Azure Portal and Resource Manager
Getting started with the Azure portal, navigating and organising resources. Understanding Azure Resource Manager (ARM) and resource groups. Managing subscriptions, permissions, and costs with Azure Cost Management. By the end of this module, your admins navigate Azure with confidence and organise resources methodically.
Virtual machines and networking
Creating and configuring Windows and Linux virtual machines. Virtual networks (VNet), subnets, network security groups (NSG), and peering. Load balancing and VPN gateways for hybrid connections. Hands-on practice: deploying a production VM with its network configuration.
Entra ID and identity management
Administering Microsoft Entra ID (formerly Azure AD): users, groups, roles, and licences. Multi-factor authentication (MFA), conditional access, and identity security policies. SaaS application integration and synchronisation with an on-premises Active Directory (Azure AD Connect). This module is central to your environment's security.
Storage and backup
Azure storage types: Blob Storage, File Storage, Disk Storage. Backup strategies with Azure Backup: VMs, databases, files. Disaster recovery plans with Azure Site Recovery. Configuring retention policies and restore points. Hands-on practice: configuring a complete backup strategy.
Monitoring and alerts
Azure Monitor: metrics, logs, and dashboards. Configuring alerts on critical resources (CPU, memory, availability). Log Analytics and KQL queries to analyse security events. Application Insights for web applications. Objective: no silent alerts — every critical incident triggers a notification.
Security and compliance
Microsoft Defender for Cloud: Secure Score, recommendations, and security alerts. Azure Policy and compliance initiatives (ISO 27001, GDPR). Secret management with Azure Key Vault. Role-based access control (RBAC) and the principle of least privilege. By the end of this module, your admins know how to identify and remediate security vulnerabilities in your tenant.