Course Outline
Configuring Microsoft Entra ID
- Defining Microsoft Entra concepts, including identities, accounts, and tenants.
- Describing MS Entra features to support different configurations.
- Understanding differences between Microsoft Entra ID and Active Directory Domain Services (AD DS).
- Choosing between supported editions of Microsoft Entra ID.
- Using the Microsoft Entra self-service password reset feature.
Configuring User & Group Accounts
- Configuring user accounts and user account properties.
- Creating new user accounts.
- Importing bulk user accounts with a template.
- Configuring group accounts and assignment types.
Configuring Subscriptions
- Determining the correct region to locate MS Azure services.
- Reviewing features and use cases for Azure subscriptions.
- Obtaining an Azure subscription.
- Understanding billing/features for different Azure subscriptions.
- Utilizing Microsoft Cost Management for cost analysis.
- Discovering when to use Azure resource tagging.
- Identifying ways to reduce costs.
Configuring Azure Policy
- Creating management groups to target policies and spending budgets.
- Implementing Azure Policy with policy and initiative definitions.
- Scoping Azure policies and determining compliance.
Configuring Role-based Access Control
- Identifying features and using cases for role-based access control.
- Listing and creating role definitions.
- Creating role assignments.
- Identifying differences between Azure RBAC and Microsoft Entra roles.
- Managing access to subscriptions with RBAC.
- Reviewing built-in Azure RBAC roles.
Configuring MS Azure Resources with Tools
- Managing resources with the Azure portal.
- Managing resources with Azure Cloud Shell.
- Managing resources with Azure PowerShell.
- Managing resources with Azure CLI.
Utilizing Azure Resource Manager
- Identifying the features and usage cases for Azure Resource Manager.
- Describing each Azure Resource Manager component and its usage.
- Organizing your Azure resources with resource groups.
- Applying Azure Resource Manager locks.
- Moving Azure resources between groups, subscriptions, and regions.
- Removing resources and resource groups.
- Applying and tracking resource limits.
Configuring Resources with Azure Resource Manager Templates
- Listing the advantages of Azure templates.
- Identifying the Azure template schema components.
- Specifying Azure template parameters.
- Locating and using Azure Quickstart Templates.
Configuring Virtual Networks
- Describing Azure virtual network features and components.
- Identifying features and usage cases for subnets and subnetting.
- Identifying usage cases for private and public IP addresses.
- Creating a virtual network and assigning IP addresses.
Configuring Network Security Groups
- Determining when to use network security groups.
- Creating network security groups.
- Implementing and evaluating network security group rules.
- Describing the function of application security groups.
Configuring MS Azure DNS
- Identifying features and usage cases for domains, custom domains, and private zones.
- Verifying custom domain names by using DNS records.
- Implementing DNS zones, DNS delegation, and DNS record sets.
Configuring Microsoft Azure Virtual Network Peering
- Identifying usage cases and product features of Azure Virtual Network peering.
- Configuring your network to implement Azure VPN Gateway for transit connectivity.
- Extending peering using a hub and spoke network with user-defined routes and service chaining.
Configuring Network Routing & Endpoints
- Implementing system routes and user-defined routes.
- Configuring a custom route.
- Implementing service endpoints.
- Identifying features and usage cases for Azure Private Link and endpoint services.
Configuring Azure Load Balancer
- Identifying features and usage cases for Azure Load Balancer.
- Implementing public and internal Azure load balancers.
- Comparing features of load balancer SKUs and configuration differences.
- Configuring back-end pools, load-balancing rules, session persistence, and health probes.
Configuring MS Azure Application Gateway
- Identifying features and usage cases for Azure Application Gateway.
- Implementing an Azure application gateway, including selecting a routing method.
- Configuring gateway components, such as listeners, health probes, and routing rules.
Configuring Storage Accounts
- Identifying features and usage cases for Azure storage accounts.
- Selecting between different types of Azure Storage and creating storage accounts.
- Selecting a storage replication strategy.
- Configuring secure network access to storage endpoints.
Configuring Azure Blob Storage
- Understanding the purpose and benefits of Azure Blob Storage.
- Creating and configuring Azure Blob Storage accounts.
- Managing containers and blobs within Azure Blob Storage.
- Optimizing blob storage performance and scalability.
- Implementing lifecycle management policies to automate data movement and deletion.
- Determining the best pricing plans for your Azure Blob Storage.
Configuring Azure Storage Security
- Configuring a shared access signature (SAS), including the uniform resource identifier (URI) and SAS parameters.
- Configuring Azure Storage encryption.
- Implementing customer-managed keys.
- Recommending opportunities to improve Azure Storage security.
Configuring MS Azure Files & Azure File Sync
- Identifying storage for file shares and blob data.
- Configuring Azure file shares and file share snapshots.
- Identifying features and use cases of Azure File Sync.
- Identifying Azure File Sync components and configuration steps.
Configuring Azure Storage with Tools
- Configuring and using Azure Storage Explorer.
- Configuring the Azure Import/Export service.
- Using the WAImportExport tool with the Azure Import/Export service.
- Configuring and using AZCopy.
Configuring Virtual Machines
- Determining the responsibilities of cloud service providers and customers in a cloud computing environment.
- Identifying the key considerations and factors involved in planning for virtual machines. Considerations include workload requirements, resource allocation, and secure access.
- Configuring virtual machine storage and virtual machine sizing.
- Creating a virtual machine in the Azure portal.
- Practicing deploying an Azure virtual machine and verifying the configuration.
Configuring Virtual Machine Availability
- Implementing availability sets and availability zones.
- Implementing update and fault domains.
- Implementing Azure Virtual Machine Scale Sets.
- Autoscaling virtual machines.
Configuring Azure App Service Plans
- Identifying features and usage cases for Azure App Service.
- Selecting an appropriate Azure App Service plan pricing tier.
- Scaling an Azure App Service plan.
Configuring Azure App Service
- Identifying features and usage cases for Azure App Service.
- Creating an app with Azure App Service.
- Configuring deployment settings, specifically deployment slots.
- Securing your Azure App Service app.
- Configuring custom domain names.
- Backing up and restoring your Azure App Service app.
- Configuring Azure Application Insights.
Configuring Azure Container Instances
- Identifying when to use containers versus virtual machines.
- Identifying the features and usage cases of Azure Container Instances.
- Implementing Azure container groups.
Configuring File/Folder Backups
- Identifying features and usage cases for Azure Backup.
- Configuring Azure Recovery Services vault backup options.
- Configuring the Microsoft Azure Recovery Services (MARS) agent for Azure Backup.
- Implementing on-premises file and folder backups.
Configuring Virtual Machine Backups
- Identifying features and usage cases for different Azure backup methods.
- Configuring virtual machine snapshots and backup options.
- Implementing virtual machine backup and restore, including soft delete.
- Performing site-to-site recovery by using Azure Site Recovery.
- Comparing the Azure Backup agent to the Microsoft Azure Backup Server.
Configuring Azure Monitor
- Identifying the features and usage cases for Azure Monitor.
- Configuring and interpreting metrics and logs.
- Identifying the Azure Monitor components and data types.
- Configuring the Azure Monitor activity log.
Configuring MS Azure Alerts
- Identifying Azure Monitor alerts, including alert types and alert states.
- Configuring Azure Monitor alerts.
- Creating alert rules and action groups.
Configuring Log Analytics
- Identifying the features and usage cases for Log Analytics.
- Creating a Log Analytics workspace.
- Structuring a Log Analytics query and reviewing results.
Configuring Network Watcher
- Identifying the features and usage cases for Azure Network Watcher.
- Configuring diagnostic capabilities like IP Flow Verify, Next Hop, and Network Topology.