AZ-305 : Azure Architect Design Certification Prep

Explore the Azure account hierarchy, including enterprise agreements, departments, accounts, and subscriptions, and learn how resource groups and management groups organize and govern resources with role-based access controls and policies.

Explore how to access and manage Azure accounts and subscriptions through the portal, view billing history, set budgets and alerts, and understand cost management for efficient spend.

Organize Azure resources into resource groups that containerize services and enable easy provisioning with secure role-based access control boundaries and policies.

Create and tag resource groups in the Azure portal, assign a subscription and region, label with cost centers and maintenance windows, and monitor deployments, policies, and costs with Azure Monitor.

Explore role-based access control (rbac) in Azure, including built-in, service-specific, and custom roles, and scoping across subscriptions, resource groups, and resources.

Implement role-based access in Azure by creating security groups in Azure Active Directory, assigning read permissions at subscription or resource group levels, and using built-in or custom roles.

Azure resource locks add an extra layer to prevent accidental deletion by requiring removal before deleting resources; choose cannot delete or read only to control delete, modify, and read access.

Demonstrate resource locks in Azure by creating a resource group and storage account, applying delete and read-only locks, and illustrating how locks prevent deletion yet allow changes through change control.

Configure Azure AD privileged identity management in the portal, grant licenses and usage location, consent to PIM, and manage Azure AD roles as eligible or permanent with MFA and approvals.

Learn how to activate privileged identity management roles in Azure, granting temporary global administrator or owner permissions with MFA verification and configurable activation duration.

Explore the Azure Monitor architecture, covering metrics, logs, Log Analytics, visualization, insights, and automated actions through Logic Apps and external APIs.

Discover monitoring and diagnostics across health, availability, performance, security, SLA, auditing, and usage. Learn how to collect, analyze, and visualize data with Azure Monitor, Log Analytics, Sentinel, and Application Insights.

Azure Monitor alerting uses signals from a target resource (metrics, activity logs, Application Insights, generic logs) and logic to trigger actions through alert rules, severity, and action groups for remediation.

Explore Azure Monitor and Azure Alerts from the portal, view metrics and logs, create alert rules with action groups, pin dashboards, and enable guest-level diagnostics for virtual machines.

Explore resource locks in Azure as you create a resource group and storage account, then apply delete and read-only locks to prevent deletion while allowing constrained changes.

Explore Azure policy in action by creating a resource group, assigning policies and initiatives, and applying governance across resource groups, subscriptions, and management groups with enforcement options.

Learn how Azure Key Vault safeguards keys and secrets with hardware security modules, accessible via Azure AD, enabling external keys and bring your own keys for cloud deployments.

Learn to create an Azure Key Vault, configure keys and secrets, and manage access policies using templates and granular permissions for secure vault operations.

Explore the three main data types—structured, semi-structured, and unstructured—and how each uses schema, tables and keys, NoSQL, and blob storage to store and unlock insights in Azure cloud environments.

Explore Azure SQL, a relational database as a service for migrating on-premises databases with data migration assistant. Leverage DTUs, high compatibility, and tiers from basic to premium, including managed instances.

Explore creating an Azure SQL database in the portal, including subscription, resource group, server setup, and pricing options. Learn about elastic pools, backups, geo replication, and failover groups.

Explore how caching improves performance and scalability by using private and shared caches, client-side and server-side caching, and Azure Redis cache for fast, shared data access.

Explore SQL long-term backup retention in Azure by configuring weekly, monthly, and yearly backups up to ten years, enabling cloud-based recovery from SQL Server through the Azure portal.

Explore Azure Cosmos DB, a globally distributed schemaless NoSQL database that enables highly responsive, always-on applications through regional replication, native NoSQL APIs, and automatic partitioning.

Understand Cosmos DB consistency levels: strong, bounded staleness, session, consistent prefix, and eventual, and how latency versus freshness guides global replication.

Explore end-to-end big data solutions: ingest data with Azure Data Factory, store in big data stores, process with Hadoop/Spark/ML, and query with SQL data warehouse and Polybase for insights.

Explore how Azure Data Factory enables data driven pipelines to connect and collect data, transform and enrich it, and publish insights with Power BI while monitoring workflows.

Create and manage an Azure storage account in the portal, selecting storage v2 (gp2), geo-redundant replication, hot tier, and public or private endpoints, with access keys and SAS.

Master how to control access to Azure blob storage using access policies, public access levels, and SAS tokens—exploring account SAS, service SAS, permissions, expiry, and stored policies.

Use Azure Key Vault to store and manage encryption keys and secrets, bring your own customer managed keys, and leverage hardware security modules for storage encryption.

Azure backup, a cloud-based backup solution using a recovery services vault with unlimited scale, policies, retention, and application consistent backups with data encryption.