Microsoft Azure Architect Technologies Training Course

Module 1: Implement Azure Active Directory for Government

This module covers securing identities with Azure Active Directory and implementing users and groups. The content includes:

Lessons

• Overview of Azure Active Directory
• Users and Groups
• Domains and Custom Domains
• Azure AD Identity Protection
• Implement Conditional Access
• Configure Fraud Alerts for MFA
• Implement Bypass Options
• Configure Guest Users in Azure AD
• Configure Trusted IPs
• Manage Multiple Directories

Upon completing this module, students will be able to:

• Understand how multiple AAD organizations interact for government
• Add Guest Users to Azure AD
• Configure Location Condition Configuration
• Configure Azure MFA settings
• Implement Conditional Access Azure MFA
• Create a Blueprint

Module 2: Implement and Manage Hybrid Identities for Government

In this module, students will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health. The content includes:

Lessons

• Install and Configure Azure AD Connect
• Configure Password Sync and Password Writeback
• Configure Azure AD Connect Health

Upon completing this module, students will be able to:

• Implement Azure AD seamless Single Sign-On for government
• Perform an Azure AD Connect installation
• Implement Azure AD Connect Health

Module 3: Implement Virtual Networking for Government

This module covers basic virtual networking concepts such as virtual networks and subnetting, IP addressing, network security groups, Azure Firewall, and Azure DNS. The content includes:

Lessons

• Virtual Network Peering
• Implement VNet Peering

Upon completing this module, students will be able to:

• Connect services with Virtual Network Peering for government
• Configure VNet Peering
• Understand Service Chaining
• Modify or delete VNet Peering

Module 4: Implement VMs for Windows and Linux for Government

In this module, students will learn about Azure virtual machines, including planning, creating, availability, and extensions. The content includes:

Lessons

• Select Virtual Machine Size
• Configure High Availability
• Implement Azure Dedicated Hosts
• Deploy and Configure Scale Sets
• Configure Azure Disk Encryption

Upon completing this module, students will be able to:

• Plan for virtual machine implementations for government
• Create virtual machines
• Configure virtual machine availability, including scale sets
• Understand High Availability options for VMs in Azure for government

Module 5: Implement Load Balancing and Network Security for Government

This module covers network traffic strategies, including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager. The content includes:

Lessons

• Implement Azure Load Balancer
• Implement an Application Gateway
• Understand Web Application Firewall
• Implement Azure Firewall
• Implement Azure Front Door
• Implementing Azure Traffic Manager
• Implement Network Security Groups and Application Security Groups
• Implement Azure Bastion

Lab : Implementing Highly Available Azure IaaS Compute Architecture for Government

• Describe characteristics of highly available Azure VMs residing in the same availability set
• Describe characteristics of highly available Azure VMs residing in different availability zones
• Describe characteristics of automatic horizontal scaling of Azure VM Scale Sets
• Describe characteristics of manual vertical scaling of Azure VM Scale Sets

Upon completing this module, students will be able to:

• Select a Load Balancer solution for government
• Configure Application Gateway
• Implement Azure Firewall
• Create an Azure Front Door
• Understand Traffic Manager routing methods
• Configure Network Security Groups (NSGs)

Module 6: Implement Storage Accounts for Government

This module covers basic storage features, including storage accounts, blob storage, Azure files and File Sync, storage security, and storage tools. The content includes:

Lessons

• Storage Accounts
• Blob Storage
• Storage Security
• Managing Storage
• Accessing Blobs and Queues using AAD

Lab : Implementing and Configuring Azure Storage File and Blob Services for Government

• Implement authorization of Azure Storage blobs by leveraging shared access signatures
• Implement authorization of Azure Storage blobs by leveraging Azure Active Directory
• Implement authorization of Azure Storage file shares by leveraging access keys
• Configure Azure Storage Firewalls and Virtual Networks

Upon completing this module, students will be able to:

• Understand Storage Account services and types for government
• Configure Blob storage, accounts, containers, and access tiers
• Implement Shared Access Signatures (SAS)
• Understand Azure Storage firewalls and virtual networks

Module 7: Implement NoSQL Databases for Government

In this module, students will learn about Azure Table Storage and recommend options for CosmosDB APIs. The content includes:

Lessons

• Configure Storage Account Tables
• Select Appropriate CosmosDB APIs

Upon completing this module, students will be able to:

• Outline the Table Service Data Model for government
• Understand options for Azure Cosmos DB
• Understand high availability using CosmosDB for government

Module 8: Implement Azure SQL Databases for Government

In this module, students will create an Azure SQL Database single database, a managed instance, and review high-availability options. The content includes:

Lessons

• Configure Azure SQL Database Settings
• Implement Azure SQL Database Managed Instances
• High-Availability and Azure SQL Database
• Create an Azure SQL Database (single database)
• Create an Azure SQL Database Managed Instance
• Recommend high-availability architectural models used in Azure SQL Database for government

Module 9: Automate Deployment and Configuration of Resources for Government

This module covers the tools an Azure Administrator uses to manage their infrastructure, including the Azure Portal, Cloud Shell, Azure PowerShell, CLI, and Resource Manager Templates. The content includes:

Lessons

• Azure Resource Manager Templates
• Save a Template for a VM
• Evaluate Location of New Resources
• Configure a Virtual Hard Disk Template
• Deploy from a template
• Create and Execute an Automation Runbook

Upon completing this module, students will be able to:

• Leverage Azure Resource Manager to organize resources for government
• Use ARM Templates to deploy resources for government
• Create and Execute an Automation Runbook for government
• Deploy an Azure VM from a VHD for government
• Understand Azure encryption technologies for government

Module 10: Implement and Manage Azure Governance for Government

This module covers managing subscriptions and accounts, implementing Azure policies, and using Role-Based Access Control. The content includes:

Lessons

• Create Management Groups, Subscriptions, and Resource Groups
• Overview of Role-Based Access Control (RBAC)
• Role-Based Access Control (RBAC) Roles
• Azure AD Access Reviews
• Implement and Configure an Azure Policy
• Azure Blueprints

Lab : Implementing and Configuring Azure Storage File and Blob Services for Government

• Implement authorization of Azure Storage blobs by leveraging shared access signatures
• Implement authorization of Azure Storage blobs by leveraging Azure Active Directory
• Implement authorization of Azure Storage file shares by leveraging access keys

Lab : Managing Azure Role-Based Access Control for Government

• Define a custom RBAC role
• Assign a custom RBAC role

Upon completing this module, students will be able to:

• Understand Resource Group Organization for government
• Understand how RBAC works for government
• Create an Azure AD access review for government
• Create and manage policies to enforce compliance for government

Module 11: Manage Security for Applications for Government

In this module, students will learn about Azure Key Vault and implementing authentication using Azure Managed Identities. The content includes:

Lessons

• Azure Key Vault
• Azure Managed Identity

Upon completing this module, students will be able to:

• Explain Key Vault uses such as secrets, key, and certificate management for government
• Use Managed Identities with Azure resources for government

Module 12: Manage Workloads in Azure for Government

In this module, students will learn how to migrate workloads using Azure Migrate, perform VMware agent-based and agent-less migrations, and implement Azure Backup and Azure Site Recovery. The content includes:

Lessons

• Migrate Workloads using Azure Migrate
• VMware - Agentless Migration
• VMware - Agent-Based Migration
• Implement Azure Backup
• Azure to Azure Site Recovery
• Implement Azure Update Management

Lab : Protecting Hyper-V VMs by using Azure Site Recovery for Government

• Configure Azure Site Recovery
• Perform test failover
• Perform planned failover
• Perform unplanned failover

Upon completing this module, students will be able to:

• Understand agent-based migration architecture for government
• Prepare for Azure for migration for government
• Prepare an on-premises VMware environment for government
• Understand Azure VM backup architecture for government
• Manage updates and patches for Azure VMs for government

Module 13: Implement Container-Based Applications for Government

In this module, students will learn how to run Azure Container instances and deploy Kubernetes with AKS. The content includes:

Lessons

• Azure Container Instances
• Configure Azure Kubernetes Service

Upon completing this module, students will be able to:

• Run Azure Container instances for government
• Deploy Kubernetes with AKS for government

Module 14: Implement an Application Infrastructure for Government

In this module, students will learn how to create an App Service web app for containers, configure an App Service Plan, and manage deployment slots. The content includes:

Lessons

• Create and Configure Azure App Service
• Create an App Service Web App for Containers
• Create and Configure an App Service Plan
• Configure Networking for an App Service
• Create and Manage Deployment Slots
• Implement Logic Apps
• Implement Azure Functions

Lab : Configuring a Message-Based Integration Architecture for Government

• Configure and validate an Azure Function App Storage Blob trigger
• Configure and validate an Azure Event Grid subscription-based queue messaging

Lab : Implementing an Azure App Service Web App with a Staging Slot for Government

• Implement Blue/Green deployment pattern by using deployment slots of Azure App Service web apps
• Perform A/B testing by using deployment slots of Azure App Service web apps

Upon completing this module, students will be able to:

• Configure an Azure App Service for government
• Create an App Service Plan for government
• Create a Workflow using Azure Logic Apps for government
• Create a Function App for government

Module 15: Implement Cloud Infrastructure Monitoring for Government

In this module, students will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, and Azure Application Insights. The content includes:

Lessons

• Azure Infrastructure Security Monitoring
• Azure Monitor
• Azure Workbooks
• Azure Alerts
• Log Analytics
• Network Watcher
• Azure Service Health
• Monitor Azure Costs
• Azure Application Insights
• Unified Monitoring in Azure

In this module, students will learn how to:

• Understand Azure Log Analytics for government
• Understand Azure Service Health for government