Manage storage accounts

• configure network access to storage accounts

• create and configure storage accounts

• generate shared access signature

• manage access keys

• implement Azure storage replication

• configure Azure AD Authentication for a storage account

Manage data in Azure Storage

• export from Azure job

• import into Azure job

• install and use Azure Storage Explorer

• copy data by using AZ Copy

Configure Azure files and Azure blob storage

• create an Azure file share

• create and configure Azure File Sync service

• configure Azure blob storage

• configure storage tiers for Azure blobs

Configure VMs for high availability and scalability

• configure high availability

• deploy and configure scale sets

Automate deployment and configuration of VMs

• modify Azure Resource Manager (ARM) template

• configure VHD template

• deploy from template

• save a deployment as an ARM template

• automate configuration management by using custom script extensions

Create and configure VMs

• configure Azure Disk Encryption

• move VMs from one resource group to another

• manage VM sizes

• add data discs

• configure networking

• redeploy VMs

Create and configure containers

• create and configure Azure Kubernetes Service (AKS)

• create and configure Azure Container Instances (ACI)

• NOT: selecting a container solution architecture or product; container registry settings

Create and configure Web Apps

• create and configure App Service

• create and configure App Service Plans

• NOT: Azure Functions; Logic Apps; Event Grid

Implement and manage virtual networking

• create and configure VNET peering

• configure private and public IP addresses, network routes, network interface, subnets, and virtual network

Configure name resolution

• configure Azure DNS

• configure custom DNS settings

• configure a private or public DNS zone

Secure access to virtual networks

• create security rules

• associate an NSG to a subnet or network interface

• evaluate effective security rules

• deploy and configure Azure Firewall

• deploy and configure Azure Bastion Service

• NOT: Implement Application Security Groups; DDoS

Configure load balancing

• configure Application Gateway

• configure an internal load balancer

• configure load balancing rules

• configure a public load balancer

• troubleshoot load balancing

• NOT: Traffic Manager and Front Door and Private Link

Monitor and troubleshoot virtual networking

• monitor on-premises connectivity

• use Network Performance Monitor

• use Network Watcher

• troubleshoot external networking

• troubleshoot virtual network connectivity

Integrate an on-premises network with an Azure virtual network

• create and configure Azure VPN Gateway

• create and configure VPNs

• configure ExpressRoute

• configure Azure Virtual WAN

Monitor resources by using Azure Monitor

• configure and interpret metrics

• analyze metrics across subscriptions

• configure Log Analytics

• implement a Log Analytics workspace

• configure diagnostic settings

• query and analyze logs

• create a query

• save a query to the dashboard

• interpret graphs

• set up alerts and actions

• create and test alerts

• create action groups

• view alerts in Azure Monitor

• analyze alerts across subscriptions

• configure Application Insights

• NOT: Network monitoring

Implement backup and recovery

• configure and review backup reports

• perform backup and restore operations by using Azure Backup Service

• create a Recovery Services Vault

• use soft deletes to recover Azure VMs

• create and configure backup policy

• perform site-to-site recovery by using Azure Site Recovery

• NOT: SQL or HANA