Microsoft Azure Administrator – Exam Guide AZ-103: Your in-depth certification guide in becoming Microsoft Certified Azure Administrator Associate

Microsoft Azure Administrator – Exam Guide AZ-103

Your in-depth certification guide in becoming Microsoft Certified Azure Administrator Associate

Sjoukje Zaal

BIRMINGHAM - MUMBAI

Microsoft Azure Administrator – Exam Guide AZ-103

Copyright © 2019 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Commissioning Editor: Karan Sadawana

Acquisition Editor: Rahul Nair

Content Development Editor: Nithin George Varghese

Technical Editor: Komal Karne

Copy Editor: Safis Editing

Project Coordinator: Nusaiba Ansari

Proofreader: Safis Editing

Indexer: Tejal Daruwale Soni

Graphics: Jisha Chirayil

Production Coordinator: Jyoti Chauhan

First published: May 2019

Production reference: 1300519

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham

B3 2PB, UK.

ISBN 978-1-83882-902-5

www.packtpub.com

mapt.io

Mapt is an online digital library that gives you full access to over 5,000 books and videos, as well as industry leading tools to help you plan your personal development and advance your career. For more information, please visit our website.

Why subscribe?

Spend less time learning and more time coding with practical eBooks and Videos from over 4,000 industry professionals

Improve your learning with Skill Plans built especially for you

Get a free eBook or video every month

Mapt is fully searchable

Copy and paste, print, and bookmark content

Packt.com

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.packt.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at customercare@packtpub.com for more details.

At www.packt.com, you can also read a collection of free technical articles, sign up for a range of free newsletters, and receive exclusive discounts and offers on Packt books and eBooks. 

Contributors

About the author

Sjoukje Zaal is a Microsoft Principal Architect  and Microsoft Azure MVP with over 15 years' experience providing architecture, development, consultancy, and design expertise. She works at Ordina, a system integrator based in the Netherlands.

She loves to share her knowledge and is active in the Microsoft community as a co-founder of the Dutch user groups SP&C NL and MixUG. She is also a board member of Azure Thursdays. Sjoukje is a public speaker and is involved in organizing events. She has written several books, writes blogs and is active on the Microsoft Tech Community. Sjoukje is also part of the Diversity and Inclusion Advisory Board.

About the reviewers

Sander Rossel is a Microsoft-certified professional developer with experience and expertise in .NET and .NET Core (C#, ASP.NET, and Entity Framework), SQL Server, Azure, Azure DevOps, JavaScript, and other technologies. He has an interest in various technologies including, but not limited to, cloud computing, NoSQL, continuous integration/continuous deployment, functional programming, and software quality in general. In his spare time, he writes articles for MSDN, CodeProject, and his own blog, as well as books about object-oriented programming, databases, and Azure.

I'd like to thank Sjoukje Zaal for having me as a reviewer. She's achieved great work by getting this book written and published. It was, again, a pleasure working together!

Steef-Jan Wiggers is all in on cloud technology. He works as an Azure technology consultant in the Netherlands and has over 20 years' experience in a wide variety of scenarios, including custom .NET solution development, overseeing complex enterprise integrations, mentoring, and consulting. He loves challenges in the Microsoft arena, building his approach to tackling them on his domain knowledge in the utilities, insurance, healthcare, agriculture, (local) government, bio-sciences, retail, travel, and logistics sectors. Furthermore, he is an InfoQ editor for cloud and a global public speaker, and also is very active in the community as a blogger. For these efforts, Microsoft has recognized him a Microsoft MVP for the past nine years. He can be found on Twitter as @steefjan.

I want to thank Packt for providing me with the opportunity to review this excellent exam guide on Azure administration. Sjouke Zaal, the author, has done a fantastic job writing this guide to help those who want to pass the AZ-103 exam.

Packt is searching for authors like you

If you're interested in becoming an author for Packt, please visit authors.packtpub.com and apply today. We have worked with thousands of developers and tech professionals, just like you, to help them share their insight with the global tech community. You can make a general application, apply for a specific hot topic that we are recruiting an author for, or submit your own idea.

Table of Contents

Title Page

Copyright and Credits

Microsoft Azure Administrator – Exam Guide AZ-103

About Packt

Why subscribe?

Packt.com

Contributors

About the author

About the reviewers

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Download the example code files

Download the color images

Conventions used

Get in touch

Reviews

Section 1: Managing Azure Subscriptions and Resources

Managing Azure Subscriptions and Resource Groups

Azure subscriptions and resource groups

Azure subscriptions

Azure resource groups

Assigning administrator permissions

Assigning global administrator permissions

Assigning owner permissions

Configuring Azure subscription policies

Implementing and setting tagging on resource groups

Configuring cost center quotas

Configuring resource locks

Moving resources across resource groups

Removing resource groups

Summary

Questions

Further reading

Analyzing Resource Utilization and Consumption

Azure Monitor

Creating and analyzing metrics and alerts

Metrics

Creating a metric

Alerts

Creating an alert

Configuring diagnostic settings on resources

Enabling diagnostic settings

Viewing alerts in Log Analytics

Utilizing Log Search Query functions

Querying logs in Azure Monitor

Summary

Questions

Further reading

Managing Role-Based Access Control

Technical requirements

RBAC

Built-in roles

Custom roles

Configuring access to Azure resources by assigning roles

Configuring management access to Azure

Creating a custom role

Azure Policy

Implementing and assigning Azure policies

Summary

Questions

Further reading

Section 2: Implementing and Managing Storage

Creating and Configuring Storage Accounts

Technical requirements

Azure storage accounts

Storage account types

General-purpose v1

Blob storage

General-purpose v2 (GPv2)

Storage replication types

LRS

ZRS

GRS

RA-GRS

Azure blob storage

Access tiers

Hot

Cool

Archive

Azure file storage

Azure disk storage

Standard disk storage

Premium disk storage

Unmanaged versus managed disks

Creating and configuring storage accounts

Installing and using Azure Storage Explorer

Configuring network access to the storage account

SAS and access keys

Managing access keys

Generating an SAS

Implementing Azure storage replication

Summary

Questions

Further reading

Importing and Exporting Data to Azure

Technical requirements

Configuring and using Azure Blob Storage

Creating import into, and export from Azure Job

Azure CDN

Configuring Azure CDN endpoints

Azure Data Box

Summary

Questions

Further reading

Configuring Azure Files and Implementing Azure Backup

Technical requirements

Azure file share and Azure file share sync service

Creating an Azure file share

Azure file share sync service

Azure Backup

Azure Site Recovery

Performing a backup and restore operation

Creating a Recovery Services vault

Configuring a backup policy

Trigger an on-demand backup

Restore the backup

Summary

Questions

Further reading

Section 3: Deploying and Managing Virtual Machines

Creating and Configuring VMs for Windows and Linux

Technical requirements

VMs

VM series and sizes

Managed disks

Availability sets

Fault domains and update domains

Deploying Windows and Linux VMs

Deploying a Windows VM from the Azure portal

Deploying a Windows VM from PowerShell

VM scale sets

Deploying and configuring scale sets

Modifying and deploying ARM templates

Modifying an ARM template

Save a deployment as an ARM template

Summary

Questions

Further reading

Managing Azure VMs and VM Backups

Technical requirements

Managing VM sizes

Resizing a VM in the Azure portal

Resizing a VM using the CLI

Redeploying VMs

Redeploying a VM from the Azure portal

Redeploying a VM from PowerShell 

Moving VMs

Adding data disks and network interfaces

Adding a data disk

Adding a network interface

Automating configuration management

Configuring VM backup and restore operations

Creating a Recovery Services vault

Creating and configuring a backup policy

Restoring a backup

Summary

Questions

Further reading

Section 4: Deploying and Managing Virtual Networks

Implementing and Managing Virtual Networking

Technical requirements

Azure VNet

IP addresses

Public IP address

Private IP addresses

Configuring virtual networks and subnets

Configuring private and public IP addresses

User-defined routes

Creating user-defined routes

VNet peering

Creating and configuring VNet peering

Summary

Questions

Further reading

Integrating On-Premise Networks with Azure Virtual Networks

Technical requirements

Azure VPN gateway

S2S VPNs

Multi-site VPNs

P2S VPNs

ExpressRoute

Creating and configuring an Azure VPN gateway

Creating and configuring the on-premises VPN device

Creating a virtual network

Creating an Azure VPN gateway

Creating and configuring S2S VPN

Creating the local network gateway

Configuring the on-premises VPN device

Verifying on-premises connectivity

VNet-to-VNet

Summary

Questions

Further reading

Monitoring and Troubleshooting Virtual Networking

Network Watcher

Network resource monitoring

Installing the Network Watcher agent

Enabling Network Watcher

Monitoring the network connectivity

Managing virtual network connectivity

Network topology

Monitoring and troubleshooting on-premises connectivity

Network Performance Monitor

Next hop

VPN troubleshoot

Managing external networking

IP flow verify

Using IP flow verify

Effective security rules

Connection troubleshoot

Summary

Questions

Further reading

Azure Security Groups and Azure DNS

Technical requirements

NSGs

Service tags

Creating and configuring an NSG

Associating an NSG with a subnet or NIC

Creating and evaluating security rules

Azure DNS

Domain names

Public DNS zones

Private DNS zones

Record types

Configuring a public DNS zone

Configuring a private DNS zone

Summary

Questions

Further reading

Implementing Azure Load Balancer

Technical requirements

Azure Load Balancer

Configuring an internal load balancer

Creating the VNet

Creating the VMs

Creating the load balancer

Creating a backend address pool

Creating health probes

Creating load balancing rules

Testing the load balancer

Configuring a public load balancer

Creating the load balancer

Creating a resource group

Creating a public IP address

Creating the load balancer

Creating the health probe

Creating the load balancer rule

Creating the virtual network

Creating an NSG

Creating an NSG rule

Creating NICs

Creating backend servers

Creating an availability set

Creating two virtual machines

Testing the load balancer

Summary

Questions

Further reading

Section 5: Managing Identities

Managing Azure Active Directory

Azure AD

Creating and managing users and groups

Creating users in Azure AD

Creating groups in Azure AD

Adding and managing guest accounts

Performing bulk user updates

Configuring self-service password reset

Azure AD Join

Managing device settings

Adding custom domains

Summary

Questions

Further reading

Implementing and Managing Hybrid Identities

Azure AD Connect

Azure AD password hash synchronization

Azure AD pass-through authentication

Installing Azure AD Connect

Managing Azure AD Connect

Password writeback

Managing password writeback

Enabling password writeback in Azure AD Connect

Enabling password writeback in the Azure portal

Password sync

Summary

Questions

Further reading

Implementing Multi-Factor Authentication

Azure MFA

Enabling MFA for an Azure AD tenant

Configuring user accounts for MFA

Configuring the verification methods

Configuring trusted IPs

Configuring fraud alerts

Configuring bypass options

Summary

Questions

Further reading

Mockup Test Questions

Chapter 1, Managing Azure Subscriptions and Resource Groups Access Control

Chapter 2, Analyzing Resource Utilization and Consumption

Chapter 3, Managing Role-Based Access Control

Chapter 4, Creating and Configuring Storage Accounts

Chapter 5, Importing and Exporting Data to Azure

Chapter 6, Configuring Azure Files and Implementing Azure Backup

Chapter 7, Creating and Configuring VMs for Windows and Linux

Chapter 8, Managing Azure VMs and VM Backups

Chapter 9, Implementing and Managing Virtual Networking

Chapter 10, Integrating On-Premise Networks with Azure Virtual Networks

Chapter 11, Monitoring and Troubleshooting Virtual Networking

Chapter 12, Azure Security Groups and Azure DNS

Chapter 13, Implementing Azure Load Balancer

Chapter 14, Managing Azure Active Directory 

Chapter 15, Implementing and Managing Hybrid Identities

Chapter 16, Implementing Multi-Factor Authentication

Mockup Test Answers

Chapter 1, Managing Azure Subscriptions and Resource Groups

Chapter 2, Analyzing Resource Utilization and Consumption

Chapter 3, Managing Role-Based Access Control

Chapter 4, Creating and Configuring Storage Accounts

Chapter 5, Importing and Exporting Data to Azure

Chapter 6, Configuring Azure Files and Implementing Azure Backup

Chapter 7, Creating and Configuring VMs for Windows and Linux

Chapter 8, Managing Azure VMs and VM Backups

Chapter 9, Implementing and Managing Virtual Networking

Chapter 10, Integrating on-Premise Networks with Azure Virtual Networks

Chapter 11, Monitoring and Troubleshooting Virtual Networking

Chapter 12, Azure Security Groups and Azure DNS

Chapter 13, Implementing Azure Load Balancer

Chapter 14, Managing Azure Active Directory

Chapter 15, Implementing and Managing Hybrid Identities

Chapter 16, Implementing Multi-Factor Authentication

Assessments

Chapter 1, Managing Azure Subscriptions and Resource Groups

Chapter 2, Analyzing Resource Utilization and Consumption

Chapter 3, Managing Role-Based Access Control

Chapter 4, Creating and Configuring Storage Accounts

Chapter 5, Importing and Exporting Data to Azure

Chapter 6, Configuring Azure Files and Implementing Azure Backup

Chapter 7, Creating and Configuring VMs for Windows and Linux

Chapter 8, Managing Azure VMs and VM Backups

Chapter 9, Implementing and Managing Virtual Networking

Chapter 10, Integrating On-Premise Networks with Azure Virtual Networks

Chapter 11, Monitoring and Troubleshooting Virtual Networking

Chapter 12, Azure Security Groups and Azure DNS

Chapter 13, Implementing Azure Load Balancer

Chapter 14, Managing Azure Active Directory

Chapter 15, Implementing and Managing Hybrid Identities

Chapter 16, Implementing Multi-Factor Authentication

Other Books You May Enjoy

Leave a review - let other readers know what you think

Preface

Azure is an ever-evolving platform. It offers an environment on the cutting edge of technology that suits many different industry requirements. New capabilities and features are coming out fast, which makes it difficult to stay up to date. This book will give you a complete overview of all the current features and capabilities that Azure has to offer from an administrative perspective, and is a complete guide to preparing for the AZ-103 exam.

This book will cover all the exam objectives. It will start with how to manage Azure subscriptions and resources, where you will learn how to manage Azure subscriptions and resource groups, analyze resource utilization and consumption, and manage role-based access control (RBAC). In the second part, you will learn how to implement and manage storage by creating and configuring storage accounts, how to import and export data to Azure, and how to configure Azure Files and implement Azure Backup. The third part will cover how to deploy and manage virtual machines (VMs), where you will learn how to create and configure VMs for Windows and Linux and how to manage Azure VMs and VM backups. The fourth part of this book will cover how to configure and manage virtual networks, by covering implementing and managing virtual networking; how to integrate on-premise networks with Azure virtual networks; how to monitor and troubleshoot virtual networking; how to create and manage Azure Security Groups and Azure DNS; and how to implement Azure Load Balancer. The last part of this book will cover how to manage identities, where you will learn how to manage Azure Active Directory (AD), how to implement and manage hybrid identities, and how to implement multi-factor authentication (MFA).

Each chapter will conclude with a Further reading section, which is a very important part of each chapter, as it will give you extra, and sometimes crucial, information for passing the AZ-103 exam. As the questions on the exam will change slightly over time and this book will eventually become outdated, the Further reading sections will be the place that will provide you with all the updates.

Who this book is for

This book targets experienced administrators who want to pass the Exam AZ-103: Microsoft Azure Administrator and broaden their knowledge of Azure from an administrative perspective.

What this book covers

Chapter 1, Managing Azure Subscriptions and Resource Groups, covers how to configure Azure subscriptions and resource groups, assign administrator permissions, configure Azure subscription policies, implement and set tagging on resource groups, configure cost center quotas, configure resource locks, move resources across resource groups, and remove resource groups.

Chapter 2, Analyzing Resource Utilization and Consumption, covers Azure Monitor, including how to create and analyze metric and alerts, create action groups, configure diagnostic settings on resources, use Azure Log Analytics, and utilize Log Search Query functions.

Chapter 3, Managing Role-Based Access Control, covers RBAC, configuring access to Azure resources by assigning roles, configuring management access to Azure, creating a custom role, Azure Policy, and implementing and assigning Azure policies.

Chapter 4, Creating and Configuring Storage Accounts, covers Azure storage accounts, how to create and configure a storage account, install and use Azure Storage Explorer, configure network access to the storage account, generate and manage SAS, and implement Azure storage replication.

Chapter 5, Importing and Exporting Data to Azure, covers how to configure and use Azure Blob storage, how to import into and export from Azure jobs, how to use Azure Content Delivery Network (CDN), how to configure Azure CDN endpoints, and how to use Azure Data Box.

Chapter 6, Configuring Azure Files and Implementing Azure Backup, covers how to create Azure file share and Azure file share sync services, how to use Azure Backup, how to use Azure Site Recovery, how to perform a backup and restore operation, how to create Recovery Services vaults, and creating and configuring a backup policy.

Chapter 7, Creating and Configuring VMs for Windows and Linux, covers VMs, how to deploy Windows and Linux VMs, configuring high availability, deploying and configuring scale sets, and modifying and deploying Azure Resource Manager (ARM) templates.

Chapter 8, Managing Azure VMs and VM Backups, covers how to manage VM sizes, redeploying VMs, moving VMs, adding data disks and network interfaces, automating configuration management, and configuring VM backup and restore.

Chapter 9, Implementing and Managing Virtual Networking, covers Azure VNet, IP addresses, how to configure subnets and VNets, configuring private and public IP addresses, and creating and configuring VNetpeering.

Chapter 10, Integrating On-Premise Networks with Azure Virtual Networks, covers Azure Virtual