Nếu chưa có Azure account, bắt đầu từ Lab 01 — đăng ký tài khoản free tier $200 credit 30 ngày. Sau đó dùng Azure CLI (az login) cho mọi lab tiếp theo. Mỗi lab nên dọn dẹp resource group sau khi xong để tránh phát sinh chi phí không cần thiết.
Lab Chính Thức Microsoft
14 bài lab theo đúng giáo trình chính thức của Microsoft (AZ-104 Microsoft Learn) — giữ nguyên nội dung tiếng Anh, thực hành trên Azure Portal. Đây là bộ lab chuẩn dùng cho kỳ thi chứng chỉ.
Manage Entra ID Identities
Users, groups, dynamic membership, external (B2B) users.
Manage Subscriptions & RBAC
Custom RBAC roles, role assignments, Entra administrative units.
Governance via Azure Policy
Policy definitions, initiatives, compliance, resource locks.
Manage Resources via ARM Templates
Author, deploy & redeploy ARM templates with parameters.
Implement Virtual Networking
VNets, subnets, NSGs, connectivity testing between VMs.
Implement Intersite Connectivity
VNet peering, gateway transit, hub-spoke routing.
Network Traffic Management
Azure Load Balancer & Application Gateway.
Manage Azure Storage
Blob containers, file shares, SAS, network access rules.
Manage Virtual Machines
Deploy VMs (Portal/ARM) and Virtual Machine Scale Sets.
Implement Web Apps
App Service, deployment slots, swap, autoscale.
Azure Container Instances
Deploy & run containers quickly with ACI.
Azure Container Apps
Deploy containerized apps on Azure Container Apps.
Implement Data Protection
Recovery Services vault, VM backup, Azure Site Recovery.
Implement Monitoring
Azure Monitor, alerts, action groups, KQL log queries.
18 Lab Thực Hành (HoaTranLab)
Đăng Ký & Thiết Lập Azure
Đăng ký tài khoản free tier, cài Azure CLI, az login, tạo resource group đầu tiên.
Azure Administration & Portal
Azure Portal, Cloud Shell, ARM Explorer, Resource Graph, Azure Mobile App.
Virtual Machines
Tạo VM Linux/Windows, managed disk, availability set, custom script extension, VMSS autoscale.
Storage — Blob & Files
Tạo Storage Account, Blob container, Azure Files, SAS token, AzCopy, lifecycle management.
Virtual Networking
VNet, Subnet, NSG, ASG, VNet Peering, Private DNS Zone, Private Endpoint, UDR, Bastion.
Intersite Connectivity
VNet Peering cross-region, Hub-Spoke topology, Transit routing qua NVA, route propagation.
VPN Point-to-Site
Tạo VPN Gateway, cấu hình P2S OpenVPN với Entra ID authentication, cài Azure VPN Client.
VPN Site-to-Site (RRAS)
Tạo S2S VPN tunnel giữa Azure VNet và mạng on-premises mô phỏng bằng Windows RRAS, IKEv2.
Azure Backup
Recovery Services Vault, backup policy, backup VM, restore VM và restore file-level, soft delete.
Azure File Sync
Storage Sync Service, sync group, cloud endpoint, server registration, cloud tiering configuration.
Azure Alerts & Monitor
Log Analytics workspace, KQL queries, metric alert, log alert, action group email/webhook, workbook.
Migrate Virtualized Servers
Azure Migrate, Server Assessment, dependency analysis, replication và migration VM từ Hyper-V/VMware.
Azure Site Recovery
Enable replication cross-region, replication policy, test failover drill, planned failover và failback.
Migrate Physical Servers
Azure Migrate appliance, physical server discovery, agentless replication, cutover migration.
Service Endpoints
VNet Service Endpoints cho Storage và SQL, Network rule trên storage account, so sánh với Private Endpoint.
Azure Firewall
Triển khai Azure Firewall Standard, application rules (FQDN), network rules, NAT rules, UDR.
ASP.NET Web App trên Azure
Deploy ASP.NET app lên App Service, deployment slots, auto-scale, Application Insights integration.
Tổng Hợp — End-to-End Project
Dựng hạ tầng 3-tier hoàn chỉnh: identity, VNet, LB, App Gateway, Monitor, Backup, DR — từ đầu đến cuối.