Azure Bundle Prep for AZ-900 , AZ-103 and Az-104

Understand how subnets divide a virtual network into smaller sections, using a school analogy to explain routes, permissions, firewalls, and network security groups that protect servers and databases.

Explore how two virtual networks in different regions connect via VNet peering. Learn how gateways, gateway subnets, and classless routing concepts enable cross-network communication.

Explore how Azure virtual network uses web, app, and database subnets with load balancers and a gateway subnet, plus a management subnet for a jump host to securely access VMs.

Log into the Azure portal to create a virtual network and subnets, assign a block, and complete the setup in minutes.

Explore how to configure vnet peering across virtual networks with a diagrammatic approach, creating subnets, testing connectivity between two VMs with ping and telnet, and applying firewall rules.

Test VNet peering in a lab by deploying two virtual machines across different VNets and configuring a network security group to allow inbound port 3389, then validate connectivity.

Connect to peered VMs using RDP, view public and private IP addresses, and verify connectivity across vnet peering via private IP testing with ping or telnet.

Explain how point-to-site vpn establishes a private, encrypted link from your laptop to an Azure virtual machine in the healthcare subnet via a gateway subnet and virtual network gateway.

Create a virtual network gateway for a point-to-site VPN in Azure, choose route-based or policy-based VPN type, and attach a public IP.

Explore virtual machine troubleshooting in Azure, including boot diagnostics and password resets. Learn to assess VM health, historical events, and the impact of temporary versus persistent storage.

Learn to detach a disk from a virtual machine in a lab, including accessing the disk section and saving changes, with the OS disk not detachable.

Explore block, append, and page blobs and how each type supports streaming, logging, and random read/write for virtual hard disks.

Explore Azure file storage to create a highly available network share accessible via SMB for multiple virtual machines with read and write access, secure data in transit, scalable to petabytes.

Explore local redundant storage (lrs) as the lowest-cost azure data redundancy, replicating data synchronously three times within a single region to protect against rack failures while staying within geographic boundaries.

Learn how geo-redundant storage (GRS) replicates data to a secondary region to boost durability, with options for read-only failover or read access in the secondary region.

RA-GRS provides a read-only copy in the secondary region with a secondary endpoint; Microsoft handles failover, after which you regain read and write access, guided by last sync time GMT.

Explore the storage account overview, performance metrics for blobs, files, tables, and queues, and the activity log for auditing. Learn about access control, diagnostics, and event flows with logic apps.

Create and manage blob storage containers, set private or SAS-based access, upload content, and choose block, page, or append blobs with snapshots, leases, and soft delete.

Map and manage azure file shares across Windows, Linux, and command line, enable multi-user access, upload content, tag metadata, use snapshots for disaster recovery, and cross origin resource sharing.

Explore storage account tables and queues by creating a student info table and a shopping cart queue, sending messages via connection strings, and managing content with PowerShell.

Learn how Azure load balancers enable end-to-end deployment by distributing traffic. Use front-end public IPs, back-end pools, and health probes to manage web servers and databases.

Learn to build an Azure web app with the app service from the marketplace, configure the app name, resource group, operating system, region, pricing tier, and application insights.

Connect to an Azure web app using FileZilla, transfer and upload files from your computer to the site root, and verify the updated index reflects in the web app.

Explore authentication and authorization in Azure App Services, including social providers and Azure Active Directory authentication, with a live walkthrough of creating an app and enforcing login.

Learn to use Application Insights to troubleshoot web apps with stats on fail requests, response times, availability, dependencies, and both server and client side issues, plus Microsoft troubleshooting guides.

Map your custom domain to your Azure app service, verify ownership with a DNS CNAME record, and enable TLS for secure traffic during DNS propagation.

Configure custom ssl settings by importing or uploading certificates from providers, bind them to the site, and manage client side certificate options for secure certificate usage.

Connect your web app to on-premises data via hybrid connections and enable VNet integration for private connectivity, while using Azure content delivery network for global caching and IP restrictions.

Learn how to add a MySQL database to a web app using Azure web app, enable backend storage, save configurations, and access data export and import, queries, and transaction logs.

Explore Azure web apps options such as properties, locks, and automations to view hosting IP addresses, set deployment credentials, enforce read-only access, and generate a template to redeploy configurations.

Discover how Azure traffic manager routes traffic between two web apps across regions using location and DNS entries, with health checks, retries, and a configurable timeout for outages and blips.

Create two web apps named replication one and replication two in East Asia and central U.S., behind a traffic manager, and configure routing to direct traffic to correct replication endpoints.

Create a traffic manager profile in the Azure portal, select geographic routing, and map endpoints to two web apps in different locations.

Set up Azure Traffic Manager profiles by configuring geographic routing, DNS name, health probes, and real-time latency heat maps across Azure, external, and nested endpoints.

Explore database platform continuum from on-premises physical servers and virtual machines to cloud infrastructure service and platform service with Azure, comparing cost, administration, and responsibilities.

Explore Azure SQL PaaS capabilities with automatic threat detection and self-tuning. Learn how dynamic data masking, query store, and index advisor protect data, optimize performance, and support compliant migrations.

Enable inbound connections by configuring the set server firewall, whitelisting your IP or a range, and enabling networking with a virtual network for access via Eskil management studio and Excel.

Verify the state of Azure SQL DB export and import in a lab, review the log of operations, and observe two databases on the same server after import.

Verify azure sql db copy operation by inspecting the server for a second copy, then confirm identical table sets via query editor and login, ensuring copy success and ongoing monitoring.

Learn how to perform a geo-replication failover by promoting the central U.S. secondary to primary when the East U.S. primary fails, with potential data loss and a brief downtime.

Verify failover by confirming replication from central us as primary to east coast as secondary, ensuring a quick switch and data movement between sites.

Learn to synchronize a hub database with multiple member databases using a hub-and-spoke data sync topology, with metadata and logs stored, across Azure and on-premise resources in the same region.

Learn how to sync Azure SQL DB with other databases by configuring a hub and members, including on-premises and Azure, choosing sync direction and conflict resolution, and setting automatic frequency.

Configures vulnerability assessment for Azure SQL, showing how to enable scans and generate reports. Reports are stored in a storage account container and emailed to security teams for auditing.

Explore AD Connect filtering to limit which objects synchronize to Azure, using granular rules based on domains and specific attributes, preventing a big bang sync on about 25,000 objects.

Learn how the AD Connect prevent accidental deletes feature protects against unintended deletions by capping exports at 500 objects, sending email alerts, and displaying status in the synchronization service manager.

Explore the Azure AD Connect device writeback feature, which strengthens security by granting access only to trusted devices and enabling register and writeback to optimize Active Directory.

The AD Connect automatic upgrade feature keeps binaries up to date by deploying latest releases to member servers, with default enabled and a toggle to adjust behavior.

Synchronize on-premise user accounts to Azure AD using the AD Connect tool, downloaded from the official site after temporarily disabling the server's security policy on a domain controller.

Install AD Connect using express settings on a member server to synchronize on-premises users to Azure AD using global and enterprise admin credentials; wait 10–15 minutes for users to appear.

Identify and manage the on-premises directory synchronization service account, tied to the domain controller, with a non-expiring password and a restricted directory synchronization role.

Demonstrates enabling multifactor authentication for users in Azure AD, selecting MFA methods (phone, app, form), and validating sign-ins with enterprise applications access and portal branding.

Discover how to implement company branding in enterprise apps by configuring banner logos, background images, sign-in pages, user hints, and legal disclaimers to display the enterprise identity.

Publish enterprise applications from the Microsoft enterprise applications gallery using the console. Add new applications, select from categorized gallery options such as Dropbox for business, and publish to users.

Publish enterprise applications like Dropbox to users, verify access with a test account in private mode, and learn how to publish custom web apps beyond the marketplace.

Add your organization's custom domain to Azure Active Directory; the default domain cannot be changed or deleted. Verify DNS records (TXT or MX) at your registrar and wait for propagation.

Explore how conditional access in Azure Active Directory enables automated access decisions to cloud apps, balancing security and productivity across sign-in risk, location, device, and client app considerations.

Learn how to protect resources and maintain operations by applying business continuity and disaster recovery concepts, the continuity of operations plan, and recovery time objectives in Azure.

Set up an Azure Site Recovery vault in a different region from your virtual machines to enable failover, while backups stay in the same region.

Enable replication from azure east coast to azure west coast, then monitor items and health as status appears, with 15 minutes to show and up to an hour to complete.

Monitor replication status as it moves from initialising to synchronizing data across the east and west coasts. Note the zero percent synchronization and use the health graph for disaster recovery.

Assess the replication health in Azure Site Recovery, review the recovery point objective of four minutes and a four-hour replication cycle, and plan a simulated failover to verify DR readiness.

Register and launch the recovery services agent, access the Azure backup console, and schedule file and folder backups with exclusions, retention policies, and multiple daily backup options.

Explore as your backup agent dashboard to identify protected items, select a recovery point, mount the backup as a drive, and restore individual files or volumes via Azure Site Recovery.

Discover how to restore data using mount points by accessing cloud backups, locating deleted content, and copying files back to their original folders to recover intellectual property.

Verify data restoration by restoring individual components from backups, demonstrating selective recovery that safeguards data integrity.