AZURE – 300
This series helps you crack Azure – 300 by – learning to enjoy architecture in Azure technologies.
Why this series (in progress)?
- To keep it concise, without repetition.
- To be intuitive and give power bytes to grab concepts.
- Keep it short with further references to detailed articles.
- Will walk you through each topic, to quickly over through the concepts.
Azure 300 – certification measures the following skills –
Series links –
- Deploy and configure infrastructure
- Analyze resource utilization and consumption
- configure diagnostic settings on resources
- create baseline for resources
- The idea is recreate all azure resources to redeploy or recover in an automated fashion this can be done via powershell or ARM Templates saved in GIT.
- Export Template for existing resources by –
- Resource groups -> deployments
- Resource -> export templates
- create and test alerts
- analyze alerts across subscription
- analyze metrics across subscription
- create action groups
- monitor for unused resources
- monitor spend
- report on spend
- utilize Log Search query functions
- view Alerts in Azure Monitor logs
- visualize diagnostics data using Azure Monitor Workbooks
- Create and configure storage accounts
- configure network access to the storage account
- create and configure storage account
- generate Shared access signature
- implement Azure AD authentication for storage
- install and use Azure Storage Explorer
- manage access keys
- monitor Activity log by using Azure Monitor logs
- implement Azure storage replication
- implement Azure storage account failover
- Create and configure a VM for Windows and Linux
- configure High Availability
- configure Monitoring
- configure Networking
- configure Storage
- configure Virtual Machine Size
- implement dedicated hosts
- deploy and configure scale sets
- Automate deployment of VMs
- modify Azure Resource Manager template
- configure Location of new VMs
- configure VHD template
- deploy from template
- save a deployment as an Azure Resource Manager template
- deploy Windows and Linux VMs
- Create connectivity between virtual networks
- create and configure Vnet peering
- create and configure Vnet to Vnet connections
- verify virtual network connectivity
- create virtual network gateway
- Implement and manage virtual networking
- configure private IP addressing
- configure public IP addresses
- create and configure network routes
- create and configure network interface
- create and configure subnets
- create and configure virtual network
- create and configure Network Security Groups and Application Security Groups
- Manage Azure Active Directory
- add custom domains
- configure Azure AD Identity Protection
- configure Azure AD Join
- configure self-service password reset
- implement conditional access policies
- manage multiple directories
- perform an access review
- Implement and manage hybrid identities
- install and configure Azure AD Connect
- configure federation
- configure single sign-on
- manage and troubleshoot Azure AD Connect
- troubleshoot password sync and writeback
- Implement solutions that use virtual machines (VM)
- provision VMs
- create Azure Resource Manager templates
- configure Azure Disk Encryption for VMs
- implement Azure Backup for VMs
- Analyze resource utilization and consumption
- Implement workloads and security
- Migrate servers to Azure
- migrate servers using Azure Migrate
- Configure serverless computing
- create and manage objects
- manage a Logic App Resource
- manage Azure Function app settings
- manage Event Grid
- manage Service Bus
- Implement application load balancing
- configure application gateway
- configure Azure Front Door service
- configure Azure Traffic Manager
- Integrate on premises network with Azure virtual network
- create and configure Azure VPN Gateway
- create and configure site to site VPN
- configure ExpressRoute
- configure Virtual WAN
- verify on premises connectivity
- troubleshoot on premises connectivity with Azure
- Implement multi factor authentication
- configure user accounts for MFA
- configure fraud alerts
- configure bypass options
- configure Trusted IPs
- configure verification methods
- Manage role-based access control
- create a custom role
- configure access to Azure resources by assigning roles
- configure management access to Azure
- troubleshoot RBAC
- implement Azure Policies
- assign RBAC Roles
- Migrate servers to Azure
- Create and deploy apps
- Create web apps by using PaaS
- create an Azure app service Web App
- create documentation for the API
- create an App Service Web App for Containers
- create an App Service background task by using WebJobs
- enable diagnostics logging
- Design and develop apps that run in containers
- configure diagnostic settings on resources
- create a container image by using a Dockerfile
- create an Azure Kubernetes Service
- publish an image to the Azure Container Registry
- implement an application that runs on an Azure Container Instance
- manage container settings by using code
- Create web apps by using PaaS
- Implement authentication and secure data
- Implement authentication
- implement authentication by using certificates, forms-based authentication, tokens, or
Windows-integrated authentication - implement multi-factor authentication by using Azure AD
- implement OAuth2 authentication
- implement Managed Identities for Azure resources Service Principal authentication
- implement authentication by using certificates, forms-based authentication, tokens, or
- Implement secure data solutions
- encrypt and decrypt data at rest and in transit
- encrypt data with Always Encrypted
- implement Azure Confidential Compute
- implement SSL/TLS communications
- create, read, update, and delete keys, secrets, and certificates by using the KeyVault API
- Implement authentication
- Develop for the cloud and for Azure storage
- Configure a message-based integration architecture
- configure an app or service to send emails
- configure Event Grid
- configure the Azure Relay service
- create and configure a Notification Hub
- create and configure an Event Hub
- create and configure a Service Bus
- Develop for autoscaling
- implement autoscaling rules and patterns (schedule, operational/system metrics)
- implement code that addresses singleton application instances
- implement code that addresses transient state
- Develop solutions that use Cosmos DB storage
- create, read, update, and delete data by using appropriate APIs
- implement partitioning schemes
- set the appropriate consistency level for operations
- Develop solutions that use a relational database
- provision and configure relational databases
- configure elastic pools for Azure SQL Database
- implement Azure SQL Database managed instances
- create, read, update, and delete data tables by using code
- Configure a message-based integration architecture