Azure Admin Course

Lesson 1 • Cloud Computing Core Concepts

Covers IaaS, PaaS, SaaS models and public/private/hybrid cloud distinctions. Establishes vocabulary used throughout the entire course.

Lesson 2 • Azure Account and Subscription Setup

Guides creation of an Azure free account and explains subscription hierarchy. Connects billing structure to resource governance concepts.

Lesson 3 • Core Azure Resource Concepts

Explains resource groups, tags, and locks as organisational primitives. Prepares learners to structure deployments logically in later chapters.

Lesson 1 • Privileged Identity Management

Introduces just-in-time privileged access and access reviews using PIM. Strengthens governance over high-privilege roles in production environments.

Lesson 2 • Azure Active Directory Essentials

Covers tenant structure, user accounts, and directory roles in Azure AD. Forms the identity foundation required for all access control topics.

Lesson 3 • Managed Identities and Service Principals

Explains system-assigned and user-assigned managed identities for Azure services. Enables secure, credential-free authentication between Azure resources.

Lesson 4 • Role-Based Access Control

Teaches built-in and custom RBAC roles, scope levels, and assignment workflows. Directly enables least-privilege access across subscriptions and resources.

Lesson 1 • Virtual Network Fundamentals

Covers VNet creation, address space planning, and subnet segmentation. Provides the network foundation all subsequent connectivity topics depend on.

Lesson 2 • Network Security Groups and Firewalls

Configures NSG inbound/outbound rules and Azure Firewall policies. Enforces traffic control at subnet and NIC levels across deployments.

Lesson 3 • Private Endpoints and Service Endpoints

Configures private endpoints and service endpoints to restrict PaaS service access. Eliminates public internet exposure for sensitive data services.

Lesson 4 • Load Balancing and Traffic Management

Deploys Azure Load Balancer, Application Gateway, and Traffic Manager for resilient traffic distribution. Supports high-availability architectures introduced in later chapters.

Lesson 1 • Azure Kubernetes Service Fundamentals

Introduces AKS cluster creation, node pools, and basic workload deployment. Extends compute knowledge to container-orchestrated architectures.

Lesson 2 • Virtual Machine Deployment and Configuration

Covers VM creation, image selection, disk types, and extension deployment. Builds hands-on VM management skills used throughout the course.

Lesson 3 • VM Networking and Remote Access

Configures NICs, public IPs, NSGs, and Bastion for secure VM access. Reinforces networking concepts from Chapter 3 in a compute context.

Lesson 4 • Azure App Service and Functions

Configures App Service plans, web apps, and Azure Functions for serverless compute. Covers PaaS compute options that reduce infrastructure management overhead.

Lesson 1 • Azure Backup and Disaster Recovery

Configures Recovery Services vaults, backup policies, and Azure Site Recovery. Protects VMs and data against accidental deletion and regional outages.

Lesson 2 • Storage Security and Access Control

Implements SAS tokens, stored access policies, and Azure AD-based storage auth. Ensures data is accessible only to authorised identities and applications.

Lesson 3 • Blob Storage and Lifecycle Management

Configures containers, blob types, and automated lifecycle policies. Reduces storage costs by transitioning or deleting objects based on age rules.

Lesson 4 • Azure Storage Account Fundamentals

Covers storage account types, replication options, and access tier selection. Establishes the storage foundation for all data management topics in this chapter.

Lesson 1 • Diagnostic Settings and Activity Logs

Configures diagnostic settings to route resource logs and activity logs to targets. Ensures audit trails and operational data are captured for all key resources.

Lesson 2 • Alerts, Action Groups, and Notifications

Creates metric, log, and activity log alert rules with action groups. Automates incident notification and response for operational teams.

Lesson 3 • Azure Dashboards and Workbooks

Builds shared dashboards and Azure Monitor Workbooks for operational reporting. Delivers visual insight into resource health and performance trends.

Lesson 4 • Log Analytics Workspace and Queries

Deploys a Log Analytics workspace and writes KQL queries for log analysis. Enables deep investigation of resource behaviour and security events.

Lesson 1 • Azure Policy Fundamentals

Creates and assigns built-in and custom policies to enforce resource compliance. Establishes automated guardrails that prevent non-compliant resource configurations.

Lesson 2 • Policy Initiatives and Compliance Reporting

Groups policies into initiatives and evaluates compliance state across scopes. Provides a unified compliance view for regulatory and internal standards.

Lesson 3 • Cost Management and Budgets

Analyses spending with Cost Analysis and sets budget alerts to prevent overruns. Connects governance practices to financial accountability for cloud resources.

Lesson 4 • Azure Blueprints and Landing Zones

Packages policies, roles, and resource templates into repeatable Blueprints. Accelerates compliant environment provisioning for new teams and projects.

Lesson 1 • Network Security and DDoS Protection

Configures DDoS Protection plans and reviews network security posture recommendations. Complements NSG and firewall controls from Chapter 3 with platform-level protection.

Lesson 2 • Microsoft Defender for Cloud Overview

Activates Defender for Cloud and interprets the Secure Score dashboard. Provides a centralised security posture management starting point for all workloads.

Lesson 3 • Azure Key Vault and Secrets Management

Deploys Key Vault to store secrets, keys, and certificates securely. Removes hardcoded credentials from applications and infrastructure code.

Lesson 4 • Zero Trust Principles and Implementation

Applies verify-explicitly, least-privilege, and assume-breach principles across Azure controls. Synthesises identity, network, and security configurations into a cohesive Zero Trust posture.