AZ-305: Chuyên gia Kiến trúc sư Giải pháp Azure

The AZ-305: Azure Solutions Architect Expert course is for students that are becoming subject matter experts in designing cloud and hybrid solutions that run on Microsoft Azure, including compute, network, storage, monitoring, and security.

Responsibilities for this role include advising stakeholders and translating business requirements into designs for secure, scalable, and reliable Azure solutions.

An Azure solutions architect partners with developers, administrators, and other roles responsible for implementing solutions on Azure.

Course topics include:

Planning and Assessments

You will learn about Azure Governance and Planning

Lessons

• Landing Zones

• Azure Assessments

• Governance

• Management Groups

• Managing Multiple Subscriptions

• Resource Groups

• Resource Tagging

• Resource Tagging and Naming Conventions

Implement VMs for Windows and Linux

You will learn about Azure virtual machines including planning, creating, availability and extensions.

Lessons

• Select Virtual Machine Size

• Configure High Availability

• Implement Azure Dedicated Hosts

• Deploy and Configure Scale Sets

• Configure Azure Disk Encryption

After completing this module, students will be able to:

• Plan for virtual machine implementations.

• Create virtual machines.

• Configure virtual machine availability, including scale sets.

• Understand High Availability options for VMs in Azure

Automate Deployment and Configuration of Resources

You will learn about the tools an Azure Administrator uses to manage their infrastructure.

Lessons

• Azure Resource Manager Templates

• Save a Template for a VM

• Evaluate Location of New Resources

• Configure a Virtual Hard Disk Template

• Deploy from a Template

• Create and Execute an Automation Runbook

After completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources.

• Use ARM Templates to deploy resources.

• Create and Execute an Automation Runbook

• Deploy an Azure VM from a VHD

• Understand Azure encryption technologies

Implement Virtual Networking

You will learn about basic virtual networking concepts like virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS.

Lessons

• Virtual Network Peering

• Implement VNet Peering

After completing this module, students will be able to:

• Connect services with Virtual Network Peering

• Configure VNet Peering

• Modify or delete VNet Peering

Implement Load Balancing and Network Security

You will learn about network traffic strategies including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.

Lessons

• Implement Azure Load Balancer

• Implement an Application Gateway

• Understand Web Application Firewall

• Implement Azure Firewall

• Implementing Azure Traffic Manager

• Implement Network Security Groups and Application Security Group

• Implement Azure Bastion

After completing this module, students will be able to:

• Select a Load Balancer solution

• Configure Application Gateway

• Implement Azure Firewall

• Understand Traffic Manager routing methods

• Configure Network Security Groups (NSGs)

Implement Storage Accounts

You will learn about basic storage features including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools.

Lessons

• Storage Accounts

• Blob Storage

• Storage Security

• Managing Storage

• Accessing Blobs

• Configure Azure Storage Firewalls and Virtual Networks

After completing this module, students will be able to:

• Understand Storage Account services and types

• Configure Blob storage, accounts, containers, and access tiers

• Implement Shared Access Signatures

• Understand Azure Storage firewalls and virtual networks

Implement Azure Active Directory

You will learn how to secure identities with Azure Active Directory, and implement users and groups.

Lessons

• Overview of Azure Active Directory

• Users and Groups

• Domains and Custom Domains

• Azure AD Identity Protection

• Implement Conditional Access

• Configure Fraud Alerts for MFA

• Configure Trusted IPs

• Configure Guest Users in Azure AD

After completing this module, students will be able to:

• Add Guest Users to Azure AD

• Configure Location Condition Configuration

• Configure Azure MFA settings

• Implement Conditional Access Azure MFA

Implement and Manage Azure Governance

You will learn about managing your subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control.

Lessons

• Create Management Groups, Subscriptions, and Resource Groups

• Overview of Role-Based Access Control (RBAC)

• Role-Based Access Control (RBAC) Roles

• Azure AD Access Reviews

• Implement and Configure an Azure Policy

• Azure Blueprints

After completing this module, students will be able to:

• Understand Resource Groups

• Understand how RBAC works

• Create an Azure AD access review

• Create and manage policies to enforce compliance

• Create a Blueprint

Implement and Manage Hybrid Identities

You will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health.

Lessons

• Install and Configure Azure AD Connect

• Configure Password Sync and Password Writeback

• Configure Azure AD Connect Health

After completing this module, students will be able to:

• Implement Azure AD seamless Single Sign-On

• Perform an Azure AD Connect installation

• Implement Azure AD Connect Health

Manage Workloads in Azure

You will learn how to perform Azure Backup and Azure Site Recovery.

Lessons

• Implement Azure Backup

• Azure to Azure Site Recovery

• Implement Azure Update Management

After completing this module, students will be able to:

• Understand Azure VM backup architecture

• Manage updates and patches for Azure VMs

Implement Cloud Infrastructure Monitoring

You will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, Azure Application Insights.

Lessons

• Azure Infrastructure Security Monitoring

• Azure Monitor

• Azure Workbooks

• Azure Alerts

• Log Analytics

• Network Watcher

• Azure Service Health

• Monitor Azure Costs

• Azure Application Insights

• Unified Monitoring in Azure

Manage Security for Applications

You will learn about Azure Key Vault and implementing authentication using Azure Managed Identities.

Lessons

• Azure Key Vault

• Azure Managed Identity

After completing this module, students will be able to:

• Explain Key Vault uses such as secrets, key, and Certificate management

• Use Managed Identities with Azure resources

Implement an Application Infrastructure

You will learn how to create an App Service web App for Containers, create and configure an App Service Plan, and create and manage Deployment Slots.

Lessons

• Create and Configure Azure App Service

• Create an App Service Web App for Containers

• Create and Configure an App Service Plan

• Configure Networking for an App Service

• Create and Manage Deployment Slots

• Implement Logic Apps

• Implement Azure Functions

• After completing this module, students will be able to:

• Configure an Azure App Service

• Create an App Service Plan

• Create a Workflow using Azure Logic Apps

• Create a Function App

Implement Container-Based Applications

You will learn how to run Azure Container instances and how to deploy Kubernetes with AKS.

Lessons

• Azure Container Instances

• Configure Azure Kubernetes Service

After completing this module, students will be able to:

• Run Azure Container instances

• Deploy Kubernetes with AKS

Implement NoSQL Databases

You will learn about Azure CosmsoDB.

Lessons

• Configure CosmosDB APIs

After completing this module, students will be able to:

• Understand options for Azure Cosmos DB

• Understand high availability using CosmosDB

Implement Azure SQL Databases

You will create an Azure SQL Database single database, create an Azure SQL Database Managed Instance, and review high-availability and Azure SQL database.

Lessons

• Configure Azure SQL Database Settings

• Implement Azure SQL Database Managed Instances

• High-Availability and Azure SQL Database

After completing this module, students will be able to:

• Create an Azure SQL Database single database

• Create an Azure SQL Database Managed Instance

• Recommend high-availability architectural models used in Azure SQL Database

Plan an Azure Migration

You will review the cloud adoption framework, plan a checklist for Azure migrations.  You will discover the migration tools available and which is best suited for specific migration tasks.

Lessons

• Review the cloud adoption framework checklist

• Initial decisions checklist

• Determining your migration strategy

• Determining what to migrate and Migration tools

After completing this module, students will be able to

• Use Microsoft tools to assist in Azure migrations