├── README.md ├── AZ-104 └── AZ-104.md ├── AZ-303 └── AZ-303.md └── AZ-304 └── AZ-304.md /README.md: -------------------------------------------------------------------------------- 1 | # A collection of Azure Exam Resources 2 | -------------------------------------------------------------------------------- /AZ-104/AZ-104.md: -------------------------------------------------------------------------------- 1 | --- 2 | Last updated: 06/03/2020 3 | 4 | --- 5 | 6 | ## Links you may find useful 7 | Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more. 8 | 9 | --- 10 | 11 | Skyline Academy: \ 12 | https://courses.skylinesacademy.com/p/az-100 13 | 14 | Scott Duffy:\ 15 | https://www.udemy.com/course/70533-azure/ 16 | 17 | --- 18 | 19 | ## Microsoft Learn Resources 20 | 21 | Below you will find a list of **free** resources from Microsoft on their Microsoft Learn site. 22 | 23 | --- 24 | Administer infrastructure resources in Azure (12 Modules) \ 25 | https://docs.microsoft.com/en-us/learn/paths/administer-infrastructure-resources-in-azure?WT.mc_id=AZ-MVP-5003450 26 | 27 | Architect storage infrastructure in Azure (7 Modules) \ 28 | https://docs.microsoft.com/learn/paths/architect-storage-infrastructure?WT.mc_id=AZ-MVP-5003450 29 | 30 | Architect network infrastructure in Azure (12 Modules) \ 31 | https://docs.microsoft.com/learn/paths/architect-network-infrastructure?WT.mc_id=AZ-MVP-5003450 32 | 33 | Architect infrastructure operations in Azure (5 Modules) \ 34 | https://docs.microsoft.com/learn/paths/architect-infrastructure-operations?WT.mc_id=AZ-MVP-5003450 35 | 36 | Architect compute infrastructure in Azure (9 Modules) \ 37 | https://docs.microsoft.com/learn/paths/architect-compute-infrastructure?WT.mc_id=AZ-MVP-5003450 38 | 39 | Architect migration, business continuity, and disaster recovery in Azure (9 Modules) \ 40 | https://docs.microsoft.com/learn/paths/architect-migration-bcdr?WT.mc_id=AZ-MVP-5003450 41 | 42 | Manage resources in Azure (6 Modules) \ 43 | https://docs.microsoft.com/learn/paths/manage-resources-in-azure?WT.mc_id=AZ-MVP-5003450 44 | 45 | Manage identity and access in Azure Active Directory (7 Modules) \ 46 | https://docs.microsoft.com/learn/paths/manage-identity-and-access?WT.mc_id=AZ-MVP-5003450 47 | 48 | Manage security operations in Azure (8 Modules) \ 49 | https://docs.microsoft.com/learn/paths/manage-security-operations?WT.mc_id=AZ-MVP-5003450 50 | 51 | Implement resource management security in Azure (6 Modules) \ 52 | https://docs.microsoft.com/learn/paths/implement-resource-mgmt-security?WT.mc_id=AZ-MVP-5003450 53 | 54 | Administer containers in Azure (6 Modules) \ 55 | https://docs.microsoft.com/learn/paths/administer-containers-in-azure?WT.mc_id=AZ-MVP-5003450 56 | 57 | --- 58 | 59 | ## Exam registration page 60 | 61 | https://docs.microsoft.com/en-us/learn/certifications/exams/az-104?WT.mc_id=AZ-MVP-5003450 62 | 63 | --- 64 | 65 | # The study guide 66 | 67 | ### Manage Azure Identities and Governance (15-20%) 68 | --- 69 | ### Manage Azure AD objects 70 | 71 | Create users and groups\ 72 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory?WT.mc_id=AZ-MVP-5003450 \ 73 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal?WT.mc_id=AZ-MVP-5003450 74 | 75 | Manage user and group properties\ 76 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal?WT.mc_id=AZ-MVP-5003450 \ 77 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-settings-azure-portal?WT.mc_id=AZ-MVP-5003450 78 | 79 | Manage device settings\ 80 | https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal?WT.mc_id=AZ-MVP-5003450 81 | 82 | Perform bulk user updates\ 83 | https://blogs.technet.microsoft.com/active-directory/bulk-user-modification/?WT.mc_id=AZ-MVP-5003450 84 | 85 | Manage guest accounts\ 86 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal?WT.mc_id=AZ-MVP-5003450 87 | 88 | Configure Azure AD Join\ 89 | https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network?WT.mc_id=AZ-MVP-5003450 \ 90 | https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/hybrid-azuread-join-managed-domains?WT.mc_id=AZ-MVP-5003450 91 | 92 | Configure self-service password reset\ 93 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr?WT.mc_id=AZ-MVP-5003450 94 | 95 | --- 96 | 97 | ### Manage role-based access control (RBAC) 98 | 99 | Create a custom role \ 100 | https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell?WT.mc_id=AZ-MVP-5003450 101 | 102 | Provide access to Azure resources by assigning roles: subscriptions, resource groups and resources (VM, disk, etc.)\ 103 | https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment?WT.mc_id=AZ-MVP-5003450 104 | 105 | Interpret access assignments\ 106 | https://docs.microsoft.com/en-us/azure/role-based-access-control/deny-assignments?WT.mc_id=AZ-MVP-5003450 107 | 108 | Manage multiple directories\ 109 | https://techcommunity.microsoft.com/Azure-Active-Directory-Identity/Creating-and-Managing-Multiple-Windows-Azure-Active-Directories/ba-p/243428?WT.mc_id=AZ-MVP-5003450 110 | 111 | --- 112 | 113 | ### Manage subscriptions and governance 114 | 115 | Configure Azure policies\ 116 | https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage?WT.mc_id=AZ-MVP-5003450 117 | 118 | Configure resource locks\ 119 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources?WT.mc_id=AZ-MVP-5003450 120 | 121 | Apply tags \ 122 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags?WT.mc_id=AZ-MVP-5003450 123 | 124 | Create and manage resource groups 125 | 126 | Move resources\ 127 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources?WT.mc_id=AZ-MVP-5003450 128 | 129 | Remove RGs\ 130 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-use-the-portal?WT.mc_id=AZ-MVP-5003450 131 | 132 | Manage subscriptions\ 133 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory?WT.mc_id=AZ-MVP-5003450 134 | 135 | Configure Cost Management\ 136 | https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview?WT.mc_id=AZ-MVP-5003450 137 | 138 | Configure management groups\ 139 | https://docs.microsoft.com/en-us/azure/governance/management-groups/create?WT.mc_id=AZ-MVP-5003450 140 | 141 | --- 142 | 143 | ### Implement and Manage Storage (10-15%) 144 | 145 | ## Manage storage accounts 146 | 147 | Configure network access to the storage account\ 148 | https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?WT.mc_id=AZ-MVP-5003450 149 | 150 | Create and configure storage account\ 151 | https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?WT.mc_id=AZ-MVP-5003450 \ 152 | https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450 153 | 154 | Generate shared access signature\ 155 | https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1?WT.mc_id=AZ-MVP-5003450 156 | 157 | Manage access keys\ 158 | https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450 159 | 160 | Implement Azure storage replication\ 161 | https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450 162 | 163 | configure Azure AD Authentication for a storage account\ 164 | https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?WT.mc_id=AZ-MVP-5003450 165 | 166 | --- 167 | 168 | ### Manage data in Azure Storage 169 | 170 | Export from Azure job\ 171 | https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs?WT.mc_id=AZ-MVP-5003450 172 | 173 | Import into Azure job\ 174 | https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-blobs?WT.mc_id=AZ-MVP-5003450 175 | 176 | Install and use Azure Storage Explorer\ 177 | https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer?WT.mc_id=AZ-MVP-5003450 178 | 179 | Copy data by using AZCopy\ 180 | https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?WT.mc_id=AZ-MVP-5003450 181 | 182 | --- 183 | 184 | ### Configure Azure files and Azure blob storage 185 | 186 | Create an Azure file share\ 187 | https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?WT.mc_id=AZ-MVP-5003450 188 | 189 | Create and configure Azure File Sync service\ 190 | https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal?WT.mc_id=AZ-MVP-5003450 191 | 192 | Configure Azure blob storage\ 193 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal?WT.mc_id=AZ-MVP-5003450 194 | 195 | Configure storage tiers for Azure blobs\ 196 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal?WT.mc_id=AZ-MVP-5003450 197 | 198 | --- 199 | 200 | ### Deploy and Manage Azure Compute Resources (25-30%) 201 | 202 | ### Configure VMs for high availability and scalability 203 | 204 | Configure high availability\ 205 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets?WT.mc_id=AZ-MVP-5003450 206 | 207 | 208 | Deploy and configure scale sets\ 209 | https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal?WT.mc_id=AZ-MVP-5003450 210 | 211 | --- 212 | 213 | ### Automate deployment and configuration of VMs 214 | 215 | Modify Azure Resource Manager (ARM) template\ 216 | https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource?WT.mc_id=AZ-MVP-5003450 217 | 218 | Configure VHD template\ 219 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized?WT.mc_id=AZ-MVP-5003450 220 | 221 | Deploy from template\ 222 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template?WT.mc_id=AZ-MVP-5003450 223 | 224 | Save a deployment as an ARM template\ 225 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template?WT.mc_id=AZ-MVP-5003450 226 | 227 | Automate configuration management by using custom script extensions\ 228 | https://blogs.technet.microsoft.com/stefan-stranger/using-azure-custom-script-extension-to-execute-scripts-on-azure-vms/?WT.mc_id=AZ-MVP-5003450 229 | 230 | --- 231 | 232 | ### Create and configure VMs 233 | 234 | Configure Azure Disk Encryption\ 235 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart?WT.mc_id=AZ-MVP-5003450 236 | 237 | Move VMs from one resource group to another\ 238 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm?WT.mc_id=AZ-MVP-5003450 239 | 240 | Manage VM sizes\ 241 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes?WT.mc_id=AZ-MVP-5003450 242 | 243 | Add data discs\ 244 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps?WT.mc_id=AZ-MVP-5003450 245 | 246 | Configure networking\ 247 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview?WT.mc_id=AZ-MVP-5003450 248 | 249 | Redeploy VMs\ 250 | https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node-windows?WT.mc_id=AZ-MVP-5003450 251 | 252 | --- 253 | 254 | ### Create and configure containers 255 | 256 | Create and configure Azure Kubernetes Service (AKS)\ 257 | https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal?WT.mc_id=AZ-MVP-5003450 258 | 259 | Create and configure Azure Container Instances (ACI)\ 260 | https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart?WT.mc_id=AZ-MVP-5003450 261 | 262 | --- 263 | 264 | ### Create and configure Web Apps 265 | 266 | Create and configure App Service\ 267 | https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet?WT.mc_id=AZ-MVP-5003450 268 | 269 | Create and configure App Service Plans\ 270 | https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage?WT.mc_id=AZ-MVP-5003450 271 | 272 | --- 273 | 274 | ### Configure and Manage Virtual Networking (30-35%) 275 | 276 | ### Implement and manage virtual networking 277 | 278 | Create and configure VNET peering\ 279 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=AZ-MVP-5003450 280 | 281 | Configure private and public IP addresses network routes, network interface, subnets, and virtual network \ 282 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address?WT.mc_id=AZ-MVP-5003450 \ 283 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal?WT.mc_id=AZ-MVP-5003450 \ 284 | https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal?WT.mc_id=AZ-MVP-5003450 \ 285 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface?WT.mc_id=AZ-MVP-5003450 \ 286 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet?WT.mc_id=AZ-MVP-5003450 \ 287 | https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network?WT.mc_id=AZ-MVP-5003450 288 | 289 | --- 290 | 291 | ### Configure name resolution 292 | 293 | Configure Azure DNS\ 294 | https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-portal?WT.mc_id=AZ-MVP-5003450 295 | 296 | Configure custom DNS settings\ 297 | https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain?WT.mc_id=AZ-MVP-5003450 298 | 299 | Configure a private or public DNS zone\ 300 | https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-powershell?WT.mc_id=AZ-MVP-5003450 \ 301 | https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns?WT.mc_id=AZ-MVP-5003450 302 | 303 | --- 304 | 305 | ### Secure access to virtual networks 306 | 307 | Create security rules\ 308 | https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group?WT.mc_id=AZ-MVP-5003450 309 | 310 | Associate an NSG to a subnet or network interface\ 311 | https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group?WT.mc_id=AZ-MVP-5003450 312 | 313 | Evaluate effective security rules\ 314 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface?WT.mc_id=AZ-MVP-5003450 315 | 316 | Deploy and configure Azure Firewall\ 317 | https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal?WT.mc_id=AZ-MVP-5003450 318 | 319 | Deploy and configure Azure Bastion Service\ 320 | https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal?WT.mc_id=AZ-MVP-5003450 321 | 322 | --- 323 | 324 | ### Configure load balancing 325 | 326 | Configure Application Gateway\ 327 | https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell?WT.mc_id=AZ-MVP-5003450 328 | 329 | Configure an internal load balancer\ 330 | https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-basic-internal-portal?WT.mc_id=AZ-MVP-5003450 331 | 332 | Configure load balancing rules\ 333 | https://docs.microsoft.com/en-us/azure/load-balancer/configure-load-balancer-outbound-cli?WT.mc_id=AZ-MVP-5003450 334 | 335 | Configure a public load balancer\ 336 | https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-internet-availability-zones-zonal-powershell?WT.mc_id=AZ-MVP-5003450 337 | 338 | Troubleshoot load balancing\ 339 | https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-troubleshoot?WT.mc_id=AZ-MVP-5003450 340 | 341 | --- 342 | 343 | ### Monitor and troubleshoot virtual networking 344 | 345 | Monitor on-premises connectivity\ 346 | https://blogs.technet.microsoft.com/step-by-step-monitoring-on-premise-active-directory-via-azure-ad-connect-health/?WT.mc_id=AZ-MVP-5003450 347 | 348 | Use Network resource monitoring\ 349 | https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor?WT.mc_id=AZ-MVP-5003450 350 | 351 | Use Network Watcher\ 352 | https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-create?WT.mc_id=AZ-MVP-5003450 353 | 354 | Troubleshoot external networking\ 355 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect?WT.mc_id=AZ-MVP-5003450 356 | 357 | Troubleshoot virtual network connectivity\ 358 | https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks?WT.mc_id=AZ-MVP-5003450 359 | 360 | --- 361 | 362 | ### Integrate an on-premises network with an Azure virtual network 363 | 364 | Create and configure Azure VPN Gateway\ 365 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell?WT.mc_id=AZ-MVP-5003450 366 | 367 | Create and configure VPNs\ 368 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal?WT.mc_id=AZ-MVP-5003450 369 | 370 | Configure ExpressRoute\ 371 | https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager?WT.mc_id=AZ-MVP-5003450 372 | 373 | Verify on premises connectivity\ 374 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager?WT.mc_id=AZ-MVP-5003450 375 | 376 | Configure Azure Virtual WAN\ 377 | https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan?WT.mc_id=AZ-MVP-5003450 378 | 379 | --- 380 | 381 | ### Monitor and back up Azure resources (10-15%) 382 | 383 | ### Monitor resources by using Azure Monitor 384 | 385 | Configure and interpret metrics 386 | 387 | analyze metrics across subscriptions\ 388 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-metrics?WT.mc_id=AZ-MVP-5003450 \ 389 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts?WT.mc_id=AZ-MVP-5003450 390 | 391 | Configure Log Analytics 392 | 393 | implement a Log Analytics workspace\ 394 | https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace?WT.mc_id=AZ-MVP-5003450 395 | 396 | configure diagnostic settings\ 397 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-collect-workspace?WT.mc_id=AZ-MVP-5003450 398 | 399 | Query and analyze logs 400 | 401 | create a query\ 402 | https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries?WT.mc_id=AZ-MVP-5003450 403 | 404 | save a query to the dashboard\ 405 | https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#save-queries?WT.mc_id=AZ-MVP-5003450 406 | 407 | interpret graphs\ 408 | https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-logs-dashboards#visualize-a-log-query?WT.mc_id=AZ-MVP-5003450 409 | 410 | Set up alerts and actions 411 | 412 | create and test alerts\ 413 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric?WT.mc_id=AZ-MVP-5003450 414 | 415 | create action groups\ 416 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups?WT.mc_id=AZ-MVP-5003450 417 | 418 | view alerts in Azure Monitor\ 419 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric#view-and-manage-with-azure-portal?WT.mc_id=AZ-MVP-5003450 420 | 421 | analyze alerts across subscriptions\ 422 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances?WT.mc_id=AZ-MVP-5003450 423 | 424 | 425 | Configure Application Insights\ 426 | https://docs.microsoft.com/en-us/azure/azure-monitor/learn/dotnetcore-quick-start?WT.mc_id=AZ-MVP-5003450 427 | 428 | --- 429 | 430 | ### Implement backup and recovery 431 | 432 | Configure and review backup reports\ 433 | https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports?WT.mc_id=AZ-MVP-5003450 434 | 435 | Perform backup and restore operations by using Azure Backup Service\ 436 | https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal?WT.mc_id=AZ-MVP-5003450 \ 437 | https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms?WT.mc_id=AZ-MVP-5003450 438 | 439 | Create a Recovery Services Vault 440 | 441 | use soft delete to recover Azure VMs\ 442 | https://docs.microsoft.com/en-us/azure/backup/backup-create-rs-vault?WT.mc_id=AZ-MVP-5003450 \ 443 | https://azure.microsoft.com/en-in/updates/soft-delete-virtual-machine-backup/?WT.mc_id=AZ-MVP-5003450 444 | 445 | Create and configure backup policy\ 446 | https://docs.microsoft.com/en-us/cli/azure/backup/policy?view=azure-cli-latest?WT.mc_id=AZ-MVP-5003450 447 | 448 | Perform site-to-site recovery by using Azure Site Recovery\ 449 | https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure-for-hyperv?WT.mc_id=AZ-MVP-5003450 450 | -------------------------------------------------------------------------------- /AZ-303/AZ-303.md: -------------------------------------------------------------------------------- 1 | --- 2 | Last updated: 16/03/2020 3 | 4 | --- 5 | 6 | ## Links you may find useful 7 | Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more. 8 | 9 | --- 10 | 11 | Skyline Academy: \ 12 | https://courses.skylinesacademy.com/p/microsoft-az-300-certification-azure-architect-technologies 13 | 14 | Scott Duffy: \ 15 | https://www.udemy.com/course/70534-azure/ 16 | 17 | --- 18 | 19 | ## Microsoft Learn Resources 20 | 21 | Below you will find a list of **free** resources from Microsoft on their Microsoft Learn site. 22 | 23 | Architect great solutions in Azure \ 24 | https://docs.microsoft.com/learn/paths/architect-great-solutions-in-azure?WT.mc_id=AZ-MVP-5003450 25 | 26 | Architect network infrastructure in Azure \ 27 | https://docs.microsoft.com/learn/paths/architect-network-infrastructure?WT.mc_id=AZ-MVP-5003450 28 | 29 | Architect a data platform in Azure \ 30 | https://docs.microsoft.com/learn/paths/architect-data-platform?WT.mc_id=AZ-MVP-5003450 31 | 32 | Architect storage infrastructure in Azure \ 33 | https://docs.microsoft.com/learn/paths/architect-storage-infrastructure?WT.mc_id=AZ-MVP-5003450 34 | 35 | Architect compute infrastructure in Azure \ 36 | https://docs.microsoft.com/learn/paths/architect-compute-infrastructure?WT.mc_id=AZ-MVP-5003450 37 | 38 | Architect infrastructure operations in Azure \ 39 | https://docs.microsoft.com/learn/paths/architect-infrastructure-operations?WT.mc_id=AZ-MVP-5003450 40 | 41 | Architect migration, business continuity, and disaster recovery in Azure \ 42 | https://docs.microsoft.com/learn/paths/architect-migration-bcdr?WT.mc_id=AZ-MVP-5003450 43 | 44 | Architect modern applications in Azure \ 45 | https://docs.microsoft.com/learn/paths/architect-modern-apps?WT.mc_id=AZ-MVP-5003450 46 | 47 | Architect secure infrastructure in Azure \ 48 | https://docs.microsoft.com/learn/paths/architect-secure-infrastructure?WT.mc_id=AZ-MVP-5003450 49 | 50 | --- 51 | 52 | ## Exam registration page 53 | 54 | https://docs.microsoft.com/en-us/learn/certifications/exams/az-303?WT.mc_id=AZ-MVP-5003450 55 | 56 | --- 57 | 58 | # The study guide 59 | 60 | 61 | ### Implement and monitor an Azure infrastructure (50-55%) 62 | --- 63 | 64 | ### Implement cloud infrastructure monitoring 65 | 66 | Monitor security \ 67 | https://docs.microsoft.com/en-us/azure/security-center/security-center-monitoring?WT.mc_id=AZ-MVP-5003450 68 | https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring?WT.mc_id=AZ-MVP-5003450 69 | https://docs.microsoft.com/en-us/azure/security/fundamentals/infrastructure-monitoring?WT.mc_id=AZ-MVP-5003450 70 | 71 | Monitor performance 72 | 73 | Configure diagnostic settings on resources \ 74 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings?WT.mc_id=AZ-MVP-5003450 75 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings-template?WT.mc_id=AZ-MVP-5003450 76 | 77 | Create a performance baseline for resources \ 78 | https://docs.microsoft.com/en-us/rest/api/monitor/metricbaseline/get?WT.mc_id=AZ-MVP-5003450 79 | 80 | Monitor for unused resources \ 81 | https://docs.microsoft.com/en-us/azure/azure-monitor/overview?WT.mc_id=AZ-MVP-5003450 82 | 83 | Monitor performance capacity \ 84 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-overview?WT.mc_id=AZ-MVP-5003450 85 | 86 | Visualize diagnostics data using Azure Monitor \ 87 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-visualizations?WT.mc_id=AZ-MVP-5003450 88 | 89 | Monitor health and availability 90 | 91 | Monitor networking \ 92 | https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-insights-overview?WT.mc_id=AZ-MVP-5003450 93 | 94 | Monitor service health \ 95 | https://azure.microsoft.com/en-us/features/service-health?WT.mc_id=AZ-MVP-5003450 96 | 97 | Monitor cost 98 | 99 | Monitor spend\ 100 | https://docs.microsoft.com/en-us/azure/architecture/framework/cost/monitoring?WT.mc_id=AZ-MVP-5003450 101 | https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending?WT.mc_id=AZ-MVP-5003450 102 | 103 | Report on spend \ 104 | https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/download-azure-invoice-daily-usage-date?WT.mc_id=AZ-MVP-5003450 105 | 106 | Configure advanced logging 107 | 108 | Implement and configure Azure Monitor insights, including App Insights, 109 | Networks, Containers \ 110 | https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview?WT.mc_id=AZ-MVP-5003450 111 | https://docs.microsoft.com/en-us/azure/azure-monitor/insights/insights-overview?WT.mc_id=AZ-MVP-5003450 112 | 113 | Configure a Log Analytics workspace \ 114 | https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace?WT.mc_id=AZ-MVP-5003450 115 | 116 | configure logging for workloads \ 117 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-logs?WT.mc_id=AZ-MVP-5003450 118 | 119 | Initiate automated responses by using Action Groups \ 120 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups?WT.mc_id=AZ-MVP-5003450 121 | 122 | Configure and manage advanced alerts 123 | 124 | Collect alerts and metrics across multiple subscriptions \ 125 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances?WT.mc_id=AZ-MVP-5003450 126 | 127 | View Alerts in Azure Monitor logs \ 128 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview?WT.mc_id=AZ-MVP-5003450 129 | 130 | --- 131 | 132 | ### Implement storage accounts 133 | 134 | Select storage account options based on a use case \ 135 | https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview?WT.mc_id=AZ-MVP-5003450 136 | https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction?WT.mc_id=AZ-MVP-5003450 137 | 138 | Configure Azure Files and blob storage \ 139 | https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?WT.mc_id=AZ-MVP-5003450 \ 140 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal?WT.mc_id=AZ-MVP-5003450 141 | 142 | Configure network access to the storage account \ 143 | https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?WT.mc_id=AZ-MVP-5003450 144 | 145 | Implement Shared Access Signatures and access policies \ 146 | https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature?WT.mc_id=AZ-MVP-5003450 147 | https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?WT.mc_id=AZ-MVP-5003450 148 | 149 | Implement Azure AD authentication for storage \ 150 | https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?WT.mc_id=AZ-MVP-5003450 151 | 152 | Manage access keys \ 153 | https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450 154 | 155 | Implement Azure storage replication \ 156 | https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450 157 | 158 | 159 | Implement Azure storage account failover \ 160 | https://docs.microsoft.com/en-us/azure/storage/common/storage-initiate-account-failover?WT.mc_id=AZ-MVP-5003450 161 | 162 | --- 163 | 164 | ### Implement VMs for Windows and Linux 165 | Configure High Availability \ 166 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets?WT.mc_id=AZ-MVP-5003450 167 | 168 | Configure storage for VMs \ 169 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal?WT.mc_id=AZ-MVP-5003450 170 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps?WT.mc_id=AZ-MVP-5003450 171 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types?WT.mc_id=AZ-MVP-5003450 172 | 173 | Select virtual machine size \ 174 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes?WT.mc_id=AZ-MVP-5003450 175 | https://docs.microsoft.com/en-us/azure/virtual-machines/linux/sizes?WT.mc_id=AZ-MVP-5003450 176 | 177 | Implement Azure Dedicated Hosts \ 178 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts-portal?WT.mc_id=AZ-MVP-5003450 179 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts?WT.mc_id=AZ-MVP-5003450 180 | 181 | Deploy and configure scale sets \ 182 | https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal?WT.mc_id=AZ-MVP-5003450 183 | 184 | Configure Azure Disk Encryption \ 185 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview?WT.mc_id=AZ-MVP-5003450 186 | https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview?WT.mc_id=AZ-MVP-5003450 187 | 188 | --- 189 | 190 | ### Automate deployment and configuration of resources 191 | Save a deployment as an Azure Resource Manager template \ 192 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal?WT.mc_id=AZ-MVP-5003450 193 | 194 | Modify Azure Resource Manager template \ 195 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell?WT.mc_id=AZ-MVP-5003450 196 | 197 | Evaluate location of new resources \ 198 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/conditional-resource-deployment?WT.mc_id=AZ-MVP-5003450 199 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-location?WT.mc_id=AZ-MVP-5003450 200 | 201 | Configure a virtual disk template \ 202 | https://docs.microsoft.com/en-us/azure/marketplace/cloud-partner-portal/virtual-machine/cpp-deploy-json-template?WT.mc_id=AZ-MVP-5003450 203 | 204 | Deploy from a template \ 205 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal?WT.mc_id=AZ-MVP-5003450 206 | 207 | Manage a template library \ 208 | https://bentaylor.work/2016/05/azure-arm-template-library/?WT.mc_id=AZ-MVP-5003450 209 | 210 | Create and execute an automation runbook \ 211 | https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-create-runbook?WT.mc_id=AZ-MVP-5003450 212 | 213 | --- 214 | 215 | ### Implement virtual networking 216 | Implement VNet to VNet connections\ 217 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal?WT.mc_id=AZ-MVP-5003450 218 | 219 | Implement VNet peering \ 220 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=AZ-MVP-5003450 221 | 222 | --- 223 | 224 | ### Implement Azure Active Directory 225 | Add custom domains \ 226 | https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain?WT.mc_id=AZ-MVP-5003450 227 | 228 | Configure Azure AD Identity Protection \ 229 | https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection?WT.mc_id=AZ-MVP-5003450 230 | 231 | Implement self-service password reset \ 232 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment?WT.mc_id=AZ-MVP-5003450 233 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks?WT.mc_id=AZ-MVP-5003450 234 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing?WT.mc_id=AZ-MVP-5003450 235 | 236 | Implement Conditional Access including MFA \ 237 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa?WT.mc_id=AZ-MVP-5003450 238 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk?WT.mc_id=AZ-MVP-5003450 239 | 240 | Configure user accounts for MFA \ 241 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?WT.mc_id=AZ-MVP-5003450 242 | 243 | Configure fraud alerts \ 244 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting?WT.mc_id=AZ-MVP-5003450 245 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings?WT.mc_id=AZ-MVP-5003450 246 | 247 | Configure bypass options \ 248 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings?WT.mc_id=AZ-MVP-5003450 249 | 250 | Configure Trusted IPs \ 251 | https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-configure-named-locations?WT.mc_id=AZ-MVP-5003450 252 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition?WT.mc_id=AZ-MVP-5003450 253 | 254 | Configure verification methods \ 255 | https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-manage-settings?WT.mc_id=AZ-MVP-5003450 256 | https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-first-time?WT.mc_id=AZ-MVP-5003450 257 | 258 | Implement and manage guest accounts \ 259 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b?WT.mc_id=AZ-MVP-5003450 260 | https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-guest-access-with-access-reviews?WT.mc_id=AZ-MVP-5003450 261 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal?WT.mc_id=AZ-MVP-5003450 262 | 263 | Manage multiple directories \ 264 | https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-directory-independence?WT.mc_id=AZ-MVP-5003450 265 | 266 | --- 267 | 268 | ### Implement and manage hybrid identities 269 | Install and configure Azure AD Connect \ 270 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express?WT.mc_id=AZ-MVP-5003450 271 | 272 | Identity synchronization options \ 273 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis?WT.mc_id=AZ-MVP-5003450 274 | 275 | Configure and manage password sync and password writeback \ 276 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback?WT.mc_id=AZ-MVP-5003450 277 | 278 | Configure single sign-on \ 279 | https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications?WT.mc_id=AZ-MVP-5003450 280 | 281 | Use Azure AD Connect Health \ 282 | https://docs.microsoft.com/bs-latn-ba/azure/active-directory/hybrid/whatis-azure-ad-connect?WT.mc_id=AZ-MVP-5003450 283 | 284 | --- 285 | 286 | ### Implement management and security solutions (25-30%) 287 | 288 | ### Manage workloads in Azure 289 | Migrate workloads using Azure Migrate 290 | Assess infrastructure \ 291 | https://docs.microsoft.com/en-gb/azure/migrate/migrate-services-overview?WT.mc_id=AZ-MVP-5003450 292 | 293 | Select a migration method \ 294 | https://azure.microsoft.com/en-gb/migration/migration-journey/#migrate?WT.mc_id=AZ-MVP-5003450 295 | 296 | Prepare the on-premises for migration \ 297 | https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure?WT.mc_id=AZ-MVP-5003450 298 | 299 | Recommend target infrastructure \ 300 | https://azure.microsoft.com/en-gb/blog/identify-your-move-groups-and-target-sizes-for-migration-with-azure-migrate/?WT.mc_id=AZ-MVP-5003450 301 | 302 | Implement Azure Backup for VMs \ 303 | https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm?WT.mc_id=AZ-MVP-5003450 304 | 305 | Implement disaster recovery \ 306 | https://azure.microsoft.com/en-gb/services/site-recovery/?WT.mc_id=AZ-MVP-5003450 307 | 308 | Implement Azure Update Management \ 309 | https://docs.microsoft.com/en-us/azure/automation/automation-update-management?WT.mc_id=AZ-MVP-5003450 310 | 311 | --- 312 | 313 | ### Implement load balancing and network security 314 | Implement Azure Load Balancer \ 315 | https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview?WT.mc_id=AZ-MVP-5003450 316 | 317 | Implement an application gateway \ 318 | https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal?WT.mc_id=AZ-MVP-5003450 319 | 320 | Implement a Web Application Firewall \ 321 | https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview?WT.mc_id=AZ-MVP-5003450 322 | 323 | Implement Azure Firewall \ 324 | https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal?WT.mc_id=AZ-MVP-5003450 325 | 326 | Implement the Azure Front Door Service \ 327 | https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door?WT.mc_id=AZ-MVP-5003450 328 | 329 | Implement Azure Traffic Manager \ 330 | https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile?WT.mc_id=AZ-MVP-5003450 331 | 332 | Implement Network Security Groups and Application Security Groups \ 333 | https://docs.microsoft.com/en-us/azure/virtual-network/security-overview?WT.mc_id=AZ-MVP-5003450 334 | 335 | Implement Bastion \ 336 | https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal?WT.mc_id=AZ-MVP-5003450 337 | 338 | --- 339 | 340 | ### Implement and manage Azure governance solutions 341 | Create and manage hierarchical structure that contains management groups, 342 | subscriptions and resource groups \ 343 | https://docs.microsoft.com/en-us/azure/governance/management-groups/overview?WT.mc_id=AZ-MVP-5003450 344 | 345 | Assign RBAC roles \ 346 | https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?WT.mc_id=AZ-MVP-5003450 347 | 348 | Create a custom RBAC role \ 349 | https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell?WT.mc_id=AZ-MVP-5003450 350 | 351 | Configure access to Azure resources by assigning roles \ 352 | https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?WT.mc_id=AZ-MVP-5003450 353 | 354 | Configure management access to Azure \ 355 | https://docs.microsoft.com/en-us/azure/role-based-access-control/conditional-access-azure-management?WT.mc_id=AZ-MVP-5003450 356 | 357 | Interpret effective permissions \ 358 | https://docs.microsoft.com/en-us/azure/role-based-access-control/overview?WT.mc_id=AZ-MVP-5003450 359 | 360 | Set up and perform an access review \ 361 | https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review?WT.mc_id=AZ-MVP-5003450 362 | 363 | Implement and configure an Azure Policy \ 364 | https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage?WT.mc_id=AZ-MVP-5003450 365 | 366 | Implement and configure an Azure Blueprint \ 367 | https://docs.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal?WT.mc_id=AZ-MVP-5003450 368 | 369 | --- 370 | 371 | ### Manage security for applications 372 | Implement and configure KeyVault \ 373 | https://docs.microsoft.com/en-us/azure/key-vault/quick-create-portal?WT.mc_id=AZ-MVP-5003450 374 | 375 | Implement and configure Azure AD Managed Identities \ 376 | https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm?WT.mc_id=AZ-MVP-5003450 377 | 378 | Register and manage applications in Azure AD \ 379 | https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-application-management?WT.mc_id=AZ-MVP-5003450 380 | 381 | --- 382 | ### Implement solutions for apps (10-15%) 383 | ### Implement an application infrastructure 384 | Create and configure Azure App Service \ 385 | https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet?WT.mc_id=AZ-MVP-5003450 386 | 387 | Create an App Service Web App for Containers \ 388 | https://docs.microsoft.com/en-us/azure/app-service/containers/quickstart-docker?WT.mc_id=AZ-MVP-5003450 389 | 390 | Create and configure an App Service plan \ 391 | https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage?WT.mc_id=AZ-MVP-5003450 392 | 393 | Configure an App Service \ 394 | https://docs.microsoft.com/en-us/azure/app-service/configure-common?WT.mc_id=AZ-MVP-5003450 395 | 396 | Configure networking for an App Service \ 397 | https://docs.microsoft.com/en-us/azure/app-service/networking-features?WT.mc_id=AZ-MVP-5003450 398 | 399 | Create and manage deployment slots \ 400 | https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots?WT.mc_id=AZ-MVP-5003450 401 | 402 | Implement Logic Apps \ 403 | https://docs.microsoft.com/en-us/azure/logic-apps/quickstart-create-first-logic-app-workflow?WT.mc_id=AZ-MVP-5003450 404 | 405 | Implement Azure Functions \ 406 | https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-first-azure-function?WT.mc_id=AZ-MVP-5003450 407 | 408 | --- 409 | 410 | ### Implement container-based applications 411 | Create a container image \ 412 | https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task?WT.mc_id=AZ-MVP-5003450 413 | 414 | Configure Azure Kubernetes Service \ 415 | https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal?WT.mc_id=AZ-MVP-5003450 416 | 417 | Publish and automate image deployment to the Azure Container Registry \ 418 | https://docs.microsoft.com/en-us/azure/container-registry/?WT.mc_id=AZ-MVP-5003450 419 | 420 | Publish a solution on an Azure Container Instance \ 421 | https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart?WT.mc_id=AZ-MVP-5003450 422 | 423 | --- 424 | ### Implement and manage data platforms (10-15%) 425 | ### Implement NoSQL databases 426 | Configure storage account tables \ 427 | https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overview?WT.mc_id=AZ-MVP-5003450 428 | 429 | Select appropriate CosmosDB APIs \ 430 | https://docs.microsoft.com/en-us/azure/cosmos-db/table-introduction?WT.mc_id=AZ-MVP-5003450 431 | 432 | Set up replicas in CosmosDB \ 433 | https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability?WT.mc_id=AZ-MVP-5003450 434 | 435 | --- 436 | 437 | ### Implement Azure SQL databases 438 | Configure Azure SQL database settings \ 439 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-howto-single-database?WT.mc_id=AZ-MVP-5003450 440 | 441 | Implement Azure SQL Database managed instances \ 442 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-get-started?WT.mc_id=AZ-MVP-5003450 443 | 444 | Configure HA for an Azure SQL database \ 445 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability?WT.mc_id=AZ-MVP-5003450 446 | 447 | Publish an Azure SQL database \ 448 | https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-dotnet-sqldatabase?WT.mc_id=AZ-MVP-5003450 449 | 450 | --- -------------------------------------------------------------------------------- /AZ-304/AZ-304.md: -------------------------------------------------------------------------------- 1 | --- 2 | Last updated: 30/09/2020 3 | 4 | --- 5 | 6 | ## Links you may find useful 7 | Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more. 8 | 9 | --- 10 | 11 | Skyline Academy: \ 12 | https://courses.skylinesacademy.com/p/az-301 13 | 14 | Scott Duffy:\ 15 | https://www.udemy.com/course/az301-azure/ 16 | 17 | --- 18 | 19 | ## Microsoft Learn Resources 20 | 21 | Below you will find a list of **free** resources from Microsoft on their Microsoft Learn site. 22 | 23 | Architect great solutions in Azure \ 24 | https://docs.microsoft.com/learn/paths/architect-great-solutions-in-azure?WT.mc_id=AZ-MVP-5003450 \ 25 | Architect network infrastructure in Azure \ 26 | https://docs.microsoft.com/learn/paths/architect-network-infrastructure?WT.mc_id=AZ-MVP-5003450 \ 27 | Architect a data platform in Azure \ 28 | https://docs.microsoft.com/learn/paths/architect-data-platform?WT.mc_id=AZ-MVP-5003450 \ 29 | Architect storage infrastructure in Azure \ 30 | https://docs.microsoft.com/learn/paths/architect-storage-infrastructure?WT.mc_id=AZ-MVP-5003450 \ 31 | Architect compute infrastructure in Azure \ 32 | https://docs.microsoft.com/learn/paths/architect-compute-infrastructure?WT.mc_id=AZ-MVP-5003450 \ 33 | Architect infrastructure operations in Azure \ 34 | https://docs.microsoft.com/learn/paths/architect-infrastructure-operations?WT.mc_id=AZ-MVP-5003450 \ 35 | Architect migration, business continuity, and disaster recovery in Azure \ 36 | https://docs.microsoft.com/learn/paths/architect-migration-bcdr?WT.mc_id=AZ-MVP-5003450 \ 37 | Architect modern applications in Azure \ 38 | https://docs.microsoft.com/learn/paths/architect-modern-apps?WT.mc_id=AZ-MVP-5003450 \ 39 | Architect secure infrastructure in Azure \ 40 | https://docs.microsoft.com/learn/paths/architect-secure-infrastructure?WT.mc_id=AZ-MVP-5003450 \ 41 | 42 | --- 43 | 44 | ## Exam registration page 45 | 46 | https://docs.microsoft.com/en-us/learn/certifications/exams/az-304?WT.mc_id=AZ-MVP-5003450 47 | 48 | --- 49 | 50 | # The study guide 51 | 52 | ### Design Monitoring (10-15%) 53 | --- 54 | 55 | ### Design for cost optimization 56 | 57 | Recommend a solution for cost management and cost reporting \ 58 | https://docs.microsoft.com/en-us/azure/cost-management-billing/costs?WT.mc_id=AZ-MVP-5003450 \ 59 | https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview \ 60 | https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/quick-acm-cost-analysis?WT.mc_id=AZ-MVP-5003450 \ 61 | 62 | Recommend solutions to minimize costs \ 63 | https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations?WT.mc_id=AZ-MVP-5003450 \ 64 | https://azure.microsoft.com/en-us/pricing/reserved-vm-instances?WT.mc_id=AZ-MVP-5003450 \ 65 | https://docs.microsoft.com/en-us/azure/cost-management-billing/reservations/save-compute-costs-reservations?WT.mc_id=AZ-MVP-5003450 \ 66 | --- 67 | 68 | ### Design a solution for logging and monitoring 69 | 70 | Determine levels and storage locations for logs \ 71 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-logs?WT.mc_id=AZ-MVP-5003450 \ 72 | https://docs.microsoft.com/en-us/azure/cdn/cdn-azure-diagnostic-logs?WT.mc_id=AZ-MVP-5003450 \ 73 | https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs?WT.mc_id=AZ-MVP-5003450 \ 74 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings?WT.mc_id=AZ-MVP-5003450 \ 75 | 76 | Plan for integration with monitoring tools including Azure Monitor and Azure Sentinel \ 77 | https://docs.microsoft.com/en-us/azure/azure-monitor/overview?WT.mc_id=AZ-MVP-5003450 \ 78 | https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-resource-logs?WT.mc_id=AZ-MVP-5003450 \ 79 | https://docs.microsoft.com/en-us/azure/sentinel/overview?WT.mc_id=AZ-MVP-5003450 \ 80 | https://docs.microsoft.com/en-us/azure/sentinel/quickstart-onboard?WT.mc_id=AZ-MVP-5003450 \ 81 | 82 | Recommend appropriate monitoring tool(s) for a solution \ 83 | https://docs.microsoft.com/en-us/azure/azure-monitor/overview?WT.mc_id=AZ-MVP-5003450 \ 84 | https://docs.microsoft.com/en-us/azure/architecture/best-practices/monitoring?WT.mc_id=AZ-MVP-5003450 \ 85 | 86 | Choose a mechanism for event routing and escalation \ 87 | https://docs.microsoft.com/en-us/azure/event-grid/overview?WT.mc_id=AZ-MVP-5003450 \ 88 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/stream-monitoring-data-event-hubs?WT.mc_id=AZ-MVP-5003450 \ 89 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups?WT.mc_id=AZ-MVP-5003450 \ 90 | 91 | Recommend a logging solution for compliance requirements \ 92 | https://docs.microsoft.com/en-us/azure/security/fundamentals/log-audit?WT.mc_id=AZ-MVP-5003450 \ 93 | https://docs.microsoft.com/en-us/azure/security/fundamentals/management-monitoring-overview?WT.mc_id=AZ-MVP-5003450 \ 94 | https://docs.microsoft.com/en-us/azure/security-center/security-center-intro?WT.mc_id=AZ-MVP-5003450 \ 95 | 96 | --- 97 | 98 | ### Design Identity and Security (25-30%) 99 | 100 | ### Design authentication 101 | 102 | Recommend a solution for single-sign on \ 103 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso?WT.mc_id=AZ-MVP-5003450 \ 104 | https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on?WT.mc_id=AZ-MVP-5003450 \ 105 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/configure-saas-apps?WT.mc_id=AZ-MVP-5003450 \ 106 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start?WT.mc_id=AZ-MVP-5003450 \ 107 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-faq?WT.mc_id=AZ-MVP-5003450 \ 108 | 109 | Recommend a solution for authentication \ 110 | https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios?WT.mc_id=AZ-MVP-5003450 \ 111 | https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-flows-app-scenarios?WT.mc_id=AZ-MVP-5003450 \ 112 | 113 | Recommend a solution for Conditional Access, including multi-factor authentication \ 114 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa?WT.mc_id=AZ-MVP-5003450 \ 115 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk?WT.mc_id=AZ-MVP-5003450 \ 116 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?WT.mc_id=AZ-MVP-5003450 \ 117 | 118 | Recommend a solution for network access authentication \ 119 | https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-configure-named-locations?WT.mc_id=AZ-MVP-5003450 \ 120 | https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition?WT.mc_id=AZ-MVP-5003450 \ 121 | 122 | Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD 123 | Connect Health \ 124 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom?WT.mc_id=AZ-MVP-5003450 \ 125 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-select-installation?WT.mc_id=AZ-MVP-5003450 \ 126 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-operations?WT.mc_id=AZ-MVP-5003450 \ 127 | https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect?WT.mc_id=AZ-MVP-5003450 \ 128 | 129 | Recommend a solution for user self-service \ 130 | https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment?WT.mc_id=AZ-MVP-5003450 \ 131 | 132 | Recommend and implement a solution for B2B integration \ 133 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b?WT.mc_id=AZ-MVP-5003450 \ 134 | https://docs.microsoft.com/en-us/azure/active-directory/b2b/compare-with-b2c?WT.mc_id=AZ-MVP-5003450 \ 135 | 136 | --- 137 | 138 | ### Design authorization 139 | 140 | Choose an authorization approach \ 141 | https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios?WT.mc_id=AZ-MVP-5003450 \ 142 | 143 | Recommend a hierarchical structure that includes management groups, subscriptions and 144 | resource groups \ 145 | https://docs.microsoft.com/en-us/azure/governance/azure-management?WT.mc_id=AZ-MVP-5003450 \ 146 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview?WT.mc_id=AZ-MVP-5003450 \ 147 | https://docs.microsoft.com/en-us/azure/governance/management-groups/overview?WT.mc_id=AZ-MVP-5003450 \ 148 | https://docs.microsoft.com/en-us/azure/governance/management-groups/create?WT.mc_id=AZ-MVP-5003450 \ 149 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resource-groups-portal?WT.mc_id=AZ-MVP-5003450 \ 150 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits?WT.mc_id=AZ-MVP-5003450 \ 151 | 152 | Recommend an access management solution including RBAC policies, access reviews, 153 | role assignments, physical access, Privileged Identity Management (PIM), Azure AD 154 | Identity Protection, Just In Time (JIT) access \ 155 | https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?WT.mc_id=AZ-MVP-5003450 \ 156 | https://docs.microsoft.com/en-us/azure/role-based-access-control/overview?WT.mc_id=AZ-MVP-5003450 \ 157 | https://docs.microsoft.com/en-us/azure/role-based-access-control/check-access?WT.mc_id=AZ-MVP-5003450 \ 158 | https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview?WT.mc_id=AZ-MVP-5003450 \ 159 | https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection \ 160 | https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time?WT.mc_id=AZ-MVP-5003450 \ 161 | https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure?WT.mc_id=AZ-MVP-5003450 \ 162 | 163 | --- 164 | 165 | ### Design governance 166 | 167 | Recommend a strategy for tagging \ 168 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources?WT.mc_id=AZ-MVP-5003450 \ 169 | 170 | Recommend a solution for using Azure Policy \ 171 | https://docs.microsoft.com/en-us/azure/governance/policy/overview?WT.mc_id=AZ-MVP-5003450 \ 172 | https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage?WT.mc_id=AZ-MVP-5003450 \ 173 | 174 | Recommend a solution for using Azure Blueprint \ 175 | https://docs.microsoft.com/en-us/azure/governance/blueprints/overview?WT.mc_id=AZ-MVP-5003450 \ 176 | https://docs.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal?WT.mc_id=AZ-MVP-5003450 \ 177 | 178 | --- 179 | 180 | ### Design security for applications 181 | 182 | Recommend a solution that includes KeyVault \ 183 | What can be stored in KeyVault \ 184 | https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview?WT.mc_id=AZ-MVP-5003450 \ 185 | https://docs.microsoft.com/en-us/azure/key-vault/about-keys-secrets-and-certificates?WT.mc_id=AZ-MVP-5003450 \ 186 | 187 | KeyVault operations \ 188 | https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault?WT.mc_id=AZ-MVP-5003450 \ 189 | 190 | KeyVault regions \ 191 | https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance?WT.mc_id=AZ-MVP-5003450 \ 192 | 193 | Recommend a solution that includes Azure AD Managed Identities \ 194 | https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview?WT.mc_id=AZ-MVP-5003450 \ 195 | https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm?WT.mc_id=AZ-MVP-5003450 \ 196 | 197 | Recommend a solution for integrating applications into Azure AD \ 198 | https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications?WT.mc_id=AZ-MVP-5003450 \ 199 | 200 | --- 201 | ### Design Data Storage (15-20%) 202 | 203 | ### Design a solution for databases 204 | 205 | Select an appropriate data platform based on requirements \ 206 | https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/data-store-overview?WT.mc_id=AZ-MVP-5003450 \ 207 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-technical-overview?WT.mc_id=AZ-MVP-5003450 \ 208 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-paas-vs-sql-server-iaas?WT.mc_id=AZ-MVP-5003450 \ 209 | 210 | Recommend database service tier sizing\ 211 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service-tiers-general-purpose-business-critical?WT.mc_id=AZ-MVP-5003450 \ 212 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service-tier-general-purpose?WT.mc_id=AZ-MVP-5003450 \ 213 | 214 | Recommend a solution for database scalability \ 215 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-scalability-index?WT.mc_id=AZ-MVP-5003450 \ 216 | 217 | Recommend a solution for encrypting data at rest, data in transmission, and data in use \ 218 | https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest?WT.mc_id=AZ-MVP-5003450 \ 219 | https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview?WT.mc_id=AZ-MVP-5003450 \ 220 | https://docs.microsoft.com/en-us/azure/sql-database/transparent-data-encryption-azure-sql?WT.mc_id=AZ-MVP-5003450 \ 221 | 222 | --- 223 | 224 | ### Design data integration 225 | 226 | Recommend a data flow to meet business requirements \ 227 | https://docs.microsoft.com/en-us/azure/data-factory/data-flow-create?WT.mc_id=AZ-MVP-5003450 \ 228 | https://docs.microsoft.com/en-us/azure/data-factory/data-flow-source?WT.mc_id=AZ-MVP-5003450 \ 229 | 230 | Recommend a solution for data integration, including Azure Data Factory, Azure Data 231 | Bricks, Azure Data Lake, Azure Synapse Analytics \ 232 | https://docs.microsoft.com/en-us/azure/data-factory/introduction?WT.mc_id=AZ-MVP-5003450 \ 233 | https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-databricks?WT.mc_id=AZ-MVP-5003450 \ 234 | https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-overview?WT.mc_id=AZ-MVP-5003450 \ 235 | https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction?WT.mc_id=AZ-MVP-5003450 \ 236 | https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-what-is?WT.mc_id=AZ-MVP-5003450 \ 237 | 238 | --- 239 | 240 | ### Select an appropriate storage account 241 | 242 | Choose between storage tiers \ 243 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?WT.mc_id=AZ-MVP-5003450 \ 244 | 245 | Recommend a storage access solution \ 246 | https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage?WT.mc_id=AZ-MVP-5003450 \ 247 | https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction?WT.mc_id=AZ-MVP-5003450 \ 248 | https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?WT.mc_id=AZ-MVP-5003450 \ 249 | 250 | Recommend storage management tools \ 251 | https://docs.microsoft.com/en-us/azure/storage/common/storage-explorers?WT.mc_id=AZ-MVP-5003450 \ 252 | https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?WT.mc_id=AZ-MVP-5003450 \ 253 | 254 | --- 255 | ### Design Business Continuity (10-15%) 256 | 257 | ### Design a solution for backup and recovery 258 | 259 | Recommend a recovery solution for Azure hybrid and on-premises workloads that meets 260 | recovery objectives (RTO, RLO, RPO) \ 261 | https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview?WT.mc_id=AZ-MVP-5003450 \ 262 | https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-faq?WT.mc_id=AZ-MVP-5003450 \ 263 | https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-common-questions?WT.mc_id=AZ-MVP-5003450 \ 264 | https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-common-questions?WT.mc_id=AZ-MVP-5003450 \ 265 | https://docs.microsoft.com/en-us/azure/backup/backup-overview?WT.mc_id=AZ-MVP-5003450 \ 266 | https://docs.microsoft.com/en-us/azure/backup/backup-architecture?WT.mc_id=AZ-MVP-5003450 \ 267 | https://docs.microsoft.com/en-us/azure/backup/backup-mabs-protection-matrix?WT.mc_id=AZ-MVP-5003450 \ 268 | 269 | Design and Azure Site Recovery solution \ 270 | https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview?WT.mc_id=AZ-MVP-5003450 \ 271 | https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-faq?WT.mc_id=AZ-MVP-5003450 \ 272 | 273 | Recommend a site recovery replication policy \ 274 | https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-enable-replication#configure-replication-settings?WT.mc_id=AZ-MVP-5003450 \ 275 | 276 | Recommend a solution for site recovery capacity \ 277 | https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-capacity-planner?WT.mc_id=AZ-MVP-5003450 \ 278 | 279 | Recommend a solution for site failover and failback (planned/unplanned) \ 280 | https://docs.microsoft.com/en-us/azure/site-recovery/failover-failback-overview?WT.mc_id=AZ-MVP-5003450 \ 281 | 282 | Recommend a solution for the site recovery network \ 283 | https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-about-networking?WT.mc_id=AZ-MVP-5003450 \ 284 | 285 | Recommend a solution for recovery in different regions \ 286 | https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-quickstart?WT.mc_id=AZ-MVP-5003450 \ 287 | https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450 \ 288 | https://docs.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance?WT.mc_id=AZ-MVP-5003450 \ 289 | https://docs.microsoft.com/en-us/azure/storage/common/storage-designing-ha-apps-with-ragrs?WT.mc_id=AZ-MVP-5003450 \ 290 | 291 | Recommend a solution for Azure Backup management \ 292 | https://docs.microsoft.com/en-us/azure/backup/backup-azure-manage-windows-server?WT.mc_id=AZ-MVP-5003450 \ 293 | https://docs.microsoft.com/en-us/azure/backup/backup-architecture?WT.mc_id=AZ-MVP-5003450 \ 294 | 295 | Design a solution for data archiving and retention \ 296 | Recommend storage types and methodology for data archiving \ 297 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?WT.mc_id=AZ-MVP-5003450&tabs=azure-portal \ 298 | 299 | Identify business compliance requirements for data archiving \ 300 | https://docs.microsoft.com/en-us/azure/backup/compliance-offerings?WT.mc_id=AZ-MVP-5003450 \ 301 | https://docs.microsoft.com/en-us/azure/storage/common/storage-compliance-offerings?WT.mc_id=AZ-MVP-5003450 \ 302 | 303 | Identify requirements for data archiving \ 304 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?WT.mc_id=AZ-MVP-5003450 \ 305 | 306 | Identify SLA(s) for data archiving \ 307 | https://azure.microsoft.com/en-us/support/legal/sla/storage/v1_5/?WT.mc_id=AZ-MVP-5003450 \ 308 | https://azure.microsoft.com/en-gb/support/legal/sla/backup/v1_0/?WT.mc_id=AZ-MVP-5003450 \ 309 | https://azure.microsoft.com/en-us/support/legal/sla/site-recovery/v1_2/?WT.mc_id=AZ-MVP-5003450 \ 310 | 311 | Recommend a data retention policy \ 312 | https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?tabs=azure-portal#add-or-remove-a-policy?WT.mc_id=AZ-MVP-5003450 \ 313 | 314 | 315 | --- 316 | 317 | ### Design for high availability 318 | 319 | Recommend a solution for application and workload redundancy, including compute, 320 | database, and storage \ 321 | https://docs.microsoft.com/en-us/azure/availability-zones/az-overview?WT.mc_id=AZ-MVP-5003450 \ 322 | https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets?WT.mc_id=AZ-MVP-5003450 \ 323 | https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450 \ 324 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability?WT.mc_id=AZ-MVP-5003450 \ 325 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-business-continuity?WT.mc_id=AZ-MVP-5003450 \ 326 | 327 | Recommend a solution for autoscaling \ 328 | https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview?WT.mc_id=AZ-MVP-5003450 \ 329 | https://docs.microsoft.com/en-us/azure/architecture/best-practices/auto-scaling?WT.mc_id=AZ-MVP-5003450 \ 330 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-overview?WT.mc_id=AZ-MVP-5003450 \ 331 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-scale-resources?WT.mc_id=AZ-MVP-5003450 \ 332 | https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-scale-introduction?WT.mc_id=AZ-MVP-5003450 \ 333 | 334 | Identify resources that require high availability \ 335 | https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/considerations/data-options?WT.mc_id=AZ-MVP-5003450 \ 336 | 337 | Identify storage types for high availability \ 338 | https://docs.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance?WT.mc_id=AZ-MVP-5003450 \ 339 | 340 | Recommend a solution for geo-redundancy of workloads \ 341 | https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450 \ 342 | https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview?WT.mc_id=AZ-MVP-5003450 \ 343 | 344 | --- 345 | 346 | ### Design Infrastructure (25-30%) 347 | 348 | ### Design a compute solution 349 | 350 | Recommend a solution for compute provisioning \ 351 | https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree?WT.mc_id=AZ-MVP-5003450 \ 352 | 353 | Determine appropriate compute technologies, including virtual machines, App Services, 354 | Service Fabric, Azure Functions, Windows Virtual Desktop, and containers \ 355 | https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree?WT.mc_id=AZ-MVP-5003450 \ 356 | https://docs.microsoft.com/en-us/azure/app-service?WT.mc_id=AZ-MVP-5003450 \ 357 | https://docs.microsoft.com/en-us/azure/batch/batch-technical-overview?WT.mc_id=AZ-MVP-5003450 \ 358 | https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview?WT.mc_id=AZ-MVP-5003450 \ 359 | https://docs.microsoft.com/en-us/azure/azure-functions/functions-overview?WT.mc_id=AZ-MVP-5003450 \ 360 | https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-overview?WT.mc_id=AZ-MVP-5003450 \ 361 | https://docs.microsoft.com/en-us/azure/virtual-machines?WT.mc_id=AZ-MVP-5003450 \ 362 | https://docs.microsoft.com/en-us/azure/virtual-desktop/overview?WT.mc_id=AZ-MVP-5003450 \ 363 | 364 | Recommend a solution for containers \ 365 | AKS versus ACI and the configuration of each one\ 366 | https://docs.microsoft.com/en-us/azure/aks/intro-kubernetes?WT.mc_id=AZ-MVP-5003450 \ 367 | https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview?WT.mc_id=AZ-MVP-5003450 \ 368 | 369 | Recommend a solution for automating compute management \ 370 | https://docs.microsoft.com/en-us/azure/automation/automation-intro?WT.mc_id=AZ-MVP-5003450 \ 371 | https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview?WT.mc_id=AZ-MVP-5003450 372 | 373 | --- 374 | 375 | ### Design a network solution 376 | 377 | Recommend a solution for network addressing and name resolution \ 378 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances?WT.mc_id=AZ-MVP-5003450 \ 379 | https://docs.microsoft.com/en-us/azure/dns/dns-custom-domain?WT.mc_id=AZ-MVP-5003450 \ 380 | https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns?WT.mc_id=AZ-MVP-5003450 \ 381 | https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-portal?WT.mc_id=AZ-MVP-5003450 \ 382 | 383 | Recommend a solution for network provisioning \ 384 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview?WT.mc_id=AZ-MVP-5003450 \ 385 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview?WT.mc_id=AZ-MVP-5003450 \ 386 | https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview?WT.mc_id=AZ-MVP-5003450 \ 387 | 388 | Recommend a solution for network security \ 389 | Private endpoints \ 390 | https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview?WT.mc_id=AZ-MVP-5003450 \ 391 | 392 | Firewalls \ 393 | https://docs.microsoft.com/en-us/azure/firewall/overview?WT.mc_id=AZ-MVP-5003450 \ 394 | 395 | Gateways \ 396 | https://docs.microsoft.com/en-us/azure/application-gateway/overview?WT.mc_id=AZ-MVP-5003450 \ 397 | 398 | Recommend a solution for network connectivity to the Internet, on-premises networks, 399 | and other Azure virtual networks \ 400 | https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways?WT.mc_id=AZ-MVP-5003450 \ 401 | https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction?WT.mc_id=AZ-MVP-5003450 \ 402 | 403 | Recommend a solution for automating network management \ 404 | https://docs.microsoft.com/en-us/azure/virtual-network/template-samples?WT.mc_id=AZ-MVP-5003450 \ 405 | 406 | Recommend a solution for load balancing and traffic routing \ 407 | https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview?WT.mc_id=AZ-MVP-5003450 \ 408 | https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview?WT.mc_id=AZ-MVP-5003450 \ 409 | https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview?WT.mc_id=AZ-MVP-5003450 \ 410 | https://docs.microsoft.com/en-us/azure/application-gateway/overview?WT.mc_id=AZ-MVP-5003450/ \ 411 | https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview?WT.mc_id=AZ-MVP-5003450 \ 412 | 413 | --- 414 | 415 | ### Design an application architecture 416 | 417 | Recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, 418 | Storage Queues, Logic Apps, Azure Functions, and webhooks \ 419 | https://docs.microsoft.com/en-us/azure/architecture/guide/architecture-styles/microservices?WT.mc_id=AZ-MVP-5003450 \ 420 | https://docs.microsoft.com/en-us/azure/event-grid/overview?WT.mc_id=AZ-MVP-5003450 \ 421 | https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-features?WT.mc_id=AZ-MVP-5003450 \ 422 | https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview?WT.mc_id=AZ-MVP-5003450 \ 423 | https://docs.microsoft.com/en-us/azure/storage/queues/storage-queues-introduction?WT.mc_id=AZ-MVP-5003450 \ 424 | https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview?WT.mc_id=AZ-MVP-5003450 \ 425 | https://docs.microsoft.com/en-us/azure/azure-functions/functions-overview?WT.mc_id=AZ-MVP-5003450 \ 426 | https://docs.microsoft.com/en-us/azure/automation/automation-webhooks?WT.mc_id=AZ-MVP-5003450 \ 427 | 428 | Recommend an orchestration solution for deployment of applications including ARM 429 | templates, Logic Apps, or Azure Functions \ 430 | Select an automation method \ 431 | https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates?WT.mc_id=AZ-MVP-5003450 \ 432 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview?WT.mc_id=AZ-MVP-5003450 \ 433 | https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?WT.mc_id=AZ-MVP-5003450 \ 434 | https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview?WT.mc_id=AZ-MVP-5003450 \ 435 | https://docs.microsoft.com/en-us/azure/azure-functions/functions-overview?WT.mc_id=AZ-MVP-5003450 \ 436 | 437 | Choose which resources or lifecycle steps will be automated \ 438 | https://docs.microsoft.com/en-us/azure/azure-monitor/overview?WT.mc_id=AZ-MVP-5003450 \ 439 | 440 | Design integration with other sources such as an ITSM solution \ 441 | https://docs.microsoft.com/en-us/azure/azure-monitor/platform/itsmc-overview?WT.mc_id=AZ-MVP-5003450 \ 442 | 443 | Recommend a solution for monitoring automation \ 444 | https://docs.microsoft.com/en-us/azure/automation/automation-manage-send-joblogs-log-analytics?WT.mc_id=AZ-MVP-5003450 \ 445 | 446 | Recommend a solution for API integration \ 447 | Design an API gateway strategy \ 448 | https://ravikirans.com/pluralsight/api-gateway?WT.mc_id=AZ-MVP-5003450 \ 449 | 450 | Determine policies for internal and external consumption of APIs \ 451 | https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-policies?WT.mc_id=AZ-MVP-5003450 \ 452 | https://docs.microsoft.com/en-us/azure/architecture/example-scenario/apps/publish-internal-apis-externally?WT.mc_id=AZ-MVP-5003450 \ 453 | 454 | Recommend a hosting structure for API management \ 455 | https://docs.microsoft.com/en-gb/azure/api-management/?WT.mc_id=AZ-MVP-5003450 \ 456 | 457 | Recommend when and how to use API Keys \ 458 | https://docs.microsoft.com/en-us/azure/api-management/api-management-key-concepts?WT.mc_id=AZ-MVP-5003450 \ 459 | 460 | --- 461 | 462 | ### Design migrations 463 | Assess and interpret on-premises servers, data, and applications for migration \ 464 | https://azure.microsoft.com/en-us/migration/?WT.mc_id=AZ-MVP-5003450 \ 465 | https://docs.microsoft.com/en-us/azure/migrate/migrate-services-overview?WT.mc_id=AZ-MVP-5003450 \ 466 | https://docs.microsoft.com/en-us/azure/migrate/tutorial-prepare-vmware?WT.mc_id=AZ-MVP-5003450 \ 467 | https://docs.microsoft.com/en-us/azure/migrate/tutorial-assess-vmware?WT.mc_id=AZ-MVP-5003450 \ 468 | https://docs.microsoft.com/en-us/azure/migrate/concepts-assessment-calculation?WT.mc_id=AZ-MVP-5003450 \ 469 | https://docs.microsoft.com/en-us/sql/dma/dma-assess-sql-data-estate-to-sqldb?WT.mc_id=AZ-MVP-5003450 \ 470 | 471 | Recommend a solution for migrating applications and VMs \ 472 | https://docs.microsoft.com/en-us/azure/migrate/migrate-services-overview?WT.mc_id=AZ-MVP-5003450 \ 473 | https://docs.microsoft.com/en-us/azure/migrate/server-migrate-overview?WT.mc_id=AZ-MVP-5003450 \ 474 | 475 | Recommend a solution for migration of databases \ 476 | Determine migration scope, including redundant, related, trivial, and outdated 477 | data \ 478 | https://docs.microsoft.com/en-us/sql/dma/dma-assess-sql-data-estate-to-sqldb?WT.mc_id=AZ-MVP-5003450 \ 479 | https://docs.microsoft.com/en-us/sql/ssma/sql-server-migration-assistant?WT.mc_id=AZ-MVP-5003450 \ --------------------------------------------------------------------------------