Implementing Microsoft Azure Infrastructure Solutions

  1. Design and implement Azure App Service apps (15–20%)
    1. Deploy Web Apps
      1. Create App Service plans
      2. Implement pre- and post-deployment actions
      3. Create a Web App within an App Service plan
      4. Create, configure and deploy packages
      5. Define deployment slots
      6. Migrate Web Apps between App Service plans
      7. Roll back deployments
    2. Configure Web Apps
      1. Define and use app settings
      2. Connection strings
      3. Handlers
      4. Virtual directories
      5. Configure certificates
      6. Custom domains
      7. Configure SSL bindings
      8. Runtime configurations
      9. Manage Web Apps by using Azure PowerShell and Xplat-CLI
    3. Configure diagnostics, monitoring and analytics
      1. Retrieve diagnostics data
      2. View streaming logs
      3. Configure endpoint monitoring
      4. Configure alerts
      5. Configure diagnostics
      6. Use remote debugging
      7. Monitor Web App resources
    4. Configure Web Apps for scale and resilience
      1. Configure auto-scale using built-in and custom schedules
      2. Configure by metric
      3. Change the size of an instance
      4. Configure Traffic Manager
  2. Create and manage Azure Resource Manager Virtual Machines (20–25%)
    1. Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
      1. Identify workloads that can and cannot be deployed
      2. Run workloads including Microsoft and Linux
      3. Create VMs
      4. Connect to a Windows/Linux VM
    2. Perform configuration management
      1. Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent (custom script extensions)
      2. Configure VMs using a configuration management tool such as Puppet or Chef
      3. Enable remote debugging
    3. Design and implement VM storage
      1. Configure disk caching
      2. Plan storage capacity
      3. Configure operating system disk redundancy
      4. Configure shared storage using Azure File service
      5. Configure geo-replication
      6. Encrypt disks
      7. Implement ARM VMs with Standard and Premium Storage
    4. Monitor ARM VMs
      1. Configure ARM VM monitoring
      2. Configure alerts
      3. Configure diagnostic
      4. Monitoring storage location
    5. Monitor ARM VM availability
      1. Configure multiple ARM VMs in an availability set for redundancy
      2. Configure each application tier into separate availability sets
      3. Combine the Load Balancer with availability sets
    6. Scale ARM VMs
      1. Scale up and scale down VM sizes
      2. Deploy ARM VM Scale Sets (VMSS)
      3. Configure ARM VMSS auto-scale
  3. Design and implement a storage strategy (20–25%)
    1. Implement Azure storage blobs and Azure files
      1. Read data, change data, set metadata on a container
      2. Store data using block and page blobs
      3. Stream data using blobs
      4. Access blobs securely
      5. Implement async blob copy
      6. Configure a Content Delivery Network (CDN)
      7. Design blob hierarchies
      8. Configure custom domains
      9. Scale blob storage
    2. Manage access
      1. Create and manage shared access signatures
      2. Use stored access policies
      3. Regenerate keys
    3. Configure diagnostics, monitoring and analytics
      1. Set retention policies and logging levels
      2. Analyse logs
    4. Implement Azure SQL Databases
      1. Choose the appropriate database tier and performance level
      2. Configure point-in-time recovery
      3. Geo-replication and data sync
      4. Import and export data and schema
      5. Design a scaling strategy
    5. Implement recovery services
      1. Create a backup vault
      2. Deploy a backup agent
      3. Back up and restore data
  4. Implement an Azure Active Directory (15–20%)
    1. Integrate an Azure Active Directory (Azure AD) with existing directories
      1. Implement Azure AD Connect and single sign-on with on-premises Windows Server 2012 R2
      2. Add custom domains
      3. Monitor Azure AD
    2. Configure Application Access
      1. Configure single sign-on with SaaS applications using federation and password-based
      2. Add users and groups to applications
      3. Revoke access to SaaS applications
      4. Configure access
      5. Configure federation with Facebook and Google ID
    3. Integrate an app with Azure AD
      1. Implement Azure AD integration in web and desktop applications, leverage Graph API
    4. Implement Azure AD B2C and Azure B2B
      1. Create an Azure AD B2C Directory
      2. Register an application
      3. Implement social identity provider authentication
      4. Enable multi-factor authentication
      5. Set up self-service password reset
      6. Implement B2B collaboration
      7. Configure partner users
      8. Integrate with applications
  5. Implement virtual networks (10–15%)
    1. Configure virtual networks
      1. Deploy a VM into a virtual network
      2. Configure external and internal load balancing
      3. Implement Application Gateway
      4. Design subnets
      5. Configure static, public, and private IP addresses
      6. Set up Network Security Groups (NSGs)
      7. DNS at the virtual network level
      8. HTTP and TCP health probes, public IPs, User Defined Routes (UDRs), firewall rules and direct server return
    2. Modify network configuration
      1. Modify subnets, NSGs, and UDRs
    3. Design and implement a multi-site or hybrid network
      1. Choose the appropriate solution between ExpressRoute
      2. Site-to-site and point-to-site
      3. Choose the appropriate gateway
      4. Identify supported devices and software VPN solutions
      5. Identify networking prerequisites
      6. Configure virtual networks and multi-site virtual networks
  6. Design and deploy ARM templates (10–15%)
    1. Implement ARM templates
      1. Author ARM templates
      2. Create ARM templates to deploy ARM Resource Providers resources
      3. Deploy templates with PowerShell, CLI and REST API
    2. Control access
      1. Leverage service principles with ARM authentication
      2. Use Azure Active Directory Authentication with ARM
      3. Set management policies, lock resources
    3. Design role-based access control (RBAC)
      1. Secure resource scopes, such as the ability to create VMs and Azure Web Apps
      2. Implement Azure role-based access control (RBAC) standard roles
      3. Design Azure RBAC custom roles

You might also like More from author

Leave A Reply

Your email address will not be published.