Microsoft Azure Integration and Security

Migrate Servers to Azure (AZ-101T01)

This section teaches IT professionals how to discover, assess, plan and implement a migration of on-premises resources and infrastructure to Azure. Students will learn how to use Azure Migrate to perform the discovery and assessment phase that is critical to a successful migration. Students will also learn how to use Azure Site Recovery for performing the actual migration of workloads to Azure. The section focuses primarily on using ASR on a Hyper-V infrastructure to prepare and complete the migration process. In addition, students learn about other scenarios, such as migration of VMware vSphere Hypervisor virtual machines and System Center VMM Hyper-V machines.

At completion
After completing this section, students will be able to:
-Use Azure Migrate to discover and assess on-premises virtual machine migration to Azure.
-Use Azure Site Recovery to migrate Hyper-V infrastructures to Azure.
-Review migration strategies for VMWare and System Center VMM virtual machines.

Outline
Module 1: Managing Azure Active Directory
Module 2: Azure Site Recovery
Module 3: Additional Migration Scenarios

Implementing and Managing Application Services (AZ-101T02)

This section teaches IT Professionals how to manage and maintain the infrastructure for the core web apps and services that developers build and deploy. Students will learn how Azure App Service is used as a Platform as a Service (PaaS) offering for deploying cloud apps for web and mobile environments. Students will learn how to use App Service Environments (ASE) to host a dedicated environment for securing and running App Service apps at scale. Students will also learn how to use deployment slots as staging environments for web apps, that can then be swapped into production when needed. This section also teaches students how to scale up and scale out to meet and adjust for demand, and how bandwidth for web traffic can be optimized using Application Gateways and Content Delivery Networks (CDN). Lastly, the course provides students with an overview of serverless computing solutions, including Azure Functions, Event Grid, Service Bus, and Logic Apps.

At completion
After completing this section, students will be able to:
-Implement use cases and configuration options for Azure App Services and App Service Environments.
-Manage and secure web apps with backup, restore, snapshot, and cloning.
-Optimize your web app performance with Scale Up, Scale Out, Autoscale, and Grow out strategies.
-Deploy serverless computing features like Azure Functions, Event Grid, and Service Bus.

Outline
Module 1: Introducing the Azure App Service Platform
Module 2: Managing and Securing Web Apps
Module 3: Scaling and Performance
Module 4: Deploying Serverless Computing Solutions

Implement Advanced Virtual Networking (AZ-101T03)

This section teaches IT Professionals how to implement and configure different Azure networking traffic distribution mechanisms, including Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway. Students will also learn how to implement site connectivity for multiple scenarios including cross-premises and hybrid configurations, as well as extending on-premises networks into the Microsoft cloud over a dedicated private connection, using Azure ExpressRoute. Lastly, students will learn how to use Network Watcher to monitor and troubleshoot Azure virtual networks. They will also learn how to troubleshoot and remediate common errors in Azure Application Gateway and Azure Load Balancer.

At completion
After completing this section, students will be able to:
-Implement and configure Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway.
-Implement and configure Site-to-Site VPN connections and ExpressRoute.
-Implement and configure Network Watcher and troubleshooting common network issues.

Outline
Module 1: Distributing Network Traffic
Module 2: Site Connectivity
Module 3: Monitoring and Troubleshooting Network Connectivity

Secure Identities (AZ-101T04)

This section teaches IT Professionals to understand the challenges that organizations face in keeping modern IT environments secure, as the more distributed environments that are part of a cloud-first or hybrid world have rapidly created new security challenges for IT. The section focuses on three key areas in the defense against attackers who target security vulnerabilities, resulting particularly from credential theft and compromised identities: Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Azure Active Directory Privileged Identity Management (PIM). Students learn to implement two-step verification to secure the sign-in process, as well has how to use advanced features like trusted IPs and Fraud Alerts with MFA to customize their identity access strategy. Using Privileged Identity Management, students learn how to apply just the right amount of access rights for just the right amount of time to the various administrative roles as well as to resources.

At completion
After completing this section, students will be able to:
-Use Azure RBAC to grant a granular level of access based on an administrator’s assigned tasks.
-Use Azure Multi-Factor Authentication to configure a strong authentication for users at sign-in.
-User Azure AD Privileged Identity Management to configure access rights based on just-in-time administration.

Outline
Module 1: Introduction to Identity Protection in Azure
Module 2: Using Multi-Factor Authentication for Secure Access
Module 3: Azure AD Privileged Identity Management