Certificacion Azure - Guias de estudio examenes AZ100 & AZ101

A continuación, se encuentra redactada una suerte de guía de estudio para los nuevos exámenes de Microsoft Azure AZ100 y AZ101. Al momento de redactar este post dichos exámenes se encuentran en beta

Acceso a la información de los diferentes exámenes:

Microsoft Azure Infrastructure and Deployment AZ-100

Microsoft Azure Integration and Security AZ-101

Microsoft Azure Administrator Certification Transition AZ-102

Guia de Estudio – Examen AZ-100

Azure subscriptions and resources (15-20%)

Manage Azure subscriptions

Cost Center Tagging: https://docs.microsoft.com/en-us/azure/billing/billing-getting-started#ways-to-monitor-your-costs-when-using-azure-services

Azure Policies: https://docs.microsoft.com/en-us/azure/azure-policy/azure-policy-introduction

Azure Administrator Subscription: https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator

Analyze resource utilization and consumption

Action Groups: https://docs.microsoft.com/en-my/azure/monitoring-and-diagnostics/monitoring-action-groups

Metrics in Microsoft Azure: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-metrics

Cost Management Report: https://docs.microsoft.com/en-us/azure/cost-management/use-reports

Setup Billing Alerts: https://docs.microsoft.com/en-us/azure/billing/billing-set-up-alerts

Log Query Functions Examples: https://github.com/MicrosoftDocs/LogAnalyticsExamples/tree/master/log-analytics

Create Alerts in Azure Monitor: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitor-alerts-unified-usage

Manage resource groups

Azure Policy: https://docs.microsoft.com/en-us/azure/azure-policy/create-manage-policy

Resource Locks: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Azure Resource Group Tags: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Move Resources across resource groups: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move-resources

Implement and manage storage (20-25%)

Create and configure storage accounts

Virtual Endpoint for Azure Storage: https://azure.microsoft.com/en-us/blog/virtual-network-service-endpoints-and-firewalls-for-azure-storage-now-generally-available/

Create and Manage Storage Account: https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account

Create SAS: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-dotnet-shared-access-signature-part-2

Azure Storage Explorer: https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer?tabs=windows

Azure Storage Analytics: https://docs.microsoft.com/nb-no/rest/api/storageservices/storage-analytics

Azure Activity Log Analytics: https://docs.microsoft.com/en-us/azure/security/azure-log-audit

Azure Storage Access Keys: https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account

Import and export data to Azure

Azure Import and Export Job: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

Configure CDN for Azure: https://docs.microsoft.com/en-us/azure/cdn/cdn-create-new-endpoint

Configure CDN for WordPress: https://blogs.msdn.microsoft.com/azureossds/2015/04/27/improving-wordpress-performance-use-azure-cdn/

Configure Azure files

Troubleshoot File Sync: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-troubleshoot?tabs=portal1%2Cportal

Deploy Azure File Sync: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=portal

Create a Sync Group: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=portal#create-a-sync-group-and-a-cloud-endpoint

Implement Azure backup

Azure Backup Reports: https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

Create Backup Vault: https://docs.microsoft.com/en-us/azure/backup/backup-azure-manage-windows-server

Restore from Azure backup agent: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-windows-server

Restore VM’s in Azure: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Creating a backup Policy: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm#defining-a-backup-policy

Deploy and manage virtual machines (VMs) (20-25%)

Create and configure a VM for Windows and Linux

High Availability IaaS Azure: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Scale Sets Azure: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

Monitor Azure Virtual Machine: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/monitor

Resize Virtual Machines Azure: https://thuansoldier.net/6515/

Automate deployment of VMs

ARM Templates: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates

ARM Azure Github: https://github.com/Azure/azure-quickstart-templates

Deploy Templates from ARM: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy

Save Template as ARM: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-template

Manage Azure VM

Move VM from one resource group to another: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Azure Automation DSC and Azure: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-overview

Custom Script Extension Azure: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows

ARM Custom Script Extension: https://github.com/Azure/azure-quickstart-templates/tree/master/201-vm-custom-script-windows

Attached Data Disk Azure: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal

Manage VM backups

Restore VM’s in Azure: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

Creating a backup Policy: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm#defining-a-backup-policy

Backup VM using ARM: https://azure.microsoft.com/en-gb/resources/templates/101-recovery-services-create-vm-and-configure-backup/

Configure and manage virtual networks (20-25%)

Create connectivity between virtual networks

VNET Peering: https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal

Virtual Network Gateway: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

Verify Connection: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Site to Site VNET: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Implement and manage virtual networking

Configure Private IP address: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

Configure Public IP address: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-deploy-static-pip-arm-portal

Configure Routing: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

IP Addressing VNET: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-ip-addresses-overview-arm

Configure name resolution

DNS Azure: https://docs.microsoft.com/en-us/azure/dns/dns-zones-records

DNS Azure FAQ: https://docs.microsoft.com/en-us/azure/dns/dns-faq

Manage Azure DNS: https://docs.microsoft.com/en-us/azure/dns/dns-operations-dnszones-portal

Configure DNS Zones Azure: https://docs.microsoft.com/en-us/azure/dns/dns-operations-recordsets

Create and configure a Network Security Group (NSG)

Azure IaaS Security: https://msandbu.org/microsoft-azure-and-security-best-pratices-part-1-identity/

Create Security Rules Azure: https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic-powershell

Diagnose Azure NSG Rules: https://docs.microsoft.com/en-us/azure/virtual-network/diagnose-network-traffic-filter-problem

Manage identities (15-20%)

Manage Azure Active Directory (AD)

Azure AD Custom Domains: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

Azure Self Service Reset: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks

Azure Identity Security: https://msandbu.org/microsoft-azure-and-security-best-pratices-part-1-identity/

Enable Enterprise State Roaming: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-windows-enterprise-state-roaming-enable

Manage Azure AD objects (users, groups, and devices)

Manage Devices: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Bulk Update Azure AD Users: http://ericphan.net/blog/2017/9/26/azure-active-directory-bulk-updating-user-profile-attributes-using-powershell

Create Groups Azure AD: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal

Dynamic Rules Azure AD Group: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership

Implement and manage hybrid identities

Configure Federated Access: https://docs.microsoft.com/en-us/azure/active-directory/application-config-sso-how-to-configure-federated-sso-gallery

Install Azure AD Connect: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-get-started-custom

Configure Password Writeback: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-writeback

Study Guide – AZ-101

Evaluate and perform server migration to Azure (15-20%)

Evaluate migration scenarios by using Azure Migrate

Asessment Azure Migrate: https://docs.microsoft.com/en-us/azure/migrate/tutorial-assessment-vmware

Ports Required: https://docs.microsoft.com/en-us/azure/migrate/migrate-overview

Migrate servers to Azure

Azure Site Recovery: https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure

Prepare Azure: https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure

MIgrate P2V: https://docs.microsoft.com/en-us/azure/site-recovery/physical-azure-disaster-recovery#create-a-replication-policy

Implement and manage application services (20-25%)

Configure serverless computing

Custom Event Grid Events: https://docs.microsoft.com/en-us/azure/event-grid/custom-event-quickstart-portal

Dead Letter Event Grid: https://docs.microsoft.com/en-us/azure/event-grid/manage-event-delivery

Manage an Azure Functions App: https://docs.microsoft.com/en-us/azure/azure-functions/functions-how-to-use-azure-function-app-settings

Monitor Azure Logic App Status: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-monitor-your-logic-apps

Manage Service Bus: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-metrics-azure-monitor

Manage App Service plans

Scaling App Plan: https://docs.microsoft.com/en-us/azure/app-service/environment/app-service-web-scale-a-web-app-in-an-app-service-environment

App Service Plan: https://docs.microsoft.com/en-us/azure/app-service/azure-web-sites-web-hosting-plans-in-depth-overview

Monitor and alerts App Service: https://docs.microsoft.com/nb-no/azure/app-service/web-sites-monitor

Manage App services

Use SSL: https://docs.microsoft.com/nb-no/azure/app-service/web-sites-purchase-ssl-web-site

Deployment Slots: https://docs.microsoft.com/en-us/azure/app-service/web-sites-staged-publishing

App Service Protection: https://docs.microsoft.com/en-us/azure/app-service/app-service-security

Patching and updates App Service: https://docs.microsoft.com/en-us/azure/app-service/app-service-patch-os-runtime

CDN Integration: https://docs.microsoft.com/en-us/azure/cdn/cdn-add-to-web-app

Implement advanced virtual networking (30-35%)

Implement application load balancing

Application Load Balancing: https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal

Configure Application Gateway with PowerShell: https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-manage-web-traffic-powershell

Multiple Front-end: https://docs.microsoft.com/en-us/azure/application-gateway/create-multiple-sites-portal

Implement Azure load balancer

Configure Internal Azure Load Balancer: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-get-started-ilb-arm-ps

Load Balancing Rules: https://docs.microsoft.com/nb-no/azure/load-balancer/load-balancer-distribution-mode

Troubleshoot Azure Load Balancing: https://docs.microsoft.com/nb-no/azure/load-balancer/load-balancer-troubleshoot

Monitor and manage networking

Implement Network Watcher: https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor

Diagnose a Gateway: https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-communication-problem-between-networks

Integrate on premises network with Azure virtual network

Configure ExpressRoute: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

VNET Peering: https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal

Virtual Network Gateway: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

Verify Connection: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Site to Site VNET: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Secure identities (25-30%)

Implement Multi-Factor Authentication (MFA)

Configure Fraud Alerts: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#fraud-alert

Configure Cloud Based MFA: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted

Custom Roles: https://msandbu.org/microsoft-azure-and-security-best-pratices-part-1-identity/

Trusted IP’s: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#trusted-ips

Manage role-based access control (RBAC)

Custom Roles: https://msandbu.org/microsoft-azure-and-security-best-pratices-part-1-identity/

Troubleshoot RBAC: https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting

Implement Azure Active Director (AD) Privileged Identity Management (PIM)

Activate a PIM Role: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-activate-role

Just in time: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-resource-roles-assign-roles

Delegated Provider: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/azure-ad-pim-approval-workflow#view-pending-approvals-requests

Enable PIM: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-getting-started

Esta publicada gran parte en Ingles debido a que es mas sencillo mapear la documentacion debido a que no todo el material se encuentra traducido.

Espero que les sirva.