AZ-303 - Azure Architect Technologies

AZ-303

Links you may find useful

Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.

Skyline Academy:

https://courses.skylinesacademy.com/p/microsoft-az-300-certification-azure-architect-technologies

Scott Duffy:

https://www.udemy.com/course/70534-azure/

Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.

Architect great solutions in Azure

https://docs.microsoft.com/learn/paths/architect-great-solutions-in-azure

Architect network infrastructure in Azure

https://docs.microsoft.com/learn/paths/architect-network-infrastructure

Architect a data platform in Azure

https://docs.microsoft.com/learn/paths/architect-data-platform

Architect storage infrastructure in Azure

https://docs.microsoft.com/learn/paths/architect-storage-infrastructure

Architect compute infrastructure in Azure

https://docs.microsoft.com/learn/paths/architect-compute-infrastructure

Architect infrastructure operations in Azure

https://docs.microsoft.com/learn/paths/architect-infrastructure-operations

Architect migration, business continuity, and disaster recovery in Azure

https://docs.microsoft.com/learn/paths/architect-migration-bcdr

Architect modern applications in Azure

https://docs.microsoft.com/learn/paths/architect-modern-apps

Architect secure infrastructure in Azure

https://docs.microsoft.com/learn/paths/architect-secure-infrastructure

Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-303

The study guide

Implement and monitor an Azure infrastructure (50-55%)

Implement cloud infrastructure monitoring

Monitor security

https://docs.microsoft.com/en-us/azure/security-center/security-center-monitoring

https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring

https://docs.microsoft.com/en-us/azure/security/fundamentals/infrastructure-monitoring

Monitor performance

Configure diagnostic settings on resources

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings-template

Create a performance baseline for resources

https://docs.microsoft.com/en-us/rest/api/monitor/metricbaseline/get

Monitor for unused resources

https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Monitor performance capacity

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-overview

Visualize diagnostics data using Azure Monitor

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-visualizations

Monitor health and availability

Monitor networking

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-insights-overview

Monitor service health

https://azure.microsoft.com/en-us/features/service-health

Monitor cost

Monitor spend

https://docs.microsoft.com/en-us/azure/architecture/framework/cost/monitoring

https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending

Report on spend

https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/download-azure-invoice-daily-usage-date

Configure advanced logging

Implement and configure Azure Monitor insights, including App Insights, Networks, Containers

https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/insights-overview

Configure a Log Analytics workspace

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace

Configure logging for workloads

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-logs

Initiate automated responses by using Action Groups

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

Configure and manage advanced alerts

Collect alerts and metrics across multiple subscriptions

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

View Alerts in Azure Monitor logs

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview

Implement storage accounts

Select storage account options based on a use case

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

Configure Azure Files and blob storage

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

Configure network access to the storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Implement Shared Access Signatures and access policies

https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Implement Azure AD authentication for storage

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad

Manage access keys

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Implement Azure storage replication

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

Implement Azure storage account failover

https://docs.microsoft.com/en-us/azure/storage/common/storage-initiate-account-failover

Implement VMs for Windows and Linux

Configure High Availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

Configure storage for VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types

Select virtual machine size

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/sizes

Implement Azure Dedicated Hosts

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts-portal

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts

Deploy and configure scale sets

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

Configure Azure Disk Encryption

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview

Automate deployment and configuration of resources

Save a deployment as an Azure Resource Manager template

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal

Modify Azure Resource Manager template

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell

Evaluate location of new resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/conditional-resource-deployment

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-location

Configure a virtual disk template

https://docs.microsoft.com/en-us/azure/marketplace/cloud-partner-portal/virtual-machine/cpp-deploy-json-template

Deploy from a template

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal

Manage a template library

https://bentaylor.work/2016/05/azure-arm-template-library/

Create and execute an automation runbook

https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-create-runbook

Implement virtual networking

Implement VNet to VNet connections

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Implement VNet peering

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

Implement Azure Active Directory

Add custom domains

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

Configure Azure AD Identity Protection

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

Implement self-service password reset

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing

Implement Conditional Access including MFA

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk

Configure user accounts for MFA

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa

Configure fraud alerts

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

**Configure bypass options

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

Configure Trusted IPs

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-configure-named-locations

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Configure verification methods

https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-manage-settings

https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-first-time

Implement and manage guest accounts

https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b

https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-guest-access-with-access-reviews

https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal

Manage multiple directories

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-directory-independence

Implement and manage hybrid identities

Install and configure Azure AD Connect

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express

Identity synchronization options

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

Configure and manage password sync and password writeback

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

Configure single sign-on

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications

Use Azure AD Connect Healths

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/hybrid/whatis-azure-ad-connect

Implement management and security solutions (25-30%)

Manage workloads in Azure

Migrate workloads using Azure Migrate Assess infrastructure

https://docs.microsoft.com/en-gb/azure/migrate/migrate-services-overview

Select a migration method

https://azure.microsoft.com/en-gb/migration/migration-journey/#migrate

Prepare the on-premises for migration

https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure

Recommend target infrastructure

https://azure.microsoft.com/en-gb/blog/identify-your-move-groups-and-target-sizes-for-migration-with-azure-migrate/

Implement Azure Backup for VMs

https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm

Implement disaster recovery

https://azure.microsoft.com/en-gb/services/site-recovery/

Implement Azure Update Management

https://docs.microsoft.com/en-us/azure/automation/automation-update-management

Implement load balancing and network security

Implement Azure Load Balancer

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

Implement an application gateway

https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal

Implement a Web Application Firewall

https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview

Implement Azure Firewall

https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Implement the Azure Front Door Service

https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

Implement Azure Traffic Manager

https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile

Implement Network Security Groups and Application Security Groups

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Implement Bastion

https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

Implement and manage Azure governance solutions

Create and manage hierarchical structure that contains management groups, subscriptions and resource groups

https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

Assign RBAC roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Create a custom RBAC role

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Configure access to Azure resources by assigning roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Configure management access to Azure

https://docs.microsoft.com/en-us/azure/role-based-access-control/conditional-access-azure-management

Interpret effective permissions

https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Set up and perform an access review

https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

Implement and configure an Azure Policy

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Implement and configure an Azure Blueprint

https://docs.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal

Manage security for applications

Implement and configure KeyVault

https://docs.microsoft.com/en-us/azure/key-vault/quick-create-portal

Implement and configure Azure AD Managed Identities

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm

Register and manage applications in Azure AD

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-application-management

Implement solutions for apps (10-15%)

Implement an application infrastructure

Create and configure Azure App Service

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create an App Service Web App for Containers

https://docs.microsoft.com/en-us/azure/app-service/containers/quickstart-docker

Create and configure an App Service plan

https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage

Configure an App Service

https://docs.microsoft.com/en-us/azure/app-service/configure-common

Configure networking for an App Service

https://docs.microsoft.com/en-us/azure/app-service/networking-features

Create and manage deployment slots

https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots

Implement Logic Apps

https://docs.microsoft.com/en-us/azure/logic-apps/quickstart-create-first-logic-app-workflow

Implement Azure Functions

https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-first-azure-function

Implement container-based applications

Create a container image

https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task

Configure Azure Kubernetes Service

https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Publish and automate image deployment to the Azure Container Registry

https://docs.microsoft.com/en-us/azure/container-registry/

Publish a solution on an Azure Container Instance

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Implement and manage data platforms (10-15%)

Implement NoSQL databases

Configure storage account tables

https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overview

Select appropriate CosmosDB APIs

https://docs.microsoft.com/en-us/azure/cosmos-db/table-introduction

Set up replicas in CosmosDB

https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability

Implement Azure SQL databases

Configure Azure SQL database settings

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-howto-single-database

Implement Azure SQL Database managed instances

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-get-started

Configure HA for an Azure SQL database

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability

Publish an Azure SQL database

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-dotnet-sqldatabase