MICROSOFT AZURE ADMIN – IaaS – COMBO
AZ 104 + AZ 900 + AZ 305 + KUBERNETES + DOCKER + TERRAFORM
Training Duration: 80hrs
Batch type : Weekdays/Weekends
Mode of Training : Classroom/Online/Corporate Training
Microsoft Azure Content
Exam AZ-104: Microsoft Azure Administrator
Manage Azure identities and governance (15–20%)
Manage Azure Active Directory (Azure AD) objects
· create users and groups
· create administrative units
· manage user and group properties
· manage device settings
· perform bulk user updates
· manage guest accounts
· configure Azure AD join
· configure self-service password reset
Manage role-based access control (RBAC)
· create a custom role
· provide access to Azure resources by assigning roles at different scopes
· interpret access assignments
Manage subscriptions and governance
· configure Azure policies
· configure resource locks
· apply and manage tags on resources
· manage resource groups
· manage subscriptions
. Manage costs
· configure management groups
Implement and manage storage (15–20%)
Secure storage
· configure network access to storage accounts
· create and configure storage accounts
· generate shared access signature (SAS) tokens
· manage access keys
· configure Azure AD authentication for a storage account
· configure access to Azure Files
Manage storage
· export from Azure job
· import into Azure job
· install and use Azure Storage Explorer
· copy data by using AZCopy
· implement Azure Storage replication
· configure blob object replication
Configure Azure files and Azure Blob Storage
· create an Azure file share
· create and configure Azure File Sync service
· configure Azure Blob Storage
· configure storage tiers
· configure blob lifecycle management
Deploy and manage Azure compute resources (20–25%)
Automate deployment of virtual machines (VMs) by using Azure Resource Manager
templates
· modify an Azure Resource Manager template
· configure a virtual hard disk (VHD) template
· deploy from a template
· save a deployment as an Azure Resource Manager template
· deploy virtual machine extensions
Configure VMs
. configure Azure Disk Encryption
· move VMs from one resource group to another
· manage VM sizes
· add data disks
· configure networking
· redeploy VMs
· configure high availability
· deploy and configure virtual machine scale sets
Create and configure containers
· configure sizing and scaling for Azure Container Instances
· configure container groups for Azure Container Instances
· configure storage for Azure Kubernetes Service (AKS)
· configure scaling for AKS
· configure network connections for AKS
· upgrade an AKS cluster
Create and configure Azure App Service
· create an App Service plan
· configure scaling settings in an App Service plan
· create an App Service
· secure an App Service
· configure custom domain names
· configure backup for an App Service
· configure networking settings
· configure deployment settings
Configure and manage virtual networking (25–30%)
Implement and manage virtual networking
· create and configure virtual networks, including peering
· configure private and public IP addresses
· configure user-defined network routes
· implement subnets
· configure endpoints on subnets
· configure private endpoints
· configure Azure DNS, including custom DNS settings and private or public DNS zones
Secure access to virtual networks
. create security rules
· associate a network security group (NSG) to a subnet or network interface
· evaluate effective security rules
· implement Azure Firewall
· implement Azure Bastion
Configure load balancing
· configure Azure Application Gateway
· configure an internal or public load balancer
· troubleshoot load balancing
Monitor and troubleshoot virtual networking
· monitor on-premises connectivity
· configure and use Azure Monitor for Networks
· use Azure Network Watcher
· troubleshoot external networking
· troubleshoot virtual network connectivity
Integrate an on-premises network with an Azure virtual network
· create and configure Azure VPN Gateway
· create and configure Azure ExpressRoute
· configure Azure Virtual WAN
Monitor and back up Azure resources (10–15%)
Monitor resources by using Azure Monitor
· configure and interpret metrics
· configure Azure Monitor logs
· query and analyze logs
· set up alerts and actions
· configure Application Insights
Implement backup and recovery
· create a Recovery Services vault
· create a Backup vault
· create and configure backup policy
· perform backup and restore operations by using Azure Backup
· perform site-to-site recovery by using Azure Site Recovery
==============================================================
Exam AZ-305: Designing Microsoft Azure
Design Identity, Governance, and Monitoring Solutions (25-30%)
Design a solution for logging and monitoring
design a log routing solution
recommend an appropriate level of logging
recommend monitoring tools for a solution
Design authentication and authorization solutions
recommend a solution for securing resources with role-based access control
recommend an identity management solution
recommend a solution for securing identities
Design governance
recommend an organizational and hierarchical structure for Azure resources
recommend a solution for enforcing and auditing compliance
Design identities and access for applications
recommend solutions to allow applications to access Azure resources
recommend a solution that securely stores passwords and secrets
recommend a solution for integrating applications into Azure Active Directory (Azure AD)
recommend a user consent solution for applications
Design Data Storage Solutions (25-30%)
Design a data storage solution for relational data
recommend database service tier sizing
recommend a solution for database scalability
recommend a solution for encrypting data at rest, data in transmission, and data in use
Design data integration
recommend a solution for data integration
recommend a solution for data analysis
Recommend a data storage solution
recommend a solution for storing relational data
recommend a solution for storing semi-structured data
recommend a solution for storing non-relational data
Design a data storage solution for non-relational data
recommend access control solutions to data storage
recommend a data storage solution to balance features, performance, and cost
design a data solution for protection and durability
Design Business Continuity Solutions (10-15%)
Design a solution for backup and disaster recovery
recommend a recovery solution for Azure, hybrid, and on-premises workloads that meets
recovery objectives (Recovery Time Objective [RTO], Recovery Level Objective [RLO],
Recovery Point Objective [RPO])
understand the recovery solutions for containers
recommend a backup and recovery solution for compute
recommend a backup and recovery solution for databases
recommend a backup and recovery solution for unstructured data
Design for high availability
identify the availability requirements of Azure resources
recommend a high availability solution for compute
recommend a high availability solution for non-relational data storage
recommend a high availability solution for relational data storage
Design Infrastructure Solutions (25-30%)
Design a compute solution
recommend a virtual machine-based compute solution
recommend an appropriately sized compute solution based on workload requirements
recommend a container-based compute solution
recommend a serverless-based compute solution
Design an application architecture
recommend a caching solution for applications
recommend a messaging architecture
recommend an event-driven architecture
recommend an automated deployment solution for your applications
recommend an application configuration management solution
recommend a solution for API integration
Design migrations
evaluate a migration solution that leverages the Cloud Adoption Framework for Azure
assess and interpret on-premises servers, data, and applications for migration
recommend a solution for migrating applications and virtual machines
recommend a solution for migrating databases
recommend a solution for migrating unstructured data
Design network solutions
recommend a network architecture solution based on workload requirements
recommend a connectivity solution that connects Azure resources to the internet
recommend a connectivity solution that connects Azure resources to on-premises
Networks
optimize network performance for applications
recommend a solution to optimize network security
recommend a load balancing and routing solution
Third party Firewall Deployment on Azure — IAAS
- Fortiget Firewall deployment on Azure
- Azure Hub and Spoke Design
AWS to Azure Migration
- AWS VPC
- AWS EC2
- AWS to Azure migration by using Azure Site Recovery / Azure Migrate Service
==============================================================
AZ-900: Microsoft Azure Fundamentals
Describe Cloud Concepts (15-20%)
Describe the benefits and considerations of using cloud services
describe terms such as High Availability, Scalability, Elasticity, Agility, Fault Tolerance, and Disaster Recovery
describe the principles of economies of scale
describe the differences between Capital Expenditure (CapEx) and Operational
Expenditure (OpEx)
describe the consumption-based model
Describe the differences between Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS)
describe Infrastructure-as-a-Service (IaaS),
describe Platform-as-a-Service (PaaS)
describe Software-as-a-Service (SaaS)
compare and contrast the three different service types
Describe the differences between Public, Private and Hybrid cloud models
describe Public cloud
describe Private cloud
describe Hybrid cloud
compare and contrast the three different cloud models
Describe Core Azure Services (30-35%)
Describe the core Azure architectural components
describe Regions
describe Availability Zones
describe Resource Groups
describe Azure Resource Manager
describe the benefits and usage of core Azure architectural components
Describe some of the core products available in Azure
describe products available for Compute such as Virtual Machines, Virtual Machine Scale Sets, App Services, Azure Container Instances (ACI) and Azure Kubernetes Service (AKS)
describe products available for Networking such as Virtual Network, Load Balancer, VPN Gateway, Application Gateway and Content Delivery Network
describe products available for Storage such as Blob Storage, Disk Storage, File Storage, and Archive Storage
describe products available for Databases such as Cosmos DB, Azure SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database Migration service
describe the Azure Marketplace and its usage scenarios
Describe some of the solutions available on Azure
describe Internet of Things (IoT) and products that are available for IoT on Azure such as IoT Hub and IoT Central
describe Big Data and Analytics and products that are available for Big Data and Analytics such as Azure Synapse Analytics, HDInsight, and Azure Databricks
describe Artificial Intelligence (AI) and products that are available for AI such as Azure Machine Learning Service and Studio
describe Serverless computing and Azure products that are available for serverless computing such as Azure Functions, Logic Apps, and Event Grid
describe DevOps solutions available on Azure such as Azure DevOps and Azure DevTest
Labs
describe the benefits and outcomes of using Azure solutions
Describe Azure management tools
Describe Security, Privacy, Compliance, and Trust (25-30%)
describe Azure tools such as Azure Portal, Azure PowerShell, Azure CLI and Cloud Shell
describe Azure Advisor
Describe securing network connectivity in Azure
describe Network Security Groups (NSG)
describe Application Security Groups (ASG)
describe User Defined Rules (UDR)
describe Azure Firewall
Describe Azure DDoS Protection
choose an appropriate Azure security solution
Describe core Azure Identity services
Describe security tools and features of Azure
Describe Azure governance methodologies
Describe monitoring and reporting options in Azure
Describe privacy, compliance and data protection standards in Azure
describe the difference between authentication and authorization
describe Azure Active Directory
describe Azure Multi-Factor Authentication
describe Azure Security Center
describe Azure Security Center usage scenarios
describe Key Vault
describe Azure Information Protection (AIP)
describe Azure Advanced Threat Protection (ATP)
describe policies and initiatives with Azure Policy
describe Role-Based Access Control (RBAC)
describe Locks
describe Azure Advisor security assistance
describe Azure Blueprints
describe Azure Monitor
describe Azure Service Health
describe the use cases and benefits of Azure Monitor and Azure Service Health
describe industry compliance terms such as GDPR, ISO and NIST
describe the Microsoft Privacy Statement
describe the Trust center
describe the Service Trust Portal
describe Compliance Manager
determine if Azure is compliant for a business need
describe Azure Government cloud services
describe Azure China cloud services
Describe Azure Pricing, Service Level Agreements, and Lifecycles (20- 25%)
Describe Azure subscriptions
describe an Azure Subscription
describe the uses and options with Azure subscriptions such access control and offer
types
describe subscription management using Management groups
Describe planning and management of costs
describe options for purchasing Azure products and services
describe options around Azure Free account
describe the factors affecting costs such as resource types, services, locations, ingress
and egress traffic
describe Zones for billing purposes
describe the Pricing calculator
describe the Total Cost of Ownership (TCO) calculator
describe best practices for minimizing Azure costs such as performing cost analysis,
creating spending limits and quotas, using tags to identify cost owners, using Azure
reservations and using Azure Advisor recommendations
describe Azure Cost Management
Describe Azure Service Level Agreements (SLAs)
Describe service lifecycle in Azure
describe a Service Level Agreement (SLA)
describe Composite SLAs
describe how to determine an appropriate SLA for an application
describe Public and Private Preview features
describe the term General Availability (GA)
describe how to monitor feature updates and product changes
==========================================================
Advanced Topic
Azure Landing Zone
- What is landing Zone in Azure
- How to Design Landing Zone along with required azure components.
- Azure landing zone design and deployment as per the business requirement
Migrations from On-Prim to Azure
- VMware to Azure Migration by using Azure Migrate Service
- Hyper-V to Azure Migration using Azure Site Recovery – DR AS A Service
Third party Firewall Design and Deployment on Azure — IAAS
- Fortiget Firewall deployment on Azure
- Azure Hub and Spoke Design
Azure Case Study which is used in production
- Discussion on Azure Case study
- Project 1
- Project 2
AWS to Azure Migration
- AWS VPC
- AWS EC2
- AWS to Azure migration by using Azure Site Recovery / Azure Migrate Service
Terraform
- What is Terraform
- How it works
- Installation & configuration of terraform on windows server
- How to write script in terraform
- How to deploy RG / VNET, Subnet / Storage account / VM via terraform
Azure Devops
- Azure repos
- How to pull and push the code on azure repo and github
- CICD pipe line creation for infra deployment on azure
SQL Migration
- SQL Migration from IAAS to PAAS using Azure DMA application
