Microsoft Azure Cloud Architect Master's Program

In this Lecture, you will learn how to secure identities with Azure Active Directory, and implement users and groups.

·      Lessons

·      Azure Active Directory

·      Users and Groups

·      Lab: Manage Azure Active Directory Identities

·      After completing this Lecture, students will be able to:

·      Secure and manage identities with Azure Active Directory.

·      Implement and manage users and groups.

In this Lecture, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

·      Lessons

·      Subscriptions and Accounts

·      Azure Policy

·      Role-based Access Control (RBAC)

·      Lab: Manage Subscriptions and RBAC

·      Lab: Manage Governance via Azure Policy

·      After completing this Lecture, students will be able to:

·      Implement and manage Azure subscriptions and accounts.

·      Implement Azure Policy, including custom policies.

·      Use RBAC to assign permissions.

In this Lecture, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. This Lecture includes:

·      Lessons

·      Azure Resource Manager

·      Azure Portal and Cloud Shell

·      Azure PowerShell and CLI

·      ARM Templates

·      Lab: Manage Azure resources by Using the Azure Portal

·      Lab: Manage Azure resources by Using ARM Templates

·      Lab: Manage Azure resources by Using Azure PowerShell

·      Lab: Manage Azure resources by Using Azure CLI

·      After completing this Lecture, students will be able to:

·      Leverage Azure Resource Manager to organize resources.

·      Use the Azure Portal and Cloud Shell.

·      Use Azure PowerShell and CLI.

·      Use ARM Templates to deploy resources.

In this Lecture, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS,

·      Lessons

·      Virtual Networks

·      IP Addressing

·      Network Security groups

·      Azure Firewall

·      Azure DNS

·      Lab: Implement Virtual Networking

·      After completing this Lecture, students will be able to:

·      Implement virtual networks and subnets.

·      Configure public and private IP addressing.

·      Configure network security groups.

·      Configure Azure Firewall.

·      Configure private and public DNS zones.

In this Lecture, you will learn about intersite connectivity features including VNet Peering, Virtual Network Gateways, and Site-to-Site Connections

·      Lessons

·      VNet Peering

·      VPN Gateway Connections

·      ExpressRoute and Virtual WAN

·      Lab: Implement Intersite Connectivity

·      After completing this Lecture, students will be able to:

·      Configure VNet Peering.

·      Configure VPN gateways.

·      Choose the appropriate intersite connectivity solution.

In this Lecture, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

·      Lessons

·      Network Routing and Endpoints

·      Azure Load Balancer

·      Azure Application Gateway

·      Traffic Manager

·      Lab: Implement Traffic Management

·      After completing this Lecture, students will be able to:

·      Configure network routing including custom routes and service endpoints.

·      Configure an Azure Load Balancer.

·      Configure and Azure Application Gateway.

·      Choose the appropriate network traffic solution.

In this Lecture, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

·      Lessons

·      Storage Accounts

·      Blob Storage

·      Storage Security

·      Azure Files and File Sync

·      Managing Storage

·      Lab: Manage Azure storage

·      After completing this Lecture, students will be able to:

·      Create Azure storage accounts.

·      Configure blob containers.

·      Secure Azure storage.

·      Configure Azure files shares and file sync.

·      Manage storage with tools such as Storage Explorer.

In this Lecture, you will learn about Azure virtual machines including planning, creating, availability and extensions.

·      Lessons

·      Virtual Machine Planning

·      Creating Virtual Machines

·      Virtual Machine Availability

·      Virtual Machine Extensions

·      Lab: Manage virtual machines

·      After completing this Lecture, students will be able to:

·      Plan for virtual machine implementations.

·      Create virtual machines.

·      Configure virtual machine availability, including scale sets.

·      Use virtual machine extensions.

In this Lecture, you will learn administer serverless computing features like Azure App Service, Azure Container Instances, and Kubernetes.

·      Lessons

·      Azure App Service Plans

·      Azure App Service

·      Container Services

·      Azure Kubernetes Service

·      Lab: Implement Web Apps

·      Lab: Implement Azure Container Instances

·      Lab : Implement Azure Kubernetes Service

·      After completing this Lecture, students will be able to:

·      Create an app service plan.

·      Create a web app.

·      Implement Azure Container Instances.

·      Implement Azure Kubernetes Service

In this Lecture, you will learn about backing up files and folders, and virtual machine backups.

·      Lessons

·      File and Folder Backups

·      Virtual Machine Backups

·      Lab: Implement Data Protection

·      After completing this Lecture, students will be able to:

·      Backup and restore file and folders.

·      Backup and restore virtual machines

In this Lecture, you will learn about monitoring your Azure infrastructure including Azure Monitor, alerting, and log analytics.

·      Lessons

·      Azure Monitor

·      Azure Alerts

·      Log Analytics

·      Network Watcher

·      Lab: Implement Monitoring

·      After completing this Lecture, students will be able to:

·      Use Azure Monitor.

·      Create Azure alerts.

·      Query using Log Analytics.

·      Use Network Watcher.

Students will learn how to build a web application on the Azure App Service platform. They will learn how the platform functions and how to create, configure, scale, secure, and deploy to the App Service platform.

·      Lessons

·      Azure App Service core concepts

·      Creating an Azure App Service Web App

·      Configuring and Monitoring App Service apps

·      Scaling App Service apps

·      Azure App Service staging environments

This Lecture covers creating Functions apps, and how to integrate triggers and inputs/outputs in to the app.

·      Lessons

·      Azure Functions overview

·      Developing Azure Functions

·      Implement Durable Functions

Students will learn how Azure Blob storage works, how to manage data through the hot/cold/archive blob storage lifecycle, and how to use the Azure Blob storage client library to manage data and metadata.

·      Lessons

·      Azure Blob storage core concepts

·      Managing the Azure Blob storage lifecycle

·      Working with Azure Blob storage

Students will learn how Cosmos DB is structured and how data consistency is managed. Students will also learn how to create Cosmos DB accounts and create databases, containers, and items by using a mix of the Azure Portal and the .NET SDK.

·      Lessons

·      Azure Cosmos DB overview

·      Azure Cosmos DB data structure

·      Working with Azure Cosmos DB resources and data

This Lecture instructs students on how to use create VMs and container images to use in their solutions. It covers creating VMs, using ARM templates to automate resource deployment, create and manage Docker images, publishing an image to the Azure Container Registry, and running a container in Azure Container Instances.

·      Lessons

·      Provisioning VMs in Azure

·      Create and deploy ARM templates

·      Create container images for solutions

·      Publish a container image to Azure Container Registry

·      Create and run container images in Azure Container Instances

Students will learn how to leverage the Microsoft Identity Platform v2.0 to manage authentication and access to resources. Students will also learn how to use the Microsoft Authentication Library and Microsoft Graph to authenticate a user and retrieve information stored in Azure, and how and when to use Shared Access Signatures.

·      Lessons

·      Microsoft Identity Platform v2.0

·      Authentication using the Microsoft Authentication Library

·      Using Microsoft Graph

·      Authorizing data operations in Azure Storage

This Lecture covers how to secure the information (keys, secrets, certificates) an application uses to access resources. It also covers securing application configuration information.

·      Lessons

·      Manage keys, secrets, and certificates by using the KeyVault API

·      Implement Managed Identities for Azure resources

·      Secure app configuration data by using Azure App Configuration

Students will learn how to publish APIs, create policies to manage information shared through the API, and to manage access to their APIs by using the Azure API Management service.

·      Lessons

·      API Management overview

·      Defining policies for APIs

·      Securing your APIs

This Lecture teaches students how to use Azure Logic Apps to schedule, automate, and orchestrate tasks, business processes, workflows, and services across enterprises or organizations.

·      Lessons

·      Azure Logic Apps overview

·      Creating custom connectors for Logic Apps

Students will learn how to build applications with event-based architectures.

·      Lessons

·      Implement solutions that use Azure Event Grid

·      Implement solutions that use Azure Event Hubs

·      Implement solutions that use Azure Notification Hubs

Students will learn how to build applications with message-based architectures.

·      Lessons

·      Implement solutions that use Azure Service Bus

·      Implement solutions that use Azure Queue Storage queues

This Lecture teaches students how to instrument their code for telemetry and how to analyze and troubleshoot their apps.

·      Lessons

·      Overview of monitoring in Azure

·      Instrument an app for monitoring

·      Analyzing and troubleshooting apps

·      Implement code that handles transient faults

Students will learn how to use different caching services to improve the performance of their apps.

·      Lessons

·      Develop for Azure Cache for Redis

·      Develop for storage on CDNs

In this Lecture, you will learn about Azure virtual machines including planning, creating, availability and extensions. This Lecture includes:

·      Lessons

·      Select Virtual Machine Size

·      Configure High Availability

·      Implement Azure Dedicated Hosts

·      Deploy and Configure Scale Sets

·      Configure Azure Disk Encryption

·      After completing this Lecture, students will be able to:

·      Plan for virtual machine implementations.

·      Create virtual machines.

·      Configure virtual machine availability, including scale sets.

·      Understand High Availability options for VMs in Azure

In this Lecture, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. This Lecture includes:

·      Lessons

·      Azure Resource Manager Templates

·      Save a Template for a VM

·      Evaluate Location of New Resources

·      Configure a Virtual Hard Disk Template

·      Deploy from a Template

·      Create and Execute an Automation Runbook

·      After completing this Lecture, students will be able to:

·      Leverage Azure Resource Manager to organize resources.

·      Use ARM Templates to deploy resources.

·      Create and Execute an Automation Runbook

·      Deploy an Azure VM from a VHD

·      Understand Azure encryption technologies

In this Lecture, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.

·      Lessons

·      Virtual Network Peering

·      Implement VNet Peering

·      After completing this Lecture, students will be able to:

·      Connect services with Virtual Network Peering

·      Configure VNet Peering

·      Understand Service Chaining

·      Modify or delete VNet Peering

In this Lecture, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

·      Lessons

·      Implement Azure Load Balancer

·      Implement an Application Gateway

·      Understand Web Application Firewall

·      Implement Azure Firewall

·      Implement Azure Front Door

·      Implementing Azure Traffic Manager

·      Implement Network Security Groups and Application Security Ground

·      Implement Azure Bastion

·      After completing this Lecture, students will be able to:

·      Select a Load Balancer solution

·      Configure Application Gateway

·      Implement Azure Firewall

·      Create an Azure Front Door

·      Understand Traffic Manager routing methods

·      Configure Network Security Groups (NSGs)

In this Lecture, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

·      Lessons

·      Storage Accounts

·      Blob Storage

·      Storage Security

·      Managing Storage

·      Accessing Blobs and Queues using AAD

·      Configure Azure Storage Firewalls and Virtual Networks

·      After completing this Lecture, students will be able to:

·      Understand Storage Account services and types

·      Configure Blob storage, accounts, containers, and access tiers

·      Implement Shared Access Signatures

·      Understand Azure Storage firewalls and virtual networks

In this Lecture, you will learn how to secure identities with Azure Active Directory, and implement users and groups.

·      Lessons

·      Overview of Azure Active Directory

·      Users and Groups

·      Domains and Custom Domains

·      Azure AD Identity Protection

·      Implement Conditional Access

·      Configure Fraud Alerts for MFA

·      Implement Bypass Options

·      Configure Trusted IPs

·      Configure Guest Users in Azure AD

·      Manage Multiple Directory

·      After completing this Lecture, students will be able to:

·      Understand how Multiple AAD organizations interact

·      Add Guest Users to Azure AD

·      Configure Location Condition Configuration

·      Configure Azure MFA settings

·      Implement Conditional Access Azure MFA

In this Lecture, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

·      Lessons

·      Create Management Groups, Subscriptions, and Resource Groups

·      Overview of Role-Based Access Control (RBAC)

·      Role-Based Access Control (RBAC) Roles

·      Azure AD Access Reviews

·      Implement and Configure an Azure Policy

·      Azure Blueprints

·      After completing this Lecture, students will be able to:

·      Understand Resource Group 0rganization

·      Understand how RBAC works

·      Create an Azure AD access review

·      Create and manage policies to enforce compliance

·      Create a Blueprint

In this Lecture, you will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health.

·      Lessons

·      Install and Configure Azure AD Connect

·      Configure Password Sync and Password Writeback

·      Configure Azure AD Connect Health

·      After completing this Lecture, students will be able to:

·      Implement Azure AD seamless Single Sign-On

·      Perform an Azure AD Connect installation

·      Implement Azure AD Connect Health

In this Lecture, you will learn how to migrate workloads using Azure Migrate, perform VMware agent-based and agent-less migrations, and perform Azure Backup and Azure Site Recovery.

·      Lessons

·      Migrate Workloads using Azure Migrate

·      VMware - Agentless Migration

·      VMware - Agent-Based Migration

·      Implement Azure Backup

·      Azure to Azure Site Recovery

·      Implement Azure Update Management

·      After completing this Lecture, students will be able to:

·      Understand agent-based migration architecture

·      Prepare for Azure for migration

·      Prepare an on-premises VMware environment

·      Understand Azure VM backup architecture

·      Manage updates and patches for Azure VMs

In this Lecture, you will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, Azure Application Insights.

·      Lessons

·      Azure Infrastructure Security Monitoring

·      Azure Monitor

·      Azure Workbooks

·      Azure Alerts

·      Log Analytics

·      Network Watcher

·      Azure Service Health

·      Monitor Azure Costs

·      Azure Application Insights

·      Unified Monitoring in Azure

In this Lecture, you will learn about Azure Key Vault and implementing authentication using Azure Managed Identities.

·      Lessons

·      Azure Key Vault

·      Azure Managed Identity

·      After completing this Lecture, students will be able to:

·      Explain Key Vault uses such as secrets, key, and Certificates management

·      Use Managed Identities with Azure resources

In this Lecture, you will learn how to create an App Service web App for Containers, create and configure an App Service Plan, and create and manage Deployment Slots.

·      Lessons

·      Create and Configure Azure App Service

·      Create an App Service Web App for Containers

·      Create and Configure an App Service Plan

·      Configure Networking for an App Service

·      Create and Manage Deployment Slots

·      Implement Logic Apps

·      Implement Azure Functions

·      After completing this Lecture, students will be able to:

·      Configure an Azure App Service

·      Create an App Service Plan

·      Create a Workflow using Azure Logic Apps

·      Create a Function App

In this Lecture, you will learn how to run Azure Container instances and how to deploy Kubernetes with AKS.

·      Lessons

·      Azure Container Instances

·      Configure Azure Kubernetes Service

·      After completing this Lecture, students will be able to:

·      Run Azure Container instances

·      Deploy Kubernetes with AKS

In this Lecture, you will learn about Azure Table Storage and recommend options for CosmsoDB APIs.

·      Lessons

·      Configure Storage Account Tables

·      Select Appropriate CosmosDB APIs

·      After completing this Lecture, students will be able to:

·      Outline the Table Service Data Model

·      Understand options for Azure Cosmos DB

·      Understand high availability using CosmosDB

In this Lecture, you will create an Azure SQL Database single database, create an Azure SQL Database Managed Instance, and review high-availability and Azure SQL database.

·      Lessons

·      Configure Azure SQL Database Settings

·      Implement Azure SQL Database Managed Instances

·      High-Availability and Azure SQL Database

·      After completing this Lecture, students will be able to:

·      Create an Azure SQL Database single database

·      Create an Azure SQL Database Managed Instance

·      Recommend high-availability architectural models used in Azure SQL Database

In this Lecture, you will learn how to optimize costs from recommendations, breakdown costs by Azure Service, and download and review usage details. 01-View

·      Lessons

·      Recommend Solutions for Cost Management

·      Recommended Viewpoints for Minimizing Costs

·      After completing this Lecture, students will be able to:

·      Optimize with Azure Cost Management.

·      Design with Cost in mind

·      Optimize Costs from recommendations

In this Lecture, you will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. You will be able to monitor Azure Resources with Azure Monitor and collect and analyze resource Logs for Azure.

·      Lessons

·      Azure Monitoring Services

·      Azure Monitor

·      After completing this Lecture, students will be able to:

·      Monitor Azure resources with Azure Monitor

·      Collect and analyze Resource Logs for Azure resources

·      Understand how Azure Sentinel collects data on the devices, users, infrastructure, and applications

In this Lecture, you will learn to implement Conditional Access and Azure Multi-Factor Authentication and also be able to recommend an Authentication Methodology for Hybrid Identity.

·      Lessons

·      Recommend a Solution for Multi-Factor Authentication

·      Recommend a Solution for Single-Sign On (SSO)

·      Five Steps for Securing Identity Infrastructure

·      Recommend a Solution for a Hybrid Identity

·      Recommend a Solution for B2B Integration

·      After completing this Lecture, students will be able to:

·      Plan for a MFA Deployment

·      Understand Azure Active Directory Seamless Single Sign-On (SSO)

·      Recommend an Authentication Methodology for Hybrid Identity

·      Integrate with Identity Providers

In this Lecture, you will learn how to provide Identities to services and understand the hierarchy of Management Groups and Subscriptions

·      Lessons

·      Infrastructure Protection

·      Recommend a Hierarchical Structure for Management Groups, Subscriptions and

·      Resource Groups

·      After completing this Lecture, students will be able to:

·      Recommend hierarchy of Management Groups and Subscriptions.

·      Configure custom RBAC Role definitions and assignments

In this Lecture, you will learn apply an Azure Policy, Identify noncompliant resources, and manage tag governance with Azure Policy.

·      Lessons

·      Recommend a Solution for using Azure Policy

·      Recommend a Solution for using Azure Blueprint

·      After completing this Lecture, students will be able to:

·      Organize Policies with Initiatives

·      Manage Tag Governance with Azure Policy

·      Provide guidance on Azure Blueprints

In this Lecture, you will understand Azure Key Vault availability and redundancy, managed Identities for Azure resources. Also, learn about system-assigned Managed Identity and Azure VMs.

·      Lessons

·      Recommend a Solution using Key Vault

·      Recommend a Solution using Azure AD Managed Identities

·      After completing this Lecture, students will be able to:

·      Understand Key Vault authentication and authorization

·      Understand Azure Key Vault availability and redundancy

·      Understand how Blueprints differ from Resource Manager Templates and Azure Policy

In this Lecture, you will be able to recommend the appropriate data store and recommend Azure SQL Database and Azure SQL Managed Instance Service tiers.

·      Lessons

·      Select an Appropriate Data Platform Based on Requirements

·      Overview of Azure Data Storage

·      Recommend Database Service Tier Sizing

·      Dynamically Scale Azure SQL Database and Azure SQL Managed Instances

·      Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use

·      After completing this Lecture, students will be able to:

·      Recommend Database Service Tier Sizing

·      Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use

·      Understand Azure Data Lake Store and Azure Blob Storage containers

In this Lecture, you will learn about data flows using Azure Data Factory and Azure Synapse Analytics architecture.

·      Lessons

·      Recommend a Data Flow

·      Recommend a Solution for Data Integration

·      After completing this Lecture, students will be able to:

·      Implement Azure Synapse Analytics

·      Describe how data flows using Azure Data Factory

·      Demonstrate how to use Azure Data Factory to load data into SQL Data Warehouse

In this Lecture, you will learn about recommend a design a strategy for using tiered storage and manage tiered Storage using Azure tools.

·      Lessons

·      Understanding Storage Tiers

·      Recommend a Storage Access Solution

·      Recommend Storage Management Tools

·      After completing this Lecture, students will be able to:

·      Recommend tools for working with Azure Storage

·      Design for Azure Blob Storage access tiers

In this Lecture, you will learn about solutions for site recovery capacity and site failover and failback. You will be able to recommend solutions for recovery in different regions.

·      Lessons

·      Recommend a Recovery Solution for Hybrid and On-Premises Workloads

·      Design and Azure Site Recovery Solution

·      Recommend a Solution for Recovery in Different Regions

·      Recommend a Solution for Azure Backup Management

·      Design a Solution for Data Archiving and Retention

·      After completing this Lecture, students will be able to:

·      Recommend solutions for Azure hybrid and on-premises workloads that meets recovery objectives

·      Recommend a solution for site recovery capacity

·      Recommend storage types and methodology for data archiving

·      Identify requirements for data archiving

In this Lecture, you will learn about solutions for application and workload redundancy, including compute, database, and storage.

·      Lessons

·      Recommend a Solution for Application and Workload Redundancy

·      Recommend a Solution for Auto-scaling

·      Identify Resources that Require High Availability

·      Identify Storage Types for High Availability

·      Recommend a Solution for Geo-Redundancy of Workloads

·      After completing this Lecture, students will be able to:

·      Recommend a solutions for auto-scaling

·      Identify storage types for high availability

·      Recommend a solutions for geo-redundancy of workloads

In this Lecture, you will learn about the appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.

·      Lessons

·      Recommend a Solution for Compute Provisioning

·      Determine Appropriate Compute Technologies

·      Recommend a Solution for Containers

·      Recommend a Solution for Automating Compute Management

·      After completing this Lecture, students will be able to:

·      Refer solution for automating compute management

·      Recommend the appropriate compute technologies, including virtual machines, and App Services

·      Recommend the appropriate AKS and ACI and the configurations

In this Lecture, you will learn about solutions for network addressing and name resolution, network provisioning, and network security.

·      Lessons

·      Recommend a Solution for Network Addressing and Name Resolution

·      Recommend a Solution for Network Provisioning

·      Recommend a Solution for Network Security

·      Recommend a Solution for Internet Connectivity and OnPremises Networks

·      Recommend a Solution for Automating Network Management

·      Recommend a Solution for Load Balancing and Traffic Routing

·      After completing this Lecture, students will understand:

·      Solutions for network addressing and name resolution

·      Solutions for network security including private endpoints, firewalls, and gateways

·      Recommendations for network connectivity to the Internet, on premises networks, and other VNets.

·      Recommendations for load balancing and traffic routing

In this Lecture, you will learn about solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions. You will also learn about micro services architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and web-hooks.

·      Lessons

·      Recommend a Micro services Architecture

·      Recommend an Orchestration Solution for Deployment of Applications

·      Recommend a Solution for API Integration

·      After completing this Lecture, students will be able to:

·      Recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions

·      Recommend a solution for monitoring automation

·      Recommend a hosting structure for API management

In this Lecture, you will learn about recommend a solution for migrating applications and VMs and a solution for migration of databases.

·      Lessons

·      Assess and On-Premises Servers and Applications for Migration

·      Recommend a Solution for Migrating Applications and VMs

·      Recommend a Solution for Migration of Databases

·      After completing this Lecture, students will be able to:

·      Assess on-premises servers and applications for migration

·      Suggest solutions for migrating applications and VMs

·      Determine migration scope, including redundant, related, trivial, and out-dated data