Azure Infrastructure and Deployment


Exam AZ-100: Microsoft Azure Infrastructure and Deployment

Skills measured

  • Manage Azure subscriptions and resources (15-20%)
  • Implement and manage storage (20-25%)
  • Deploy and manage virtual machines (VMs) (20-25%)
  • Configure and manage virtual networks (20-25%)
  • Manage identities (15-20%)

Exam AZ-100: Microsoft Azure Infrastructure and
Deployment – Skills Measured
Manage Azure subscriptions and resources (15-20%)
Manage Azure subscriptions
 assign administrator permissions
 configure cost center quotas and tagging
 configure Azure subscription policies at Azure subscription level
Analyze resource utilization and consumption
 configure diagnostic settings on resources
 create baseline for resources
 create and rest alerts
 analyze alerts across subscription
 analyze metrics across subscription
 create action groups
 monitor for unused resources
 monitor spend
 report on spend
 utilize Log Search query functions
 view alerts in Log Analytics
Manage resource groups
 use Azure policies for resource group
 configure resource locks
 configure resource policies
 implement and set tagging on resource groups
 move resources across resource groups
 remove resource groups
Implement and manage storage (20-25%)
Create and configure storage accounts
 configure network access to the storage account
 create and configure storage account
 generate shared access signature
 install and use Azure Storage Explorer
 manage access keys
 monitor activity log by using Log Analytics
 implement Azure storage replication
Import and export data to Azure
 create export from Azure job
 create import into Azure job
 use Azure Data Box
 configure and use Azure blob storage
 configure Azure content delivery network (CDN) endpoints
Configure Azure files
 create Azure file share
 create Azure File Sync service
 create Azure sync group
 troubleshoot Azure File Sync
Implement Azure backup
 configure and review backup reports
 perform backup operation
 create Recovery Services Vault
 create and configure backup policy
 perform a restore operation
Deploy and manage virtual machines (VMs) (20-25%)
Create and configure a VM for Windows and Linux
 configure high availability
 configure monitoring, networking, storage, and virtual machine size
 deploy and configure scale sets
Automate deployment of VMs
 modify Azure Resource Manager (ARM) template
 configure location of new VMs
 configure VHD template
 deploy from template
 save a deployment as an ARM template
 deploy Windows and Linux VMs
Manage Azure VM
 add data discs
 add network interfaces
 automate configuration management by using PowerShell Desired State
Configuration (DSC) and VM Agent by using custom script extensions
 manage VM sizes
 move VMs from one resource group to another
 redeploy VMs
Manage VM backups
 configure VM backup
 define backup policies
 implement backup policies
 perform VM restore
Configure and manage virtual networks (20-25%)
Create connectivity between virtual networks
 create and configure VNET peering
 create and configure VNET to VNET
 verify virtual network connectivity
 create virtual network gateway
Implement and manage virtual networking
 configure private and public IP addresses, network routes, network interface, subnets,
and virtual network
Configure name resolution
 configure Azure DNS
 configure custom DNS settings
 configure private and public DNS zones
Create and configure a Network Security Group (NSG)
 create security rules
 associate NSG to a subnet or network interface
 identify required ports
 evaluate effective security rules
Manage identities (15-20%)
Manage Azure Active Directory (AD)
 add custom domains
 configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming
 configure self-service password reset
 implement conditional access policies
 manage multiple directories
 perform an access review
Manage Azure AD objects (users, groups, and devices)
 create users and groups
 manage user and group properties
 manage device settings
 perform bulk user updates
Implement and manage hybrid identities
 install and configure Azure AD Connect
 configure federation and single sign-on
 manage Azure AD Connect
 manage password sync and writeback