MCE Microsoft Azure Solutions Architect Training & Certification Boot Camp – 6 Days

Design a Network Solution

Lessons

• Recommend a Solution for Network Addressing and Name Resolution
• Recommend a Solution for Network Provisioning
• Recommend a Solution for Network Security
• Recommend a Solution for iInternete Connectivity and On-Premises Networks
• Recommend a Solution for Automating Network Management
• Recommend a Solution for Load Balancing and Rraffic Routing

After completing this module, students will be able to:

• Solutions for network addressing and name resolution
• Solutions for network security including private endpoints, firewalls, and gateways
• Recommendations for network connectivity to the Internet, on-premises networks, and other VNets
• Recommendations for load balancing and traffic routing

Design for Migration

Lessons

• Assess and On-Premises Servers and Applications for Migration
• Recommend a Solution for Migrating Applications and VMs
• Recommend a Solution for Migration of Databases

After completing this module, students will be able to:

• Assess on-premises servers and applications for migration
• Suggest solutions for migrating applications and VMs
• Determine migration scope, including redundant, related, trivial, and outdated data

Design Authentication and Authorization

Lessons

• Tips for Identity and Access Management
• Recommend a Solution for Multi-Factor Authentication
• Five Steps for Securing Identity Infrastructure
• Recommend a Solution for Single-Sign On (SSO)
• Recommend a Solution for a Hybrid Identity
• Recommend a Solution for B2B Integration
• Recommend a Hierarchical Structure for Management Groups

Lab : Managing Azure AD Authentication and Authorization

• Deploy an Azure VM hosting an AD DS domain controller
• Create and configure an Azure AD tenant
• Integrate an AD DS forest with an Azure AD tenant

After completing this module, students will be able to:

• Recommend hierarchy of Management Groups and Subscriptions.
• Configure custom RBAC Role definitions and assignments
• Plan for a MFA Deployment
• Recommend a Solution for Single-Sign On (SSO)
• Recommend a Solution for a Hybrid Identity

Design Governance

Lessons

• Recommend a Solution for using Azure Policy
• Recommend a Solution for using Azure Blueprint

After completing this module, students will be able to:

• Organize Policies with Initiatives
• Manage Tag Governance with Azure Policy
• Provide guidance on Azure Blueprints

Design a Solution for Databases

Lessons

• Select an Appropriate Data Platform Based on Requirements
• Overview of Azure Data Storage
• Recommend Database Service Tier Sizing
• Dynamically Scale Azure SQL Database and Azure SQL Managed Instances
• Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use

After completing this module, students will be able to:

• Recommend Database Service Tier Sizing
• Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use
• Understand Azure Data Lake Store and Azure Blob Storage containers

Select an Appropriate Storage Account

Lessons

• Understanding Storage Tiers
• Recommend a Storage Access Solution
• Recommend Storage Management Tools

After completing this module, students will be able to:

• Recommend tools for working with Azure Storage
• Design for Azure Blob Storage access tiers

Design Data Integration

Lessons

• Recommend a Data Flow
• Recommend a Solution for Data Integration

After completing this module, students will be able to:

• Implement Azure Synapse Analytics
• Describe how data flows using Azure Data Factory
• Demonstrate hjow to use Azure Data Factory to load data into SQL Data Warehouse

Design a Solution for Logging and Monitoring

Lessons

• Azure Monitoring Services
• Azure Monitor

After completing this module, students will be able to:

• Monitor Azure resources with Azure Monitor
• Collect and analyze Resource Logs for Azure resources
• Understand how Azure Sentinel collects data on the devices, users, infrastructure, and applications

Design a Solution for Backup and Recovery

Lessons

• Recommend a Recovery Solution for Hybrid and On-Premises Workloads
• Design and Azure Site Recovery Solution
• Recommend a Solution for Recovery in Different Regions
• Recommend a Solution for Azure Backup Management
• Design a Solution for Data Archiving and Retention

After completing this module, students will be able to:

• Recommend solutions for Azure hybrid and on-premises workloads that meets recovery objectives
• Recommend a solution for site recovery capacity
• Recommend storage types and methodology for data archiving
• Identify requirements for data archiving

Design for High Availability

Lessons

• Recommend a Solution for Application and Workload Redundancy
• Recommend a Solution for Autoscaling
• Identify Resources that Require High Availability
• Identify Storage Tpes for High Availability
• Recommend a Solution for Geo-Redundancy of Workloads

After completing this module, students will be able to:

• Recommend a solutions for autoscaling
• Identify storage types for high availability
• Recommend a solutions for geo-redundancy of workloads

Design for Cost Optimization

Lessons

• Recommend Solutions for Cost Management
• Recommended Viewpoints for Minimizing Costs

After completing this module, students will be able to:

• Optimize with Azure Cost Management
• Design with Cost in mind
• Optimize Costs from recommendations

Design an Application Architecture

Lessons

• Recommend a Microservices Architecture
• Recommend an Orchestration Solution for Deployment of Applications
• Recommend a Solution for API Integration

Lab : Implement Azure Logic Apps Integration with Azure Event Grid

• Integrate Azure Logic Apps with Event Grid
• Trigger execution of Logic Apps in response to an event representing a change to a resource within a

After completing this module, students will understand :

• Recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions
• Recommend a solution for monitoring automation
• Recommend a hosting structure for API management

Design Security for Applications

Lessons

• Security for Applications and Services
• Recommend a Solution using Key Vault
• Recommend Solutions using Azure AD Managed Identities

After completing this module, students will be able to:

• Understand Key Vault authentication and authorization
• Understan Azure Key Vault availability and redundancy
• Understand how Blueprints differ from Resource Manager Templates and Azure Policy

Implement Virtual Networking

Lessons

• Virtual Network Peering
• Implement VNet Peering

After completing this module, students will be able to:

• Connect services with Virtual Network Peering
• Configure VNet Peering
• Understand Service Chaining
• Modify or delete VNet Peering

Implement VMs for Windows and Linux

Lessons

• Select Virtual Machine Size
• Configure High Availability
• Implement Azure Dedicated Hosts
• Deploy and Configure Scale Sets
• Configure Azure Disk Encryption

After completing this module, students will be able to:

• Plan for virtual machine implementations
• Create virtual machines
• Configure virtual machine availability, including scale sets
• Understand High Availability options for VMs in Azure

Automate Deployment and Configuration of Resources

Lessons

• Azure Resource Manager Templates
• Save a Template for a VM
• Evaluate Location of New Resources
• Configure a Virtual Hard Disk Template
• Deploy from a Template
• Create and Execute an Automation Runbook

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources
• Use ARM Templates to deploy resources
• Create and Execute an Automation Runbook
• Deploy an Azure VM from a VHD
• Understand Azure encryption technologies

Implement Load Balancing and Network Security

Lessons

• Implement Azure Load Balancer
• Implement an Application Gateway
• Understand Web Application Firewall
• Implement Azure Firewall
• Implement Azure Front Door
• Implementing Azure Traffice Manager
• Implement Network Security Groups and Application Security Grou
• Implement Azure Bastion

Lab : Implementing Highly Available Azure IaaS Compute Architecture

• Describe characteristics of highly available Azure VMs residing in the same availability set behind
• Describe characteristics of highly available Azure VMs residing in different availability zones behi
• Describe characteristics of automatic horizontal scaling of Azure VM Scale Sets
• Describe characteristics of manual vertical scaling of Azure VM Scale Sets

After completing this module, students will be able to:

• Select a Load Balancer solution
• Configure Application Gateway
• Implement Azure Firewall
• Create an Azure Front Door
• Understand Traffic Manager routing methods
• Configure Network Security Groups (NSGs)

Implement Storage Accounts

Lessons

• Storage Accounts
• Blob Storage
• Storage Security
• Managing Storage
• Accessing Blobs and Queues using AAD
• Configure Azure Storage Firewalls and Virtual Networks

After completing this module, students will be able to:

• Understand Storage Account services and types
• Configure Blob storage, accounts, containers, and access tiers
• Implement Shared Access Signatures
• Understand Azure Storage firewalls and virtual networks

Implement Azure Active Directory

Lessons

• Overview of Azure Active Directory
• Users and Groups
• Domains and Custom Domains
• Azure AD Identity Protection
• Implement Conditional Access
• Configure Fraud Alerts for MFA
• Implement Bypass Options
• Configure Trusted IPs
• Configure Guest Users in Azure AD
• Manage Multiple Directori

After completing this module, students will be able to:

• Understand how Multiple AAD organizations interact
• Add Guest Users to Azure AD
• Configure Location Condition Configuration
• Configure Azure MFA settings
• Implement Conditional Access Azure MFA

Implement and Manage Azure Governance

Lessons

• Create Management Groups, Subscriptions, and Resource Groups
• Overview of Role-Based Access Control (RBAC)
• Role-Based Access Control (RBAC) Roles
• Azure AD Access Reviews
• Implement and Configure an Azure Policy
• Azure Blueprints

Lab : Implementing and Configuring Azure Storage File and Blob Services

• Implement authorization of Azure Storage blobs by leveraging shared access signatures
• Implement authorization of Azure Storage blobs by leveraging Azure Active Directory
• Implement authorization of Azure Storage file shares by leveraging access keys

Lab : Managing Azure Role-Based Access Control

• Define a custom RBAC role
• Assign a custom RBAC role

After completing this module, students will be able to:

• Understand Resource Group 0rganization
• Understand how RBAC works
• Create an Azure AD access review
• Create and manage policies to enforce compliance
• Create a Blueprint

Implement and Manage Hybrid Identities

Lessons

• Install and Configure Azure AD Connect
• Configure Password Sync and Password Writeback
• Configure Azure AD Connect Health

After completing this module, students will be able to:

• Implement Azure AD seamless Single Sign-On
• Perform an Azure AD Connect installation
• Implement Azure AD Connect Health

Manage Workloads in Azure

Lessons

• Migrate Workloads using Azure Migrate
• VMware – Agentless Migration
• VMware – Agent-Based Migration
• Implement Azure Backup
• Azure to Azure Site Recovery
• Implement Azure Update Management

Lab : Protecting Hyper-V VMs by using Azure Site Recovery

• Configure Azure Site Recovery
• Perform test failover
• Perform planned failover
• Perform unplanned failover

After completing this module, students will be able to:

• Understand agent-based migration architecture
• Prepare for Azure for migration
• Prepare an on-premises VMware environment
• Understand Azure VM backup architecture
• Manage updates and patches for Azure VMs

Implement Cloud Infrastructure Monitoring

Lessons

• Azure Infrastructure Security Monitoring
• Azure Monitor
• Azure Workbooks
• Azure Alerts
• Log Analytics
• Network Watcher
• Azure Service Health
• Monitor Azure Costs
• Azure Application Insights
• Unified Monitoring in Azure

Manage Security for Applications

Lessons

• Azure Key Vault
• Azure Managed Identity

After completing this module, students will be able to:

• Explain Key Vault uses such as screts, key, and Cerficate management
• Use Managed Identities with Azure resources

Implement an Application Infrastructure

Lessons

• Create and Configure Azure App Service
• Create an App Service Web App for Containers
• Create and Configure an App Service Plan
• Configure Networking for an App Service
• Create and Manage Deployment Slots
• Implement Logic Apps
• Implement Azure Functions

Lab : Configuring a Message-Based Integration Architecture

• Configure and validate an Azure Function App Storage Blob trigger
• Configure and validate an Azure Event Grid subscription-based queue messaging

Lab : Implementing an Azure App Service Web App with a Staging Slot

• Implement Blue/Green deployment pattern by using deployment slots of Azure App Service web apps
• Perform A/B testing by using deployment slots of Azure App Service web apps

After completing this module, students will be able to:

• Configure an Azure App Service
• Create an App Service Plan
• Create a Workflow using Azure Logic Apps
• Create a Function App

Implement Container-Dased Applications

Lessons

• Azure Container Instances
• Configure Azure Kubernetes Service

After completing this module, students will be able to:

• Run Azure Container instances
• Deploy Kubernetes with AKS

Implement No SQL Databases

Lessons

• Configure Storage Account Tables
• Select Appropriate CosmosDB APIs

After completing this module, students will be able to:

• Outline the Table Service Data Model
• Understand options for Azure Cosmos DB
• Understand high availability using CosmosDB

Implement Azure SQL Databases

Lessons

• Configure Azure SQL Database Settings
• Implement Azure SQL Database Managed Instances
• High-Availability and Azure SQL Database

After completing this module, students will be able to:

• Create an Azure SQL Database single database
• Create an Azure SQL Database Managed Instance
• Recommend high-availability architectural models used in Azure SQL Database