Manage Azure identities and governance
20–25% - Manage Microsoft Entra users, groups, licences, external users, and self-service password reset.
- Assign built-in Azure roles and interpret access assignments at different scopes.
- Manage subscriptions, resource groups, tags, locks, Azure Policy, costs, and management groups.
Practice Identity & Governance Questions →
Implement and manage storage
15–20% - Configure storage firewalls, SAS tokens, access keys, and identity-based access for Azure Files.
- Create storage accounts and configure redundancy, replication, encryption, Storage Explorer, and AzCopy.
- Configure Azure Files, Blob Storage, tiers, snapshots, soft delete, lifecycle, and versioning.
Practice Storage Questions →
Deploy and manage Azure compute resources
20–25% - Deploy resources with ARM templates or Bicep files.
- Create and configure virtual machines, disks, availability, and Virtual Machine Scale Sets.
- Provision containers, Azure Container Apps, and App Service plans, TLS, backups, and slots.
Practice Compute Questions →
Implement and manage virtual networking
15–20% - Create virtual networks, subnets, peering, public IPs, user-defined routes, and connectivity troubleshooting.
- Configure NSGs, application security groups, Bastion, service endpoints, and private endpoints.
- Configure Azure DNS and internal or public load balancing.
Practice Virtual Networking Questions →
Monitor and maintain Azure resources
10–15% - Configure Azure Monitor metrics, logs, alerts, Insights, and Network Watcher.
- Implement Azure Backup, Recovery Services vaults, backup policies, and Site Recovery failovers.
Practice Monitoring & Maintenance Questions →