AZ-204 Developing Solutions for Microsoft Azure Lab & Prep

Learn how cloud computing replaces traditional data centers with scalable, pay-as-you-go infrastructure managed by cloud providers like Azure, AWS, and Google Cloud, and explore Azure services and certifications.

Explore how iaas and infrastructure as code enable rapid, automated provisioning of networks, storage, and virtual machines in Azure, using Terraform, arm templates, and PowerShell.

Explore how Azure accounts and subscriptions organize resources, using management groups and resource groups to govern policies, roles, and billing across multiple subscriptions, including account, service, and core administrator roles.

Learn to create a resource in the Azure portal using the item template, configuring subscription, resource group, location, image, size, disk, networking, and auto shuttle for cost control.

Explore deploying resources with ARM templates using JSON schemas, parameters, variables, and outputs, and learn to export, edit, and deploy templates via portal, library, or template editor.

Explore Azure services for developers, from infrastructure as a service and infrastructure as code to containers, web apps, and serverless functions, with storage, security, monitoring, and API integrations.

Learn to onboard an organization to Azure by creating an Azure subscription, provisioning an Azure Active Directory tenant, and understanding relationship between tenants and subscriptions, including free and premium licenses.

Purchase a custom domain from a registrar, such as GoDaddy, using the dot xyz extension at about $1.79 for one year, then map it to the initial domain on Microsoft.com.

Create a new Azure Active Directory tenant in Australia under an existing subscription, set the initial domain, and manage tenants in the Azure portal.

Assign the newly created Azure Active Directory tenant to the tank load technologies subscription in the Azure Portal, then grant yourself owner access via access control to resolve billing privileges.

Purchase a custom domain and map it to an Azure Active Directory tenant, verify ownership via DNS records at your registrar, and set the domain as primary for user creation.

Onboard 200 employees into Azure Active Directory via bulk upload with the Excel template, map the domain, and set initial passwords while exploring user types and role based access control.

Explore the storage account in Azure as a core, durable, highly available, secure, and scalable service for storing data in the cloud, including blobs, tables, disks, and network file shares.

Explore the four storage account types, their supported services (blob, queue, table, files), and redundancy options, with standard general purpose v2 as the commonly used choice.

Create a storage account on the Azure portal, configure a standard storage account with redundancy, enable data protection and soft delete, then create a blob container and upload a file.

Install and launch azure storage explorer, connect to your storage accounts, navigate subscriptions and blob containers, then upload or download files like invoices from the interface.

Explore Azure storage access tiers—hot, cool, and archive—balancing storage and access costs, with per-file or account-tier changes in the Azure portal or Storage Explorer and minimum durations.

Explore Azure Table Storage, a service for non-relational data, its storage account, table, and entity structure, scalability to terabytes, and differing features from Cosmos DB Table API.

Learn to create and use Azure tables in the portal and storage browser, define partition key and row key, add entities, and query with filters using the C# Net SDK.

Explore how to interact with Azure table storage using a C# .NET program, creating a customer address book table, adding addresses, and listing records via the table service client.

Explore Azure files by creating a file share in an Azure storage account, mount it as a drive via a PowerShell script, and drag-and-drop files for easy, networked storage.

Explore options to load data into Azure storage, including portal upload, Azure Storage Explorer, Azure Files, and the Azure import-export service for large volumes.

Explore Azure App Service, a managed platform to host web apps and web APIs, supporting multiple languages, containers, and serverless options, with DevOps integration and scalable deployment slots.

Publish a web app to Azure from Visual Studio 2022 by creating an App Service and App Service Plan, then publishing from Visual Studio without using the Azure portal.

Explore containerization with Docker, learn how to package applications into lightweight images, run containers across platforms, and leverage registries like Docker Hub and Azure Container Registry for fast, consistent deployments.

Learn end-to-end Docker with building a tax calculator image using a Docker file, then publish and run the container from Docker Hub.

Learn how Azure Event Grid enables event-driven workflows by routing resource events to handlers like Azure Functions or Logic Apps, with a practical demo of create and delete events.

Demonstrates end-to-end wiring of Azure Event Grid to an Azure Function for subscription events, logging resource changes to the console.

Discover Azure Event Hub, a big data streaming service that handles millions of events per second and terabytes of data with high reliability and SDK language support.

Explore an end-to-end Azure Event Hub demo: create an event hub namespace, add an event hub, and implement C# programs to send and receive messages with checkpointing and consumer groups.

Utilize Azure content delivery network to deliver content by caching at edge servers across pops, serving from the nearest location to improve performance, with dynamic site acceleration.

Learn to configure Azure content delivery network for an Angular app on App Service, creating a profile and endpoint with caching, compression, and a custom domain.

Explore Azure Cosmos DB, a fully managed NoSQL database offering single-digit latency, automatic scaling, and enterprise security. Learn its multi-model APIs and the account to container to item hierarchy.

Create an Azure Cosmos DB account in the portal with the Core SQL API, provisioned throughput, and the free tier, then add a database, container, items, and a city query.

Understand how Cosmos DB uses request units as compute for reads, writes, and queries, choosing provisioned throughput, serverless, or auto scale modes based on item size, indexing, and property count.

Explore Cosmos DB consistency levels, including strong, bounded staleness, session, consistent prefix, and eventual, and learn how replication across regions affects latency and the latest data value.

learn how to create an Azure Cosmos DB database and container using the C# SDK, and bulk insert nested json employee records with a department partition.

Learn how partition keys act as primary keys in Cosmos DB by evaluating records for insertion into a container, showing that only records one, two, and three can be added.

Assess adding records to the Cosmos DB car container by checking primary key constraints; only records one and two can be inserted.

Cosmos DB stores data for multiple applications with different formats; map data use the Gremlin API, JSON telemetry logs use the EPA, and key-value dictionaries use table EPA.

Analyze cross partition queries in Cosmos DB by reviewing how the partition key is used to search only the relevant partition, and explain why disabling cross partition queries improves performance.

Explore Azure Logic Apps, a cloud-based, low-code platform for building automated workflows started by triggers and connected by hundreds of connectors in the Azure portal.

Provision an Azure Cognitive Services resource for a Logic App, configure resource group and region, then retrieve the endpoint and key to connect the service in the workflow.

This lesson builds a weapon detector logic app that monitors an Azure Blob Storage folder, uses Cognitive Services to describe images, and emails admins when weapon tags are detected.

Learn to provision and use Azure Key Vault to store keys, passwords, and certificates, configure access policies and managed identities, and access secrets from applications across languages.

Create a secret in Azure Key Vault to store the storage account connection string, then reference it from logic apps and data factory to access blob storage.

Protect and recover keys and secrets in an Azure Key Vault by enabling soft delete, purge production, and strict access policies, then practice recovery via portal and PowerShell.

Provision a system-assigned managed identity for the Azure Data Factory and grant it read and list access to Key Vault secrets to enable secure secret retrieval for storage connections.

Configure a logic app to read a secret from the key word using managed identity, provision access policies, and use the get secret action to retrieve the value.

Enable application insights for the Angler Practice Web app on Azure, configuring diagnostic data collection to support monitoring and enabling interop, profiler, snapshot debugger, and local variable capture.

Learn to view and analyze Application Insights metrics in the Azure dashboard by adding key metrics: server requests, failed requests, processor time, and availability, and pin the chart for monitoring.

Azure API Management essentials reveal how the gateway, management plane, and developer portal secure, publish, and govern APIs with subscription, throttling, quotas, policies, and transformation and caching.

Learn to set up an Azure API management service, import external open API or publish your own API to App Service, and configure products, policies, and the developer portal.

Discover Azure Cache for Redis and its use in building fast, scalable apps with in-memory and distributed caching, sessions, queues, and expiration policies, plus a hands-on demo.

Create an Azure function app in the portal using a blob storage trigger to read text files from an input folder and push content to the process file queue.

Update an existing Azure function app to support dynamic and multiple output bindings using binder and blob attribute. Route files by extension into processed/images, processed/documents, and processed/others.

Explore Azure data lake basics inside storage account, enable hierarchical namespace for a file-system like structure, create a configuration container with folders, and grant lab user blob data reader access.

Create and configure an Azure Service Bus queue, test by sending and receiving JSON messages via the portal, and generate a send-only connection string for integration with Logic Apps.

Troubleshoot and upgrade the Azure Service Bus configuration to enable topic-based publish/subscribe for multiple subscribers, upgrading from basic to standard pricing to enable topics.

Master core PowerShell fundamentals and essential tips to create and manage Azure resources using PowerShell and Azure CLI in cloud shell, including mounting and creating storage accounts.

Explore aliases in PowerShell, mapping dos commands like CLS to native commands such as Clear-Host, and view mappings with Get-Alias, with a focus on Azure resources.

Master PowerShell basics by learning the verb and noun command format, assigning command results to variables, and formatting Azure resource outputs into readable tabular lists.

Leverage the pipe operator to format output as a table, selectively print columns like name and resource group name, and index into the all resources collection for precise details.

Learn the PowerShell pattern for Azure operations, distinguishing create, update, and remove actions, using New- and Set- commands for resources like storage accounts, VMs, and networks.

Master Azure resource management with PowerShell by using create, update, and delete patterns: New, Set, and Remove commands for storage accounts, virtual machines, and virtual networks.

Discover how to identify Azure PowerShell commands to create resources like virtual machines and private DNS zones using autocomplete and Get-Command techniques.

Learn to find and use Azure PowerShell commands with Get-Help, including -Examples and -Full, review parameter details, and copy ready-made samples like creating a new AZ private DNS zone.

Master essential PowerShell tips and commands to create and manage Azure resources, with ad hoc scripting, loops, functions, and modular projects, tailored for the Azure AZ-204 exam.

Create a single namespace and a single service bus topic. Create a subscription per restaurant with filters so drivers see only relevant orders.

Learn to set cloud blob properties by assigning content type and content languages, then submit them with the set properties async method in code.

Tag the Nebula image for the Azure Container Registry with Docker, forming the full path Nebula ACR.azurecr.io/nebula for publication.

Apply an APIM inbound policy to rewrite the request URL so it matches the web service format, using the rewrite policy to transform URLs for backend integration.

Explains how to configure an Azure function blob storage trigger and validate filter patterns, showing that the initial filter is incorrect and presenting the correct container and extension filter syntax.

Recommend strong consistency for Cosmos DB to ensure reads return the most recent customer details when multiple users update concurrently in a CRM application.

Apply an APIM outbound find and replace policy to remove formatting text from API responses, implemented via the NPM find and replace policy in Azure API Management.

Configure an Azure function with a blob storage trigger that fires when files are added to the gallery container. Define a filter pattern to detect dodgy pic files, matching gallery/<name>.<extension>.

Learn to build a Graph API query string to retrieve a user’s display name by filtering surname equals John and selecting the displayName field.

APIM inbound set header policy forwards the user id and related data from the subscription key to the backend service.

Choose eventual consistency as the recommended Cosmos DB consistency level for parallel updates. Your CRM backend accepts any version of updated customer data.

Fix missing parts in a Cosmos DB stored procedure by preparing context, creating a document in the target collection, and setting the body to complete the code.

Set adaptive sampling in application insights to cap max telemetry items per second, preventing higher charges from excessive data while maintaining representative telemetry across the day.

Learn how to fill in missing code for a Cosmos DB backed CRM, using city as the partition key and mobile number as the row key, constructing the async query.

Recommend the least privileged role to copy blobs from a storage account by granting read access with the storage blob data reader role.

Implement the Clearwater Cash method to invalidate the Redis cache for a REIT by obtaining the database instance from the connection and clearing the cache key.

Learn to retrieve an existing event hub's connection string using the Azure CLI, by specifying the event hub and its namespace.

Upgrade the app service plan to standard, enable auto scaling, configure the scale condition, and add the scale to meet the 80% CPU threshold for the existing App Service.

Master the cache aside pattern to ensure data consistency between cache and data stores. Use it when the cache has no native read-through or write-through, and when demand is unpredictable.

Initiate the cdn request workflow: a user requests an image; the request reaches the point of presence, fetches from the origin if needed, then serves from cache until ttl expires.

retrieve a specific version of a secret from azure key vault by including the secret name and version in the rest api url, using the correct api version.

Create an Azure service bus namespace with PowerShell to receive and store messages from smart IoT devices until processing, using the Nebula resource group and a namespace named Nebula namespace.

Learn to implement event grid service advanced filtering using string contains on operation type to receive only virtual machine or test lab events, with subject and values configured.

Evaluate cost-effective autoscaling by hosting the website in Azure App Service with an App Service Plan that automatically scales on high CPU load, using the standard service tier.

Demonstrate Azure CLI usage to create a Cosmos DB account with multi-region failover, configuring a resource group, account name, and prioritized failover locations such as East US and Best Use.

Learn how to send messages to the Azure Service Bus queue or topic on a schedule using scheduled enqueue time UTC for delayed processing.

Configure CDN query string caching for an order id parameter. Recommend cache every unique URL to ensure requests, including those from India, are served from the cache.

Create an api management instance using Azure PowerShell to support secure EPA access. Configure the resource group, location, and admin email parameters per the command syntax.

Develop an Azure Logic App workflow that triggers on virtual machine allocations via Azure Event Hub and sends an email to the IT administrator with delegation activity details.

Enable the event hub capture feature to stream and persist all ingested event hub data into Azure Blob Storage, providing an assured storage solution.

Learn how to use the Azure CLI to create a resource group and a virtual machine, specifying the resource group name, VM name, and Windows 2016 datacenter image.

Finalize an azure function app by applying function-level authorization and deserializing a json string into an employee object using JsonConvert in a C# function.

This lecture explains that Event Hub capture writes data to storage using Apache Avro format, a compact binary format with an inline schema.

Explore using Azure AzCopy to copy blobs across storage accounts and containers, evaluating easy copy as a command line utility for blob and file transfers.

Inspect operation name property in the event data object to detect delegation activity, trigger the Logic App workflow, and email the administrator when the value equals Microsoft Word compute/virtual machine/delegate/action.

Configure an eviction policy for Azure Cache for Redis, selecting either volatile-lru or allkeys-lru, and set time-to-live for keys to proactively remove stale cache entries on expiry.

Learn how to copy blobs across containers and storage accounts using the Azure CLI, leveraging asynchronous blob copy as a simple, effective solution.

Configure logging for an Azure function app by editing the host.json configuration file. The host.json's logging section lets you set the log level and enable features like Application Insights.

Learn how to create Azure Event Grid custom topics and subscriptions to handle sign-in and sign-out events for an app named Court Policy Service deployed to Azure App Service.

Learn to copy blobs between containers across storage accounts with Azure PowerShell, using easy copy or click command. The lecture confirms this approach will work.

Use a single factory per process for senders in different processes and enable batch store access to maximize throughput of the Azure Service Bus queue when many senders outnumber receivers.

Implement Application Insights instrumentation in a mobile app using Azure Mobile Apps to enable usage analytics by capturing exceptions, events, and session IDs, while evaluating the relevance of session data.

Move blobs across storage accounts by using Azure PowerShell to copy from one container to another, exploring options like easy copy and storage blob copy commands.

Use Azure Cache for Redis to implement shared session state across multiple web apps on Azure Web App Service, enabling concurrent access for readers and a single writer.

Learn to query a storage table partitioned by the employee's last name using generate filter condition with the partition key, the equal operator, and the value to filter John.

Recommend using the archive storage tier for two-year document retention in Azure storage. This minimizes cost while keeping files readily accessible.

Configure Azure CDN for on-demand video using override caching with ignore origin and a one-hour duration; cache every unique query string for each video quality from closest point of presence.

Learn how to rehydrate a blob from the Azure Blob Archive Storage to an online hot or cold tier to enable immediate retrieval of archived objects.

Recommend Azure Event Hubs for high-volume data streaming in a data pipeline, handling millions-per-hour user content and agreement data for real-time spam analysis processing.

Learn to implement strong rule-based access control by creating a custom role based on the existing rule nebula admins and retrieving its definition as JSON with PowerShell.

Enable always on in Azure App Service to prevent the web app from unloading, reducing warm-up latency and ensuring anomaly detection emails arrive promptly.

Implement missing code for Azure Cache for Redis by using the set string method to store a serialized address object and deserialize it from the cache using JSON convert.

Learn to create an Azure Container Instance using the Azure CLI and view container logs with az container logs, including resource group, container name, and base image.

Recommend using the Application Insights metric data model to enable on-demand autoscaling for the core policy service on Azure App Service.

Fix a Cosmos DB script to enable bounded staleness consistency and automatic failover across multiple regions, ensuring in-order writes, low latency, 99.99% availability, and a 5/2 tolerance window.

Learn to create a Cosmos DB container with the .NET SDK, set the partition key path, and disable expiration by setting the default time to live to minus one.

Azure cache for Redis stores session state to support auto scaled web apps, improving performance by keeping session data centralized across multiple instances rather than on a single server.

Complete missing code to work with the cloud blob container in C#, retrieving account properties asynchronously and checking blob container properties, including public access.

Use azcopy to copy the Baek Colon Invoices folder and all its subfolders to the Invoice Container in Nebula Storage, configuring the source, destination, and a recursive option.

Use the Azure CLI to create an Azure Key Vault and securely store a database password as a secret, enabling straightforward secret management for web and database apps.

Examine how Azure Front Door manages gzip and brotli compression for web app requests, including mime type support and a scenario where an XML file exceeds the 8 MB limit.

Learn to complete a partial Cosmos DB query to retrieve objects from a customer container, filtering by price equal to 8.45 and using the correct field names.

Learn how to configure a Cosmos DB policy for ordering by multiple columns using composite indexes and ascending order, enabling queries on customer name and city.

Complete the missing code to instantiate a blob client from the container client and upload files from a local folder to an Azure Storage container using the Azure Storage SDK.

Acquire a blob lease to lock a blob for read and delete operations by specifying lease actions like acquire, renew, change, release, and break in the request header, with comp=lease.

Select the basic Azure app service plan to enable always-on for continuous operation while minimizing costs.

Assign filter types to azure subscriptions: future orders use boolean; priority orders use correlation on 80; overseas and high‑volume orders use sequel on region and quantity; all orders.

Learn to create an Azure app service plan with Azure CLI for a dockerized ASP.NET Core web app on Linux, including resource group, location, and plan naming.

Select Cosmos DB consistency levels for three apps: eventual for invoicing, consistent prefix for order, and strong or bounded staleness for payroll, with two-versions or five-second staleness limits.

Create an ASP.NET web app on Azure App Service, running in a Linux Docker container, configured for the nebula-card.com domain, using the Azure CLI to provision.

Master how to stream logs from an Azure web app using the Azure CLI, supplying the web app name and resource group, and applying a filter to show errors.

Harness Azure event grid filter events to route endpoint messages. Apply event types, subject, and advanced filters to detect resource deployment failures, blob additions, and invoice-value data fields.

Configure an ASP.NET web app on Azure App Service via the Azure CLI, running on Linux in Docker, and map it to the domain Ebola online court dot com.

Leverage the Azure API Management transformation policy to convert XML to JSON for requests from external users, and transform responses back to JSON for end users.

Learn how to send and receive Windows notifications in a shopping app using a notification hub client, connection strings, and an async send method.

Configure the inbound policy in Azure API Management to use set-variable for storing the detected user identity, enabling response caching based on the user id.

Learn how to use the CLI to set a secret in KeyVault with the secret set command.

Learn how to enable the application insights profiler for an Azure web app by verifying and turning on the always on setting in the App Service general configuration.

Configure an inbound policy in Azure API Management to implement a case lookup that stores the detected user identity.

Configure api management policies using cache-store to store the user identity from client requests behind an api management service.

Identify the outbound policy section to configure a find-and-replace policy that updates the response body with user profile information in API management.

Recommend using five partitions for Azure Event Hub, basing each partition on a traffic signal source to maximize throughput and minimize latency for analytics by three departments.

Recommend using the traffic signal as the partition key in the event hub, creating five partitions for five signals and enabling data analytics across three departments.

Enable soft delete on a storage account to recover a deleted blob and all its snapshots, including product catalog dot jpeg, snapshot one, and snapshot two.

Learn to implement a Cosmos DB pre trigger that automatically adds a tip property to order documents when missing, ensuring backward compatibility and smooth front-end integration.

Access real-time console logs from a docker container deployed to an Azure Web App on Linux by configuring docker container logging with the provided seal scripts.

Configure API permissions in the Azure app registration to grant Microsoft Graph API access, specifically the user data permission, for accessing the Azure Blob container.

Discover how to set delegated permissions for Microsoft Graph in an Azure app registration to access blob storage under role-based access control.

Configure the app registration to grant the user impersonation permission for the azure storage api, enabling the application to access storage blobs in containers.

Determine the appropriate permission type for Azure storage access by configuring delegated API permissions in the app registration to allow user-based access to blob containers under RBAC.

Configure the manifest file in app registration to control Azure Active Directory group information access, using group membership claims and the implicit flow setting (true or false).

Discover how to select a synthetic partition key in Azure Cosmos DB. Concatenate multiple properties or append a random suffix to achieve unique values and even workload distribution across partitions.

Configure an Azure function to read from an Azure storage queue and write to Azure table storage using triggers and bindings, with in, out, and return as the missing values.

Enable cross-origin resource sharing (CORS) on the Azure app service to allow cross-domain requests to the API demo and resolve the access-control-allow-origin header issue. Configure CORS via portal or CLI.

Recommend using an isolated App Service plan to run dedicated, isolated resources and single-instance web jobs for all customers, with deployment slots on the standard tier for testing before production.

Learn how to complete a PowerShell script to create a VM, using the given parameters and the missing resource name.

Explore the Cosmos DB trigger option operation enum and its supported values—create, delete, replace, and update—and how they apply to triggers on properties.

Configure a Windows Azure VM to allow remote desktop by enabling port 3389, either automatically through the creation wizard or manually by updating the network security group.

Recommend configuring an Azure Ubuntu desktop VM to allow RDP access, installing an RDP server, and opening inbound port 3389 via a network security group in Azure portal.

Configure Azure Cosmos DB change feed to preserve data forever by setting the time-to-live to minus one, enabling a persistent change record for later processing.

Recommend Azure Event Hub as the IoT data streaming solution to ingest device metrics into Azure Blob Storage and correlate data by device identifier using a partition key.

Deploy from GitHub using Azure web app continuous deployment and run a startup script before the site starts to generate static content via a dot deployment file at repository root.

Evaluate item id as partition key in Cosmos DB to enable horizontal scaling and throughput balance in read-heavy or write-heavy containers, with point reads thanks to its unique per-item value.

Recommend invoking a function app from a rest api using a step trigger, leveraging timer, queue, and event grid triggers for the catalog and product EPA workflows.

Determine the appropriate Azure Functions authorization level to secure the registered customer function app, selecting the default function level over anonymous access.

Implement authentication and authorization for a web api using Microsoft Identity Platform by registering the app, configuring code samples, validating tokens, securing certificates, setting api permissions, and managing token cache.

Enable cross origin resource sharing (cors) for the web api by configuring allow-origin and the target resource in Azure CLI or the Azure portal.

Learn how Azure Container Registry uses RBAC and why admin accounts are not recommended for headless app authentication, recommending service principal as the solution.

Learn how to apply service bus filter conditions to topic subscriptions using boolean filters (true to receive all messages, false to receive none) and SQL-like filters for targeted messages.

Explore Azure CLI scripts to create a Cosmos DB account with a stable API, optimize costs, enable eventual consistency, and create a Cosmos DB table.

Enable soft delete on a general purpose v2 storage account to recover deleted blobs within seven days by setting the retention period.

Show that blob snapshots in a general purpose v2 storage account cannot be modified. Read and delete snapshots, but do not modify their properties.

Assess Azure app services requirements and select the standard plan to enable auto scaling, support a custom domain, and minimize costs for the web app.

Prepare for the Microsoft Azure architect technologies labs and exam with this introductory guide. Join thousands of students succeeding in Azure architect technology certification through focused exam preparation.

Explore how this course combines Azure labs, 150 plus exam objective tasks, and PowerShell videos to build practical skills across Azure services for certification prep.

The course is organized in a question-and-answer format with narrated solution demonstrations, justification, and supporting documentation, plus lab Q&A and exam tips chapters for proactive partial prep and InfoSpace productivity.

Explore the Azure solution architect expert certification path through Azure 3.3 and AC 3.4, and use a parallel Udemy course for Azure 3.4 to complete both.

Learn to purchase a domain from a registrar, register it as a custom domain in Azure Active Directory, configure DNS records, and verify ownership.

Create a demo user in Azure AD and assign the contributor role to the AZ 300 exam resource group. Learn role-based access control and scope confinement in Azure.

Create an Azure AD group named admin delegators and assign it the user access administrator role within the AZ 300 exam resource group to delegate administrative access with least privilege.

Create a virtual machine named web vm zero one in a resource group, using a standard size for Windows Server 2016 Web, and add it to an availability set.

Configure a web app using app services networking access restrictions to deny connections from a specific IP address by adding a deny rule with a priority.

Set up a recovery services vault in East US and create a daily backup policy at 23:00 UTC with a 60-day retention for the Demo VM. Trigger the initial backup to enable daily backups.

Enable secure transfer in the storage account configuration to require https access, and set the rest endpoint policy to enforce https only for media files.

Configure an Azure VM's NSG to allow RDP over TCP port 3389 from any internet source while blocking all other TCP ports through inbound rules with priority-based access.

Deploy an azure VM 2019 with Ubuntu, attach a 16,384 GiB data disk delivering 2000 IOPS, and minimize costs by choosing the lowest-priced disk that meets requirements.

Create an Azure file share named '300 file share' in the 2019 2412 storage account via the Azure portal, enforcing a 200 GB capacity.

Create a function app on an app service plan to enable sticky session via RR affinity in general settings (consumption plan omits RR affinity), reducing costs.

Create a vm named 300 exam vm with a non public ip in East US and enable backup during creation using an existing recovery services vault and vm backup policy.

Downscale the app service plan from standard to free by identifying that the always on feature blocks the downgrade, then disabling always on and applying the free tier.

Configure the storage account firewall to allow access only from a specific on-prem IP address range, saving the selected network settings to enforce the restriction.

Add a public IP to an Azure VM by enabling the IP configuration, creating a dynamic public IP, and applying it to the VM's network interface to minimize cost.

Learn how to create an Azure storage account named storage 20191224, set up a media blob container with anonymous read access, and enable container browse via SAS.

Create two virtual networks named Vnet_East_US in East US and Vnet_West_US in West US, then establish a peering connection between them for seamless cross-network communication.

Resolve overlapping address spaces to fix vnet peering; create a new 10.2.0.0/16 space with a 10.2.0.0/24 subnet, move VMs, delete the old space, and establish peering.

Create a virtual office network with three subnets—finance subnet, marketing subnet, and air subnet—using a single network security group to block internet inbound and outbound traffic, minimizing NSG rules.

Enable soft delete in the storage account's data protection settings to retain blob data for 20 days, enabling recovery of accidentally deleted blobs.

Learn to minimize long-term storage costs by changing a storage account from hot to cool and applying archive tier to containers for rarely accessed data.

Create a web app named Corp Web App 2019 and configure manual scaling using the lowest-cost app service plan (B1), by examining SKU features for up to three instances.

Configure an alert on the 2019 storage account to email admin at Tech Talent XYZ and SMS a number when ingress files exceed 5 MB in five minutes.

Configure the gateway subnet of the Office Network with a /27 or /28 mask to maximize VM IP space for the VPN gateway.

Create a private dns zone named marketing dot tech talent dot xyz in the Azure portal and link it to the marketing network to auto register newly created virtual machines.

Create an internal private DNS zone named marketing tech talent.xyz and link it to the marketing network to enable auto registration of VM hostnames, all performed via Azure CLI.

Deploy a Windows Server 2016 VM and attach it to the marketing subnet of the office network within the virtual network, selecting the subnet during the creation wizard.

Create a storage account v2 with RA-GRS for maximum redundancy and lower access costs, then create a 250 GiB file share for drive mapping from Windows Server 2016 VMs.

Deploy a standard Azure load balancer named ELB 2019 to balance internet traffic to VMs in the 2019 VNet, configuring a backend pool to meet 99.99% availability.

Identify the on premises role required to configure azure ad connect sync from on premises active directory to azure ad, and explain why enterprise admin is needed.

Compare infrastructure as code options, focusing on JSON templates and Bicep on top of ARM, and explore alternates like Terraform, Chef, C#, Azure SDK, and PowerShell for deployment.

Configure the ARM template storage profile to install Windows Server 2016 by setting offer to Windows Server and SKU to 2016 data center, using PowerShell to list offers and SKUs.

Assess an ARM template for the VM image (2012 R2 datacenter), confirm no custom image, and note that no runtime OS version prompt is needed due to a default parameter.

Migrate on-prem web and app servers to Azure and configure two availability sets to achieve a 99.95% SLA by splitting web and app workloads.

Assess feasibility of adding a new VM to an availability set. The VM must share the same resource group and region as the set; mismatches make it not feasible.

The lecture explains how an availability set with two fault domains and three update domains maintains at least seven online virtual machines during planned maintenance, using an 11-VM distribution example.

Use the Azure AD Connect wizard to configure filtering and select the marketing subdomain, preventing its synchronization and changing the source of authority for those user accounts.

Enable password writeback from Azure AD to on-premises in a hybrid environment. Ensure an Azure AD premium P1 license and an on-premises AD Connect installed and configured.

Explore implementing self-service password reset and multi-factor authentication in Azure Active Directory, evaluating three authentication options: password, mobile app code (Microsoft Authenticator), and mobile phone (SMS or voice).

Add the custom domain in Azure AD. Update the registrar with mx or txt records, then verify the domain in Azure AD to enable users with the azure labs.xyz suffix.

Use synchronization rule editors to create a custom rule that syncs only AD domain users with UPN suffix Azure Labs Corp XYZ from the local domain into Azure Active Directory.

Explore Azure AD identity protection reporting options, including risky users, risky sign-ins, and risky detections, to support risk investigation.

Learn how to monitor the health of the Azure AD Connect sync service using the Azure AD Connect Health tool, which reports system health in the Azure portal.

Learn how staging mode in Azure AD Connect with password hash synchronization halts on-premises password synchronization and how to disable staging mode to resume syncing.

Create a budget in cost management for the Infrastructure resource group to alert when consumption reaches 700 USD, using the budget wizard to set the threshold.

Learn to use tagging to allocate costs by department, filter cost reports by department tag, and download department-specific Azure cost reports.

Enable Azure disk encryption for all virtual machines using the volume type all, ensuring every current and future data disks are automatically encrypted across managed disks and storage types.

Azure disk encryption automatically encrypts all VM volumes, including newly added data disks, when the volume type is all; auto encryption occurs after the VM reboots.

Secure access to the azure table by creating a private endpoint through the private link service on the microsoft backbone network, provisioning a private ip and nic in your vnet.

Implement Azure infrastructure backups by using Recovery Services Vault to store servers, VM disks, and databases across two locations 100 miles apart with a seven-year retention.

Review how a VM scale set via Azure CLI creates a load balancer ELB, a VNet suffix Vnet, a public IP, and two VMs named with an underscore and index.

Learn how to add a new domain as a custom domain in Azure by using a DNS record type, with TXT as one of two available options.

Trace the template deployment values to determine that two public IP addresses are created in the East US location after deploying the same template five times.

Estimate the total public IP addresses after deployment: with dynamic allocation, running the deployment five times creates five public IP addresses.

Learn to estimate alert counts in Azure action groups by applying hourly thresholds: up to 12 sms, 12 voice calls, and 100 emails.

Estimate three rules and one action group to cover VM create, update, delete, and shutdown events for 25 VMs in dev vnet, using a single rule for create/update.

Explore deployment slots in a premium App Service plan to test a new version in staging, switch to production with minimal downtime, and roll back if issues occur.

Use availability zones to protect VMs from data center failures by replicating across zones, and distinguish this from availability sets that protect against hardware failures inside a single data center.

Learn how Azure Recovery Services Vaults must reside in the same region as protected virtual machines, demonstrated by creating an east region vault to protect marketing and air virtual machines.

Assess whether core storage accounts with premium performance can host Azure tables, and note that standard general purpose v2 storage accounts support Azure tables and Blob, while premium does not.

Assess how premium SSD disks deliver consistent performance over time with guaranteed IOPS, throughput, and a single millisecond latency target.

Install the Microsoft monitoring agent on premise Windows Server 2019 VMs and define the data collection setting to send Windows event logs to the Log Analytics workspace.

Automate pester tests after VM updates by setting up an Azure automation runbook, creating an alert rule for VM updates, and linking an action group to trigger the runbook.

Identify the best Azure storage solution for unstructured data by recommending Azure Blob, which supports unstructured data, random access, and streaming, accessible globally via HTTP and HTTPS.

Use a standard general purpose v2 storage account to provision a network file share accessible from multiple virtual machines.

Review a storage account configuration and upgrade from LRS to GRS by selecting geo redundant storage in the replication setting dropdown under the configuration section.

Learn to rotate storage account access keys without impacting applications by using Azure Key Vault, featuring the Key Vault Managed Storage Account Key to sync and rotate keys.

Configure two storage accounts: a general purpose v2 with standard performance, and a premium file share with premium performance and the file shares account type.

Configure a shared access signature to grant an external organization read and list access to a storage account's blob storage with granular permissions, scoped and time-bounded.

Recommend geo redundant storage for Corp Storage to endure region-wide outages, and highlight zone redundant storage for protecting against local data center failures within a single region.

Use Azure AD based authentication with role-based access control to grant a storage account to selected employees by assigning the reader role, avoiding access keys and shared access signatures.

Enable a storage account with Azure Data Lake Storage Gen2 and hierarchical namespace to enable file-level access control and Azure Active Directory authentication for access from Azure Databricks.

Configure a storage account to restrict access to a specific ip address range by using networking options, selecting network, and entering the ip range or individual ip addresses.

Enable soft delete on the storage account to recover deleted blob data and keep deleted blobs for up to 14 days, protecting blobs and snapshots with a configurable retention period.

Assess how a storage account's shared access signature permissions affect access to blob objects containers, demonstrating that with no allowed resource type selected, access is denied.

Explain how a shared access signature governs blob access in a storage account, showing that an unselected allowed resource type blocks access at 30 October 9:00 pm.

Explore how a storage account's shared access signature governs containers, verify start and end times, and detect misconfigurations that cause authorization errors.

Explain storage redundancy options: lrs, zrs, grs, and gzrs. Show that lrs uses three copies in data center, while grs and gzrs use six copies across primary and secondary regions.

Resolve ARM template errors while deploying a virtual machine by correcting the concat and dependson arguments, ensuring the first parameter uses the network interface resource type.

To achieve 99.99% availability, place two or more VMs across two or more availability zones. A single availability zone configuration cannot meet this SLA.

Assess distributing three front-end servers and two middle-tier servers across two availability zones to meet 99.95% SLA; conclude this is not cost effective, so use an availability set.

Use an availability set to meet 99.95% SLA with automatic failover, no manual intervention, zero extra cost for availability sets, and distribute front end and middle tier across separate sets.

Learn to secure a storage account by configuring a PowerShell default action to deny traffic from all networks on public endpoints, as part of the AZ-204 lab prep.

Learn to restart Azure VMs when CPU usage exceeds 80% for 20 minutes by using an automation runbook, Azure alerts, and action groups with PowerShell and HTTP endpoint triggers.

Expose a 30-vm scale set across three availability zones with a single public IP via a load balancer, and assign all 30 NICs to the network security group.

Configure a load balancer with a public IP for a 30-VM scale set across three availability zones, using one NSG at the scale set level to route http and https.

Configure a standard azure load balancer to expose web apps across a 30-VM scale set in three zones, using two rules for http and https.

For an Azure blob storage account serving infrequently accessed data while remaining available on demand, choose the cool tier to minimize cost rather than hot or archive.

Identify underutilized Azure virtual machines and reduce costs by using Azure Advisor to detect idle resources and optimize spending.

Explore how to enable private IP communication between two Azure virtual networks using vnet peering, including regional and global peering options for cross-region connectivity.

Reconcile region mismatch by placing the web server VM in East US to match Corp Vnet, since a VM must share a region with its virtual network to join.

Examine virtual network peering between vnet one and vnet three and assess icmp firewall settings. Enable icmp in firewall settings to allow ping between core vm and core vmc.

Enable cross-region virtual network peering between core Pi and Vnet one and core Python vnet two, even across subscriptions. Ensure the IP address ranges do not overlap to avoid conflicts.

Assess the virtual networks and their peering. Ping between corp vm and corp vm B is not possible due to no peering between corp vnet one and corp vnet two.

Identify overlapping IP address ranges causing VNet peering errors, adjust the address space in one virtual network to remove the overlap, and re-establish the peering.

Discover how the DC1 v2 series enables confidential compute with secure enclaves to protect data and code inside a virtual machine.

Upgrade your Azure AD to premium P1 and implement conditional access policies to configure multi-factor authentication for the web application.

Use Windows Admin Center registered in Azure to back up the on premise Corp file server (Windows Server 2019) with Azure Backup, ensuring protection from data loss.

Owners and network contributors can add a subnet to the existing vnet, while security admins cannot.

Determine that only the core Python owner can grant the reader role in the Azure subscription.

Implement url path based routing with an application gateway to balance incoming traffic across designated pools, routing video requests to the video pool and image requests to the images pool.

Understand how an application gateway uses multi-site listener configurations to balance incoming traffic for marketing.com across the marketing pool and for sales.com across the sales pool.

Store passwords securely by using Azure Key Vault with ARM templates to avoid embedding credentials in the template when deploying multiple virtual machines.

Assign the logic app contributor role to the Azure AD group iPhone Devs so members can create Azure Logic Apps.

Explore how Azure Front Door serves as a global entry point and uses a public Azure Load Balancer to distribute traffic across virtual machines in multiple regions.

Configure Azure Key Vault advanced access policies to allow three virtual machines to encrypt and decrypt data disks using keys stored in the Key Vault, enabling disk encryption.

Enforce policies with Azure Policy to prevent external IP address assignment by the Core Azure Lab Admin group, and configure Azure Firewall to restrict VM access from a specific IP.

Learn how to configure Azure Sentinel to send email notifications to resource owners by building a Sentinel playbook and integrating it with Azure Logic Apps for alert and incident triggers.

Configure Windows Admin Center on the on-premises file server, register it in Azure, create a Recovery Services vault, install the Azure Backup Agent, and schedule backups to prevent data loss.

Secure the east and west virtual machines by removing public IPs and routing access through an Azure Bastion in West US, with VNet peering between East US and West US.

Configure Azure Recovery Service vault to set daily backups at four hours UTC and retain data for up to 90 days by creating a backup policy.

Configure session affinity for an Azure load balancer by adding a new load balancer rule and selecting session persistence in the settings.

Create a custom role named Core Azure Labs Auditor by using New-AzRoleDefinition with the Core Azure Labs Auditor Role.json input file to provision a tailored Azure access role.

Review a custom assets auditor role defined in JSON to identify which actions are allowed, noting read access to VMs and full support request permissions.

Recommend using a certificate stored in Azure Key Vault to digitally sign blobs in a storage account, as certificates play a key role in valid digital signatures.

Plan four virtual machines with private and public IP addresses, using a single network security group shared across all VMs by associating it to multiple network interfaces.

Recommend Azure Firewall Manager to implement global rules and policies across multiple subscriptions and hub-spoke network hubs, enabling centralized management of multiple firewall instances across regions.

Identify who can deploy virtual networks: network contributor and account owner can deploy to the resource group, while security admin cannot.

Understand management group role inheritance: root readers cannot be downgraded, root users can gain contributor on the sales resource group within the sales subscription, enabling vm deletion.

Configure network security group rules to deny or allow traffic based on source IP and port number for three virtual machines behind an NSG.

Configure a network security group inbound rule to allow port 443 for https traffic to a web app hosted on IIS in a virtual machine.

Learn to configure a network security group to restrict outbound traffic on port 80 from a VM, denying internet access for a service handling confidential financial transactions.

Configure Azure Key Vault to automatically provision certificates from Digi Cert by enabling certificate authorities, selecting the certificate provider, and entering credentials to dynamically issue digital certificates.

Recommend Azure resources to meet each department's security needs. Use Azure Key Vault for asymmetric keys and connection strings, and Azure AD managed identity for certificate retrieval.

Recommend deploying the web app on Azure App Service, securing traffic with Azure Application Gateway's SSL handshakes and web application firewall, and using Azure Traffic Manager for lowest-latency routing.

Select the standard load balancer in Azure to achieve 99.99% SLA for traffic between two VMs.

Recommend an internal Azure standard load balancer to connect the web front end to the application tier, supporting port forwarding, https health probes, and an availability set back end pool.

Recommend using Azure Application Gateway with Web Application Firewall to provide URL-based routing, connection draining, and sql injection protection for traffic from the public internet to the web front end.

Assign built-in roles to groups: infra manager uses contributor to manage resources; vm manager uses contributor scoped to virtual machines; storage manager uses storage account contributor to manage storage accounts.

Configure azure ad conditional access to restrict azure portal and PowerShell access to all users except members of the corp azure lab staff groups.

Identify the reserved ip 169.254.169.254 to query the VM's instance metadata and retrieve the authentication and access token using the system assigned managed identity.

Use resource locks to prevent accidental deletion or modification of Azure resources at subscription, resource group, or resource level, and pair locks with Azure blueprint to enforce a persistent lock.

Generate a real user measurement key and embed a Traffic Manager JavaScript snippet in your HTML to collect latency data and route traffic to the closest Azure region.

Learn to deploy an Azure web app with App Service and Blob Storage, ensure SSL traffic, and protect against external attacks using Azure Application Gateway and its Web Application Firewall.

Configure a network security group inbound rule with service tags to restrict access to the two regional virtual machines to Azure Front Door.

This lecture guides autoscale configuration for an Azure web app, advocating a standard app service plan for cost savings, then enabling autoscale with a scale condition and rule.

Demonstrates auto scale rules for az-204, showing two instances after thresholds: 60% and 70%, with 70% not triggering scale out unless sustained for 20 minutes.

Learn how to configure an Azure function app to run 24/7 by enabling the always on setting, ensuring uninterrupted invoice processing.

Recommend using Azure Container Registry, a private Docker container registry, to host and share the booking system image across the organization, enabling its use by App Service.

Configure an Azure Logic Apps workflow to notify on virtual machine configuration changes using a trigger.

Discover how to enable backup for an Azure function app by upgrading from the consumption plan to the standard S1 app service plan.

Use the standard S1 plan as the cost-effective option for auto scaling on Azure App Service, acknowledging auto scaling is available in standard and premium tiers.

Implement continuous deployment of a containerized app into an Azure Kubernetes Service (AKS) cluster, enabling automated, scalable deployment workflows for cloud-native applications.

Copy files into a Docker container using copy or add commands on Windows Server 2019, with forward slash paths like /config and avoiding xcopy.

Deploy a docker-based app to Azure Kubernetes Service, configure a two-node cluster with monitoring, and complete deployment scripts for Azure Labs Corp Hyphen G resource group and Azure Lab Cluster.

Install kubectl via aks install-cli, connect to the Corp Azure Labs cluster in the Corp Labs, Azure Org resource group, then list nodes and deploy using kubectl apply -f apply.yaml.

Enable tracing for an Azure App Service web app by turning on Application Insights to capture usage trends, Ajax call responses, web page load performance, and server and browser extensions.

Design an Azure Logic App workflow that listens for virtual machine configuration changes in a resource group via an event grid trigger, evaluates a condition, and sends an email notification.

Discover how to enable high throughput under workflow settings to scale a logic app from 100,000 to 250,000 executions in five minutes.

Migrate an on-premises C# invoice processing system to Azure by using an Azure function app to run on demand, either rewriting or executing the existing app.

Publish the booking system docker image to Corp Azure Labs Registry with the correct docker push command, ensuring the image is pushed to the azurecr.io registry.

Assess an invoice processing function app running 24/7 that must connect to the storage account and a virtual network, and recommend a premium app service plan for always-on capability.

Recommend using Azure disks and Azure files as storage options for data volumes in AKS, enabling dedicated volumes and sharing data across multiple pods.

Troubleshoot a Windows Server 2019 container host by correcting invoice server dot txt to invoice server dot docker file, then enable the feature and deploy from the Microsoft Container Registry.

Identify appropriate storage volume for injecting sensitive data into pods in Azure Kubernetes. Utilize the secret volume type to securely inject confidential data at runtime.

Learn how to add a new entity to an Azure storage table by altering the partition key to electronic_india and preserving the row key to respect the primary key.

Confirm the arm template will deploy two storage accounts using a copy block with count two, creating corp disk storage zero and corp disk storage one.

Discover how ARM template runtime parameters work in Azure deployments, with resource group as the mandatory parameter you must supply at runtime.

Split web and app servers into two Azure availability sets to meet the 99.95% availability SLA. Confirm this two-set configuration fulfills the SLA per Azure documentation.

Configure geo redundancy for a storage account with Bicep scripting, fill placeholders and standard_GRS in SRC, and use Visual Studio Code with the Bicep extension and IntelliSense to build templates.

Explain how a custom role named asset auditor grants read access to virtual machines while allowing all permissions to create support requests, based on the provided json definition.

Recommend the premium app service plan for a function app processing invoices, running 24/7 with storage account and always-on access to a virtual network.

identify and fix an ARM template error by supplying the missing resource type in a Concat expression within the dependson section (use microsoft.network/virtualnetworks) to enable vm deployment.

Review confirms that an elastic pool can only include databases on the same server, so adding EMP DB to a different server won't meet the requirement.

Assess which records fit into Corp Lab Container one by treating the partition key as the primary key and using brand defaults; records 1–3 fit, record 4 does not.

Examine how the partition key acts as the primary key in Azure Cosmos DB and identify which records fit into the core lab container, confirming only records 1 and 2.

Automated backup v2 for virtual machines encrypts SQL Server backups on an Azure VM, meeting a 15-minute RPO, 30-day retention, and encryption at rest in durable Azure storage.

Explore Azure SQL Database managed instances and distributed transactions to design scalable, reliable cloud solutions. Elevate your AZ-204 lab prep for developing solutions on Microsoft Azure.

Migrate two on-prem SQL Server databases to Azure SQL databases and enable distributed transactions with elastic database transactions, supported across Azure SQL Database, managed instance, and VMs.

Evaluate migrating two on premise sql databases to an Azure SQL Server Virtual Machine for server side distributed transactions using the Microsoft distributed transaction coordinator (MSDTC).

Map each application's data to Cosmos DB stores and assign recommended APIs: use Gremlin for map-like data, SQL API for telemetry logs, and table API for key-value dictionaries.

Use the Gremlin API to host and manage graph based data in Azure Cosmos DB, showcasing a multi-model platform with Core SQL API, MongoDB API, Cassandra API, and Table API.

Recommend using core API or MongoDB API to host Json based telemetry data in Azure Cosmos DB, leveraging Cosmos DB’s multi-modal models for Json storage.

Learn how Cosmos DB cross partition queries work, with cross partition query set to false, which limits searches to a single partition when filtering order quantity >= 15.

Create a dockerfile to host an ASP.NET five application, ensure startup pilot runs on container start via entrypoint dotnet startup pilot, and run the PowerShell script named Configure setups one.

Learn to deploy a docker-based application to Azure App Service using a Linux container and three Azure CLI commands: resource group create, app service plan create, and web app create.

Explore three migration options for on-premises SQL to Azure: SQL database (serverless, scalable), SQL managed instance (Azure-managed, no OS control), and SQL virtual machine (full OS access).

Configure the firewall and virtual network settings on the Corp Lab Server to allow the required IP range so the Azure portal query editor can access the Corp Labs DB.

Recommend a data store for json based documents with sql-like query capabilities and low latency, and identify Cosmos DB as meeting all requirements.

Map data uses the Gremlin API for hierarchical data, while JSON telemetry logs use the SQL API; core dictionary relies on the Table API for key-value pairs.

A failover group links primary and secondary SQL servers across regions in the same resource group, enabling automatic failover, geo replication and a recovery point objective up to five seconds.

Explain why always on availability groups suit SQL Server on a virtual machine for high availability, unlike auto failover groups, long term backup retention, and active geo replication.

Complete the labs for the 300 exam using the Azure portal and CLI to build certification readiness, while the course updates address Azure certification program changes.