Microsoft Azure Solutions (Exam 70-533) – 9 Course Bundle

Explore Azure virtual machines, infrastructure as a service, deployment models (classic and ARM), VM sizes, cost estimation, and cost-control tools, then learn about availability sets, scale sets, disks, and security.

Understand azure vm overview in infrastructure as a service model, manage operating system, choose pre-configured sizes up to 4 terabytes of vhd, generation 1 only, no vhdx or shared vhd.

Leverage Azure to run virtual machines with high availability, scalable up and out for cyclical or spike workloads, and pay only for what you use, avoiding underutilized on premises hardware.

Contrast classic azure service manager with arm deployment, outlining resource groups, templates, and json deployment for consistent, scalable deployments, plus role-based access control.

Explore Azure virtual machine sizes across general purpose, compute optimized, memory optimized, storage optimized, GPUs, and high performance compute categories, with sizes denoted by letters.

Explore azure vm costing with the pricing calculator to estimate costs and compare pay-as-you-go versus reserved options. Use cost management and billing to identify underutilized or overutilized resources.

Deploy a virtual machine through the Azure portal using Resource Manager, comparing classic deployment, select Windows Server data center edition, configure name, credentials, storage, and network, then create and connect.

Leverage Azure resource manager templates to deploy virtual machines, networks, and storage in a repeatable, parameterized way, using master templates that call modular templates across regions.

Learn how Azure virtual machines in an availability set achieve high availability by spreading across update domains and fault domains, with classic and arm availability sets to improve SLA.

Create an availability set and deploy two virtual machines into it, ensuring high availability across fault and update domains while choosing consistent disk type (managed or standard).

Explore the three types of vm disks: operating system, temporary, and data disks, and compare managed versus unmanaged, standard versus premium, with caching, portability, and cost considerations.

Compare unmanaged and managed disks for virtual machines, highlighting throughput, IOPS, storage accounts, and availability sets constraints. Managed disks distribute storage, improve throughput, and charge by allocation, simplifying cost management.

Select the deployed virtual machine, open disks, add a new data disk (one terabyte, standard), store it in a storage container, name it, and click save to attach and use.

Learn how to connect to Azure virtual machines with remote desktop using an RDP file, through encrypted tunnels. Manage disks and volumes with disk manager.

Scale virtual machines by resizing the vm (vertical scaling) or adding instances (horizontal scaling) with load balancing; ensure stateless workload backed by a centralized data set for consistent user experience.

Create a virtual machine scale set that auto scales with load balancing, using min 1 and max 20 instances and cpu-based rules, with a public IP and DNS label.

Secure your virtual machine by reviewing default inbound RTP rules and adjusting internet access. Apply network security groups to NICs or subnets for centralized traffic control.

Explore Azure VM agents and extensions that auto-install preconfigured software at deployment using custom scripts, Puppet, or Chef, and apply desired state configuration to non domain joined systems.

Monitor Azure virtual machines by reviewing activity logs, diagnostics, metrics, and alerts; customize charts, pin dashboards, receive email alerts, and run automated responses to ensure quick problem resolution.

Deploy classic virtual machines in a cloud service using a virtual IP with endpoints and optional load balancing. Compare classic and resource manager deployments, and configure dynamic or static IPs.

Explore Azure virtual machines, including deployment models such as classic and ARM, sizing, and optimization. Learn to deploy via portal or templates, ensure high availability, and manage security and scaling.

Explore configuring and integrating Azure Active Directory with on-premises directories, including custom domains, group and user management, multi-factor authentication, single sign-on, directory synchronization using Azure AD Connect, and federation options.

Compare Active Directory and Azure Active Directory as directory service options for cloud and on-premises deployments, highlighting hierarchical structure, organizational units, policy delegation, and Kerberos authentication.

Add and verify a custom domain in Azure Active Directory, up to 600 domains per directory, by creating a DNS text or MX record and setting the domain as primary.

Manage cloud users and groups in the Azure Active Directory portal by creating users, forming groups like payroll, assigning temporary passwords, and enabling group-based access to Office 365 resources.

This lecture shows managing Azure Active Directory users and groups with PowerShell, including connecting with Connect-MsolService and listing with Get-MsolUser, plus creating users and groups via New-MsolUser and New-MsolGroup.

Configure multi-factor authentication in Azure Active Directory by enabling MFA for users, selecting verification methods, and managing settings like trusted IPs, app passwords, and bypass options.

Learn how to add and manage multiple Azure Active Directory environments, create a new directory, switch between directories, and invite guest users for testing and cloud-based workflows.

Grant users access to thousands of SaaS apps by adding applications to Azure Active Directory, enabling single sign-on, centralized management, and user provisioning with usage reporting for cost savings.

Learn how to add software as a service applications in Azure Active Directory, assign them to users or groups, and enable a single sign-on experience via the my apps portal.

Explore the three-tier Azure Active Directory model, from the free plan with up to 500k users and 10 SaaS apps to upgrades for groups, self-service password reset, and multi-factor authentication.

Explore hybrid Active Directory by deploying a domain controller in Azure to deliver Kerberos and token-based authentication, with on-prem and cloud accounts synchronized for federated single sign-on.

Deploy a domain controller to azure in a virtual network using iaas; connect to on-premises dc via site-to-site vpn or express route, and configure dns and cloud global catalog.

Explore how to synchronize on-premises Active Directory with Azure Active Directory using the Azure AD Connect tool, including OU and attribute filtering, password synchronization, and optional AD FS single sign-on.

Prepare your on-premises environment for directory synchronization with Azure AD Connect by meeting domain and server requirements, then clean Active Directory with IdFix and AD Modify.NET to ensure valid UPNs.

Install and configure Azure AD Connect using the configuration wizard, choosing custom settings for on-premises directory synchronization, domain verification, and password sync, then manage the sync schedule.

Modify Azure Active Directory Connect synchronization by re-launching the configuration wizard, adjusting synchronization settings, and using the synchronization service and rules editor to fine-tune directory partitions and accounts.

Explore identity federation between on-premises Active Directory and Microsoft Online domain, establishing a trust and metadata exchange to enable single sign-on with claims-based tokens for cloud access.

Explore how a federated relationship enables single sign-on to cloud resources via ADFS, Active Directory, and the Microsoft Online Federation service, using tokens and redirects.

Identify ADFS prerequisites, including Azure Active Directory synchronization with token-based authentication, SSL certificates, database choices, minimum hardware, and domain functional level at least Server 2008.

Install active directory federation services on a member server, complete the post-deployment wizard, and configure a two-server farm with a trusted ssl certificate and a managed service account.

Enable external access to Active Directory Federation Services by installing and configuring the web application proxy, setting DNS resolution, and configuring certificates and firewall rules.

Use PowerShell to convert a lab domain to a federated domain with Azure AD, after connecting to the domain and running the federation conversion command.

Enable pass-through authentication with Azure AD Connect to provide single sign on via outbound call and queued requests checked against on premises active directory, caching credentials for trusted devices.

Learn to configure seamless single sign-on with your active directory, enabling users to authenticate once for cloud access using password hash synchronization or pass-through authentication via Azure AD Connect tool.

Configure pass-through authentication with single sign-on by converting the federated domain to standard, reconfiguring Azure AD Connect, and enabling pass-through and single sign-on for on-premises users accessing cloud resources.

Explore Azure Active Directory concepts, including on-premises vs cloud directories, vanity domains, and user and group management. Examine app access with sign-on, directory synchronization, and federation options like pass-through authentication.

Explore azure web apps options, deployment slots, hybrid connections, and traffic manager to deploy, scale, monitor, and ensure global availability of multi-tier apps.

Deploy your web app in a hosted platform as a service to scale with minimal admin effort, while infrastructure as a service offers full control over versions, patches, and architecture.

Choose an app service plan to deploy a web app on Azure, comparing free, shared, basic, standard, and premium tiers, with auto scaling, SLA, staging, custom domains, and SSL.

Create and deploy a web app in Azure using a platform as a service approach, selecting an app service plan, pricing tier, backups, and deployment slots.

Download and use a publishing profile to deploy your web app contents, or create deployment credentials for FTP, then choose web deploy for incremental updates to avoid full uploads.

Test web apps in production with deployment slots, clone the app for testing, and swap production and testing endpoints, while managing testing connection strings.

Navigate web app settings in a platform as a service environment, adjust dotnet, java, and python versions, choose 32-bit or 64-bit, enable always on, web jobs, and deployment slots.

Attach your web app to a VNet or on-premises resources using the hybrid connection manager, enabling secure outbound access from on-premises through your firewall to Azure.

Learn to maintain 99.95% uptime on Azure standard plans and configure auto scaling, scale up, or scale out based on CPU rules to handle traffic spikes.

Create Azure web jobs by uploading a zip containing your script to run as a background process on demand, scheduled, or continuously across app instances.

Explore diagnostic logging and metrics for Azure web apps, configuring Application Insights, alerts, and log streams to monitor performance, latency, and usage.

Deploy a web app across Azure data centers worldwide to reduce latency with traffic manager. Route users to the nearest data center using performance, priority, or geographic rules.

Create a traffic manager profile and configure performance-based routing to direct users to the closest endpoints (East US, West US). Add Azure endpoints and ensure consistent content.

Explore Azure deployment models, comparing IaaS and PaaS cloud services, including multi-tier web and worker roles with independent scaling.

Create and configure Azure PaaS cloud services via the portal, defining web and worker roles with two instances for high availability, and update configuration and storage connection strings for deployment.

Upgrade applications by switching from production to staging, uploading new packages and configurations, and deploying to a staged environment with an easy swap back if issues arise.

Explore how platform as a service enables multi-tier apps with web and worker roles, featuring direct port endpoints and internal endpoints and optional asynchronous messaging via storage or service bus.

Learn how a paaS cloud service communicates with iaaS resources by using public endpoints or by joining the same classic virtual network, enabling internal access via private IPs.

Learn how to configure per-hour scaling for a multi-tiered platform as a service app, handling production and staging independently with thresholds, cooldowns, and automatic scale in/out.

Explore monitoring and alerts for a multi-tier platform as a service, switching between web and worker roles, selecting metrics, and configuring alerts, logs, and automated responses.

Learn to deploy and scale web apps with Azure app service plans, deployment slots, VIP swap, and hybrid networks, while monitoring with web jobs and traffic manager.

Explore Azure SQL as a platform as a service and provision databases. Connect via graphical user interface or SQL Server Management Studio, migrate databases, and enable security, backups, and geo-replication.

Explore Azure SQL as a platform as a service that eliminates database administration, while noting it's not fully compatible with on-premises SQL Server and uses database isolation.

Provision an Azure SQL database by creating a logical server and a blank database, assigning a resource group, choosing a globally unique server name, and configuring firewall and pricing.

connect your azure sql db by configuring firewall rules, copying the server connection string, and using sql server management studio or data explorer to run queries and manage tables.

Migrate on-premises sql databases to Azure sql database using sql server management studio wizard, exporting schema and data with a bacpac or dacpac, and deploy into Azure PaaS.

Secure Azure SQL databases by configuring firewall rules and IP ranges at the server and database levels, using virtual networks, database roles, and Azure Active Directory authentication.

Learn how SQL db metrics, auditing, and threat protection in the Azure portal help you monitor activity, diagnose issues, run diagnostics, and optimize performance and costs.

Learn how Azure SQL backups use long term retention up to 10 years, a recovery vault, and five-minute restores with up to 35 days of recovery points.

Enable geo replication for SQL databases by selecting a target region in the portal and creating a readable secondary in the West US for near real-time replication and failover.

Explore Azure SQL: create logical servers, migrate on-premises databases, and connect with SQL Server Management Studio. Configure firewalls, manage logins and users, and monitor backups, diagnostics, auditing, and geo-replication.

Explore the Azure storage environment, create and manage storage accounts, and leverage blob storage, file shares, content delivery networks, backups, and site recovery.

Explore Azure storage basics: standard and premium storage accounts, blob storage for block and append blobs, and hot, warm, and cold access tiers that balance cost and performance.

Discover how to create an Azure storage account and work with general purpose v2, blob, file, queue, and table storage, including access keys, tiers, and replication choices.

Connect to your storage account with access keys, then upload and download files using tools like Azure Storage Explorer and cloud barrier Explorer, via drag-and-drop.

Create a blob storage container, upload files like images, and choose private, public blob, or public container access; share a URL or use a shared access signature for time-limited access.

Map an Azure file storage SMB share to a local drive using net use or PowerShell, enabling multiple systems to access the same files and drive letter M.

Learn how Azure file sync centralizes file shares across on-premises servers and Azure, using sync shares and sync groups to back up data and save local space with cloud tearing.

Monitor Azure storage by viewing metrics for blob and file storage, including capacity, transactions, ingress and egress, and enable diagnostics to collect hourly metrics and logs.

Azure content delivery network caches large static files worldwide, reducing latency by serving from local points of presence. Make sure the blob is public with a seven-day time to live.

Create a content delivery network profile to cache content globally across points of presence, then add an endpoint to associate a storage account or blob with that profile.

Create a backup vault, enable Azure Backup for on-premises and Azure resources, and apply a policy with daily, weekly, monthly, and yearly recovery points.

Explore Azure site recovery to replicate on-premises systems—from VMware and Hyper-V to physical machines—into an Azure recovery services vault, with deployment planner and automated recovery plans.

Explore container and docker fundamentals, and learn why we use them. See how to deploy a container, run multi-container apps, and manage via Azure container registry, clustering, and services.

Define a container as an isolated application on a shared operating system, often sharing a kernel. It reduces host overhead, increases density, and restarts quickly without an operating system boot.

Explore Docker containers, images, and runtimes, and learn to build with a Dockerfile. Discover Docker Toolbox, Docker Client and Engine, Compose, Machine, Registry, Kitematic, and Swarm.

Deploy containers in azure by provisioning a docker-enabled virtual machine with the docker machine azure driver or marketplace images, and run an nginx container on port 80.

Discover multi-container applications by building microservice-style stacks and using Docker with a docker compose yaml file to start WordPress and MariaDB as a single, coordinated application.

Publish a private container registry in Azure to store and customize your images, then load and pull images via Docker. Choose basic, standard, or premium for scale and replication.

Explore azure container services for scaling stateless apps across multi-host clusters, and compare docker swarm, a google-derived open source platform, and mesosphere data center os (dc/os) marathon for orchestration.

Set up an Azure container service cluster by selecting an orchestrator, creating a resource group in East US, configuring master credentials and SSH keys, and provisioning masters and agents.

Explore how containers evolved from physical to virtual to containerized deployments, using Docker essentials, deploying an Azure container host with Docker machine, and clustering with Kubernetes, Mesosphere, or Docker Swarm.

Explore Azure virtual networks, IP address spaces, and DNS; learn to configure point-to-site and site-to-site VPNs and VNet peering to keep traffic on Microsoft’s private network.

Explore how virtual networks isolate and control communication among virtual machines and cloud services, connect to on-premises resources with gateways, and manage dynamic and static IP assignments.

Plan virtual networks before deployment to avoid rework with the IP scope; use non-overlapping private address spaces across Azure and on-premises, and expect four reserved IPs per subnet.

Discover how DNS is managed at the virtual network level in Azure VNets, enabling cross-vm resolution within and between cloud services, with optional on-premises DNS integration.

Create a virtual network in Azure, define an address space, configure subnets, and assign it to a resource group in West Europe to support virtual machine deployment.

Choose gateway sizes from basic testing to production gateways 1-3 for optimal tunnels and throughput when deploying site-to-site and point-to-site vpn connections to access virtual networks.

Learn to configure a point-to-site VPN for Azure by creating a virtual network gateway and gateway subnet, provisioning root and client certificates, and deploying the VPN client.

Configure a site-to-site vpn by creating and associating a virtual network gateway with a local network gateway and a pre-shared key to establish an encrypted connection between networks.

peer two virtual networks to enable resources in one VNet to communicate with those in another within region without using the public internet, via VNet peering over Microsoft’s private network.

Master azure virtual networks, IP address spaces, DNS resolution, and how to configure site-to-site and point-to-site VPN connections and vnet peering.

Explore azure automation by creating automation accounts, assets, and runbooks, and connect log analytics to collect data. Review azure security center for detection as a service, incident analysis, and prevention.

Automate repetitive IT tasks using Azure automation by creating an automation account, managing assets like variables and credentials, and executing runbooks on schedule or on demand, including ARM templates.

Create an Azure automation account, assign a resource group and region, and configure run as accounts in ARM and classic modes. Explore assets and activity log for managing updates.

Learn how to configure automation assets in an Azure automation account, including modules, credentials, connections, certificates, and variables, to power reusable run books.

Create and customize run books in Azure automation using textual or graphical editors. Configure credentials and parameters, then run tasks like starting virtual machines on schedule or on demand.

Explore how log analytics (OMS) uses a central workspace and solutions to monitor resources across Azure, on-prem, and other clouds, collecting data via agents and dashboards for unified insights.

Create a log analytics workspace in Azure, link it to the Operations Management Suite, install the agent, add solutions, and monitor data from across devices.

Activate Azure security center to gain a unified view of security across cloud and on premises, leveraging machine learning threat prevention, rapid detection and response, and agentless monitoring.

Activate detection as a service with Azure Security Center, leveraging up-to-date threat intelligence from global data points to monitor, alert, and defend across the Azure fabric.

Explore Azure Security Center to review prevention and detection in your environment, follow recommendations, and implement just-in-time VM access and network protections with a next-gen firewall.

Investigate incidents in the Azure Security Center, view alerts, identify affected users and devices, and determine if a compromise extended beyond the original system.

Recap Azure automation concepts, creating automation accounts and runbooks, graphical or script-based, to automate tasks; explore Log Analytics workspaces and solutions, Security Center detection, prevention, investigation, and automated responses.