Exam AZ-103 Microsoft Azure Administrator

Languages: English
Starting on May 1, 2019, you only need to pass Exam AZ-103 to earn this certification. This new exam combines the skills covered in AZ-100 and AZ-101 (which retired on May 1, 2019), with the majority of the new exam coming from AZ-100. This exam measures your ability to accomplish the following technical tasks: manage Azure subscriptions and resources; implement and manage storage; deploy and manage virtual machines (VMs); configure and manage virtual networks; and manage identities.

Manage Azure subscriptions and resources (15-20%)

Manage Azure subscriptions
assign administrator permissions
configure cost center quotas and tagging
configure Azure subscription policies at Azure subscription level

Analyze resource utilization and consumption
configure diagnostic settings on resources
create baseline for resources
create and rest alerts
analyze alerts across subscription
analyze metrics across subscription
create action groups
monitor for unused resources
monitor spend
report on spend
utilize Log Search query functions
view alerts in Log Analytics

Manage resource groups
use Azure policies for resource groups
configure resource locks
configure resource policies
identify auditing requirements
implement and set tagging on resource groups
move resources across resource groups
remove resource groups

Managed role based access control (RBAC)
create a custom role
configure access to Azure resources by assigning roles
configure management access to Azure, troubleshoot RBAC, implement RBAC policies, assign RBAC Roles

Implement and manage storage (15-20%)

Create and configure storage accounts
configure network access to the storage account
create and configure storage account
generate shared access signature
install and use Azure Storage Explorer
manage access keys
monitor activity log by using Log Analytics
implement Azure storage replication

Import and export data to Azure
create export from Azure job
create import into Azure job
Use Azure Data Box
configure and use Azure blob storage
configure Azure content delivery network (CDN) endpoints

Configure Azure files
create Azure file share
create Azure File Sync service
create Azure sync group
troubleshoot Azure File Sync

Implement Azure backup
configure and review backup reports
perform backup operation
create Recovery Services Vault
create and configure backup policy
perform a restore operation

Deploy and manage virtual machines (VMs) (15-20%)

Create and configure a VM for Windows and Linux
configure high availability
configure monitoring, networking, storage, and virtual machine size
deploy and configure scale sets

Automate deployment of VMs
modify Azure Resource Manager (ARM) template
configure location of new VMs
configure VHD template
deploy from template
save a deployment as an ARM template
deploy Windows and Linux VMs

Manage Azure VM
add data discs
add network interfaces
automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent by using custom script extensions
manage VM sizes; move VMs from one resource group to another
redeploy VMs

Manage VM backups
configure VM backup
define backup policies
implement backup policies
perform VM restore
Azure Site Recovery

Configure and manage virtual networks (30-35%)

Create connectivity between virtual networks
create and configure VNET peering
create and configure VNET to VNET
verify virtual network connectivity
create virtual network gateway

Implement and manage virtual networking
configure private and public IP addresses, network routes, network interface, subnets, and virtual network

Configure name resolution
configure Azure DNS
configure custom DNS settings
configure private and public DNS zones

Create and configure a Network Security Group (NSG)
create security rules
associate NSG to a subnet or network interface
identify required ports
evaluate effective security rules

Implement Azure load balancer
configure internal load balancer, configure load balancing rules, configure public load balancer, troubleshoot load balancing

Monitor and troubleshoot virtual networking
monitor on-premises connectivity, use Network resource monitoring, use Network Watcher, troubleshoot external networking, troubleshoot virtual network connectivity

Integrate on premises network with Azure virtual network
create and configure Azure VPN Gateway, create and configure site to site VPN, configure Express Route, verify on premises connectivity, troubleshoot on premises connectivity with Azure

Manage identities (15-20%)

Manage Azure Active Directory (AD)
add custom domains
Azure AD Join
configure self-service password reset
manage multiple directories

Manage Azure AD objects (users, groups, and devices)
create users and groups
manage user and group properties
manage device settings
perform bulk user updates
manage guest accounts

Implement and manage hybrid identities
install Azure AD Connect, including password hash and pass-through synchronization
use Azure AD Connect to configure federation with on-premises Active Directory Domain Services (AD DS)
manage Azure AD Connect
manage password sync and password writeback

Implement multi-factor authentication (MFA)
configure user accounts for MFA, enable MFA by using bulk update, configure fraud alerts, configure bypass options, configure Trusted IPs, configure verification methods

Question: 1
You have an Azure subscription that contains 10 virtual machines.
You need to ensure that you receive an email message when any virtual machines are powered off, restarted, or deallocated.

What is the minimum number of rules and action groups that you require?

A. three rules and three action groups
B. one rule and one action group
C. three rules and one action group
D. one rule and three action groups

Answer: C

Question: 3
You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active
Directory (Azure AD) tenant named contoso.com.
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions.
You need to ensure that you can view all the resources in all the subscriptions.
What should you do?

A. From the Azure portal, modify the profile settings of your account.
B. From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.
C. From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.
D. From the Azure portal, modify the properties of the Azure AD tenant.

Answer: C

Question: 4
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group
named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.
Does this meet the goal?

A. Yes
B. No

Answer: B

Question: 5
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group
named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the RG1 blade, you click Deployments.
Does this meet the goal?

A. Yes
B. No

Answer: A

Question: 6
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group
named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers.
Does this meet the goal?

A. Yes
B. No

Answer: B