Overview
This course teaches Azure Solution Architects how to design infrastructure solutions. Course topics cover governance, compute, application architecture, storage, data integration, authentication, networks, business continuity, and migrations. The course combines lecture with case studies to demonstrate basic architect design principles.
Audience Profile
Successful students have experience and knowledge in IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. Students also have experience designing and architecting solutions. Before attending this course, students must have previous experience deploying or administering Azure resources and strong conceptual knowledge of:, Azure compute technologies such as VMs, containers and serverless solutions, Azure virtual networking to include load balancers and Azure Storage technologies (unstructured and databases), General application design concepts such as messaging and high availability.
Syllabus
This module explains the basic infrastructure components of Microsoft Azure. You'll learn about the physical infrastructure, how resources are managed, and have a chance to create an Azure resource.
Learning Objectives
- Describe Azure regions, region pairs, and sovereign regions
- Describe Availability Zones
- Describe Azure datacenters
- Describe Azure resources and Resource Groups
- Describe subscriptions
- Describe management groups
- Describe the hierarchy of resource groups, subscriptions, and management groups
This module focuses on some of the computer services and networking services available within Azure.
Learning Objectives
- Compare compute types, including container instances, virtual machines, and functions
- Describe virtual machine (VM) options, including VMs, Virtual Machine Scale Sets, availability sets, Azure Virtual Desktop
- Describe resources required for virtual machines
- Describe application hosting options, including Azure Web Apps, containers, and virtual machines
- Describe virtual networking, including the purpose of Azure Virtual Networks, Azure virtual subnets, peering, Azure DNS, VPN Gateway, and ExpressRoute
- Define public and private endpoints
This module introduces you to storage in Azure, including things such as different types of storage and how a distributed infrastructure can make your data more resilient.
Learning Objectives
- Compare Azure storage services
- Describe storage tiers
- Describe redundancy options
- Describe storage account options and storage types
- Identify options for moving files, including AzCopy, Azure Storage Explorer, and Azure File Sync
- Describe migration options, including Azure Migrate and Azure Data Box
This module covers some of the authorization and authentication methods available with Azure.
Learning Objectives
- Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services
- Describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication (MFA), and passwordless
- Describe external identities and guest access in Azure
- Describe Microsoft Entra Conditional Access
- Describe Azure Role Based Access Control (RBAC)
- Describe the concept of Zero Trust
- Describe the purpose of the defense in depth model
- Describe the purpose of Microsoft Defender for Cloud
This module covers the basics of how to use the Cloud Adoption Framework, which is a set of documentation, implementation guidance, best practices, and tools that help you align your strategy for business, people, and technology.
Learning Objectives
- Learn how to use the Cloud Adoption Framework to assess your current environment and develop a plan to adopt the cloud
- Determine your motivations for cloud adoption, and define objectives to help you successfully reach your goals
- Identify gaps in your strategy that you need to address, such as adding technology, training your team, or restructuring your environment
You want to build great things on Azure, but you're not sure exactly what that means. Using key principles throughout your architecture, regardless of technology choice, can help you design, build, and continuously improve your architecture.
Learning Objectives
- Describe the pillars of the Azure Well-Architected Framework
- Identify key principles for creating a solid architectural foundation
Azure Architects design and recommend governance solutions.
Learning Objectives
- Design for governance.
- Design for management groups.
- Design for Azure subscriptions.
- Design for resource groups.
- Design for resource tagging.
- Design for Azure Policy.
- Design for Azure role-based access control.
- Design for Azure landing zones.
Azure Architects design and recommend authentication and authorization solutions.
Learning Objectives
- Design for identity and access management.
- Design for Microsoft Entra ID.
- Design for Microsoft Entra business-to-business (B2B).
- Design for Azure Active Directory B2C (business-to-customer).
- Design for conditional access.
- Design for identity protection.
- Design for access reviews.
- Design for managed identities.
- Design for service principals for applications.
- Design for Azure Key Vault.
Azure Architects design and recommend logging and monitoring solutions.
Learning Objectives
- Design for Azure Monitor data sources
- Design for Azure Monitor Logs (Log Analytics) workspaces
- Design for Azure Workbooks and Azure insights
- Design for Azure Data Explorer
Plan an appropriate high availability and disaster recovery strategy based on recovery time objective and recovery point objective. Choose the best solution for IaaS or PaaS deployments or hybrid workloads.
Learning Objectives
- Define recovery time objective and recovery point objective
- Explore the available high availability and disaster recovery options for both IaaS and PaaS
- Devise an appropriate high availability and disaster recovery strategy
Learn how to select appropriate backup solutions and disaster recovery solutions for Azure workloads.
Learning Objectives
- Design for backup and recovery.
- Design for Azure Backup.
- Design for Azure blob backup and recovery.
- Design for Azure Files backup and recovery.
- Design for Azure virtual machine backup and recovery.
- Design for Azure SQL backup and recovery.
- Design for Azure Site Recovery.
Azure Architect's design and recommend nonrelational data storage solutions.
Learning Objectives
- Design for data storage.
- Design for Azure storage accounts.
- Design for Azure blob storage.
- Design for data redundancy.
- Design for Azure files.
- Design an Azure disk solution.
- Design for storage security.
Azure Architect's design and recommend relational data storage solutions.
Learning Objectives
- Design for Azure SQL Database.
- Design for Azure SQL Managed Instance.
- Design for SQL Server on Azure Virtual Machines.
- Recommend a solution for database scalability.
- Recommend a solution for database availability.
- Design protection for data at rest, data in transmission, and data in use.
- Design for Azure SQL Edge.
- Design for Azure Cosmos DB.
- Design for Azure Table Storage.
Azure Architects design and recommend data integration solutions.
Learning Objectives
- Design a data integration solution with Azure Data Factory.
- Design a data integration solution with Azure Data Lake.
- Design a data integration and analytics solution with Azure Databricks.
- Design a data integration and analytics solution with Azure Synapse Analytics.
- Design strategies for hot, warm, and cold data paths.
- Design an Azure Stream Analytics solution for data analysis.
Azure Architects design and recommend Azure compute solutions.
Learning Objectives
- Choose an Azure compute service.
- Design for Azure Virtual Machines solutions.
- Design for Azure Batch solutions.
- Design for Azure App Service solutions.
- Design for Azure Container Instances solutions.
- Design for Azure Kubernetes Service solutions.
- Design for Azure Functions solutions.
- Design for Azure Logic Apps solutions.
Azure Architects are responsible to design and recommend application architectures.
Learning Objectives
- Describe message and event scenarios.
- Design a messaging solution.
- Design an Azure Event Hubs messaging solution.
- Design an event-driven solution.
- Design an automated app deployment solution.
- Design API integration.
- Design an application configuration management solution.
- Design a caching solution.
Azure Architects need to design and recommend network solutions.
Learning Objectives
- Recommend a network architecture solution based on workload requirements
- Design for on-premises connectivity to Azure Virtual Network
- Design for Azure network connectivity services
- Design for application delivery services
- Design for application protection services
Azure Architect's design and recommend migration solutions.
Learning Objectives
- Evaluate migration with the Microsoft Cloud Adoption Framework for Azure
- Describe the Azure Migration and Modernization Program (Azure Migration Framework)
- Assess your on-premises workloads
- Select a migration tool
- Migrate your databases
- Select an online storage migration tool
- Migrate offline data