Microsoft Azure IaaS

Explore how to create and migrate Azure virtual machines and compare vm series from entry to high performance, highlighting cost, memory, cpu, storage, and common use cases.

Learn to create an Azure virtual machine from the portal, including creating a resource group, selecting Windows Server 2019, configuring networking, security groups, disks, and public IP.

Explore azure virtual networks, including private and public IP addresses, subnets, connecting multiple virtual machines, and using load balancer, application gateway, and network security groups with inbound and outbound rules.

Master Azure virtual network lab practice by creating a virtual network, provisioning two virtual machines, and connecting them with subnets and ip addressing, enabling ping and firewall rules.

Learn how to configure vnet peering in Azure to connect two virtual networks across regions using private IPs, enabling private, low-latency communication between virtual machines.

Learn how to configure global vnet peering between Azure virtual networks across regions using VPN gateways and VPN connections, including private networks, IP addresses, and subnets.

Learn how Azure load balancer distributes inbound and outbound traffic across VMs for fault tolerance, with public and internal options, layer 4, hash-based distribution, and health probes.

Configure a public load balancer in Azure IaaS to balance traffic across two Windows VMs in East US, using an availability set, backend pool, health probe, and load balancing rules.

Configure an internal load balancer in Azure, create a virtual network and availability set, add virtual machines to the backend pool, and test private IP-based load balancing.

Implement zone-redundant Azure IaaS by configuring a public load balancer, provisioning virtual machines across east us zones, and applying security groups to manage access.

Explore how Azure Traffic Manager distributes DNS-based traffic across global Azure regions, improving availability and performance by routing requests to endpoints based on priority, performance, or geography.

Explore Azure storage options, including blob and block storage, for unstructured and structured data, containers and sharing, cross-region access, scalability, encryption by default, and accessible from anywhere in the world.

Create an Azure storage account within a resource group, choose standard or premium blob storage, create containers, upload blobs, and configure access policies and network security.

Discover how to secure Azure storage with primary and secondary access keys, rotation, encryption options, and access policies, including SAS, IP filters, and network rules.

Learn to configure Azure Media Services to upload, encode, secure, and publish video content, enable livestreaming, manage storage and access policies, and deliver media across devices.

Learn to create an Azure VM via Azure Cloud Shell, set up resource group and location, name the VM, enter admin credentials, and review network, disk, and operating system settings.

Learn to back up an Azure VM with Recovery Services vault, create a backup policy, and configure daily and weekly backups for Windows Server 2016 data center edition.

Learn how Azure Active Directory provides identity and access management for cloud and on-prem resources, with external and internal resources, conditional access, and hybrid identity.

Learn how to create and manage users in Azure Active Directory, including default and custom domains, on-premises to cloud synchronization, and guest user invitations.

Azure Bastion provides secure, browser-based access to virtual machines in the Azure portal without public IPs, using SSL-secured RDP/SSH through a dedicated Bastion subnet (/27).

Discover how Azure RBAC uses role assignments and scope to grant subscription, resource group, and resource access to users, groups, service principals, or managed identities.

Explore how Azure RBAC determines access: a resource manager issues a token containing permissions and group membership, then the service evaluates role assignments and deny/allow rules for the target resource.

Apply and manage Azure IAM permissions in practice by creating users, resource groups, and virtual machines, then assign and test role assignments at VM, resource group, and subscription levels.