Study the official exam domains. Each lesson teaches the concept from the vendor exam guide and first-party docs.
This page shows the complete course curriculum. Enroll now to access all video lessons, hands-on projects, and downloadable resources.
Enroll in This CourseOfficial Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Create users and groups, Manage user and group properties, and Manage licenses in Microsoft Entra ID. This lesson is the...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Create users and groups and Manage user and group properties on the same Entra skill. Lesson 1.1 created the person. This...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Manage external users as its own Entra task. Lesson 1.1 created a member whose password lives here. This lesson is the gu...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Configure self-service password reset as its own Entra task. Lesson 1.1 created the member whose password lives here. Les...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Manage built-in Azure roles, Assign roles at different scopes, and Interpret access assignments as the whole access skill...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Implement and manage Azure Policy as the first subscription and governance task. Lesson 1.5 decided who may act. This les...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Configure resource locks as its own governance task. Lesson 1.5 said who may act. Lesson 1.6 said what a resource may loo...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Apply and manage tags on resources as its own governance task. Lesson 1.7 locked the box. This lesson writes a label on t...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Manage subscriptions and Configure management groups as two governance tasks. Lesson 1.5 already used both as RBAC scopes...
Official Domain 1 still sits on Manage Azure identities and governance. Official Domain 1 names Manage resource groups and Manage costs by using alerts, budgets, and Azure Advisor recommendations as the last two gover...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Create and configure storage accounts as the first account skill. This lesson is the account object itself. Lesson 2.2 is the redun...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Configure Azure Storage redundancy as its own account skill. Lesson 2.1 created the mailbox. This lesson is how many copies Azure k...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Configure object replication as its own account skill. Lesson 2.2 copied the whole account to a pair Azure chose. This lesson copie...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Configure storage account encryption as its own account skill. Lesson 2.1 already forced a create-time choice for infrastructure en...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Manage data by using Azure Storage Explorer and AzCopy as the tools skill. Lessons 2.1 through 2.4 built the account. This lesson i...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Configure Azure Storage firewalls and virtual networks as the first Configure access to storage skill. Lessons 2.1 through 2.5 buil...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names three Configure access to storage skills in a row: Create and use shared access signature (SAS) tokens, Configure stored access pol...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Configure identity-based access for Azure Files as the last Configure access to storage skill. Lesson 2.7 was the key and the SAS....
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 packs five Configure Azure Files and Azure Blob Storage skills onto this lesson: Create and configure a container, Configure storage tier...
Official Domain 2 still sits on Implement and manage storage. Official Domain 2 names Create and configure a file share in Azure Files, then Configure snapshots and soft delete for Azure Files. Lesson 2.8 already hung...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Automate deployment of resources by using Azure Resource Manager templates or Bicep files, then asks you to interpret...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Create a virtual machine as the first Create and configure virtual machines skill. This lesson is the VM object and th...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Configure encryption at host for Azure virtual machines. This lesson is that host switch and the keys it can wrap. Les...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Move a virtual machine to another resource group, subscription, or region. This lesson is those three destinations. Le...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Manage virtual machine sizes and Manage virtual machine disks as two Create and configure virtual machines skills. Thi...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Deploy virtual machines to availability zones and availability sets, then Deploy and configure an Azure Virtual Machin...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Configure Azure Container Registry, then asks you to create a registry, configure access, and pull images from it. Thi...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Configure Azure Container Instances, configure Azure Container Apps, and configure sizing and scaling for containers....
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Create and configure an Azure App Service plan, configure scaling, and create an App Service. This lesson is that plan...
Official Domain 3 still sits on Deploy and manage Azure compute resources. Official Domain 3 names Configure certificates and TLS, map custom DNS, configure backup, configure networking, and configure deployment slots...
The April 2026 AZ-104 study guide still weights Implement and manage virtual networking at 15 to 20 percent. Official Domain 4 names Create and configure virtual networks and subnets as the first Configure and manage...
Official Domain 4 lists Create and configure virtual network peering right after the subnet skill. Lesson 4.1 already painted two non-overlapping CIDR lots. This lesson is the private hallway that joins those lots on...
The live study guide names Configure public IP addresses as its own Configure and manage virtual networks in Azure skill. Lesson 4.1 gave the NIC a private address from a subnet. This lesson is the separate Azure reso...
Configure user-defined routes is the fourth Configure and manage virtual networks in Azure skill on the April 2026 outline. Lesson 4.1 already used Azure's default routes. Lesson 4.2 already showed a VNet Peering syst...
Create and configure network security groups and application security groups is the first Configure secure access to virtual networks skill. Official Domain 4 also names Evaluate effective security rules in NSGs on th...
Implement Azure Bastion is the next Configure secure access to virtual networks skill after the NSG. Lesson 4.5 already refused 3389 from the internet. This lesson is the managed jump host that reaches the guest on it...
Configure service endpoints for Azure platform as a service (PaaS) is the next Configure secure access to virtual networks skill after Bastion. Lesson 4.6 walked you to a VM desktop. This lesson is the subnet switch t...
Configure private endpoints for Azure PaaS is the last Configure secure access to virtual networks skill. Lesson 4.7 kept the public VIP and changed the source IP. This lesson drops a NIC into your subnet and maps one...
Configure Azure DNS is the first Configure name resolution and load balancing skill. Lesson 4.8 already needed a private zone named privatelink.blob.core.windows.net. This lesson is the product that holds that zone, t...
Configure an internal or public load balancer is the last Configure name resolution and load balancing skill. Official Domain 4 also names Troubleshoot load balancing on the same group. Lesson 4.9 already separated Tr...
Enroll in [AZ-104] Azure Administrator Study Notes today and get instant access to all 40 lessons, hands-on projects, and expert support.
Enroll Now - It's Free!
