LLPA

Microsoft Azure Architect Design (AZ-304)

Enterprise Skills InitiativeAzure Apps, Infra, Data & AIMicrosoft Azure Architect Design (AZ-304)

Description

This course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. Lessons include design considerations related to logging, cost analysis, authentication and authorization, governance, security, storage, high availability, and migration. This role requires decisions in multiple areas that affect an overall design solution.

Prerequisites
Skills Covered
Audience Profile
Course Outline
Prerequisites

Successful Azure Architects begin this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, networking, applications and databases.

  • Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks.
  • Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
  • Understanding of Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
  • Understanding of resilience and disaster recovery, including backup and restore operations.
  • Understanding of Applications development and APIs.
  • Understanding of Databases, both SQL such as MS SQL, MySQL or Postgres, and Non-SQL databases like MongoDB.
  • Understanding of decoupling Applications and services, for example, Queues, tables, Cache.
  • Understanding of Security concepts to protect your environment, like encryption at rest, encryption in transit, SSL, TLS.

Prerequisite Courses (or equivalent knowledge):

Skills Covered
  • Recommend solutions to minimize costs
  • Recommend a solution for Conditional Access, including multi-factor authentication
  • Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD Connect
Audience Profile

This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Azure Solution Architects use the Azure Portal and as they become more adept they use the Command Line Interface. Candidates must have expert-level skills in Azure administration and have experience with Azure development processes and DevOps processes.

Course Outline

Module 1: Design a Compute Solution

In this module, you will learn about the appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.

Lessons
  • Recommend a Solution for Compute Provisioning
  • Determine Appropriate Compute Technologies
  • Recommend a Solution for Containers
  • Recommend a Solution for Automating Compute Management
Lab : Implementing Containers on Azure
  • Implement containers running in Azure VMs
  • Deploy containers to Azure Container Instances
  • Deploy containers to Azure Kubernetes Service (AKS) clusters

Module 2: Design a Network Solution

In this module, you will learn about solutions for network addressing and name resolution, network provisioning, and network security.

Lessons
  • Recommend a Solution for Network Addressing and Name Resolution
  • Recommend a Solution for Network Provisioning
  • Recommend a Solution for Network Security
  • Recommend a Solution for internet Connectivity and On-Premises Networks
  • Recommend a Solution for Automating Network Management
  • Recommend a Solution for Load Balancing and Traffic Routing

Module 3: Design for Migration

In this module, you will learn about recommending a solution for migrating applications and VMs and a solution for migration of databases.

Lessons
  • Assess and On-Premises Servers and Applications for Migration
  • Recommend a Solution for Migrating Applications and VMs
  • Recommend a Solution for Migration of Databases

Module 4: Design Authentication and Authorization

In this module, you will learn how to provide Identities to services and understand the hierarchy of Management Groups and Subscriptions.

Lessons
  • Tips for Identity and Access Management
  • Recommend a Solution for Multi-Factor Authentication
  • Five Steps for Securing Identity Infrastructure
  • Recommend a Solution for Single-Sign On (SSO)
  • Recommend a Solution for a Hybrid Identity
  • Recommend a Solution for B2B Integration
  • Recommend a Hierarchical Structure for Management Groups
Lab : Managing Azure AD Authentication and Authorization
  • Deploy an Azure VM hosting an AD DS domain controller
  • Create and configure an Azure AD tenant
  • Integrate an AD DS forest with an Azure AD tenant

Module 5: Design Governance

In this module, you will learn apply an Azure Policy, Identify non-compliant resources, and manage tag governance with Azure Policy.

Lessons
  • Recommend a Solution for using Azure Policy
  • Recommend a Solution for using Azure Blueprint

Module 6: Design a Solution for Databases

In this module, you will be able to recommend the appropriate data store and recommend Azure SQL Database and Azure SQL Managed Instance Service tiers.

Lessons
  • Select an Appropriate Data Platform Based on Requirements
  • Overview of Azure Data Storage
  • Recommend Database Service Tier Sizing
  • Dynamically Scale Azure SQL Database and Azure SQL Managed Instances
  • Recommend a Solution for Encrypting Data at Rest, Transmission, and In Use

Module 7: Select an Appropriate Storage Account

In this module, you will learn about recommend a design a strategy for using tiered storage and manage tiered Storage using Azure tools.

Lessons
  • Understanding Storage Tiers
  • Recommend a Storage Access Solution
  • Recommend Storage Management Tools

Module 8: Design Data Integration

In this module, you will learn about data flows using Azure Data Factory and Azure Synapse Analytics architecture.

Lessons
  • Recommend a Data Flow
  • Recommend a Solution for Data Integration

Module 9: Design a Solution for Logging and Monitoring

In this module, you will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. You will be able to monitor Azure Resources with Azure Monitor and collect and analyze resource Logs for Azure.using Azure tools.

Lessons
  • Azure Monitoring Services
  • Azure Monitor

Module 10: Design a Solution for Backup and Recovery

In this module, you will learn about solutions for site recovery capacity and site failover and failback. You will be able to recommend solutions for recovery in different regions.

Lessons
  • Recommend a Recovery Solution for Hybrid and On-Premises Workloads
  • Design and Azure Site Recovery Solution
  • Recommend a Solution for Recovery in Different Regions
  • Recommend a Solution for Azure Backup Management
  • Design a Solution for Data Archiving and Retention

Module 11: Design for High Availability

In this module, you will learn about solutions for application and workload redundancy, including compute, database, and storage.

Lessons
  • Recommend a Solution for Application and Workload Redundancy
  • Recommend a Solution for Autoscaling
  • Identify Resources that Require High Availability
  • Identify Storage Tpes for High Availability
  • Recommend a Solution for Geo-Redundancy of Workloads

Module 12: Design for Cost Optimization

In this module, you will learn how to optimize costs from recommendations, breakdown costs by Azure Service, and download and review usage details. 01-View

Lessons
  • Recommend Solutions for Cost Management
  • Recommended Viewpoints for Minimizing Costs

Module 13: Design an Application Architecture

In this module, you will learn about solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions. You will also learn about microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

Lessons
  • Recommend a Microservices Architecture
  • Recommend an Orchestration Solution for Deployment of Applications
  • Recommend a Solution for API Integration
Lab : Implement Azure Logic Apps Integration with Azure Event Grid
  • Integrate Azure Logic Apps with Event Grid
  • Trigger execution of Logic Apps in response to an event representing a change to a resource within a

Module 14: Design Security for Applications

In this module, you will learn about solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions. You will also learn about microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

Lessons
  • Security for Applications and Services
  • Recommend a Solution using Key Vault
  • Recommend Solutions using Azure AD Managed Identities

Course types

Classroom: In-Person
Full-day instructor-led training delivered in the classroom (public) or at your offices (private). Training takes place Monday through Friday. Includes complete course coverage.

Classroom: Virtual
Virtual instructor-led training delivered online. Training takes place in the form of sessions between Monday and Friday. Includes complete course coverage.

Hybrid: In-Person or Virtual
A combination of online study and 2-days virtual or classroom live-based exam prep workshops. These courses are delivered in a blended format, consisting of 4-6 weeks self-study, plus full 2-days instructor-led workshops per person per exam.

Live-Virtual (MyDigicomp)
The live virtual course is scheduled over a period of 3-4 weeks. During this time 6-8 instructor-led contact sessions of 3 hours each take place. This time is indicated on the respective course as 3-4 days. When you click on “Timetable” during the booking process, you will already see when the next live sessions will take place. Of course, these sessions are recorded and made available to students at the end of the course. During these 3-4 weeks, students will always have direct access to the expert instructor and can ask questions if something is not clear during self-study. We call this aspect mentoring. Everything takes place on one Microsoft Team channel per class. During this time students will have access to all sessions and information within the class. After those 3-4 weeks, students receive and additional week to prepare and then take the test, either in-class or at home.

Course Type

Virtual or In-Person

Online course delivery format focuses on exam prep and is delivered in a very condensed format. Candidates are required to complete pre-course material before attending the instructor-led online sessions.

Price

$250-600

Prices based on the country in which the course is hosted.

Exam

Included (AZ-304)

For more information:

Enterprise Skills Initiative Support
Lizelle van Niekerk
lizelle@thellpa.com

Online registrations can take up to 7 days to process. Please be aware that if you book for a course on a Friday for a class that starts on the following Monday it cannot be processed and will result in your registration being allocated to another date automatically. We suggest booking for courses well in advance.

No dates for your country? E-mail esi@thellpa.com and send in your request.

Menu