Skip to main content

Microsoft Azure Architect Design – Exam AZ-301

Course

Intro Video

Photo of James Lee

James Lee

Training Architect

Length

29:21:07

Difficulty

Advanced

Videos

150

Hands-on Labs

11

Quizzes/Exams

1

Course Details

This course is designed to help develop the skills of an Azure Solution Architect and enable them to pass the Microsoft Azure AZ-301 certification exam.

The AZ-301 exam is one of two exams required to achieve the expert-level certification as an Azure Solutions Architect Expert.

Throughout this course, we cover all of the AZ-301 exam objectives. We provide experience designing and architecting Azure-based solutions. This course provides:

Fundamental knowledge of solution architecture.Experience designing solutions for a range of scenarios.Familiarity with features and functionality of many Azure services.Knowledge on how to best deploy, migrate, and integrate Azure solutions.

We work with concepts, Azure Services, and various scenarios to provide the necessary skills, not solely to pass this exam, but also to become a great Azure solution architect.

Interactive Diagram: https://interactive.linuxacademy.com/diagrams/AzureArchitectDesign.html

Syllabus

Course Introduction

Welcome to the Course

Course Introduction

00:04:55

Lesson Description:

Welcome to this certification preparation course for the Microsoft Azure Architect Design (AZ-301) exam. To support you in your goal to become an Azure solution architect, this course provides you with skills and experience for designing, migrating, and managing solutions for a range of scenarios. The AZ-301 exam tests your ability to select tools, technologies, and techniques to implement Azure solutions. Starting with an introduction of solution architecture fundamentals, we progressively build knowledge, skills, and intamacy with a range of solutions and scenarios. Important Note: While this course is structured to cater to different skill levels, AZ-301 is an expert-level exam. It's expected learners have already successfully passed AZ-300 and are familiar with Azure concepts, technologies, and tools. Course Support: Reach out to me directly with any questions or concerns; my passion is helping you be successful with Azure. See the Course Support and Feedback lesson for the many ways to access support.

Course Support and Feedback

00:02:39

Lesson Description:

At Linux Academy, we are very passionate about providing everything needed to be successful on your learning journey. In this lesson, we provide a quick overview of the many tools available to access support, as well as provide feedback. If you experience any issues with the content, please contact me directly with the details. Course Support: Linux Academy Support: support@linuxacademy.com James Lee: james.lee@linuxacademy.com Course Feedback: Enjoying the content? Please leave a thumbs-up! Have concerns or suggestions? Please contact me directly, or leave your comments with a thumbs-down and I will reach out to you to address your issue!

About the Training Architect

00:01:03

Lesson Description:

G'day everyone! Thanks for joining me. My name is James Lee, and I'll be your training instructor for this course on AZ-301. I'm excited to be with you. Author Social Media Feel free to connect! Twitter: @jamesdpleeLinkedIn: James Lee

Using the Interactive Guide

00:03:15

Lesson Description:

The Interactive Guide is used throughout the AZ-301 course to help illustrate important concepts and call out key points. Use this interactive diagram while following along with lessons and as as a study guide by itself. Link: https://www.lucidchart.com/documents/view/ac476567-8168-4033-933b-c25d212220fe/1

Getting Started

Architecting Azure Solutions

Overview of Solution Architecture

00:10:37

Lesson Description:

Solution architecture can mean a range of things, depending on who we ask. In this lesson we discuss: What is solution architecture?What types of things do we do as a solution architect?Is there more to solution architecture than just design? It's important we come to appreciate that solution architecture is not just about the destination, but rather it also involves the journey. Please note: we will not be discussing the steps for creating a project schedule, or estimating the staffing resources required to deliver a solution (although this is an important element of solution architecture). Typically this would take place within phases 2, and 3, and again in phase 4.

Overview of Project Management and Execution

00:08:07

Lesson Description:

As a solution architect, it helps to be mindful of the important role which project management plays in the successful delivery of any solution. In this lesson we walk through a high-level overview of project management goals and responsibilities, as well as discuss two general methdologies: waterfall and agile. Through this lesson we demonstrate that: Project management provides an agreed and accepted framework for the delivery of solutions.It is common for needs to change through large and complex projects and we must consider these needs.Policies and tools can be used to ensure technologies are evaluated fairly and solutions are consistently tested. Be aware this is a very brief overview of project management and different methodologies do exist.

Fundamentals of Design

Introduction to Design Fundamentals

00:02:01

Lesson Description:

Why do we need to understand the fundamentals of design? When designing solutions for the cloud, it helps to have a guiding framework we can leverage to ensure we harness the full benefits of cloud. In this lesson, we briefly discuss how design patterns and principles help us achieve this and architect great solutions.

Design Principles - Scalability

00:07:08

Lesson Description:

In this lesson we discuss our first design principle: scalability. Designing a solution to be scalable helps us ensure resources can be increased or decreased to meet demand. We learn about the two main approaches to scaling: Vertical scaling: increase and decrease the size of a single resource to meet demand.Horizontal scaling: increase and decrease the number of instances available to meet demand. As we demonstrate throughout the course, scaling does more than help us address the performance needs of our solution. It also plays a role in the reliability of our solution.

Design Principles - Reliability

00:06:10

Lesson Description:

It's always important to ensure solutions we build have the ability to remain online through minor faults, and that we have a solution in place to recover from major disasters. That's what we refer to as reliability. In this lesson, we discuss two important reliability concepts: Availability: ensuring our solution remains online through minor faults and failures.Recoverability: ensuring we can restore both the service and data of our solution in the event of a major fault or outage.

Design Principles - Efficiency

00:05:25

Lesson Description:

When architecting solutions, it's critical to get the balance right. One of the key items we need to balance is cost. In this lesson, we consider both: Resource and utilization costs.Operational cost. How much do we pay to have our solution running in the cloud and how much do we pay to administer, deploy, develop, and operate the solution?

Design Principles - Security

00:08:50

Lesson Description:

With so many stories of security breaches in modern applications, it's no surprise security is one of our design principles. In this lesson, we discuss two important considerations of designing security within the cloud: Defense in Depth: a concept reminding us security must be designed across all areas of a solution.Shared Security: the notion that when we use cloud services, the cloud provider shares some responsibility for security.

Design Patterns

00:07:49

Lesson Description:

In this lesson, we disuss two important concepts for architecting solutions in the cloud. We cover the use of Design Patterns which can help us find industry-accepted, best-practice solutions to common architecture problems. By itself, migrating to the cloud doesn't inherently provide access to all the benefits of the cloud. Solutions must be designed to leverage cloud benefits. We also discuss coupling, a concept from Service Oriented Architecture and many other design philosophies.

Determine Workload Requirements

Gather Information and Requirements

Introduction to Assessing Requirements

00:05:48

Lesson Description:

This lesson is an introduction to the Gather Information and Requirements section of the course. By completing this lesson you will: Gain an appreciation for the importance of assessing requirementsUnderstand the structure of upcoming content

Assessing Technical Requirements

00:07:52

Lesson Description:

One of the most important responsibilities of a solutions architect is understanding requirements. But if we want our solution to be successful, we must first define what success means. In this lesson we'll discuss what it means to gather information and technical requirements. After completing this lesson, you will: Appreciate the importance of performing a tecnical assessmentBecome more familiar with the types of technical questions we might ask In an upcoming scenario, we will put this assessment into practice, and see how technical requirements can influence design. Please bear in mind that at this stage in the course, you are not expected to know all the important technical questions to ask when designing a solution. As we progress through the course, you will become more familiar with the distinguishing properties and features of various technologies, from the perspective of the four design pillars. At this stage in the course, what is important is that you can see how technical requirements do influence solution architecture.

Assessing Non-technical Requirements

00:05:00

Lesson Description:

The non-technical requirements of a solution can be equally as important as the technical requirements of a solution. Non-technical requirements might include those that relate to people, policies, compliance, and so on. In this lesson we will discuss: Why non-technical requirements are importantSome example non-technical requirementsSome examples of influence that non-technical requirements can have on a solution

Scenario - Assessing Requirements

00:11:57

Lesson Description:

In this scenario, we will practice assessing both technical and non-technical requirements. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure, and have a range of requirements that must be met. This scenario includes a range of details, and our responsibility is to identify any important information which influences the design of a possible solution. This is the first of many scenarios where we will: Walk through information on current state and goalsPerform an assessment of the requirementsDiscuss a possible solution

Optimize Consumption Strategy

Introduction to Consumption Optimization

00:04:43

Lesson Description:

In this section introduction, we chat briefly about what consumption optimization is and what we will share more about in the upcoming lessons.

Azure Purchasing Options

00:07:11

Lesson Description:

To get started using Azure, we first need to create a subscription. In this lesson, we take a look at the main purchase options for an Azure subscription. The purchase options we discuss include: Pay as you go (PAYG).Enterprise Agreement (EA).Dev/TestCloud Solution Provider (CSP) Additionally, we briefly discuss Microsoft support plans.

Azure Reservations

00:02:31

Lesson Description:

Azure Reservations are a special way you can pre-purchase a selection of Azure resources, to get discounts. In this lesson, we discuss Azure Reservations and learn: How Azure Reservations work.What types of resources we can purchase.The types of commitments (1 or 3 years) we must make.How to purchase reservations in the Azure Portal.

Azure Licensing

00:06:24

Lesson Description:

Another major influence on our Azure consumption is licensing. Within this lesson we discuss some important considerations for licensing within Azure. This includes: Azure Hybrid Use Benefit.Software Assurance and License Mobility considerations.Per-item licensing (such as with Azure Active Directory or Enterprise Mobility + Security).Marketplace licensing. To understand Azure Hybrid Use Benefit (also known as Azure Hybrid Benefit), it is recommended you review the following Microsoft article.

Azure Product Pricing

00:11:27

Lesson Description:

One of the more direct influences on consumption is that of the products and services we implement. In this lesson, we discuss product families, features, and examples of optimizing consumption for: ComputeIdentityNetworkStorage This is an overview of the types of ways our choices of service and product or SKU can influence costs.

Azure Advisor

00:03:57

Lesson Description:

Using Azure Advisor, we're able to get access to a range of proactive recommendations tailored specifically to our environment. In this lesson we focus specifically on the Azure Advisor recommendations which influence cost. Azure Advisor includes recommendations for: Resizing or shutting down underutilized instances.Deleting unprovisioned ExpressRoute circuits.Deleting or reconfiguring idle virtual network gateways.Azure Reservations for virtual machines.Deleting unassociated public IP addresses.Deleting Azure Data Factory pipelines that are failing.Using standard snapshots for managed disks. Specific information about these recommendations can be found at the following Microsoft article.

Azure Pricing Calculator

00:03:51

Lesson Description:

The Azure Pricing Calculator is a simple but significant tool in the belt of many Azure solution architects. In this lesson we take a look at some of the core features of the calculator, including some that are only available on logging in.

Azure Total Cost of Ownership Calculator

00:05:08

Lesson Description:

When evaluating a migration of on-premises workloads to Microsoft Azure, it helps to understand the total cost of each solution. Using the Azure Total Cost of Ownership (TCO) Calculator, we can estimate and compare these costs. In this lesson we: Discuss the purpose of the TCO Calculator.Walk through using the TCO Calculator.

Managing Azure Costs

00:05:28

Lesson Description:

Through Azure Cost Management, we get access to a range of tools that help us manage and analzye our expenditure within Azure. In this lesson we discuss: The purpose of Azure Cost Management.Features and functionalities available.Analytics capabilities, including a brief walkthrough.Budgeting capabilities, including a brief walkthrough.

Scenario - Optimizing Consumption

00:05:22

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can significantly influence costs. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements that must be met. This is the one of many scenarios where we will: Walk through information on current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware that this is just one possible scenario and one possible solution.

Designing an Auditing and Monitoring Strategy

Introduction to Auditing and Monitoring

00:01:40

Lesson Description:

Welcome to the auditing and monitoring section of this course. In this video, we briefly walk through what to expect for this section.

Monitoring in Azure

00:04:45

Lesson Description:

The purpose of this lesson is to introduce the concept of solution monitoring and helps us see the difference between monitoring and audit or compliance. We consider how monitoring supports our ability to: Understand our solution (analytics and insights).Respond to events (scaling and alerts).Route monitoring information (integration/archive).

Audit and Compliance in Azure

00:06:22

Lesson Description:

Audit and compliance is predominantly focused on people, processes, and non-technical requirements of a solution. For example, consider the industry our solution is intended for. Do we have any obligations we must meet, such as financial, health, or government? Or perhaps our organization has a range of requirements our solution must adhere to (e.g. resources can only be based in America). In this lesson, we discuss the concept of auditing and complying with requirements. We consider legal or industry requirements and organizational requirements. This lesson provides an understanding of the importance of audit and compliance. In the upcoming lessons, we discuss technologies and tools that helps us in this endeavour. Related and helpful links: Azure ComplianceAzure Regions - Refer to the featured regionsAzure Australia Central - An example of a featured region; certified in Australia for use with data classified as PROTECTED

Azure Monitoring Solutions - Part 1

00:08:13

Lesson Description:

As a solution architect it's important that we're aware of the different capabilities available for monitoring Azure based solutions. In this lesson, we walk through a high-level overview of the important features of Azure Monitor, including: Activity Log: for auditing subscription level events.Metrics: for analyzing resource metrics.Logs (also known as Log Analytics): for gathering and analyzing diagnostic information.Service Health: for viewing health information about Azure services.Alerts: for responding to various events.Insights: for gaining a deeper understanding of specific products and resources. This lesson is not focused on implementation and configuration, and is instead aimed at providing an overview of the capability of Azure Monitor features. In part 2 of this lesson, we take a look at specific Azure Monitor insights capabilities, as well as products used to enable integration. Related and helpful links: Azure Monitor terminology changes

Azure Monitoring Solutions - Part 2

00:15:47

Lesson Description:

In part 2 of our lesson on Azure monitoring solutions, we discuss the various features and products available within Azure Monitor. Within this lesson, we cover: Application InsightsNetwork Insights (also known as Network Watcher)Services used to help with integration. This is a high-level overview of when to use each of these services or products. In the next lesson we consider how these products can be used for important monitoring scenarios.

Important Monitoring Scenarios

00:08:37

Lesson Description:

In this lesson, we take a look at how the various monitoring solutions we've discussed so far can be put together to perform a range of important tasks. Specifically, we cover: Storing and routing monitoring information.Escalating events and alerts.Integrating with other solutions.

Organizing Azure Resources

00:05:46

Lesson Description:

To help manage our environment from billing, operational, and monitoring perspectives, our environment should be well organized. In this lesson we discuss two main ways for organizing our environment, including: Azure resource hierarchy.Tagging. These two tools can help us better manage billing, automation, and administration.

Azure Policy

00:07:08

Lesson Description:

Microsoft provides the Azure Policy solution to help manage various compliance requirements. In this lesson we discuss: How Azure Policy helps with compliance.Examples of Azure Policy in use.The key components of Azure Policy. We show that Azure Policy is a versatile and powerful tool for helping enforce controls across your Azure environment.

Microsoft Service Trust Portal

00:03:52

Lesson Description:

When you architect solutions to leverage Microsoft's cloud services, it's important you ensure that you adhere with any compliance regulations. In this lesson we discuss: The Microsoft Service Trust Portal's role in compliance.How to access documentation on Microsoft's compliance with various regulations.The Compliance Manager's role in helping your organization achieve compliance.

Scenario - Auditing and Monitoring

00:04:24

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence auditing, monitoring, and operations. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:15:00

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

Routing Azure Resource Logs

01:00:00

Design for Identity and Security

Design for Identity Management

Introduction to Design for Identity Management

00:02:14

Lesson Description:

Welcome to the Identity and Security section of the course. This brief lesson provides an introduction and helps explain what to expect with this section of the course.

Identity Management

00:10:38

Lesson Description:

This lesson provides a high-level overview of identity management. What is it and why does it matter? In this lesson, we discuss: Key features of an identity management solution.The traditional model of security.The new identity-centric model of security.Key terms and concepts.

Access Control

00:06:22

Lesson Description:

In this lesson, we consider some of the main access control models. We discuss the following: Mandatory access controlDiscretionary access controlRole-based access controlRule-based access controlAttribute-based access controlHistory-based access control As we complete further lessons, we will showcase a range of technologies that support some of these models.

Azure Active Directory (AD)

00:13:19

Lesson Description:

This lesson provides an introduction to Azure Active Directory (Azure AD). In this lesson we will: Discuss some of the main features.Consider important identity objects.Perform some basic tasks in the Azure Portal. This lesson provides an overview of Azure AD's place within identity-centric security architecture. In upcoming lessons we will build on this knowledge and look at many different capabilities.

Azure AD Business-to-Business (B2B)

00:08:14

Lesson Description:

Azure Active Directory Business-to-Business (Azure AD B2B) is a feature of Azure AD which helps organizations share their resources with external organizations. In this lesson, we discuss: Key features of Azure AD B2B.How to configure Azure AD B2B.Capabilities for direct identity federation.The types of access guest accounts can have. This lesson grants provides an appreciation for how Azure AD B2B simplifies the collaboration and federation of identity providers. It allows guest users to be granted access similar to normal users: application access, Azure AD and Azure management access, and more.

Azure AD Business-to-Consumer (B2C)

00:10:25

Lesson Description:

When architecting solutions for modern applications, Azure Active Directory Business-to-Consumer (Azure AD B2C) is a great product to consider. A developer creating a new application requiring identity can use Azure AD B2C to get identity management capabilities similar to Azure AD. Azure AD B2C also allows for identity providers like Facebook and Google, so we can provide end-users with the ability to log in using their existing identities. In this lesson, we: Discuss the purpose of Azure AD B2C.Consider important features and functionality.Walk through the creation of a new B2C tenant.

Azure AD Domain Services (DS)

00:09:09

Lesson Description:

Azure AD Domain Services (DS) is a product which offers functionality similar to on-premises Microsoft Active Directory. With Azure AD DS provides many of the traditional features similar to Active Directory, but wihtout managing the underlying infrastructure. This is automatically managed. Within this lesson we discuss: Scenarios where Azure AD DS is useful.Features and limitations of Azure AD DS.Architecture and synchronization. We also review the configuration and functionality of Azure AD DS through the Azure Portal using some test resources. Please note: While a managed domain includes some configurable options, the changes that can be made are farily limited. We cannot modify group memberships.We cannot modify user attributes.We do not have Domain Administrator or Enterprise Administrator privileges. It is possible to edit DNS and Group Policy. Also please be aware that if you need to use this solution in the real world, there are other limitations such as single-region deployment. You can find more information here.

Azure Access Control

00:14:57

Lesson Description:

Securing access to our Azure resources is an important part of architecting secure solutions. Within this lesson we consider three main ways for securing our Azure resources: Azure role-based access control (RBAC)Azure resource locksAzure AD roles As part of our discussion on RBAC, we also discuss and configure some management groups within the Azure Portal. Management groups are a useful way for implementing RBAC, policies (discussed earlier), and even some forms of monitoring, across multiple subscriptions. This lesson provides an overview of when and where we would use these types of access control.

Enterprise Access Management

00:07:19

Lesson Description:

A critical task in architecting identity-centric solutions is providing centralized access to enterprise applications for our users. In this lesson we do the following: Discuss secure and centralized access to applications.Configure an enterprise application within Azure AD.Walk through the end-user experience within the MyApps portal. This lesson serves as a foundation for future lessons, where we add features such as single sign-on, user-provisioning, and self-service.

Self-Service

00:09:32

Lesson Description:

Self-service functionality helps us improve end-user experience and minimize the IT administrative overhead of our solutions. Within this lesson, we cover: Self-service group management.Self-service application management.Self-service password reset (SSPR).

Scenario - Identity Management

00:04:22

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence identity management. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design for Authentication and Authorization

Introduction to Authentication and Authorization

00:01:36

Lesson Description:

Welcome to the "Authentication and Authorization" section of the course. This brief lesson provides an introduction and helps explain what you can expect within this section of the course.

Authentication and Authorization Protocols: Part 1

00:09:43

Lesson Description:

In this lesson, we will discuss concepts relating to authentication and authorization. You will learn: What authentication isWhat authorization isImportant protocols, including OAuth and OpenID Connect In part two of this lesson, we will create an application and see a high-level overview of how to leverage the Microsoft Azure AD platform for identity.

Authentication and Authorization Protocols: Part 2

00:07:55

Lesson Description:

To help illustrate how applications can leverage Azure AD identity, we will perform a limited configuration of an application within Azure AD. In this lesson, we will: Register an application with Azure ADUse a quick-start application to test the registrationRun the app locally using Visual StudioWalk through the process of login and redirections

Identity Delegation

00:08:58

Lesson Description:

Identity delegation is an important concept when architecting modern cloud-based applications. Within this lesson, we will discuss: What identity delegation isWhat the flow of information looks likeHow identity delegation works within Azure AD At the end of this lesson, we will summarize a number of important concepts and topics discussed throughout this lesson, as well as the previous (two-part) lesson on authentication and authorization.

API Management and API Keys

00:05:23

Lesson Description:

In this quick lesson, we will briefly discuss the API Management product and some of the security features and policies available. In this lesson, we will discuss: The purpose of the API Management productUsing API keys (subscriptions) for securityAn overview of some of the other security features Please be aware: This lesson is not intended as a comprehensive overview of the API Management product — the main focus is API keys in contrast to OAuth.

Azure AD Authentication Methods

00:13:13

Lesson Description:

This lesson provides a summary of the main ways in which we can authenticate against an Azure AD tenant. In this lesson, we will discuss important considerations for: Cloud-only authenticationAzure AD Connect with Password Hash Sync (PHS)Azure AD Connect with Pass-through Authentication (PTA)Azure AD Connect with Active Directory Federation Services (ADFS) Helpful Links: Microsoft - Choose the right hybrid authentication option

Single-Sign On

00:13:20

Lesson Description:

When architecting identity-centric solutions, one of the most important things we must configure is single sign-on (SSO). In this lesson we discuss: What single sign-on is.What user provisioning is.An overview of SSO configuration within the Azure Portal.

Multi-factor Authentication (MFA)

00:05:41

Lesson Description:

"One simple action you can take to prevent 99.9 percent of attacks on your accounts" -- Melanie Maynes Senior Product Marketing Manager, Microsoft Security Multi-factor authentication (MFA) is an important tool we can leverage as solution architects to help secure identity. As the configuration of MFA is covered in AZ-300, this lesson is primarily a refresher on important things to consider as a solution architect. This lesson covers the following. A recap of MFA.Licensing considerations for using MFA.Methods for enabling MFA.

Managed Service Identities

00:07:10

Lesson Description:

Through managed services identities (MSI), also known as managed identities, we can assign Azure resources with an actual identity within Azure AD. Managed identities can help us to more securely manage programmatic access between Azure resources. In this lesson we walk through a refresh of some of the concepts already discussed within AZ-300, and more specifically focus on: The assignment of identities to Azure resources.The resources that can be authenticated against.

Key Vault

00:06:58

Lesson Description:

Key Vault is a powerful tool which helps protect secret information in a very secure way. Where the AZ-300 lesson on Key Vault is more focused on configuration, this lesson focuses more on the following. The primary use cases for Key Vault.Compliance certification of Key Vault.Access control at the data layer.

Scenario - Authentication and Authorization

00:05:10

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence authentication and authorization. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

02:00:00

Design for Risk Prevention for Identity

Introduction to Risk Prevention for Identity

00:01:54

Lesson Description:

Welcome to the "Risk Prevention for Identity" section of the course. This brief lesson provides an introduction and helps explain what to can expect within this section.

Identity Security and Risk Management

00:15:20

Lesson Description:

Within this lesson we discuss what exactly identity security and risk management is. The specific topics we cover are as follows: An approach to identity security and risk management.Common identity risks.Strategies to control identity risks. Links mentioned in this lesson: Multi-factor authentication and identity risks

Azure AD Identity Protection

00:08:42

Lesson Description:

Azure AD Identity Protection helps identify and respond to a range of risks specific to identity. This lesson covers the following: The purpose of Azure AD Identity Protection.Risks mitigated (including real-time and offline).Licensing requirements. This lesson includes a discussion of some of the policies within the Azure Portal. For more in-depth configuration advice, be sure to check out the related lesson in the AZ-300 course.

Azure AD Conditional Access

00:05:22

Lesson Description:

As we've discussed, access control is an important element of architecting secure solutions. With Azure AD Conditional Access, we can configure access control that takes different circumstances into account to be both dynamic and flexible. In this refresher, we discuss the following: The purpose of Conditional Access.Key elements of Conditional Access policies.Important licensing considerations. For more information on the configuration of Conditional Access, refer to the AZ-300 lessons.

Azure AD Privileged Identity Management

00:13:10

Lesson Description:

Azure AD Privileged Identity Management (PIM) is a very powerful tool that improves our ability to mitigate against many of the risks we discussed earlier. In this lesson, we discuss: The purpose of PIM.Key features of PIM.The configuration of PIM at a high level.The end-user experience of PIM.

Azure AD Password Protection

00:02:37

Lesson Description:

This is a high-level introduction to two important features of Azure AD Password Protection. In this lesson we discuss: Banned passwords.Smart lockout. These tools help us protect against the risk of our credentials being compromised.

Azure AD Licensing

00:02:35

Lesson Description:

We've discussed a range of different Azure AD features so far, and as a solution architect, it's important to understand what features are free and which require a license. This lesson provides a high-level overview of some of the important considerations for Azure AD licensing. It's recommended to review the Azure AD licenses and the interactive diagram page to understand which licenses are required for the features we've already discussed. Please review the Microsoft Azure AD licensing page.

Scenario - Identity Risk Prevention

00:03:47

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence identity risk prevention. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Monitoring for Identity and Security

Introduction to Monitoring Identity and Security

00:01:12

Lesson Description:

Welcome to the "Monitoring Identity and Security" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section of the course.

Azure AD Monitoring - Part 1

00:11:25

Lesson Description:

With identity being so central to modern solutions, it's important that we consider monitoring for Azure AD and related products. Within part one of this lesson, we cover the following. Azure AD security reports.Azure AD activity reports.Azure AD monitoring with Azure Monitor. In part two, we continue by discussing monitoring approaches for some of the additional Azure AD products.

Azure AD Monitoring - Part 2

00:13:35

Lesson Description:

This is the second part of our lesson on monitoring Azure AD. Withing this lesson, we cover the following. Azure AD Identity Protection monitoring and alerts.Azure AD PIM monitoring and alerts.Access reviews (within Azure AD PIM and Azure AD).

Azure AD Connect Health

00:04:03

Lesson Description:

With hybrid identity being quite common and important for enterprises migrating to Azure, it helps to understand options for monitoring Azure AD Connect infrastructure. In this lesson we discuss the following. Azure AD Connect Health.Agent installation requirements.Monitoring functionality available within the portal.

Scenario - Monitoring Identity

00:04:55

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence identity monitoring. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design a Data Platform Solution

Design a Data Management Strategy

Introduction to Data Management

00:01:20

Lesson Description:

This brief lesson provides an introduction and explains what to expect within the data management section of the course.

Data Platform Fundamentals

00:20:13

Lesson Description:

Before we get started discussing the various data management solutions, it helps to be familiar with a range of data management concepts. This lesson provides an overview of data management concepts we need to understand as a solutions architect. In this lesson, we will discuss: Relational and non-relational databasesData warehouseData lakes Through this lesson, you will learn more about important concepts such as transaction processing, analytics, structured and unstructured data, and more. This lesson serves as a foundation for the remaining lessons in this section of the course.

Azure SQL Introduction

00:20:38

Lesson Description:

Azure SQL is one of Microsoft's primary relational database management systems (RDBMS). To support various workloads, Azure SQL provides a range of functionality and supports several deployment options. Within this lesson, we will discuss: Deployment options and when to use eachPricing (including DTU and vCore)Scalability and performanceImportant considerations This lesson acts as a foundation for later lessons on Azure SQL and provides an overview of various features and capabilities.

Cosmos DB Introduction

00:13:19

Lesson Description:

Cosmos DB is a non-relational database built for planet-scale applications. In this lesson, we will discuss: Cosmos DB purpose and use casesPricing influencesPerformance and scalability (including consistency models)Important considerations We will use this lesson as a foundation for further lessons in this section of the course. Helpful Links Cosmos DB billing explained

Azure SQL Data Warehouse Introduction

00:11:38

Lesson Description:

Data warehouses are a valuable tool in any enterprise looking to gain insights from data they already have stored across multiple data platforms. Azure SQL Data Warehouse provides access to a highly scalable and capable fully managed data warehouse solution. Within this lesson, we will discuss: The purpose of Azure SQL Data Warehouse (DW)PricingScalabilityImportant considerations

Azure Data Lake Storage Introduction

00:09:26

Lesson Description:

With the influx of big data, before we can analyze and gain insights from this huge variety and volume of data, we need somewhere to store it. In this lesson, we will discuss: Azure Data Lake Storage's role in big data storagePricing and scalabilityImportant considerations Azure Data Lake Storage (ADLS) is different from Azure Data Lake Analytics, which is one possible tool that can be used to analyze big data.

Scenario: Data Management

00:03:24

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence data management. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design and Document Data Flows

Introduction to Data Flows

00:00:43

Lesson Description:

This brief lesson provides an introduction and explains what to expect within the data flows section of the course.

Data Flow Fundamentals

00:11:09

Lesson Description:

This lesson provides a high-level overview of what "data flows" are. This helps provide context and acts as a foundation for the upcoming lessons in this section. Within this lesson, we will discuss: What are data flows?What are some common data flow scenarios?What are some common data flow frequencies?

Azure Data Factory

00:15:56

Lesson Description:

With a variety of powerful data management and analytics tools, it's important to be able to coordinate how all these tools work together. Azure Data Factory (ADF) is an orchestration and workflow management tool that helps us integrate data platforms and manage data flows. In this lesson, we will: Walk through the purpose and capabilities of ADF.Discuss the important components of ADF.Configure a basic ADF pipeline to move data. From this lesson, we will learn how ADF is a powerful tool that helps us integrate cloud, on-premises, and even third-party cloud data solutions.

Azure Databricks

00:09:08

Lesson Description:

With a huge volume and variety of data being stored really quicky, big data has become a treasure trove of insights that can be complex to analyze. Azure Databricks helps with this problem by providing a managed service where our data scientists can easily interact and collaborate. In this lesson, we will: Discuss the purpose of Azure databricks.Walk through a basic overview of databricks configuration. Please note: This lesson provides a high-level overview of data science and big data analytics only. As a solutions architect, it is important that we know where Azure databricks can be used, but it is not expected that you are familiar with data science or machine learning. That is outside the scope of this course. Useful Links Azure Databricks VisualizationsWhat Is Azure Databricks?

Scenario - Data Flows

00:04:47

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the movement and flow of data. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design a Data Protection Strategy

Introduction to Data Protection

00:00:48

Lesson Description:

This brief lesson provides an introduction and explains what to expect within the data protection section of the course.

Data Protection Fundamentals

00:10:08

Lesson Description:

To help provide context for upcoming lessons on data protection, we'll first start by discussing some key data protection concepts. In this lesson, we will discuss typical challenges and strategies for: Data platform availabilityData platform security

Azure SQL Data Protection: Part 1

00:14:53

Lesson Description:

Following on from the earlier lesson on Azure SQL, this lesson focuses on the Azure SQL functionality for high availability and data security. In this first part of the two-part series, we will discuss: Azure SQL high availability architectureActive geo-replicationFailover groupsAutomated backupsLong-term retention In Part 2, we will focus on data security. Helpful links and information: See the inclusions and limits for DTU-based services hereSee the inclusions and limits for vCore-based services hereBe mindful of point-in-time-restore (automated backup) limits: DTU includes "maximum" limits for automated backups which require you to change the plan if you want additional backups.vCore is more flexible and includes ranges for backups (e.g. 7-35 days).

Azure SQL Data Protection: Part 2

00:18:03

Lesson Description:

In the second part of our lesson on Azure SQL data protection, we will focus on security. This lesson will include: Firewalls (database, server, and virtual network)Access control (including SQL authentication and Azure AD integration)Data security (including encryption and data masking) This concludes the lessons on Azure SQL data protection.

Azure SQL Data Warehouse: Data Protection

00:08:39

Lesson Description:

This lesson focuses on both the availability and security of the Azure SQL Data Warehouse platform. Within this lesson, we will discuss: High availability architectureSnapshots and restore pointsGeo-backups for disaster recoveryLong-term retention recommendationsShared data protection features from Azure SQL

Azure Cosmos DB: Data Protection

00:15:42

Lesson Description:

Cosmos DB is a massively available, globally distributed database for planet-scale applications. With this scale in mind, it should be no surprise that availability is an important part of the underlying architecture. In this lesson, we will discuss: The Cosmos DB availability architectureBuilt-in protection against faultsConfigurable protection against geographic outagesBuilt-in backups (and limitations)Network securityUsers and permissions (resource tokens)Encryption Helpful Links Azure Cosmos DB paritioning and scaling

Scenario: Data Protection

00:05:10

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the protection of our data platforms. This is a scenario based on a fictitious company called The Pupper Club (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we will: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:45:00

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:30:00

Data Platform Monitoring

Introduction to Data Platform Monitoring

00:01:14

Lesson Description:

This brief lesson provides an introduction and explains what to expect within the data platform monitoring section of the course.

Monitoring Data Platforms

00:14:36

Lesson Description:

When monitoring data platforms within Azure, we do so by leveraging the underlying Azure Monitor integrated solution. Within this lesson, we will discuss how to: Monitor data platforms with Azure MonitorArchive monitoring data to storageStream data to other solutions using event hubsCreate alerts and notifications

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:00:00

Design a Business Continuity Strategy

Design a Site Recovery Strategy

Introduction to Site Recovery

00:02:18

Lesson Description:

Welcome to the "Site Recovery" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section of the course.

Site Recovery Fundamentals

00:22:27

Lesson Description:

In this lesson we discuss the fundamentals of site recovery and backups. We discuss the following: Site recovery challenges and solutions.Recovery objectives.Snapshot consistency levels. This module takes a look at solutions from Microsoft which help to recover from major site failures or outages. It's worth noting that high availability and site recovery can work hand-in-hand. As we move throughout this module, we show how we can also use site recovery services to help protect against disruption for both individual solutions and entire sites.

Azure Site Recovery

00:20:42

Lesson Description:

Azure Site Recovery (ASR) is Microsoft's disaster recovery as-a-service (DRaaS) solution. By leveraging ASR's ability to replicate servers from a primary site to a secondary site, we can improve the ability of a business to continue in the event of a major disaster. Within this lesson we: Discuss the key components of ASR.Consider recovery objectives for ASR.Walk through an example deployment. Note: Azure Site Recovery automates the replication and a range of failover tasks. By itself, however, it does not automatically trigger a failover. Failover isn't automatic; you need to trigger this manually through the portal or with other tools such as PowerShell.

Azure Backup

00:14:16

Lesson Description:

Azure Backup includes several options which help us protect our data across on-premises and cloud-based systems. Within this lesson we discuss: Recovery objectives with Azure Backup.Azure Backup backup agents.Configuration of backup policies.

Scenario: Site Recovery

00:05:39

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of site recovery. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design for High Availability

Introduction to High Availability

00:01:02

Lesson Description:

Welcome to the "High Availability" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section of the course.

High Availability Fundamentals

00:16:15

Lesson Description:

High availability is an important design consideration for any modern cloud application. Within this lesson, we discuss: What is high availability?How does high availabilitly compare to site recovery?What types of challenges will we face?What strategies can we use?How can we architect a highly available solution?

High Availability for Azure Data Centers

00:08:59

Lesson Description:

For any solution to be highly available, we need to ensure that each component is protected. In this lesson, we discuss the different approaches to protect our solution at the layer of the data center. We discuss: RegionsAvailability ZonesAvailability Sets Important Considerations for Availability Zones Availability Zones provide a 99.99% uptime SLA for virtual machines.Availability Sets provide a 99.95% uptime SLA for virtual machines.Both require at least two instances (of the same server role) to be deployed.Availability Zones also include automatic fault domains and update domains.

High Availability for Azure Storage and Services

00:12:04

Lesson Description:

Building on top of the data center high availability we've discussed so far, we now consider options for making Azure Storage and Services highly available. Within this lesson we: Discuss Azure Storage replication options.Walk through a recap of Azure Service high avialability. It is worth noting that the read-access storage replication options are not discussed in detail. While these options do not directly help with high availability, they do assist with scaling the read performance of applications that leverage Azure Storage.

High Availability for Connecting to Azure Services

00:17:53

Lesson Description:

When we architect a solution for high availability, we likely have redundant or duplicate services. In order to leverage this redundancy, we need to ensure connectivity from users or other services is distributed to healthy resources. Within this lesson we discuss services that support highly available connections to Azure services. We cover the following: Azure Load BalancerAzure Application GatewayAzure Traffic Manager

Scenario: High Availability

00:06:28

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence high availability. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design a Data Archiving Strategy

Introduction to Data Archiving

00:01:01

Lesson Description:

Welcome to the "Data Archiving" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section.

Archiving Fundamentals

00:14:46

Lesson Description:

Archiving is often a common requirement for many organizations, both big and small. Within this lesson, we discuss the following: Why we need to archive data.The data lifecycle.Common strategies for archive solutions.

Azure Blob Storage Archiving

00:16:11

Lesson Description:

With Azure Blob storage, we can leverage access tiers in order to architect an archiving solution. The three main access tiers are as follows: Hot: Fast, highly available storage.Cool: Fast, less available, cheaper storage.Archive: Offline storage very low in cost. Because the archive storage tier is completely offline, it is very low cost. To help understand how we can leverage blob storage for archiving, we discuss the following: Pricing and important properties of access tiers.Lifecycle management policies.Minimum storage durations.Rehydrating archived (i.e. offline) data. Using both the diagram and the Azure Portal, we discuss these features and see them in action.

Scenario: Data Archiving

00:05:19

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of an archive solution. This scenario is based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:45:00

Deployment, Migration, and Integration

Design Deployments

Introduction to Deployment Design

00:00:58

Lesson Description:

Welcome to the "Deployment Design" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section.

Deployment Fundamentals

00:13:56

Lesson Description:

Up to this point, this course has primarily focused on the design element of solution architecture. Within this section, we take a look at tools and techniques we can use to deploy solutions to Azure. In this lesson we discuss the following: Initial deployments and base architecture.Infrastructure as code.Configuration management.

Azure Resource Manager (ARM) Templates

00:17:26

Lesson Description:

ARM Templates are a powerful tool for defining infrastructure-as-code. This improves the manageability and consistency of solutions we deploy. Within this lesson we discuss: The key components of ARM templates.How to use parameter files.Use cases and scenarios. Tools used within this lesson: Azure Cloud ShellAzure CLIVisual Studio Code Commands used within this lesson: List contents within bash.

ls
Deploy from template using Azure CLI.
az group deployment create --resource-group testdeploy1-rg --template-file 
./templateAutoStorage.json --parameters ./templateAutoStorageParam.json
ARM Template used within this lesson: templateAutoStorage.json:
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
  "storageAccountType": {
    "type": "string",
    "defaultValue": "Standard_LRS",
    "allowedValues": [
      "Standard_LRS",
      "Standard_GRS",
      "Standard_ZRS",
      "Premium_LRS"
    ],
    "metadata": {
      "description": "Storage Account type"
    }
  },
  "location": {
    "type": "string",
    "defaultValue": "[resourceGroup().location]",
    "metadata": {
      "description": "Location for all resources."
    }
  }
},
"variables": {
  "storageAccountName": "[concat(uniquestring(resourceGroup().id), 'standardsa')]"
},
"resources": [
  {
    "type": "Microsoft.Storage/storageAccounts",
    "name": "[variables('storageAccountName')]",
    "apiVersion": "2018-02-01",
    "location": "[parameters('location')]",
    "sku": {
        "name": "[parameters('storageAccountType')]"
    },
    "kind": "Storage", 
    "properties": {
    }
  }
],
"outputs": {
    "storageAccountName": {
        "type": "string",
        "value": "[variables('storageAccountName')]"
    }
}
}
templateAutoStorageParam.json
{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
      "storageAccountType": {
          "value": "Standard_GRS"
      }
  }
}

Azure Automation

00:19:21

Lesson Description:

Azure Automation is a powerful cloud-based process automation tool that can be leveraged to automate our deployments. Within this lesson we discuss the following: Azure Automation capabilities.Azure Automation for deployments.Azure Automation for configuration management.

Scenario: Deployments

00:04:05

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of a deployment solution. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

02:00:00

Design Migrations

Introduction to Migration Design

00:01:09

Lesson Description:

Welcome to the "Migration Design" section of the course. This brief lesson provides an introduction and helps explain what to expect within this section.

Migration Fundamentals

00:14:08

Lesson Description:

An important task for many solution architects is planning a migration to Azure. Within this lesson, we discuss the following: Designing for migrations.Important design planning considerations.

Azure Migrate Overview - Part 1

00:13:13

Lesson Description:

Azure Migrate is a centralized hub that provides several tools to perform assessments and migrations for servers, data, databases, and applications. In this two-part series, we focus on server and database migration capabilities. Within this lesson, we discuss the following: Azure Migrate assessment tools.Azure Migrate migration tools.High-level configuration requirements.Server dependency visualzation with Azure Monitor Service Map. In part 2 of this lesson, we focus on the Azure Migrate functionality for databases. Useful links: Dependency visualization with Azure Monitor Service Map

Azure Migrate Overview - Part 2

00:19:19

Lesson Description:

In part two of this lesson on Azure Migrate, we focus on database migrations. We'll discuss both Azure Migrate as well as some other tools. Within this lesson, we discuss the following: Using the Azure Database Migration Service.SQL Data Migration Assistant.Azure Cosmos DB Data Migration tool.Azure Database Migration Guide.Recommendations for performance during migrations. Helpful links for this lesson: Azure Database Migration GuideAzure Cosmos DB Data Migration tool

Azure Import Export

00:05:55

Lesson Description:

There can be occasions where it's not practical to transfer data over a wide area network (WAN) connection (e.g. the Internet) to Azure. For example, we might need to copy massive volumes of archive data from on-premises to Azure. In these scenarios, it's useful to consider the Azure Import/Export service. In this lesson, we discuss the following: The purpose of the Azure Import/Export service.What an import job looks like.The import/export (WAImportExport) tool.Journal files for tracking multiple disk transfers.

Scenario: Migrations

00:04:02

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of a migration solution. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design an Integration Strategy

Introduction to Designing for Integration

00:01:23

Lesson Description:

Welcome to the "Design for Integration" section of this course. Within this lesson we briefly discuss what to expect within this section.

Integration Fundamentals

00:11:33

Lesson Description:

When architecting modern cloud applications, we often may want to decouple the different components so we can leverage different services and scale independently. When using this type of architecture, it's important to allow communication between services. Within this lesson we look at the following: The importance of integrating services.Monolithic and microservices architecture.Messaging pattern for integration.Application Programming Interfaces (API).Synchronous versus asynchronous communication. Helpful links from this lesson: Azure Resource Explorer

Azure API Management

00:11:56

Lesson Description:

Azure API Management supports a range of functionality to help manage the back-end services we develop. Within this lesson, we specifically focus on the following: Azure API Management overview.Azure API Management as an API Gateway.Managmement policies. Management policies are a powerful tool which help us with a range of functionality including access controls, performance, transformations, and more.

Azure Messaging Services Overview

00:04:20

Lesson Description:

When architecting decoupled applications, it's important we provide a method for different application components to communicate to one another. In this lesson, we walk through a quick summary of the main Azure messaging services, as well as important differences. Whether we need a simple REST-based messaging service or an advanced and highly capable service, Azure provides this flexibility. In this lesson, we discuss the following: Storage QueueService BusEvent GridEvent Hubs Helpful links: Choose between Azure messaging servicesStorage queues and Service Bus queues - compared and contrasted

Scenario: Integration

00:04:30

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of integration within a solution. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design for Infrastructure

Design a Storage Strategy

Introduction to Storage Infrastructure Design

00:00:50

Lesson Description:

Welcome to the "Storage Infrastructure Design" section of the course. Within this lesson we briefly discuss what to expect within this section.

Storage Design Fundamentals

00:12:20

Lesson Description:

So many solutions we architect within the cloud or on-premises are going to require storage. Storage is a common and crucial component. That being said, different solutions have different needs. For this reason, there are different storage systems. Within this lesson we discuss the following: Block-level storageFile-level storageObject-level storageNetwork access (iSCSI, SMB, etc.)Use cases and important considerations

StorSimple

00:11:19

Lesson Description:

Azure StorSimple is a hybrid cloud storage solution. Using a StorSimple array, on-premises servers can get access to block-level storage that is backed by Azure. In this lesson we: Discuss the StorSimple service.Consider user cases.Walk through an example deployment.

Azure Files

00:07:58

Lesson Description:

Azure Files is a cloud-based, file-sharing solution which requires no additional infrastructure. With Azure Files we can connect Windows, Mac, or Linux devices directly to the Azure file shares over SMB. This provides traditional file-server-like functionality with a folder hierarchy, properties, and so on. Within this lesson we discuss the following: Azure FilesConnectivitySecurity and authorization

Azure File Sync

00:08:45

Lesson Description:

Azure File Sync is combined with traditional on-premises file servers to provide storage and access backed by Azure Files. In this lesson we discuss the following: The purpose of Azure File Sync.The configuration and use of on-premise servers.

Storage Accounts and Blob Refresher

00:05:30

Lesson Description:

In this lesson, we walk through a refresher of: Blob storage.Security capabilities.Management tools.Storage account services.Use cases.

Scenario: Storage

00:04:19

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of a storage strategy. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

00:30:00

Design a Compute Strategy

Introduction to Compute Design

00:01:10

Lesson Description:

Welcome to the "Compute Design" section of the course. Within this lesson we briefly discuss what to expect within this section.

High Performance Compute Fundamentals

00:11:31

Lesson Description:

In this lesson, we walk through a high-level overview of high performance compute (HPC) to get a better understanding of how and why we build HPC solutions. In this lesson we discuss the following: The purpose of HPC.Key components of HPC.Types of HPC workloads.Important design considerations.

Azure Compute Design Considerations

00:06:59

Lesson Description:

This lesson is intended to provide a recap of knowledge we covered so far within AZ-300 and AZ-301. In this lesson, we recap: Virtual machines.Application hosting.Containers. Then we discuss: Design considerations for compute.The Microsoft compute decision tree. Helpful links for this lesson: Microsoft compute decision tree

Design for Virtual Machines

00:06:36

Lesson Description:

In this lesson, we recap and discuss a range of important considerations for using virtual machines within a solution. We discuss the following: Virtual machine use cases.VM series.VM security. We also take a look at Azure Security Center and specifically the use of just-in-time (JIT) VM access. Helpful links: Azure virtual machine SLAAzure virtual machine series

Design for Containers

00:09:14

Lesson Description:

In this lesson, we recap and discuss a range of important considerations when using containers. We discuss: Azure Container Registry.Azure Container Instances.Azure Kubernetes Service.Azure Service Fabric. The purpose of this discussion is to gain an appreciation of when to use each of the services. We also take a brief look at some key security considerations for containers where applicable.

Design for Azure App Service

00:07:18

Lesson Description:

This lesson is intended to provide a recap of knowledge we gained for AZ-300 and AZ-301 so far. In this lesson we recap: Azure App Service.Azure App Service Environment. The focus of our discussion is on: Understanding when to use different services.Understanding important differences with different plans.Important security and design considerations. Helpful links for this lesson: Microsoft compute decision tree

Design for Function Apps

00:05:53

Lesson Description:

This lesson is intended to provide a recap of knowledge we shared within AZ-300 and some new key design considerations. In this lesson, we discuss Azure Function Apps. Our discussion focuses on: Understanding the purpose and use cases.Important pricing considerations.Important security considerations.

Design for High Performance Compute on Azure - Part 1

00:09:02

Lesson Description:

To help introduce a range of concepts relating to high performance compute (HPC), we walk through a demonstration. In this demonstration we: Configure a pool within Azure Batch.Create a rendering job using Bender.Review node status.Review job output. This demonstration follows along with a Microsoft Azure Batch rendering tutorial using Batch Explorer.

Design for High Performance Compute on Azure - Part 2

00:11:29

Lesson Description:

Within this second lesson of the two-part series on high performance compute (HPC), we focus more on various Azure HPC-related services and design considerations. The discussion focuses on: Azure Batch.Azure CycleCloud.Microsoft HPC Pack.VM series relating to HPC. We also discuss a range of design considerations such as: RDMA network.Custom images for HPC.Proximity placement groups.Parallel task execution.

Scenario: Compute

00:06:42

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of a compute strategy. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Design a Networking Strategy

Introduction to Network Infrastructure Design

00:00:56

Lesson Description:

Welcome to the "Network Design" section of the course. Within this lesson, we briefly discuss what to expect within this section.

Networking Concepts Refresher

00:07:14

Lesson Description:

In this brief lesson, we recap a range of networking concepts relating to the cloud. We discuss: Cloud networking.Integrated networks.Hybrid connectivity. We also cover some important design considerations such as protocols, network virtual appliances, and forced tunneling.

Design for Virtual Networks

00:09:59

Lesson Description:

Within this refresher lesson we walk through a recap of some important Azure networking services. In this lesson we discuss: Virtual networks.Routing and route customization.Network security.

Design for Integrated Networks

00:05:19

Lesson Description:

Within this refresher lesson, we walk through a recap of some important Azure network integration services. In this lesson, we discuss: Service endpoints.Virtual network peering. Helpful links: Service endpoints

Design Networking for Azure Services

00:09:39

Lesson Description:

Within this lesson, we walk through a range of important design considerations for networking Azure services. In this lesson, we discuss networking for: Virtual machines.Containers.App service.Data platforms. Please also see important considerations for Integrating App Service with a Virtual Network.

Design for Hybrid Networking

00:05:19

Lesson Description:

Within this lesson, we walk through a recap of some important Azure networking services and also consider hybrid connectivity for several Azure services. In this lesson, we discuss: Virtual private networking.ExpressRoute.Hybrid connectivity for the following services: Virtual machinesContainersApp serviceData platforms

Scenario: Networking

00:03:19

Lesson Description:

In this scenario, we practice assessing requirements and architecting a solution based on elements that can influence the design of a network strategy. This is a scenario based on a fictitious company called The Pupper Camp (TPC). TPC is looking to move to Azure and has a range of requirements we must meet. This is the one of many scenarios where we: Walk through information on the current state and goals.Perform an assessment of the requirements.Discuss a possible solution. Please be aware this is just one possible scenario and one possible solution.

Hands-on Labs are real live environments that put you in a real scenario to practice what you have learned without any other extra charge or account to manage.

01:30:00

Design a Monitoring Strategy for Infrastructure

Introduction to Infrastructure Monitoring

00:00:46

Lesson Description:

Welcome to the "Infrastructure Monitoring" section of the course. Within this lesson we briefly discuss what to expect within this section.

Infrastructure Monitoring and Metrics

00:15:34

Lesson Description:

Within this lesson, we take a look at: Monitoring virtual machines with Log Analytics.Alerts within Log Analytics.Network monitoring. Please note: Systems Center Operations Manager (SCOM) is outside the scope of this course. SCOM is a Microsoft on-premsies monitoring solution. Helpful links: Overview of Azure monitoring agents

Course Conclusion

Final Steps

Course Completion and How to Prepare for the Exam

00:05:01

Lesson Description:

Awesome work everyone! Congratulations on completing the AZ-301: Microsoft Azure Architect Design course! So, what's next? Most (if not all) students should take and pass the AZ-301 exam. This video shows what to expect from the exam and how to best prepare. Helpful links: Microsoft Azure AZ-301 ExamMicrosoft exam question types

AZ-301: Microsoft Azure Architect Design - FINAL EXAM

01:30:00

Take this course and learn a new skill today.

Transform your learning with our all access plan.

Start 7-Day Free Trial