

Lab 09 — Virtual Machine Lifecycle and Managed Disks
Build an isolated Ubuntu VM, move its resources, resize it safely, diagnose an actual full-data-volume error, expand the managed disk and ext4 filesystem, and verify identities, hashes and cleanup.

Christos Panagiotidis
11 min read


Lab 08 — Storage Resiliency and Data Protection
Continue the AZ-104-based azure administrator series: compare redundancy and recovery, observe object replication, restore blob versions, deleted containers and Azure Files data, then verify hashes and cleanup.

Christos Panagiotidis
10 min read


Lab 07 — Secure Storage Access and Data Movement
Continue the AZ-104-based azure administrator series with AzCopy, Storage Explorer, SAS policies, storage firewalls, Azure Files REST and access-key rotation. Follow a synthetic dataset through controlled faults, recovery and SHA-256 verification.

Christos Panagiotidis
9 min read


Lab 06 — Azure DNS, Private Access, and Bastion
Continue the AZ-104-based azure administrator series with Azure DNS, Bastion Developer, managed identity, service endpoints and Private Link. A practical tutorial with CLI, PowerShell, genuine Portal screenshots, scripts and a DNS recovery challenge.

Christos Panagiotidis
10 min read


Lab 05 — Virtual Networks, Peering, Routing, and Security
Continue the AZ-104-based azure administrator series: build two peered VNets, diagnose a real private HTTP failure using effective routes and NSG decisions, recover with PowerShell, and verify cleanup. Includes tested scripts and genuine Portal evidence.

Christos Panagiotidis
12 min read


Lab 04 — ARM and Bicep Deployment Operations
Continue the AZ-104-based azure administrator series: interpret and deploy Bicep and ARM templates, diagnose an actual missing-parent deployment failure, recover a private subnet, export and decompile, then verify cleanup. Includes genuine Portal evidence and tested scripts.

Christos Panagiotidis
11 min read


Lab 03 — Azure Governance Guardrails and Cost Control
Continue the AZ-104-based azure administrator series: use Azure CLI, PowerShell and Portal to diagnose a denied tag deployment, preserve Policy and locks, inspect a disabled budget notification, recover and clean up. Includes genuine screenshots and tested scripts.

Christos Panagiotidis
8 min read


Lab 02 — Microsoft Entra Identity Lifecycle: Users, Groups, and SSPR Readiness
Continue the azure administrator series with disabled training users, an onboarding security group, and a controlled membership fault. Live-tested CLI and Graph PowerShell recovery; licensing, external users, and SSPR readiness are clearly marked guided topics.

Christos Panagiotidis
9 min read


Lab 01 — Scoped Azure RBAC: Assign, Diagnose, and Recover
Start the azure administrator series: build a scoped Reader assignment, diagnose a wrong-scope fault, and recover with Azure CLI, native PowerShell, and the Portal. Includes runnable scripts and live-tested evidence.

Christos Panagiotidis
8 min read


Azure Point-to-Site VPN: Entra Authentication and Private Resource Access
Connect a Windows workstation to private Azure resources using Microsoft Entra authentication, Azure VPN Client, private DNS, and a verified missing-route troubleshooting exercise.

Christos Panagiotidis
10 min read


Azure Monitor Private Link Deep Dive: AMPLS, AMA, DCRs, and Private Ingestion
Build a private Azure Monitor pipeline with AMPLS, Azure Monitor Agent, data collection rules, private DNS, and verified ingestion and query boundaries.

Christos Panagiotidis
10 min read


Azure Deployment Stacks Deep Dive: Safe IaC Lifecycle, Deny Settings, and Cleanup
Build and validate Azure Deployment Stacks with Bicep, Azure CLI, deny settings, managed resource lifecycle controls, safe detachment, and verified cleanup.

Christos Panagiotidis
4 min read


AZ-104 Complete Learning Environment: 28 Command-First Azure Administrator Labs
Explore an offline-validated, command-first AZ-104 learning environment with 28 labs, 1,250 objective-mapped questions, deterministic break/fix exercises, automated validation, and safe cleanup.

Christos Panagiotidis
7 min read


Azure Golden Images Deep Dive: VM Image Builder, Compute Gallery, Trusted Launch, and Version Rollout
Build and validate a patched Windows Server 2025 golden-image pipeline with Azure VM Image Builder, Compute Gallery replication, Trusted Launch, immutable version rollout, and rollback.

Christos Panagiotidis
7 min read


Azure Private Subnets: Replacing Default Outbound Access with NAT Gateway
Build a private Azure subnet with no implicit internet access, prove outbound failure, add StandardV2 NAT Gateway, validate deterministic egress and SNAT behavior, and analyze native flow logs.

Christos Panagiotidis
9 min read


Private Azure Container Apps: Zero Public Ingress and Managed Identity
Build and validate a private Azure Container Apps platform with Terraform, private endpoints, private DNS, managed identity, Key Vault, Front Door Private Link, and WAF enforcement.

Christos Panagiotidis
7 min read


Azure Network Security Perimeter: Learning Mode to Zero-Trust Enforcement
Build and validate an Azure Network Security Perimeter with Terraform, managed identities, Storage, Key Vault, transition-mode access logs, enforced denials, and explicit Zero Trust recovery.

Christos Panagiotidis
6 min read


Azure Virtual Desktop Deep Dive: Entra Join, FSLogix, Scaling Plans, and Monitoring
Build a pooled Azure Virtual Desktop environment with Microsoft Entra-joined Windows 11 session hosts, FSLogix profiles on Azure Files, autoscale scaling plans, and Azure Monitor Insights.

Christos Panagiotidis
10 min read


Azure Landing Zone Deep Dive: Management Groups, Guardrails, and Subscription Vending
Build and validate an Azure platform landing zone with Terraform, Azure CLI, management groups, inherited policy, RBAC, centralized logging, and safe subscription onboarding.

Christos Panagiotidis
7 min read


Azure FinOps Deep Dive: Budgets, Cost Exports, and Automated Guardrails
Build a hands-on Azure FinOps environment with tag inheritance, budgets, scheduled cost exports, Cost Management queries, and a least-privilege VM shutdown guardrail.

Christos Panagiotidis
8 min read








