Microsoft MCA: Azure Administrator Associate (AZ-104) / MCE: Azure Solutions Architect Expert (AZ-303/304)
| Course Length: |
10 days |
| Certifications: |
MCA: Azure Administrator Associate
MCE: Azure Solutions Architect Expert |
| Number of Exams: |
3 |
|
|
- Hands-on instruction by a certified instructor
- Includes all course materials
|
Candidates for the Azure Administrator Associate certification should have subject matter expertise implementing, managing, and monitoring an organization's Microsoft Azure environment.
Responsibilities for this role include implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks in a cloud environment, plus provision, size, monitor, and adjust resources, when needed.
An Azure Administrator often serves as part of a larger team dedicated to implementing your organization's cloud infrastructure.
Candidates for the Azure Solutions Architect Expert certification should have subject matter expertise in designing and implementing solutions that run on Microsoft Azure, including aspects like compute, network, storage, and security.
Skills measured
- Manage Azure identities and governance
- Implement and manage storage
- Deploy and manage Azure compute resources
- Configure and manage virtual networking
- Monitor and back up Azure resources
- Implement and monitor an Azure infrastructure
- Implement management and security solutions
- Implement solutions for apps
- Implement and manage data platforms
- Design monitoring
- Design identity and security
- Design data storage
- Design business continuity
- Design infrastructure
Exam AZ-104: Microsoft Azure Administrator
Exam: AZ-104: This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.
Audience profile
This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.
Skills measured
- Manage Azure identities and governance
- Implement and manage storage
- Deploy and manage Azure compute resources
- Configure and manage virtual networking
- Monitor and back up Azure resources
Prerequisites
Successful Azure Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.
- Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Understanding of resilience and disaster recovery, including backup and restore operations.
Course Outline
Module 1: Identity
In this module, you will learn how to secure identities with Azure Active Directory, and implement users and groups.
- Azure Active Directory
- Users and Groups
After completing this module, students will be able to:
- Secure and manage identities with Azure Active Directory.
- Implement and manage users and groups.
Module 2: Governance and Compliance
In this module, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.
- Subscriptions and Accounts
- Azure Policy
- Role-based Access Control (RBAC)
After completing this module, students will be able to:
- Implement and manage Azure subscriptions and accounts.
- Implement Azure Policy, including custom policies.
- Use RBAC to assign permissions.
Module 3: Azure Administration
In this module, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. This module includes:
- Azure Resource Manager
- Azure Portal and Cloud Shell
- Azure PowerShell and CLI
- ARM Templates
After completing this module, students will be able to:
- Leverage Azure Resource Manager to organize resources.
- Use the Azure Portal and Cloud Shell.
- Use Azure PowerShell and CLI.
- Use ARM Templates to deploy resources.
Module 4: Virtual Networking
In this module, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.
- Virtual Networks
- IP Addressing
- Network Security groups
- Azure Firewall
- Azure DNS
After completing this module, students will be able to:
- Implement virtual networks and subnets.
- Configure public and private IP addressing.
- Configure network security groups.
- Configure Azure Firewall.
- Configure private and public DNS zones.
Module 5: Intersite Connectivity
In this module, you will learn about intersite connectivity features including VNet Peering, Virtual Network Gateways, and Site-to-Site Connections.
- VNet Peering
- VPN Gateway Connections
- ExpressRoute and Virtual WAN
After completing this module, students will be able to:
- Configure VNet Peering.
- Configure VPN gateways.
- Choose the appropriate intersite connectivity solution.
Module 6: Network Traffic Management
In this module, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.
- Network Routing and Endpoints
- Azure Load Balancer
- Azure Application Gateway
- Traffic Manager
After completing this module, students will be able to:
- Configure network routing including custom routes and service endpoints.
- Configure an Azure Load Balancer.
- Configure and Azure Application Gateway.
- Choose the appropriate network traffic solution.
Module 7: Azure Storage
In this module, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.
- Storage Accounts
- Blob Storage
- Storage Security
- Azure Files and File Sync
- Managing Storage
After completing this module, students will be able to:
- Create Azure storage accounts.
- Configure blob containers.
- Secure Azure storage.
- Configure Azure files shares and file sync.
- Manage storage with tools such as Storage Explorer.
Module 8: Azure Virtual Machines
In this module, you will learn about Azure virtual machines including planning, creating, availability and extensions.
- Virtual Machine Planning
- Creating Virtual Machines
- Virtual Machine Availability
- Virtual Machine Extensions
After completing this module, students will be able to:
- Plan for virtual machine implementations.
- Create virtual machines.
- Configure virtual machine availability, including scale sets.
- Use virtual machine extensions.
Module 9: Serverless Computing
In this module, you will learn administer serverless computing features like Azure App Service, Azure Container Instances, and Kubernetes.
- Azure App Service Plans
- Azure App Service
- Container Services
- Azure Kubernetes Service
After completing this module, students will be able to:
- Create an app service plan.
- Create a web app.
- Implement Azure Container Instances.
- Implement Azure Kubernetes Service.
Module 10: Data Protection
In this module, you will learn about backing up files and folders, and virtual machine backups.
- File and Folder Backups
- Virtual Machine Backups
After completing this module, students will be able to:
- Backup and restore file and folders.
- Backup and restore virtual machines.
Module 11: Monitoring
In this module, you will learn about monitoring your Azure infrastructure including Azure Monitor, alerting, and log analytics.
- Azure Monitor
- Azure Alerts
- Log Analytics
- Network Watcher
After completing this module, students will be able to:
- Use Azure Monitor.
- Create Azure alerts.
- Query using Log Analytics.
- Use Network Watcher.
[ back to top ]
Exam AZ-303: Microsoft Azure Architect Technologies
A candidate for this exam should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance-this role should manage how decisions in each area affect an overall solution.
In addition, this role should have expert-level skills in Azure administration and have experience with Azure development and DevOps processes.
Course Outline
Implement and Monitor an Azure Infrastructure
Implement cloud infrastructure monitoring
- monitor security
- monitor performance
- monitor health and availability
- monitor cost
- configure advanced logging
- configure logging for workloads
- initiate automated responses by using Action Groups
- configure and manage advanced alerts
Implement storage accounts
- select storage account options based on a use case
- configure Azure Files and blob storage
- configure network access to the storage account
- implement Shared Access Signatures and access policies
- implement Azure AD authentication for storage
- manage access keys
- implement Azure storage replication
- implement Azure storage account failover
Implement VMs for Windows and Linux
- configure High Availability
- configure storage for VMs
- select virtual machine size
- implement Azure Dedicated Hosts
- deploy and configure scale sets
- configure Azure Disk Encryption
Automate deployment and configuration of resources
- save a deployment as an Azure Resource Manager template
- modify Azure Resource Manager template
- evaluate location of new resources
- configure a virtual disk template
- deploy from a template
- manage a template library
- create and execute an automation runbook
Implement virtual networking
- implement VNet to VNet connections
- implement VNet peering
Implement Azure Active Directory
- add custom domains
- configure Azure AD Identity Protection
- implement self-service password reset
- implement Conditional Access including MFA
- configure user accounts for MFA
- configure fraud alerts
- configure bypass options
- configure Trusted IPs
- configure verification methods
- implement and manage guest accounts
- manage multiple directories
Implement and manage hybrid identities
- install and configure Azure AD Connect
- identity synchronization options
- configure and manage password sync and password writeback
- configure single sign-on
- use Azure AD Connect Health
Implement Management and Security Solutions
Manage workloads in Azure
- migrate workloads using Azure Migrate
- implement Azure Backup for VMs
- implement disaster recovery
- implement Azure Update Management
Implement load balancing and network security
- implement Azure Load Balancer
- implement an application gateway
- implement a Web Application Firewall
- implement Azure Firewall
- implement the Azure Front Door Service
- implement Azure Traffic Manager
- implement Network Security Groups and Application Security Groups
- implement Bastion
Implement and manage Azure governance solutions
- create and manage hierarchical structure that contains management groups, subscriptions and resource groups
- assign RBAC roles
- create a custom RBAC role
- configure access to Azure resources by assigning roles
- configure management access to Azure
- interpret effective permissions
- set up and perform an access review
- implement and configure an Azure Policy
- implement and configure an Azure Blueprint
Manage security for applications
- implement and configure KeyVault
- implement and configure Azure AD Managed Identities
- register and manage applications in Azure AD
Implement Solutions for Apps
Implement an application infrastructure
- create and configure Azure App Service
- create an App Service Web App for Containers
- create and configure an App Service plan
- configure an App Service
- configure networking for an App Service
- create and manage deployment slots
- implement Logic Apps
- implement Azure Functions
Implement container-based applications
- create a container image
- configure Azure Kubernetes Service
- publish and automate image deployment to the Azure Container Registry
- publish a solution on an Azure Container Instance
Implement and Manage Data Platforms
Implement NoSQL databases
- configure storage account tables
- select appropriate CosmosDB APIs
- set up replicas in CosmosDB
Implement Azure SQL databases
- configure Azure SQL database settings
- implement Azure SQL Database managed instances
- configure HA for an Azure SQL database
- publish an Azure SQL database
[ back to top ]
Exam AZ-304: Microsoft Azure Architect Design
Responsibilities for an Azure Solution Architect include advising stakeholders and translating business requirements into secure, scalable, and reliable cloud solutions.
An Azure Solution Architect partners with cloud administrators, cloud DBAs, and clients to implement solutions.
Course Outline
Design Monitoring
Design for cost optimization
- recommend a solution for cost management and cost reporting
- recommend solutions to minimize costs
Design a solution for logging and monitoring
- determine levels and storage locations for logs
- plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
- recommend appropriate monitoring tool(s) for a solution
- choose a mechanism for event routing and escalation
- recommend a logging solution for compliance requirements
Design Identity and Security
Design authentication
- recommend a solution for single-sign on
- recommend a solution for authentication
- recommend a solution for Conditional Access, including multi-factor authentication
- recommend a solution for network access authentication
- recommend a solution for a hybrid identity including Azure AD Connect and Azure AD Connect Health
- recommend a solution for user self-service
- recommend and implement a solution for B2B integration
Design authorization
- choose an authorization approach
- recommend a hierarchical structure that includes management groups, subscriptions and resource groups
- recommend an access management solution including RBAC policies, access reviews, role assignments, physical access, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
Design governance
- recommend a strategy for tagging
- recommend a solution for using Azure Policy
- recommend a solution for using Azure Blueprint
Design security for applications
- recommend a solution that includes KeyVault
- recommend a solution that includes Azure AD Managed Identities
- recommend a solution for integrating applications into Azure AD
Design Data Storage
Design a solution for databases
- select an appropriate data platform based on requirements
- recommend database service tier sizing
- recommend a solution for database scalability
- recommend a solution for encrypting data at rest, data in transmission, and data in use
Design data integration
- recommend a data flow to meet business requirements
- recommend a solution for data integration, including Azure Data Factory, Azure Data Bricks, Azure Data Lake, Azure Synapse Analytics
Select an appropriate storage account
- choose between storage tiers
- recommend a storage access solution
- recommend storage management tools
Design Business Continuity
Design a solution for backup and recovery
- recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
- design and Azure Site Recovery solution
- recommend a solution for recovery in different regions
- recommend a solution for Azure Backup management
- design a solution for data archiving and retention
Design for high availability
- recommend a solution for application and workload redundancy, including compute, database, and storage
- recommend a solution for autoscaling
- identify resources that require high availability
- identify storage types for high availability
- recommend a solution for geo-redundancy of workloads
Design Infrastructure
Design a compute solution
- recommend a solution for compute provisioning
- determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers
- recommend a solution for containers
- recommend a solution for automating compute management
Design a network solution
- recommend a solution for network addressing and name resolution
- recommend a solution for network provisioning
- recommend a solution for network security
- recommend a solution for network connectivity to the Internet, on-premises networks, and other Azure virtual networks
- recommend a solution for automating network management
- recommend a solution for load balancing and traffic routing
Design an application architecture
- recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks
- recommend an orchestration solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions
- recommend a solution for API integration
Design migrations
- assess and interpret on-premises servers, data, and applications for migration
- recommend a solution for migrating applications and VMs
- recommend a solution for migration of databases
[ back to top ]
MCSEClasses.com is your best choice for MCA Azure Administrator / MCE Azure Solutions,
MCA Azure Administrator / MCE Azure Solutions training,
MCA Azure Administrator / MCE Azure Solutions certification,
MCA Azure Administrator / MCE Azure Solutions certification boot camp,
MCA Azure Administrator / MCE Azure Solutions boot camp,
MCA Azure Administrator / MCE Azure Solutions certification training,
MCA Azure Administrator / MCE Azure Solutions boot camp training,
MCA Azure Administrator / MCE Azure Solutions boot camp certification,
MCA Azure Administrator / MCE Azure Solutions certification course,
MCA Azure Administrator / MCE Azure Solutions course,
training MCA Azure Administrator / MCE Azure Solutions,
certification MCA Azure Administrator / MCE Azure Solutions,
boot camp MCA Azure Administrator / MCE Azure Solutions,
certification MCA Azure Administrator / MCE Azure Solutions boot camp,
certification MCA Azure Administrator / MCE Azure Solutions training,
boot camp MCA Azure Administrator / MCE Azure Solutions training,
certification MCA Azure Administrator / MCE Azure Solutions course.
|
