Microsoft
Microsoft Certified: Azure Solutions Architect Expert
AZ-305: Designing Microsoft Azure Infrastructure Solutions
Microsoft Azure Infrastructure Solutions: Active Directory
Microsoft Azure Infrastructure Solutions: Application Containers
Microsoft Azure Infrastructure Solutions: ARM Templates
Microsoft Azure Infrastructure Solutions: Authentication
Microsoft Azure Infrastructure Solutions: Blob Management
Microsoft Azure Infrastructure Solutions: Business Continuity
Microsoft Azure Infrastructure Solutions: Cloud Storage
Microsoft Azure Infrastructure Solutions: Data Solutions
Microsoft Azure Infrastructure Solutions: Developer Solutions
Microsoft Azure Infrastructure Solutions: Files Share
Microsoft Azure Infrastructure Solutions: Managing Azure VMs
Microsoft Azure Infrastructure Solutions: Managing Azure Web Apps
Microsoft Azure Infrastructure Solutions: Migrating to Azure
Microsoft Azure Infrastructure Solutions: Network Security
Microsoft Azure Infrastructure Solutions: Policy & Monitoring
Microsoft Azure Infrastructure Solutions: Protecting Data at Rest
Microsoft Azure Infrastructure Solutions: Virtual Networks
Microsoft Azure Infrastructure Solutions: VNet Peering & VPNs

AZ-305 - Microsoft Azure Infrastructure Solutions: Active Directory

Course Number:
it_cldmai21_01_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Active Directory

  • discover the key concepts covered in this course
  • plan the number and use of Azure AD tenants
  • use the portal to create a new Azure AD tenant
  • use the portal to create and manage Azure AD users
  • use CLI to create and manage Azure AD users
  • use PowerShell to create and manage Azure AD users
  • create Azure AD users using a bulk import file
  • create dynamic groups memberships for Azure AD users and devices
  • connect a Windows 10 computer to an Azure AD tenant
  • register an Android device with Azure AD
  • register a custom DNS name for use with an Azure AD tenant
  • manage permissions for an Azure AD app
  • assign product licenses to Azure AD users
  • summarize the key concepts covered in this course

Overview/Description

As an Azure solutions architect, you will face a variety of problems requiring extensive experience and knowledge of the breadth of IT operations to design effective and appropriate infrastructure solutions. Discover how to deploy and manage Azure Active Directory to support cloud authentication and authorization. Explore how to create and manage Azure AD users and groups using GUI and command line tools. Finally, join devices to Azure AD and configure custom DNS names, app permissions, and assign product licenses to Azure AD users. This course can be used to prepare for exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.



Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Application Containers

Course Number:
it_cldmai21_13_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Application Containers

  • discover the key concepts covered in this course
  • identify how containerized applications differ from traditional apps
  • install Docker on a Linux host and run a Docker container
  • install Docker on a Windows host and run a Docker container
  • create a Dockerfile and create an image from it
  • deploy a container registry to share Docker images
  • deploy an Azure Container Instance (ACI)
  • outline the role of Kubernetes as it related to application containers
  • summarize the key concepts covered in this course

Overview/Description
Many modern applications are run in application containers to allow for modular and portable software solutions. In this course, you will discover how containerized applications differ from traditional applications. First, you will explore how Docker hosts are configured on the Linux and Windows platforms along with how to build and manage Docker container images. Next, you will deploy cloud container solutions such as a container registry and Azure Container Instances. Finally, you will discover when to use Azure Kubernetes container clusters. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: ARM Templates

Course Number:
it_cldmai21_15_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: ARM Templates

  • discover the key concepts covered in this course
  • identify how Azure Resource Management (ARM) templates are used for cloud automation
  • work with ARM templates using the portal
  • work with ARM templates using Visual Studio
  • work with ARM templates using the CLI
  • work with ARM templates using PowerShell
  • summarize the key concepts covered in this course

Overview/Description
Azure Resource Manager templates provide an infrastructure as code method of deploying and managing cloud resources in an automated fashion. In this course, begin by looking at how Azure Resource Manager (ARM) templates can be used to automate the creation and management of Azure resources. Create and deploy templates using the portal, CLI, PowerShell, and Microsoft Visual Studio. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Authentication

Course Number:
it_cldmai21_02_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Authentication

  • discover the key concepts covered in this course
  • differentiate between authentication and authorization mechanisms
  • identify when identity federation should be used
  • differentiate between Azure service principals and managed identities
  • demonstrate how to use the portal to manage Azure service principles
  • demonstrate how to use the portal to manage Azure managed identities
  • enable multi-factor authentication (MFA) for Azure AD users
  • configure Azure AD conditional access
  • enable self-service password reset (SSPR) to reduce the help desk burden
  • enable Self-service Group Management (SSGM) to reduce the help desk burden
  • demonstration how to ensure users have only the required permissions through an Azure AD access review
  • identify when and how Azure AD Connect should be used
  • link on-premises Active Directory to an Azure AD tenant
  • summarize the key concepts covered in this course

Overview/Description
Azure AD authentication and authorization security settings are required to verify user identities. Security identity objects such as Azure service principals and managed identities are two options provided to authenticate users and grant access to Azure AD resources. Begin by exploring how authentication and authorization differ and when identity federation should be used. Discover how to provide permissions to software through service principles and managed identities. Finally, explore how to utilize Azure AD access reviews and enable various Azure AD security features such as multi-factor authentication (MFA), conditional access, password reset, and group management. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Blob Management

Course Number:
it_cldmai21_04_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Blob Management

  • discover the key concepts covered in this course
  • demonstrate how to upload blobs using the Azure portal
  • demonstrate how to upload blobs using PowerShell
  • demonstrate how to upload blobs using the Azure CLI
  • use Azure Storage Explorer to manage blobs
  • manage the blob soft delete feature
  • set a legal hold policy on a blob container
  • summarize the key concepts covered in this course

Overview/Description
Azure Blob storage helps your organization store and access considerable amounts of unstructured data, ultimately allowing for the creation of analytics-driven data lakes, as well as cloud-driven and native apps. Use this course to explore how to upload blobs to a storage account using the portal, CLI, and PowerShell. Then, manage blobs using the Storage Explorer tool. Finally, discover how to manage blob storage account settings such as soft deletion and legal holds. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Business Continuity

Course Number:
it_cldmai21_17_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Business Continuity

  • discover the key concepts covered in this course
  • outline cloud services that help ensure business continuity
  • configure Azure Container Registry availability zones
  • select the appropriate Azure backup solution
  • back up file servers to the Azure cloud
  • enable storage account Blob versioning
  • configure storage account replication to a secondary region
  • configure virtual machine replication to a secondary region
  • outline how load balancing can improve app performance and fault tolerance
  • enable load balancing for a web application
  • enable an application gateway for a web application
  • summarize the key concepts covered in this course

Overview/Description
Proactive planning for inevitable IT disruptions can reduce downtime for IT services. This is a vital step to ensure that any business continues to run smoothly should disruptions occur. Explore how cloud IT solutions can help ensure continuity of business processes in the event of disruptions. Learn how to configure container, storage account, and virtual machine high availability. Finally, discover how to configure cloud backups and enable blob versioning and web application load balancing. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Cloud Storage

Course Number:
it_cldmai21_03_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Cloud Storage

  • discover the key concepts covered in this course
  • illustrate when storage accounts should be used
  • use the storage explorer GUI tool to manage storage account contents
  • allow storage account access from specific networks
  • create a managed disk and attach it to a VM
  • automate storage account blob lifecycle activities
  • control storage account management access using RBAC
  • use the portal to manage storage account keys
  • use the CLI to manage storage account keys
  • use PowerShell to manage storage account keys
  • create a SAS for a storage account
  • create a SAS for a blob
  • control database management using RBAC
  • manage storage account data archiving
  • summarize the key concepts covered in this course

Overview/Description
Azure Storage is a scalable, durable, secure, and highly available cloud storage solution for contemporary enterprise cloud storage needs. Begin by examining the Azure Storage Explorer tool and learn how to limit storage account network access, add disks to virtual machines (VMs), and manage lifecycle properties for blobs. Discover how to manage storage account keys and shared access signatures and how to use role-based access control (RBAC) for storage management delegation. Finally, explore how to manage data archiving in a storage account. This course can be used to prepare for exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Data Solutions

Course Number:
it_cldmai21_05_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Data Solutions

  • discover the key concepts covered in this course
  • describe various Azure cloud database options
  • use the Azure portal to deploy Azure SQL
  • demonstrate how to manage Azure SQL configuration settings
  • use Microsoft SQL Server Management Studio to connect to Azure SQL
  • demonstrate how to enable high availability for Azure SQL
  • use Microsoft SQL Server Management Studio to publish an on-premises database to Azure
  • configure database sizing and scalability settings
  • outline various Azure data management and analysis solutions
  • determine when Azure Synapse Analytics should be used
  • determine when Azure HDInsight should be used
  • summarize the key concepts covered in this course

Overview/Description
Designing data storage solutions is a primary focus for Azure solutions architects. This course will help you confidently analyze your organization’s data storage needs and select the appropriate solutions. Begin by exploring NoSQL and SQL Azure database services and deploying a SQL database. Next, discover how to manage settings related to cloud SQL deployments and how to use Microsoft Visual Studio on-premises to connect to cloud SQL instances. Learn how to resize a database and configure database high availability. Finally, discover data analysis services such as Azure Synapse Analytics and Azure HDInsight. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Developer Solutions

Course Number:
it_cldmai21_14_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Developer Solutions

  • discover the key concepts covered in this course
  • recognize the convergence of software development and IT administration
  • create a message queue
  • differentiate between Azure Function and Logic apps
  • use the portal to create an Azure Function app
  • use the portal to create an Azure Logic app
  • identify the purpose of Azure Blueprints
  • use the portal to create a compliant Azure Blueprint environment
  • summarize the key concepts covered in this course

Overview/Description
Microsoft Azure provides services to facilitate the creation, hosting, and execution of cloud environments and software development solutions. Explore how various Azure services provide relevant functionality for software developers. Discover how to work with cloud-based message queues, function apps, logic apps. Finally, create compliant Azure environments using Azure Blueprints. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Files Share

Course Number:
it_cldmai21_06_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Files Share

  • discover the key concepts covered in this course
  • recall how an Azure Files share enables shared folders in the cloud
  • use the Azure portal to manage an Azure Files share
  • use the CLI to manage an Azure Files share
  • use PowerShell to manage an Azure Files share
  • demonstrate how to map a drive to an Azure Files share
  • map a mount point to an Azure Files share
  • summarize the key concepts covered in this course

Overview/Description
Azure Files provides fully managed shared folder access via the cloud, allowing your organization to augment or replace on-premises servers, seamlessly move apps to the cloud, and even simplify future cloud development. This course explores how to manage that share access using GUI and CLI tools. Explore how to manage file shares using the Azure portal, CLI, and PowerShell. Discover how to map a Windows drive letter to Azure shared folders, and then how to use a Linux mount points to connect to an Azure file share. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Managing Azure VMs

Course Number:
it_cldmai21_10_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Managing Azure VMs

  • discover the key concepts covered in this course
  • oultine how virtual machines are deployed and managed in the Azure cloud
  • use the portal to deploy virtual machines
  • use the CLI to deploy virtual machines
  • use PowerShell to deploy virtual machines
  • resize virtual machines using the portal
  • resize virtual machines using the CLI and PowerShell
  • enable SSH public key authentication for a Linux virtual machine
  • enable Bastion as a jump box virtual machine management solution
  • summarize the key concepts covered in this course

Overview/Description
Virtual machines are the workhorse of most cloud computing services. Explore how Azure virtual machines are deployed and managed in the Azure cloud. You'll begin by discovering how to deploy Windows and Linux VMs using GUI and command line tools. Next, explore VM resizing options to accommodate IT workloads running in VMs. Finally, you'll enable SSH public key authentication for Linux hosts and enable Azure Bastion for secure VM management over the Internet. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Managing Azure Web Apps

Course Number:
it_cldmai21_12_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Managing Azure Web Apps

  • discover the key concepts covered in this course
  • use the portal to deploy a web application
  • use Visual Studio to deploy a web application
  • manage web app deployment slots
  • enable a custom DNS name for a web app
  • configure an HTTPS binding for a web app
  • manage web app settings
  • outline Azure application programming interfaces (APIs)
  • recall the purpose of a content delivery network
  • configure a content delivery network
  • summarize the key concepts covered in this course

Overview/Description
Web applications can be created with or without a user front-end. Hosting web apps in Azure allows developers to focus on the app functionality without having to manage the underlying infrastructure. In this course, you will explore how to deploy and manage an Azure-hosted web application in the Azure cloud through the portal as well as using Microsoft Visual Studio. Next, you will learn how deployment slots can maximize web app uptime even while making web app changes and testing them. You will configure custom DNS domain names, enable HTTPS binding, and manage web app settings. Finally, discover how APIs are used in Azure and how CDNs replicate select content to reduce network latency. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Migrating to Azure

Course Number:
it_cldmai21_18_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Migrating to Azure

  • discover the key concepts covered in this course
  • outline various Azure migration strategies
  • outline the Azure Import/Export service
  • install and set up the Azure Import/Export tool
  • prepare a disk for use with Azure Import/Export
  • create an Azure Import/Export journal file
  • create an Azure import job using the portal
  • create an Azure export job using the portal
  • summarize the key concepts covered in this course

Overview/Description

Organizations can protect investments in on-premises IT systems by migrating suitable candidates into the Microsoft Azure cloud. Understanding the tools and strategies available is the first step to successfully completing this type of migration. Learn how to use the Azure import and export service including the Azure Import/Export tool to work with jobs. Explore how Azure Data Box can be used to facilitate the movement of large amounts of data into or out of the Azure cloud. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.



Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Network Security

Course Number:
it_cldmai21_11_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Network Security

  • discover the key concepts covered in this course
  • compare various types of firewall solutions
  • outline how network security groups (NSGs) are used
  • manage network security groups using the portal
  • manage network security groups using the CLI
  • manage network security groups using PowerShell
  • outline how Azure Firewall provides protection
  • configure Azure Firewall application rules
  • configure Azure Firewall network rules
  • configure Azure Firewall network address translation (NAT) rules
  • summarize the key concepts covered in this course

Overview/Description
One way to reduce network and service attacks is to begin with controlling the flow of network traffic through firewalls. In this course, you will explore various types of firewall solutions and when they should be used. Next, you will discover how to control inbound and outbound network traffic using network security groups (NSGs) through GUI and command line configurations. Finally, learn how the Azure Firewall application network and NAT rules can help control network traffic flow. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Policy & Monitoring

Course Number:
it_cldmai21_16_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Policy & Monitoring

  • discover the key concepts covered in this course
  • outline how Azure Policy can be used for compliance
  • create an Azure Policy assignment to check for configuration compliance
  • create and assign a custom Azure Policy
  • create Azure Policy assignments using PowerShell command line
  • outline various monitoring strategies for Azure services
  • enable web application insights
  • manage Azure service logs
  • monitor performance metrics for Azure services
  • create and manage a Log Analytics Workspace
  • configure Azure Monitor
  • create alerts and notifications
  • navigate through Azure Advisor recommendations
  • summarize the key concepts covered in this course

Overview/Description
Cloud governance requires control of cloud resource configuration and the ability to centrally monitor cloud services. Learn how Azure Policy can be used to check for and enforce Azure resource configuration compliance. Discover how to assign built-in and custom policies to various Azure hierarchy scopes and view compliance results. Explore various Azure monitoring solutions and view Azure logs. Finally, discover how to monitor Azure service performance metrics, configure alerts and notifications, and view Azure Security Center recommendations. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Protecting Data at Rest

Course Number:
it_cldmai21_07_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Protecting Data at Rest

  • discover the key concepts covered in this course
  • recognize how encryption provides data confidentiality
  • encrypt an Azure storage account with a customer-managed key
  • enable managed Transparent Data Encryption (TDE) for Azure databases
  • create an Azure key vault using the portal
  • manage key vault items using the portal
  • manage key vault items using the CLI
  • manage key vault items using PowerShell
  • summarize the key concepts covered in this course

Overview/Description
Data confidentiality is provided by the use of encryption using cryptographic keys. Cloud apps and services are secured by cryptographic keys and other secrets which are managed by Azure Key Vault. In this course, you'll begin by exploring how encryption provides data confidentiality using a variety of techniques. Learn how to use a custom encryption key to protect the contents of a storage account. Finally, discover how to manage SQL database TDE and how to create and manage a key vault using GUI and command line tools. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: Virtual Networks

Course Number:
it_cldmai21_08_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Virtual Networks

  • discover the key concepts covered in this course
  • list various Azure cloud network service offerings
  • recall how Azure supports DNS
  • outline how Azure VNets and subnets are used
  • manage VNets using the portal
  • manage VNets using the CLI
  • manage VNets using PowerShell
  • manage subnets using the portal
  • manage subnets using the CLI
  • manage subnets using PowerShell
  • summarize the key concepts covered in this course

Overview/Description
An understanding of Azure networking fundamentals is an important aspect of designing infrastructure solutions. Azure virtual networks (VNets) provide a range of functions including DNS, routing, DHCP, and of course VM connectivity and access control. In this course, you will discover how Azure network service offerings can support Azure services without having to set up a physical network infrastructure. Explore Azure DHCP and DNS settings, as well as how to create and manage Azure VNets and subnets using GUI and command line tools. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

AZ-305 - Microsoft Azure Infrastructure Solutions: VNet Peering & VPNs

Course Number:
it_cldmai21_09_enus
Lesson Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: VNet Peering & VPNs

  • discover the key concepts covered in this course
  • outline the purpose of peering VNets together
  • use the portal to configure VNet peering
  • use the CLI to configure VNet peering
  • use PowerShell to configure VNet peering
  • outline how VPNs secure network traffic
  • use PowerShell to create a PKI certificate
  • configure a site-to-site VPN
  • configure a point-to-site VPN
  • identify when ExpressRoute cloud connectivity should be used
  • summarize the key concepts covered in this course

Overview/Description
Virtual network peering enables you to connect different virtual networks and allows resources of the different virtual networks to communicate. Use this course to learn how to interconnect VNets within Azure and on-premise networks to the Azure cloud. Begin by exploring how VNet peering links networks together over a global backbone and allows communication using private IP addresses. Next, discover how to enable peering using GUI and command line tools. Review how VPNs provide a secure method for connecting to remote networks and configure a site-to-site and point-to-site VPN. Finally, discover how ExpressRoute offers an alternative network connection to the Azure cloud. This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

Target

Prerequisites: none

Close Chat Live