303

>> Implement cloud infrastructure monitoring

monitor cost
o monitor spend
o report on spend

*************************************************************************

>>> Implement storage accounts
 select storage account options based on a use case
 configure Azure Files and blob storage
 configure network access to the storage account
 implement Shared Access Signatures and access policies
 implement Azure AD authentication for storage
 manage access keys
 implement Azure storage replication
 implement Azure storage account failover


****************************************************************************
>>>Implement VMs for Windows and Linux (DONE)
 configure High Availability
 configure storage for VMs
 select virtual machine size
 implement Azure Dedicated Hosts
 deploy and configure scale sets
 configure Azure Disk Encryption

Exercise - Create a virtual machine
Exercise - Sizing VMs
Exercise - Deploy a scale set in the Azure portal 
(Deploy - az vmss create )
(Configure - az network lb probe create)
(Configure - az network lb rule create (to configure the load balancer to route HTTP traffic to the instances in the scale set)) 

Custom Script Extension - (az vmss extension set)

Exercise - Create a Windows virtual machine
Exercise - Deploy VMs to dedicated hosts using the portal
(Create "Host Groups" -> Create "Dedicated Hosts" -> Craete VM)
(New-AzHostGroup `-> New-AzHost -> New-AzVM)
Excercise - Move the VM to a dedicated host (VM -> Stop -> Configuration -> Choose Host group & Host --> Save)

Connect-AzAccount

Excercise - Create an availability Set
(You can create availability sets through the Azure portal in the disaster recovery section)

New-AzKeyVault,
az keyvault create 
Set-AzKeyVaultAccessPolicy
az keyvault 
Set-AzVmDiskEncryptionExtension 
az vm encryption enable 
Disable-AzVMDiskEncryption
az vm encryption disable 
New-AzResourceGroup, New-AzVm, Get-AzVM, Get-AzVmDiskEncryptionStatus, New-AzKeyVault, New-AzSnapshot,Set-AzVmDiskEncryptionExtension (to encrypt VM disks)
Get-AzVmDiskEncryptionStatus, New-AzAvailabilitySet,New-AzVmss 

Exercise - Encrypt the VM disks with Azure Disk Encryption:
(Create Key Vault -> Update Key Vault  to support Disk Encryption --> Encrypt VM using key stored in Key Vault)

Exercise - Resource Manager Deployment
(Create a Resource --> Template Deployment)
New-AzResourceGroupDeployment 
azure group deployment create


****************************************************************************



>>> Implement virtual networking
 implement VNet to VNet connections
Site to Site(Azure VPN Gateway/Express Route), VNet to VNet(Azure VPN Gateway), Vnet Peering
 implement VNet peering

Create VNet
az network vnet create \
az vm create

Configure Azure Network Peering
az network vnet peering create \

****************************************************************************

Implement Azure Active Directory
 add custom domains
 configure Azure AD Identity Protection
 implement self-service password reset
 implement Conditional Access including MFA
 configure user accounts for MFA
 configure fraud alerts
 configure bypass options
 configure Trusted IPs
 configure verification methods
 implement and manage guest accounts
 manage multiple directories


**************************************************************************
Implement and manage hybrid identities
 install and configure Azure AD Connect
 identity synchronization options
 configure and manage password sync and password writeback
 configure single sign-on
 use Azure AD Connect Health



***************************************************************************

>>> Implement and Manage Data Platforms (10-15%)

*********************************************************
Implement NoSQL databases (DONE)

 configure storage account tables
 select appropriate CosmosDB APIs
 set up replicas in CosmosDB

Azure Cosmos DB account, Database, Container, Request Unit (RU/s), Partition Key, Multi  Master Support, 
Conflict Resolution(Last-Writer-Wins (LWW),Custom - User-defined function, Custom - Async), Muti Region writes, Manual/Automatic failover
Consistency Level
LAB: Creating an Azure Cosmos DB account 
LAB: Creating your database and container (Cosmos DB Account --> Data Explorer --> New Container)
LAB: Replicate data in multiple regions (Cosmos DB Account --> Replicate Data Globally)
LAB: Automatic/Manual Failover (Cosmos DB Account --> Replicate Data Globally --> Automatic/Manual failover)
LAB:  Insert and query data in your Azure Cosmos DB database (Cosmos DB Account --> Data Explorer)
LAB: Create an Azure Storage table in the Azure portal (Create Storage Account --> Create Table)


**********************************************************