The Microsoft 70-533 is for IT professionals and Developers who are interested in implementing infrastructure solutions in Microsoft Azure.
Students should have previous experience in implementing, monitoring and configuring cloud and hybrid applications. Students should also have experience managing application lifecycle.
Some familiarity with the following topics is recommended:
- Powershell
- Azure Portal
- Docker/Kubernetes
- FTP
- git
Design and Implement Azure App Service Apps (10-15%)
- Deploy Web Apps
- Define deployment slots; roll back deployments; implement pre- and post-deployment actions; create, configure, and deploy packages; create App Service plans; migrate Web Apps between App Service plans; create an app within an App Service plan; determine when to use App Service Environment (ASE); select and use appropriate deployment methods including Git, FTP, and cloud sync
- Configure Apps
- Define and use app settings, connection strings, handlers, and virtual directories; configure certificates and custom domains; configure SSL bindings and runtime configurations; manage Apps by using Azure PowerShell and Azure-CLI; manage App Service backups; configure authentication and authorisation for apps; configure app notifications
- Configure diagnostics, monitoring and analytics
- Retrieve diagnostics data; view streaming logs; configure endpoint monitoring; configure alerts; configure diagnostics; use remote debugging; monitor Web App resources; use Microsoft Operations Management Suite (OMS) workspaces
- Configure Web Apps for scale and resilience
- Configure auto-scale using built-in and custom schedules; configure by metric; change the size of an instance; configure Azure Traffic Manager
Create and Manage Azure Resource Manager Virtual Machines (20-25%)
- Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
- Identify workloads that can and cannot be deployed; run workloads that use Microsoft or Linux operating systems; create VMs; connect to a Windows/Linux VM; deploy workloads; deploy Bring Your Own License (BYOL) images
- Perform configuration management
- Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent (custom script extensions); enable remote debugging
- Design and implement VM storage
- Configure disk caching; plan storage capacity; configure operating system disk redundancy; configure shared storage using Azure File service; configure Azure File Share snapshots; configure geo-replication; encrypt disks; implement ARM VMs with Standard and Premium Storage; configure Blob-Level Tiering (Hot, Cool, Archive); manage storage encryption keys
- Monitor ARM VMs
- Configure ARM VM monitoring; configure alerts; configure diagnostic and monitoring storage location
- Manage ARM VM availability
- Configure multiple ARM VMs in an availability set for redundancy; configure each application tier into separate availability sets; combine the Load Balancer with availability sets; configure fault domains and update domains; leverage Availability Zones
- Scale ARM VMs
- Scale up and scale down VM sizes; deploy ARM VM Scale Sets (VMSS); configure ARM VMSS auto-scale
- Manage Containers with Azure Container Services (AKS)
- Deploy a Kubernetes cluster in AKS; create and manage container images; scale applications using Docker, DC/OS, Swarm, or Kubernetes; configure for open-source tooling; migrate container workloads to and from Azure; monitor Kubernetes by using Microsoft Operations Management Suite (OMS); implement Azure Container Registry
Design and Implement a Storage Strategy (10-15%)
- Implement Azure Storage blobs and Azure Files
- Identify appropriate blob type for specific storage requirements; read data; change data; set metadata on a container; store data using block and page blobs; stream data using blobs; access blobs securely; implement async blob copy; configure Content Delivery Network (CDN); design blob hierarchies; configure custom domains; scale blob storage; manage SMB file storage; implement Azure StorSimple
- Manage access
- Create and manage shared access signatures; use stored access policies; regenerate keys; encrypt keys by using Azure Key Vault integration
- Configure diagnostics, monitoring and analytics
- Set retention policies and logging levels; access, add, and remove logs; analyse logs
- Implement storage encryption
- Encrypt data as written to Azure Storage by using Azure Storage Service Encryption (SSE); implement encrypted and role-based security for data managed by Azure Data Lake Store
Implement Virtual Networks (15-20%)
- Configure virtual networks
- Deploy a VM into a virtual network; configure external and internal load balancing; implement Application Gateway; design subnets; configure static, public, and private IP addresses; set up Network Security Groups (NSGs), DNS at the virtual network level, HTTP and TCP health probes, public IPs, User Defined Routes (UDRs), firewall rules, and direct server return; connect VNets by virtual network peering; configure VMs using a configuration management tool such as Puppet or Chef
- Design and implement multi-site or hybrid network connectivity
- Choose the appropriate solution between Azure ExpressRoute, site-to-site, and point-to-site; choose the appropriate gateway; identify supported devices and software VPN solutions; identify networking prerequisites; configure virtual networks and multi-site virtual networks; implement virtual network peering and service chaining; implement hybrid connections to access on-premises data sources, leverage S2S VPNs to connect to on-premises infrastructure; monitor ExpressRoute
- Configure ARM VM networking
- Configure static IP addresses, Network Security Groups (NSGs), DNS, User Defined Routes (UDRs), external and internal load balancing with HTTP and TCP health probes, public IPs, firewall rules, and direct server return; design and implement Application Gateway; configure Accelerated Networking; configure virtual network service endpoints
- Design and implement a connection strategy
- Implement Hybrid Connections to access data sources on-premises; leverage S2S VPN to connect to an on-premises infrastructure
Design and Deploy ARM Templates (10-15%)
- Implement ARM templates
- Author ARM templates; create ARM templates to deploy multiple ARM Resource Providers resources of different types with count loops and Marketplace items; deploy templates with PowerShell, Azure CLI, Azure Portal and REST API
- Control access
- Leverage service principals with ARM authentication; use Azure Active Directory Authentication with ARM; set management policies; configure lock policies; lock resources
- Design role-based access control (RBAC)
- Secure resource scopes such as the ability to create VMs and Azure Web Apps; implement Azure RBAC standard roles; design Azure RBAC custom roles
Manage Azure Security and Recovery Services (25-30%)
- Manage data protection and security compliance
- Create and import encryption keys with Key Vault; automate tasks for SSL/TLS certificates; prevent and respond to security threats with Azure Security Center; Configure single sign-on with SaaS applications using federation and password based authentication; add users and groups to applications; revoke access to SaaS applications; configure access; configure federation with public consumer identity providers such as Facebook and Google
- Implement recovery services
- Create a backup vault; deploy a backup agent; backup and restore data, use snapshots and Geo-replication for recovery; Implement DR as service; Deploy Azure Site Recovery (ASR) agent, configure ASR; configure ASR one-click failover
Manage Azure Operations (5-10%)
- Enhance cloud management with automation
- Implement PowerShell runbooks; integrate Azure Automation with Web Apps; create and manage PowerShell Desired State Configurations (DSC); import DSC resources; generate DSC node configurations; monitor and automatically update machine configurations with Azure Automation DSC; implement serverless computing, including Azure Functions, Event Grid, and Service Bus
- Collect and analyse data generated by resources in cloud and on-premises environments
- Collect and search across data sources from multiple systems; build custom visualisations; visualise Azure resources across multiple subscriptions; transform Azure activity data and managed resource data into an insight with flexible search queries; monitor system updates and malware status; track server configuration changes by using Azure Log Analytics; configure the IT Service Management Connector (ITSMC)
Advantages of Microsoft Azure:
- IaaS: As already specified, Azure which empowers you to construct, send and oversee applications all the more rapidly and effectively. IaaS empowers your organization to make your own Web application or dispatch your own site without buying and keep up the fundamental infrastructure. Your association can modify your cloud software to meet your correct needs.
- Enhanced adaptability and versatility: Azure is greatly adaptable and gives you the choice to consume any level of use you require. It supports similar developments numerous engineers and IT experts as of now depend on. You can quickly convey and change your Web applications to Azure with no downtime. This implies less time agonizing over the framework, and additional time committed to your applications. It’s additionally a compensation as-you-go benefit, so you can rapidly alter limit as per your business changes and needs.
- Unique storage: Azure has a greater number of data centers and conveyance focuses than most other cloud services. This enables Azure to convey content quicker and give an ideal client encounter. You can store any kind of information in a dependable and quick condition and offer it crosswise over virtual machines (VMs).
- Extend your current IT: Azure doesn’t influence you to pick your datacenter and the cloud. It effectively incorporates with your current IT condition through secure private associations, cross-breeds database and capacity arrangements. Your benefits stay where you require them. This makes Azure to a great degree financially savvy and less mind-boggling.
- Strong analytics support: Azure gives worked in helping to break down information and key experiences. They give oversaw SQL administrations, Machine Learning, Cortana Analytics and Stream Analytics. Your business will have the capacity to settle on more intelligent choices, enhance client benefit and reveal new business openings.
The Microsoft 70-533 is for IT professionals and Developers who are interested in implementing infrastructure solutions in Microsoft Azure.
Students should have previous experience in implementing, monitoring and configuring cloud and hybrid applications. Students should also have experience managing application lifecycle.
Some familiarity with the following topics is recommended:
- Powershell
- Azure Portal
- Docker/Kubernetes
- FTP
- git
Design and Implement Azure App Service Apps (10-15%)
- Deploy Web Apps
- Define deployment slots; roll back deployments; implement pre- and post-deployment actions; create, configure, and deploy packages; create App Service plans; migrate Web Apps between App Service plans; create an app within an App Service plan; determine when to use App Service Environment (ASE); select and use appropriate deployment methods including Git, FTP, and cloud sync
- Configure Apps
- Define and use app settings, connection strings, handlers, and virtual directories; configure certificates and custom domains; configure SSL bindings and run time configurations; manage Apps by using Azure Power Shell and Azure-CLI; manage App Service backups; configure authentication and authorization for apps; configure app notifications
- Configure diagnostics, monitoring and analytics
- Retrieve diagnostics data; view streaming logs; configure endpoint monitoring; configure alerts; configure diagnostics; use remote debugging; monitor Web App resources; use Microsoft Operations Management Suite (OMS) work spaces
- Configure Web Apps for scale and resilience
- Configure auto-scale using built-in and custom schedules; configure by metric; change the size of an instance; configure Azure Traffic Manager
Create and Manage Azure Resource Manager Virtual Machines (20-25%)
- Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)
- Identify workloads that can and cannot be deployed; run workloads that use Microsoft or Linux operating systems; create VMs; connect to a Windows/Linux VM; deploy workloads; deploy Bring Your Own License (BYOL) images
- Perform configuration management
- Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent (custom script extensions); enable remote debugging
- Design and implement VM storage
- Configure disk caching; plan storage capacity; configure operating system disk redundancy; configure shared storage using Azure File service; configure Azure File Share snapshots; configure geo-replication; encrypt disks; implement ARM VMs with Standard and Premium Storage; configure Blob-Level Tiering (Hot, Cool, Archive); manage storage encryption keys
- Monitor ARM VMs
- Configure ARM VM monitoring; configure alerts; configure diagnostic and monitoring storage location
- Manage ARM VM availability
- Configure multiple ARM VMs in an availability set for redundancy; configure each application tier into separate availability sets; combine the Load Balancer with availability sets; configure fault domains and update domains; leverage Availability Zones
- Scale ARM VMs
- Scale up and scale down VM sizes; deploy ARM VM Scale Sets (VMSS); configure ARM VMSS auto-scale
- Manage Containers with Azure Container Services (AKS)
- Deploy a Kubernetes cluster in AKS; create and manage container images; scale applications using Docker, DC/OS, Swarm, or Kubernetes; configure for open-source tooling; migrate container workloads to and from Azure; monitor Kubernetes by using Microsoft Operations Management Suite (OMS); implement Azure Container Registry
Design and Implement a Storage Strategy (10-15%)
- Implement Azure Storage blobs and Azure Files
- Identify appropriate blob type for specific storage requirements; read data; change data; set metadata on a container; store data using block and page blobs; stream data using blobs; access blobs securely; implement async blob copy; configure Content Delivery Network (CDN); design blob hierarchies; configure custom domains; scale blob storage; manage SMB file storage; implement Azure StorSimple
- Manage access
- Create and manage shared access signatures; use stored access policies; regenerate keys; encrypt keys by using Azure Key Vault integration
- Configure diagnostics, monitoring and analytics
- Set retention policies and logging levels; access, add, and remove logs; analyse logs
- Implement storage encryption
- Encrypt data as written to Azure Storage by using Azure Storage Service Encryption (SSE); implement encrypted and role-based security for data managed by Azure Data Lake Store
Implement Virtual Networks (15-20%)
- Configure virtual networks
- Deploy a VM into a virtual network; configure external and internal load balancing; implement Application Gateway; design subnets; configure static, public, and private IP addresses; set up Network Security Groups (NSGs), DNS at the virtual network level, HTTP and TCP health probes, public IPs, User Defined Routes (UDRs), firewall rules, and direct server return; connect VNets by virtual network peering; configure VMs using a configuration management tool such as Puppet or Chef
- Design and implement multi-site or hybrid network connectivity
- Choose the appropriate solution between Azure ExpressRoute, site-to-site, and point-to-site; choose the appropriate gateway; identify supported devices and software VPN solutions; identify networking prerequisites; configure virtual networks and multi-site virtual networks; implement virtual network peering and service chaining; implement hybrid connections to access on-premises data sources, leverage S2S VPNs to connect to on-premises infrastructure; monitor ExpressRoute
- Configure ARM VM networking
- Configure static IP addresses, Network Security Groups (NSGs), DNS, User Defined Routes (UDRs), external and internal load balancing with HTTP and TCP health probes, public IPs, firewall rules, and direct server return; design and implement Application Gateway; configure Accelerated Networking; configure virtual network service endpoints
- Design and implement a connection strategy
- Implement Hybrid Connections to access data sources on-premises; leverage S2S VPN to connect to an on-premises infrastructure
Design and Deploy ARM Templates (10-15%)
- Implement ARM templates
- Author ARM templates; create ARM templates to deploy multiple ARM Resource Providers resources of different types with count loops and Marketplace items; deploy templates with PowerShell, Azure CLI, Azure Portal and REST API
- Control access
- Leverage service principals with ARM authentication; use Azure Active Directory Authentication with ARM; set management policies; configure lock policies; lock resources
- Design role-based access control (RBAC)
- Secure resource scopes such as the ability to create VMs and Azure Web Apps; implement Azure RBAC standard roles; design Azure RBAC custom roles
Manage Azure Security and Recovery Services (25-30%)
- Manage data protection and security compliance
- Create and import encryption keys with Key Vault; automate tasks for SSL/TLS certificates; prevent and respond to security threats with Azure Security Center; Configure single sign-on with SaaS applications using federation and password based authentication; add users and groups to applications; revoke access to SaaS applications; configure access; configure federation with public consumer identity providers such as Facebook and Google
- Implement recovery services
- Create a backup vault; deploy a backup agent; backup and restore data, use snapshots and Geo-replication for recovery; Implement DR as service; Deploy Azure Site Recovery (ASR) agent, configure ASR; configure ASR one-click failover
Manage Azure Operations (5-10%)
- Enhance cloud management with automation
- Implement Power Shell run books; integrate Azure Automation with Web Apps; create and manage Power Shell Desired State Configurations (DSC); import DSC resources; generate DSC node configurations; monitor and automatically update machine configurations with Azure Automation DSC; implement server less computing, including Azure Functions, Event Grid, and Service Bus
- Collect and analyse data generated by resources in cloud and on-premises environments
- Collect and search across data sources from multiple systems; build custom visualizations; visualize Azure resources across multiple subscriptions; transform Azure activity data and managed resource data into an insight with flexible search queries; monitor system updates and malware status; track server configuration changes by using Azure Log Analytics; configure the IT Service Management Connector (ITSMC)
Reviews
There are no reviews yet.