Implementing 70-533 - Objective 6 - Implement ARM Templates (10-15%)

Implement ARM templates

1. apiVersion and Type parameters are mandatory
2. Type is mandatory and contains info regarding what type of resource to create - compute, network, storage, etc
3. dependsOn is not mandatory but is used to script dependencies i.e. create storage account before a VM
4. resource is used to specify child resources
5. Set-AzureStorageBlobContent to upload the content of an ARM template
6. New-AzureStorageBlobSASToken to create a SAS token and URI to deploy the resources to an RG, followed by New-AzureRmResourceGroupdDeployment
7. Microsoft.Key.Vault is the resource provider that specifies that you want to use keyVault

Control Access

1. Adding a Lock on an RG will ensure none of the resources in the RG can be deleted
2. RBAC is used to manage the administration of resources in your Azure subscription
3. Microsoft.Compute/virtualMachines/* is used to reference the entire VM
4. RBAC build in roles

Implementing 70-533 - Objective 5 - Implement Virtual Networks (10-15%)

Design and implement a multi-site or hybrid network

1. ExpressRoute is a direct private connection to Azure data center
2. Site-to-site VPN is fast and secure but uses public internet and requires VPN
3. Point-to-site is meant for individual users not for connecting multiple resources to Azure
4. VNet-to-VNet is suitable for connecting two Azure networks together but not on-premise
5. RDP connection only allows connections to one computer

Configure virtual networks

1. /28 16 networks, /24 256 networks, /16 65,000 networks, /8 16 million networks
2. Azure load balancing uses probes to monitor a servers health
3. An HTTP probe checks for HTTP 200 status, otherwise it will direct traffic to a healthy instance
4. A TCP probe checks specific ports but does not allow you to set additional parameters like CPU threshold
5. Azure Application Gateway to route inbound traffic to a specific back end server
6. Azuire Traffic Manager to distribute software downloads to users
7. Traffic Manager can use either Priority, Weighted or Performance methods to distribute traffic
8. Traffic Manager Performance method chooses the closest server based on network latency
9. A NSG is a container that holds ACLs. 
10. You cannot create a new NSG on a VM that already has an endpoint-based ACL
11. Get-AzureVM, Set-AzureVM, Update-AzuireVM

Modify a network configuration

1. New-AzureRmNetworkSecurityRuleConfig allows you to create new rules for network security
2. New-AzureRmNetworkSecurityGroup to create a new NSG
3. Get-AzureRmVirtualNetwork to retrieve information about the network in an RG
4. Set-AzureRmVirtualNetwork to apply the network configuration
5. You cannot modify a subnet unless it is empy of resources

**Design and implement Azure App Service apps (15–20%)**
https://aka.ms/Azure/AppService
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-intro
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure

Deploy Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-deploy-command-line
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-deploy?correlationId=15a0a87d17a482-0ea19841cdcd32-5e4f2b18-144000-15a0a87d17b708&clientId=2068937181.1486235357

Configure Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-custom-domain-name
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/?view=azurermps-2.2.0
https://docs.microsoft.com/en-us/powershell/azure/overview?view=azurermps-3.8.0
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview

Configure diagnostics, monitoring, and analytics
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs

Configure Web Apps for scale and resilience
https://docs.microsoft.com/en-us/azure/app-service-web/cdn-websites-with-cdn

**Create and manage Azure Resource Manager Virtual Machines (20–25%)**
https://aka.ms/Azure/VM
https://aka.ms/Azure/VMSS
https://aka.ms/Azure/VM/articles
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-overview

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-deploy-templates#create-a-custom-vm-image

Perform configuration management
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-features
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/classic/about-images
https://aka.ms/Azure/Files
https://aka.ms/Azure/DiskEncryption

Design and implement VM storage
https://msdn.microsoft.com/en-us/library/azure/dn763935.aspx
https://docs.microsoft.com/en-us/azure/storage/storage-use-azcopy
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files

Monitor ARM VMs

Monitor ARM VM availability

Scale ARM VMs
https://azure.microsoft.com/en-us/regions/
https://docs.microsoft.com/en-us/azure/storage/storage-redundancy

**Design and implement a storage strategy (20–25%)**
https://aka.ms/Azure/Storage
https://aka.ms/Azure/Storage/Checklist

Implement Azure storage blobs and Azure files
https://aka.ms/Azure/Blobs
https://aka.ms/Azure/Files
https://aka.ms/Azure/Files/smb
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files#file-storage-faq

Manage Access
https://aka.ms/Azure/KeyVault
https://aka.ms/Azure/SSE

Configure diagnostics, monitoring, and analytics
https://aka.ms/Azure/Diagnostics
https://aka.ms/Azure/Monitor

Implement Azure SQL Databases
https://aka.ms/Azure/SQL

Implement recovery services


**Implement an Azure Active Directory (15–20%)**
https://aka.ms/Azure/AD
https://aka.ms/Azure/AD/editions

Integrate an Azure Active Directory (Azure AD) with existing directories

Configure Application Access

Integrate an app with Azure AD

Implement Azure AD B2C and Azure B2B

https://aka.ms/azure/AD/Dev
https://aka.ms/Azure/Roles
https://aka.ms/Azure/ADAL
https://aka.ms/Azure/ADConnect
https://aka.ms/azure/adconnect/Topologies
https://aka.ms/Azure/ADConnect/Staging       yes, now you can have 2 servers!
https://aka.ms/Azure/ADConnect/Swing          a migration approach

**Implement virtual networks (10–15%)**
https://aka.ms/Azure/VNet

Configure Virtual Networks

Modify network configuration

Design and implement a multi-site or hybrid network
https://aka.ms/azure/Peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-create-vnet-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/powershell/module/Azure/?view=azuresmps-3.7.0
https://blogs.technet.microsoft.com/tangent_thoughts/2016/08/24/got-azure-dns-aka-msazuredns/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-high-availability-dr
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-multisite-azureresourcemanager-powershell
https://azure.microsoft.com/en-us/blog/expressroute-or-virtual-network-vpn-whats-right-for-me/
https://azure.microsoft.com/en-us/resources/templates/201-vnet-to-vnet-peering/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-plan-design

**Design and implement Azure App Service apps (15–20%)**
https://aka.ms/Azure/AppService
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-intro
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure

Deploy Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-deploy-command-line
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-deploy?correlationId=15a0a87d17a482-0ea19841cdcd32-5e4f2b18-144000-15a0a87d17b708&clientId=2068937181.1486235357

Configure Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-custom-domain-name
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/?view=azurermps-2.2.0
https://docs.microsoft.com/en-us/powershell/azure/overview?view=azurermps-3.8.0
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview

Configure diagnostics, monitoring, and analytics
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs

Configure Web Apps for scale and resilience
https://docs.microsoft.com/en-us/azure/app-service-web/cdn-websites-with-cdn

**Create and manage Azure Resource Manager Virtual Machines (20–25%)**
https://aka.ms/Azure/VM
https://aka.ms/Azure/VMSS
https://aka.ms/Azure/VM/articles
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-overview

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-deploy-templates#create-a-custom-vm-image

Perform configuration management
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-features
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/classic/about-images
https://aka.ms/Azure/Files
https://aka.ms/Azure/DiskEncryption

Design and implement VM storage
https://msdn.microsoft.com/en-us/library/azure/dn763935.aspx
https://docs.microsoft.com/en-us/azure/storage/storage-use-azcopy
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files

Monitor ARM VMs

Monitor ARM VM availability

Scale ARM VMs
https://azure.microsoft.com/en-us/regions/
https://docs.microsoft.com/en-us/azure/storage/storage-redundancy

**Design and implement a storage strategy (20–25%)**
https://aka.ms/Azure/Storage
https://aka.ms/Azure/Storage/Checklist

Implement Azure storage blobs and Azure files
https://aka.ms/Azure/Blobs
https://aka.ms/Azure/Files
https://aka.ms/Azure/Files/smb
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files#file-storage-faq

Manage Access
https://aka.ms/Azure/KeyVault
https://aka.ms/Azure/SSE

Configure diagnostics, monitoring, and analytics
https://aka.ms/Azure/Diagnostics
https://aka.ms/Azure/Monitor

Implement Azure SQL Databases
https://aka.ms/Azure/SQL

Implement recovery services



**Implement an Azure Active Directory (15–20%)**
https://aka.ms/Azure/AD
https://aka.ms/Azure/AD/editions

Integrate an Azure Active Directory (Azure AD) with existing directories

Configure Application Access

Integrate an app with Azure AD

Implement Azure AD B2C and Azure B2B

https://aka.ms/azure/AD/Dev
https://aka.ms/Azure/Roles
https://aka.ms/Azure/ADAL
https://aka.ms/Azure/ADConnect
https://aka.ms/azure/adconnect/Topologies
https://aka.ms/Azure/ADConnect/Staging       yes, now you can have 2 servers!
https://aka.ms/Azure/ADConnect/Swing          a migration approach

**Implement virtual networks (10–15%)**
https://aka.ms/Azure/VNet

Configure Virtual Networks

Modify network configuration

Design and implement a multi-site or hybrid network
https://aka.ms/azure/Peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-create-vnet-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/powershell/module/Azure/?view=azuresmps-3.7.0
https://blogs.technet.microsoft.com/tangent_thoughts/2016/08/24/got-azure-dns-aka-msazuredns/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-high-availability-dr
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-multisite-azureresourcemanager-powershell
https://azure.microsoft.com/en-us/blog/expressroute-or-virtual-network-vpn-whats-right-for-me/
https://azure.microsoft.com/en-us/resources/templates/201-vnet-to-vnet-peering/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-plan-design

https://aka.ms/Azure/Vnet/Create
https://aka.ms/Azure/VPN
https://aka.ms/Azure/vnet-vnet
https://aka.ms/Azure/UDR
https://aka.ms/Azure/MultiNIC
https://aka.ms/Azure/Networks
https://aka.ms/Azure/NIC/multiple
https://aka.ms/Azure/NSG
https://aka.ms/Azure/ILB/Internet
https://aka.ms/Azure/ILB/Internal
https://aka.ms/Azure/ILB/SourceAffinity
https://aka.ms/Azure/ILB/Probes
https://aka.ms/Azure/ILB/Analytics

**Design and deploy ARM templates (10–15%)**

Implement ARM templates

Control access

Design role-based access control (RBAC)

https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-custom-roles
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles#virtual-machine-contributor
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-manage-access-rest
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter

Implementing 70-533 - Objective 4 - Implement an Azure Active Directory (15–20%)

Implement an Azure Active Directory (AAD) with existing directories


Implement AAD B2C and AAD B2B

1. Free edition AAD supports 500000 objects
2. Basic edition of AAD supports unlimited objects but no multi-factor
3. Premium edition of AAD supports unlimited objects and multi-factor
4. A CSV file can be used to import up to 200 email and displayNames at a time into Azure B2B Active directory

Configure Application Access

1. Google apps can sign on wiht existing SSO, Azure AD SSO or Password SSO
2. Directory sync is used to sync on-premise AD accounts with Azure AD
3. myapps.microsoft.com displays all AD apps to which the user is assigned
4. Password based SSO with user management allows the user to specify the password to the third party app the first time
5. Windows Azure AD SSO requires that the third party app us AD credentials to authenticate the user]
6. User assignment to myapps.microsoft.com is managed though Azure portal
7. Add users to the Azure AD tenant so they can log in to myapps.microsoft.com

IIS applications not published through Azure AD App Proxy can not do MFA in the cloud

Integrate an app with AAD

1. For your app to do CRUD in Azure AD use the Graph API
2. Graph API also allows provisioning through REST
3. SSO only access level provided minimal default access necessary
4. SSO Read only allows the app to query the directory (uses Graph API)
5. SSO Read Write allows the most access to the directory (uses Graph API)

Implementing 70-533 - Objective 3 - Design and Implement a Storage Strategy (20-25%)

Implement Azure storage blobs and Azure files

1. Steps to implement CDN - create CNAME with domain registrar, map to CDN endpoint and create a CNAME for custom domain and subdomain
2. ZRS stores three copies of your data across two or three datacenters 
3. LRS three copies in same datacenter
4. GRS is six copies, three in one region and three in another but is more expensive
5. RA-GRS is six copies but three in the second region are read only
6. Blob container names can only contain lowercase letters, numbers and dashes
7. Azure Files allow you to access your documents as if they existed on a network share
8. AzCopy lets you copy blobs between containers or between a source computer and a container
9. AzCopy /Source:https://xx.blob.core.windows.net/movies /Dest:C:\/Pattern:Lego.mpg
10. Shared Access Signatures to created signed links returned to users
11. CacheControl property determines the TTL of a Blob

1.  Blobs are addressable through a URL, which has the following format: https://[storage account name]/blob.core.windows.net/[container]/[blob name]
2.  You also can assign a custom domain to the storage account, which changes the root of the URL, http://[storage.companyname.com]/[container]/[blobname]

• Manage access

1. Stored access policies allow you to modify access based on permissions or expiry time
2. Set access level to Private to prevent anonymous users from accessing Blobs
3. A shared access signature is a URI that contains access rights along with a time signature 

• Configure diagnostics, monitoring, and analytics

1. Minimal Blob monitoring does not provide detailed metrics, only an aggregate total billing metric
2. Verbose Blob monitoring gives detailed billing request metrics - accessed from the Configure tab
3. The maximum analytics log data that can be stored is 20 TB
4. Retention policies determine the number of days logging should be maintained
5. Get-AzureStorageBlob to retrieve all blobs in the $logs container
6. Remove-AzureStorageBlob to delete the log files

• Implement Azure SQL Databases

1. Basic tier only supports up to 2 GB max database
2. Standard service tier 14 days retention and 250GB SQL storage
3. Standard tier S0 provides the lowest cost performance level and supports 60 concurrent requests
4. Premium tier support 500 GB database
5. To import data from a BACPAC file to a new SQL database use the Start-AzureSqlDatabaseImport cmdlet
6. Active Geo-Replication is a business continuity option to replicate data to four different nodes in different regions

• Implement recovery services

1. Azure Site Recovery Services coordinates the replication and recovery of VMs
2. Azure backup is for backing up files and folders but is not a DR solution
3. StorSimple is a hardware device that is loctated on-premise and uses Azure storage as a second tier
4. Same backup vault and passphrase needed to restore an Azure backup to an alternate server
5. Data Protection Manager server allows you to back up data locally or to Azure. DPM server is installed on premise and is a product of System Center 2012 that provided enterpise backup solution
6. When network performance or bandwidth is a concern use offline backups and ship the hard drive to an Azure data center
7. How to back up date to Azure? Protection group>Run Azure Import>Create import job>Ship drive to Azure

Implementing 70-533 - Objective 2 - Create and Manage RM VM's (20-25%)

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)

1. Only VHD's are supported in Azure, VHDX must be converted first
2. Azure Linux agent is used to prep the VM to be used as an image
3. To connect to a VM look at the Endpoints. Endpoints lists public and private ports exposed by VM
4. Sharepoint workloads are supported in Azure; Hyper-V and Windows Deploy Service are not 
5. Convert-VHD>Add-AzureVHD>Add-AzureVMImage>New-AzureVM to recreate an on premise VM in Azure

Perform configuration management

1. Publish-AzureVMDscConfiguration for desired state configuration 
2. Chef configuration extension allows configuration of VM's and gives the ability to amend the configuration at a later date 
3. Chef client can be installed only when a VM is created 
4. Use PowerShell to add Chef client to an existing maching 
5. Chef allows you to use Ruby and Erlang to perform configuration tasks 
6. Puppet uses proprietary OO language with JSON like features 
7. Use Update-AzureVM to update a VM's configuration after applying a DSC script 
8. Puppet can connect by PowerShell and RDP by default but not over the internet unless you create an Endpoint 
9. Enable the VM Agent and allow the VM to run custom script extensions to execute PowerShell cmdlets against your VM. 
10. Powershell cmdlets execute from your storage account 
11. Get-AzureVM to retrieve an instance of a VM configuration 
12. Set-AzureVMCustomScriptExtension to set a custom script that can be downloaded from your storage account when provisioning the VM 
13. Set-AzureVMExtension 'VMAccessAgent' to reset a password 
14. Set-AzureVMExtension 'CustomScriptExtension' to allow a custom script 
15. Set-AzureVMExtension 'Bginfo' to allow custom BGInfo desktop background 
16. Know the sections of a Powershell DSC script block - Configuration, Resource, Name 
17. Use Azure Virtual Machine Extensions to troubleshoot DSC configurations locally 

Design and implement VM storage

1. The default replication scheme for an Azure storage account is Geo-Redundant which replicates data six times 
2. Locally redundant storage replicates storage three times 
3. ZRS is only available to store block blobs not page blobs, VHD's use page blobs 
4. To create a share with PowerShell first set the account and key with New-AzureStorageContext, then the share can be created with New-AzureStorageShare 
5. When deoploying a domain controller to Azure set the cache preference to none 
6. Azure Files is an SMB 2.1 compliant 60 MS/sec throughput and max file size 1 TB 
7. Azure BLOB only supports 200 GB / block BLOB 
8. Azure data disk can only connect to 1 VM not multiple 
9. Host disk caching for attached disks can be set to None, ReadOnly, ReadWrite adn is set to None by default 
10. Set-AzureDataDisk is used to configure the host-cache mode 
11. VHD's must be stored as page blobs in Azure to be listed as a custom image 
12. You configre an Azure Site Recovery vault in Azure portal, you configure Azure Site Recovery Provider on the servers 
13. Know the Get-AzureVM parameters, use Get-AzureVM to Add-AzureDataDisk. This is then followed by Update-AzureVM to commmit the changes 
14. Use Set-AzureDataDisk to modify the data disk attached to a VM 
15. Use Set-AsureDataDisk with HostCaching parameter = ReadWrite to cache data that is frequently written 
16. Use the File service option with a new storage account to share network volumes on the network 
17. Table service and DocumentDB are both NoSQL options 

Monitor ARM VMs

1. Azure alert rules can be used to send email alerts 
2. Endpoints can be used to monitor a cloud service from up to 3 locations 
3. Metrics allow you to choose what to monitor 
4. Rules are used to generate a notification when a monitored metric exceeds a threshold 
5. When you Configure endpoint monitoring you specify two endpoints and up to two test locations for each endpoint 
6. An IaasDiagnostics resource is added to the Virtual Machine ARM template file 
7. Connect to VMDiagnoseStorageAccount to browse tables to see Windoes event logs 
8. VMStorageAccount is where the VHD is stored 

Monitor ARM VM availability

1. All VM's in the same availability set participate in failover 
2. Each availability set contains five upgrade domains and two fault domains 
3. An upgrade domain is a logical group of instances for upgrading a VM 
4. A fault domain groups VMs by hardware 
5. Azure places VM's in upgrade and fault domains automatically 
6. In a scale set VM's will automatically be assigned to seperate fault domains so they will have seperate power sources 
7. Availability sets have 99.95 percent SLA 
8. Traffic manager supports round robin load balancing across data centers 

Scale ARM VMs

1. VM Scale Sets are used to deploy identical virtual machines 
2. Azure automation framework can be used to vertically scale VMs in response to workload 
3. VM Scale Sets are deployed with ARM templates 
4. The ARM teamplate capacity property is used to add or remove VMs in a scale set, threshold metric to trigger a CPU scale action 
5. When resizing VM's in an availability set you need to stop and restart all servers in the availability set 

Implementing 70-533 - Objective 1 App Service Apps (15-20%)

Deploy Web Apps

1. App_Data/jobs/continuous
2. App_Data/jobs/triggered
3. Web jobs can be uploaded as zip files but must be < 100mb
4. Powershell New-AzureWebSite CarsToGo -Slot Test creates a deployemnt slot named Test, use Publish-AzureWebSiteProject -Name -Slot Test to publish to an existing slot
5. Set-AzureResource to set propoerties on Azure resources
6. New-AzureResource allows you to create a new resource but does not allow you to update existing resources
7. A Standard pricing tier must be used to have a deployment slot. Basic plans do not allow deployment slots
8. Powershell can be used to create resource groups and deploy new versions
9. Web Deploy will just let you deploy a new version of the code but not create the RG
10. Clone App can be used to recreate an app in another App Service Plan in a different region
11. Azure Blob storage is used by ARM template deployment
12. AzCopy utility is used when building an ARM template in Visual Studio

Configure Web Apps

1. Basic plans allow the hosting of up to 10 web apps with custom domains 
2. SSL certificates need to be converted to .pfx format before uploaded to Azure 
3. Publish-WebApplication -Configuration parameter can specify a JSON file with resource configuration 
4. Use CPU metrics to auto scale your instance count

Configure diagnostics, monitoring, and analytics

1. Get-AzureWebSiteLog command produces a continuous stream of log data for viewing but you can not download locally
2. Save-AzureWebSiteLog command is used to gather Azure logs and download them locally
3. Monitoring endpoints allow you to monitor your web app requests from test locations you specify
4. Too Many Requests rule displays Not active means metric has not exceeded its threshold within the evaluation window
5. Use Uptime to monitor availabitliy of a Web App
6. Requests metric shows average requests to a Web App in a specific timeframe

Configure Web Apps for scale and resilience

1. Standard mode can auto-scale while Basic can not
2. Only standard mode supports auto scaling, basic and shared do not
3. Traffic manager is used to distribute web app traffic across multiple geographic locations based on  web app load
4. Auto scaling is used to increase the number of instances
5. Scale by none allows the web app to scale exactly to the number of instances that you specify
6. Priority traffic routing is used to support DR scenarios
7. Performamce traffic routing will allow traffic to go to the closest endpoint
8. Weighted traffic distributes traffic evenly between endpoints