Get in Touch

Course Outline

Module 1: Design a Compute Solution

In this module, you will explore appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers.

Lessons

  • Propose a solution for compute provisioning
  • Determine suitable compute technologies
  • Advise on container solutions
  • Recommend strategies for automating compute management

Lab: Implementing Containers on Azure

  • Implement containers running in Azure VMs
  • Deploy containers to Azure Container Instances
  • Deploy containers to Azure Kubernetes Service (AKS) clusters

After completing this module, students will be able to:

  • Propose solutions for automating compute management
  • Recommend appropriate compute technologies, including virtual machines and App Services
  • Advise on appropriate AKS and ACI configurations

Module 2: Design a Network Solution

In this module, you will learn about solutions for network addressing, name resolution, network provisioning, and network security.

Lessons

  • Propose a solution for network addressing and name resolution
  • Recommend a solution for network provisioning
  • Advise on network security solutions
  • Suggest solutions for internet connectivity and on-premises networks
  • Recommend strategies for automating network management
  • Propose solutions for load balancing and traffic routing

After completing this module, students will be able to:

  • Implement solutions for network addressing and name resolution
  • Provide network security solutions, including private endpoints, firewalls, and gateways
  • Offer recommendations for network connectivity to the Internet, on-premises networks, and other VNets
  • Advise on load balancing and traffic routing

Module 3: Design for Migration

In this module, you will learn to recommend solutions for migrating applications and VMs, as well as strategies for database migration.

Lessons

  • Assess on-premises servers and applications for migration
  • Propose a solution for migrating applications and VMs
  • Recommend a solution for database migration

After completing this module, students will be able to:

  • Assess on-premises servers and applications for migration
  • Suggest solutions for migrating applications and VMs
  • Determine the migration scope, including redundant, related, trivial, and outdated data

Module 4: Design Authentication and Authorization

In this module, you will learn how to provide identities to services and understand the hierarchy of Management Groups and Subscriptions.

Lessons

  • Best practices for identity and access management
  • Propose a solution for multi-factor authentication
  • Five steps for securing identity infrastructure
  • Recommend a solution for Single Sign-On (SSO)
  • Suggest a hybrid identity solution
  • Advise on B2B integration
  • Propose a hierarchical structure for Management Groups

Lab: Managing Azure AD Authentication and Authorization

  • Deploy an Azure VM hosting an AD DS domain controller
  • Create and configure an Azure AD tenant
  • Integrate an AD DS forest with an Azure AD tenant

After completing this module, students will be able to:

  • Recommend a hierarchy for Management Groups and Subscriptions
  • Configure custom RBAC role definitions and assignments
  • Plan for an MFA deployment
  • Propose a solution for Single Sign-On (SSO)
  • Suggest a hybrid identity solution

Module 5: Design Governance

In this module, you will learn to apply Azure Policy, identify non-compliant resources, and manage tag governance using Azure Policy.

Lessons

  • Propose a solution for using Azure Policy
  • Recommend a solution for using Azure Blueprint

After completing this module, students will be able to:

  • Organize policies with initiatives
  • Manage tag governance with Azure Policy
  • Provide guidance on Azure Blueprints

Module 6: Design a Solution for Databases

In this module, you will recommend the appropriate data store and select Azure SQL Database and Azure SQL Managed Instance service tiers.

Lessons

  • Select an appropriate data platform based on requirements
  • Overview of Azure data storage
  • Recommend database service tier sizing
  • Dynamically scale Azure SQL Database and Azure SQL Managed Instances
  • Propose a solution for encrypting data at rest, in transit, and in use

After completing this module, students will be able to:

  • Recommend database service tier sizing
  • Propose a solution for encrypting data at rest, in transit, and in use
  • Understand Azure Data Lake Storage and Azure Blob Storage containers

Module 7: Select an Appropriate Storage Account

In this module, you will learn to design a strategy for tiered storage and manage tiered storage using Azure tools.

Lessons

  • Understanding storage tiers
  • Propose a storage access solution
  • Recommend storage management tools

After completing this module, students will be able to:

  • Recommend tools for working with Azure Storage
  • Design for Azure Blob Storage access tiers

Module 8: Design Data Integration

In this module, you will learn about data flows using Azure Data Factory and the architecture of Azure Synapse Analytics.

Lessons

  • Propose a data flow strategy
  • Recommend a solution for data integration

After completing this module, students will be able to:

  • Implement Azure Synapse Analytics
  • Describe data flows using Azure Data Factory
  • Demonstrate how to use Azure Data Factory to load data into SQL Data Warehouse

Module 9: Design a Solution for Logging and Monitoring

In this module, you will learn about Azure Monitor, Azure Application Insights, and Azure Sentinel. You will gain the ability to monitor Azure resources with Azure Monitor and collect and analyze resource logs using Azure tools.

Lessons

  • Azure monitoring services
  • Azure Monitor

After completing this module, students will be able to:

  • Monitor Azure resources with Azure Monitor
  • Collect and analyze resource logs for Azure resources
  • Understand how Azure Sentinel collects data from devices, users, infrastructure, and applications

Module 10: Design a Solution for Backup and Recovery

In this module, you will learn about site recovery capacity and site failover/failback solutions. You will be able to recommend recovery strategies for different regions.

Lessons

  • Propose a recovery solution for hybrid and on-premises workloads
  • Design an Azure Site Recovery solution
  • Recommend a solution for recovery in different regions
  • Suggest a solution for Azure Backup management
  • Design a solution for data archiving and retention

After completing this module, students will be able to:

  • Recommend solutions for Azure hybrid and on-premises workloads that meet recovery objectives
  • Propose a solution for site recovery capacity
  • Recommend storage types and methodologies for data archiving
  • Identify requirements for data archiving

Module 11: Design for High Availability

In this module, you will learn about solutions for application and workload redundancy, covering compute, database, and storage.

Lessons

  • Propose a solution for application and workload redundancy
  • Recommend a solution for autoscaling
  • Identify resources that require high availability
  • Identify storage types suitable for high availability
  • Propose a solution for geo-redundancy of workloads

After completing this module, students will be able to:

  • Recommend solutions for autoscaling
  • Identify storage types for high availability
  • Propose solutions for workload geo-redundancy

Module 12: Design for Cost Optimization

In this module, you will learn how to optimize costs using recommendations, breakdown costs by Azure service, and download and review usage details.

Lessons

  • Propose solutions for cost management
  • Recommended viewpoints for minimizing costs

After completing this module, students will be able to:

  • Optimize costs with Azure Cost Management
  • Design with cost considerations in mind
  • Optimize costs based on recommendations

Module 13: Design an Application Architecture

In this module, you will learn about application deployment solutions, including ARM templates, Logic Apps, and Azure Functions. You will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

Lessons

  • Propose a microservices architecture
  • Recommend an orchestration solution for application deployment
  • Advise on API integration

Lab: Implement Azure Logic Apps Integration with Azure Event Grid

  • Integrate Azure Logic Apps with Event Grid
  • Trigger execution of Logic Apps in response to an event representing a change to a resource within a

After completing this module, students will understand:

  • How to recommend deployment solutions using ARM templates, Logic Apps, or Azure Functions
  • How to recommend a solution for monitoring automation
  • How to recommend a hosting structure for API management

Module 14: Design Security for Applications

In this module, you will learn about application deployment solutions, including ARM templates, Logic Apps, and Azure Functions. You will also explore microservices architecture, including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks.

Lessons

  • Security for applications and services
  • Recommend a solution using Key Vault
  • Propose solutions using Azure AD Managed Identities

After completing this module, students will be able to:

  • Understand Key Vault authentication and authorization
  • Understand Azure Key Vault availability and redundancy
  • Understand how Blueprints differ from Resource Manager Templates and Azure Policy

Requirements

Successful Azure Architects enter this role with foundational experience in operating systems, virtualization, cloud infrastructure, storage architectures, networking, applications, and databases.

  • Knowledge of on-premises virtualization technologies, including VMs, virtual networking, and virtual hard disks.
  • Understanding of network configuration concepts, such as TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
  • Proficiency in Active Directory concepts, including domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
  • Comprehension of resilience and disaster recovery principles, including backup and restore operations.
  • Familiarity with application development and APIs.
  • Understanding of databases, encompassing both SQL-based systems (e.g., MS SQL, MySQL, Postgres) and NoSQL databases (e.g., MongoDB).
  • Knowledge of decoupling applications and services using components like Queues, tables, and Cache.
  • Understanding of security concepts to protect environments, such as encryption at rest, encryption in transit, SSL, and TLS.
 28 Hours

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories