AZ-300: Microsoft Azure Architect Technologies

AZ-300: Microsoft Azure Architect Technologies is part of the requirements for the Microsoft Certified: Azure Solutions Architect Expert

Exam requirements

The official exam document are published here: https://docs.microsoft.com/en-us/learn/certifications/exams/az-300

Exam preparation

https://www.youtube.com/watch?v=u1myyD_cGVQ

Books covering the exam

Exam Ref AZ-300 Microsoft Azure Architect Technologies, 1st Edition

• Author(s): Mike Pfeiffer, Derek Schauland, Nicole Stevens, Timothy L Warner
• ISBN-13: 978-0135802540
• ISBN-10: 0135802547

https://www.amazon.com/AZ-300-Microsoft-Azure-Architect-Technologies/dp/0135802547

Video training for the exam

PluralSight

• AZ-300: Microsoft Azure Architect Technologies
  https://app.pluralsight.com/paths/skills/microsoft-azure-architect-technologies-az-300

Udemy

• AZ-300: Microsoft Azure Architect Technologies
  by Scott Duffy, Software Architect CA
  https://www.udemy.com/course/70534-azure/
• AZ-300: Microsoft Azure Architect Technologies
  by Nick Colyer, Skylines Academy
  https://www.udemy.com/course/microsoft-az-300-azure-architect-technologies/

Online training

Microsoft Learn (free)

• Architect great solutions in Azure
  https://docs.microsoft.com/learn/paths/architect-great-solutions-in-azure/
• Architect network infrastructure in Azure
  https://docs.microsoft.com/learn/paths/architect-network-infrastructure/
• Architect storage infrastructure in Azure
  https://docs.microsoft.com/learn/paths/architect-storage-infrastructure/
• Architect compute infrastructure in Azure
  https://docs.microsoft.com/learn/paths/architect-compute-infrastructure/
• Architect infrastructure operations in Azure
  https://docs.microsoft.com/learn/paths/architect-infrastructure-operations/
• Architect a data platform in Azure
  https://docs.microsoft.com/learn/paths/architect-data-platform/
• Architect message brokering and serverless applications in Azure
  https://docs.microsoft.com/learn/paths/architect-messaging-serverless/
• Architect modern applications in Azure
  https://docs.microsoft.com/learn/paths/architect-modern-apps/
• Architect API integration in Azure
  https://docs.microsoft.com/learn/paths/architect-api-integration/
• Architect migration, business continuity, and disaster recovery in Azure
  https://docs.microsoft.com/learn/paths/architect-migration-bcdr/

OpenEdx (free)

• Deploying and Configuring Infrastructure
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.1+2019_T1/about
• Implementing Workloads and Security
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.2+2019_T1/about
• Understanding Cloud Architect Technology Solutions
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.3+2019_T1/about
• Creating and Deploying Apps
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.4+2019_T1/about
• Implementing Authentication and Secure Data
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.5+2019_T1/about
• Developing for the Cloud
  https://openedx.microsoft.com/courses/course-v1:Microsoft+AZ-300.6+2019_T1/about

Instructor-led training

Microsoft Learning Partner

• Course AZ-300T01-A: Deploying and Configuring Infrastructure
  https://docs.microsoft.com/en-us/learn/certifications/courses/az-300t01
• Course AZ-300T02-A: Implementing Workloads and Security
  https://docs.microsoft.com/en-us/learn/certifications/courses/az-300t02
• Course AZ-300T03-A: Understanding Cloud Architect Technology Solutions
  https://docs.microsoft.com/en-us/learn/certifications/courses/az-300t03
• Course AZ-300T04-A: Creating and Deploying Apps
  https://docs.microsoft.com/en-us/learn/certifications/courses/az-300t04
• Course AZ-300T06-A: Developing for the Cloud
  https://docs.microsoft.com/en-us/learn/certifications/courses/az-300t06

Exam Objectives

Deploy and configure infrastructure (40-45%)

• Analyze resource utilization and consumption
  • Configure diagnostic settings on resources
    https://azure.microsoft.com/en-gb/blog/azure-monitor-multiple-diagnostic-settings/
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-enable-diagnostic-logs-using-template
  • Create baseline for resources
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-alerts-dynamic-thresholds
  • Create and test alerts
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitor-alerts-unified-usage
  • Analyze alerts across subscription
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitor-alerts-unified-usage
  • Analyze metrics across subscription
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitor-alerts-unified-usage
  • Create action groups
    https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups
  • Monitor for unused resources
    https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
    https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
    https://docs.microsoft.com/en-us/azure/billing/billing-understand-your-bill
  • Monitor spend
    https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
    https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
    https://docs.microsoft.com/en-us/azure/billing/billing-understand-your-bill
  • Report on spend
    https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
    https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
    https://docs.microsoft.com/en-us/azure/billing/billing-understand-your-bill
  • Utilize Log Search query functions
    https://docs.microsoft.com/en-gb/azure/log-analytics/log-analytics-queries
  • View alerts in Azure Monitor logs
    https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-solution-alert-management
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-unified-alerts
  • Visualize diagnostics data using Azure Monitor Workbooks
    https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

• Create and configure storage accounts
  • Configure network access to the storage account
    https://azure.microsoft.com/en-gb/blog/announcing-virtual-network-integration-for-azure-storage-and-azure-sql/
  • Create and configure storage account
    https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?tabs=portal
  • Generate shared access signature
    https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1
    https://docs.microsoft.com/en-us/azure/storage/blobs/storage-dotnet-shared-access-signature-part-2
    https://docs.microsoft.com/en-us/rest/api/eventhub/generate-sas-token
  • Implement Azure AD authentication for storage
    https://azure.microsoft.com/en-us/blog/announcing-the-preview-of-aad-authentication-for-storage/
    https://azure.microsoft.com/en-us/blog/azure-storage-support-for-azure-ad-based-access-control-now-generally-available/
  • Install and use Azure Storage Explorer
    https://azure.microsoft.com/en-gb/features/storage-explorer/
  • Manage access keys
    https://docs.microsoft.com/en-us/azure/key-vault/key-vault-ovw-storage-keys
    https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage
  • Monitor activity log by using Azure Monitor logs
    https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-activity
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-activity-log-alerts
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-activity-logs
  • Implement Azure storage replication
    https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
    https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-grs
  • Implement Azure storage account failover
    https://azure.microsoft.com/en-us/blog/account-failover-now-in-public-preview-for-azure-storage/
• Create and configure a VM for Windows and Linux
  • Configure high availability
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-availability-sets
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/manage-availability
  • Configure monitoring
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
  • Configure networking
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
  • Configure storage
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
  • Configure virtual machine size
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
  • Implement dedicated hosts
    https://azure.microsoft.com/en-us/blog/introducing-azure-dedicated-host/
    https://azure.microsoft.com/en-us/services/virtual-machines/dedicated-host/
  • Deploy and configure scale sets
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-create-vmss
• Automate deployment of VMs
  • Modify Azure Resource Manager template
    https://docs.microsoft.com/en-us/azure/devops/pipelines/apps/cd/azure/build-azure-vm-template?view=vsts
  • Configure location of new VMs
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-portal
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-manage-vm
  • Configure VHD template
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image
    https://azure.microsoft.com/en-gb/resources/templates/201-vm-specialized-vhd-new-or-existing-vnet/
  • Deploy from template
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template
    https://docs.microsoft.com/en-us/azure/virtual-machines/linux/create-ssh-secured-vm-from-template
  • Save a deployment as an Azure Resource Manager template
    https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-use-resource-manager-template
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template
  • Deploy Windows and Linux VMs
    https://azure.microsoft.com/id-id/services/virtual-machines/
• Create connectivity between virtual networks
  • Create and configure Vnet peering
    http://www.msserverpro.com/configuring-azure-vnet-peering-using-azure-portal/
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
    https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal
  • Create and configure Vnet to Vnet connections
    http://www.msserverpro.com/configuring-azure-vnet-peering-using-azure-portal/
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
  • Verify virtual network connectivity
    http://www.msserverpro.com/configuring-azure-vnet-peering-using-azure-portal/
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
  • Create virtual network gateway
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
    https://blogs.technet.microsoft.com/canitpro/2017/06/28/step-by-step-configuring-a-site-to-site-vpn-gateway-between-azure-and-on-premise/
    https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal
• Implement and manage virtual networking
  • Configure private IP addressing
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-ip-addresses-overview-arm
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-addresses
  • Configure public IP addresses
    https://docs.microsoft.com/en-us/azure/virtual-network/public-ip-address-prefix
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-ip-addresses-overview-arm#public-ip-addresses
  • Create and configure network routes
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
    https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal
  • Create and configure network interface
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
    https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-vm
  • Create and configure subnets
    https://docs.microsoft.com/en-us/azure/virtual-network/subnet-extension
  • Create and configure virtual network
    https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-portal
    https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-powershell
    https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-cli
    Create and configure Network Security Groups and Application Security Groups
    https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
• Manage Azure Active Directory
  • Add custom domains
    https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
  • Configure Azure AD Identity Protection
    https://docs.microsoft.com/en-gb/azure/active-directory/identity-protection/enable
  • Configure Azure AD Join
    https://docs.microsoft.com/en-gb/azure/active-directory/user-help/user-help-join-device-on-network
  • Configure self-service password reset
    https://docs.microsoft.com/en-gb/azure/active-directory/authentication/concept-sspr-howitworks
  • Implement conditional access policies
    https://docs.microsoft.com/en-gb/azure/active-directory/conditional-access/app-based-mfa
  • Manage multiple directories
    https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-administer#how-can-i-add-and-manage-multiple-directories
  • Perform an access review
    https://docs.microsoft.com/en-gb/azure/active-directory/governance/access-reviews-overview
• Implement and manage hybrid identities
  • Install and configure Azure AD Connect
    https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/whatis-hybrid-identity#install-azure-ad-connect
  • Configure federation
    https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/whatis-hybrid-identity
  • Configure single sign-on
    https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/whatis-hybrid-identity
  • Manage and troubleshoot Azure AD Connect
    https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/how-to-connect-post-installation
  • Troubleshoot password sync and writeback
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-writeback
• Implement solutions that use virtual machines (VM)
  • Provision VMs
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-portal
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-powershell
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-cli
  • Create Azure Resource Manager templates
    https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-syntax
  • Configure Azure Disk Encryption for VMs
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview
  • Implement Azure Backup for VMs
    https://docs.microsoft.com/en-us/azure/backup/backup-overview

Implement workloads and security (25-30%)

• Migrate servers to Azure
  • Migrate servers using Azure Migrate
    https://docs.microsoft.com/en-us/azure/migrate/migrate-services-overview
  • Backup and restore data
    https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure
    https://docs.microsoft.com/en-us/azure/site-recovery/physical-azure-disaster-recovery
• Configure serverless computing
  • Create and manage objects
    https://azure.microsoft.com/en-us/overview/serverless-computing/
  • Manage a Logic App resource
    https://docs.microsoft.com/en-us/azure/logic-apps/
  • Manage Azure Function app settings
    https://docs.microsoft.com/en-us/azure/azure-functions/functions-how-to-use-azure-function-app-settings
  • Manage Event Grid
    https://docs.microsoft.com/en-us/azure/event-grid/
  • Manage Service Bus
    https://docs.microsoft.com/en-us/azure/service-bus-messaging/
• Implement application load balancing
  • Configure application gateway
    https://azure.microsoft.com/en-us/services/application-gateway/
    https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-introduction
    https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-ilb-arm
  • Configure Azure Front Door service
    https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview
  • Configure Azure Traffic Manager
    https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
• Integrate on premises network with Azure virtual network
  • Create and configure Azure VPN Gateway
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell
  • Create and configure site to site VPN
    https://blogs.technet.microsoft.com/canitpro/2017/06/28/step-by-step-configuring-a-site-to-site-vpn-gateway-between-azure-and-on-premise/
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
  • Configure Express-Route
    https://docs.microsoft.com/en-us/azure/expressroute/
    https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager
    https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-portal-resource-manager
  • Configure Virtual WAN
  • Verify on premises connectivity
    https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
  • Troubleshoot on premises connectivity with Azure
    https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-microsoft-azure-virtual-network
• Implement multi factor authentication (MFA)
  • Configure user accounts for MFA
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted#enable-azure-multi-factor-authentication
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates
  • Configure fraud alerts
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#fraud-alert
  • Configure bypass options
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#one-time-bypass
  • Configure trusted IPs
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#trusted-ips
  • Configure verification methods
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#selectable-verification-methods
• Manage role based access control (RBAC)
  • Create a custom role
    https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles
  • Configure access to Azure resources by assigning roles
    https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal
  • Configure management access to Azure
    https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-admin-roles-secure
  • Troubleshoot RBAC
    https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting
  • Implement Azure policies
    https://docs.microsoft.com/en-us/azure/governance/policy/overview
  • Assign RBAC roles
    https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#grant-access

Create and deploy apps (5-10%)

• Create web apps by using PaaS
  • Create an Azure App Service Web App
    https://docs.microsoft.com/en-us/azure/app-service/app-service-cli-samples
    https://docs.microsoft.com/en-us/azure/app-service/scripts/app-service-cli-deploy-staging-environment
  • Create documentation for the API
  • Create an App Service Web App for containers
    https://azure.microsoft.com/en-us/services/app-service/containers/
    https://docs.microsoft.com/en-us/azure/app-service/containers/
  • Create an App Service background task by using WebJobs
    https://docs.microsoft.com/en-us/azure/app-service/webjobs-sdk-get-started
    https://docs.microsoft.com/en-us/azure/app-service/websites-dotnet-deploy-webjobs
    https://docs.microsoft.com/en-us/azure/app-service/web-sites-create-web-jobs
  • Enable diagnostics logging
    https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs
• Design and develop apps that run in containers
  • Configure diagnostic settings on resources
    https://azure.microsoft.com/en-us/overview/containers/
    https://docs.microsoft.com/en-us/azure/containers/
  • Create a container image by using a Dockerfile
    https://blogs.msdn.microsoft.com/uk_faculty_connection/2016/09/23/getting-started-with-docker-and-container-services/
    https://docs.docker.com/docker-for-azure/deploy/
  • Create an Azure Kubernetes Service (ACS/AKS)
    https://azure.microsoft.com/en-us/services/kubernetes-service/
  • Publish an image to the Azure Container Registry
    https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli
    https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task
  • Implement an application that runs on an Azure Container Instance
    https://azure.microsoft.com/en-us/services/container-instances/
    https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart
  • Manage container settings by using code
    https://azure.microsoft.com/en-us/resources/samples/container-service-python-manage/

Implement authentication and secure data (5-10%)

• Implement authentication
  • Implement authentication by using certificates, forms-based authentication, tokens, or Windows-integrated authentication
    https://docs.microsoft.com/en-us/azure/app-service/app-service-authentication-overview
    https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios
    https://azure.microsoft.com/en-us/blog/azure-websites-authentication-authorization/
  • Implement multi-factor authentication by using Azure AD
    https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks
    https://azure.microsoft.com/en-us/resources/videos/multi-factor-authentication-for-azure-ad/
  • Implement OAuth2 authentication
    https://docs.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/oauth?view=azure-devops
  • Implement Managed identities for Azure resources Service Principal authentication
    https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
• Implement secure data solutions
  • Encrypt and decrypt data at rest and in transit
  • Encrypt data with Always Encrypted
    https://azure.microsoft.com/en-us/blog/transparent-data-encryption-or-always-encrypted/
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-always-encrypted
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-always-encrypted-azure-key-vault
    https://docs.microsoft.com/en-us/azure/security/azure-security-data-encryption-best-practices
  • Implement Azure Confidential Compute
    https://azure.microsoft.com/en-us/blog/introducing-azure-confidential-computing/
    https://azure.microsoft.com/en-us/blog/azure-confidential-computing/
  • Implement SSL/TLS communications
    https://docs.microsoft.com/en-us/azure/storage/common/storage-security-tls
  • Create, read, update, and delete keys, secrets, and certificates by using the KeyVault API
    https://azure.microsoft.com/en-us/services/key-vault/
    https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
    https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis
    https://docs.microsoft.com/en-us/azure/key-vault/about-keys-secrets-and-certificates

Develop for the cloud and for Azure storage (15-20%)

• Configure a message-based integration architecture
  • Configure an app or service to send emails
    https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-to-event-grid-integration-example
    https://azure.microsoft.com/en-gb/blog/azure-service-bus-now-integrates-with-azure-event-grid/
  • Configure Event Grid
    https://docs.microsoft.com/en-us/azure/event-grid/custom-event-to-hybrid-connection
    https://azure.microsoft.com/en-gb/blog/azure-service-bus-now-integrates-with-azure-event-grid/
    https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-app
  • Configure the Azure Relay service
    https://docs.microsoft.com/en-us/azure/service-bus-relay/relay-what-is-it
  • Create and configure a Notification Hub
    https://docs.microsoft.com/en-us/azure/notification-hubs/
    https://docs.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification-overview
  • Create and configure an Event Hub
    https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about
  • Create and configure a Service Bus
    https://docs.microsoft.com/en-us/azure/service-bus-relay/relay-what-is-it
  • Configure queries across multiple products
    https://azure.microsoft.com/en-us/resources/videos/azure-service-bus-event-hubs-101-with-dan-rosanova/
    https://azure.microsoft.com/en-us/blog/events-data-points-and-messages-choosing-the-right-azure-messaging-service-for-your-data/
• Develop for autoscaling
  • Implement autoscaling rules and patterns (schedule, operational/system metrics)
    https://azure.microsoft.com/en-us/features/autoscale/
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-autoscale
    https://docs.microsoft.com/en-us/azure/architecture/best-practices/auto-scaling
    https://docs.microsoft.com/en-us/azure/virtual-machines/windows/autoscale
    https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-overview
  • Implement code that addresses singleton application instances
    https://docs.microsoft.com/en-us/azure/azure-functions/durable/durable-functions-singletons
  • Implement code that addresses transient state
    https://docs.microsoft.com/en-us/azure/architecture/best-practices/transient-faults
• Develop solutions that use Cosmos DB storage
  • Create, read, update, and delete data by using appropriate APIs
    https://docs.microsoft.com/en-us/azure/cosmos-db/cassandra-introduction
  • Implement partitioning schemes
    https://docs.microsoft.com/en-us/azure/cosmos-db/partitioning-overview
  • Set the appropriate consistency level for operations
    https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels
• Develop solutions that use a relational database
  • Provision and configure relational databases
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-paas-vs-sql-server-iaas
  • Configure elastic pools for Azure SQL Database
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-transactions-overview
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-pool
  • Implement Azure SQL Database managed instances
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-index
  • Create, read, update, and delete data tables by using code
    https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connect-query-vscode