AZ-305 Guide Path 1 Β· Architect design prerequisites

AZ-104 Refresher

A 15-hour refresher of the Azure Administrator exam, written as a stepping stone to AZ-305. It covers the AZ-104 skills outline and the AZ-305 prerequisites learning path, including the Cloud Adoption Framework and the Well-Architected Framework. Each chapter starts with theory and ends with a hands-on lab in your own subscription.

πŸ“– Theory 9 h 00 m πŸ›  Labs 6 h 00 m Skills outline: 26 Oct 2023 (still current)

0 of 13 chapters completed

How this guide works

You build one lab environment in one resource group, and every chapter adds something to it. The VNet from chapter 3 hosts the VMs of chapter 5, which sit behind the load balancer of chapter 6, which reach the storage account of chapter 7 over a private endpoint, and so on. In chapter 10 you back up and replicate what you built, then delete everything. Chapters 11 and 12 then look at the bigger picture, with self-contained labs.

Internet rg-az104-labΒ· westeurope Β· tags inherited by policy (ch2) lbe-web Β· public LB ch6 vnet-hub10.10.0.0/16 Β· ch3 snet-shared10.10.1.0/24 Private DNS zonesaz104.lab Β· privatelink.file… peering vnet-spoke10.20.0.0/16 Β· ch3 snet-web 10.20.1.0/24nsg-web Β· asg-web Β· rt-spoke vm-web1zone 1 Β· ch5 vm-web2zone 2 Β· ch5 snet-dataprivate endpoint Β· ch7 snet-appBicep (ch4) Β· App Svc (ch8) Bastion Developer Β· ch6 staz104xx01blob container + file share Β· ch7 acraz104xx Β· ACR Β· ch8 ACI + Container App Β· ch8 Web Appproduction + staging slot Β· ch8 log-az104Log Analytics, alerts Β· ch9 rsv-az104VM backup Β· ch10 bvault-az104blob backup Β· ch10 Site Recoveryvm-web2 β†’ northeurope Β· ch10
What you build in chapters 1–10. Everything lives in rg-az104-lab so cleanup is one delete.

Chapters

0
Start here
What changed since you took the exam, Linux VM tools, lab setup, naming, costs
πŸ“– 5m Β· πŸ›  20m
1
Microsoft Entra ID
Users, groups, licenses, guests, SSPR, SSO, MFA & passwordless, Conditional Access, Domain Services
πŸ“– 50m Β· πŸ›  30m
2
Governance & access
Regions, zones & region pairs, management groups, RBAC, Azure Policy, locks, tags, cost
πŸ“– 55m Β· πŸ›  30m
3
Virtual networks
VNets, subnets, peering, public IPs, routing, Azure DNS
πŸ“– 35m Β· πŸ›  25m
4
ARM templates & Bicep
Read, modify, deploy, export and decompile
πŸ“– 25m Β· πŸ›  20m
5
Virtual machines
Sizes, disks, zones & sets, scale sets, encryption, Azure Virtual Desktop, moving
πŸ“– 40m Β· πŸ›  25m
6
Secure access, security & load balancing
NSGs, ASGs, Bastion, load balancers, Zero Trust, defense in depth, Key Vault, Defender for Cloud
πŸ“– 60m Β· πŸ›  40m
7
Storage
Redundancy, SAS, firewalls, endpoints, Files, Blob features, Azure Migrate
πŸ“– 65m Β· πŸ›  30m
8
Containers, App Service & Functions
ACR, ACI, Container Apps, App Service, Functions, choosing a hosting option, AI & IoT services
πŸ“– 55m Β· πŸ›  25m
9
Monitoring
Metrics, logs & KQL, alerts, Insights, Network Watcher
πŸ“– 35m Β· πŸ›  20m
10
Backup & disaster recovery
Recovery Services & Backup vaults, restore, Site Recovery, cleanup
πŸ“– 30m Β· πŸ›  20m
11
Cloud Adoption Framework
Strategy, the 5 Rs, landing zones, governance, naming & tagging Β· AZ-305 bridge
πŸ“– 40m Β· πŸ›  35m
12
Well-Architected Framework
The five pillars, composite SLAs, trade-offs, reviewing a workload Β· AZ-305 bridge
πŸ“– 45m Β· πŸ›  40m

Exam weights

Skill areaWeightChapters
Manage Azure identities and governance20–25%1, 2
Implement and manage storage15–20%7
Deploy and manage Azure compute resources20–25%4, 5, 8
Implement and manage virtual networking15–20%3, 6
Monitor and maintain Azure resources10–15%9, 10
AZ-305 prerequisites (CAF, WAF; not on AZ-104)–11, 12

Source: the official AZ-104 study guide. When you finish, try the free practice assessment to see where you are.