Microsoft Azure Advanced Administrator

This five-day instructor-led course is designed primarily for Azure Administrators who have some experience with Azure and want a more in-depth administrative knowledge of Azure services and how to architect a solution. Lessons include virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course outlines how decisions in each of these areas affect an overall solution.

Целевая аудитория

This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Azure Advanced Administrators use the Azure Portal and as they become more adept, they use the Command Line Interface. Candidates must have basic skills and knowledge of Azure administration.

Программа курса

Module 1: Implement Azure Active Directory

Overview of Azure Active Directory
Users and Groups
- Administrative Units
Domains and Custom Domains
Azure AD Identity Protection
Implement Conditional Access
- (Named locations in Conditional Access)
Configure Guest Users (B2B) in Azure AD
Manage Multiple Directories
Azure AD Identity Govfternance
- Access Reviews
- Access Packages
- Privileged Identity Management
Lab: Implement Azure AD Security
Implement Azure AD conditional access
Implement Azure AD Identity Protection

Module 2: Implement and Manage Hybrid Identities

Install and Configure Azure AD Connect & Cloud Sync
Configure Password Sync and Password Writeback
Configure Azure AD Connect Health
Lab: Implement and Manage Hybrid Identities
Manage Azure Active Directory Identities
Synchronize Active Directory forest with Azure AD tenant

Module 3: Implement Virtual Networking

Virtual Networking
Virtual Network Peftering
VPNs
Advanced Virtual Networking
Lab: Azure Networking
Create a virtual network
Managing Azure Virtual Machine NICs
IP Addressing
VNet Peftering
Lab: Connect On-Prem environments to Azure
Create a Site-to-Site VPN
Lab: Advanced Azure Networking
Filtftering Network Traffic with Network Security Groups
Route network traffic with a route table
Create a Private Endpoint
Create a Private Link sftervice
Restrict network access to PaaS resources with Sftervice Endpoints

Module 4: Implement VMs for Windows and Linux

Select Virtual Machine Size
Configure High Availability
- Availability Sets
- Availability Zones
- Proximity Placement Groups
- Implement Azure Dedicated Hosts
Deploy and Configure Scale Sets
Configure Azure Disk Encryption
Advanced Azure Virtual Machine Administration
- Virtual Machine Update Management Centfter
- Virtual Machine Automanage
- Virtual Machine Run Command
- VM Inspector
- Reset Password
- Redeploy / Reapply
- Serial Console
Lab: Implement VMs for Windows
Configure Azure Disk Encryption
Implementing HA Azure IaaS compute architecture

Module 5: Implement Load Balancing and Network Security

Implement Azure Load Balancfter
- Global load balancfters
Implement an Application Gateway
- Zone redundant GWs
Understand Web Application Firewall
Implement Azure Firewall
Implement Azure Front Door
Implementing Azure Traffic Managfter
Implement Network Security Groups and Application Security Groups
Implement Azure Bastion
Lab: Implementing Load Balancing and Network Security
Direct web traffic with Azure Application Gateway
Deploy Azure Firewall
Deploy Azure Front Door
Deploy Azure Traffic Managfter
Implement Azure Bastion

Module 6: Implement Storage Accounts

Storage Accounts
Blob Storage
Storage Security
Managing Storage
Accessing Blobs and Queues using AAD
Lab: Implementing and Configuring Azure Storage File and Blob Sftervices
Implementing and Configuring Azure Storage File and Blob Sftervices

Module 7: Implement NoSQL Databases

Configure Storage Account Tables
Select Appropriate CosmosDB APIs
Lab: Implementing and Configuring Cosmos DB
Globally Distributed Databases with Cosmos DB

Module 8: Implement Azure SQL Databases

Configure Azure SQL Database Settings
Implement Azure SQL Database Managed Instances
High-Availability and Azure SQL Database
Lab: Implement Azure SQL Databases
Implement Azure SQL Databases

Module 9: Automate Deployment and Configuration of Resources

Azure Resource Managfter Templates
Save a Template for a VM
Evaluate Location of New Resources
Configure a Virtual Hard Disk Template
Deploy from a template
Create and deploy Bicep Templates
Create and Execute an Automation Runbook
Lab: Automate Deployment and Configuration of Resources
Deploy Resources using ARM Templates
Deploy Resources using Azure Bicep Templates
Automating Infrastructure Health with Azure Automation Runbooks

Module 10: Implement and Manage Azure Govfternance

Create Management Groups, Subscriptions, and Resource Groups
Overview of Role-Based Access Control (RBAC)
Role-Based Access Control (RBAC) Roles
Implement and Configure an Azure Policy
Azure Blueprints
Lab: Implement and Manage Azure Governance
Define a custom RBAC role
Assign a custom RBAC role
Implementing Azure Blueprints

Module 11: Manage Security for Applications

Azure Key Vault
Azure Managed Identity
Lab: Implement Security for Applications
Implementing Azure Key Vault
Creating Managed Identities

Module 12: Manage Workloads in Azure

Migrate Workloads using Azure Migrate
VMware – Agentless Migration
VMware – Agent-Based Migration
Implement Azure Backup
Azure to Azure Site Recovery
Implement Azure Update Management
Lab: Protecting Hypfter-V VMs by using Azure Site Recovery
Configure Azure Site Recovery
Perform test failover
Perform planned failover
Perform unplanned failover

Module 13: Implement Containfter-Based Applications

Azure Containfter Instances
Configure Azure Kubfternetes Sftervice
- Networking
- Node Pools Types and usages
- Upgrading Clustfters
- Upgrading Nodes
Lab: Implement Azure Kubfternetes Sftervice
Implement Azure Kubfternetes Sftervice

Module 14: Implement an Application Infrastructure