Introduction |
|
xii | |
|
Organization of this book |
|
|
xii | |
|
|
xii | |
|
Quick access to online references |
|
|
xiii | |
|
Errata, updates, and book support |
|
|
xiii | |
|
|
xiii | |
Chapter 1 Deploy and configure infrastructure |
|
1 | (68) |
|
Skill 1.1 Analyze resource utilization and consumption |
|
|
2 | (7) |
|
Configure diagnostic settings on resources |
|
|
2 | (2) |
|
Create a baseline for resources |
|
|
4 | (1) |
|
Analyze metrics across subscriptions |
|
|
4 | (1) |
|
Create and analyze alerts across subscriptions |
|
|
5 | (1) |
|
|
6 | (1) |
|
Monitor for unused resources |
|
|
7 | (1) |
|
Monitor and report on spend |
|
|
8 | (1) |
|
Skill 1.2 Create and configure storage accounts |
|
|
9 | (8) |
|
Create and configure a storage account |
|
|
9 | (3) |
|
Implement Azure storage replication |
|
|
12 | (1) |
|
Install and use Azure Storage Explorer |
|
|
13 | (1) |
|
|
14 | (1) |
|
Generate a shared access signature |
|
|
14 | (2) |
|
Monitor the Activity Log by using Log Analytics and Azure Monitor |
|
|
16 | (1) |
|
Skill 1.3 Create and configure a virtual machine for Windows and Linux |
|
|
17 | (5) |
|
Configure high availability |
|
|
17 | (2) |
|
Configure monitoring, networking, storage, and VM size |
|
|
19 | (2) |
|
Deploy and configure scale sets |
|
|
21 | (1) |
|
Skill 1.4 Automate the deployment of virtual machines |
|
|
22 | (7) |
|
Deploy Windows and Linux VMs from a template |
|
|
23 | (1) |
|
Save a deployment as an ARM template |
|
|
24 | (1) |
|
Modify Azure Resource Manager templates |
|
|
25 | (4) |
|
Skill 1.5 Implement solutions that use virtual machines |
|
|
29 | (3) |
|
Provision VMs with a new ARM template |
|
|
29 | (3) |
|
Configure disk encryption for VMs |
|
|
32 | (1) |
|
Skill 1.6 Create connectivity between virtual networks |
|
|
32 | (7) |
|
Create and configure virtual network peering |
|
|
32 | (3) |
|
Create and configure VNet-to-VNet VPN |
|
|
35 | (2) |
|
Verify virtual network connectivity |
|
|
37 | (2) |
|
Skill 1.7 Implement and manage Azure virtual networking |
|
|
39 | (7) |
|
Configure virtual networks |
|
|
39 | (4) |
|
Configure network interfaces and IP addresses |
|
|
43 | (1) |
|
|
44 | (2) |
|
Skill 1.8 Manage Azure Active Directory |
|
|
46 | (10) |
|
|
46 | (1) |
|
Manage multiple directories |
|
|
47 | (1) |
|
Configure self-service password reset |
|
|
48 | (1) |
|
Implement conditional access policies |
|
|
49 | (3) |
|
|
52 | (2) |
|
Configure Azure AD Identity Protection |
|
|
54 | (1) |
|
|
55 | (1) |
|
Configure Enterprise State Roaming |
|
|
55 | (1) |
|
Skill 1.9 Implement and manage hybrid identities |
|
|
56 | (9) |
|
Install and configure Azure AD Connect |
|
|
57 | (7) |
|
|
64 | (1) |
|
|
65 | (4) |
|
|
66 | (1) |
|
Thought experiment answers |
|
|
66 | (3) |
Chapter 2 Implement workloads and security |
|
69 | (70) |
|
Skill 2.1 Migrate servers to Azure |
|
|
70 | (12) |
|
Configure Azure components of Site Recovery |
|
|
70 | (3) |
|
Configure on-premises components of Site Recovery |
|
|
73 | (6) |
|
|
79 | (2) |
|
Migrate by using Azure Site Recovery |
|
|
81 | (1) |
|
Skill 2.2 Configure serverless computing |
|
|
82 | (13) |
|
Create a simple logic app |
|
|
83 | (4) |
|
|
87 | (6) |
|
Manage Azure Event Grid 91Manage Azure Service Bus |
|
|
93 | (2) |
|
Skill 2.3 Implement application load balancing |
|
|
95 | (8) |
|
Configure Application Gateway and load balancing rules |
|
|
95 | (3) |
|
Implement front-end IP configurations |
|
|
98 | (1) |
|
Manage application load balancing |
|
|
99 | (4) |
|
Skill 2.4 Integrate an Azure virtual network and an on-premises network |
|
|
103 | (10) |
|
Create and configure Azure VPN Gateway |
|
|
103 | (3) |
|
Create and configure site-to-site VPN |
|
|
106 | (1) |
|
Verify on-premises connectivity |
|
|
107 | (2) |
|
Manage on-premises connectivity with Azure |
|
|
109 | (1) |
|
|
110 | (3) |
|
Skill 2.5 Manage Role-Based Access Control (RBAC) |
|
|
113 | (13) |
|
|
114 | (2) |
|
Configure access to resources by assigning roles |
|
|
116 | (2) |
|
Configure Management Access to Azure |
|
|
118 | (3) |
|
|
121 | (2) |
|
|
123 | (3) |
|
Skill 2.6 Implement Multi-Factor Authentication (MFA) |
|
|
126 | (10) |
|
Enable MFA for an Azure AD Tenant |
|
|
126 | (1) |
|
Configure user accounts for use with MFA |
|
|
127 | (2) |
|
Configure trusted IPs for MFA |
|
|
129 | (2) |
|
Configure fraud alerts for MFA |
|
|
131 | (1) |
|
Configure MFA bypass options |
|
|
132 | (1) |
|
Configure MFA verification methods |
|
|
132 | (4) |
|
|
136 | (3) |
|
|
136 | (1) |
|
Thought experiment answers |
|
|
137 | (2) |
Chapter 3 Create and deploy apps |
|
139 | (18) |
|
Skill 3.1 Create web apps by using PaaS |
|
|
139 | (8) |
|
Create an Azure App Service web app |
|
|
140 | (2) |
|
Create an App Service web app for containers |
|
|
142 | (1) |
|
Create documentation for an API |
|
|
143 | (1) |
|
Create an App Service background task by using WebJobs |
|
|
144 | (1) |
|
Enable diagnostics logging for web apps |
|
|
145 | (2) |
|
Skill 3.2 Design and develop apps that run in containers |
|
|
147 | (7) |
|
Create a container image by using a Dockerfile |
|
|
147 | (2) |
|
Publish an image to the Azure Container Registry |
|
|
149 | (2) |
|
Implement an application that runs on an Azure Container Instance |
|
|
151 | (1) |
|
Manage container settings by using code |
|
|
152 | (1) |
|
Create an Azure Container Service (ACS/AKS) |
|
|
153 | (1) |
|
|
154 | (3) |
|
|
155 | (1) |
|
Thought experiment answers |
|
|
155 | (2) |
Chapter 4 Implement Authentication and Secure Data |
|
157 | (60) |
|
Skill 4.1 Implement authentication |
|
|
157 | (25) |
|
Implement authentication by using certificates, forms-based authentication, tokens or Windows-integrated authentication |
|
|
158 | (6) |
|
Implement Multi-Factor Authentication by using Azure AD |
|
|
164 | (4) |
|
|
168 | (11) |
|
Implement managed identities for Azure resources service principle authentication |
|
|
179 | (3) |
|
Skill 4.2 Implement secure data solutions |
|
|
182 | (31) |
|
Create, read, update, delete keys, secrets, and certificates by using the key vault API |
|
|
183 | (9) |
|
Encrypt and decrypt data at rest and in transit |
|
|
192 | (9) |
|
Encrypt data with Always Encrypted |
|
|
201 | (4) |
|
Implement Azure Confidential Compute and SSL/TLS communications |
|
|
205 | (8) |
|
|
213 | (4) |
|
|
214 | (1) |
|
Thought experiment answers |
|
|
215 | (2) |
Chapter 5 Develop for the cloud and for Azure Storage |
|
217 | (68) |
|
Skill 5.1 Develop solutions that use Cosmos DB Storage |
|
|
217 | (23) |
|
Create and manage Azure Cosmos DB account |
|
|
218 | (6) |
|
Manage scalability and implementing partitioning schemes for Cosmos DB |
|
|
224 | (3) |
|
Set appropriate consistency level for operations |
|
|
227 | (1) |
|
Create, read, update, and delete data by appropriate APIs |
|
|
228 | (12) |
|
Skill 5.2 Develop solutions that use a relational database |
|
|
240 | (15) |
|
Provision and configure relational databases |
|
|
241 | (6) |
|
Create elastic pools for Azure SQL databases |
|
|
247 | (2) |
|
Create, read, update, and delete data tables by using code |
|
|
249 | (6) |
|
Skill 5.3 Configure a message-based integration architecture |
|
|
255 | (17) |
|
Configure an app or service to send emails, Event Grid, and the Azure Relay Service |
|
|
255 | (7) |
|
Create and configure Notification Hubs, Event Hubs, and Service Bus |
|
|
262 | (9) |
|
Configure queries across multiple products |
|
|
271 | (1) |
|
Skill 5.4 Develop for autoscaling |
|
|
272 | (10) |
|
Implement autoscaling rules and patterns |
|
|
272 | (6) |
|
Implement code that addresses the transient state |
|
|
278 | (4) |
|
|
282 | (3) |
|
|
283 | (1) |
|
Thought experiment answers |
|
|
284 | (1) |
Index |
|
285 | |