Microsoft Azure Architect Technologies and Design Complete Study Guide

Benjamin Perkins is a Senior Support Escalation Engineer at Microsoft. He’s an expert C# programmer with a focus on modern cloud and web technologies. He has 15+ years of experience in designing, developing, deploying, administering, and managing enterprise IT solutions.William Panek, MCP, MCSE, MCSA, MCTS, MCITP, CCNA, is a Five-Time Microsoft MVP Winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios www.stormwind.com

• Introduction xxiAssessment Test xxxixChapter 1 Gaining the Azure Solutions Architect Expert Certification 1The Journey to Certification 3A Strategy to Pass the Azure Exams 5Use Azure Daily 5Read Azure Articles, Keeping Yourself Current 6Recognize Azure Product Names, Features, and Functionalities 9Strive for a Deep Knowledge of a Few, Some Knowledge of Many, and a Basic Knowledge of All 10An Introduction to “Must-Know” Azure Features 12Azure Active Directory and Security 12Networking 13Azure Virtual Machines 15Azure App Service 16Azure Functions 18API Management 19Azure Monitor 20Azure SQL 22Azure Cosmos DB 24Azure Storage 25Service Bus 28Site Recovery 30Azure Bastion 32Summary 32Exam Essentials 33Key Terms 34Review Questions 35Chapter 2 Security and Identity 39Azure Active Directory 40Add a Custom Domain to Azure Active Directory 44AAD Connect 49Connect Health 51Directory Objects 52Single Sign-On 52B2B Collaboration 53Self-Service Password 54Application Proxy 54Service Level Agreement 56Identity Protection 57Conditional Access 59Multifactor Authentication 66Privileged Identity Management 74Managed Identities 75Azure AD Domain Services 76Role-Based Access Control 78How to Control Who or What Has Access 84How to Provide Permissions to Resources 85How Are the Permissions to Resources Controlled? 87Custom Roles 87Hardware and Network Security 92Microsoft Trust Center 93Security Center 93Azure Network Security 98Application Gateway/WAF 98Azure DDoS Protection 99Azure Confidential Computing 99Azure Security Products and Techniques 102Shared Access Signature 102Azure Key Vault 103Easy Auth 105Summary 106Exam Essentials 106Review Questions 108Chapter 3 Networking 111Microsoft’s Global Network 112Overview of Hybrid Networks 114Azure Virtual Network 115Azure Virtual Networking 117Regions 117Key Features and Capabilities 127Network Security 168Traffic Filtering with NSG, ASG, and NVA 169Application Gateway/WAF 174IP Restrictions 180Network Map and Topology 183Using Azure DNS 184Azure-Provided DNS 187Hybrid Azure Networking 190ExpressRoute 190Site-to-Site VPN Gateway 192Additional Azure Networking Products 201Application Gateway 202Hosting Multiple Websites 206Azure Load Balancer 211Azure Front Door 214Azure Content Delivery Network 215Traffic Manager 217Azure Relay/Hybrid Connection Manager 218Key Terms 220Summary 221Exam Essentials 222Review Questions 224Chapter 4 Compute 227An Overview of Compute (Hosting Model) 229Cloud Service Models 229How to Choose the Right Hosting Model 231Architectural Styles, Principles, and Patterns 234Azure Compute Best Practices 237Azure Container Instances 239OS Virtualization, Containers, and Images 241Container Groups and Multicontainers 243Azure Virtual Machines 256Creating Azure Virtual Machines 259Managing Azure Virtual Machines 271Azure App Services 298Web Apps 301Web App for Containers (Linux) 306App Service Environments 308Azure WebJobs 309Azure Batch and HPC 312Storage 316Marketplace 316Azure Functions 317Hosting Plans 319Triggers and Bindings 320Runtime Versions 326Supported Programming Languages 326Service Fabric 328Clusters and Nodes 330Architecture 331Best-Practice Scenarios 332Azure Integration 335Azure Kubernetes Service 336Kubernetes vs. AKS 336Clusters, Nodes, and Pods 338Development and Deployment 338Maintaining and Scaling 342Cloud Services 344Windows Virtual Desktop 345Summary 346Key Terms 347Exam Essentials 348Review Questions 350Chapter 5 Data and Storage 355RDBMS, OLTP, OLAP, and ETL 357Big Data/NoSQL 358Choosing the Right Data Storage Solution 359Document Databases 360Key/Value Pairs 361Graph Databases 362Object Storage 363Relational Database Management System 363Search Engine Databases 365Data Analytics/Data Warehouse 365Shared Files 373Azure Data Store 377Azure SQL Database 382Other Azure Data Stores 420Azure Storage 424Zone Replication 434Data Backup, Migration, and Retention 437Securing Azure Data 443Summary 451Exam Essentials 451Key Terms 452Review Questions 454Chapter 6 Hybrid, Compliance, and Messaging 457Hybrid Solutions 458Hybrid Security 459Hybrid Networking 460Hybrid Computing 462Hybrid Data Solutions 463Azure Cloud Compliance Techniques 463Compliance and Governance 464Security 472Resiliency and Reliability 474Privacy 475Security Center 478Microsoft Cloud App Security 483Azure Messaging Services 484Event vs. Messaging 485How to Choose the Right Messaging Service 485Messaging Patterns 487Event Hubs 492Service Bus 496Azure Storage Queue 498Event Grid 499Logic Apps 503Notification Hubs 505Summary 505Exam Essentials 506Key Terms 506Review Questions 508Chapter 7 Developing for the Cloud 511Architectural Styles, Principles, and Patterns 512Architectural Styles 513Design Principles 515Cloud Design Patterns 517An Introduction to Coding for the Cloud 523Triggering a Background Job 523Connecting to Regional/Global Database Instances 524Working with the Azure Queue Storage SDK 524Forms, Certificate, Windows, MFA, OpenStandard, Managed Identities, and ServicePrinciple Authentication 525Reading Encrypted Data from a Database 531IDEs and Source Code Repositories 533Implementing Security 534Summary 538Exam Essentials 539Key Terms 539Review Questions 540Chapter 8 Migrate and Deploy 543Migrating to Azure 544Azure Site Recovery 548Azure Migrate 549Migrating Azure Virtual Machines 551Database Migration 558Migrating Azure App Services 565Import/Export 566Moving Resources in Azure 567Moving Azure App Services 568Moving Azure Virtual Machines 569Deploying Application Code and Azure Resources 576Deploying with Visual Studio 578Deploying with ARM Templates 580Working with DevOps 594Learning Azure Automation 600Process Automation 604Configuration Management 605Update Management 606Other Automation Resources 607Summary 608Exam Essentials 608Key Terms 609Review Questions 610Chapter 9 Monitor and Recover 613Monitoring Azure Resources 615Azure Service Health 619Azure Monitor 621Azure Monitoring by Component 634Additional Monitoring Topics 648Recover Azure Resources 649What is BCDR? 650Azure Recovery Services 651Azure Recovery by Product Type 668Summary 677Exam Essentials 678Review Questions 679Appendix Answers to Review Questions 681Chapter 1: Gaining the Azure Solutions Architect Certification 682Chapter 2: Security and Identity 683Chapter 3: Networking 684Chapter 4: Compute 685Chapter 5: Data and Storage 687Chapter 6: Hybrid, Compliance, and Messaging 688Chapter 7: Developing for the Cloud 688Chapter 8: Migrate and Deploy 689Chapter 9: Monitor and Recover 690Index 693