• Configure GPO to disable USB for all users except IT.
• Troubleshoot slow logon caused by broken GPO.
• Migrate DHCP from Server 2016 to 2022.
• Automate new user creation with PowerShell based on HR CSV.
• Design AD OU structure for a multi-site enterprise.
• Configure Hyper-V failover for critical web apps.
• Build a secure RDP gateway for remote staff.
• Perform monthly patching with WSUS + rollback testing.

Module 1: Azure Fundamentals (AZ-900) – 6–8 Hours
Goal: Understand basic cloud concepts and Azure global infrastructure.
• What is Cloud Computing? (IaaS, PaaS, SaaS)
• Benefits of Azure over on-prem
• Azure Regions, Availability Zones, Subscriptions, Tenants
• Azure Resource Manager (ARM) and Resource Groups
• Azure CLI, Azure Portal, PowerShell basics
• Understanding Azure SLAs and Pricing Models
Lab: Create Azure Free Account, Explore Portal, Launch a Linux & Windows VM
Job Scenario: Design basic 3-tier infrastructure across two regions

Module 2: Identity & Access Management (IAM) – 6 Hours
AZ-104 Section – Core Administrative Skill
• Azure AD overview vs on-prem AD
• Users, Groups, Devices, Roles
• RBAC (Role-Based Access Control)
• Azure AD Roles vs Resource Roles
• Conditional Access Policies
• MFA Setup & Password Reset
Lab: Create users, groups, assign roles, implement MFA
Scenario: Restrict VM access to only DevOps team with custom role

Module 3: Azure Compute Management – 10 Hours
Goal: Manage workloads using VMs and VMSS
• Azure VM creation, images, sizing
• Availability Sets vs Availability Zones
• Managed Disks, Snapshots, Custom Images
• Azure VMSS (Scale Sets)
• Azure Bastion, Just-In-Time Access
• VM Auto-shutdown, Auto-start
• Backup and restore VMs
Lab: Deploy Windows and Linux VMs in different regions
Scenario: Build Auto-healing VMSS for a production web app

Module 4: Azure Storage Administration – 8 Hours
Focus: Secure storage for VMs, apps, and logs
• Storage Accounts: Blob, Queue, Table, File
• Access tiers: Hot, Cool, Archive
• Azure File Shares (NFS/SMB)
• Shared Access Signatures (SAS)
• Storage replication (LRS, ZRS, GRS)
• Lifecycle Management Policies
• Azure Storage Explorer, AzCopy
Lab: Host static website on Azure Blob
Scenario: Implement tiered archive policy for log retention

Module 5: Azure Networking – 10 Hours
Focus: Design & secure Azure network topologies
• Virtual Networks (VNet), Subnets
• IP Addressing, NSG (Network Security Groups)
• Azure DNS, Private DNS
• Azure Load Balancer (Public/Internal)
• Application Gateway with WAF
• Azure Firewall & Route Tables (UDRs)
• VNet Peering, Service Endpoints, Private Link
Lab: Build a secure 3-tier network with public web + private DB
Scenario: Enforce NSGs to block RDP/SSH from Internet except jumpbox

Module 6: Monitoring & Management – 6 Hours
Focus: Automate and observe cloud infra
• Azure Monitor, Alerts, Metrics
• Log Analytics Workspace
• Diagnostic Settings
• Azure Activity Logs
• Azure Resource Graph
• Azure Automation Runbooks
Lab: Setup alert for CPU > 70%, create action group
Scenario: Send daily usage reports to admin via Automation

Module 7: Azure Backup & Recovery – 4 Hours
Goal: Protect and recover workloads
• Azure Recovery Services Vault
• VM backup policies and restore points
• File-level restore
• Backup Monitoring
• Azure Site Recovery (ASR)
Lab: Backup a VM and simulate restore from vault
Scenario: Schedule backup for 10 servers, 30-day retention

Module 8: Azure Resource Governance – 4 Hours
Goal: Enforce policy & cost control
• Azure Policies (deny public IP, enforce tagging)
• Azure Blueprints
• Locks (CanNotDelete/ReadOnly)
• Management Groups & Subscriptions
• Budgets, Cost Analysis, Pricing Calculator
Lab: Enforce “Tag Required” policy on all resources
Scenario: Block users from creating costly VM SKUs

Module 9: Hybrid & Identity Integration – 6 Hours
Goal: On-prem to cloud integration
• Azure AD Connect & Sync
• Password Hash Sync vs Pass-through Auth
• Azure AD Join vs Hybrid Join
• AD DS vs AAD DS
• Identity Protection
Lab: Setup Azure AD Connect in test domain
Scenario: Enable hybrid identity for a company migrating to cloud

Module 10: Containers & DevOps Basics – 4 Hours
Introductory DevOps integrations for Admins
• Azure Container Instances
• Azure Kubernetes Service (overview)
• Azure CLI in pipelines
• VM image management with Shared Image Gallery
Lab: Run container on ACI
Scenario: Run a microservice-based container app as test lab

 Capstone Projects (6–8 Hours)
Project 1: Deploy a Secure Azure IaaS App
• Multi-tier App with VMSS, App Gateway, NSG
• Bastion, backup, diagnostics
Project 2: Azure Governance & Monitoring Suite
• Policies, locks, budget alerts, monitoring dashboard
Project 3: Hybrid Identity Implementation
• Azure AD Connect, SSO, conditional access for on-prem synced users

Deliverables
• 80+ hours instructor-led & lab-driven
• 50+ real-time tasks
• 3+ Projects with architecture design
• Resume, GitHub Repo, Interview Q&A
• AZ-900 & AZ-104 Certification Guidance

L1 Tasks (Entry-Level / Junior Azure Admin / Support Engineer)
Primary focus: Operations, monitoring, basic provisioning, and user support
1. Monitor Azure resources via Azure Monitor, Alerts, and Dashboard
2. Restart/stop/start Azure VMs or services when instructed
3. Assign RBAC roles to users in resource groups
4. Respond to common Azure-related incidents (login failure, quota exceeded)
5. Perform VM resizing or disk expansion under guidance
6. Use Azure Portal to create simple resources (VM, storage)
7. Tag resources properly (CostCenter, Owner, Environment)
8. Map and analyze costs using Cost Management blade
9. Configure auto-shutdown/start schedules for VMs
10.Perform Azure Backup initiation or on-demand restores
11.Open Microsoft support cases for platform issues
12.Create shared file shares using Azure Files
13.Run basic Azure CLI / PowerShell commands
14.Assign users to Azure AD groups
15. Monitor Activity Logs and generate reports
16.Validate Azure resource health status
17. Follow SOPs for patching VMs using Update Management
18. Manage storage access (SAS tokens, permissions)
19.Perform VM disk snapshots
20. Maintain documentation and daily handover reports

L2 Tasks (Mid-Level / Azure Administrator)
Primary focus: Provisioning, configuration, performance, identity, and policy management
1. Design & deploy VNets, NSGs, UDRs for a secure network layout
2. Configure Azure Load Balancer and App Gateway (with WAF)
3. Setup and troubleshoot VNet peering, Service Endpoints, Private Link
4. Create and manage ARM templates for automated deployments
5. Configure and manage Azure Backup vault and policies
6. Manage storage tiers (Hot/Cool/Archive) and lifecycle rules
7. Configure Azure AD Connect and monitor synchronization health
8. Create Conditional Access Policies for Azure AD users
9. Setup Diagnostics Logs and push to Log Analytics
10.Implement Azure Policy for resource tagging or SKU enforcement
11.Automate tasks with PowerShell or Azure CLI scripts
12.Design alerts using Action Groups (email, webhook, logic apps)
13. Manage Azure Key Vault, secrets, and access policies
14.Perform basic Azure Site Recovery setup and failover testing
15.Configure and manage Azure Automation Runbooks
16.Deploy scalable infrastructure with VMSS
17.Setup Bastion for secure RDP/SSH access
18.Optimize cost by analyzing resource usage (e.g., underutilized VMs)
19.Build and deploy containers using ACI or intro AKS
20.Work on tagging compliance, role permissions, and policy violation
remediations

L3 Tasks (Senior Azure Admin / Architect / Cloud Engineer)
Primary focus: Architecture, security, optimization,automation, and hybrid scenarios
1. Design secure hybrid identity with AD DS + Azure AD + Conditional Access
2. Implement multi-region high availability with zone-redundant architecture
3. Troubleshoot advanced networking issues (ExpressRoute, IP flow verify)
4. Implement custom RBAC roles using JSON definitions
5. Integrate Azure with on-prem using VPN Gateway or ExpressRoute
6. Design and deploy hub-and-spoke network architecture
7. Configure Azure Firewall, Application Gateway with advanced routing rules
8. Build Infrastructure-as-Code (IaC) using ARM/Bicep/Terraform
9. Create Azure Blueprints for regulatory-compliant environments
10.Implement Identity Protection and risk-based policies
11.Perform advanced PowerShell scripting for lifecycle automation
12.Design disaster recovery using Azure Site Recovery for hybrid apps
13.Implement Private DNS zones for internal name resolution
14.Configure Azure Lighthouse for multi-tenant management
15.Enable managed identities for applications and services
16.Perform cost optimization and Reserved Instance (RI) planning
17. Migrate workloads from AWS/VMware to Azure using Azure Migrate
18.Audit and remediate security vulnerabilities using Defender for Cloud
19.Architect Azure landing zones with governance and compliance
20.Work closely with development and DevOps teams for pipeline integration
(DevSecOps)