Azure Administrator Bootcamp (AZ-100 and AZ-101)

COURSE OUTLINE:

Description

In an intensive and immersive hands-on learning environment, you will build the skills needed for Azure Administrator, Deployment, Integration and Security.� The course helps prepare students for Exams AZ-100 and AZ-101. Passing this exam is required to earn the Azure Administrator, Deployment and Azure Administrator, Integration and Security certification.

This boot camp includes all the exam vouchers required for certification.� It also includes access to our Microsoft Boot Camp Exclusives, providing indispensable certification exam prep.

You will prepare for these exams:

  • Exam AZ-100: Microsoft Azure Infrastructure and Deployment
  • Exam AZ-101: Microsoft Azure Integration and Security

Courses covered in this bootcamp:

  • Course AZ-100T01: Manage Subscriptions and Resources.
  • Course AZ-100T02: Implementing and Managing Storage.
  • Course AZ-100T03: Deploying and Managing Virtual Machines.
  • Course AZ-100T04: Configuring and Managing Virtual Networks.
  • Course AZ-100T05: Manage Identities
  • Course AZ-101T01: Migrate Servers to Azure.
  • Course AZ-101T02: Implementing and Managing Application Services.
  • Course AZ-101T03: Implement Advanced Virtual Networking.
  • Course AZ-101T04: Secure Identities.

Audience

This course is for Azure Administrators. Azure Administrators manage the cloud services that span storage, networking, and compute cloud capabilities, with a deep understanding of each service across the full IT lifecycle. They take end-user requests for new cloud applications and make recommendations on services to use for optimal performance and scale, as well as provision, size, monitor and adjust as appropriate. This role requires communicating and coordinating with vendors. Azure Administrators use the Azure Portal and as they become more proficient they use PowerShell and the Command Line Interface.

Prerequisites

Successful Azure Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.

Learning Objectives

After completing this course, students will be able to:

  • Manage Azure subscriptions and billing, and implement Azure policies.
  • Implement access management with Azure users, groups, and role-based access control.
  • Use Azure Monitor to configure Azure alerts and review the Azure Activity Log.
  • Query and analyze Log Analytics data.
  • Deploy resources with ARM templates and organize Azure resources.�
  • Optimize your use of Azure tools like the Azure portal, Azure PowerShell, Cloud Shell and the Azure CLI.
  • Create Azure storage accounts for different data replication, pricing, and content scenarios.�
  • Implement virtual machine storage, blob storage, Azure files, and structured storage.
  • Secure and manage storage with shared access keys, Azure backup, and Azure File Sync.
  • Store and access data using Azure Content Delivery Network, and the Import and Export service.
  • Monitor Azure storage with metrics and alerts, and the Activity Log.
  • Explain virtual machine usage cases, storage options, pricing, operating systems, networking capabilities, and general planning considerations.
  • Create Windows virtual machines in the Azure Portal, with Azure PowerShell, or using ARM Templates.
  • Deploy custom server images and Linux virtual machines.�
  • Configure virtual machine networking and storage options.
  • Implement virtual machine high availability, scalability, and custom scripts extensions.�
  • Backup, restore, and monitor virtual machines.
  • Understand virtual networking components, IP addressing, and network routing options.�
  • Implement Azure DNS domains, zones, record types, and resolution methods.�
  • Configure network security groups, service endpoints, logging, and network troubleshooting.
  • Implement site connectivity schemas including VNet-to-VNet connections and virtual network peering.
  • Implement Azure Active Directory, Self-Service Password Reset, Azure AD Identity Protection, and integrated SaaS applications.
  • Configure domains and tenants, users and groups, roles, and devices.�
  • Implement and manage Azure Active Directory integration options and Azure AD Application Proxy.
  • Use Azure Migrate to discover and assess on-premises virtual machine migration to Azure.�
  • Use Azure Site Recovery to migrate Hyper-V infrastructures to Azure.
  • Review migration strategies for VMWare and System Center VMM virtual machines.�
  • Implement use cases and configuration options for Azure App Services and App Service Environments.
  • Manage and secure web apps with backup, restore, snapshot, and cloning.�
  • Optimize your web app performance with Scale Up, Scale Out, Autoscale, and Grow out strategies.
  • Deploy serverless computing features like Azure Functions, Event Grid, and Service Bus.
  • Implement and configure Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway.
  • Implement and configure Site-to-Site VPN connections and ExpressRoute.
  • Implement and configure Network Watcher and troubleshooting common network issues.�
  • Use Azure RBAC to grant a granular level of access based on an administrator�s assigned tasks.�
  • Use Azure Multi-Factor Authentication to configure a strong authentication for users at sign-in.
  • User Azure AD Privileged Identity Management to configure access rights based on just-in-time administration.

AZ-100T01:� Manage Subscription and Resources

Module 1: Managing Azure Subscriptions

In this module, you�ll learn about the components that make up an Azure subscription and how management groups are used to organize subscriptions into containers to allow you to control organizational governance and policy management across subscriptions. As well as learning about the different available types of subscription, you�ll see how to apply tags to your Azure resources to logically organize them by categories.

Lessons

  • Overview of Azure Subscriptions
  • Billing
  • Azure Policy

After completing this module, students will be able:

  • Manage Azure subscriptions and billing and implement Azure policies.

Module 2: Access Management for Cloud Resources

In this module you will learn the basics of role-based access control as it applies to users and groups. Focus on the administrator role and how it used in Azure.

Lessons

  • Azure Users and Groups
  • Role-based Access Control

After completing this module, students will be able:

  • Implement access management with Azure users, groups, and role-based access control.

Module 3: Monitoring and Diagnostics

In this module, you learn about the Azure Monitor and the many capabilities to ensure your Azure architecture is working correctly. Monitoring skills are explained in this first course and then demonstrated in the following courses. The two main elements explained in this module are Azure Alerts and Azure Activity Log.

Lessons

  • Exploring Monitoring Capabilities in Azure
  • Azure Alerts
  • Azure Activity Log

After completing this module, students will be able:

  • Use Azure Monitor to configure Azure alerts and review the Azure Activity Log.

Module 4: Log Analytics

In this module, you will focus on Log Analytics. Log Analytics provides a way for you to collect, analyze, and query all types of connected data. It is a very powerful tool.

Lessons

  • Introduction to Log Analytics
  • Querying and Analyzing Log Analytics Data

After completing this module, students will be able:

  • Query and analyze Log Analytics data.

Module 5: Azure Resource Manager

In this module, you will learn about how resources are organized into resource groups and how ARM templates are used to deploy those resources. This module introduces the concepts and then they are applied in the other courses. Lessons

  • ARM templates
  • Resource Groups

After completing this module, students will be able:

  • Deploy resources with ARM templates and organize Azure resources.

Module 6: Azure Tips, Tricks, and Tools

This module is provided to help you get the most from your administrative tools. This include the Azure Portal, Cloud Shell, Azure CLI, Azure PowerShell, and Resource Explorer.

Lessons

  • Azure Portal
  • Azure Tools and Environment

After completing this module, students will be able:

Optimize your use of Azure tools like the Azure portal, Azure PowerShell, Cloud Shell and the Azure CLI.

�

Course AZ-100T02:� Implementing and Managing Storage

Module 1: Overview of Azure Storage

In this module, you�ll learn about storage accounts � Standard and Premium � as well as storage endpoints and how to configure custom domain accounts. You�ll have an opportunity to practice creating and managing storage accounts. The module also covers data replication and provides a comparison of the different available replication schemes. You�ll be introduced to Azure Storage Explorer, a utility that lets you easily work with and manipulate Azure Storage data.

Lessons

  • Azure storage accounts
  • Data replication
  • Azure Storage Explorer

After completing this module, students will be able to:

  • Create Azure storage accounts for different data replication, pricing, and content scenarios.�

Module 2: Storage Services

In this module, you�ll learn about the disks component of Azure Storage as it relates to virtual machines. Disks are how virtual machines store their VHD files. You will learn about the types of disks and storage and how Azure simplifies IaaS disk management by creating and managing the storage accounts associated with the virtual machine disks. You will also learn about how Azure blob storage stores unstructured data in the cloud as objects, or blobs (BLOB = binary large object). And you�ll explore Azure Files, which offers fully managed file shares in the cloud that are accessible via the Server Message Block (SMB) protocol. The other file storage options covered in the module are Tables and Queues for structured storage.

Lessons

  • Virtual machine storage
  • Blob storage
  • Azure files
  • Structured storage

After completing this module, students will be able to:

  • Implement virtual machine storage, blob storage, Azure files, and structured storage.

Module 3: Securing and Managing Storage

In this module, discover how a shared access signature (SAS) can be used to provide delegated access to resources in storage accounts, allowing clients access to those resources with sharing the storage account keys. You�ll also learn how to use Azure backup as a cloud-based solution for an existing on-premises or off-site backup and data protection solution. This module also covers Azure File Sync as a way to centralize an organization�s file shares in Azure Files, and using Windows Server to cache the Azure file share locally, thus enabling scenarios such as �lift and shift,� backup and disaster recovery, and file archiving.

Lessons

  • Shared access keys
  • Azure backup
  • Azure File Sync

After completing this module, students will be able to:

  • Secure and manage storage with shared access keys, Azure backup, and Azure File Sync.

Module 4: Storing and Accessing Data

In this module, you�ll learn about using a content delivery network (CDN) to deliver cached content that is stored on a distributed network of edge servers closer to end-users. You�ll also learn how to transfer large amount of data to and from the cloud using the Azure Import/Export service.

Lessons

  • Azure Content Delivery Network
  • Import and Export service

After completing this module, students will be able to:

  • Store and access data using Azure Content Delivery Network, and the Import and Export service.

Module 5: Monitoring Storage

In this module, you will learn techniques for monitoring the health of Azure storage. With metrics and alerts you can check a variety of performance metrics and send notifications to your system administrator team. With the Activity Log you can search and query for specific events, even across subscriptions

Lessons

  • Metrics and Alerts
  • Activity Log

After completing this module, students will be able to:

  • Monitor Azure storage with metrics and alerts, and the Activity Log.

�

Course AZ-100T03:� Deploying and Managing Virtual Machines

Module 1: Overview of Azure Machines

In this module, you�ll will be introduced to Azure virtual machines. What are virtual machines and what operating systems are supported? How can you determine if your existing virtual machines can be supported in Azure? What pricing and sizing options are available?

Lessons

  • Azure Virtual Machines Overview
  • Planning Considerations

After completing this module, students will be able to:

  • Explain virtual machine usage cases, storage options, pricing, operating systems, networking capabilities, and general planning considerations.

Module 2: Creating Virtual Machines

In this module, you will learn how to create and configure Windows virtual machines. You will practice in the Azure portal, in Azure PowerShell, and with ARM templates.

Lessons

  • Overview of the Virtual Machine Creation Overview
  • Creating Virtual Machines in the Azure Portal
  • Creating Virtual Machines (PowerShell)
  • Creating Virtual Machines using ARM Templates

After completing this module, students will be able to:

  • Create Windows virtual machines in the Azure Portal, with Azure PowerShell, or using ARM Templates.

Module 3: Deploying Virtual Machine Images

In this module, you will learn how to create custom virtual machines in Azure. For example, deploying a server image that is in your on-premises datacenter. You will also learn how to create and connect to Linux virtual machines.

Lessons

  • Deploying Custom Images
  • Deploying Linux Virtual Machines

After completing this module, students will be able to:

  • Deploy custom server images and Linux virtual machines.�

Module 4: Configuring Virtual Machines

In this module, you will learn about the two main configuration areas for virtual machines: networking and storage. In the networking lesson, we will cover IP addressing, network interfaces, and network security groups. In the storage lesson, we will cover virtual machine disks, managed disks, attaching/detaching disks, and uploading disks.

Lessons

  • Overview of Virtual Machine Configuration
  • Virtual Machine Networking
  • Virtual Machine Storage

After completing this module, students will be able to:

  • Configure virtual machine networking and storage options.

Module 5: Configuring Availability and Extensibility

In this module, you will learn how to keep your virtual machines highly available with update and fault domains, and availability sets. You will also learn how to use scale sets to increase and decrease the number of the virtual machines as the workload changes. Lastly, virtual machines can be extended through custom scripts and Desired State Configuration.

Lessons

  • Virtual Machine Availability
  • Virtual Machine Scalability
  • Applying Virtual Machine Extensions

After completing this module, students will be able to:

  • Implement virtual machine high availability, scalability, and custom scripts extensions.�

Module 6: Managing and Monitoring Virtual MachinesI

In this module, you will learn the very important tasks of backing up your virtual machines and monitoring their overall health. You will practice backing up and restoring virtual machines. You will learn about monitoring, diagnostics, and Azure Advisor.

Lessons

  • Backup and Restore
  • Monitoring Virtual Machines

After completing this module, students will be able to:

  • Backup, restore, and monitor virtual machines.

�

AZ-100T04:� Configuring and Managing Virtual Networks

Module 1: Azure Virtual Networks

In this module, you�ll will be introduced to Azure virtual networks. What are virtual networks and how are they organized? How do you create and configure virtual networks with templates, PowerShell, CLI, or the Azure portal? What is the difference between public, private, static, and dynamic IP addressing? How are system routes, routing tables, and routing algorithms used?

Lessons

  • Introducing Virtual Networks
  • Creating Azure Virtual Networks
  • Review of IP Addressing
  • Network Routing

After completing this module, students will be able to:

  • Understand virtual networking components, IP addressing, and network routing options.�

Module 2: Azure DNSI

In this module, you will learn about DNS basics and specifically implementing Azure DNS. In the DNS Basics lesson you will review DNS domains, zones, record types, and resolution methods. In the Azure DNS lesson, we will cover delegation, metrics, alerts, and DNS hosting schemes.

Lessons

  • Azure DNS Basics
  • Implementing Azure DNS

After completing this module, students will be able to:

  • Implement Azure DNS domains, zones, record types, and resolution methods.

Module 3: Securing Virtual Network Resources

In this module, you will learn primarily about Network Security Groups (NSGs) including NSG rules and NSG scenarios. You will also learn how to implement NSGs considering service endpoints, logging, troubleshooting, and other network traffic.

Lessons

  • Introduction to Network Security Groups
  • Implementing Network Security Groups and Service Endpoints

After completing this module, students will be able to:

  • Configure network security groups, service endpoints, logging, and network troubleshooting.

Module 4: Connecting Virtual Networks

In this module, you will learn about two specific types of intersite connectivity: VNet-to-VNet connections and VNet Peering. In both cases, you will learn when to choose which connectivity method, and how to implement and configure the method.

Lessons

  • Intersite Connectivity (VNet-to-VNet Connections)
  • Virtual Network Peering

After completing this module, students will be able to:

  • Implement site connectivity schemas including VNet-to-VNet connections and virtual network peering.

�

AZ-100T05:� Manage Identities

Module 1: Managing Azure Active Directory

In this module, you�ll will be introduced to Azure Active Directory. What is Azure Active Directory and how is it different from Active Directory Domain Services? What is Self-Service Password Reset and how is it configured? How can Azure AD Identity protection improve your security posture. How do you integrate SaaS applications with Azure AD?

Lessons

  • Azure Active Directory Overview
  • Self-Service Password Reset
  • Azure AD Identity Protection
  • Integrating SaaS Applications with Azure AD

After completing this module, students will be able to:

  • Implement Azure Active Directory, Self-Service Password Reset, Azure AD Identity Protection, and integrated SaaS applications.

Module 2: Managing Azure Active Directory Objects

In this module, you will learn the basics of implementing Azure AD objects. These objects include domains and tenants, users and groups, roles, and devices. In each lesson you will practice how to configure these objects through the portal and with Azure PowerShell. The Azure roles lesson will be your introduction to role-based access control.

Lessons

  • Azure Domains and Tenants
  • Azure Users and Groups
  • Azure Roles
  • Managing Devices

After completing this module, students will be able to:

  • Configure domains and tenants, users and groups, roles, and devices.

Module 3: Implementing and Managing Hybrid Identities

In this module, you will learn how to integrate Active Directory with your existing infrastructure. You will learn about different authentication options like AD Connect, Single Sign On, and Pass-through authentication. You will also learn how to configure Azure AD Application Proxy and how it is used.

Lessons

  • Azure Active Directory Integration Options
  • Azure AD Application Proxy

After completing this module, students will be able to:

  • Implement and manage Azure Active Directory integration options and Azure AD Application Proxy.

Module 1: Managing Azure Active Directory

In this module, you will be introduced to Azure migration projects and specifically Azure Migrate. Azure Migrate will be your tool of choice for automated server discovery and workload sizing. You will step through the process of using Azure Migrate to create a project, create a collector, assess machine readiness, and estimate cost.

Lessons

  • Overview of Cloud Migration
  • Azure Migrate: The Process

After completing this module, students will be able to:

  • Use Azure Migrate to discover and assess on-premises virtual machine migration to Azure.

Module 2: Azure Site Recovery

In this module, you will be introduced to Azure Site Recovery (ASR). ASR will be your primary tool for migrating workloads to Azure. You will learn which scenarios are most appropriate for ASR and the features that the product provides. You will also learn how to use the ASR deployment planner to ensure your infrastructure is ready for migration. Lastly, you will walk through the process of implementing ASR on a Hyper-V infrastructure.

Lessons

  • Overview of ASR
  • Preparing the Infrastructure
  • Completing the Migration Process

After completing this module, students will be able to:

  • Use Azure Site Recovery to migrate Hyper-V infrastructures to Azure.

Module 3: Additional Migration Scenarios

In this module, you will complete your study of Azure migration by looking at two different migration scenarios. In the first scenario you will see how to migrate VMware vSphere Hypervisor virtual machines to Azure using ASR. In the second video series we will migrate System Center VMM Hyper-V machines.

Lessons

  • VMWare Migration
  • System Center VMM Migration: Video Walkthrough

After completing this module, students will be able to:

  • Review migration strategies for VMWare and System Center VMM virtual machines.

�

AZ-101T2:� Implementing and Managing Application Services

Module 1: Introducing the Azure App Service Platform

In this module, you will be introduced to the Azure App Services Platform. You will learn about app service plans, web app hosting options, app service scenarios and how to monitor apps. You will also learn about how to isolate apps with App Service Environments.

Lessons

  • Introducing Azure App Service
  • App Service Environments

After completing this module, students will be able to:

  • Implement use cases and configuration options for Azure App Services and App Service Environments.

Module 2: Managing and Securing Web Apps

In this module, you will learn how to deploy your app with minimal downtime. You will also learn how to backup, restore, snapshot, and clone your app. Lastly, you will implement security features like authentication options and authentication providers.

Lessons

  • Deploying Web Apps
  • Managing Web Apps
  • App Service Security

After completing this module, students will be able to:

  • Manage and secure web apps with backup, restore, snapshot, and cloning.

Module 3: Scaling and Performance

In this module, you will learn how to ensure your app performs under various workloads. You will learn how to scale up and scale out your app. You will learn how to automatically scale your app and to grow out the app through geo-distribution. Lastly you will learn how CDN provides a way to optimize bandwidth and web traffic.

Lessons

  • Scale Up and Scale Out
  • Autoscale and Grow out
  • Optimizing Bandwidth and Web Traffic

After completing this module, students will be able to:

  • Optimize your web app performance with Scale Up, Scale Out, Autoscale, and Grow out strategies.

Module 4: Deploying Serverless Computing Solutions

In the module, you will learn what serverless computing is and what it provides. You will implement three serverless computing solutions: Azure Functions, Event Grid, and Service Bus. Azure Functions provide small pieces of code, or "functions," that run in the cloud. Event Grid is a service for managing routing of all events from any source to any destination. Service Bus multi-tenant cloud messaging service that sends information between applications and services.

Lessons

  • Serverless Computing Concepts
  • Managing Azure Functions
  • Managing Event Grid
  • Managing Service Bus
  • Managing Logic App

After completing this module, students will be able to:

  • Deploy serverless computing features like Azure Functions, Event Grid, and Service Bus.

�

AZ-101T03:� Implement Advanced Virtual Networking

Module 1: Distributing Network Traffic

In this module, you will learn about three ways to distribute network traffic: Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway. The Azure Load Balancer delivers high availability and network performance to your applications. The Azure Traffic Manager allows you to control the distribution of user traffic to your service endpoints. The Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.

Lessons

  • Overview of Network Traffic Distribution Options
  • Azure Load Balancer
  • Azure Traffic Manager
  • Azure Application Gateway

After completing this module, students will be able to:

  • Implement and configure Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway.

Module 2: Site Connectivity

In this module, you will learn and implement two ways to connect your virtual networks: Site-to-Site VPN Connections and ExpressRoute. Site-to-Site VPN connections provide secure tunneling for cross-premises and hybrid configurations. ExpressRoute extends your on-premises networks into the Microsoft cloud over a dedicated private connection facilitated by a connectivity provider.

Lessons

  • Site-to-Site VPN Connections
  • ExpressRoute

After completing this module, students will be able to:

  • Implement and configure Site-to-Site VPN connections and ExpressRoute.

Module 3: Monitoring and Troubleshooting Network Connectivity

In this module, you will learn important skills around troubleshooting virtual network connectivity. The primary tool discussed is Azure Network Watcher. Azure Network Watcher provides IP flow verification, VPN diagnostics, NSG views and flows, and next hop analysis.

Lessons

  • Introducing Network Watcher
  • Implementing Network Watcher
  • Network Troubleshooting Examples

After completing this module, students will be able to:

  • Implement and configure Network Watcher and troubleshooting common network issues.

�

AZ-101T04:� Secure Identities

Module 1: Introduction to Identity Protection in Azure

In this module, you�ll learn about Role-Based Access Control as the foundation to organizing and managing an organization�s administrative access based on the principle of least privilege. You will also review Azure Active Directory concepts, as well as gaining insight into the threat landscape and security risks that are exposed to IT organizations through breach of privileged access.

Lessons

  • Role-Based Access Control
  • Azure Active Directory (Refresher)
  • Protecting Privileged Access in the Environment

After completing this module, students will be able to:

  • Use Azure RBAC to grant a granular level of access based on an administrator�s assigned tasks.�

Module 2: Using Multi-Factor Authentication for Secure Access

In this module, you�ll learn about securing the sign-in process through Multi-Factor Authentication (MFA). You�ll learn how MFA works and the differences in implementation between on-premises and cloud scenarios. You�ll also learn about using conditional access policies to provide more fine-grained control over apps and resources in your environment.

Lessons

  • Introducing Multi-Factor Authentication
  • Implementing MFA

After completing this module, students will be able to:

  • Use Azure Multi-Factor Authentication to configure a strong authentication for users at sign-in.

Module 3: Azure AD Privileged Identity Management

In this module, you�ll learn how to use Azure Privileged Identity Management (PIM) to enable just-in-time administration and control the number of users who can perform privileged operations. You�ll also learn about the different directory roles available as well as newer functionality that includes PIM being expanded to role assignments at the resource level.

Lessons

  • Getting Started with PIM
  • PIM Security Wizard
  • PIM for Directory Roles
  • PIM for Role Resources

After completing this module, students will be able to:

  • User Azure AD Privileged Identity Management to configure access rights based on just-in-time administration.