Course Outline
Module 1: Design a Compute Solution
In this module, you will explore appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.
Lessons
- Recommend a solution for compute provisioning
- Identify suitable compute technologies
- Recommend a solution for containers
- Advise on automating compute management
Lab: Implementing Containers on Azure
- Implement containers running in Azure VMs
- Deploy containers to Azure Container Instances
- Deploy containers to Azure Kubernetes Service (AKS) clusters
Upon completion of this module, students will be able to:
- Propose solutions for automating compute management
- Recommend suitable compute technologies, including virtual machines and App Services
- Suggest appropriate AKS and ACI configurations
Module 2: Design a Network Solution
This module covers solutions for network addressing, name resolution, provisioning, and security.
Lessons
- Recommend a solution for network addressing and name resolution
- Advise on network provisioning
- Suggest network security solutions
- Recommend solutions for internet connectivity and on-premises networks
- Propose solutions for automating network management
- Recommend load balancing and traffic routing solutions
Upon completion of this module, students will be able to:
- Identify solutions for network addressing and name resolution
- Understand network security solutions, including private endpoints, firewalls, and gateways
- Advise on network connectivity to the internet, on-premises networks, and other VNets
- Recommend load balancing and traffic routing strategies
Module 3: Design for Migration
Participants will learn to recommend solutions for migrating applications and VMs, as well as for migrating databases.
Lessons
- Assess on-premises servers and applications for migration
- Recommend a solution for migrating applications and VMs
- Suggest solutions for database migration
Upon completion of this module, students will be able to:
- Assess on-premises servers and applications for migration readiness
- Propose solutions for migrating applications and VMs
- Determine migration scope, including redundant, related, trivial, and outdated data
Module 4: Design Authentication and Authorization
This module focuses on providing identities to services and understanding the hierarchy of Management Groups and Subscriptions.
Lessons
- Best practices for Identity and Access Management
- Recommend a solution for Multi-Factor Authentication
- Five steps to secure identity infrastructure
- Advise on Single-Sign On (SSO) solutions
- Recommend a hybrid identity solution
- Suggest solutions for B2B integration
- Design a hierarchical structure for Management Groups
Lab: Managing Azure AD Authentication and Authorization
- Deploy an Azure VM hosting an AD DS domain controller
- Create and configure an Azure AD tenant
- Integrate an AD DS forest with an Azure AD tenant
Upon completion of this module, students will be able to:
- Recommend a hierarchy for Management Groups and Subscriptions
- Configure custom RBAC role definitions and assignments
- Plan for MFA deployment
- Advise on Single-Sign On (SSO) solutions
- Recommend hybrid identity solutions
Module 5: Design Governance
Participants will learn to apply Azure Policy, identify non-compliant resources, and manage tag governance using Azure Policy.
Lessons
- Recommend solutions for using Azure Policy
- Suggest solutions for using Azure Blueprint
Upon completion of this module, students will be able to:
- Organize policies using Initiatives
- Manage tag governance with Azure Policy
- Provide guidance on Azure Blueprints
Module 6: Design a Solution for Databases
In this module, you will learn to recommend appropriate data stores and select Azure SQL Database and Azure SQL Managed Instance service tiers.
Lessons
- Select an appropriate data platform based on requirements
- Overview of Azure data storage
- Recommend database service tier sizing
- Dynamically scale Azure SQL Database and Azure SQL Managed Instances
- Propose solutions for encrypting data at rest, in transit, and in use
Upon completion of this module, students will be able to:
- Recommend database service tier sizing
- Advise on encrypting data at rest, in transit, and in use
- Understand Azure Data Lake Store and Azure Blob Storage containers
Module 7: Select an Appropriate Storage Account
This module covers designing a strategy for tiered storage and managing it using Azure tools.
Lessons
- Understanding storage tiers
- Recommend a storage access solution
- Suggest storage management tools
Upon completion of this module, students will be able to:
- Recommend tools for working with Azure Storage
- Design for Azure Blob Storage access tiers
Module 8: Design Data Integration
Participants will explore data flows using Azure Data Factory and Azure Synapse Analytics architecture.
Lessons
- Recommend a data flow strategy
- Suggest solutions for data integration
Upon completion of this module, students will be able to:
- Implement Azure Synapse Analytics
- Describe data flows using Azure Data Factory
- Demonstrate how to use Azure Data Factory to load data into SQL Data Warehouse
Module 9: Design a Solution for Logging and Monitoring
This module covers Azure Monitor, Azure Application Insights, and Azure Sentinel. Students will learn to monitor Azure resources with Azure Monitor and collect and analyze resource logs using Azure tools.
Lessons
- Azure monitoring services
- Azure Monitor
Upon completion of this module, students will be able to:
- Monitor Azure resources with Azure Monitor
- Collect and analyze resource logs for Azure resources
- Understand how Azure Sentinel collects data on devices, users, infrastructure, and applications
Module 10: Design a Solution for Backup and Recovery
Participants will learn about site recovery capacity, site failover, and failback solutions. You will be able to recommend recovery solutions across different regions.
Lessons
- Recommend a recovery solution for hybrid and on-premises workloads
- Design an Azure Site Recovery solution
- Suggest solutions for recovery in different regions
- Recommend a solution for Azure Backup management
- Design a solution for data archiving and retention
Upon completion of this module, students will be able to:
- Propose solutions for Azure hybrid and on-premises workloads that meet recovery objectives
- Recommend solutions for site recovery capacity
- Suggest storage types and methodologies for data archiving
- Identify requirements for data archiving
Module 11: Design for High Availability
This module covers solutions for application and workload redundancy, including compute, database, and storage components.
Lessons
- Recommend a solution for application and workload redundancy
- Suggest autoscaling solutions
- Identify resources requiring high availability
- Identify storage types for high availability
- Recommend solutions for workload geo-redundancy
Upon completion of this module, students will be able to:
- Advise on autoscaling solutions
- Identify storage types suitable for high availability
- Recommend solutions for workload geo-redundancy
Module 12: Design for Cost Optimization
Participants will learn to optimize costs through recommendations, break down costs by Azure service, and download and review usage details.
Lessons
- Recommend solutions for cost management
- Key viewpoints for minimizing costs
Upon completion of this module, students will be able to:
- Optimize costs with Azure Cost Management
- Design with cost considerations in mind
- Implement cost optimizations based on recommendations
Module 13: Design an Application Architecture
This module covers application deployment solutions, including ARM templates, Logic Apps, and Azure Functions. It also explores microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Recommend a microservices architecture
- Advise on an orchestration solution for application deployment
- Suggest a solution for API integration
Lab: Implement Azure Logic Apps Integration with Azure Event Grid
- Integrate Azure Logic Apps with Event Grid
- Trigger Logic Apps execution in response to an event representing a change to a resource within a
Upon completing this module, students will understand:
- Deployment solutions using ARM templates, Logic Apps, or Azure Functions
- Solutions for monitoring automation
- Hosting structures for API management
Module 14: Design Security for Applications
Participants will learn about application deployment solutions, including ARM templates, Logic Apps, and Azure Functions. The module also covers microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.
Lessons
- Security for applications and services
- Recommend a solution using Key Vault
- Propose solutions using Azure AD Managed Identities
Upon completion of this module, students will be able to:
- Understand Key Vault authentication and authorization
- Comprehend Azure Key Vault availability and redundancy
- Understand the differences between Blueprints, Resource Manager Templates, and Azure Policy
Requirements
Effective Azure Architects enter this role with substantial experience in operating systems, virtualization, cloud infrastructure, storage architectures, networking, applications, and databases.
- Knowledge of on-premises virtualization technologies, such as VMs, virtual networking, and virtual hard disks.
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption protocols.
- Proficiency in Active Directory concepts, including domains, forests, domain controllers, replication, the Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Comprehension of resilience and disaster recovery, including backup and restore procedures.
- Familiarity with application development and APIs.
- Understanding of databases, covering both SQL variants (e.g., MS SQL, MySQL, PostgreSQL) and NoSQL options like MongoDB.
- Knowledge of application and service decoupling mechanisms, such as Queues, tables, and Cache.
- Understanding of security principles to protect environments, such as encryption at rest, encryption in transit, SSL, and TLS.
Testimonials (3)
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
That we could do everything in practice by ourselves. That our trainer had extensive knowledge and we could ask him anything and he always had the answer. That I got some skills that are useful for developers.
Julia Gajtkowska - Demant Business Services Poland
Course - Azure DevOps Fundamentals
It was really useful seeing the full pipeline from start to finish, it led to a better understanding of how to use the technology which you wouldn't get by just focusing on a few different parts out of context.
