LU1 Prerequisites for Azure administrators

Topic 1 Configure Azure resources with tools 

• Use the Azure portal
• Use Azure Cloud Shell
• Use Azure PowerShell
• Use Azure CLI3

Topic 2 Use Azure Resource Manager 

• Review Azure Resource Manager benefits
• Review Azure resource terminology
• Create resource groups
• Create Azure Resource Manager locks
• Reorganize Azure resources
• Remove resources and resource groups
• Determine resource limits

Topic 3 Configure resources with Azure Resource Manager templates 

• Review Azure Resource Manager template advantages
• Explore the Azure Resource Manager template schema
• Explore the Azure Resource Manager template parameters
• Consider Bicep templates
• Review QuickStart templates

Topic 4 Automate Azure tasks using scripts with PowerShell 

• Decide if Azure PowerShell is right for your tasks
• Install PowerShell
• Create an Azure Resource using scripts in Azure PowerShell
• Create and save scripts in Azure PowerShell

Topic 5 Control Azure services with the CLI 

• What is the Azure CLI?
• Work with the Azure CLI

Topic 6 Deploy Azure infrastructure by using JSON ARM templates 

• • Explore Azure Resource Manager template structure
• • Add flexibility to your Azure Resource Manager template by using parameters and outputs

LU2 Manage identities and governance in Azure

Topic 7 Configure Azure Active Directory 

• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement Azure Active Directory self-service password reset

Topic 8 Configure user and group accounts 

• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units

Topic 9 Configure subscriptions 

• Identify Azure regions
• Implement Azure subscriptions
• Obtain an Azure subscription
• Identify Azure subscription usage
• Implement Microsoft Cost Management
• Apply resource tagging
• Apply cost savings

Topic 10 Configure Azure Policy 

• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create an initiative definition
• Scope the initiative definition
• Determine compliance

Topic 11 Configure role-based access control 

• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Review fundamental Azure RBAC roles

Topic 12 Create Azure users and groups in Azure Active Directory 

• What are user accounts in Azure Active Directory?
• Add and delete users in Azure Active Directory
• Manage app and resource access by using Azure Active Directory groups
• Assign users to Azure Active Directory groups
• Collaborate by using guest accounts and Azure Active Directory B2B
• Give guest users access in Azure Active Directory B2B

Topic 13 Secure your Azure resources with Azure role-based access control (Azure RBAC) 

• What is Azure RBAC?
• List access using Azure RBAC and the Azure portal
• Grant access using Azure RBAC and the Azure portal
• View activity logs for Azure RBAC changes

Topic 14 Allow users to reset their password with Azure Active Directory self-service password reset 

• What is self-service password reset in Azure Active Directory?
• Implement Azure AD self-service password reset
• Set up self-service password reset
• Customize directory branding

LU3 Implement and manage storage in Azure

Topic 15 Configure storage accounts 

• Implement Azure Storage
• Explore Azure Storage services
• Determine storage account types
• Determine replication strategies
• Access storage
• Secure storage endpoints

Topic 16 Configure Azure Blob Storage 

• Implement Azure Blob Storage
• Create blob containers
• Assign blob access tiers
• Add blob lifecycle management rules
• Determine blob object replication
• Upload blobs
• Determine Blob Storage pricing

Topic 17 Configure Azure Storage security 

• Review Azure Storage security strategies
• Create shared access signatures
• Identify URI and SAS parameters
• Determine Azure Storage encryption
• Create customer-managed keys
• Apply Azure Storage security best practices

Topic 18 Configure Azure Files and Azure File Sync 

• Compare storage for file shares and blob data
• Manage Azure Files shares
• Create file share snapshots
• Implement Azure File Sync
• Identify Azure File Sync components
• Deploy Azure File Sync

Topic 19 Configure Azure Storage with tools 

• Use Azure Storage Explorer
• Use the Azure Import/Export service
• Use the WAImportExport tool
• Use the AzCopy tool

Topic 20 Create an Azure Storage account 

• Decide how many storage accounts you need
• Choose your account settings
• Choose an account creation tool
• Create a storage account using the Azure portal

Topic 21 Control access to Azure Storage with shared access signatures 

• Authorization options for Azure Storage
• Use shared access signatures to delegate access to Azure Storage
• Use shared access signatures to delegate access to Azure Storage
• Use stored access policies to delegate access to Azure Storage
• Use stored access policies to delegate access to Azure Storage

Topic 22 Upload, download, and manage data with Azure Storage Explorer 

• Connect Azure Storage Explorer to a storage account
• Connect Azure Storage Explorer to a storage account
• Connect Azure Storage Explorer to Azure Data Lake Storage
• Connect Azure Storage Explorer to Azure Data Lake Storage

LU 4 Deploy and manage Azure compute resources and virtual networks for Azure administrators

Topic 23 Configure virtual machines 

• Review cloud services responsibilities
• Plan virtual machines
• Determine virtual machine sizing
• Determine virtual machine storage
• Create virtual machines in the Azure portal
• Connect to virtual machines

Topic 24 Configure virtual machine availability 

• Plan for maintenance and downtime
• Create availability sets
• Review update domains and fault domains
• Review availability zones
• Compare vertical and horizontal scaling
• Implement Azure Virtual Machine Scale Sets
• Create Virtual Machine Scale Sets
• Implement autoscale
• Configure autoscale
• Interactive lab simulation

Topic 25 Configure Azure App Service plans 

• Implement Azure App Service plans
• Determine Azure App Service plan pricing
• Scale up and scale out Azure App Service
• Configure Azure App Service autoscale

Topic 26 Configure Azure App Service 

• Implement Azure App Service
• Create an app with App Service
• Explore continuous integration and deployment
• Create deployment slots
• Add deployment slots
• Secure your App Service app
• Create custom domain names
• Back up and restore your App Service app
• Use Azure Application Insights

Topic 27 Configure Azure Container Instances 

• Compare containers to virtual machines
• Review Azure Container Instances
• Implement container groups
• Review the Docker platform

Topic 28 Manage virtual machines with the Azure CLI 

• What is the Azure CLI?
• Create a virtual machine
• Test your new virtual machine
• Explore other VM images
• Sizing VMs properly
• Query system and runtime information about the VM
• Start and stop your VM with the Azure CLI
• Install software on your VM

Topic 29 Create a Windows virtual machine in Azure 

• Create a Windows virtual machine in Azure
• Create a Windows virtual machine
• Use RDP to connect to Windows Azure virtual machines
• Connect to a Windows virtual machine using RDP
• Configure Azure virtual machine network settings

Topic 30 Host a web application with Azure App Service 

• Create a web app in the Azure portal
• Create a web app in the Azure portal
• Prepare the web application code
• Write code to implement a web application
• Deploy code to App Service
• Deploy your code to App Service

Topic 31 Configure virtual networks 

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses

Topic 32 Configure network security groups 

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups

Topic 33 Configure Azure DNS 

• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for Azure Private DNS zones
• Review Azure Private DNS zone scenarios

Topic 34 Configure Azure Virtual Network peering 

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining

Topic 35 Configure network routing and endpoints 

• Review system routes
• Identify user-defined routes
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses

Topic 36 Configure Azure Load Balancer 

• Determine Azure Load Balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create back-end pools
• Create health probes
• Create load balancer rules

Topic 37 Configure Azure Application Gateway 

• Implement Azure Application Gateway
• Determine Azure Application Gateway routing
• Configure Azure Application Gateway components

Topic 38 Design an IP addressing schema for your Azure deployment 

• Network IP addressing and integration
• Public and private IP addressing in Azure
• Plan IP addressing for your networks

Topic 39 Distribute your services across Azure virtual networks and integrate them by using virtual network peering 

• Connect services by using virtual network peering8 min
• Prepare virtual networks for peering by using Azure CLI commands
• Configure virtual network peering connections by using Azure CLI commands
• Verify virtual network peering by using SSH between Azure virtual machines

Topic 40 Host your domain on Azure DNS 

• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise - Create a DNS zone and an A record by using Azure DNS
• Dynamically resolve resource name by using alias record
• Exercise - Create alias records for Azure DNS

Topic 41 Manage and control traffic flow in your Azure deployment with routes 

• Identify routing capabilities of an Azure virtual network
• Create custom routes
• What is an NVA?
• Create an NVA and virtual machines
• Route traffic through the NVA

Topic 42 Improve application scalability and resiliency by using Azure Load Balancer 

• Azure Load Balancer features and capabilities
• Configure a public load balancer
• Configure a public load balancer
• Internal load balancer

LU5 Monitor and back up Azure resources

Topic 43 Configure file and folder backups 

• Describe Azure Backup benefits
• Implement Backup center for Azure Backup
• Configure Azure Recovery Services vault backup options
• Use the Microsoft Azure Recovery Services (MARS) agent
• Configure on-premises file and folder backups

Topic 44 Configure virtual machine backups 

• Explore options to protect virtual machine data
• Create virtual machine snapshots in Azure Backup
• Set up Azure Recovery Services vault backup options
• Back up your virtual machines
• Restore your virtual machines
• Implement System Center DPM and Azure Backup Server
• Compare the MARS agent and Azure Backup Server
• Implement soft delete for your virtual machines
• Implement Azure Site Recovery

Topic 45 Configure Azure Monitor 

• Describe Azure Monitor key capabilities
• Describe Azure Monitor components
• Define metrics and logs
• Identify monitoring data and tiers
• Describe activity log events
• Query the activity log

Topic 46 Configure Azure alerts 

• Describe Azure Monitor alerts
• Manage Azure Monitor alerts
• Create alert rules
• Create action groups

Topic 47 Configure Log Analytics 

• Determine Log Analytics uses
• Create a Log Analytics workspace
• Create Kusto (KQL) queries
• Structure Log Analytics queries

Topic 48 Configure Network Watcher 

• Describe Azure Network Watcher features
• Review IP flow verify diagnostics
• Review next hop diagnostics
• Visualize the network topology

Topic 49 Improve incident response with alerting on Azure 

• Explore the different alert types that Azure Monitor supports
• Use metric alerts for alerts about performance issues in your Azure environment
• Use metric alerts to alert on performance issues in your Azure environment
• Use log alerts to alert on events in your application
• Use activity log alerts to alert on events within your Azure infrastructure
• Use action groups and alert processing rules to send notifications when an alert is fired
• Use an activity log alert and an action group to notify users about events in your Azure infrastructure

Topic 49 Analyze your Azure infrastructure by using Azure Monitor logs 

• Features of Azure Monitor logs
• Create basic Azure Monitor log queries to extract information from log data
• Create basic Azure Monitor log queries to extract information from log data

Topic 50 Monitor performance of virtual machines by using Azure Monitor VM Insights

• What are Azure Monitor Logs and Azure Monitor VM Insights?
• Set up a Log Analytics workspace and Azure Monitor VM Insights
• Build log queries by using the Kusto Query Language
• Build log queries

Practice Exam

Prerequisite

This is a intermediate courser. Participants should have basic knowledge on the following subjects:

• C#
• ES6 or Typescript

Software Requirement

Please download and install the following software prior to the class

• Visual Studio Code https://code.visualstudio.com/download

Hardware Requirement

Participant need to bring their own laptop. If you need a spare laptop to use, please inform us in advance

• Azure Administrator
• Systems Administrator
• Network Administrator
• Cloud Solutions Architect
• IT Manager
• DevOps Engineer
• Security Engineer
• Infrastructure Engineer
• IT Consultant
• Technical Support Specialist
• Database Administrator
• Software Developer
• IT Project Manager
• Data Engineer
• Application Developer

Ajay B :  Ajay is a ACLP certied trainer. Ajay is a vendor neutral cloud consultant and training expert on Cloud , with several Private cloud deployments in India and cloud migration knowledge .He is a Cloud and DevOps enthusiast with consulting, deployment and training expertise on OpenStack, AWS, Google Cloud ,Azure, Jenkins, and Docker

Ajay has 18 + years Industry experience as IT entrepreneur and 9 years in Cloud and Devops technical consulting, implementation and training area, currently working in capacity of Vice President – Cloud and Devops services handling singapore and India

Anil Bidari: Anil is a ACLP certified trainer. He is an Enterprise Cloud and DevOps Consultant , responsible for  helping clients to move Virtual data centre to Private Cloud based on OpenStack and Public Cloud ( AWS, Azure and Google cloud) . Consulting and training experience on Devops tool chain like github , Jenkins, Sonarqube, Docker & kubernetes, Cloud foundry, Openshift, Ansible and SaltStack. Lot of my Role is involved design and implementation of a solution and training