From designing solutions on Azure to configuring and managing virtual networks, the AZ-303 certification validates your knowledge and skills for all this and much more. Whether you want to take the certification exam or gain hands-on experience in administering, developing, and architecting Azure solutions, this study guide will help you get started.
Divided into four modules, this book systematically takes you through the wide range of concepts and features covered in the AZ-303 exam. The first module demonstrates how to implement and monitor infrastructure. You'll develop the skills required to deploy and manage core Azure components such as virtual machines, networking, storage, and Active Directory (AD). As you progress, you'll build on that knowledge and learn how to create resilient and secure applications before moving on to working with web apps, functions, and containers. The final module will get you up to speed with data platforms such as SQL and Cosmos DB, including how to configure the different high availability options. Finally, you'll solve mock tests and assess yourself with the answers provided to get ready to take the exam with confidence.
By the end of this book, you'll have learned the concepts and techniques you need to know to prepare for the AZ-303 exam and design effective solutions on Microsoft Azure.
Author(s): Brett Hargreaves and Sjoukje Zaal
Edition: 2
Publisher: Packt Publishing
Year: 2020
Language: English
Pages: 548
Cover
Copyright
About PACKT
Contributors
Table of Contents
Preface
Section 1: Implement and Monitor Azure Infrastructure
Chapter 1: Implementing Cloud Infrastructure Monitoring
Technical requirements
Understanding Azure Monitor
Creating and analyzing metrics and alerts
Metrics
Multi-dimensional metrics
Creating a baseline for resources
Configuring diagnostic settings on resources
Enabling diagnostic settings
Viewing alerts in Log Analytics
Utilizing log search query functions
Querying logs in Azure Monitor
Using Network Watcher
Connection Monitor
Diagnostics
Monitoring security
Activity log
Managing costs
Cost Analysis
Budgets
Questions
Further reading
Chapter 2: Creating and Configuring Storage Accounts
Technical requirements
Understanding Azure Storage accounts
Storage account types
Storage replication types
Azure Blob storage
Azure file storage
Azure disk storage
Creating and configuring a storage account
Installing and using Azure Storage Explorer
Configuring network access to the storage account
SAS tokens and access keys
Managing access keys
Generating an SAS
Implementing Azure Storage replication and failover
Summary
Questions
Further reading
Chapter 3: Implementing and Managing Virtual Machines
Technical requirements
Understanding VMs
VM series and sizes
Managed disks
Understanding Availability Sets
Fault domains and update domains
Understanding how to provision VMs
Deploying a Windows VM from the Azure portal
Deploying a Windows VM from PowerShell
Understanding VM scale sets
Deploying and configuring scale sets
Modifying and deploying ARM templates
Modifying an ARM template
Saving a deployment as an ARM template
Deploying resources with Azure DevOps
Setting up your first DevOps project
Creating a service connection
Creating the pipeline
Configuring Azure Disk Encryption for VMs
Creating an Azure Key Vault
Encrypting the disk
Azure Dedicated Host
Implementing a dedicated host
Creating VMs on a dedicated host
Summary
Questions
Further reading
Chapter 4: Implementing and Managing Virtual Networking
Technical requirements
Understanding Azure VNets
Understanding IP addresses
Public IP addresses
Private IP addresses
Configuring VNets and subnets
Configuring private and public IP addresses
User-defined routes
Creating UDRs
Summary
Questions
Further reading
Chapter 5: Creating Connectivity between Virtual Networks
Technical requirements
Understanding VNet peering
Creating and configuring VNet peering
Understanding VNet-to-VNet
Creating and configuring VNet-to-VNet
Verifying your virtual network's connectivity
VNet peering versus VNet-to-VNet connections
Summary
Questions
Further reading
Chapter 6: Managing Azure Active Directory (Azure AD)
Understanding Azure AD
Creating and managing users and groups
Creating users in Azure AD
Creating groups in Azure AD
Adding and managing guest accounts
Performing bulk user updates
Configuring a self-service password reset
Understanding Conditional Access policies and security defaults
Security defaults
Using Conditional Access policies
Working with Azure AD join
Managing device settings
Adding custom domains
Summary
Questions
Further reading
Chapter 7: Implementing Multi-Factor Authentication (MFA)
Understanding Azure MFA
Enabling MFA for an Azure AD tenant
Configuring user accounts for MFA
Configuring verification methods
Configuring trusted IPs
Configuring fraud alerts
Configuring bypass options
Summary
Questions
Further reading
Chapter 8: Implementing and Managing Hybrid Identities
Understanding Azure AD Connect
Azure AD password hash synchronization
Azure AD pass-through authentication
Installing Azure AD Connect
Managing Azure AD Connect
Managing password synchronization and password writeback
Managing password writeback
Enabling password writeback in Azure AD Connect
Enabling password writeback in the Azure portal
Password synchronization
Using Azure AD Connect Health
Summary
Questions
Further reading
Section 2: Implement Management and Security Solutions
Chapter 9: Managing Workloads in Azure
Understanding Azure Migrate
Selecting Azure Migrate tools
Azure Migrate Server Assessment tool
Azure Migrate Server Migration tool
Database Migration Assistant
Database Migration Service
Web App Migration Assistant
Offline data migration
Migrating on-premises servers to Azure
Creating an Azure Migrate project
Downloading and installing the appliance
Configuring the appliance and starting continuous discovery
Creating and viewing an assessment
Preparing the Hyper-V host
Replicating the Hyper-V VMs
Migrating Hyper-V VMs to Azure
Using Azure Update Management
Protecting VMs with Azure Backup
Implementing disaster recovery
Summary
Questions
Further reading
Chapter 10: Implementing Load Balancing and Networking Security
Technical requirements
Understanding load balancing options
Implementing Azure Load Balancer
Implementing Azure Traffic Manager
Understanding Azure Application Gateway
Implementing the gateway
Health probes
Monitoring
Turning on the web application firewall
Understanding Azure Front Door
Choosing the right options
Implementing network security and application security groups
Understanding Azure Firewall
Using Azure Bastion
Summary
Questions
Further reading
Chapter 11: Implementing Azure Governance Solutions
Technical requirements
Understanding governance and compliance
Understanding RBAC
Built-in roles
Custom roles
Configuring access to Azure resources by assigning roles
Configuring management access to Azure
Creating a custom role
Azure Policy
Implementing and assigning Azure policies
Implementing and configuring Azure Blueprints
Creating a blueprint definition
Publishing and assigning a blueprint
Using hierarchical management
Summary
Questions
Further reading
Section 3: Implement Solutions for Apps
Chapter 12: Creating Web Apps Using PaaS and Serverless
Technical requirements
Understanding App Service
Understanding App Service plans
Creating an Azure App Service Web App
Creating documentation for the API
Using deployment slots
Setting up automatic scaling
Understanding WebJobs
Creating an App Service background task using WebJobs
Deploying the WebJob to Azure App Service
Understanding diagnostic logging
Web server diagnostics
Application diagnostics
Enabling diagnostic logging
Using Azure Functions
Creating an Azure Function
Building Azure Logic Apps
Deploying the Logic App ARM template
Managing a Logic Apps resource
Summary
Questions
Further reading
Chapter 13: Designing and Developing Apps for Containers
Technical requirements
Understanding ACI
Implementing an application that runs on ACI
Understanding Web App for Containers
Understanding AKS
Creating an AKS cluster
Connecting to the cluster
Deploying the application
Testing the application
Monitoring the health and logs of the application
Summary
Questions
Further reading
Chapter 14: Implementing Authentication
Technical requirements
Understanding Azure App Service authentication
Implementing Active Directory authentication
Deploying the Web App
Enabling authentication and authorization
Implementing authentication using certificates
Understanding and implementing OAuth2 authentication in Azure AD
Implementing OAuth2 authentication
Understanding and implementing managed identities
Implementing managed identities for Azure resources service principal authentication
Summary
Questions
Further reading
Section 4: Implement and Manage Data Platforms
Chapter 15: Developing Solutions that Use Cosmos DB Storage
Technical requirements
Understanding the differences between NoSQL and SQL
Understanding Cosmos DB
Creating, reading, updating, and deleting data using the appropriate APIs
Creating a Cosmos DB
Creating the sample application
Understanding partitioning schemes
Setting the appropriate consistency level for operations
Creating replicas
Summary
Questions
Further reading
Chapter 16: Developing Solutions that Use a Relational Database
Technical requirements
Understanding Azure SQL Database
SQL Server Stretch Database
Provisioning and configuring an Azure SQL database
Creating a server-level firewall rule
Creating a table in the database
Creating, reading, updating, and deleting data tables using code
Connecting to the Azure SQL database
Adding items to the database
Querying Azure SQL Database items
Updating an Azure SQL Database row
Deleting an item
Configuring elastic pools for Azure SQL Database
Configuring high availability
Creating a SQL replica
Creating a SQL database failover
Implementing Azure SQL Database managed instances
Publishing a SQL database
Summary
Questions
Further reading
Mock Exam Questions
Mock Exam Answers
Assessments
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Chapter 15
Chapter 16
Other Books You May Enjoy
Index
