This course teaches solution architects how to translate business requirements into secure, scalable and reliable solutions. Lessons include virtualization, automation, networking, storage, identity, security, data platform and application infrastructure. This course describes how decisions in each thesis area affect an overall solution.
Aimed at
- This course is intended for IT professionals with experience in designing and implementing solutions running on Microsoft Azure. They must have a broad understanding of IT operations including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting and governance. Azure solution architects use Azure Portal and, as they become more experienced, they use the command-line interface. Candidates must have expert level skills in Azure administration and have experience with Azure development processes and DevOps processes.
Duration
35 hours
Modalities
- On-site
- Virtual live through digital platforms
- On site
Includes
- 35 hours of training
- Trained instructors
- Participant's manual in digital format
- Proof of participation
Agenda
- Azure Active Directory Overview
- Users and groups
- Domains and custom domains
- Azure AD Identity Protection
- Implement conditional access
- Set up fraud alerts for MFA
Implement referral options - Configure guest users in Azure AD
- Configure trusted IP addresses
- Manage multiple directories
- Install and configure Azure AD Connect
- Configure password synchronization and deferred writing of passwords
- Configure Azure AD Connect Health
- Virtual network peering
- Implementing virtual network pairing
- Select the size of the virtual machine
- Configure high availability
- Deploy Azure dedicated hosts
- Implement and configure scale sets
- Configure Azure Disk Encryption
- Implement Azure Load Balancer
- Implementing an application gateway
- Understanding the web application firewall
- Implement Azure Firewall
- Implement Azure Front Door
- Implementation of Azure Traffic Manager
- Implementing network security groups and application security groups
- Implement Azure Bastion
- Describe the characteristics of highly available Azure virtual machines that reside in the same availability set.
- Describe the characteristics of highly available Azure virtual machines residing in different availability zones.
- Describe the automatic horizontal scaling features of Azure VM Scale Sets.
- Describe the manual vertical scaling features of Azure VM Scale Sets.
- Storage accounts
- Storage of blobs
- Storage security
- Manage storage
- Accessing blobs and queues via AAD
- Implement Azure Storage blob authorization leveraging shared access signatures.
- Implementing Azure Storage blob authorization leveraging Azure Active Directory
- Implement Azure Storage file share authorization leveraging access keys.
- Configuring Azure Storage Virtual Networks and Firewalls
- Configure storage account tables
- Select the appropriate CosmosDB APIs
- Configure the Azure SQL database settings.
- Deploy managed instances of Azure SQL Database
- High-availability SQL database and Azure
- Azure Resource Manager Templates
- Saving a template for a virtual machine
- Evaluate the location of new resources
- Configure a virtual hard disk template
- Implement from a template
- Create and run an automation runbook
- Creating administration groups, subscriptions and resource groups
- Overview of Role Based Access Control (RBAC)
- Role-based access control (RBAC) roles
- Azure AD Access Reviews
- Implement and configure an Azure policy
Azure Blueprints
- Implement Azure Storage blob authorization leveraging shared access signatures.
- Implementing Azure Storage blob authorization leveraging Azure Active Directory
- Implement Azure Storage file share authorization leveraging access keys.
- Define a custom RBAC role
- Assign a custom RBAC role
- Azure Key Vault
- Azure Managed Identity
- Migrate workloads with Azure Migrate
- VMware: agentless migration
- VMware: Agent-based migration
- Implement Azure Backup
- Azure to Azure site recovery
- Implement Azure update management
- Configure Azure Site Recovery
- Perform failover test
- Perform a planned failover
- Perform unplanned failover
- Azure container instances
- Configure the Azure Kubernetes service
- Create and configure Azure App Service
- Create an App Service web application for containers
- Create and configure an application service plan
- Configuring networks for an application service
- Create and manage deployment slots
- Implementing logical applications
- Implement Azure features
- Configuring and validating an Azure Function App Storage blob trigger
- Configure and validate Azure Event Grid subscription-based queue messaging
- Implementing the Azure / Green deployment pattern by using Azure App Service web application deployment slots.
- Perform A/B testing by using Azure App Service Web Application Deployment Slots
- Azure infrastructure security monitoring
- Azure Monitor
- Azure Workbooks
- Azure Alerts
- Analysis of records
- Network watcher
- Azure service status
- Monitor Azure costs
- Azure Application Perspectives
- Unified monitoring in Azure
