AZ-304

1. Overall Cloud Requirements and Monitoring

  • Cloud requirements – Identity
  • Cloud requirements – Management Groups and Subscription
  • Cloud requirements – Sizing
  • Cloud requirements – Security
  • Optimizing costs
  • Saving on compute costs
  • Resource tagging
  • Azure Monitor for Azure Virtual Machines
  • Activity Logs
  • Azure AD Sign-in Logs – Azure Log Analytics
  • Application Insights
  • Example on using Application Insights
  • Application Insights – Smart Alerts and Continuous Export

3. Design Infrastructure

  • Azure File Sync Service
  • Azure File Sync Service – Demo
  • The Azure Batch Service
  • Batch Service Architecture
  • Batch Service – Demo
  • Network Watcher
  • Network Watcher – Demo
  • Point to Site VPN Connections
  • Point to Site VPN Connections Implementation overview
  • Site to Site VPN Connections
  • Site to Site VPN Connections – Implementation review
  • Virtual Network Peering Connection – Review
  • Virtual Network Peering Connection – Implementation Review
  • Service Endpoints
  • Service Endpoints – Implementation Review
  • Accelerated Networking

5. Design Business Continuity

  • RTO and RPO
  • Azure SQL Database – Backup
  • Azure SQL SQL Database – Point in time restore
  • Azure SQL Database – Point in time restore – Deleted database
  • Azure SQL Database – Replication
  • Azure SQL Database – Auto-failover groups
  • Azure SQL Database – Review of RTO and RPO
  • Azure Storage Account Redundancy
  • Azure Storage Account – Replication Notes
  • Azure Virtual Machine – SLA
  • Disaster recovery for Azure virtual machine
  • Disaster recovery for Azure virtual machine – Implementation review
  • Azure Site Recovery – Hyper-V with Example
  • Application Delivery
  • Azure Content Delivery Network – Introduction
  • Azure Content Delivery Network – Demo
  • Azure Load Balancer – Review
  • Azure Traffic Manager – Quick Review
  • Azure Traffic Manager – Routing methods
  • Lab – Azure Traffic Manager – Performance Routing Method
  • Azure Application Gateway Service – Quick Review
  • Azure Application Gateway – Using an on-premise backend
  • Azure Application Gateway – Multiple Sites
  • Azure Application Gateway Multiple Sites Example
  • Lab – Azure Application Gateway – Web Application Firewall
  • Azure Front Door Service – Overview
  • Lab – Azure Front Door
  • Lab – Azure Virtual Machine Scale Sets
  • Availability Sets Review
  • Availability Zones – Review

2. Design Identity and Security

  • Overview on Azure Active Directory
  • What are Azure AD Access Reviews
  • Lab – Access Reviews – Security Groups
  • Access Reviews – Azure AD Roles
  • Azure Blueprints
  • Lab – Azure Blueprints – Definition
  • Lab – Azure Resource Locks
  • Lab – Azure Policies
  • Lab – Azure Blueprints – Assignment
  • Lab – Azure Blueprints – Resource Locks
  • Overview of the Azure Key vault
  • Data Protection – Azure Virtual Machine Disks
  • Simple Authentication for Web Applications
  • Azure AD Authentication for Web Applications
  • Managed Service Identity
  • Using Managed Service Identity for Azure Key Vault
  • Using Managed Service Identity for Azure SQL Database
  • Using Managed Service Identity for Azure Cosmos DB
  • Azure AD Identity Protection
  • What is Azure AD Privileged Identity Management
  • Lab – Azure AD Privileged Identity Management
  • Lab – Azure Privileged Identity – Azure Resources
  • Multi-Factor Authentication in Azure AD – Review
  • Azure AD Connect – Review
  • Role Based Access Control Review
  • What is Azure Security Center
  • Azure Security Center – Just-In-Time VM Access
  • What is Azure Sentinel
  • Lab – Azure Sentinel – Creating a workspace
  • Lab – Azure Sentinel – Collecting Azure Activity Logs
  • Lab – Azure Sentinel – Analytics , Alerts and Incidents
  • Lab – Azure Sentinel – Collecting Security Events

4. Design Data Storage

  • Different data stores overview
  • Azure Blob Storage tiering
  • Sample Architecture – Storage Accounts
  • Secure access to data – Azure Storage accounts
  • Azure Storage Account – Encryption
  • Azure Storage Accounts – Immutable Blob Storage
  • Azure SQL Database – Deployment Options
  • Azure SQL Database – Pricing options
  • Lab – SQL Server on an Azure VM
  • SQL Server on Azure Virtual Machine
  • Azure SQL Database – Auditing
  • Azure SQL Database – Diagnostic setting
  • Securing Azure SQL Database – Review
  • Going through the process of creating a SQL Managed Instance
  • Quick Note – Performance Insight , Automatic Tuning
  • Azure Cosmos DB Review
  • Secure access to Cosmos DB
  • Sample Architecture – Data Store
  • Azure Data Lake Storage Gen 2
  • Azure Data Lake – Ingesting data
  • Azure Data Lake use case
  • Using Azure Databricks example
  • Azure Redis Cache
  • StorSimple

6. More on Designing your Infrastructure

  • Monolith application design
  • Microservices based architecture
  • Container deployment options
  • Azure Service Fabric
  • Azure Container Instances
  • Using Kubernetes
  • Quick review on container deployment options
  • Compute Architecture
  • Web Architecture
  • Transferring data from an on-premise environment
  • The AzCopy tool
  • Using Azure Data Factory
  • Lab – Database Migration Service
  • Migrating to CosmosDB
  • Azure API Management Service
  • Azure API Management – Virtual Network Integration
  • Azure API Management and Azure Functions
  • Azure API Management Policies
Menu