Book Image

Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond - Second Edition

By : Riaan Lowe, Donovan Kelly
4.5 (2)
Book Image

Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond - Second Edition

4.5 (2)
By: Riaan Lowe, Donovan Kelly

Overview of this book

Exam Ref AZ-104 Microsoft Azure Administrator Certification and Beyond covers all the exam objectives and will help you to earn the Microsoft Azure Administrator certification with ease. Whether you’re studying to pass the AZ-104 exam or just want hands-on experience in administering Azure, this AZ-104 study guide will help you to achieve your objectives. This book covers the latest Azure features and capabilities around configuring, managing, and securing Azure resources. Adhering to Microsoft's AZ-104 exam syllabus, this guide is divided into five modules. The first module will show you how to manage Azure identities and governance. You'll find out how to configure Azure subscription policies at the Azure subscription level and use Azure policies for resource groups. After that, the book covers techniques related to implementing and managing storage in Azure, enabling you to create and manage Azure Storage, including File and Blob storage. In the second module, you’ll learn how to deploy and manage Azure compute resources. The third and fourth modules will teach you about configuring and managing virtual networks and monitoring and backing up Azure resources. Finally, you'll work through mock tests, with answers provided, to prepare for this exam. By the end of this book, you'll have the skills needed to pass the AZ-104 exam and be able to expertly manage Azure.
Table of Contents (30 chapters)
1
Part 1: Managing Azure Identities and Governance
7
Part 2: Implementing and Managing Storage
11
Part 3: Deploying and Managing Azure Compute Resources
17
Part 4: Configuring and Managing Virtual Networking
24
Part 5: Monitoring and Backing Up Azure Resources

Implementing subnets

Inside a VNet, subnets allow you to segment your IP address ranges in which to place your resources. Resources in a single subnet get an IP address from the subnet IP address range. Resources in subnets within the same VNet can talk to each other. A VNet can have one or more subnets. Traffic can be filtered between subnets either via Network Security Groups (NSGs) or UDRs. It is also important to know that Azure reserves five IP addresses within each subnet that cannot be used. The reason for this is that these IPs are reserved for the network address, the Azure default gateway, Azure DNS, and the network broadcast address. An example of this would be the following:

Let's say there is a 10.1.1.0/24 subnet; the following addresses are reserved:

  • 10.1.1.0: This is reserved for the network address.
  • 10.1.1.1: This is reserved for the default gateway.
  • 10.1.1.2 and 10.1.1.3: These are reserved by Azure to map DNS IPs to the VNet space.
  • 10.1...