Azure Administration Exam Tips

• Structured Summary + Deep Understanding for Exam Readiness

Primary services covered:

• Azure Resource Manager
• Azure Portal
• Azure Cloud Shell
• Azure CLI
• Azure PowerShell
• Azure Bicep
• Microsoft Entra ID

Official documentation:

ARM overview:

Azure Portal overview:

Azure CLI:

Azure PowerShell:

ARM templates:

Bicep overview:

1️⃣ Azure Core Hierarchy (Critical for Exams)#

Understand this structure clearly:

Resources → Resource Groups → Subscriptions#

🔹 Resources#

Examples:

• Virtual Machines
• Storage Accounts
• Virtual Networks

They are:

• ✔ Azure-managed services ✔ The smallest deployable unit ✔ Always deployed into a resource group

🔹 Resource Groups#

• Logical container for resources
• Used for lifecycle management
• Used for access control (RBAC scope)
• Used for grouping by environment (Dev/Test/Prod)
• Important: Resources cannot exist outside a resource group.

🔹 Subscriptions#

• Contain resource groups
• Act as billing boundary
• Used for cost management
• Provide quota limits
• Exam trap: A subscription can have many resource groups. A resource group cannot span subscriptions.

2️⃣ Azure Resource Manager (ARM) Architecture#

All management operations flow through:

Azure Resource Manager

How it works:#

• User sends request (Portal / CLI / PowerShell)
• Request hits ARM REST API
• ARM forwards to Resource Provider
• Resource Provider performs action
• Example: Creating a VM → ARM → Microsoft.Compute → VM deployed

Key Exam Concept:

• ✔ ARM is the control plane ✔ Resource Providers handle resource-specific logic

3️⃣ Authentication & Identity#

Authentication uses:

• Microsoft Entra ID

When you log into:

• Azure Portal
• Cloud Shell
• CLI
• PowerShell
• You authenticate with Entra ID.

Important:

• ✔ Subscription trusts ONE tenant ✔ Tenant can manage multiple subscriptions ✔ Access control enforced via RBAC

4️⃣ Azure Portal vs Cloud Shell#

🔹 Azure Portal#

• Azure Portal
• Web-based GUI
• Uses ARM under the hood
• Automatically generates ARM templates
• Good for manual deployments

🔹 Azure Cloud Shell#

• Azure Cloud Shell
• Built-in terminal in portal

Supports:

• Bash (Azure CLI)
• PowerShell (Az module)
• Pre-authenticated using Entra ID
• No local installation needed

Exam tip:

• Cloud Shell already has Azure CLI and PowerShell installed.

5️⃣ Azure CLI vs Azure PowerShell#

🔹 Azure CLI#

• Azure CLI
• Bash-style syntax
• Cross-platform
• Uses az commands
• Outputs JSON by default
• Great for automation

Example:

• az vm create

🔹 Azure PowerShell#

• Azure PowerShell
• Uses Az module
• Object-oriented
• Strong integration with PowerShell scripting
• Better for Windows admins

Example:

• New-AzVM

Exam tip:

• Both use ARM under the hood. Difference = syntax + scripting model.

6️⃣ ARM Templates – Exam Essentials#

Mandatory properties:

Optional properties:

Important exam point:

• ARM templates are JSON-based Infrastructure as Code.

7️⃣ QuickStart Templates#

Azure provides ready-made templates via:

• Azure QuickStart Templates (GitHub repository)

Used for:

• ✔ Learning ✔ Complex deployments ✔ Production reference designs

8️⃣ Azure Bicep – Simplified IaC#

• Azure Bicep

Key facts:

• ✔ Declarative DSL ✔ Easier than ARM JSON ✔ Compiles to ARM ✔ Fully supported (GA) ✔ Same capabilities as ARM

Workflow:

• Bicep → Compiled to ARM JSON → ARM executes deployment

Exam trap:

• Bicep does NOT replace ARM. ARM remains the deployment engine.

9️⃣ Migrating ARM to Bicep#

Conversion methods:

• ✔ az bicep build (Bicep → JSON) ✔ az bicep decompile (JSON → Bicep)

Important:

• Decompile is best-effort. Manual refactoring may be required.

🔟 Automation & Scripting#

Azure administration can be done without Portal:

• Azure CLI locally
• Azure PowerShell locally
• CI/CD pipelines
• ARM templates
• Bicep templates
• Portal is optional. ARM is mandatory.

1️⃣1️⃣ Exam-Focused Mental Models#

Think in Layers#

User → REST API → Azure Resource Manager → Resource Provider → Resource

Think in Scopes#

Management Group → Subscription → Resource Group → Resource

Think in Deployment Models#

Manual (Portal) Scripted (CLI / PowerShell) Declarative (ARM / Bicep)

1️⃣2️⃣ High-Probability Exam Questions#

Expect scenarios like:

• Where does billing occur? (Subscription)
• What manages resources? (Azure Resource Manager)
• What authenticates users? (Microsoft Entra ID)
• What converts Bicep to JSON? (Bicep compiler)
• Can Bicep deploy without ARM? (No)
• Can resources exist outside a resource group? (No)
• What tool supports scripting automation? (CLI & PowerShell)

1️⃣3️⃣ Final Takeaways#

• ✔ Resources live inside Resource Groups ✔ Resource Groups live inside Subscriptions ✔ ARM manages all Azure deployments ✔ Authentication uses Entra ID ✔ Portal, CLI, PowerShell all call ARM ✔ ARM templates are JSON-based IaC ✔ Bicep simplifies ARM authoring ✔ Bicep compiles to ARM ✔ Decompile helps migrate ARM → Bicep ✔ Automation is key for real-world Azure administration

If you'd like next:

• 🧠 50 Azure Administration exam-style scenario questions
• 📊 Control plane vs data plane deep dive
• 🏗 End-to-end deployment architecture diagram walkthrough
• 🔐 Azure RBAC + Entra ID exam breakdown
• 🚀 AZ-104 high-probability question analysis
• Tell me which certification you’re targeting (AZ-900, AZ-104, AZ-204, AZ-305).