Skip to content

Latest commit

 

History

History
478 lines (333 loc) · 38.8 KB

70-533.md

File metadata and controls

478 lines (333 loc) · 38.8 KB

Microsoft Exam 70-533 Reference Guide

Useful Links

Reference


Design and Implement Azure App Service apps (15-20 %)

Deploy Web Apps

Topics:

  • Define deployment slots;
  • Roll back deployments;
  • Implement pre- and post- deployment actions;
  • Create, configure, and deploy packages;
  • Create App Service plans;
  • Migrate Web Apps between App Service plans;
  • Create a Web App within an App Service plan.

Resources:

Configure Web Apps

Topics:

  • Define and use app settings, connection strings, handlers, and virtual directories;
  • Configure certificates and custom domains;
  • Configure SSL bindings and runtime configurations;
  • Manage Web Apps by using Azure PowerShell and Xplat-CLI.

Resources:

Configure diagnostics, monitoring, and analytics

Topics:

  • Retrieve diagnostics data;
  • View streaming logs;
  • Configure endpoint monitoring, configure alerts;
  • Configure diagnostics;
  • Use remote debugging;
  • Monitor Web App resources.

Resources:

Configure Web Apps for scale and resilience

Topics:

  • Configure auto-scale using built-in and custom schedules, configure by metric, change the size of an instance, configure Traffic Manager.

Resources:


Create and manage Azure Resource Manager Virtual Machines (20-25%)

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)

Topics:

  • Identify workloads that can and cannot be deployed;
  • Run workloads, including Microsoft and Linux;
  • Create VMs;
  • Connect to a Windows/Linux VM

Resources:

Perform configuration management

Topics:

  • Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent (custom script extensions);
  • Configure VMs using a configuration management tool, such as Puppet or Chef;
  • Enable remote debugging.

Resources:

Design and implement VM storage

Topics:

  • Configure disk caching, plan storage capacity, configure operating system disk redundancy, configure shared storage using Azure File service, configure geo-replication, encrypt disks, implement ARM VMs with Standard and Premium Storage

Resources:

Monitor ARM VMs

Topics:

  • Configure ARM VM monitoring, configure alerts, configure diagnostic and monitoring storage location.

Resources:

Monitor ARM VM availability

Topics:

  • Configure multiple ARM VMs in an availability set for redundancy, configure each application tier into separate availability sets, combine the Load Balancer with availability sets.

Resources:

Scale ARM VMs

Topics:

  • Scale up and scale down VM sizes, deploy ARM VM Scale Sets (VMSS), configure ARM VMSS auto-scale.

Resources:


Design and implement a storage strategy (20-25%)

Implement Azure storage blobs and Azure files

Topics:

  • Read data, change data, set metadata on a container, store data using block and page blobs, stream data using blobs, access blobs securely, implement async blob copy, configure a Content Delivery Network (CDN), design blob hierarchies, configure custom domains, scale blob storage.

Resources:

Manage access

Topics:

  • Create and manage shared access signatures, use stored access policies, regenerate keys.

Resources:

Configure diagnostics, monitoring, and analytics

Topics:

  • Set retention policies and logging levels, analyze logs.

Resources:

Implement Azure SQL Databases

Topics:

  • Choose the appropriate database tier and performance level;
  • Configure point-in-time recovery, geo-replication, and data sync;
  • Import and export data and schema;
  • Design a scaling strategy.

Resources:

Implement recovery services

Topics:

Create a backup vault, deploy a backup agent, back up and restore data.

Resources:


Implement an Azure Active Directory (15-20%)

Integrate an Azure Active Directory (Azure AD) with existing directories

Topics:

  • Implement Azure AD Connect and single sign-on with on-premises Windows Server 2012 R2, add custom domains, monitor Azure AD.

Resources:

Configure Application Access

Topics:

  • Configure single sign-on with SaaS applications using federation and password based, add users and groups to applications, revoke access to SaaS applications, configure access, configure federation with Facebook and Google ID.

Resources:

Integrate an app with Azure AD

Topics:

  • Implement Azure AD integration in web and desktop applications, leverage Graph API.

Resources:

Implement Azure AD B2C and Azure B2B

Topics:

  • Create an Azure AD B2C Directory, register an application, implement social identity provider authentication, enable multi-factor authentication, set up self-service password reset, implement B2B collaboration, configure partner users, integrate with applications.

Resources:


Implement Virtual Networks (10-15%)

Configure virtual networks

Topics:

  • Deploy a VM into a virtual network;
  • Configure external and internal load balancing;
  • Implement Application Gateway;
  • Design subnets;
  • Configure static, public, and private IP addresses;
  • Set up Network Security Groups (NSGs), DNS at the virtual network level, HTTP and TCP health probes, public IPs, User Defined Routes (UDRs), firewall rules, and direct server return.

Resources:

Modify network configuration

Topics:

  • Modify subnets, NSGs, and UDRs

Resources:

Design and implement a multi-site or hybrid network

Topics:

  • Choose the appropriate solution between ExpressRoute, site-to-site, and point-to-site;
  • Choose the appropriate gateway;
  • Identify supported devices and software VPN solutions;
  • Identify networking prerequisites;
  • Configure virtual networks and multi-site virtual networks.

Resources:


Design and deploy ARM templates (10-15%)

Implement ARM templates

Topics:

  • Author ARM templates;
  • Create ARM templates to deploy ARM Resource Providers resources;
  • Deploy templates with PowerShell, CLI, and REST API.

Resources:

Control access

Topics:

  • Leverage service principles with ARM authentication, use Azure Active Directory Authentication with ARM, set management policies, lock resources

Resources:

Design role-based access control (RBAC)

Topics:

  • Secure resource scopes, such as the ability to create VMs and Azure Web Apps; implement Azure role-based access control (RBAC) standard roles;
  • Design Azure RBAC custom roles.

Resources: