Microsoft Azure Solutions Architect Expert Training (AZ-305)

• Learning goal: Create an Azure account and use Azure services through the Azure portal, including Azure Storage, and deploy resources with ARM templates.
• Azure subscriptions and free accounts
• Azure Resource Manager and ARM templates
• Azure resources
• Azure Storage and its types
• Create an Azure free account
• Manage Azure costs and billing
• Manage a storage account with Azure Storage Explorer
• Create and deploy ARM templates
• Create a web app in the Azure portal

Learning objective: Learning goal: Learn to deploy and manage Azure virtual machines, storage accounts, managed disks and Blob storage, and design Azure virtual networks with subnets, NICs and NSGs.

• Overview of Azure virtual machines
• Virtual machines in ARM templates
• Azure managed disks
• Azure Blob Storage
• Networking in Azure
• Subnets, NICs, NSGs, IP addresses and DNS
• Configure an Azure virtual network
• Create Blob storage in the Azure portal
• Build a VM with a storage account and managed disks
• Create Windows and Linux virtual machines

• Learning goal: Learn availability sets, availability zones, virtual machine scale sets, Azure Application Gateway and Azure Load Balancer.
• Resiliency, fault domains and update domains
• Azure availability sets
• Azure availability zones
• Virtual machine scale sets and autoscaling
• Azure Load Balancer
• Azure Application Gateway
• Azure Disk Encryption
• Create an application gateway
• Configure a scale set with custom usage alerts
• Configure VMs for redundancy
• Create a virtual machine scale set

• Learning goal: Learn App Service security, deploying and managing web apps, App Service plans, and how to build Logic Apps and Function Apps.
• Azure App Service web apps and App Service plans
• App Service security
• Creating web apps with shell commands
• Serverless computing concepts
• Azure Logic Apps
• Azure Functions
• Background tasks with WebJobs
• Azure Service Bus and Azure Event Grid
• API documentation with Swagger (OpenAPI)
• Create a continuous WebJob
• Create a web app
• Create a web app with shell commands
• Create an App Service plan

Learning objective: Learning goal: Learn Azure hybrid connectivity: point-to-site, site-to-site and VNet peering connections, ExpressRoute, VPN Gateway and BGP, plus disaster recovery with Azure Site Recovery.

• Hybrid connectivity
• VNet routing and user-defined routes
• Site-to-site VPN and gateway connections
• Route-based and policy-based VPN gateways
• Azure VPN Gateway
• VNet peering and service chaining
• Border Gateway Protocol (BGP)
• Azure ExpressRoute
• Create a virtual network gateway
• Migrate on-premises machines to Azure with Azure Site Recovery
• Design user-defined routes

Learning objective: Learning goal: Learn Azure data storage and database services, cloud design patterns such as cache-aside, sharding and competing consumers, and the Azure Architecture Center.

• Azure SQL Database and elastic pools
• Azure Cosmos DB
• Azure Data Lake Storage
• Azure Data Factory
• Cloud design patterns
• Sharding and cache-aside patterns
• Azure Architecture Center
• Create and deploy Azure Cosmos DB
• Create and deploy Azure Data Lake Storage

• Learning goal: Learn how to package, deploy and manage scalable, reliable containers and microservices on Azure, including Azure Kubernetes Service (AKS).
• Docker, Docker images and Dockerfiles
• Orchestration
• Azure Container Instances (ACI)
• Azure Container Registry
• Azure Kubernetes Service (AKS)
• Application environment components and diagnostic logs
• Deploy an application in AKS
• Deploy an application in ACI
• Build and deploy a Docker image from a Dockerfile

Learning objective: Learning goal: Learn RBAC and access control, how to implement authentication and authorization in applications, and how to protect data with encryption, Azure Key Vault, confidential computing and TLS.

• Access control and role-based access control (RBAC)
• Service principal authentication and managed identities
• Application authentication with Microsoft Entra ID, Entra Connect, certificates and tokens
• Multifactor authentication, fraud alerts, bypass options and trusted IPs
• Claims-based authorization
• Azure Key Vault
• Azure confidential computing
• End-to-end encryption
• SSL and TLS communications
• Manage cryptographic keys with Azure Key Vault
• Implement authentication with certificates, Entra ID and tokens
• Implement RBAC authorization
• Secure data with SSL/TLS and end-to-end encryption
• Implement multifactor authentication
• Implement claims-based authorization

• Learning goal: Learn message-based integration and asynchronous processing, and build applications that scale automatically.
• Azure messaging services overview
• Azure Service Bus
• Azure Event Grid
• Azure Event Hubs
• Azure Notification Hubs
• Transient fault handling
• Autoscale rules in Azure
• Create a Service Bus queue
• Design and implement Azure Service Bus
• Deploy Service Bus topics and subscriptions
• Enable autoscale based on a schedule or CPU metrics

• Learning goal: Learn how to monitor Azure services with metrics and alerts, Application Insights, Log Analytics, Azure Service Health and the Activity Log.
• Azure Monitor
• Application Insights
• Log Analytics
• Azure Activity Log
• Azure alerts
• Azure Service Health
• Deploy Application Insights
• Create and configure a Log Analytics workspace
• Analyze data in the metrics database
• Create and deploy alert rules for Azure resources