Governance and Compliance

In this module, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

Lessons

• Subscriptions and Accounts
• Azure Policy
• Role-based Access Control (RBAC)

Lab : Manage Subscriptions and RBAC

Lab : Manage Governance via Azure Policy

After completing this module, students will be able to:

• Implement and manage Azure subscriptions and accounts.
• Implement Azure Policy, including custom policies.
• Use RBAC to assign permissions.

Azure Administration

In this module, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. This module includes:

Lessons

• Azure Resource Manager
• Azure Portal and Cloud Shell
• Azure PowerShell and CLI
• ARM Templates

Lab : Manage Azure resources by Using the Azure Portal

Lab : Manage Azure resources by Using ARM Templates

Lab : Manage Azure resources by Using Azure PowerShell

Lab : Manage Azure resources by Using Azure CLI

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources.
• Use the Azure Portal and Cloud Shell.
• Use Azure PowerShell and CLI.
• Use ARM Templates to deploy resources.

Virtual Networking

In this module, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.

Lessons

• Virtual Networks
• IP Addressing
• Network Security groups
• Azure Firewall
• Azure DNS

Lab : Implement Virtual Networking

After completing this module, students will be able to:

• Implement virtual networks and subnets.
• Configure public and private IP addressing.
• Configure network security groups.
• Configure Azure Firewall.
• Configure private and public DNS zones.

Intersite Connectivity

In this module, you will learn about intersite connectivity features including VNet Peering, Virtual Network Gateways, and Site-to-Site Connections.

Lessons

• VNet Peering
• VPN Gateway Connections
• ExpressRoute and Virtual WAN

Lab : Implement Intersite Connectivity

After completing this module, students will be able to:

• Configure VNet Peering.
• Configure VPN gateways.
• Choose the appropriate intersite connectivity solution.

Network Traffic Management

In this module, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

Lessons

• Network Routing and Endpoints
• Azure Load Balancer
• Azure Application Gateway
• Traffic Manager

Lab : Implement Traffic Management

After completing this module, students will be able to:

• Configure network routing including custom routes and service endpoints.
• Configure an Azure Load Balancer.
• Configure and Azure Application Gateway.
• Choose the appropriate network traffic solution.

Azure Storage

In this module, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

Lessons

• Storage Accounts
• Blob Storage
• Storage Security
• Azure Files and File Sync
• Managing Storage

Lab : Manage Azure storage

After completing this module, students will be able to:

• Create Azure storage accounts.
• Configure blob containers.
• Secure Azure storage.
• Configure Azure files shares and file sync.
• Manage storage with tools such as Storage Explorer.

Azure Virtual Machines

In this module, you will learn about Azure virtual machines including planning, creating, availability and extensions.

Lessons

• Virtual Machine Planning
• Creating Virtual Machines
• Virtual Machine Availability
• Virtual Machine Extensions

Lab : Manage virtual machines

After completing this module, students will be able to:

• Plan for virtual machine implementations.
• Create virtual machines.
• Configure virtual machine availability, including scale sets.
• Use virtual machine extensions.

Serverless Computing

In this module, you will learn administer serverless computing features like Azure App Service, Azure Container Instances, and Kubernetes.

Lessons

• Azure App Service Plans
• Azure App Service
• Container Services
• Azure Kubernetes Service

Lab : Implement Web Apps

Lab : Implement Azure Container Instances

Lab : Implement Azure Kubernetes Service

After completing this module, students will be able to:

• Create an app service plan.
• Create a web app.
• Implement Azure Container Instances.
• Implement Azure Kubernetes Service.

Data Protection

In this module, you will learn about backing up files and folders, and virtual machine backups.

Lessons

• File and Folder Backups
• Virtual Machine Backups

Lab : Implement Data Protection

After completing this module, students will be able to:

• Backup and restore file and folders.
• Backup and restore virtual machines.

Monitoring

In this module, you will learn about monitoring your Azure infrastructure including Azure Monitor, alerting, and log analytics.

Lessons

• Azure Monitor
• Azure Alerts
• Log Analytics
• Network Watcher

Lab : Implement Monitoring

After completing this module, students will be able to:

• Use Azure Monitor.
• Create Azure alerts.
• Query using Log Analytics.
• Use Network Watcher.

AWS EC2

• EC2 Types
• Launching EC2 Instances
• EBS Volumes & Types
• EBS Encryption
• Creating AMIs
• EBS Snapshots & AMIs
• Summary of EC2 Services
• Exam Essentials

AWS VPC

• Virtual Private Cloud Basics
• Subnets
• Route Tables
• Security Groups (ACLs & NACL)
• Internet Gateways
• Bastion Host/NAT Instances
• NAT Gateways
• Lab Exercise Create a NAT Gateway and Associate it with EC2 Instances.
• EIP & ENIs
• VPG, CGW, VPN
• VPC Peering
• AWS Direct Connect
• Summary
• Exam Essentials

AWS Elastic Load Balancing

• LB Types : Classic & Application LB
• Load Balancer Configurations

AWS CloudWatch

• Standard Vs Detailed
• Exam Tips

AWS Auto Scaling

• Launch Configurations
• BootStrapping
• Scaling Groups
• Scaling Policies
• Building Fault Tolerant & Highly Available Applications
• Summary of Autoscaling and Cloudwatch
• Exam Essentials

AWS S3

• Object Vs Block Storage
• S3 Basics
• Bucket Policies & Access Control Lists
• Versioning & Transfer Acceleration
• Static Web Hosting
• S3 Advanced Features
• Versioning
• Cross Region Replication
• CORS
• Transfer Acceleration
• Multipart Upload
• LifeCycle Policies
• AWS Glacier
• Archives
• Vaults
• AWS Cloud Front (CDN)

AWS Route53

• Domain Name Services
• Amazons Route53 Overview
• Hosted Zones
• Record Sets
• Routing Policies
• DNS Failover with S3 and CDN
• Exam Essentials

Database Services

• AWS RDS
• Read Replica
• Snapshots
• Restoring Snapshots
• Multi-AZ Deployment
• Exam Tips on RDS
• AWS DynamoDB (NoSQL DB)
• AWS RedShift
• AWS Storage Gateways
• AWS EFS
• Summary of Database Services
• Exam Tips on Database Services

AWS Other Services

• AWS SQS
• AWS SWF
• AWS SNS
• Exam Tips on SQS, SNS, SWF
• AWS ElastiCache
• Redis
• Memcached
• Exam Tips on Elasticache
• Storage & Content Delivery
• Analytics
• ElasticMapReduce
• DevOps
• AWS ElasticBeanStalk
• AWS CloudFormation
• AWS ElasticContainerServices (ECS)
• Exam Tips on DevOps services
• AWS CloudTrail
• AWS ElasticSearch
• AWS Trusted Advisor
• AWS Workspace
• Exam Essentials

Understanding GCP Core Principles Services, Projects, and Resources:

• Services
• Projects
• Enabling Services and APIs
• API Conventions
• Resources

Securing Resources with IAM:

• IAM
• Members
• Roles
• Permissions
• 3 Types of Roles
• Service Accounts
• Service Account Keys
• IAM Hierarchy
• Organization and Folders
• Exercise:
  • Getting Started with GCP Projects

Automating GCP Resources.Scripting with the Google Cloud SDK

• Google Cloud SDK
• Installing the SDK
• Configuring the SDK
• gcloud
• gsutil
• bq
• Exercise:
• Scriptingwith gcloud, gsutil, and bq command-line interfaces

Programming with GCP

• Programming RESTful Service Calls
• Leveraging Language SDKs
• Exercise:
• Utilizing GCP Resources in Your Applications

Deployment Manager

• Creating Infrastructure with Deployment Manager
• Marketplace
• Exercise:
• Understanding Deployment Manager

Exam Prep

• Quiz

Compute Engine and NetworkingCreating and Managing Virtual Machines

• Creating Machines
• Creating Machines with gcloud
• Connecting to Linux Machines
• SSH with gcloud
• Third-Party SSH Tools
• Managing SSH Keys
• Project Keys
• Instance Keys
• Connecting to Windows Machines
• Exercise: Virtual Machines

Load Balancing and Autoscaling

• Scalable, Fault Tolerant Architecture
• Instance Templates
• Instance Groups
• Autoscaling Configuration
• Health Checks
• Load Balancers
• Cloud DNS
• Cloud CDN
• Exercise: Load Balancing and Autoscaling

Configuring VPC Networks

• VPCs
• Networks and Subnets
• CIDR Addressing
• Firewall Rules
• Shared VPCs
• Adding Machines to Networks
• Exercise: Networking

Connecting Networks

• VPN
• Cloud Router
• Interconnect

Exam Prep

• Quiz

Getting started with Source Control

Lessons

• What is Source Control
• Benefits of Source Control
• Types of Source Control Systems
• Introduction to Azure Repos
• Introduction to GitHub
• Migrating from Team Foundation Version Control (TFVC) to Git in Azure Repos
• Authenticating to Git in Azure Repos

Lab : Version Controlling with Git

After completing this module, students will be able to:

• Describe the benefits of using Source Control
• Describe Azure Repos and GitHub
• Migrate from TFVC to Git

Scaling Git for enterprise DevOps

Lessons

• How to Structure your Git Repo
• Git Branching Workflows
• Collaborating with Pull Requests in Azure Repos
• Why care about GitHooks
• Fostering Inner Source

Lab : Code Review with Pull Requests

After completing this module, students will be able to:

• Explain how to structure Git repos
• Describe Git branching workflows
• Leverage pull requests for collaboration and code reviews
• Leverage Git hooks for automation
• Use git to foster inner source across the organization

Consolidating Artifacts & Designing a Dependency Management Strategy

Lessons

• Packaging Dependencies
• Package Management
• Migrating and Consolidating Artifacts

Lab : Updating Packages

After completing this module, students will be able to:

• Recommend artifact management tools and practices
• Abstract common packages to enable sharing and reuse
• Migrate and consolidate artifacts
• Migrate and integrate source control measures

Implementing Continuous Integration with Azure Pipelines

Lessons

• The concept of pipelines in DevOps
• Azure Pipelines
• Evaluate use of Hosted vs Private Agents
• Agent Pools
• Pipelines and Concurrency
• Azure DevOps and Open Source Projects (Public Projects)
• Azure Pipelines YAML vs Visual Designer
• Continuous Integration Overview
• Implementing a Build Strategy
• Integration with Azure Pipelines
• Integrate External Source Control with Azure Pipelines
• Set Up Private Agents
• Analyze and Integrate Docker Multi-Stage Builds

Lab : Enabling Continuous Integration with Azure Pipelines

Lab : Integrating External Source Control with Azure Pipelines

After completing this module, students will be able to:

• Implement and manage build infrastructure
• Explain why continuous integration matters
• Implement continuous integration using Azure DevOps

Managing Application Config and Secrets

Lessons

• Introduction to Security
• Implement secure and compliant development process
• Rethinking application config data
• Manage secrets, tokens, and certificates
• Implement tools for managing security and compliance in a pipeline

Lab : Integrating Azure Key Vault with Azure DevOps

After completing this module, students will be able to:

• Manage application config and secrets
• Implement tools for managing security and compliance in pipeline

Managing Code Quality and Security Policies

Lessons

• Managing Code Quality
• Managing Security Policies

Lab : Managing Technical Debt with Azure DevOps and SonarCloud

After completing this module, students will be able to:

• Manage code quality including: technical debt SonarCloud, and other tooling solutions
• Manage security policies with open source and OWASP

Implementing a Container Build Strategy

Lessons

• Implementing a Container Build Strategy

Lab : Modernizing Existing ASP.NET Apps with Azure

After completing this module, students will be able to:

• Implement a container strategy including how containers are different from virtual machines and how microservices use containers
• Implement containers using Docker

Manage Artifact versioning, security & compliance

Lessons

• Package security
• Open source software
• Integrating license and vulnerability scans
• Implement a versioning strategy

Lab : Manage Open Source Security and License with WhiteSource

After completing this module, students will be able to:

• Inspect open source software packages for security and license compliance to align with corporate standards
• Configure build pipeline to access package security and license rating
• Configure secure access to package feeds
• Inspect codebase to identify code dependencies that can be converted to packages
• Identify and recommend standardized package types and versions across the solution
• Refactor existing build pipelines to implement version strategy that publishes packages
• Manage security and compliance

Design a Release Strategy

Lessons

• Introduction to Continuous Delivery
• Release strategy recommendations
• Building a High-Quality Release pipeline
• Choosing a deployment pattern
• Choosing the right release management tool

After completing this module, students will be able to:

• Differentiate between a release and a deployment
• Define the components of a release pipeline
• Explain things to consider when designing your release strategy
• Classify a release versus a release process and outline how to control the quality of both
• Describe the principle of release gates and how to deal with release notes and documentation
• Explain deployment patterns, both in the traditional sense and in the modern sense
• Choose a release management tool

Set up a Release Management Workflow

Lessons

• Create a Release Pipeline
• Provision and Configure Environments
• Manage and Modularize Tasks and Templates
• Integrate Secrets with the release pipeline
• Configure Automated Integration and Functional Test Automation
• Automate Inspection of Health

Lab : Configuring Pipelines as Code with YAML

Lab : Setting up secrets in the pipeline with Azure Key vault

Lab : Setting up and Running Functional Tests

Lab : Using Azure Monitor as release gate

Lab : Creating a release Dashboard

After completing this module, students will be able to:

• Explain the terminology used in Azure DevOps and other Release Management Tooling
• Describe what a Build and Release task is, what it can do, and some available deployment tasks
• Classify an Agent, Agent Queue, and Agent Pool
• Explain why you sometimes need multiple release jobs in one release pipeline
• Differentiate between multi-agent and multi-configuration release job
• Use release variables and stage variables in your release pipeline
• Deploy to an environment securely using a service connection
• Embed testing in the pipeline
• List the different ways to inspect the health of your pipeline and release by using alerts, service hooks, and reports
• Create a release gate

Implement an appropriate deployment pattern

Lessons

• Introduction to Deployment Patterns
• Implement Blue Green Deployment
• Feature Toggles
• Canary Releases
• Dark Launching
• AB Testing
• Progressive Exposure Deployment

Lab : Feature Flag Management with LaunchDarkly and Azure DevOps

After completing this module, students will be able to:

• Describe deployment patterns
• Implement Blue Green Deployment
• Implement Canary Release
• Implement Progressive Exposure Deployment

Implement process for routing system feedback to development teams

Lessons

• Implement Tools to Track System Usage, Feature Usage, and Flow
• Implement Routing for Mobile Application Crash Report Data
• Develop Monitoring and Status Dashboards
• Integrate and Configure Ticketing Systems

Lab : Monitoring Application Performance

After completing this module, students will be able to:

• Configure crash report integration for client applications
• Develop monitoring and status dashboards
• Implement routing for client application crash report data
• Implement tools to track system usage, feature usage, and flow
• Integrate and configure ticketing systems with development team's work management

Infrastructure and Configuration Azure Tools

Lessons

• Infrastructure as Code and Configuration Management
• Create Azure Resources using ARM Templates
• Create Azure Resources using Azure CLI
• Create Azure Resources by using Azure PowerShell
• Desired State Configuration (DSC)
• Azure Automation with DevOps
• Additional Automation Tools

Lab : Azure Deployments using Resource Manager Templates

After completing this module, students will be able to:

• Apply infrastructure and configuration as code principles
• Deploy and manage infrastructure using Microsoft automation technologies such as ARM templates, PowerShell, and Azure CLI

Azure Deployment Models and Services

Lessons

• Deployment Modules and Options
• Azure Infrastructure-as-a-Service (IaaS) Services
• Azure Platform-as-a-Service (PaaS) services
• Serverless and HPC Computer Services
• Azure Service Fabric

Lab : Deploying a Dockerized Java app to Azure Web App for Containers

After completing this module, students will be able to:

• Describe deployment models and services that are available with Azure

Create and Manage Kubernetes Service Infrastructure

Lessons

• Azure Kubernetes Service

Lab : Deploying a multi-container application to Azure Kubernetes Service

After completing this module, students will be able to:

• Deploy and configure a Managed Kubernetes cluster

Third Party Infrastructure as Code Tools available with Azure

Lessons

• Chef
• Puppet
• Ansible
• Terraform

Lab : Infrastructure as Code

Lab : Automating Your Infrastructure Deployments in the Cloud with Terraform and Azure Pipelines

After completing this module, students will be able to:

• Deploy and configure infrastructure using 3rd party tools and services with Azure, such as Chef, Puppet, Ansible, and Terraform

Implement Compliance and Security in your Infrastructure

Lessons

• Security and Compliance Principles with DevOps
• Azure security Center

Lab : Implement Security and Compliance in an Azure DevOps Pipeline

After completing this module, students will be able to:

• Define an infrastructure and configuration strategy and appropriate toolset for a release pipeline and application infrastructure
• Implement compliance and security in your application infrastructure

Recommend and design system feedback mechanisms

Lessons

• The inner loop
• Continuous Experimentation mindset
• Design practices to measure end-user satisfaction
• Design processes to capture and analyze user feedback
• Design process to automate application analytics

Lab : Integration between Azure DevOps and Teams

After completing this module, students will be able to:

• Design practices to measure end-user satisfaction
• Design processes to capture and analyze user feedback from external sources
• Design routing for client application crash report data
• Recommend monitoring tools and technologies
• Recommend system and feature usage tracking tools

Optimize feedback mechanisms

Lessons

• Site Reliability Engineering
• Analyze telemetry to establish a baseline
• Perform ongoing tuning to reduce meaningless or non-actionable alerts
• Analyze alerts to establish a baseline
• Blameless Retrospectives and a Just Culture

After completing this module, students will be able to:

• Analyze alerts to establish a baseline
• Analyze telemetry to establish a baseline
• Perform live site reviews and capture feedback for system outages
• Perform ongoing tuning to reduce meaningless or non-actionable alerts

Account Management

• AWS Accounts and AWS Organizations
• Service Control Policies
• AWS Account Limits
• AWS Support Tiers
• AWS Config
• AWS Service Catalog

Cost and Cost Optimization

• Resource Billing Modes: On-Demand, Reserved, and Spot

Advanced Identity in AWS

• Identity Federation
• IAM Permissions Boundaries
• Policy Evaluation Logic

VPC Essentials

• VPC Basics
• AWS Resource Access Manager (RAM)
• VPC Routing
• Network Access Control Lists (NACLs)
• Security Groups (SGs)
• Public vs. Private Subnets, Internet Gateways, and IP Addressing
• Egress-Only Gateways
• DNS in a VPC
• VPC Flow Logs

Advanced and Hybrid VPC Networking

• Using VPC Endpoints
• Peering VPCs
• AWS Site-to-Site VPN
• AWS Direct Connect Architecture
• AWS Transit Gateway

Account and Service Security

• AWS Key Management Service (KMS)
• AWS CloudHSM
• AWS Certificate Manager (ACM)
• AWS Directory Service

Network Security

• AWS WAF and Shield
• AWS GuardDuty

Elastic Compute Cloud (EC2)

• EC2 Concepts
• Creating and Using AMIs
• Virtualization and EC2 Instance Type: Deep Dive
• EC2 Storage and Snapshots
• EC2 Instance Profiles and Roles
• HPC and Placement Groups
• Custom Logging to CloudWatch

Containers

• Containers
• ECS Architecture
• ECS Security

Serverless

• Serverless and Event-Driven Architecture
• Lambda Architecture
• Lambda Layers
• API Gateway

Scaling Architectures

• AWS Service Resilience
• Stateless Architectures
• Deciding between Spot and Reserved Instances
• CImplementing Auto Scaling Groups (ASGs)
• Multi-AZ Implementations
• Elastic Load Balancers - Essentials
• Elastic Load Balancers - Classic Load Balancers
• Elastic Load Balancers - Application Load Balancers
• Elastic Load Balancers - Network Load Balancers

CloudFront Essentials

• CCloudFront Architecture.
• Creating and Working with Distributions
• Working with Custom Origins
• CloudFront and Security
• Optimizing Caching
• Lambda@Edge
• Logging, Reporting, and Monitoring

Amazon Route 53 (R53)

• Route 53 Architecture
• Advanced Route 53 Concepts

Object Storage: Amazon Simple Storage Service (S3)

• Introduction
• S3 Architecture
• S3 Storage Tiers, Intelligent-Tiering, and Lifecycle Policies
• Versioning and Locking
• Controlling Access to S3 Buckets
• Cross-Region Replication
• Object Encryption
• Optimizing S3 Performance
• Glacier Architecture

Amazon Elastic File System (EFS)

• EFS Architecture

Amazon FSx

• FSx Architecture

AWS Storage Gateway

• File Gateways vs. Volume Gateways vs. Tape Gateway

Databases Introduction

• EC2 Self-Managed Databases
• Database Data Models and Engines

SQL Databases

• Amazon Relational Database Service (RDS)
• Amazon Aurora Architecture
• Aurora Global Database
• Aurora Serverless
• Amazon Athena

NoSQL Databases

• DynamoDB Architecture
• Advanced DynamoDB
• Amazon Neptune
• Amazon Quantum Ledger Database (QLDB)
• Amazon DocumentDB (with MongoDB Compatibility)

Amazon ElastiCache

• ElastiCache Architecture

Amazon EMR

• MapReduce Essentials
• EMR Architecture
• EMR Cost and Performance Optimization

Amazon Kinesis

• What Is Kinesis?
• Data Firehose
• Data Analytics in Kinesis

AWS Redshift

• Redshift Architecture
• Disaster Recovery in Redshift

AWS IoT Platform

• AWS IoT Architecture

Amazon QuickSight

• QuickSight Basics

Search and Analytics Engines

• Elasticsearch

Monitoring Your AWS Account

• AWS CloudWatch
• CloudWatch Logs
• AWS CloudTrail
• Route 53 Logging
• S3 Logging

AWS Systems Manager

• Systems Management with AWS Systems Manager
• Parameter Store

AWS CloudFormation

• CloudFormation Overview
• Stack Updates
• Template Portability and Reuse
• Stack References and Nested Stacks
• Stack Roles
• StackSets
• Using CloudFormation for Disaster Recovery
• Custom Resources

AWS Elastic Beanstalk

• Elastic Beanstalk Architecture

AWS OpsWorks

• OpsWorks Architecture

AWS Data Pipeline

• Data Pipeline Essentials

AWS Migration Services

AWS Snow*

• Migrating Data to AWS with Snowball and Snowmobile

Simple Queue Service (SQS)

• SQS Architecture

Simple Notification Service (SNS)

• Using SNS within AWS Architectures

Amazon MQ

• Amazon MQ Essentials

Workflow Orchestration

• Step Functions and Simple Workflow Service

Final Steps

• How to Prepare for the Exam

Final Exam

• AWS Certified Solutions Architect - Professional (SAP-C01)

Automate Deployment and Configuration of Resources

In this module, you will learn about the tools an Azure Administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. This module includes:

Lessons

• Azure Resource Manager Templates
• Save a Template for a VM
• Evaluate Location of New Resources
• Configure a Virtual Hard Disk Template
• Deploy from a Template
• Create and Execute an Automation Runbook

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources
• Use ARM Templates to deploy resources
• Create and Execute an Automation Runbook
• Deploy an Azure VM from a VHD
• Understand Azure encryption technologies

Implement Virtual Networking

In this module, you will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.

Lessons

• Virtual Network Peering
• Implement VNet Peering

After completing this module, students will be able to:

• Connect services with Virtual Network Peering
• Configure VNet Peering
• Understand Service Chaining
• Modify or delete VNet Peering

Implement Load Balancing and Network Security

In this module, you will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

Lessons

• Implement Azure Load Balancer
• Implement an Application Gateway
• Understand Web Application Firewall
• Implement Azure Firewall
• Implement Azure Front Door
• Implementing Azure Traffice Manager
• Implement Network Security Groups and Application Security Group
• Implement Azure Bastion

After completing this module, students will be able to:

• Select a Load Balancer solution
• Configure Application Gateway
• Implement Azure Firewall
• Create an Azure Front Door
• Understand Traffic Manager routing methods
• Configure Network Security Groups (NSGs)

Implement Storage Accounts

In this module, you will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

Lessons

• Storage Accounts
• Blob Storage
• Storage Security
• Managing Storage
• Accessing Blobs and Queues using AAD
• Configure Azure Storage Firewalls and Virtual Networks

After completing this module, students will be able to:

• Understand Storage Account services and types
• Configure Blob storage, accounts, containers, and access tiers
• Implement Shared Access Signatures
• Understand Azure Storage firewalls and virtual networks

Implement Azure Active Directory

In this module, you will learn how to secure identities with Azure Active Directory, and implement users and groups.

Lessons

• Overview of Azure Active Directory
• Users and Groups
• Domains and Custom Domains
• Azure AD Identity Protection
• Implement Conditional Access
• Configure Fraud Alerts for MFA
• Implement Bypass Options
• Configure Trusted IPs
• Configure Guest Users in Azure AD
• Manage Multiple Directory

After completing this module, students will be able to:

• Understand how Multiple AAD organizations interact
• Add Guest Users to Azure AD
• Configure Location Condition Configuration
• Configure Azure MFA settings
• Implement Conditional Access Azure MFA

Implement and Manage Azure Governance

In this module, you will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

Lessons

• Create Management Groups, Subscriptions, and Resource Groups
• Overview of Role-Based Access Control (RBAC)
• Role-Based Access Control (RBAC) Roles
• Azure AD Access Reviews
• Implement and Configure an Azure Policy
• Azure Blueprints

After completing this module, students will be able to:

• Understand Resource Group 0rganization
• Understand how RBAC works
• Create an Azure AD access review
• Create and manage policies to enforce compliance
• Create a Blueprint

Implement and Manage Hybrid Identities

In this module, you will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health.

Lessons

• Install and Configure Azure AD Connect
• Configure Password Sync and Password Writeback
• Configure Azure AD Connect Health

After completing this module, students will be able to:

• Implement Azure AD seamless Single Sign-On
• Perform an Azure AD Connect installation
• Implement Azure AD Connect Health

Select an Appropriate Storage Account

In this module, you will learn how to migrate workloads using Azure Migrate, perform VMware agent-based and agent-less migrations, and perform Azure Backup and Azure Site Recovery.

Lessons

• Migrate Workloads using Azure Migrate
• VMware - Agentless Migration
• VMware - Agent-Based Migration
• Implement Azure Backup
• Azure to Azure Site Recovery
• Implement Azure Update Management

After completing this module, students will be able to:

• Understand agent-based migration architecture
• Prepare for Azure for migration
• Prepare an on-premises VMware environment
• Understand Azure VM backup architecture
• Manage updates and patches for Azure VMs

Implement Cloud Infrastructure Monitoring

In this module, you will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, Azure Application Insights.

Lessons

• Azure Infrastructure Security Monitoring
• Azure Monitor
• Azure Workbooks
• Azure Alerts
• Log Analytics
• Network Watcher
• Azure Service Health
• Monitor Azure Costs
• Azure Application Insights
• Unified Monitoring in Azure

Manage Security for Applications

In this module, you will learn about Azure Key Vault and implementing authentication using Azure Managed Identities.

Lessons

• Azure Key Vault
• Azure Managed Identity

After completing this module, students will be able to:

• Explain Key Vault uses such as screts, key, and Cerficate management
• Use Managed Identities with Azure resources

Implement an Application Infrastructure

In this module, you will learn how to create an App Service web App for Containers, create and configure an App Service Plan, and create and manage Deployment Slots.

Lessons

• Create and Configure Azure App Service
• Create an App Service Web App for Containers
• Create and Configure an App Service Plan
• Configure Networking for an App Service
• Create and Manage Deployment Slots
• Implement Logic Apps
• Implement Azure Functions

After completing this module, students will be able to:

• Configure an Azure App Service
• Create an App Service Plan
• Create a Workflow using Azure Logic Apps
• Create a Function App

Implement Container-Based Applications

In this module, you will learn how to run Azure Container instances and how to deploy Kubernetes with AKS.

Lessons

• Azure Container Instances
• Configure Azure Kubernetes Service

After completing this module, students will be able to:

• Run Azure Container instances
• Deploy Kubernetes with AKS

Implement NoSQL Databases

In this module, you will learn about Azure Table Storage and recommend options for CosmsoDB APIs.

Lessons

• Configure Storage Account Tables
• Select Appropriate CosmosDB APIs

After completing this module, students will be able to:

• Outline the Table Service Data Model
• Understand options for Azure Cosmos DB
• Understand high availability using CosmosDB

Implement Azure SQL Databases

In this module, you will create an Azure SQL Database single database, create an Azure SQL Database Managed Instance, and review high-availability and Azure SQL database.

Lessons

• Configure Azure SQL Database Settings
• Implement Azure SQL Database Managed Instances
• High-Availability and Azure SQL Database

After completing this module, students will be able to:

• Create an Azure SQL Database single database
• Create an Azure SQL Database Managed Instance
• Recommend high-availability architectural models used in Azure SQL Database