Azure Cert Prep

Themes to review :

• ARM Templates (variables, parameters, template)

• User Access Administrator vs Global administrator

• Azure Bastion subnet requirements

• App Service Plan / Slots

• Azure Hybrid Benefit

• Az-Copy with sync ⇒ (Ex: sync 2 file shares , —delete-destination true)

• Azure VNET adress ranges cannot be modified

• IP flow verify vs Connection Monitor vs Connection Troubleshoot

• How to protect your resource hierarchy (Mgmt groups)

• IT Service Management integration - Azure Monitor | Microsoft Learn

• Step by Step ARM Templates - Using Key Vault to Securely Provide Information in ARM Templates :: Harvesting Clouds

• Change a VMs availability set using Azure PowerShell - Azure Virtual Machines | Microsoft Learn

• Enable Microsoft Entra password writeback - Microsoft Entra ID | Microsoft Learn

• Blob rehydration from the archive tier | Microsoft Learn

• Change feed in Blob Storage - Azure Storage | Microsoft Learn

• Scale up features and capacities - Azure App Service | Microsoft Learn

• Tutorial: Deploy Azure Bastion using specified settings: Azure portal | Microsoft Learn

• Locally Redundant Storage vs Zone-Redundant Storage (tutorialsdojo.com)

• How to deploy Azure File Sync | Microsoft Learn

• Azure Load Balancer vs Application Gateway vs Traffic Manager (tutorialsdojo.com)

• Review az vm machines sizes definition

• How to deploy Azure File Sync | Microsoft Learn

• Azure Load Balancer SKUs | Microsoft Learn

• Download the template for an Azure VM - Azure Virtual Machines | Microsoft Learn

• Tutorial: Deploy Azure Bastion using specified settings: Azure portal | Microsoft Learn

• Assign public IP addresses after failover with Azure Site Recovery - Azure Site Recovery | Microsoft Learn

• Protect your Azure resources with a lock - Azure Resource Manager | Microsoft Learn

• Create Advisor alerts for new recommendations by using Bicep - Azure Advisor | Microsoft Learn

• Hub-spoke network topology in Azure - Azure Architecture Center | Microsoft Learn

• Azure Policy definitions effect basics - Azure Policy | Microsoft Learn

• Change how a storage account is replicated - Azure Storage | Microsoft Learn

• Azure Firewall forced tunneling | Microsoft Learn

• What is Microsoft Entra Cloud Sync? - Microsoft Entra ID | Microsoft Learn

• Azure application security groups overview | Microsoft Learn

• Azure Disk Storage overview - Azure Virtual Machines | Microsoft Learn

• What is an Azure Private DNS zone? | Microsoft Learn

• Using Azure Import/Export to transfer data to and from Azure Storage | Microsoft Learn

• https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

• https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles

• https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-user-profile-info

• https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan

• https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units

• https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

• https://tutorialsdojo.com/microsoft-entra-id-vs-role-based-access-control-rbac/

• https://tutorialsdojo.com/network-security-group-nsg-vs-application-security-group/

Commands PowerShell :

• Update-AzStorageAccountNetworkRuleSet
• Set-AzVirtualNetworkSubnetConfig
• Add-AzStorageAccountNetworkRule

LRS ⇐> GRS/RA-GRS ==⇒ Azure Portal, PowerShell, Azure CLI to change replication settings
|| || ⇒ Live or Manual Migration
ZRS ⇐> GZRS/RA-GZRS ==⇒ Azure Portal, PowerShell, Azure CLI to change replication settings

From ZRS and GZRS/RA-GZRS ⇒ NO LIVE MIGRATION, ONLY MANUAL MIGRATION

Block Blobs: Best for storing large files that are uploaded in chunks.
Append Blobs: Best for scenarios where data is only added to the end, like logs.
Page Blobs: Best for random read/write access, particularly for virtual machine disks.