AZ-304 - Azure Architect Design

AZ-304


Last updated: 06/03/2020


Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.


Skyline Academy:

https://courses.skylinesacademy.com/p/az-301

Scott Duffy:

https://www.udemy.com/course/az301-azure/


Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.

Need links


Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-304


The study guide

Design Monitoring (10-15%)


Design for cost optimization

Recommend a solution for cost management and cost reporting
link

Recommend solutions to minimize costs \

Design a solution for logging and monitoring

Determine levels and storage locations for logs
link

Plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
link

Recommend appropriate monitoring tool(s) for a solution
link

Choose a mechanism for event routing and escalation
link

Recommend a logging solution for compliance requirements
link


Design Identity and Security (25-30%)

Design authentication

Recommend a solution for single-sign on
link

Recommend a solution for authentication
link

Recommend a solution for Conditional Access, including multi-factor authentication
link

Recommend a solution for network access authentication
link

Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD Connect Health
link

Recommend a solution for user self-service
link

Recommend and implement a solution for B2B integration
link


Design authorization

Choose an authorization approach
link

Recommend a hierarchical structure that includes management groups, subscriptions and resource groups
link

Recommend an access management solution including RBAC policies, access reviews, role assignments, physical access, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
link


Design governance

Recommend a strategy for tagging
link

Recommend a solution for using Azure Policy
link

Recommend a solution for using Azure Blueprint
link


Design security for applications

Recommend a solution that includes KeyVault
What can be stored in KeyVault
link

KeyVault operations
link

KeyVault regions
link

Recommend a solution that includes Azure AD Managed Identities
link

Recommend a solution for integrating applications into Azure AD
link


Design Data Storage (15-20%)

Design a solution for databases

Select an appropriate data platform based on requirements
link

Recommend database service tier sizing
link

Recommend a solution for database scalability
link

Recommend a solution for encrypting data at rest, data in transmission, and data in use
link


Design data integration

Recommend a data flow to meet business requirements
link

Recommend a solution for data integration, including Azure Data Factory, Azure Data Bricks, Azure Data Lake, Azure Synapse Analytics
link


Select an appropriate storage account

Choose between storage tiers
link

Recommend a storage access solution
link

Recommend storage management tools
link


Design Business Continuity (10-15%)

Design a solution for backup and recovery

Recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
link

Design and Azure Site Recovery solution
Recommend a site recovery replication policy
link

Recommend a solution for site recovery capacity
link

Recommend a solution for site failover and failback (planned/unplanned)
link

Recommend a solution for the site recovery network
link

Recommend a solution for recovery in different regions
link

Recommend a solution for Azure Backup management
link

Design a solution for data archiving and retention
Recommend storage types and methodology for data archiving
link

Identify business compliance requirements for data archiving
link

Identify requirements for data archiving
link

Identify SLA(s) for data archiving
link

Recommend a data retention policy
link


Design for high availability

Recommend a solution for application and workload redundancy, including compute, database, and storage
link

Recommend a solution for autoscaling
link

Identify resources that require high availability
link

Identify storage types for high availability
link

Recommend a solution for geo-redundancy of workloads
link


Design Infrastructure (25-30%)

Design a compute solution

Recommend a solution for compute provisioning
link

Determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers
link

Recommend a solution for containers
AKS versus ACI and the configuration of each one
link

Recommend a solution for automating compute management
link


Design a network solution

Recommend a solution for network addressing and name resolution
link

Recommend a solution for network provisioning
link

Recommend a solution for network security
Private endpoints
link

Firewalls
link

Gateways
link

Recommend a solution for network connectivity to the Internet, on-premises networks, and other Azure virtual networks
link

Recommend a solution for automating network management
link

Recommend a solution for load balancing and traffic routing
link


Design an application architecture

Recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks
link

Recommend an orchestration solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions
Select an automation method
link

Choose which resources or lifecycle steps will be automated
link

Design integration with other sources such as an ITSM solution
link

Recommend a solution for monitoring automation
link

Recommend a solution for API integration
Design an API gateway strategy
link

Determine policies for internal and external consumption of APIs
link

Recommend a hosting structure for API management
link

Recommend when and how to use API Keys
link


Design migrations

Assess and interpret on-premises servers, data, and applications for migration
link

Recommend a solution for migrating applications and VMs
link

Recommend a solution for migration of databases
Determine migration scope, including redundant, related, trivial, and outdated data
link