Azure Architect Technologies

Explore storage accounts, virtual machines, templates, and networking, plus Azure Active Directory. Learn to implement network security groups, application security groups, and the bastion host, with monitoring considerations.

Learn to use the blob service by creating a container, uploading objects like files and images, and understanding access levels, edits, and viewing limits in a fully managed storage service.

Explore the Azure storage file service and how file shares store files as normal files accessible via SMB, contrasting with the block service where each object has a unique URL.

Create and manage Azure storage file shares, set quotas, organize directories, and access files via SMB, then connect from Windows, Linux, or Mac using PowerShell or mapped drives.

Explore the Azure storage table service as a schema-less NoSQL option within storage accounts, using entities with PartitionKey and RowKey to store and query course and order data efficiently.

Allocate an OS disk for the VM and attach data disks as needed, with Azure managed disks providing high availability. Use the temporary disk only for temporary data.

Explore how restarting, shutting down, and stopping an Azure virtual machine affects temporary storage, data on the D drive, public IP addresses, static IP addressing, and compute charges.

Deploy an Azure virtual machine in a virtual network with subnet-a and subnet-b, then attach a secondary network interface after stopping the VM; enable routing between interfaces with software.

Learn to deploy virtual machines and a virtual machine scale set across multiple availability zones to improve availability in the Central US region.

Explore Azure watcher networking to securely connect resources and define subnets. Understand public and private IPs, compare basic and standard public IP SKUs, and note region scope and zone redundancy.

Explore how network security groups restrict inbound traffic to a Windows virtual machine in a virtual network. Learn about inbound and outbound rules and attaching NSGs to NICs or subnets.

Explore applying application security groups and network security groups to deploy SQL Server on an Azure virtual machine. Includes subnet association, firewall rules, and TCP/IP configuration.

Explore how service endpoints secure access to a storage account by restricting networks, enabling a virtual network and subnet, and verifying access via Azure Storage Explorer.

Demonstrates how to establish a point-to-site virtual private network from another Windows 10 machine by exporting and installing the client certificate, connecting, and managing resources to control costs.

Learn how Azure Resource Manager templates enable infrastructure as code with JSON, define resources, and deploy items like watcher machines and storage accounts, using resource, variable, parameter, and output sections.

Enable and manage Azure backup for Azure virtual machines by selecting or creating a Recovery Services vault, applying policies, and performing file or VM restores from application consistent restore points.

Learn how the MARS Azure Recovery Services agent enables selective backups of files and folders from Windows VMs, through a Recovery Services vault, with on-premise and cloud options.

Explore Azure Active Directory, including managing users and groups, MFA, self-service password reset, and Identity Protection, and learn how Azure AD Connect syncs on-premise directory with Azure AD.

Learn how Azure AD tenants map to directories, how subscriptions trust a single directory, and how to create or switch directories and tenants.

Create a security group and users in Azure Active Directory, then set up an access review in Identity Governance to evaluate group membership with a reviewer and recurring schedules.

Set up an active directory domain in azure virtual network by deploying a windows server 2019 machine, installing AD DS, promoting a domain controller, and configuring dns and static ip.

Learn to filter Azure AD Connect by selecting specific domains and organizational units, and verify that only the chosen resource OU synchronizes to Azure AD.

Monitor sync status, password hash sync, pass through authentication, and single sign on with Azure AD Connect Health, and explore health data from the ADDS agent.

Explore how the Azure Migrate service assesses on-premise workloads and migrates them to Azure virtual machines, supporting Hyper-V, VMware, or physical servers through replication, testing, and final migration.

Explore Azure Site Recovery to replicate a Windows Server virtual machine across regions, perform a test failover, and prepare for a real failover with network and recovery services vault setup.

Distribute user traffic across multiple virtual machines in an Azure virtual network with a load balancer, using a backend pool, front end IP, a health probe, and load balancing rules.

Create a standard Azure load balancer, configure the backend pool, and deploy IIS with default.html on each VM, then configure health probes and a load balancing rule.

Compare Azure load balancer at layer 4 with Azure application gateway at layer 7. Explore how OSI layers and transport vs application data drive routing decisions.

Learn how to create and manage custom roles in Azure at the resource group level, including starting from scratch or JSON, adding permissions, and assigning roles.

Explore how to create and link an app service plan to a web app, compare free, shared, and basic plans, and scale across compute instances to balance load.

Explore application insights, an application performance management service for web apps that helps monitor, detect anomalies, diagnose issues, and analyze user behavior to improve performance and usability.

Deploy the Docker runtime on a Linux virtual machine in Azure, install the Docker engine, pull the EngineX image, run a container exposing port 80, and view the EngineX homepage.

Learn how to deploy containers in isolation with Azure Container Instances, manage underlying infrastructure, and persist data via Azure File Shares while exposing port 5000.

Create an Azure Kubernetes Service cluster using the wizard or Azure CLI, configuring resource group, cluster name, region, version, and node pools. Enable authentication, monitoring, kubectl, and cluster connectivity.

Deploy an Nginx container on a Kubernetes cluster using deployment and service yaml files, kubectl commands, and a load balancer to expose Nginx via a public ip.

Explore elastic or server-side transactions that span one or more azure sql databases, ensuring end-to-end rollback on failure and seamless cross-server coordination via .NET libraries.

Explore why NoSQL databases emerged to offer flexible, schema-less data stores beyond relational models, including key-value, document (JSON), and graph options, with Cosmos DB as a NoSQL example.

Explore how Azure Cosmos DB replicates data across read regions and supports multi-region writes with failover for disaster recovery, while noting data integrity considerations.

Explore Azure Cosmos DB consistency levels, from strong to eventual, including bounded staleness, session, and consistent prefix, and how replication across regions affects reads and latency.

Explore Azure disk encryption: enable server-side encryption with platform-managed or customer-managed keys, create a disk encryption set, and apply it to OS and data disks.

Learn to implement Azure Disk Encryption using a key vault to encrypt OS and data disks with BitLocker on Windows and dm-crypt on Linux, via portal or Azure CLI.

Enable a system-assigned managed identity on the Azure VM and grant it Key Vault get and list permissions; the app uses the identity to fetch secrets without embedded credentials.

Create a log analytics workspace and route logs from existing virtual machines to it, considering regional placement to minimize data transfer costs.

Connect Windows and Linux virtual machines to a log analytics workspace by installing the Microsoft Monitoring Agent and sending metrics to a central repository.

Configure custom logs to stream Engine X access logs from a Linux VM into a log analytics workspace, creating the Linux_seal table and verifying data in the workspace.

Enable diagnostics for Azure storage accounts by capturing metrics and logs via diagnostic settings, selecting blob, files, tables, and queues, with 1.0 or 2.0 formats and retention options.

Explore how Azure resource tags use name-value pairs to organize resources by department or call center and map costs to billing.