Saturday, May 6, 2017

Implementing 70-533 - Objective 6 - Implement ARM Templates (10-15%)

Implement ARM templates

  1. apiVersion and Type parameters are mandatory
  2. Type is mandatory and contains info regarding what type of resource to create - compute, network, storage, etc
  3. dependsOn is not mandatory but is used to script dependencies i.e. create storage account before a VM
  4. resource is used to specify child resources
  5. Set-AzureStorageBlobContent to upload the content of an ARM template
  6. New-AzureStorageBlobSASToken to create a SAS token and URI to deploy the resources to an RG, followed by New-AzureRmResourceGroupdDeployment
  7. Microsoft.Key.Vault is the resource provider that specifies that you want to use keyVault

Control Access

  1. Adding a Lock on an RG will ensure none of the resources in the RG can be deleted
  2. RBAC is used to manage the administration of resources in your Azure subscription
  3. Microsoft.Compute/virtualMachines/* is used to reference the entire VM
  4. RBAC build in roles


Posted by at No comments:

Implementing 70-533 - Objective 5 - Implement Virtual Networks (10-15%)

Design and implement a multi-site or hybrid network

  1. ExpressRoute is a direct private connection to Azure data center
  2. Site-to-site VPN is fast and secure but uses public internet and requires VPN
  3. Point-to-site is meant for individual users not for connecting multiple resources to Azure
  4. VNet-to-VNet is suitable for connecting two Azure networks together but not on-premise
  5. RDP connection only allows connections to one computer
Configure virtual networks

  1. /28 16 networks, /24 256 networks, /16 65,000 networks, /8 16 million networks
  2. Azure load balancing uses probes to monitor a servers health
  3. An HTTP probe checks for HTTP 200 status, otherwise it will direct traffic to a healthy instance
  4. A TCP probe checks specific ports but does not allow you to set additional parameters like CPU threshold
  5. Azure Application Gateway to route inbound traffic to a specific back end server
  6. Azuire Traffic Manager to distribute software downloads to users
  7. Traffic Manager can use either Priority, Weighted or Performance methods to distribute traffic
  8. Traffic Manager Performance method chooses the closest server based on network latency
  9. A NSG is a container that holds ACLs. 
  10. You cannot create a new NSG on a VM that already has an endpoint-based ACL
  11. Get-AzureVM, Set-AzureVM, Update-AzuireVM

Modify a network configuration

  1. New-AzureRmNetworkSecurityRuleConfig allows you to create new rules for network security
  2. New-AzureRmNetworkSecurityGroup to create a new NSG
  3. Get-AzureRmVirtualNetwork to retrieve information about the network in an RG
  4. Set-AzureRmVirtualNetwork to apply the network configuration
  5. You cannot modify a subnet unless it is empy of resources
Posted by at No comments:

Friday, May 5, 2017

**Design and implement Azure App Service apps (15–20%)**
https://aka.ms/Azure/AppService
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-intro
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure

Deploy Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-deploy-command-line
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-deploy?correlationId=15a0a87d17a482-0ea19841cdcd32-5e4f2b18-144000-15a0a87d17b708&clientId=2068937181.1486235357

Configure Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-custom-domain-name
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/?view=azurermps-2.2.0
https://docs.microsoft.com/en-us/powershell/azure/overview?view=azurermps-3.8.0
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview

Configure diagnostics, monitoring, and analytics
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs

Configure Web Apps for scale and resilience
https://docs.microsoft.com/en-us/azure/app-service-web/cdn-websites-with-cdn

**Create and manage Azure Resource Manager Virtual Machines (20–25%)**
https://aka.ms/Azure/VM
https://aka.ms/Azure/VMSS
https://aka.ms/Azure/VM/articles
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-overview

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-deploy-templates#create-a-custom-vm-image

Perform configuration management
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-features
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/classic/about-images
https://aka.ms/Azure/Files
https://aka.ms/Azure/DiskEncryption

Design and implement VM storage
https://msdn.microsoft.com/en-us/library/azure/dn763935.aspx
https://docs.microsoft.com/en-us/azure/storage/storage-use-azcopy
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files

Monitor ARM VMs

Monitor ARM VM availability

Scale ARM VMs
https://azure.microsoft.com/en-us/regions/
https://docs.microsoft.com/en-us/azure/storage/storage-redundancy

**Design and implement a storage strategy (20–25%)**
https://aka.ms/Azure/Storage
https://aka.ms/Azure/Storage/Checklist

Implement Azure storage blobs and Azure files
https://aka.ms/Azure/Blobs
https://aka.ms/Azure/Files
https://aka.ms/Azure/Files/smb
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files#file-storage-faq

Manage Access
https://aka.ms/Azure/KeyVault
https://aka.ms/Azure/SSE

Configure diagnostics, monitoring, and analytics
https://aka.ms/Azure/Diagnostics
https://aka.ms/Azure/Monitor

Implement Azure SQL Databases
https://aka.ms/Azure/SQL

Implement recovery services


**Implement an Azure Active Directory (15–20%)**
https://aka.ms/Azure/AD
https://aka.ms/Azure/AD/editions

Integrate an Azure Active Directory (Azure AD) with existing directories

Configure Application Access

Integrate an app with Azure AD

Implement Azure AD B2C and Azure B2B

https://aka.ms/azure/AD/Dev
https://aka.ms/Azure/Roles
https://aka.ms/Azure/ADAL
https://aka.ms/Azure/ADConnect
https://aka.ms/azure/adconnect/Topologies
https://aka.ms/Azure/ADConnect/Staging       yes, now you can have 2 servers!
https://aka.ms/Azure/ADConnect/Swing          a migration approach

**Implement virtual networks (10–15%)**
https://aka.ms/Azure/VNet

Configure Virtual Networks

Modify network configuration

Design and implement a multi-site or hybrid network
https://aka.ms/azure/Peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-create-vnet-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/powershell/module/Azure/?view=azuresmps-3.7.0
https://blogs.technet.microsoft.com/tangent_thoughts/2016/08/24/got-azure-dns-aka-msazuredns/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-high-availability-dr
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-multisite-azureresourcemanager-powershell
https://azure.microsoft.com/en-us/blog/expressroute-or-virtual-network-vpn-whats-right-for-me/
https://azure.microsoft.com/en-us/resources/templates/201-vnet-to-vnet-peering/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-plan-design

**Design and implement Azure App Service apps (15–20%)**
https://aka.ms/Azure/AppService
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-intro
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure

Deploy Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/app-service-deploy-command-line
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-deploy?correlationId=15a0a87d17a482-0ea19841cdcd32-5e4f2b18-144000-15a0a87d17b708&clientId=2068937181.1486235357

Configure Web Apps
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure
https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-custom-domain-name
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/?view=azurermps-2.2.0
https://docs.microsoft.com/en-us/powershell/azure/overview?view=azurermps-3.8.0
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview

Configure diagnostics, monitoring, and analytics
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-of-diagnostic-logs

Configure Web Apps for scale and resilience
https://docs.microsoft.com/en-us/azure/app-service-web/cdn-websites-with-cdn

**Create and manage Azure Resource Manager Virtual Machines (20–25%)**
https://aka.ms/Azure/VM
https://aka.ms/Azure/VMSS
https://aka.ms/Azure/VM/articles
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-overview

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-deploy-templates#create-a-custom-vm-image

Perform configuration management
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-features
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/classic/about-images
https://aka.ms/Azure/Files
https://aka.ms/Azure/DiskEncryption

Design and implement VM storage
https://msdn.microsoft.com/en-us/library/azure/dn763935.aspx
https://docs.microsoft.com/en-us/azure/storage/storage-use-azcopy
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files

Monitor ARM VMs

Monitor ARM VM availability

Scale ARM VMs
https://azure.microsoft.com/en-us/regions/
https://docs.microsoft.com/en-us/azure/storage/storage-redundancy

**Design and implement a storage strategy (20–25%)**
https://aka.ms/Azure/Storage
https://aka.ms/Azure/Storage/Checklist

Implement Azure storage blobs and Azure files
https://aka.ms/Azure/Blobs
https://aka.ms/Azure/Files
https://aka.ms/Azure/Files/smb
https://docs.microsoft.com/en-us/azure/storage/storage-dotnet-how-to-use-files#file-storage-faq

Manage Access
https://aka.ms/Azure/KeyVault
https://aka.ms/Azure/SSE

Configure diagnostics, monitoring, and analytics
https://aka.ms/Azure/Diagnostics
https://aka.ms/Azure/Monitor

Implement Azure SQL Databases
https://aka.ms/Azure/SQL

Implement recovery services



**Implement an Azure Active Directory (15–20%)**
https://aka.ms/Azure/AD
https://aka.ms/Azure/AD/editions

Integrate an Azure Active Directory (Azure AD) with existing directories

Configure Application Access

Integrate an app with Azure AD

Implement Azure AD B2C and Azure B2B

https://aka.ms/azure/AD/Dev
https://aka.ms/Azure/Roles
https://aka.ms/Azure/ADAL
https://aka.ms/Azure/ADConnect
https://aka.ms/azure/adconnect/Topologies
https://aka.ms/Azure/ADConnect/Staging       yes, now you can have 2 servers!
https://aka.ms/Azure/ADConnect/Swing          a migration approach

**Implement virtual networks (10–15%)**
https://aka.ms/Azure/VNet

Configure Virtual Networks

Modify network configuration

Design and implement a multi-site or hybrid network
https://aka.ms/azure/Peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-create-vnet-arm-pportal
https://docs.microsoft.com/en-us/azure/virtual-network/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
https://docs.microsoft.com/en-us/powershell/module/Azure/?view=azuresmps-3.7.0
https://blogs.technet.microsoft.com/tangent_thoughts/2016/08/24/got-azure-dns-aka-msazuredns/
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-high-availability-dr
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-multisite-azureresourcemanager-powershell
https://azure.microsoft.com/en-us/blog/expressroute-or-virtual-network-vpn-whats-right-for-me/
https://azure.microsoft.com/en-us/resources/templates/201-vnet-to-vnet-peering/
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-plan-design

https://aka.ms/Azure/Vnet/Create
https://aka.ms/Azure/VPN
https://aka.ms/Azure/vnet-vnet
https://aka.ms/Azure/UDR
https://aka.ms/Azure/MultiNIC
https://aka.ms/Azure/Networks
https://aka.ms/Azure/NIC/multiple
https://aka.ms/Azure/NSG
https://aka.ms/Azure/ILB/Internet
https://aka.ms/Azure/ILB/Internal
https://aka.ms/Azure/ILB/SourceAffinity
https://aka.ms/Azure/ILB/Probes
https://aka.ms/Azure/ILB/Analytics

**Design and deploy ARM templates (10–15%)**

Implement ARM templates

Control access

Design role-based access control (RBAC)

https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-custom-roles
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles#virtual-machine-contributor
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-manage-access-rest
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter
Posted by at No comments:

Implementing 70-533 - Objective 4 - Implement an Azure Active Directory (15–20%)

Implement an Azure Active Directory (AAD) with existing directories


Implement AAD B2C and AAD B2B

  1. Free edition AAD supports 500000 objects
  2. Basic edition of AAD supports unlimited objects but no multi-factor
  3. Premium edition of AAD supports unlimited objects and multi-factor
  4. A CSV file can be used to import up to 200 email and displayNames at a time into Azure B2B Active directory
Configure Application Access
  1. Google apps can sign on wiht existing SSO, Azure AD SSO or Password SSO
  2. Directory sync is used to sync on-premise AD accounts with Azure AD
  3. myapps.microsoft.com displays all AD apps to which the user is assigned
  4. Password based SSO with user management allows the user to specify the password to the third party app the first time
  5. Windows Azure AD SSO requires that the third party app us AD credentials to authenticate the user]
  6. User assignment to myapps.microsoft.com is managed though Azure portal
  7. Add users to the Azure AD tenant so they can log in to myapps.microsoft.com
IIS applications not published through Azure AD App Proxy can not do MFA in the cloud
Integrate an app with AAD
  1. For your app to do CRUD in Azure AD use the Graph API
  2. Graph API also allows provisioning through REST
  3. SSO only access level provided minimal default access necessary
  4. SSO Read only allows the app to query the directory (uses Graph API)
  5. SSO Read Write allows the most access to the directory (uses Graph API)
Posted by at No comments:
Subscribe to: Posts (Atom)