Overview
This course teaches IT Professionals how to manage their Azure subscriptions, secure identities, administer the infrastructure, configure virtual networking, connect Azure and on-premises sites, manage network traffic, implement storage solutions, create and scale virtual machines, implement web apps and containers, back up and share data, and monitor your solution.
Prerequisites
Successful Azure Administrators start this role with experience in virtualization, networking, identity, and storage.
- Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
- Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory concepts, including users, groups, and role-based access control.
- Understanding of resilience and disaster recovery, including backup and restore operations
Who Should Attend?
This course is for Azure Administrators. The Azure Administrator implements, manages, and monitors identity, governance, storage, compute, and virtual networks in a cloud environment. The Azure Administrator will provision, size, monitor, and adjust resources as appropriate.
Course Outline
- Describe Azure Active Directory benefits and features
- Describe Azure Active Directory concepts
- Compare Active Directory Domain Services to Azure Active Directory
- Select Azure Active Directory editions
- Implement Azure Active Directory join
- Implement Azure Active Directory self-service password reset
- Create user accounts
- Manage user accounts
- Create bulk user accounts
- Create group accounts
- Create administrative units
- Interactive lab simulation
- Identify Azure regions
- Implement Azure subscriptions
- Obtain an Azure subscription
- Identify Azure subscription usage
- Implement Microsoft Cost Management
- Apply resource tagging
- Apply cost savings
- Create management groups
- Implement Azure policies
- Create Azure policies
- Create policy definitions
- Create an initiative definition
- Scope the initiative definition
- Determine compliance
- Interactive lab simulation
- Implement role-based access control
- Create a role definition
- Create a role assignment
- Compare Azure roles to Azure Active Directory roles
- Apply role-based access control
- Review fundamental Azure RBAC roles
- Interactive lab simulation
- Use the Azure portal
- Use Azure Cloud Shell
- Use Azure PowerShell
- Interactive lab simulation (Azure PowerShell)
- Use Azure CLI
- Interactive lab simulation (Azure CLI)
- Review Azure Resource Manager benefits
- Review Azure resource terminology
- Create resource groups
- Create Azure Resource Manager locks
- Reorganize Azure resources
- Remove resources and resource groups
- Determine resource limits
- Review Azure Resource Manager template advantages
- Explore the Azure Resource Manager template schema
- Explore the Azure Resource Manager template parameters
- Consider Bicep templates
- Interactive lab simulation – templates
- Plan virtual networks
- Create subnets
- Create virtual networks
- Plan IP addressing
- Create public IP addressing
- Associate public IP addresses
- Associate private IP addresses
- Interactive lab simulation
- Implement network security groups
- Determine network security group rules
- Determine network security group effective rules
- Create network security group rules
- Implement application security groups
- Interactive lab simulation
- Determine use cases for Azure Firewall
- Create an Azure Firewall implementation
- Create Azure Firewall rules
- Identify domains and custom domains
- Verify custom domain names
- Create Azure DNS zones
- Delegate DNS domains
- Add DNS record sets
- Plan for Azure Private DNS zones
- Review Azure Private DNS zone scenarios
- Determine Azure Virtual Network peering uses
- Determine gateway transit and connectivity
- Create virtual network peering
- Extend peering with user-defined routes and service chaining
- Determine Azure VPN Gateway uses
- Create site-to-site connections
- Create gateway subnet
- Create the VPN gateway
- Determine the VPN gateway type
- Determine gateway SKU and generation
- Create the local network gateway
- Configure the on-premises VPN device
- Create the VPN connection
- Determine high availability scenarios
- Determine Azure ExpressRoute uses
- Determine Azure ExpressRoute capabilities
- Coexist site-to-site and Azure ExpressRoute
- Compare intersite connection options
- Determine Azure Virtual WAN uses
- Review system routes
- Identify user-defined routes
- Determine service endpoint uses
- Determine service endpoint services
- Identify private link uses
- Interactive lab simulation
- Determine Azure load balancer uses
- Implement a public load balancer
- Implement an internal load balancer
- Determine load balancer SKUs
- Create backend pools
- Create load balancer rules
- Create health probes
- Implement Application Gateway
- Determine Application Gateway routing
- Application Gateway component set up
- Implement Azure Storage
- Explore Azure Storage services
- Determine storage account types
- Determine replication strategies
- Access storage
- Implement Azure Blob Storage
- Create blob containers
- Assign blob access tiers
- Add blob lifecycle management rules
- Determine blob object replication
- Upload blobs
- Determine Blob Storage pricing
- Interactive lab simulation
- Review Azure Storage security strategies
- Create shared access signatures
- Identify URI and SAS parameters
- Determine Azure Storage encryption
- Create customer-managed keys
- Apply Azure Storage security best practices
- Compare storage for file shares and blob data
- Manage Azure Files shares
- Create file share snapshots
- Implement Azure File Sync
- Identify Azure File Sync components
- Deploy Azure File Sync
- Use Azure Storage Explorer
- Use the Azure Import/Export service
- Use the WAImportExport service
- Use the WAImportExport tool
- Review cloud services responsibilities
- Plan virtual machines
- Determine virtual machine sizing
- Determine virtual machine storage
- Create virtual machines in the Azure portal
- Connect to virtual machines
- Interactive lab simulation
- Plan for maintenance and downtime
- Create availability sets
- Review update domains and fault domains
- Review availability zones
- Compare vertical and horizontal scaling
- Implement Azure Virtual Machine Scale Sets
- Create Virtual Machine Scale Sets
- Implement autoscale
- Configure autoscale
- Implement virtual machines extensions
- Implement Custom Script Extensions
- Implement Desired State Configuration
- Implement Azure App Service plans
- Determine Azure App Service plan pricing
- Scale up and scale out Azure App Service
- Configure Azure App Service autoscale
- Implement Azure App Service
- Create an app with App Service
- Explore continuous integration and deployment
- Create deployment slots
- Add deployment slots
- Secure your App Service app
- Create custom domain names
- Back up and restore your App Service app
- Use Azure Application Insights
- Interactive lab simulation
- Compare containers to virtual machines
- Review Azure Container Instances
- Implement container groups
- Review the Docker platform
- Explore Azure Kubernetes Service terminology
- Explore the AKS cluster and node architecture
- Configure Azure Kubernetes Service networking
- Configure Azure Kubernetes Service storage
- Configure Azure Kubernetes Service scaling
- Configure AKS burst scaling to Azure Container Instances
- Interactive lab simulation
- Describe Azure backup benefits
- Implement Azure backup center
- Setup recovery service vault backup options
- Configure on-premises file and folder backups
- Manage the Azure recovery services agent
- Interactive lab simulation
- Protect virtual machine data
- Create virtual machine snapshots
- Setup recovery services vault backup options
- Backup virtual machines
- Restore virtual machines
- Implement Azure Backup Server
- Compare backup options
- Manage soft delete
- Implement Azure Site Recovery
- Interactive lab simulation
- Describe Azure Monitor key capabilities
- Describe Azure Monitor components
- Define metrics and logs
- Identify data types
- Describe activity log
- Interactive lab simulation
- Manage Azure Monitor alerts
- Create alert rules
- Create action groups
- Determine Log Analytics uses
- Create a workspace
- Visualize Log Analytics data
- Structure Log Analytics queries
- Describe Network Watcher features
- Review flow verify diagnostics
- Review next hop diagnostics
- Visualize the network topology
