Microsoft Azure Architect Technologies/Architect Design

Instructor-Led

• Hands-on instruction by a certified instructor
• Includes all course materials
• Practice Exam
• Certification Exam

Can't travel or you want to stay with your family or business. No problem!

Stay in your own city and save the additional expenses of roundtrip airfare, lodging, transportation, and meals and receive the same great instruction live from our instructors in our Live Instructor-Led Remote Classroom Training.

Remote Classroom Training

Our Remote Classroom Training is a live class with students observing the instructor and listening through your computer speakers.

You will see the instructor's computer, slides, notes, etc., just like in the classroom. You will be following along, doing work, labs, and individual assignments.

Candidates for the Azure Solutions Architect Expert certification should have subject matter expertise in designing and implementing solutions that run on Microsoft Azure, including aspects like compute, network, storage, and security.

• Exam AZ-303: Microsoft Azure Architect Technologies
• Exam AZ-304: Microsoft Azure Architect Design

Skills measured

• Implement and monitor an Azure infrastructure
• Implement management and security solutions
• Implement solutions for apps
• Implement and manage data platforms
• Design monitoring
• Design identity and security
• Design data storage
• Design business continuity
• Design infrastructure

Prerequisites

Exam AZ-303: Microsoft Azure Architect Technologies

This course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. Lessons include virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course outlines how decisions in each theses area affects an overall solution.

Audience profile

This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Azure Solution Architects use the Azure Portal and as they become more adept they use the Command Line Interface. Candidates must have expert-level skills in Azure administration and have experience with Azure development processes and DevOps processes.

Skills gained

• Secure identities with Azure Active Directory and users and groups.
• Implement identity solutions spanning on-premises and cloud-based capabilities
• Apply monitoring solutions for collecting, combining, and analyzing data from different sources.
• Manage subscriptions, accounts, Azure policies, and Role-Based Access Control.
• Administer Azure using the Resource Manager, Azure portal, Cloud Shell, and CLI.
• Configure intersite connectivity solutions like VNet Peering, and virtual network gateways.
• Administer Azure App Service, Azure Container Instances, and Kubernetes.

Prerequisites

Successful Azure Architect students have prior experience with operating systems, virtualization, cloud infrastructure, storage structures, and networking:

• Understanding of on-premises virtualization technologies, including VMs and virtual networking
• Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies
• Understanding of Active Directory concepts, including domains, forests, and domain controllers

Course outline

Module 1: Implement Azure Active Directory

In this module, you will learn how to secure identities with Azure Active Directory, and implement users and groups. This module includes:

• Overview of Azure Active Directory
• Users and Groups
• Domains and Custom Domains
• Azure AD Identity Protection
• Implement Conditional Access
• Configure Fraud Alerts for MFA
• Implement Bypass Options
• Configure Guest Users in Azure AD
• Configure Trusted IPs
• Manage Multiple Directories

After completing this module, students will be able to:

• Understand how Multiple AAD organizations interact
• Add Guest Users to Azure AD
• Configure Location Condition Configuration
• Configure Azure MFA settings
• Implement Conditional Access Azure MFA
• Create a Blueprint

Module 2: Implement and Manage Hybrid Identities

In this module, you will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health. This module includes:

• Install and Configure Azure AD Connect
• Configure Password Sync and Password Writeback
• Configure Azure AD Connect Health

After completing this module, students will be able to:

• Implement Azure AD seamless Single Sign-On
• Perform an Azure AD Connect installation
• Implement Azure AD Connect Health

Module 3: Implement Virtual Networking

In this module, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS. This module includes:

• Virtual Network Peering
• Implement VNet Peering

After completing this module, students will be able to:

• Connect services with Virtual Network Peering
• Configure VNet Peering
• Understand Service Chaining
• Modify or delete VNet Peering

Module 4: Implement VMs for Windows and Linux

In this module, you will learn about Azure virtual machines including planning, creating, availability and extensions.

• Select Virtual Machine Size
• Configure High Availability
• Implement Azure Dedicated Hosts
• Deploy and Configure Scale Sets
• Configure Azure Disk Encryption

After completing this module, students will be able to:

• Plan for virtual machine implementations
• Create virtual machines
• Configure virtual machine availability, including scale sets
• Understand High Availability options for VMs in Azure

Module 5: Implement Load Balancing and Network Security

In this module, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

• Implement Azure Load Balancer
• Implement an Application Gateway
• Understand Web Application Firewall
• Implement Azure Firewall
• Implement Azure Front Door
• Implementing Azure Traffic Manager
• Implement Network Security Groups and Application Security Groups
• Implement Azure Bastion

After completing this module, students will be able to:

• Select a Load Balancer solution
• Configure Application Gateway
• Implement Azure Firewall
• Create an Azure Front Door
• Understand Traffic Manager routing methods
• Configure Network Security Groups (NSGs)

Module 6: Implement Storage Accounts

In this module, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

• Storage Accounts
• Blob Storage
• Storage Security
• Managing Storage
• Accessing Blobs and Queues using AAD

After completing this module, students will be able to:

• Understand Storage Account services and types
• Configure Blob storage, accounts, containers, and access tiers
• Implement Shared Access Signatures (SAS)
• Understand Azure Storage firewalls and virtual networks

Module 7: Implement NoSQL Databases

In this module, you will learn about Azure Table Storage and recommend options for CosmsoDB APIs.

• Configure Storage Account Tables
• Select Appropriate CosmosDB APIs

After completing this module, students will be able to:

• Outline the Table Service Data Model
• Understand options for Azure Cosmos DB
• Understand high availability using CosmosDB

Module 8: Implement Azure SQL Databases

In this module, you will create an Azure SQL Database single database, create an Azure SQL Database Managed Instance, and review high-availability and Azure SQL database.

• Configure Azure SQL Database Settings
• Implement Azure SQL Database Managed Instances
• High-Availability and Azure SQL Database
• In this module, you will learn how to
• Create an Azure SQL Database (single database)
• Create an Azure SQL Database Managed Instance
• Recommend high-availability architectural models used in Azure SQL Database

Module 9: Automate Deployment and Configuration of Resources

In this module, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates.

• Azure Resource Manager Templates
• Save a Template for a VM
• Evaluate Location of New Resources
• Configure a Virtual Hard Disk Template
• Deploy from a template
• Create and Execute an Automation Runbook

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources
• Use ARM Templates to deploy resources
• Create and Execute an Automation Runbook
• Deploy an Azure VM from a VHD
• Understand Azure encryption technologies

Module 10: Implement and Manage Azure Governance

In this module, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

• Create Management Groups, Subscriptions, and Resource Groups
• Overview of Role-Based Access Control (RBAC)
• Role-Based Access Control (RBAC) Roles
• Azure AD Access Reviews
• Implement and Configure an Azure Policy
• Azure Blueprints

After completing this module, students will be able to:

• Understand Resource Group Organization
• Understand how RBAC works
• Create an Azure AD access review
• Create and manage policies to enforce compliance

Module 11: Manage Security for Applications

In this module, you will learn about Azure Key Vault and implementing authentication using Azure Managed Identities.

• Azure Key Vault
• Azure Managed Identity

After completing this module, students will be able to:

• Explain Key Vault uses such as secrets, key, and Certificate management
• Use Managed Identities with Azure resources

Module 12: Manage Workloads in Azure

In this module, you will learn how to migrate workloads using Azure Migrate, perform VMware agent-based and agent-less migrations, and perform Azure Backup and Azure Site Recovery.

• Migrate Workloads using Azure Migrate
• VMware - Agentless Migration
• VMware - Agent-Based Migration
• Implement Azure Backup
• Azure to Azure Site Recovery
• Implement Azure Update Management

After completing this module, students will be able to:

• Understand agent-based migration architecture
• Prepare for Azure for migration
• Prepare an on-premises VMware environment
• Understand Azure VM backup architecture
• Manage updates and patches for Azure VMs

Module 13: Implement Container-Based Applications

In this module, you will learn how to run Azure Container instances and how to deploy Kubernetes with AKS.

• Azure Container Instances
• Configure Azure Kubernetes Service

After completing this module, students will be able to:

• Run Azure Container instances
• Deploy Kubernetes with AKS

Module 14: Implement an Application Infrastructure

In this module, you will learn how to create an App Service web App for Containers, create and configure an App Service Plan, and create and manage Deployment Slots.

• Create and Configure Azure App Service
• Create an App Service Web App for Containers
• Create and Configure an App Service Plan
• Configure Networking for an App Service
• Create and Manage Deployment Slots
• Implement Logic Apps
• Implement Azure Functions

After completing this module, students will be able to:

• Configure an Azure App Service
• Create an App Service Plan
• Create a Workflow using Azure Logic Apps
• Create a Function App

Module 15: Implement Cloud Infrastructure Monitoring

In this module, you will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, Azure Application Insights.

• Azure Infrastructure Security Monitoring
• Azure Monitor
• Azure Workbooks
• Azure Alerts
• Log Analytics
• Network Watcher
• Azure Service Health
• Monitor Azure Costs
• Azure Application Insights
• Unified Monitoring in Azure

In this module, you will learn how to:

• Understand Azure Log Analytics
• Understand Azure Service Health

[ back to top ]

Exam AZ-304: Microsoft Azure Architect Design

This course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. include design considerations related to logging, cost analysis, authentication and authorization, governance, security, storage, high availability, and migration. This role requires decisions in multiple areas that affect an overall design solution.

Audience profile

This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Azure Solution Architects use the Azure Portal and as they become more adept they use the Command Line Interface. Candidates must have expert-level skills in Azure administration and have experience with Azure development processes and DevOps processes.

Skills gained

• Recommend solutions to minimize costs
• Recommend a solution for Conditional Access, including multi-factor authentication
• Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD Connect
• Recommend a solution for using Azure Policy
• Recommend a solution that includes KeyVault
• Recommend a solution that includes Azure AD Managed Identities
• Recommend a storage access solution
• Design an Azure Site Recovery solution
• Recommend a solution for autoscaling
• Recommend a solution for containers
• Recommend a solution for network security
• Recommend a solution for migrating applications and VMs
• Recommend a solution for migration of databases

Prerequisites

Successful Azure Architects begin this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, networking, applications and databases.

• Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
• Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
• Understanding of resilience and disaster recovery, including backup and restore operations.
• Understanding of Applications development and APIs.
• Understanding of Databases, both SQL such as MS SQL, MySQL or Postgres, and Non-SQL databases like MongoDB.
• Understanding of decoupling Applications and services, for example, Queues, tables, Cache.
• Understanding of Security concepts to protect your environment, like encryption at rest, encryption in transit, SSL, TLS.

Course outline

Module 1: Design a Compute Solution

In this module, you will learn about the appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.

• Recommend a Solution for Compute Provisioning
• Determine Appropriate Compute Technologies
• Recommend a Solution for Containers
• Recommend a Solution for Automating Compute Management

After completing this module, students will be able to:

• Refer solution for automating compute management
• Recommend the appropriate compute technologies, including virtual machines, and App Services
• Recommend the approrioate AKS and ACI and the configurations

Module 2: Design a Network Solution

In this module, you will learn about solutions for network addressing and name resolution, network provisioning, and network security.

• Recommend a Solution for Network Addressing and Name Resolution
• Recommend a Solution for Network Provisioning
• Recommend a Solution for Network Security
• Recommend a Solution for iInternete Connectivity and On-Premises Networks
• Recommend a Solution for Automating Network Management
• Recommend a Solution for Load Balancing and Rraffic Routing

After completing this module, students will be able to:

• Solutions for network addressing and name resolution
• Solutions for network security including private endpoints, firewalls, and gateways
• Recommendations for network connectivity to the Internet, on-premises networks, and other VNets
• Recommendations for load balancing and traffic routing

Module 3: Design for Migration

In this module, you will learn about recommend a solution for migrating applications and VMs and a solution for migration of databases.

• Assess and On-Premises Servers and Applications for Migration
• Recommend a Solution for Migrating Applications and VMs
• Recommend a Solution for Migration of Databases

After completing this module, students will be able to:

• Assess on-premises servers and applications for migration
• Suggest solutions for migrating applications and VMs
• Determine migration scope, including redundant, related, trivial, and outdated data

Module 4: Design Authentication and Authorization

In this module, you will learn how to provide Identities to services and understand the hierarchy of Management Groups and Subscriptions.

• Tips for Identity and Access Management
• Recommend a Solution for Multi-Factor Authentication
• Five Steps for Securing Identity Infrastructure
• Recommend a Solution for Single-Sign On (SSO)
• Recommend a Solution for a Hybrid Identity
• Recommend a Solution for B2B Integration
• Recommend a Hierarchical Structure for Management Groups

After completing this module, students will be able to:

• Recommend hierarchy of Management Groups and Subscriptions.
• Configure custom RBAC Role definitions and assignments
• Plan for a MFA Deployment
• Recommend a Solution for Single-Sign On (SSO)
• Recommend a Solution for a Hybrid Identity

Module 5: Design Governance

In this module, you will learn apply an Azure Policy, Identify non-compliant resources, and manage tag governance with Azure Policy.

• Recommend a Solution for using Azure Policy
• Recommend a Solution for using Azure Blueprint

After completing this module, students will be able to:

• Organize Policies with Initiatives
• Manage Tag Governance with Azure Policy
• Provide guidance on Azure Blueprints

Module 6: Design a Solution for Databases

In this module, you will be able to recommend the appropriate data store and recommend Azure SQL Database and Azure SQL Managed Instance Service tiers.

• Select an Appropriate Data Platform Based on Requirements
• Overview of Azure Data Storage
• Recommend Database Service Tier Sizing
• Dynamically Scale Azure SQL Database and Azure SQL Managed Instances
• Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use

After completing this module, students will be able to:

• Recommend Database Service Tier Sizing
• Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use
• Understand Azure Data Lake Store and Azure Blob Storage containers

Module 7: Select an Appropriate Storage Account

In this module, you will learn about recommend a design a strategy for using tiered storage and manage tiered Storage using Azure tools.

• Understanding Storage Tiers
• Recommend a Storage Access Solution
• Recommend Storage Management Tools

After completing this module, students will be able to:

• Recommend tools for working with Azure Storage
• Design for Azure Blob Storage access tiers

Module 8: Design Data Integration

In this module, you will learn about data flows using Azure Data Factory and Azure Synapse Analytics architecture.

• Recommend a Data Flow
• Recommend a Solution for Data Integration

After completing this module, students will be able to:

• Implement Azure Synapse Analytics
• Describe how data flows using Azure Data Factory
• Demonstrate hjow to use Azure Data Factory to load data into SQL Data Warehouse

Module 9: Design a Solution for Logging and Monitoring

In this module, you will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. You will be able to monitor Azure Resources with Azure Monitor and collect and analyze resource Logs for Azure.using Azure tools.

• Azure Monitoring Services
• Azure Monitor

After completing this module, students will be able to:

• Monitor Azure resources with Azure Monitor
• Collect and analyze Resource Logs for Azure resources
• Understand how Azure Sentinel collects data on the devices, users, infrastructure, and applications

Module 10: Design a Solution for Backup and Recovery

In this module, you will learn about solutions for site recovery capacity and site failover and failback. You will be able to recommend solutions for recovery in different regions.

• Recommend a Recovery Solution for Hybrid and On-Premises Workloads
• Design and Azure Site Recovery Solution
• Recommend a Solution for Recovery in Different Regions
• Recommend a Solution for Azure Backup Management
• Design a Solution for Data Archiving and Retention

After completing this module, students will be able to:

• Recommend solutions for Azure hybrid and on-premises workloads that meets recovery objectives
• Recommend a solution for site recovery capacity
• Recommend storage types and methodology for data archiving
• Identify requirements for data archiving

Module 11: Design for High Availability

In this module, you will learn about solutions for application and workload redundancy, including compute, database, and storage.

• Recommend a Solution for Application and Workload Redundancy
• Recommend a Solution for Autoscaling
• Identify Resources that Require High Availability
• Identify Storage Tpes for High Availability
• Recommend a Solution for Geo-Redundancy of Workloads

After completing this module, students will be able to:

• Recommend a solutions for autoscaling
• Identify storage types for high availability
• Recommend a solutions for geo-redundancy of workloads

Module 12: Design for Cost Optimization

In this module, you will learn how to optimize costs from recommendations, breakdown costs by Azure Service, and download and review usage details. 01-View

• Recommend Solutions for Cost Management
• Recommended Viewpoints for Minimizing Costs

After completing this module, students will be able to:

• Optimize with Azure Cost Management
• Design with Cost in mind
• Optimize Costs from recommendations

Module 13: Design an Application Architecture

In this module, you will learn about solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions. You will also learn about microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

• Recommend a Microservices Architecture
• Recommend an Orchestration Solution for Deployment of Applications
• Recommend a Solution for API Integration

After completing this module, students will understand :

• Recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions
• Recommend a solution for monitoring automation
• Recommend a hosting structure for API management

Module 14: Design Security for Applications

In this module, you will learn about solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions. You will also learn about microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

• Security for Applications and Services
• Recommend a Solution using Key Vault
• Recommend Solutions using Azure AD Managed Identities

After completing this module, students will be able to:

• Understand Key Vault authentication and authorization
• Understan Azure Key Vault availability and redundancy
• Understand how Blueprints differ from Resource Manager Templates and Azure Policy

[ back to top ]

CED Solutions is your best choice for MCE Azure Solutions Architect Expert, MCE Azure Solutions Architect Expert training, MCE Azure Solutions Architect Expert certification, MCE Azure Solutions Architect Expert boot camp, MCE Azure Solutions Architect Expert certification training, MCE Azure Solutions Architect Expert certification course, MCE Azure Solutions Architect Expert course, MCE Azure Solutions Architect Expert class.