认证科目

考试代码

Microsoft Certified: Azure Fundamentals

AZ-900

Microsoft 365 Certified: Microsoft 365 Fundamentals

MS-900:

Microsoft Certified: Azure Solutions Architect Expert

AZ-300+AZ-301或者AZ-301（针对于之前的70-535的升级考试）

AZ-100+AZ-101或者AZ-102针对于之前的70-533的升级考试）

AZ-203

Microsoft Certified: Azure DevOps Engineer Expert

AZ-400

Microsoft 365 Certified: Enterprise Administrator Expert

MS+100+MS-101

Microsoft 365 Certified: Modern Desktop Administrator Associate

MD-100+MD-101

Microsoft 365 Certified: Security Administrator Associate

MS-500

Microsoft 365 Certified: Teamwork Administrator Associate

MS-300+MS-301或者MS-302（针对于之前的70-339的升级考试）

Microsoft 365 Certified: Messaging Administrator Associate

MS-200+MS-201或者MS-202（针对于之前的70-345的升级考试）

Microsoft Certified: Azure AI Engineer Associate

AI-100

Microsoft Certified: Azure Data Scientist Associate

DP-100

Microsoft Certified: Azure Data Engineer Associate

DP-200+DP-201

15

Microsoft Certified: Dynamics 365 for Sales Functional Consultant Associate

MB-200+MB-210

Microsoft Certified: Dynamics 365 for Customer Service Functional Consultant Associate

MB-200+MB-230

章节

内容

1

Manage Azure subscriptions and resources

• assign administrator permissions
  
• configure cost center quotas and tagging
  
• configure Azure subscription policies at Azure subscription level
  

• configure diagnostic settings on resources
  
• create baseline for resources
  
• create and rest alerts
  
• analyze alerts across subscription
  
• analyze metrics across subscription
  
• create action groups
  
• monitor for unused resources
  
• monitor spend
  
• report on spend
  
• utilize Log Search query functions
  
• view alerts in Log Analytics
  

• use Azure policies for resource group
  
• configure resource locks
  
• configure resource policies
  
• implement and set tagging on resource groups
  
• move resources across resource groups
  
• remove resource groups

Implement and manage storage

• configure network access to the storage account
  
• create and configure storage account
  
• generate shared access signature
  
• install and use Azure Storage Explorer
  
• manage access keys
  
• monitor activity log by using Log Analytics
  
• implement Azure storage replication
  

• create export from Azure job
  
• create import into Azure job
  
• use Azure Data Box
  
• configure and use Azure blob storage
  
• configure Azure content delivery network (CDN) endpoints
  

• create Azure file share
  
• create Azure File Sync service
  
• create Azure sync group
  
• troubleshoot Azure File Sync
  

• configure and review backup reports
  
• perform backup operation
  
• create Recovery Services Vault
  
• create and configure backup policy
  
• perform a restore operation

Deploy and manage virtual machines (VMs)

• configure high availability
  
• configure monitoring, networking, storage, and virtual machine size
  
• deploy and configure scale sets
  

• modify Azure Resource Manager (ARM) template
  
• configure location of new VMs
  
• configure VHD template
  
• deploy from template
  
• save a deployment as an ARM template
  
• deploy Windows and Linux VMs
  

• add data discs
  
• add network interfaces
  
• automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent by using custom script extensions
  
• manage VM sizes
  
• move VMs from one resource group to another
  
• redeploy VMs
  

• configure VM backup
  
• define backup policies
  
• implement backup policies
  
• perform VM restore

Configure and manage virtual networks

• create and configure VNET peering
  
• create and configure VNET to VNET
  
• verify virtual network connectivity
  
• create virtual network gateway
  

• configure private and public IP addresses, network routes, network interface, subnets, and virtual network
  

• configure Azure DNS
  
• configure custom DNS settings
  
• configure private and public DNS zones
  

• create security rules
  
• associate NSG to a subnet or network interface
  
• identify required ports
  
• evaluate effective security rules

Manage identities

• add custom domains
  
• configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming
  
• configure self-service password reset
  
• implement conditional access policies
  
• manage multiple directories
  
• perform an access review
  

• create users and groups
  
• manage user and group properties
  
• manage device settings
  
• perform bulk user updates
  

• install and configure Azure AD Connect
  
• configure federation and single sign-on
  
• manage Azure AD Connect
  
• manage password sync and writeback

Evaluate and perform server migration to Azure

• discover and assess environment
  
• identify workloads that can and cannot be deployed
  
• identify ports to open
  
• identify changes to network
  
• identify if target environment is supported
  
• setup domain accounts and credentials
  

• migrate by using Azure Site Recovery (ASR)
  
• migate using P2V
  
• configure storage
  
• create a recovery services vault
  
• prepare source and target environments
  
• backup and restore data
  
• deploy Azure Site Recovery (ASR) agent
  
• prepare virtual network

Implement and manage application services

• create and manage objects
  
• manage a Logic App resource
  
• manage Azure Function app settings
  
• manage Event Grid
  
• manage Service Bus
  

• configure application for scaling
  
• enable monitoring and diagnostics
  
• configure App Service plans
  

• assign SSL Certificates
  
• configure application settings
  
• configure deployment slots
  
• configure Azure content delivery network (CDN) integration
  
• manage App service protection
  
• manage roles for an App service
  
• create and manage App Service environment

Implement advanced virtual networking

• configure application gateway and load balancing rules
  
• implement front end IP configurations
  
• manage application load balancing
  

• configure internal load balancer, load balancing rules, and public load balancer
  
• manage Azure load balancing
  

• monitor on-premises connectivity
  
• use network resource monitoring and Network Watcher
  
• manage external networking and virtual network connectivity
  

• create and configure Azure VPN Gateway
  
• create and configure site to site VPN
  
• configure Express Route
  
• verify on-premises connectivity
  
• manage on-premises connectivity with Azure

Secure identities

• enable MFA for an Azure AD tenant
  
• configure user accounts for MFA
  
• configure fraud alerts
  
• configure bypass options
  
• configure trusted IPs
  
• configure verification methods
  
• manage role-based access control (RBAC)
  
• implement RBAC policies
  
• assign RBAC Roles
  
• create a custom role
  
• configure access to Azure resources by assigning roles
  
• configure management access to Azure
  

• create a custom role
  
• configure access to Azure resources by assigning roles
  
• configure management access to Azure
  
• troubleshoot RBAC
  
• implement RBAC policies
  
• assign RBAC roles
  

• activate a PIM role
  
• configure just-in-time access, permanent access, PIM management access, and time-bound access
  
• create a Delegated Approver account
  
• enable PIM
  
• process pending approval requests