Describe Azure architecture and services

Describe Azure's core architectural components, including data centers, availability zones, and regions, and explain the Asia data centers and the hierarchy of resources, resource groups, subscriptions, and management groups.

Explore how Microsoft Azure offers a global, hybrid cloud with over 100 services to build, deploy, and manage apps using open source options, AI, storage, and edge deployments to meet current and future business challenges.

Get started with azure accounts by creating an account and subscription, organizing resources in resource groups, and understanding management groups and free or student accounts with signup and upgrade options.

Explore how Azure data centers organize regions and availability zones to provide resilient, highly available resources, with region pairing, sovereign regions, and zone services.

Explore how Azure management infrastructure organizes resources using subscriptions, resource groups, and management groups, with policy inheritance and access control across a hierarchical structure.

Explore compute options like virtual machines, containers, and Azure Functions, networking features such as virtual networks, DNS, ExpressRoute, and Azure Virtual Desktop, Azure Web Apps, and public and private endpoints.

Explore how Azure virtual machines provide infrastructure as a service with customizable operating systems, preconfigured images, and scalable options like scale sets and availability sets for high availability and redundancy.

Describe how Azure Virtual Desktop delivers cloud-hosted Windows desktops and apps across devices, with centralized security via Azure AD and multifactor authentication, and multi-session Windows 10/11 with isolated sessions.

Describe how containers offer lightweight, scalable virtualization, enabling multiple instances per host and on-demand changes, with container instances simplifying deployment and microservice architectures enabling independent scaling.

Azure Functions are event-driven serverless compute that require no VMs, scale automatically, cost only CPU time, and run stateless or stateful code triggered by HTTP requests, timers, or messages.

Describe Azure virtual networking, enabling isolation and segmentation and secure communication between resources, on premises, and the internet. Explore public and private endpoints, DNS, and routing options.

Enable encrypted tunnels between Azure virtual networks and on-premises or other networks using vpn gateways for site-to-site, point-to-site, and network-to-network connections with high availability through active-active and active-standby configurations.

Describe Azure DNS as a domain hosting and name resolution service on Azure infrastructure, offering global anycast, alias records, private dns zones, RBAC, activity logs, and portal or API management.

Explore Azure storage services, storage accounts, types, tiers, redundancy options, and migration paths like Azure Migrate, Storage Explorer, and Azure File Sync to move data or infrastructure to Azure.

Describe Azure storage redundancy with LRS, ZRS, GRS, and GZRS, balancing cost, durability, and availability across primary and secondary regions, plus RPO and read-access options.

Describe Azure storage services highlights blob, block, file, queue, disk storage, with accessible, encrypted, available, and scalable design, hot, cool, archive access, and seamless integration via rest apis and sdks.

Identify Azure data migration options using Azure Migrate for real-time infrastructure and data transfer, edge or migrate hub tools, and data box offline transfer to Asia.

Describe Azure file movement options, including large-scale migrations with Azure Migrate and Azure Data Box, plus easy Copy, Azure Storage Explorer, and File Sync for cloud-to-cloud and local file management.

Describe Azure identity, access, and security concepts, including Azure Active Directory and authentication methods such as single sign-on, MFA, and passwordless, plus zero trust and Microsoft Defender for Cloud.

Explore how Azure Active Directory integrates cloud and on-premises identity, delivers authentication, single sign-on, and device management with Intune, Azure AD Connect, and managed domains.

Describe how authentication proves identity using passwords, single sign-on, multi-factor authentication, and passwordless methods, including Windows Hello for Business, Microsoft Authenticator app, and FIDO2 security keys with Azure Active Directory.

Describe how external identities enable secure collaboration with partners and customers using Azure AD B2B and B2C, manage guest access, and support social and corporate identities with access reviews.

Explain how Azure Active Directory uses identity signals—who the user is, where they are, and what device they use—to allow or deny access and enforce multi-factor authentication when needed.

Apply Azure role-based access control by assigning users to roles to enforce least privilege. Roles grant permissions at scopes like management groups, subscriptions, resource groups, and resources, with inheritance.

Describe zero trust model: assume breach and verify every request by authenticating and authorizing based on data points, applying least privilege, just-in-time access, end-to-end encryption, and analytics for visibility.

Describe defense-in-depth as a multi-layer approach that protects data across physical, identity and access, perimeter, network, compute, application, and data layers, slowing attackers and enabling response.

Discover how Microsoft Defender for Cloud monitors security posture, threat protection, and compliance across Azure, on premises, and multi-cloud environments, with auto deployment and secure score guidance.