AZ-305 Designing Microsoft Azure Infra - Lab & Exam Prep

Sign in to the Azure portal, switch between Azure Active Directory tenants, and verify the subscriptions associated with each tenant, such as Azure Labs and Tech Talent.

Move a misassociated Azure Lab subscription from Tech Talent Active Directory to the Azure Labs Active Directory, and verify the change across both directories.

Create the Azure Labs resource group in Australia East, then create a lab user and assign contributor access to that resource group using role-based access control.

Set a $2,000 monthly budget for the Azure Labs resource group and configure 60% and 90% email alerts to manage costs.

Configure Azure Application Insights for a dotnet core web app, enable comprehensive diagnostic data collection (interop, profiler, snapshot debugger, local variables, sql commands), deploy, and verify via insights data.

Implement site availability monitoring with Application Insights, configuring a standard availability test that runs every five minutes from Australia East, and create an action group for email and SMS alerts.

Customize the Azure dashboard to display four key Application Insights metrics, namely server requests, failed requests, processor time, and availability, by adding metrics and pinning a chart to the dashboard.

Configure an Azure SQL database in East US, implement geo replication to West US, test data sync, and perform a forced failover to ensure disaster recovery readiness.

Troubleshoot autoscale by identifying that only certain app service plans support auto scaling, upgrade to the S1 production plan, and enable custom autoscale in scale out.

Create an Azure function app in the portal to monitor the input folder in file processor 2021 storage. Extract text from txt files and enqueue to the processed file queue.

Implement dynamic binding in a function app to route dropped files to processed/images, processed/documents, or processed/others using binder and blob attributes for runtime destination selection.

Create azure service bus queue in east US with a basic tier for a logic app, test json message send/receive via Service Bus Explorer, and obtain a send-only connection string.

Troubleshoot and fix a service bus configuration for a publisher subscriber messaging solution by enabling topics, upgrading from basic to standard to unlock topic features.

Provision an Azure Cognitive Services resource for the Logic App, retrieve its endpoint and keys, and configure the resource group, region, and pricing to enable connectivity.

Create a logic app that monitors an Azure blob storage folder, analyzes uploaded images with computer vision to detect weapons, and emails the admin when weapon tags are found.

Create and test an Azure service bus queue for a logic app in East US using Service Bus Explorer, posting JSON messages and obtaining a send-only connection string.

Assess migrating on-premises SQL Server data to Azure SQL Database using Azure Data Factory, leveraging SSIS Integration Runtime to lift and shift existing SSIS packages with minimal rewriting.

Provision a two-part Azure Data Factory lab to set up a storage account and Azure SQL database, upload COVID statistics CSV to blob, then configure and run the ADF pipeline.

Create an Azure Data Factory pipeline to copy covid statistics from blob storage csv into Azure SQL Database, using datasets and linked services, then test the end-to-end load.

Investigate a failed Azure Data Factory pipeline and fix a firewall issue blocking the SQL database connection by enabling the 'allow Azure services and resources to access this server' option.

Learn to configure an Azure SQL failover group with automatic failover to West US for disaster recovery from East US, and compare it with active geo replication.

Provision Azure Key Vault to store keys, passwords, certificates, and other secrets. Configure access policies with full permissions and enable managed identities for secure app access via SDKs.

Create a secret in Azure Key Vault to store the storage account connection string for use by logic apps and data factory when accessing blob storage.

Provision the system assigned managed identity for the azure data factory and grant read and list access to key vault secrets for automatic storage account connections.

Protect and recover Azure key vaults by applying soft delete and purge protection, manage keys and secrets access, and recover deleted vaults via portal or PowerShell.

Configure a logic app to read a secret from Azure Key Vault using a system-assigned managed identity, granting secret access and testing with the 'password for logic app' secret.

Provision an Azure data lake storage account with Gen2 and hierarchical namespace; create a configuration container with prod, uat, sit folders; grant lab user storage blob data reader access.

Provision an Azure Synapse Analytics workspace with data lake storage gen2, Synapse Studio development, and an orchestration layer for data integration, plus a dedicated sql pool for analytics.

Learn to estimate Azure infrastructure costs using the Azure pricing calculator, compare virtual machine and app service configurations, adjust instances, and understand cost management and total pricing.

Understand pay as you go, reserved instances, and azure hybrid benefit for long-term cost savings. See how 1-year and 3-year discounts, plus enterprise licenses, boost savings on azure.

Explore how Azure Advisor acts as a virtual cloud advisor, delivering recommendations across reliability, security, performance, cost, and operational excellence to optimize costs and rightsize resources in the Azure portal.

Compare relational databases and NoSQL to guide when to use structured, schema-based storage versus distributed, horizontally scalable NoSQL in Azure, highlighting replication, high availability, and cost considerations.

Determine the appropriate data storage solution by data type: use NoSQL for unstructured data, opt for flexible semi-structured storage with metadata, and assess volume and requirements.

advise azure batch to power a 3d image rendering workload that processes a large volume of images using parallel compute.

Discover how to allow virtual machines to access Azure Key Vault without credentials by configuring a managed service identity to authenticate and authorize Key Vault requests.

Recommend using 192.165.0.0/28 as the gateway subnet for the site-to-site connection, avoiding overlapping with on-prem networks and following the guidance that /27 or /28 subnets are preferred.

Select the 192.165.0.0/24 address space for the Azure virtual network subnet to avoid on-prem conflicts and support 19 virtual machines via a site-to-site vpn connection.

Discover how to use Azure Application Insights to collect telemetry from a SaaS ASP.NET API and Azure Monitor alerts to trigger anomaly-based alerts.

Analyze network traffic in a hybrid on-prem and Azure environment with ExpressRoute using Network Watcher or IP Flow Verify to confirm if traffic to a VM is denied.

Learn how to identify failures and performance issues in Azure web apps by using Application Insights, the recommended tool for monitoring Azure App Service.

Analyze user retention for a distributed .NET Core application deployed to Azure Web Apps using Application Insights retention analysis and the retention analysis workbook.

Deploy multi-region applications to Azure using container-based microservices and Azure Kubernetes Service, ensuring no installation dependencies and flexible development and deployment.

Azure Cosmos DB provides a globally distributed, near-user storage solution for multi-region auditing apps, offering at least 1 TB and five consistency levels (strong, bounded staleness, session, consistent prefix, eventual).

Learn how to deploy 50 virtual machines to Azure using an ARM template while retrieving the administrator credential from Azure Key Vault with read-only access and role-based access control.

Learn to deploy 50 Azure VMs with an ARM template and securely retrieve administrator credentials from Azure Key Vault by enabling template deployment and configuring access policies.

Set up asynchronous messaging between applications using an Azure storage queue to queue json messages. Read and write messages via http or https to support a multi-application processing workflow.

Explore configuring multifactor authentication with Azure AD and conditional access to block suspicious sign-ins, using identity protection and premium P2 licensing.

Synchronize an on-premises active directory with Azure AD using Azure AD Connect and implement conditional access to trigger multifactor authentication on suspicious sign-ins with Azure AD premium P2 Identity Protection.

Learn how to deploy a web app on Azure with Azure AD authentication, using app registration to enable seamless sign-in for Azure AD joined devices.

Learn how to configure remediation for an Azure policy that detects missing tags in a resource group, by provisioning an Azure Active Directory object with a contributor RBAC role.

Leverage Azure AD Premium P1 to minimize credential management overhead by enabling self-service password reset and password writeback to on premise, integrated with Azure AD Connect.

Assign Azure blueprints at the root management group to consistently manage access across all subscriptions and resource groups while minimizing definitions and assignments.

Define the Azure blueprint at the root management group level to minimize definitions and assignments while ensuring consistent configurations and access across all subscriptions and resource groups.

Transfer on premise SQL Server data to Azure data warehouse nightly at 10 p.m., enabling data engineers to analyze data with notebooks in Scala or Python on Azure Synapse Analytics.

Design a data lake solution using Azure Data Lake Storage Gen2 to ingest data from multiple sources, transfer nightly from on-premises SQL Server to Azure data warehouse, enabling scalable analytics.

Use Azure Databricks to manage Spark clusters and develop notebooks in Scala or Python, enabling nightly data transfer from on premise SQL Server to an Azure data warehouse for analysis.

Learn how to transfer transactional data from on-premise SQL server to an Azure SQL data warehouse using Azure Data Factory, scheduled nightly at 10 p.m. Learn to orchestrate data movement.

Apply Azure application gateway to load balance web traffic at the application layer, protect against SQL injection with its web application firewall, and enable cookie-based session affinity.

Host a static web application on Azure storage with content delivery network for low-latency access, using HTML and JavaScript with Facebook and Google authentication and text messages, at minimal cost.

Identify and monitor on-premises AD Connect sync issues using Azure AD Connect Health, a robust Azure service that detects sync errors and provides performance monitoring and usage analytics.

Use Azure AD Connect Health to monitor on-premises ADFS services, offering alerts, performance monitoring, and usage analytics within the Azure portal.

Migrate the on-premises MongoDB to Azure Cosmos DB, a managed NoSQL service. Achieve reduced administrative overhead for the ASP.NET application by using Cosmos DB.

Demonstrate how a static HTML/JavaScript web app can trigger text messages by using Azure Functions as the backend, invoked from the client to minimize cost and latency.

Recommend Azure content delivery network to serve a static web app built with HTML and JavaScript, delivering low-latency content worldwide with edge caching and minimal cost.

Learn to secure an Azure SQL Database by enabling transparent data encryption at rest and transport layer security (TLS) for data in transit.

Learn to use Azure Service Health to monitor all Azure services, view planned maintenance, and configure alerts and dashboards by subscription or region to prevent downtime.

Use shared access signature to grant the marketing department access to a blob container for a specific month, by configuring start and end dates in the storage account.

Recommend a read-only caching policy for the data disk on an Azure VM hosting SQL Server, aligning with Microsoft documentation.

Recommend host caching to none for the log file disk on an Azure VM hosting SQL Server with two data disks, aligning with Microsoft documentation.

Learn how to provide a centralized, SMB-based file share for 80 Azure VMs using Azure Files, a fully managed serverless service that mounts on Windows, Linux, and macOS.

Understand how the source of authority for user profiles in hybrid identity determines who can update information, with on-prem Windows Server AD updates propagating to Azure AD via AD Connect.

Identify which user can update profile information in Azure Active Directory, confirming that only those with the user administrator role can modify profile details such as job and contact information.

Recommend an Azure AD plan to allow cloud-only users to change their password, and note that the basic free plan meets this requirement.

Identify that Azure AD Premium P1 enables cloud-only password reset for users synced from on premise to Azure Active Directory via Azure AD Connect.

Identify the diagnostic extension as the suitable Azure Monitor agent to collect Windows security logs from the middle tier VM and retain them in a storage account for long-term retention.

Determine how Azure AD Premium P2 licenses enable access reviews via privileged identity management to meet the sales department's requirement.

Correlate Azure resource usage with application performance data using Azure Log Analytics to run queries, analyze trends, and visualize grouped data for dotnet core apps on Azure Web Apps.

Determine the minimum Azure AD tenants, one for the staff forest to be synced. Enable hybrid identity with Office 365 deployment and keep the sales forest on premises.

Automate role and policy assignments across six management groups and their subscriptions using Azure blueprints to standardize deployments, reduce administrative effort, and enforce organization standards.

Learn to configure Azure Data Factory by creating a pipeline and adding data flow components to move and process data from on-prem file servers to Azure storage.

Recommend using transparent data encryption (TDE) to encrypt data at rest for the SQL Server database on an Azure VM, as supported by Azure documentation.

Enable immutable storage in a storage account to safeguard archive data from deletion for five years using a blob container, access policy, and write-once, read-many retention with legal hold.

Recommend archiving 15 TB of on premise data to Azure using a standard general purpose v2 storage account with the archive tier to minimize costs.

Recommend using an Azure file service in a general purpose v2 storage account to host a shared SMB file system for Windows, Linux, and macOS VMs, replacing on-premises file servers.

Choose an Azure storage account with general purpose v2 to store documents for end users and enforce access with role-based access control and shared access signatures.

Configure and enable the diagnostic log retention for the underlying SQL Server in SQL Insights, setting the maximum retention period to 730 days to optimize Azure SQL monitoring.

Leverage Azure Content Delivery Network to cache static web content near users worldwide, reducing page load times and improving performance for globally distributed audiences.

Enable diagnostic logs for the Azure SQL database by turning on diagnostics in the resource's diagnostic settings, and set the SQL Insights retention to 90 days.

Recommend options to encrypt all data at rest in the storage account, using Azure storage encryption to meet the requirement, and reference the Azure storage encryption feature documentation.

Implement disk encryption for OS and data disks using Azure Disk Encryption and Azure Key Vault to securely store and manage encryption keys and secrets.

Implement Always Encrypted in an Azure SQL Database to ensure the credit score column is not stored as plain text.

Enforce express route creation in the Express Route resource group by delegating to Express Route Admin with a custom RBAC role at the resource group level and least privilege.

Enforce express route resource creation only in the resource group named Express Route using a subscription-level Azure policy with exclusions for governance and compliance.

Learn to estimate Azure Migrate appliances for migrating on-premise Hyper-V clusters to Azure using Azure Migrate service and appliances; determine that three appliances are needed, one per cluster.

Calculate the minimum number of Azure Site Recovery agents needed to migrate on-premise Hyper-V clusters to Azure, totaling 18 agents for 18 nodes across three clusters.

Migrate an XML API to Azure API Management and expose JSON data for internal users, determining the minimum number of APIs to add behind API Management (the count remains one).

Migrate an XML API to JSON for internal users behind Azure API Management while stripping headers for external access, using two policies: XML-to-JSON conversion and set http header.

Migrate an XML API to Azure API Management, return JSON for internal users, strip headers for external users, and implement two products aligning with the two requirements.

Estimate migration costs from VMware to Azure using Azure Migrate Assessment, focusing on compute and storage costs, with the report showing split ups.

Identify the execution count of a specific query against an Azure SQL Database using Query Performance Insight, a built-in tool for single and pooled databases.

Evaluate staff and contractor group memberships using Azure Active Directory access review (premium P2). Allow members to report whether they want to stay, with automatic removal for non-responders or declines.

Select Windows event logs for Windows virtual machines and SSIs logs for Linux virtual machines to feed the log analytics workspace.

Migrate your on-premises SSIS packages to Azure using a serverless approach with Azure Data Factory and the SSIS Integration Runtime.

Describe exporting Application Insights telemetry continuously to an Azure storage account using the classic continuous export feature. Note that diagnostic settings offer an alternative for long-term log retention.

Enable external access in the API management virtual network settings to allow external users to reach the API hosted on the virtual machine within Azure.

Use Azure activity logs to filter and extract data, generating a monthly report of resources created in a specific subscription.

Use Azure Monitor to alert IT administrators when the distributed net core application on Azure Web Apps reaches a critical condition. Leverage telemetry, analysis, and Application Insights for diagnostics.

Design a workflow with Logic Apps to notify administrators when a VM configuration changes in Azure. Use triggers to invoke the Logic App and generate notifications for stakeholders.

Enforce multi-factor authentication for Corp Admin users from suspicious locations by leveraging Azure AD identity protection and conditional access to trigger MFA based on activity signals.

Demonstrates implementing hybrid identity by syncing on premise Active Directory with Azure AD and enabling single sign-on through federation with AD FS.

Implement hybrid identity to migrate on-premises Active Directory to Azure AD, enabling user synchronization and single sign-on, with Azure AD Connect pass-through authentication as the recommended solution.

Recommend Azure AD premium P1 to enable password change for hybrid users synced from on-premises via Azure AD Connect, as described in the product feature comparisons.

Ingest security audit logs stored in blob storage into a SQL database using Azure Data Factory for scalable extract, transform, and load (ETL) processing.

Implement just-in-time privileged access and activation notifications using Azure AD Premium P2's Privileged Identity Management to meet the marketing department's resource access requirements.

Containerize a classic ASP web app with third-party DLLs and deploy it to Azure Container Instances for simplified deployment and automatic scaling, with a path to Azure Kubernetes Services.

Examine Azure RBAC options to isolate sales forecast resources using a resource group in corp labs subscription, with corp labs admin as owner and sales forecast dev group as contributor.

Migrate an on-premise SQL Server to Azure using ExpressRoute, deploying Azure SQL Managed Instance for automatic patching, backups, high availability, encryption in transit, and dedicated underlying infrastructure.

Assess an on-premises sql server 2012 database and migrate it to azure sql database using the data migration assistant, which guides the migration and supports the source version.

Recommend the vcore purchasing model with Azure hybrid benefit for Azure SQL Database and Azure SQL Managed Instance, leveraging existing software assurance to minimize costs by up to 30%.

Conclude that zero conditional access policies are required for Azure administration, as security defaults enforce MFA and domain-based administrator authentication.

Confirm the minimum azure custom domains needed for a hybrid identity, with directory synchronization from on-premises staffs dot azure corp labs.com to azure, yielding one domain.

Determine the minimum public IP addresses required for an Azure load balancer to distribute public internet traffic to two web servers.

Identify the minimum public IPs needed for web R1 when using a single Azure load balancer to serve public internet traffic; VMs behind the load balancer require zero public IPs.

Determine the minimum public IPs needed by deploying a single public IP on the Azure load balancer and using private IPs on Web Svt1 and Web Svt2 behind it.

Package a classic ASP web app into a container to bundle dependencies, enabling deployment to Azure Container Instance with minimal overhead and optional Azure Kubernetes Service for scaling.

Design a centralized monitoring solution for on-premise and other cloud providers using Microsoft Sentinel to collect log and diagnostic data, analyze threats, and automate responses.

Use Application Insights to monitor calls between components of a distributed .NET Core app deployed to Azure Web Apps, using the composite application map to visualize inter-component interactions.

Learn how to add multiple diagnostic settings for an Azure SQL database, enabling parallel streaming of diagnostic data to multiple resources and logging to different locations.

Improve Azure vm network performance using accelerated networking for 75 standard d4s v3 VMs in a virtual network, reducing latency and jitter while keeping costs down.

guide the installation and configuration of a self-hosted integration runtime on the on-premise file server to enable copying 600 GB of data to Azure Storage via Azure Data Factory.

Establish an encrypted connection between on-premises data centers and an Azure virtual network using a site-to-site VPN gateway with an IPsec IKE-based tunnel, securing the communication channel.

Recommend using Azure disk encryption to encrypt all OS and data disks at rest for the VM, as outlined in the Azure infrastructure design course.

Apply dynamic data masking in Azure SQL database to reveal full credit card numbers to supervisors and the last four digits to operators via a central masking policy.

Evaluate password synchronization options for a hybrid on-premises and cloud Azure AD setup, and conclude that password hash sync best meets the requirement for cloud-managed authentication.

Pre-authenticate a legacy asp.net app on an Azure VM via Active Directory, using app registration for tenant scope and enterprise application for global, multi-tenant access and third-party apps.

Discover how to protect Active Directory users at scale with Azure Active Directory Identity Protection Service. Automate detection and remediation of identity-based risks across thousands of users and mission-critical applications.

Apply dynamic data masking in Azure SQL Database to hide sensitive data like salary and Social Security numbers in query results, using masking rules and conditional policies for specific users.

Deploy deny assignments via the Azure blueprint service to block a subscription-level owner from a sensitive resource group, not like regular role assignments.

Recommend SQL Server or Azure Cosmos DB to store and query json; SQL Server and Azure SQL Database support json with standard SQL, Cosmos DB offers SQL API for json.

Enable just-in-time VM access with Microsoft Defender for Cloud to secure RDP and SSH to Azure virtual machines, granting access only when administrators request it.

Recommend a standard general purpose v2 storage account to meet requirements for blob storage, table storage, file shares, drive mapping, and high availability.

Recommend read access geo-redundant storage (RA-GRS) for a storage account storing documents and tables with drive mapping access, providing the highest possible redundancy.

Determine the required Azure policy effect to add and modify tags on resources in a resource group, triggering remediation for missing tags, with the chosen effect as modify.

Switch the archive blobs to an online access tier such as hot or cool to enable immediate retrieval, using standard or high priority rehydration as needed.

Use a deployment template to create repeatable testing environments, keep shared resources outside the template, and delete the per-environment resource group after testing to minimize admin effort.

Recommend the network contributor role to grant scoped access for managing virtual networks under least privilege. Review inbuilt networking roles to identify appropriate permissions.

Route user requests to the closest available server across on-prem and Azure back end using Azure Front Door and Azure Traffic Manager to ensure low latency and avoid failed instances.

Use a server-level IP firewall to restrict SQL Server access to a specific public IP across all databases in the East US instance, providing granular, centralized security.

Deploy two containers as a group (a web app and a health monitor) using Azure Container Instance for a cost-effective, low-maintenance solution.

Discover how to send Azure services health alerts to on-premise System Center Service Manager using the Azure IT service management connector.

Recommend using Azure Monitor alerts to notify IT administrators whenever infrastructure-level changes occur to virtual machines, enabling timely responses and centralized monitoring.

Learn how to use Log Analytics as the signal source to trigger sign-in alerts in Azure Monitor for an Active Directory tenant, with log alerts based on Log Analytics queries.

Azure blob storage with the archive tier to store database backup files for compliance, minimizing costs since retrieval is not expected.

Configure a time-based retention policy on an Azure blob container to archive data and prevent deletion for four years.

Configure a storage account to be accessible only from a specific Azure virtual network by using virtual network service endpoints, enabling private IP access over the Azure backbone.

The archive tier in the storage account provides the lowest storage cost, but data retrieval incurs higher costs for this configuration.

Recommend premium managed disks with SSDs for the OS and database and logs components to maximize speed, and standard managed disks for cost-effective backups in Azure SQL deployments.

Recommend storing Azure Active Directory logs in an Azure Log Analytics workspace to enable monitoring and reporting of sign-in activities within Azure Monitor logs.

Recommend using Azure Application Insights to track requests and exceptions to code lines in a dotnet core app hosted on Azure Web Apps, with telemetry via Visual Studio CodeLens.

Troubleshoot a storage account file access issue by noting the archive tier blocks reading and updating production log dot txt, and switch to hot or cold to enable read/write.

Implement a virtual network peering topology that connects all networks, enabling VMs to communicate across networks with minimal administrative effort.

Learn how to visualize the relationships between components of a distributed dotnet core application hosted on Azure Web Apps using Azure Application Insights and its Composite Application Map.

Explore how to enable virtual network service endpoints to connect a VM in a VNET to an Azure SQL database without exposing public IPs.

Enable external access for api management in azure by using the external option in the virtual network; a public load balancer is created automatically, so VPN gateway is not required.

Leverage azure active directory conditional access to restrict web app access to only domain-joined, hybrid azure ad joined devices, ensuring company-owned computers authenticate before access.

Choose the Azure Container Registry premium SKU to enable geo replication across multiple regions, storing and replicating container images for deployment on eks clusters.

Show how to use azure application gateway for URL-based traffic redirection, routing video requests to M1, M2, and M3 and image requests to VM4, VM5, and VM6.

Connect Azure VMs to an on-premise network via a site-to-site connection by placing VMs in a virtual network and configuring a routing table to direct traffic to on-prem virtual appliances.

Scale out the Job Portal web app on Azure by adding more instances to meet demand, using horizontal scaling; avoid scale up since traffic is temporary.

Implement throttling and rate limiting in your Azure API Management to protect web APIs from DDoS attacks by restricting calls per minute.

Guide migrating an on premise SQL Server database to Azure SQL Database using the Microsoft-recommended backpack file, with reference to detailed documentation.

Recommend virtual network peering to enable private IP communication with low latency between two virtual networks in West US and East US, offering a cost-effective alternative to express route.

Establish a site-to-site VPN between on-prem Texas and Azure networks to access marketing subnet VMs. Use VNet peering for marketing and sales subnets, and NSG rules for admin access.

Recommend Azure messaging services for three apps: invoice app with service bus fifo; tax calc app with event hub; audit app with event grid.

Learn how Azure Application Gateway's web application firewall protects web applications from SQL injection attacks and other security threats, supporting secure Azure deployments.

Design two regional Kubernetes clusters with SSL offloading using Azure Front Door to enable global failover and secure traffic without per-container SSL configuration.

Determine storage account needs for requirement: migrate on-prem SQL to Azure SQL via a backup file in blob storage; app service needs no extra storage; metrics require a storage account.

Automate sql server backup on an Azure virtual machine using automated backup v2, storing in Azure storage, meeting recovery point objective of 15 minutes, 30-day retention, and encryption at rest.

Learn how to enable backup for an Azure function app by upgrading from the consumption plan to the standard S1 app service plan, since the consumption plan doesn't support backup.

Learn how to implement infrastructure backup using Azure Recovery Services Vault to protect VMs, storage accounts, and databases in two locations 100 miles apart with seven-year retention.

Configure Windows Admin Center on the on-premise invoice file server, register it in Azure, create a Recovery Services vault, install Azure Backup Agent, and schedule backups to prevent data loss.

Integrate Windows Admin Center with Azure Backup to back up the on-prem Corp file server running Windows Server 2019 to Azure, protecting data from accidental or malicious deletions.