Microsoft Azure Advanced Administration Course - M55372A
This course is primarily designed for Azure administrators with experience in Azure who want to deepen their administrative knowledge of Azure services and solution architecture .
The lessons cover virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course describes how decisions in each of these areas impact a comprehensive solution.
Advanced Azure Course - Advanced Administration - Azure Architecture
Addressed to
This course is designed for IT professionals with experience in designing and implementing solutions that run on Microsoft Azure. They should have a broad understanding of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Advanced Azure administrators use the Azure Portal and, as they gain more experience, transition to the command-line interface. Candidates should have basic Azure administration skills and knowledge. It is recommended that participants complete the AZ-104: Microsoft Azure Administrator course before taking this course.
Training objectives
This official Microsoft course is designed to train IT professionals in the advanced administration of Azure environments. Upon completion, participants will be able to:
- Manage Azure subscriptions and configure governance policies.
- Protect identities using Azure Active Directory and related services.
- Configure virtual networks, peering, gateways, and hybrid connectivity.
- Implement storage solutions: blobs, files, synchronization, and security.
- Create, scale, and manage virtual machines.
- Implement web applications and containers.
- Back up, share data, and monitor cloud solutions.
- Optimize the performance and scalability of services in Azure.
Microsoft Azure Advanced Administration Course Content
Module 1: Implementing Azure Active Directory
In this module, you will learn how to protect identities with Azure Active Directory and implement users and groups. This module includes:
Lessons
- Azure Active Directory Overview
- Users and groups
- Domains and custom domains
- Azure AD identity protection
- Implement conditional access
- (Locations named in conditional access)
- Configure guest users (B2B) in Azure AD
- Manage multiple directories
- Azure AD Identity Governance
- Access reviews
- Access packages
- Privileged identity management
Lab: Implementing Azure AD Security
- Implement Azure AD conditional access
- Implement Azure AD identity protection
After completing this module, students will be able to:
- Understanding how multiple AAD organizations interact
- Add guest users to Azure AD
- Configure location condition settings
- Configure privileged identity management
- Implement conditional access
Module 2: Implementing and managing hybrid identities
In this module, you will learn how to install and configure Azure AD Connect and implement Azure AD Connect Health. This module includes:
Lessons
- Install and configure Azure AD Connect and Cloud Sync
- Configure password synchronization and password rewriting
- Configure Azure AD Connect Health
Lab: Implementing and managing hybrid identities
- Manage Azure Active Directory identities
- Synchronize the Active Directory forest with the Azure AD tenant
After completing this module, students will be able to:
- Implement seamless Azure AD single sign-on
- Perform an Azure AD Connect installation
- Deploy Azure AD Connect Health
Module 3: Implementing virtual networks
In this module, you will learn basic virtual networking concepts, such as virtual networks and subnets, IP addressing, network security groups, Azure Firewall, and Azure DNS. This module includes:
Lessons
- Virtual Networks
- Virtual network exchange
- VPN
- Advanced virtual networks
Lab: Azure Networks
- Create a virtual network
- Azure Virtual Machine NIC Management
- IP Addressing
- VNet Peering
Lab: Connect on-premises environments to Azure
- Create a site-to-site VPN
Lab: Azure Advanced Networking
- Network traffic filtering with network security groups
- Route network traffic using a routing table
- Create a private endpoint
- Create a private link service
- Restrict network access to PaaS resources with service endpoints
After completing this module, students will be able to:
- Connect services with Virtual Network Peering
- Configure VNet peering
- Understanding the service chain
- Modify or delete VNet Peering
- Site-to-site VPN connections
Module 4: Implementing virtual machines for Windows and Linux
In this module, you will learn about Azure virtual machines, including planning, creation, availability, and extensions.
Lessons
- Select the virtual machine size
- Configure high availability
- Availability sets
- Availability zones
- Proximity placement groups
- Deploy Azure dedicated hosts
- Implement and configure scale sets
- Set up Azure Disk Encryption
- Advanced Azure virtual machine management
- Virtual Machine Update Management Center
- Automatic management of virtual machines
- Virtual machine execution command
- Virtual Machine Inspector
- Reset password
- Reimplement / Reapply
- Serial console
Laboratory: Implementation of virtual machines for Windows
- Set up Azure Disk Encryption
- Implementation of the Azure IaaS HA computing architecture
After completing this module, students will be able to:
- Plan for virtual machine deployments
- Create virtual machines
- Configure the availability of virtual machines, including scale sets
- Understand the high availability options for virtual machines in Azure
Module 5: Implementing load balancing and network security
In this module, you will learn about network traffic strategies, including network routing and service endpoints, Azure Load Balancer, Azure Application Gateway, and Traffic Manager.
Lessons
- Deploy Azure Load Balancer
- Implement an Application Gateway
- Understanding the web application firewall
- Deploy Azure Firewall
- Implement Azure Front Door
- Azure Traffic Manager Implementation
- Implement network security groups and application security groups
- Deploy Azure Bastion
Laboratory: Implementation of load balancing and network security
- Direct web traffic with Azure Application Gateway
- Deploy Azure Firewall
- Implement Azure Front Door
- Deploy Azure Traffic Manager
- Deploy Azure Bastion
After completing this module, students will be able to:
- Select a load balancer solution
- Configure the application gateway
- Deploy Azure Firewall
- Create an Azure gateway
- Understanding Traffic Manager's routing methods
- Configure network security groups (NSG)
Module 6: Implementing Storage Accounts
In this module, you will learn about basic storage functions, including storage accounts, blob storage, Azure files and file synchronization, storage security, and storage tools.
Lessons
- Storage accounts
- Blob storage
- Storage security
- Storage management
- Access to blobs and queues using AAD
Lab: Implementing and configuring Azure Storage file and blob services
- Implementation and configuration of Azure Storage file and blob services
After completing this module, students will be able to:
- Understand the services and types of storage accounts
- Configure blob storage, accounts, containers, and access levels
- Implement shared access signatures (SAS)
- Understand Azure Storage firewalls and virtual networks
Module 7: Implementing NoSQL Databases
In this module, you will learn about Azure Table Storage and get recommendations for options for the CosmoDB APIs.
Lessons
- Configure storage account tables
- Select the appropriate CosmosDB APIs
Laboratory: Implementation and configuration of Cosmos DB
- Globally distributed databases with Cosmos DB
After completing this module, students will be able to:
- Describe the data model of the table service
- Understanding the options for Azure Cosmos DB
- Understand high availability with CosmosDB
Module 8: Implementing Azure SQL Databases
In this module, you will create a single Azure SQL Database, create a managed instance of Azure SQL Database, and review Azure SQL Database high availability.
Lessons
- Configure Azure SQL database settings
- Deploy managed instances of Azure SQL Database
- Azure High Availability and SQL Database
Lab: Implementing Azure SQL Databases
- Implement Azure SQL databases
In this module you will learn how
- Create an Azure SQL database (single database)
- Create a managed instance of Azure SQL Database
- Recommend high-availability architectural models used in Azure SQL Database
Module 9: Automating the deployment and configuration of resources
In this module, you will learn about the tools an Azure administrator uses to manage their infrastructure. This includes the Azure Portal, Cloud Shell, Azure PowerShell, CLI, Resource Manager, and Bicep templates.
Lessons
- Azure Resource Manager Templates
- Save a template for a virtual machine
- Evaluate the location of new resources
- Configure a virtual hard disk template
- Implement from a template
- Create and implement bicep templates
- Create and run an automation runbook
Lab: Automate the deployment and configuration of resources
- Implement resources using ARM templates
- Deploy resources using Azure Bicep templates
- Automating infrastructure health with Azure Automation runbooks
After completing this module, students will be able to:
- Leverage Azure Resource Manager to organize resources
- Use ARM templates to implement resources
- Create and run an automation runbook
- Deploying an Azure virtual machine from a VHD
- Understanding Azure encryption technologies
Module 10: Implementing and managing Azure governance
In this module, you will learn how to manage your subscriptions and accounts, implement Azure policies, and use role-based access control.
Lessons
- Create administration groups, subscriptions, and resource groups
- Overview of role-based access control (RBAC)
- Role-based access control (RBAC) roles
- Implement and configure an Azure policy
- Azure Plans
Lab: Implementing and managing Azure governance
- Define a custom RBAC role
- Assign a custom RBAC role
- Azure Blueprints Implementation
After completing this module, students will be able to:
- Understanding the organization of the resource group
- Understanding how RBAC works
- Create an Azure AD access review
- Create and manage policies to enforce compliance
Module 11: Application Security Management
In this module, you will learn about Azure Key Vault and how to implement authentication using Azure Managed Identities.
Lessons
- Azure Key Vault
- Azure Managed Identity
Laboratory: Implementing security for applications
- Azure Key Vault Implementation
- Creation of managed identities
After completing this module, students will be able to:
- Explain the uses of Key Vault, such as managing secrets, keys, and certificates.
- Use managed identities with Azure resources
Module 12: Managing workloads in Azure
In this module, you will learn how to migrate workloads using Azure Migrate, perform agent-based and agentless VMware migrations, and perform Azure Backup and Azure Site Recovery.
Lessons
- Migrate workloads using Azure Migrate
- VMware – Agentless Migration
- VMware – Agent-based migration
- Implement Azure Backup
- Azure site recovery to Azure
- Deploy Azure Update Management
Lab: Protecting Hyper-V virtual machines using Azure Site Recovery
- Set up Azure Site Recovery
- Perform a failover test
- Perform a planned failover
- Perform an unplanned failover
After completing this module, students will be able to:
- Understanding agent-based migration architecture
- Prepare for your Azure migration
- Prepare a local VMware environment
- Understanding the Azure virtual machine backup architecture
- Manage updates and patches for Azure virtual machines
Module 13: Implementing container-based applications
In this module, you will learn how to run Azure container instances and how to deploy Kubernetes with AKS.
Lessons
- Azure container instances
- Configure Azure Kubernetes Service
- Networks
- Types and uses of node groups
- Cluster update
- Node update
Lab: Implementing the Azure Kubernetes service
- Deploy Azure Kubernetes Service
After completing this module, students will be able to:
- Run Azure Container instances
- Implement Kubernetes with AKS
Module 14: Implementing an application infrastructure
In this module, you will learn how to create an App Service web application for containers, how to create and configure an App Service plan, and how to create and manage deployment slots.
Lessons
- Create and configure Azure App Service
- Create an App Service web application for containers
- Create and configure an App Service plan
- Configure the network for an application service
- Create and manage deployment slots
- Implement logical applications
- Implement Azure features
Lab: Implementing an application infrastructure
- Deploying an Azure App Service web application with a staging area
- Azure Application Services: Advanced Configuration
- Implement the integration of Azure Logic Apps with Azure Event Grid
- Deploy Azure Logic Apps: Check traffic according to a schedule with
- Azure Logic Apps
After completing this module, students will be able to:
- Configure an Azure application service
- Create an application service plan
- Create a workflow with Azure Logic Apps
- Create a feature app
Module 15: Implementing Cloud Infrastructure Monitoring
In this module, you will learn about Azure Monitor, Azure Workbooks, Azure Alerts, Network Watcher, Azure Service Health, and Azure Application Insights.
Lessons
- Monitoring the security of Azure infrastructure
- Azure Monitor
- Azure Workbooks
- Azure Alerts
- Record analysis
- Microsoft Defender for the Cloud
- Network monitor
- Azure service status
- Monitor Azure costs
- Information about Azure applications
- Unified monitoring in Azure
Laboratory: Implementation of cloud infrastructure monitoring
- Azure Monitor Implementation
- Introduction to record analysis
- Monitoring network communication using Network Watcher
- Deploy Microsoft Defender for the cloud
After completing this module, students will be able to:
- Understanding Azure Log Analytics
- Understanding the status of the Azure service
Advanced course covering essential topics missing from AZ-104
Completing this course allows students to take and pass both the AZ-104 and AZ-305 exams.
Prerequisites
- Basic knowledge of systems administration.
- Previous experience in:
- IT infrastructure.
- Networks, storage and virtualization.
- Familiarity with cloud concepts and Azure services.
- Ideal for those who have already completed the AZ-900 (Azure Fundamentals) course or have practical experience in the Azure portal.
Language
-
Course: English
-
Labs: English
