Course Outline
Module 1: Designing a Compute Solution
In this module, participants will explore appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.
Lessons
- Recommend a Solution for Compute Provisioning
- Determine Appropriate Compute Technologies
- Recommend a Solution for Containers
- Recommend a Solution for Automating Compute Management
Lab : Implementing Containers on Azure
- Implement containers running in Azure VMs
- Deploy containers to Azure Container Instances
- Deploy containers to Azure Kubernetes Service (AKS) clusters
Upon completion of this module, students will be able to:
- Advise on automating compute management
- Recommend appropriate compute technologies, including virtual machines and App Services
- Advise on suitable AKS and ACI configurations
Module 2: Designing a Network Solution
In this module, participants will learn about solutions for network addressing and name resolution, network provisioning, and network security.
Lessons
- Recommend a Solution for Network Addressing and Name Resolution
- Recommend a Solution for Network Provisioning
- Recommend a Solution for Network Security
- Recommend a Solution for Internet Connectivity and On-Premises Networks
- Recommend a Solution for Automating Network Management
- Recommend a Solution for Load Balancing and Traffic Routing
Upon completion of this module, students will be able to:
- Evaluate solutions for network addressing and name resolution
- Evaluate solutions for network security, including private endpoints, firewalls, and gateways
- Provide recommendations for network connectivity to the Internet, on-premises networks, and other VNets
- Provide recommendations for load balancing and traffic routing
Module 3: Designing for Migration
In this module, participants will learn to recommend solutions for migrating applications and VMs, as well as strategies for database migration.
Lessons
- Assess On-Premises Servers and Applications for Migration
- Recommend a Solution for Migrating Applications and VMs
- Recommend a Solution for Migration of Databases
Upon completion of this module, students will be able to:
- Assess on-premises servers and applications for migration
- Suggest solutions for migrating applications and VMs
- Determine migration scope, including redundant, related, trivial, and outdated data
Module 4: Designing Authentication and Authorization
In this module, participants will learn how to provide identities to services and understand the hierarchy of Management Groups and Subscriptions.
Lessons
- Tips for Identity and Access Management
- Recommend a Solution for Multi-Factor Authentication
- Five Steps for Securing Identity Infrastructure
- Recommend a Solution for Single-Sign On (SSO)
- Recommend a Solution for a Hybrid Identity
- Recommend a Solution for B2B Integration
- Recommend a Hierarchical Structure for Management Groups
Lab : Managing Azure AD Authentication and Authorization
- Deploy an Azure VM hosting an AD DS domain controller
- Create and configure an Azure AD tenant
- Integrate an AD DS forest with an Azure AD tenant
Upon completion of this module, students will be able to:
- Recommend a hierarchy for Management Groups and Subscriptions.
- Configure custom RBAC role definitions and assignments
- Plan for a MFA Deployment
- Recommend a Solution for Single-Sign On (SSO)
- Recommend a Solution for a Hybrid Identity
Module 5: Designing Governance
In this module, participants will learn to apply Azure Policy, identify non-compliant resources, and manage tag governance with Azure Policy.
Lessons
- Recommend a Solution for using Azure Policy
- Recommend a Solution for using Azure Blueprint
Upon completion of this module, students will be able to:
- Organize Policies with Initiatives
- Manage Tag Governance with Azure Policy
- Provide guidance on Azure Blueprints
Module 6: Designing a Solution for Databases
In this module, participants will learn to recommend appropriate data stores and suggest Azure SQL Database and Azure SQL Managed Instance service tiers.
Lessons
- Select an Appropriate Data Platform Based on Requirements
- Overview of Azure Data Storage
- Recommend Database Service Tier Sizing
- Dynamically Scale Azure SQL Database and Azure SQL Managed Instances
- Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use
Upon completion of this module, students will be able to:
- Recommend Database Service Tier Sizing
- Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use
- Understand Azure Data Lake Store and Azure Blob Storage containers
Module 7: Selecting an Appropriate Storage Account
In this module, participants will learn to design a strategy for using tiered storage and manage tiered Storage using Azure tools.
Lessons
- Understanding Storage Tiers
- Recommend a Storage Access Solution
- Recommend Storage Management Tools
Upon completion of this module, students will be able to:
- Recommend tools for working with Azure Storage
- Design for Azure Blob Storage access tiers
Module 8: Designing Data Integration
In this module, participants will learn about data flows using Azure Data Factory and Azure Synapse Analytics architecture.
Lessons
- Recommend a Data Flow
- Recommend a Solution for Data Integration
Upon completion of this module, students will be able to:
- Implement Azure Synapse Analytics
- Describe how data flows using Azure Data Factory
- Demonstrate how to use Azure Data Factory to load data into SQL Data Warehouse
Module 9: Designing a Solution for Logging and Monitoring
In this module, participants will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. They will learn to monitor Azure Resources with Azure Monitor and collect and analyze resource Logs for Azure using Azure tools.
Lessons
- Azure Monitoring Services
- Azure Monitor
Upon completion of this module, students will be able to:
- Monitor Azure resources with Azure Monitor
- Collect and analyze Resource Logs for Azure resources
- Understand how Azure Sentinel collects data on the devices, users, infrastructure, and applications
Module 10: Designing a Solution for Backup and Recovery
In this module, participants will learn about solutions for site recovery capacity and site failover and failback. They will learn to recommend solutions for recovery in different regions.
Lessons
- Recommend a Recovery Solution for Hybrid and On-Premises Workloads
- Design an Azure Site Recovery Solution
- Recommend a Solution for Recovery in Different Regions
- Recommend a Solution for Azure Backup Management
- Design a Solution for Data Archiving and Retention
Upon completion of this module, students will be able to:
- Recommend solutions for Azure hybrid and on-premises workloads that meet recovery objectives
- Recommend a solution for site recovery capacity
- Recommend storage types and methodology for data archiving
- Identify requirements for data archiving
Module 11: Designing for High Availability
In this module, participants will learn about solutions for application and workload redundancy, including compute, database, and storage.
Lessons
- Recommend a Solution for Application and Workload Redundancy
- Recommend a Solution for Autoscaling
- Identify Resources that Require High Availability
- Identify Storage Types for High Availability
- Recommend a Solution for Geo-Redundancy of Workloads
Upon completion of this module, students will be able to:
- Recommend solutions for autoscaling
- Identify storage types for high availability
- Recommend solutions for geo-redundancy of workloads
Module 12: Designing for Cost Optimization
In this module, participants will learn how to optimize costs based on recommendations, break down costs by Azure Service, and download and review usage details. 01-View
Lessons
- Recommend Solutions for Cost Management
- Recommended Viewpoints for Minimizing Costs
Upon completion of this module, students will be able to:
- Optimize with Azure Cost Management
- Design with Cost in mind
- Optimize Costs from recommendations
Module 13: Designing an Application Architecture
In this module, participants will learn about solutions for deploying applications, including ARM templates, Logic Apps, or Azure Functions. They will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Recommend a Microservices Architecture
- Recommend an Orchestration Solution for Deployment of Applications
- Recommend a Solution for API Integration
Lab : Implement Azure Logic Apps Integration with Azure Event Grid
- Integrate Azure Logic Apps with Event Grid
- Trigger execution of Logic Apps in response to an event representing a change to a resource within a
Upon completing this module, students will understand:
- How to recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions
- How to recommend a solution for monitoring automation
- How to recommend a hosting structure for API management
Module 14: Designing Security for Applications
In this module, participants will learn about solutions for deploying applications, including ARM templates, Logic Apps, or Azure Functions. They will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Security for Applications and Services
- Recommend a Solution using Key Vault
- Recommend Solutions using Azure AD Managed Identities
Upon completion of this module, students will be able to:
- Understand Key Vault authentication and authorization
- Understand Azure Key Vault availability and redundancy
- Understand how Blueprints differ from Resource Manager Templates and Azure Policy
Requirements
Successful Azure Architects enter this role with foundational experience in operating systems, virtualization, cloud infrastructure, storage architectures, networking, applications, and databases.
- Knowledge of on-premises virtualization technologies, including: Virtual Machines (VMs), virtual networking, and virtual hard disks.
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Grasp of Active Directory concepts, such as domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Comprehension of resilience and disaster recovery principles, including backup and restore operations.
- Understanding of application development and APIs.
- Knowledge of databases, both SQL-based (e.g., MS SQL, MySQL, Postgres) and NoSQL databases like MongoDB.
- Understanding of application and service decoupling techniques, such as Queues, tables, and Cache.
- Knowledge of security concepts essential for protecting environments, such as encryption at rest, encryption in transit, SSL, and TLS.
Testimonials (2)
Examples and their usage
Dariusz Frycz - WASKO SPOLKA AKCYJNA
Course - AZ-040T00: Automating Administration with PowerShell
Everything, is a new platform for me and everything was interesting.
