Aron Mesterbasic
This course is retired and has been replaced by the Microsoft Certfied Azure Solutions Architect (AZ-305). This course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. You will learn about virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course outlines how decisions in each theses area affects an overall solution.
Your course package is designed to provide maximum learning and convenience. This is included in the price of your course:
Your expert instructor will get you ready for the following exams and certification, which are included in your course package and covered by the Certification guarantee.
You´ll have the perfect starting point for your training with these prerequisites:
- Successful Azure Solution Architects start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.
- Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Understanding of resilience and disaster recovery, including backup and restore operations.
Using our engaging learning methodology using a variety of tools, we’ll cover the entire curriculum.
Implement and Monitor an Azure Infrastructure
Implement cloud infrastructure monitoring
- monitor security
- monitor performance
- monitor health and availability
- monitor cost
- configure advanced logging
- initiate automated responses by using Action Groups
- configure and manage advanced alerts
Implement storage accounts
- select storage account options based on a use case
- configure Azure Files and Azure Blob storage
- configure network access to the storage account
- implement Shared Access Signatures and access policies
- implement Azure AD authentication for storage
- manage access keys
- implement Azure storage replication
- implement Azure storage account failover
Implement VMs for Windows and Linux
- configure High Availability
- configure storage for VMs
- select virtual machine size
- implement Azure Dedicated Hosts
- deploy and configure scale sets
- configure Azure Disk Encryption
Automate deployment and configuration of resources
- save a deployment as an Azure Resource Manager template
- modify Azure Resource Manager template
- evaluate location of new resources
- configure a VHD template
- deploy from a template
- manage an image library
- create and execute an automation runbook
Implement virtual networking
- implement VNet to VNet connections
- implement VNet peering
Implement Azure Active Directory
- add custom domains
- configure Azure AD Identity Protection
- implement self-service password reset
- implement Conditional Access including MFA
- configure fraud alerts
- configure verification methods
- implement and manage guest accounts
- manage multiple directories
Implement and manage hybrid identities
- install and configure Azure AD Connect
- identity synchronization options
- configure and manage password sync and password writeback
- configure single sign-on
- configure Azure AD Connect cloud sync
- use Azure AD Connect Health
Implement Management and Security Solutions
Manage workloads in Azure
- migrate workloads using Azure Migrate
- implement Azure Backup for VMs
- implement disaster recovery
- implement Azure Automation Update Management
Implement load balancing and network security
- implement Azure Load Balancer
- implement an Azure Application Gateway
- implement Web Application Firewall
- implement Azure Firewall
- implement Azure Firewall Manager
- implement Azure Front Door
- implement Azure Traffic Manager
- implement Network Security Groups and Application Security Groups
- implement Bastion
Implement and manage Azure governance solutions
- create and manage hierarchical structure that contains management groups, subscriptions and resource groups
- assign RBAC roles
- create a custom RBAC role
- configure access to Azure resources by assigning roles
- configure management access to Azure
- interpret effective permissions
- set up and perform an access review
- implement and configure Azure Policy
- implement and configure Azure Blueprints
Manage security for applications
- implement and configure Key Vault
- implement and configure Managed Identities
- register and manage applications in Azure AD
Implement Solutions for Apps
Implement an application infrastructure
- create and configure Azure App Service
- create an App Service Web App for Containers
- create and configure an App Service plan
- configure App Service
- configure networking for an App Service
- create and manage deployment slots
- implement Logic Apps
- implement Azure Functions
Implement container-based applications
- create a container image
- configure Azure Kubernetes Service
- publish and automate image management by using the Azure Container Registry
- deploy a solution on an Azure Container Instance
Implement and Manage Data Platforms
Implement NoSQL databases
- configure Azure Storage account tables
- select appropriate Cosmos DB APIs
- set up replicas in Cosmos DB
Implement Azure SQL databases
- configure Azure SQL database settings
- implement Azure SQL managed instances
- configure HA for an Azure SQL database
- deploy an Azure SQL database
Design Monitoring
Design for cost optimization
- recommend a solution for cost management and cost reporting
- recommend solutions to minimize costs
Design a solution for logging and monitoring
- determine levels and storage locations for logs
- plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
- recommend appropriate monitoring tool(s) for a solution
- choose a mechanism for event routing and escalation
- recommend a logging solution for compliance requirements
Design Identity and Security
Design authentication
- recommend a solution for single-sign on
- recommend a solution for authentication
- recommend a solution for Conditional Access, including multi-factor authentication
- recommend a solution for network access authentication
- recommend a solution for a hybrid identity including Azure AD Connect and Azure AD
Connect Health
- recommend a solution for user self-service
- recommend and implement a solution for B2B integration
- NOT: federation with ADFS or PingFederate
Design authorization
- choose an authorization approach
- recommend a hierarchical structure that includes management groups, subscriptions and resource groups
- recommend an access management solution including RBAC policies, access reviews, role assignments, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
Design governance
- recommend a strategy for tagging
- recommend a solution for using Azure Policy
- recommend a solution for using Azure Blueprints
- recommend a solution that leverages Azure Resource Graph
Design security for applications
- recommend a solution that includes Key Vault
- recommend a solution that includes Managed Identities
- recommend a solution for integrating applications into Azure AD
Design Data Storage
Design a solution for databases
- select an appropriate data platform based on requirements
- recommend database service tier sizing
- recommend a solution for database scalability
- recommend a solution for encrypting data at rest, data in transmission, and data in use
Design data integration
- recommend a data flow to meet business requirements
- recommend a solution for data integration, including Azure Data Factory, Azure Data Bricks, Azure Data Lake, Azure Synapse Analytics
Select an appropriate storage account
- choose between storage tiers
- recommend a storage access solution
- recommend storage management tools
Design Business Continuity
Design a solution for backup and recovery
- recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
- design and Azure Site Recovery solution
- recommend a solution for recovery in different regions
- recommend a solution for geo-redundancy of workloads
- recommend a solution for Azure Backup management
- design a solution for data archiving and retention
Design for high availability
- recommend a solution for application and workload redundancy, including compute, database, and storage
- recommend a solution for autoscaling
- identify resources that require high availability
- identify storage types for high availability
Design Infrastructure
Design a compute solution
- recommend a solution for compute provisioning
- determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, Batch, HPC and containers
- recommend a solution for containers
- recommend a solution for automating compute management
Design a network solution
- recommend a network architecture (hub and spoke, Virtual WAN)
- recommend a solution for network addressing and name resolution
- recommend a solution for network provisioning
- recommend a solution for network security including Private Link, firewalls, gateways, network segmentation (perimeter networks/DMZs/NVAs)
- recommend a solution for network connectivity to the Internet, on-premises networks,
and other Azure virtual networks
- recommend a solution for automating network management
- recommend a solution for load balancing and traffic routing
Design an application architecture
- recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, Azure Queue Storage, Logic Apps, Azure Functions, Service Fabric, AKS, Azure App Configuration and webhooks
- recommend an orchestration solution for deployment and maintenance of applications including ARM templates, Azure Automation, Azure Pipelines, Logic Apps, or Azure Functions
- recommend a solution for API integration
Design migrations
- assess and interpret on-premises servers, data, and applications for migration
- recommend a solution for migrating applications and VMs
- recommend a solution for migration of databases
- determine migration scope, including redundant, related, trivial, and outdated data
- recommend a solution for migrating data (Storage Migration Service, Azure Data Box, Azure File Sync-based migration to hybrid file server)
The Virtual Classroom is an online room, where you will join your instructor and fellow classmates in real time. Everything happens live and you can interact freely, discuss, ask questions, and watch your instructor present on a whiteboard, discuss the courseware and slides, work with labs, and review.
Yes, you can sit exams from all the major Vendors like Microsoft, Cisco etc from the comfort of your home or office.
With Readynez you do any course form the comfort of your home or office. Readynez provides support and best practices for your at-home classroom and you can enjoy learning with minimal impact on your day-to-day life. Plus you'll save the cost and the environmental burden of travelling.
Well, learning is limitless, when you are motivated, but you need the right path to achieve what you want. Readynez consultants have many years of experience customizing learner paths and we can design one for you too. We are always available with help and guidance, and you can reach us on the chat or write us at info@readynez.com.