AZ-101 Microsoft Azure Integration and Security

Preparation:
It is suggested that students complete the following supplemental MOOC content before attending the instructor-led course.

Module 1: Introducing the Azure App Service Platform
In this module, you will be introduced to the Azure App Services Platform. You will learn about app service plans, web app hosting options, app service scenarios and how to monitor apps. You will also learn about how to isolate apps with App Service Environments.

Lessons

• Introducing Azure App Service
• App Service Environments

Module 2: Managing and Securing Web Apps
In this module, you will learn how to deploy your app with minimal downtime. You will also learn how to backup, restore, snapshot, and clone your app. Lastly, you will implement security features like authentication options and authentication providers.

Lessons

• Deploying Web Apps
• Managing Web Apps
• App Service Security

Module 3: Scaling and Performance
In this module, you will learn how to ensure your app performs under various workloads. You will learn how to scale up and scale out your app. You will learn how to automatically scale your app and to grow out the app through geo-distribution. Lastly you will learn how CDN provides a way to optimize bandwidth and web traffic.

Lessons

• Scale Up and Scale Out
• Autoscale and Grow out
• Optimizing Bandwidth and Web Traffic

Module 4: Deploying Serverless Computing Solutions
In the module, you will learn what serverless computing is and what it provides. You will implement three serverless computing solutions: Azure Functions, Event Grid, and Service Bus. Azure Functions provide small pieces of code, or “functions,” that run in the cloud. Event Grid is a service for managing routing of all events from any source to any destination. Service Bus multitenant cloud messaging service that sends information between applications and services.

Lessons

• Serverless Computing Concepts
• Managing Azure Functions
• Managing Event Grid
• Managing Service Bus
• Managing Logic App

Preparation:
It is suggested that students complete the following supplemental MOOC content before attending the instructor-led course.

• Implement Advanced Virtual Networking (6 weeks)

Module 1: Distributing Network Traffic
In this module, you will learn about three ways to distribute network traffic: Azure Load Balancer, Azure Traffic Manager, and Azure Application Gateway. The Azure Load Balancer delivers high availability and network performance to your applications. The Azure Traffic Manager allows you to control the distribution of user traffic to your service endpoints. The Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.

Lessons

• Overview of Network Traffic Distribution Options
• Azure Load Balancer
• Azure Traffic Manager
• Azure Application Gateway

Module 2: Site Connectivity
In this module, you will learn and implement two ways to connect your virtual networks: Site-toSite VPN Connections and ExpressRoute. Site-to-Site VPN connections provide secure tunneling for cross-premises and hybrid configurations. ExpressRoute extends your on-premises networks into the Microsoft cloud over a dedicated private connection facilitated by a connectivity provider.

Lessons

• Site-to-Site VPN Connections
• ExpressRoute

Module 3: Monitoring and Troubleshooting Network Connectivity
In this module, you will learn important skills around troubleshooting virtual network connectivity. The primary tool discussed is Azure Network Watcher. Azure Network Watcher provides IP flow verification, VPN diagnostics, NSG views and flows, and next hop analysis. Lessons

• Introducing Network Watcher
• Implementing Network Watcher
• Network Troubleshooting Examples

Preparation:
It is suggested that students complete the following supplemental MOOC content before attending the instructor-led course.

• Secure Identities (6 weeks)

Module 1: Introduction to Identity Protection in Azure
In this module, you’ll learn about Role-Based Access Control as the foundation to organizing and managing an organization’s administrative access based on the principle of least privilege. You will also review Azure Active Directory concepts, as well as gaining insight into the threat landscape and security risks that are exposed to IT organizations through breach of privileged access.

Lessons

• Role-Based Access Control
• Azure Active Directory (Refresher)
• Protecting Privileged Access in the Environment

Module 2: Using Multi-Factor Authentication for Secure Access
In this module, you’ll learn about securing the sign-in process through Multi-Factor Authentication (MFA). You’ll learn how MFA works and the differences in implementation between on-premises and cloud scenarios. You’ll also learn about using conditional access policies to provide more finegrained control over apps and resources in your environment.

Lessons

• Introducing Multi-Factor Authentication
• Implementing MFA

Module 3: Azure AD Privileged Identity Management
In this module, you’ll learn how to use Azure Privileged Identity Management (PIM) to enable justin-time administration and control the number of users who can perform privileged operations. You’ll also learn about the different directory roles available as well as newer functionality that includes PIM being expanded to role assignments at the resource level.

Lessons

• Getting Started with PIM
• PIM Security Wizard
• PIM for Directory Roles
• PIM for Role Resources