Manage Azure identities and governance (15–20%)
Manage Azure Active Directory (Azure AD) objects:
create users and groups
create administrative units
manage user and group properties
manage device settings
perform bulk user updates
manage guest accounts
configure Azure AD join
configure self-service password reset
Manage role-based access control (RBAC):
Manage subscriptions and governance:
Implement and manage storage (15–20%)
Secure storage:
configure network access to storage accounts
create and configure storage accounts
generate shared access signature (SAS) tokens
manage access keys
configure Azure AD authentication for a storage account
configure access to Azure Files
Manage storage:
export from Azure job
import into Azure job
install and use Azure Storage Explorer
copy data by using AZCopy
implement Azure Storage replication
configure blob object replication
Configure Azure files and Azure Blob Storage:
create an Azure file share
create and configure Azure File Sync service
configure Azure Blob Storage
configure storage tiers for Azure Blob Storage
configure blob lifecycle management
Deploy and manage Azure compute resources (20–25%)
Automate deployment of virtual machines (VMs) by using Azure Resource Manager templates:
modify an Azure Resource Manager template
configure a virtual hard disk (VHD) template
deploy from a template
save a deployment as an Azure Resource Manager template
deploy virtual machine extensions
Configure VMs:
configure Azure Disk Encryption
move VMs from one resource group to another
manage VM sizes
add data disks
configure networking
redeploy VMs
configure high availability
deploy and configure scale sets
Create and configure containers:
configure sizing and scaling for Azure Container Instances
configure container groups for Azure Container Instances
configure storage for Azure Kubernetes Service (AKS)
configure scaling for AKS
configure network connections for AKS
upgrade an AKS cluster
Create and configure Azure App Service:
create an App Service plan
configure scaling settings in an App Service plan
create an App Service
secure an App Service
configure custom domain names
configure backup for an App Service
configure networking settings
configure deployment settings
Configure and manage virtual networking (25–30%)
Implement and manage virtual networking
create and configure virtual networks, including peering
configure private and public IP addresses
configure user-defined network routes
implement subnets
configure endpoints on subnets
configure private endpoints
configure Azure DNS, including custom DNS settings and private or public DNS zones
Secure access to virtual networks
Configure load balancing
configure Azure Application Gateway
configure an internal or public load balancer
troubleshoot load balancing
Monitor and troubleshoot virtual networking
monitor on-premises connectivity
configure and use Network Azure Monitor for Networks
use Azure Network Watcher
troubleshoot external networking
troubleshoot virtual network connectivity
Integrate an on-premises network with an Azure virtual network
create and configure Azure VPN Gateway
create and configure Azure ExpressRoute
configure Azure Virtual WAN
Monitor and back up Azure resources (10–15%)
Monitor resources by using Azure Monitor
configure and interpret metrics
configure Azure Monitor logs
query and analyze logs
set up alerts and actions
configure Application Insights
Implement backup and recovery
create a Recovery Services vault
create and configure backup policy
perform backup and restore operations by using Azure Backup
perform site-to-site recovery by using Azure Site Recovery
configure and review backup reports
