Course: WSQ — Microsoft Certified Azure Administrator Associate (AZ-104) Course Code: TGS-2023039182 Register here: https://www.tertiarycourses.com.sg/wsq-microsoft-certified-azure-administrator-associate-az-104.html
These are the official hands-on lab exercises for the WSQ Microsoft Certified Azure Administrator Associate (AZ-104) course delivered by Tertiary Infotech Academy Pte Ltd.
A complete set of 26 step-by-step labs aligned to the five official AZ-104 exam skill areas (skills measured as of April 17, 2026). Every lab runs in the Azure Portal (https://portal.azure.com) together with Azure Cloud Shell (https://shell.azure.com) using Azure CLI and Azure PowerShell — no local install required. An Azure free account or an instructor-provided subscription is all you need.
The full WSQ courseware set for this course lives in courseware/. Every artifact is generated from a single source, so the slide deck, Lesson Plan and Learner Guide stay 100% aligned with the 26 labs.
| Artifact | File |
|---|---|
| Slide deck (316 slides, AZ-104) | courseware/Microsoft Azure Administrator (AZ-104)-v1.0.pptx · .pdf |
| Lesson Plan (daily schedule, slide-referenced) | courseware/LP-Microsoft Azure Administrator (AZ-104).docx · .pdf |
| Learner Guide (all 26 labs) | courseware/LG-Microsoft Azure Administrator (AZ-104).docx · .pdf |
| Learner Guide (Markdown) | LG-Microsoft Azure Administrator (AZ-104).md |
Note: the confidential WSQ assessment materials (Written Assessment, Practical Performance and their answer keys) are intentionally not published to this repository.
- Sign in to the Azure Portal and open Azure Cloud Shell — the
azCLI,AzPowerShell module,azcopy, and Bicep are pre-installed. - Pick a lab from the catalogue below and follow the steps in order. Each lab practises the Portal, Azure CLI, and Azure PowerShell — the three interfaces the exam expects.
- Each lab is self-contained and creates its own resource group (for example
rg-az104-lab13). - Run the clean-up step at the end of every lab to delete the resource group — Azure bills for running VMs, public IPs, gateways, and provisioned storage.
- See labs/README.md for the lab index with Azure services used per lab.
- Lab 1 — Manage Microsoft Entra Users and Groups
- Lab 2 — Manage External (B2B Guest) Users and Configure SSPR
- Lab 3 — Manage Access to Azure Resources with RBAC
- Lab 4 — Implement and Manage Azure Policy
- Lab 5 — Manage Resource Groups, Locks and Tags
- Lab 6 — Manage Costs and Configure Management Groups
- Lab 7 — Create and Configure Storage Accounts and Redundancy
- Lab 8 — Configure Access to Storage: Firewalls, SAS, Access Keys
- Lab 9 — Configure Azure Blob Storage: Tiers, Lifecycle, Versioning
- Lab 10 — Configure Azure Files and Identity-Based Access
- Lab 11 — Manage Data with Storage Explorer and AzCopy
- Lab 12 — Automate Deployment with ARM Templates and Bicep
- Lab 13 — Create a Virtual Machine, Encryption at Host, and Moving VMs
- Lab 14 — VM Sizes, Disks, and Availability (Zones & Sets)
- Lab 15 — Deploy and Configure a Virtual Machine Scale Set with Autoscale
- Lab 16 — Containers: ACR, Container Instances, and Container Apps
- Lab 17 — Azure App Service: Plans, Scaling, TLS, Custom Domains, Backup, Slots
- Lab 18 — Virtual Networks, Subnets & VNet Peering
- Lab 19 — Public IPs, User-Defined Routes & Connectivity Troubleshooting
- Lab 20 — Network Security Groups, Application Security Groups & Effective Rules
- Lab 21 — Azure Bastion, Service Endpoints & Private Endpoints
- Lab 22 — Azure DNS & Load Balancing
- Lab 23 — Azure Monitor: Metrics, Logs, KQL, and Alerts
- Lab 24 — Azure Network Watcher and Connection Monitor
- Lab 25 — Azure Backup: Recovery Services Vault, Policies, Backup and Restore
- Lab 26 — Azure Site Recovery: Replicate, Fail Over, and Interpret Health
- An Azure subscription (free account or instructor-provided) with at least Contributor access, and Global Administrator / User Administrator on the Microsoft Entra tenant for Domain 1 labs.
- A modern browser for the Azure Portal and Cloud Shell.
- Cloud Shell requires a small storage account on first launch — accept the default when prompted.
- labs/README.md — Lab index grouped by domain with Azure services used
- Official AZ-104 study guide: https://learn.microsoft.com/credentials/certifications/resources/study-guides/az-104
- Official Microsoft Learning labs: https://github.com/MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator
Always delete or deallocate resources when a lab is finished — Azure bills for running VMs, public IPs, gateways, and provisioned storage. Perform every lab only in a subscription you own or one your instructor has authorized. The clean-up section at the end of each lab removes the resource group created for that exercise.