box Configure and use Azure Blob Storage Configure Azure content delivery network (CDN) endpoints
Customize Azure Files
Create an Azure file share Create an Azure file synchronization service Create an Azure Sync Group troubleshooting Azure file synchronization
Implementing Azure Backup
Setting up and viewing backup reports; performing a backup operation; creation of repositories of recovery services; Create and configure backup policies recovery operation
Deployment and management of virtual machines (VMs) (15-20%)
Create and configure a virtual machine for Windows and Linux
High availability setting; setting up monitoring, network, storage and virtual machine size; Deploy and configure scalable sets.
Automate Virtual Machine Deployment
Change the Azure Resource Manager (ARM) template; setting the location of new virtual machines; VHD template setup; deployment from a template; saving deployment as an ARM template; Deploying Windows and Linux Virtual Machines
Manage an Azure virtual machine
Adding data discs; Adding network interfaces Automate configuration management with PowerShell Desired State Configuration (DSC) and VM Agent with custom script extensions VM size management; moving virtual machines from one resource group to another; redistribution of virtual machines.
Manage virtual machine backups
Setting up backup virtual machines; defining a backup policy; implementation of a backup policy; performing VM recovery.
Configuring and managing virtual networks (30-35%)
Create a connection between virtual networks
Creation and tuning of peering VNET; creating and configuring VNET for VNET; checking connection to a virtual network; creating a virtual network gateway.
Implementation and management of a virtual network
Configure private and public IP addresses, network routes, network interface, subnets, and virtual networks.
Setting Name Resolutions
Configure Azure DNS; configuration of user DNS settings; setup of private and public zones of DNS
Creating and Configuring a Network Security Group (NSG)
Creation of safety rules; NSG association with a subnet or network interface; determination of the required ports; assessment of effective safety rules.
Implement Azure Load Balancer
Configure an internal load balancer, configure load balancing rules, configure a public load balancer, troubleshoot a load balancer
Virtual Network Monitoring and Troubleshooting
Control local connection, use network resource monitoring, use Network Watcher, troubleshoot an external network, troubleshoot virtual network connectivity
Azure LAN and Virtual Network Integration
Create and configure Azure VPN gateway, create and configure a VPN connection between sites, set up an express route, check local connection, troubleshoot local connection using Azure.
Identity Management (15-20%)
Azure Active Directory (AD) Management
Adding custom domains; Configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming setting up a self-resetting password; implementation of conditional access policies; managing multiple directories; performing an access review.
Manage Azure AD objects (users, groups, and devices)
Creation of users and groups; Manage user and group properties device settings management; performing bulk user updates
Implement and manage hybrid credentials
Install and configure Azure AD Connect; Configure federation and single sign-on Azure AD Connect Management manage password synchronization and writeback.
Implementation of multi-factor authentication (MFA)
Configuring user accounts for MFA, enabling MFA via mass update, setting up fraud alerts, setting crawling options, setting up trusted IP addresses, setting up verification methods.
To prepare for this exam, Microsoft Learning recommends having practical experience with the technology, using educational resources. Learning resources do not necessarily cover all areas in the exam topic.
AZ-103 Microsoft Azure Administrator (4 days )
* The indicated duration may slightly differ from the time reported by the testing system before the exam, in connection with regularly introduced changes in the complexity and number of questions