WSQ - Microsoft Certified Azure Administrator Associate (AZ-104)

Topic 1: Configure Azure resources with tools 

• Use the Azure portal
• Use Azure Cloud Shell
• Use Azure PowerShell
• Use Azure CLI3

Topic 2: Use Azure Resource Manager 

• Review Azure Resource Manager benefits
• Review Azure resource terminology
• Create resource groups
• Create Azure Resource Manager locks
• Reorganize Azure resources
• Remove resources and resource groups
• Determine resource limits

Topic 3: Configure resources with Azure Resource Manager templates 

• Review Azure Resource Manager template advantages
• Explore the Azure Resource Manager template schema
• Explore the Azure Resource Manager template parameters
• Consider Bicep templates
• Review QuickStart templates

Topic 4: Automate Azure tasks using scripts with PowerShell 

• Decide if Azure PowerShell is right for your tasks
• Install PowerShell
• Create an Azure Resource using scripts in Azure PowerShell
• Create and save scripts in Azure PowerShell

Topic 5: Control Azure services with the CLI 

• What is the Azure CLI?
• Work with the Azure CLI

Topic 6: Deploy Azure infrastructure by using JSON ARM templates 

• Explore Azure Resource Manager template structure
• Add flexibility to your Azure Resource Manager template by using parameters and outputs

Topic 7: Configure Azure Active Directory 

• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement Azure Active Directory self-service password reset

Topic 8: Configure user and group accounts 

• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units

Topic 9: Configure subscriptions 

• Identify Azure regions
• Implement Azure subscriptions
• Obtain an Azure subscription
• Identify Azure subscription usage
• Implement Microsoft Cost Management
• Apply resource tagging
• Apply cost savings

Topic 10: Configure Azure Policy 

• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create an initiative definition
• Scope the initiative definition
• Determine compliance

Topic 11: Configure role-based access control 

• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Review fundamental Azure RBAC roles

Topic 12: Create Azure users and groups in Azure Active Directory 

• What are user accounts in Azure Active Directory?
• Add and delete users in Azure Active Directory
• Manage app and resource access by using Azure Active Directory groups
• Assign users to Azure Active Directory groups
• Collaborate by using guest accounts and Azure Active Directory B2B
• Give guest users access in Azure Active Directory B2B

Topic 13: Secure your Azure resources with Azure role-based access control (Azure RBAC) 

• What is Azure RBAC?
• List access using Azure RBAC and the Azure portal
• Grant access using Azure RBAC and the Azure portal
• View activity logs for Azure RBAC changes

Topic 14: Allow users to reset their password with Azure Active Directory self-service password reset 

• What is self-service password reset in Azure Active Directory?
• Implement Azure AD self-service password reset
• Set up self-service password reset
• Customize directory branding

Topic 15: Configure storage accounts 

• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints

Topic 16: Configure Azure Blob Storage 

• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing

Topic 17: Configure Azure Storage security 

• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices

Topic 18: Configure Azure Files and Azure File Sync 

• Compare storage for file shares and blob data
• Manage Azure Files shares
• Create file share snapshots
• Implement Azure File Sync
• Identify Azure File Sync components
• Deploy Azure File Sync

Topic 19: Configure Azure Storage with tools 

• Use Azure Storage Explorer
• Use the Azure Import/Export service
• Use the WAImportExport tool
• Use the AzCopy tool

Topic 20: Create an Azure Storage account 

• Decide how many storage accounts you need
• Choose your account settings
• Choose an account creation tool
• Create a storage account using the Azure portal

Topic 21: Control access to Azure Storage with shared access signatures 

• Authorization options for Azure Storage
• Use shared access signatures to delegate access to Azure Storage
• Use shared access signatures to delegate access to Azure Storage
• Use stored access policies to delegate access to Azure Storage
• Use stored access policies to delegate access to Azure Storage

Topic 22: Upload, download, and manage data with Azure Storage Explorer 

• Connect Azure Storage Explorer to a storage account
• Connect Azure Storage Explorer to a storage account
• Connect Azure Storage Explorer to Azure Data Lake Storage
• Connect Azure Storage Explorer to Azure Data Lake Storage

Topic 23: Configure virtual machines 

• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines

Topic 24: Configure virtual machine availability 

• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale
• Interactive lab simulation

Topic 25: Configure Azure App Service plans 

• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale

Topic 26: Configure Azure App Service 

• Implement Azure App Service
• Create an app with App Service
• Explore continuous integration and deployment
• Create deployment slots
• Add deployment slots
• Secure your App Service app
• Create custom domain names
• Back up and restore your App Service app
• Use Azure Application Insights

Topic 27: Configure Azure Container Instances 

• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review the Docker platform

Topic 28: Manage virtual machines with the Azure CLI 

• What is the Azure CLI?
• Create a virtual machine
• Test your new virtual machine
• Explore other VM images
• Sizing VMs properly
• Query system and runtime information about the VM
• Start and stop your VM with the Azure CLI
• Install software on your VM

Topic 29: Create a Windows virtual machine in Azure 

• Create a Windows virtual machine in Azure
• Create a Windows virtual machine
• Use RDP to connect to Windows Azure virtual machines
• Connect to a Windows virtual machine using RDP
• Configure Azure virtual machine network settings

Topic 30: Host a web application with Azure App Service 

• Create a web app in the Azure portal
• Create a web app in the Azure portal
• Prepare the web application code
• Write code to implement a web application
• Deploy code to App Service
• Deploy your code to App Service

Topic 31: Configure virtual networks 

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses

Topic 32: Configure network security groups 

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups

Topic 33: Configure Azure DNS 

• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for Azure Private DNS zones
• Review Azure Private DNS zone scenarios

Topic 34: Configure Azure Virtual Network peering 

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining

Topic 35: Configure network routing and endpoints 

• Review system routes
• Identify user-defined routes
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses

Topic 36: Configure Azure Load Balancer 

• Determine Azure Load Balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create back-end pools
• Create health probes
• Create load balancer rules

Topic 37: Configure Azure Application Gateway 

• Implement Azure Application Gateway
• Determine Azure Application Gateway routing
• Configure Azure Application Gateway components

Topic 38: Design an IP addressing schema for your Azure deployment 

• Network IP addressing and integration
• Public and private IP addressing in Azure
• Plan IP addressing for your networks

Topic 39: Distribute your services across Azure virtual networks and integrate them by using virtual network peering 

• Connect services by using virtual network peering8 min
• Prepare virtual networks for peering by using Azure CLI commands
• Configure virtual network peering connections by using Azure CLI commands
• Verify virtual network peering by using SSH between Azure virtual machines

Topic 40: Host your domain on Azure DNS 

• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise - Create a DNS zone and an A record by using Azure DNS
• Dynamically resolve resource name by using alias record
• Exercise - Create alias records for Azure DNS

Topic 41: Manage and control traffic flow in your Azure deployment with routes 

• Identify routing capabilities of an Azure virtual network
• Create custom routes
• What is an NVA?
• Create an NVA and virtual machines
• Route traffic through the NVA

Topic 42: Improve application scalability and resiliency by using Azure Load Balancer 

• Azure Load Balancer features and capabilities
• Configure a public load balancer
• Configure a public load balancer
• Internal load balancer

Topic 43: Configure file and folder backups 

• Describe Azure Backup benefits
• Implement Backup center for Azure Backup
• Configure Azure Recovery Services vault backup options
• Use the Microsoft Azure Recovery Services (MARS) agent
• Configure on-premises file and folder backups

Topic 44: Configure virtual machine backups 

• Explore options to protect virtual machine data
• Create virtual machine snapshots in Azure Backup
• Set up Azure Recovery Services vault backup options
• Back up your virtual machines
• Restore your virtual machines
• Implement System Center DPM and Azure Backup Server
• Compare the MARS agent and Azure Backup Server
• Implement soft delete for your virtual machines
• Implement Azure Site Recovery

Topic 45: Configure Azure Monitor 

• Describe Azure Monitor key capabilities
• Describe Azure Monitor components
• Define metrics and logs
• Identify monitoring data and tiers
• Describe activity log events
• Query the activity log

Topic 46: Configure Azure alerts 

• Describe Azure Monitor alerts
• Manage Azure Monitor alerts
• Create alert rules
• Create action groups

Topic 47: Configure Log Analytics 

• Determine Log Analytics uses
• Create a Log Analytics workspace
• Create Kusto (KQL) queries
• Structure Log Analytics queries

Topic 48: Configure Network Watcher 

• Describe Azure Network Watcher features
• Review IP flow verify diagnostics
• Review next hop diagnostics
• Visualize the network topology

Topic 49: Improve incident response with alerting on Azure 

• Explore the different alert types that Azure Monitor supports
• Use metric alerts for alerts about performance issues in your Azure environment
• Use metric alerts to alert on performance issues in your Azure environment
• Use log alerts to alert on events in your application
• Use activity log alerts to alert on events within your Azure infrastructure
• Use action groups and alert processing rules to send notifications when an alert is fired
• Use an activity log alert and an action group to notify users about events in your Azure infrastructure

Topic 50: Analyze your Azure infrastructure by using Azure Monitor logs 

• Features of Azure Monitor logs
• Create basic Azure Monitor log queries to extract information from log data
• Create basic Azure Monitor log queries to extract information from log data

Topic 51: Monitor performance of virtual machines by using Azure Monitor VM Insights

• What are Azure Monitor Logs and Azure Monitor VM Insights?
• Set up a Log Analytics workspace and Azure Monitor VM Insights
• Build log queries by using the Kusto Query Language
• Build log queries

Final Assessment

• Written Assessment - Short Answer Questions (WA-SAQ)
• Practical Performance (PP)

Promotion Code

Promo or discount cannot be applied to WSQ courses

Minimum Entry Requirement

Knowledge and Skills

• Able to operate using computer functions with minimum Computer Literacy Level 2 based on ICAS Computer Skills Assessment Framework
• Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

• Positive Learning Attitude
• Enthusiastic Learner

Experience

• Minimum of 1 year of working experience.

Target Year Group : 21-65 years old

Minimum Software/Hardware Requirement

Software:

You need to sign up a Azure account (Credit Card is required).

Hardware: Windows and Mac Laptops

About Progressive Wage Model (PWM)

The Progressive Wage Model (PWM) helps to increase wages of workers through upgrading skills and improving productivity. 

Employers must ensure that their Singapore citizen and PR workers meet the PWM training requirements of attaining at least 1 Workforce Skills Qualification (WSQ) Statement of Attainment, out of the list of approved WSQ training modules.

For more information on PWM, please visit MOM site.

Funding Eligility Criteria

Steps to Apply Skills Future Claim

• The staff will send you an invoice with the fee breakdown.
• Login to the MySkillsFuture portal, select the course you’re enrolling on and enter the course date and schedule.
• Enter the course fee payable by you (including GST) and enter the amount of credit to claim.
• Upload your invoice and click ‘Submit’

SkillsFuture Level-Up Program

The  SkillsFuture Level-Up Programme provides greater structural support for mid-career Singaporeans aged 40 years and above to pursue a substantive skills reboot and stay relevant in a changing economy. For more information, visit SkillsFuture Level-Up Programme

Get Additional Course Fee Support Up to $500 under UTAP

The Union Training Assistance Programme (UTAP) is a training benefit provided to NTUC Union Members with an objective of encouraging them to upgrade with skills training. It is provided to minimize the training cost. If you are a NTUC Union Member then you can get 50% funding (capped at $500 per year) under Union Training Assistance Programme (UTAP).

For more information visit NTUC U Portal – Union Training Assistance Program (UTAP)

Steps to Apply UTAP

• Log in to your U Portal account to submit your UTAP application upon completion of the course.

Note

• SSG subsidy is available for Singapore Citizens, Permanent Residents, and Corporates.
• All Singaporeans aged 25 and above can use their SkillsFuture Credit to pay. For more details, visit www.skillsfuture.gov.sg/credit
• An unfunded course fee can be claimed via SkillsFuture Credit or paid in cash.
• UTAP funding for NTUC Union Members is capped at $250 for 39 years and below and at $500 for 40 years and above.
• UTAP support amount will be paid to training provider first and claimed after end of class by learner.

Appeal Process

1. The candidate has the right to disagree with the assessment decision made by the assessor.
2. When giving feedback to the candidate, the assessor must check with the candidate if he agrees with the assessment outcome.
3. If the candidate agrees with the assessment outcome, the assessor & the candidate must sign the Assessment Summary Record.
4. If the candidate disagrees with the assessment outcome, he/she should not sign in the Assessment Summary Record.
5. If the candidate intends to appeal the decision, he/she should first discuss the matter with the assessor/assessment manager.
6. If the candidate is still not satisfied with the decision, the candidate must notify the assessor of the decision to appeal. The assessor will reflect the candidate’s intention in the Feedback Section of the Assessment Summary Record.
7. The assessor will notify the assessor manager about the candidate’s intention to lodge an appeal.
8. The candidate must lodge the appeal within 7 days, giving reasons for appeal 
9. The assessor can help the candidate with writing and lodging the appeal.
10. he assessment manager will collect information from the candidate & assessor and give a final decision.
11. A record of the appeal and any subsequent actions and findings will be made.
12. An Assessment Appeal Panel will be formed to review and give a decision.
13. The outcome of the appeal will be made known to the candidate within 2 weeks from the date the appeal was lodged.
14. The decision of the Assessment Appeal Panel is final and no further appeal will be entertained.
15. Please click the link below to fill up the Candidates Appeal Form.

• Azure Administrator
• Systems Administrator
• Network Administrator
• Cloud Solutions Architect
• IT Manager
• DevOps Engineer
• Security Engineer
• Infrastructure Engineer
• IT Consultant
• Technical Support Specialist
• Database Administrator
• Software Developer
• IT Project Manager
• Data Engineer
• Application Developer

Amin Mahetar: Amin Mahetar is a cloud and DevOps engineer with over 15 years of experience in IT infrastructure, automation, and cloud solutions across AWS and Microsoft Azure environments. A Microsoft Certified Trainer (MCT) and Azure Administrator Associate, he has implemented and managed enterprise-scale cloud deployments across industries including finance, logistics, and manufacturing. His areas of expertise include virtualization, networking, identity management, and automation using PowerShell and Azure CLI. Known for his structured and hands-on training style, Amin has guided numerous professionals in achieving their Azure certifications and advancing their cloud careers.

In “Microsoft Certified Azure Administrator Associate (AZ-104),” Amin equips learners with a deep understanding of Azure resource management, governance, and operational best practices. His sessions focus on configuring virtual networks, managing Azure Active Directory, monitoring cloud environments, and implementing security controls. By combining real-world examples with practical labs, he ensures participants gain both the theoretical foundation and technical competence to manage Azure environments effectively and excel in the AZ-104 certification.

Sanjiv Venkatram: Sanjiv Venkatram is a senior cloud architect and IT consultant with more than 25 years of experience in enterprise infrastructure, software engineering, and Microsoft ecosystem integration. A Microsoft Certified Solutions Expert and Azure Solutions Architect, he has designed and implemented scalable cloud infrastructures for global clients. Sanjiv’s expertise covers Azure IaaS and PaaS services, hybrid cloud deployment, and cloud governance. His training approach emphasizes clarity, practicality, and alignment with real-world enterprise scenarios.

In “Microsoft Certified Azure Administrator Associate (AZ-104),” Sanjiv provides learners with in-depth knowledge of Azure administration, focusing on resource configuration, identity and access management, and cost optimization. His sessions cover monitoring, storage management, and network security, aligning closely with Microsoft’s certification objectives. Drawing on decades of industry experience, he helps participants master the skills needed to administer complex Azure environments efficiently and confidently.

Alec Tan Chee Wee: Alec Tan is an experienced IT consultant and systems engineer with over 15 years of experience in cloud computing, network infrastructure, and enterprise solution deployment. A Microsoft Certified Azure Administrator Associate and AWS Certified Professional, he has managed large-scale cloud migrations and hybrid architecture implementations across multiple industries. Alec’s expertise lies in cloud resource management, automation, and the integration of on-premise infrastructure with Azure services.

In “Microsoft Certified Azure Administrator Associate (AZ-104),” Alec guides participants through the practical aspects of managing Azure subscriptions, implementing storage solutions, and configuring virtual machines. His sessions emphasize operational efficiency, security management, and backup strategies in Azure environments. Through a hands-on, example-driven approach, he ensures learners gain the knowledge and practical experience needed to pass the AZ-104 exam and perform effectively as Azure administrators.

Kishan Raaj: Kishan Raaj is a cloud computing and data analytics expert with more than 20 years of experience in enterprise IT, SAP systems, and cloud migration. A Microsoft Certified Trainer and Azure Administrator Associate, he has led numerous digital transformation projects for organizations adopting Microsoft Azure and Power Platform solutions. His teaching approach combines strategic insights with technical depth, helping learners bridge theoretical knowledge with applied skills.

In “Microsoft Certified Azure Administrator Associate (AZ-104),” Kishan trains learners on managing Azure identities, securing resources, and deploying scalable virtual networks. His sessions cover key areas including hybrid identity integration, monitoring, and automation through Azure Policy and ARM templates. By emphasizing Microsoft’s best practices and hands-on implementation, he prepares participants to manage enterprise-level Azure environments with confidence and precision.

Quah Chee Yong: Quah Chee Yong is a cloud infrastructure and systems engineer with over 15 years of experience in IT administration, virtualization, and automation. A certified Azure Administrator Associate and Google Cloud Practitioner, he has successfully implemented cloud-based infrastructure solutions for organizations in education, logistics, and enterprise technology. His strong technical foundation in networking, storage, and identity services enables him to deliver highly practical and outcome-focused training.

In “Microsoft Certified Azure Administrator Associate (AZ-104),” Chee Yong focuses on teaching learners how to deploy, configure, and maintain Azure infrastructure. His sessions include hands-on exercises in virtual networking, monitoring, and governance. By integrating practical labs with real-world cloud management examples, he helps learners gain the confidence to operate Azure environments effectively and achieve certification success.