Course Outline
Module 1: Designing a Compute Solution
In this module, you will explore appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.
Lessons
- Recommend a solution for compute provisioning
- Determine the most suitable compute technologies
- Recommend a solution for containers
- Advise on automating compute management
Lab : Implementing Containers on Azure
- Implement containers running within Azure VMs
- Deploy containers to Azure Container Instances
- Deploy containers to Azure Kubernetes Service (AKS) clusters
After completing this module, students will be able to:
- Propose solutions for automating compute management
- Recommend suitable compute technologies, including virtual machines and App Services
- Advise on appropriate AKS and ACI configurations
Module 2: Designing a Network Solution
In this module, you will learn about solutions for network addressing and name resolution, network provisioning, and network security.
Lessons
- Recommend a solution for network addressing and name resolution
- Advise on network provisioning
- Recommend a solution for network security
- Suggest solutions for internet connectivity and on-premises network integration
- Recommend a solution for automating network management
- Advise on load balancing and traffic routing
After completing this module, students will be able to:
- Identify solutions for network addressing and name resolution
- Propose network security solutions, including private endpoints, firewalls, and gateways
- Provide recommendations for internet connectivity, on-premises networks, and other VNets
- Suggest strategies for load balancing and traffic routing
Module 3: Designing for Migration
In this module, you will learn how to recommend solutions for migrating applications and VMs, as well as strategies for database migration.
Lessons
- Assess on-premises servers and applications for migration
- Recommend a solution for migrating applications and VMs
- Advise on database migration strategies
After completing this module, students will be able to:
- Evaluate on-premises servers and applications for migration suitability
- Suggest solutions for migrating applications and VMs
- Determine the migration scope, including redundant, related, trivial, and outdated data
Module 4: Designing Authentication and Authorization
In this module, you will learn how to provide identities to services and understand the hierarchy of Management Groups and Subscriptions.
Lessons
- Tips for Identity and Access Management
- Recommend a solution for multi-factor authentication
- Five steps for securing identity infrastructure
- Advise on Single Sign-On (SSO) solutions
- Recommend a solution for hybrid identity
- Suggest strategies for B2B integration
- Recommend a hierarchical structure for Management Groups
Lab : Managing Azure AD Authentication and Authorization
- Deploy an Azure VM hosting an AD DS domain controller
- Create and configure an Azure AD tenant
- Integrate an AD DS forest with an Azure AD tenant
After completing this module, students will be able to:
- Recommend a hierarchy for Management Groups and Subscriptions
- Configure custom RBAC role definitions and assignments
- Plan for MFA deployment
- Advise on Single Sign-On (SSO) solutions
- Recommend a solution for hybrid identity
Module 5: Designing Governance
In this module, you will learn to apply Azure Policy, identify non-compliant resources, and manage tag governance using Azure Policy.
Lessons
- Recommend a solution for using Azure Policy
- Advise on using Azure Blueprints
After completing this module, students will be able to:
- Organize policies with initiatives
- Manage tag governance with Azure Policy
- Provide guidance on Azure Blueprints
Module 6: Designing a Solution for Databases
In this module, you will be able to recommend the appropriate data store and advise on Azure SQL Database and Azure SQL Managed Instance service tiers.
Lessons
- Select an appropriate data platform based on requirements
- Overview of Azure Data Storage
- Recommend database service tier sizing
- Dynamically scale Azure SQL Database and Azure SQL Managed Instances
- Advise on encrypting data at rest, in transit, and in use
After completing this module, students will be able to:
- Recommend database service tier sizing
- Advise on encrypting data at rest, in transit, and in use
- Understand Azure Data Lake Store and Azure Blob Storage containers
Module 7: Selecting an Appropriate Storage Account
In this module, you will learn how to design a strategy for using tiered storage and manage tiered storage using Azure tools.
Lessons
- Understanding storage tiers
- Recommend a storage access solution
- Advise on storage management tools
After completing this module, students will be able to:
- Recommend tools for working with Azure Storage
- Design for Azure Blob Storage access tiers
Module 8: Designing Data Integration
In this module, you will learn about data flows using Azure Data Factory and Azure Synapse Analytics architecture.
Lessons
- Recommend a data flow strategy
- Advise on a solution for data integration
After completing this module, students will be able to:
- Implement Azure Synapse Analytics
- Describe how data flows using Azure Data Factory
- Demonstrate how to use Azure Data Factory to load data into SQL Data Warehouse
Module 9: Designing a Solution for Logging and Monitoring
In this module, you will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. You will be able to monitor Azure resources with Azure Monitor and collect and analyze resource logs using Azure tools.
Lessons
- Azure monitoring services
- Azure Monitor
After completing this module, students will be able to:
- Monitor Azure resources with Azure Monitor
- Collect and analyze resource logs for Azure resources
- Understand how Azure Sentinel collects data on devices, users, infrastructure, and applications
Module 10: Designing a Solution for Backup and Recovery
In this module, you will learn about solutions for site recovery capacity and site failover and failback. You will be able to recommend solutions for recovery in different regions.
Lessons
- Recommend a recovery solution for hybrid and on-premises workloads
- Design an Azure Site Recovery solution
- Advise on recovery in different regions
- Recommend a solution for Azure Backup management
- Design a solution for data archiving and retention
After completing this module, students will be able to:
- Recommend solutions for Azure hybrid and on-premises workloads that meet recovery objectives
- Advise on site recovery capacity
- Suggest storage types and methodologies for data archiving
- Identify requirements for data archiving
Module 11: Designing for High Availability
In this module, you will learn about solutions for application and workload redundancy, including compute, database, and storage.
Lessons
- Recommend a solution for application and workload redundancy
- Advise on autoscaling solutions
- Identify resources that require high availability
- Identify storage types for high availability
- Recommend a solution for geo-redundancy of workloads
After completing this module, students will be able to:
- Recommend solutions for autoscaling
- Identify storage types for high availability
- Advise on solutions for geo-redundancy of workloads
Module 12: Designing for Cost Optimization
In this module, you will learn how to optimize costs through recommendations, break down costs by Azure service, and download and review usage details.
Lessons
- Recommend solutions for cost management
- Key viewpoints for minimizing costs
After completing this module, students will be able to:
- Optimize costs using Azure Cost Management
- Design with cost considerations in mind
- Optimize costs based on recommendations
Module 13: Designing an Application Architecture
In this module, you will learn about solution patterns for application deployment, including ARM templates, Logic Apps, or Azure Functions. You will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Recommend a microservices architecture
- Advise on an orchestration solution for application deployment
- Suggest a solution for API integration
Lab : Implementing Azure Logic Apps Integration with Azure Event Grid
- Integrate Azure Logic Apps with Event Grid
- Trigger the execution of Logic Apps in response to an event representing a change to a resource within a
After completing this module, students will understand:
- How to recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions
- How to advise on monitoring automation solutions
- How to recommend a hosting structure for API management
Module 14: Designing Security for Applications
In this module, you will learn about solution patterns for application deployment, including ARM templates, Logic Apps, or Azure Functions. You will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Security for applications and services
- Recommend a solution using Key Vault
- Advise on solutions using Azure AD Managed Identities
After completing this module, students will be able to:
- Understand Key Vault authentication and authorization
- Comprehend Azure Key Vault availability and redundancy
- Understand how Blueprints differ from Resource Manager Templates and Azure Policy
Requirements
Successful Azure Architects typically enter this role with foundational experience in operating systems, virtualization, cloud infrastructure, storage structures, networking, applications, and databases.
- Familiarity with on-premises virtualization technologies, such as VMs, virtual networking, and virtual hard disks.
- Knowledge of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of Active Directory principles, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Grasp of resilience and disaster recovery concepts, including backup and restore procedures.
- Understanding of application development and APIs.
- Knowledge of databases, including SQL variants like MS SQL, MySQL, or PostgreSQL, as well as NoSQL databases like MongoDB.
- Familiarity with decoupling applications and services using queues, tables, and caches.
- Understanding of security principles to protect environments, such as encryption at rest, encryption in transit, SSL, and TLS.
Testimonials (2)
Examples and their usage
Dariusz Frycz - WASKO SPOLKA AKCYJNA
Course - AZ-040T00: Automating Administration with PowerShell
Everything, is a new platform for me and everything was interesting.
