Microsoft Azure is the fastest growing cloud provider. Azure’s revenue grew an incredible 76% in the last quarter of 2018. As more and more businesses move their IT infrastructure to Microsoft’s cloud platform, the demand for Azure professionals keeps rising. Since there are relatively few people with extensive Azure experience, many employers rely on certifications as evidence that a candidate has the required knowledge and skills.
Up until the end of 2018, Microsoft had 3 primary exams to test Azure knowledge: 70-532, 70-533, and 70-535. All of those exams have now been retired. Why? Microsoft received a lot of feedback that those exams were too broad, covering a range of skills that few IT professionals would have. So, Microsoft researched how people in different roles use Azure, and then they completely overhauled their certifications.
The result is that Microsoft now has a larger number of role-based Azure certifications. The roles include Administrator, Developer, Architect, DevOps Engineer, and Security Engineer, with more to come.
Cloud Architect is a key role that’s in high demand. So what do cloud architects do? Here’s a quick summary from Cloud Roster, the job roles matrix from Cloud Academy:
“A Cloud Architect is responsible for converting the technical requirements of a project into the architecture and design that will guide the final product.”
The Microsoft Azure Solutions Architect certification has more specific requirements:
“Candidates should have advanced experience and knowledge across various aspects of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data management, budgeting, and governance. . . . Candidates must be proficient in Azure administration, Azure development, and DevOps, and have expert-level skills in at least one of those domains.”
Wait a minute. That’s an incredibly wide range of topics. Didn’t Microsoft say that its new certifications would be narrower than the previous ones? Well, that’s true for the Associate-level certifications, such as Administrator and Developer, but not for Expert-level certifications like Solutions Architect.
To obtain the Azure Solutions Architect certification, you need to pass two exams: AZ-300 and AZ-301. You do not need to pass any Associate-level exams before taking these ones. The AZ-300 exam focuses on Azure technologies, and the AZ-301 exam focuses on design.
Here are the topics covered in the AZ-300 exam and the relative weight of each section:
- Deploy and Configure Infrastructure (25-30%)
- Implement Workloads and Security (20-25%)
- Create and Deploy Apps (5-10%)
- Implement Authentication and Secure Data (5-10%)
- Develop for the Cloud and for Azure Storage (20-25%)
The first section is the biggest, and it covers a wide variety of topics, including storage, virtual machines, networking, and Azure Active Directory. You have to know these topics in great depth for the exam. For example, in addition to knowing how to create a virtual machine, you also need to know how to make it highly available and how to automate VM deployment using Azure Resource Manager. In the network area, you need to know how to connect virtual networks together using VNET peering and virtual network gateways. In the Azure Active Directory area, you need to know how to synchronize Azure AD with an on-premises Active Directory server and also enable single sign-on.
The next section is on implementing workloads and security. You need to know how to connect your on-premises network to an Azure virtual network and how to migrate your on-premises servers to Azure using Site Recovery. Once you have applications in Azure, you’ll usually want to implement load balancing, which helps improve both performance and availability, so that’s an important topic, too. In the security area, you have to be able to make it harder for hackers to get in by using multi-factor authentication, and you also need to know how to limit each user’s access level to only as much as they need by using role-based access control.
The third section is one of the shortest. It covers creating and deploying apps using either Azure App Service or Azure Container Service.
The fourth section is also short, and it covers two main topics. The first is how to implement authentication using a variety of different methods. One especially important concept is Managed Identity (which used to be called Managed Service Identity). This makes it easy to authenticate an application so it can access other services. The second major topic in this section is how to encrypt your data. One of the most important concepts in this area is how to use Azure Key Vault, which is where you can store your cryptographic keys.
The final section covers how to develop for the cloud. One of the greatest features of the cloud is autoscaling. Instead of having to provision enough compute power to handle peaks, you can just tell Azure to add and remove compute resources based on the demand. You have to be careful how you configure autoscaling, though, because if you don’t set up the rules correctly, it could have a big impact on your application’s performance and cost.
Another great feature of Azure is how easy it is to set up messaging between your applications. Azure has messaging services for every need, including Event Grid, Service Bus, Relay Service, Event Hub, and Notification Hub. You need to know all of them for the exam.
Here are the topics covered in the AZ-301 exam:
- Determine Workload Requirements (10-15%)
- Design for Identity and Security (20-25%)
- Design a Data Platform Solution (15-20%)
- Design a Business Continuity Strategy (15-20%)
- Design for Deployment, Migration, and Integration (10-15%)
- Design an Infrastructure Strategy (15-20%)
In my opinion, AZ-301 is more difficult than AZ-300 because you need to apply a deep knowledge of IT architecture to Azure solution designs. This is especially true of the first section of the exam, which expects you to have some general knowledge of a wide variety of subjects about designing IT environments, such as capacity planning, governance, and maintainability. The more Azure-specific topics in this section are optimizing Azure costs and designing a monitoring strategy.
The second section is on designing for identity and security. Not surprisingly, the focus is on how to use Azure Active Directory. In a large organization, there are many identities to manage. This includes not only users but also applications. To manage them effectively and securely, you need to design a proper identity management system. You also need to set up authentication for all of these identities, usually including single sign-on for your users. After a user or application is authenticated, it needs to be granted the right level of authorization to access Azure resources.
The third section is on designing data solutions. Azure includes many different data services, including relational databases, non-relational databases, data warehouses, data lakes, and many other related services. You’ll need to know when to choose each of the data services, how to size them, and how to design for data protection, availability, consistency, and durability. You’ll also need to know how to design and document how data flows between the various services.
The fourth section is on designing a business continuity strategy. The two most important concepts are high availability and disaster recovery. You can design for high availability using various levels of redundancy. For disaster recovery, the two most important services to know are Azure Site Recovery and Azure Backup.
The fifth section is one of the smallest. The subject is how to design for deployment, migration, and integration. It’s about migrating from an on-premises environment to an Azure environment, designing a repeatable way to deploy Azure resources, and integrating your applications using services such as Azure API Management.
The final section is on designing an infrastructure strategy. You have to know how to design strategies for storage, compute, and networking. In each of these areas, you need to choose the right solution, design secure access to the solution, and recommend appropriate management tools.
Preparing for the Exams
Considering the breadth of topics covered in the exams, you will almost certainly be unfamiliar with some of the parts of Azure that you need to know to pass the exams. For example, most people have not had to configure Azure Active Directory Connect, virtual network peering, NoSQL databases, and Azure Event Grid all in the same job.
To fill in the gaps and to review all of the other topics, I recommend taking self-paced courses, getting hands-on experience in a few key areas of Azure, and taking practice exams. The easiest way to do that is to go through Cloud Academy’s AZ-300 and AZ-301 Exam Preparation learning paths. Both of them include video-based courses and a practice exam. The AZ-300 learning path also includes hands-on labs in compute, storage, networking, and security.
Watch this short video for an overview of the AZ-300 Exam Preparation:
The AZ-301 learning path, which focuses on concepts rather than configuration, includes additional mini-exams for the compute, data, and networking areas.
Watch this short video for an overview of the AZ-301 Exam Preparation:
Good luck with the exams!
New Content: Platforms, Programming, and DevOps – Something for Everyone
This month our team of expert certification specialists released three new or updated learning paths, 16 courses, 13 hands-on labs, and four lab challenges! New content on Cloud Academy You can always visit our Content Roadmap to see what’s just released as well as what’s coming soon....
New Content: Focus on DevOps and Programming Content this Month
This month our team of expert certification specialists released 12 new or updated learning paths, 15 courses, 25 hands-on labs, and four lab challenges! New content on Cloud Academy You can always visit our Content Roadmap to see what’s just released as well as what’s coming soon. Ja...
New Content: Get Ready for the CISM Cert Exam & Learn About Alibaba, Plus All the AWS, GCP, and Azure Courses You Know You Can Count On
This month our team of intrepid certification specialists released five learning paths, seven courses, 19 hands-on labs, and three lab challenges! One particularly interesting new learning path is Certified Information Security Manager (CISM) Foundations. After completing this learn...
Which Certifications Should I Get?
The old AWS slogan, “Cloud is the new normal” is indeed a reality today. Really, cloud has been the new normal for a while now and getting credentials has become an increasingly effective way to quickly showcase your abilities to recruiters and companies. With all that in mind, the s...
New Content: AWS Terraform, Java Programming Lab Challenges, Azure DP-900 & DP-300 Certification Exam Prep, Plus Plenty More Amazon, Google, Microsoft, and Big Data Courses
This month our Content Team continues building the catalog of courses for everyone learning about AWS, GCP, and Microsoft Azure. In addition, this month’s updates include several Java programming lab challenges and a couple of courses on big data. In total, we released five new learning...
WARNING: Great Cloud Content Ahead
At Cloud Academy, content is at the heart of what we do. We work with the world’s leading cloud and operations teams to develop video courses and learning paths that accelerate teams and drive digital transformation. First and foremost, we listen to our customers’ needs and we stay ahea...
New Content: AWS Data Analytics – Specialty Certification, Azure AI-900 Certification, Plus New Learning Paths, Courses, Labs, and More
This month our Content Team released two big certification Learning Paths: the AWS Certified Data Analytics - Speciality, and the Azure AI Fundamentals AI-900. In total, we released four new Learning Paths, 16 courses, 24 assessments, and 11 labs. New content on Cloud Academy At any ...
New Content: Azure DP-100 Certification, Alibaba Cloud Certified Associate Prep, 13 Security Labs, and Much More
This past month our Content Team served up a heaping spoonful of new and updated content. Not only did our experts release the brand new Azure DP-100 Certification Learning Path, but they also created 18 new hands-on labs — and so much more! New content on Cloud Academy At any time, y...
Constant Content: Cloud Academy’s Q3 2020 Roadmap
Hello — Andy Larkin here, VP of Content at Cloud Academy. I am pleased to release our roadmap for the next three months of 2020 — August through October. Let me walk you through the content we have planned for you and how this content can help you gain skills, get certified, and...
New Content: Alibaba, Azure AZ-303 and AZ-304, Site Reliability Engineering (SRE) Foundation, Python 3 Programming, 16 Hands-on Labs, and Much More
This month our Content Team did an amazing job at publishing and updating a ton of new content. Not only did our experts release the brand new AZ-303 and AZ-304 Certification Learning Paths, but they also created 16 new hands-on labs — and so much more! New content on Cloud Academy At...
Blog Digest: Which Certifications Should I Get?, The 12 Microsoft Azure Certifications, 6 Ways to Prevent a Data Breach, and More
This month, we were excited to announce that Cloud Academy was recognized in the G2 Summer 2020 reports! These reports highlight the top-rated solutions in the industry, as chosen by the source that matters most: customers. We're grateful to have been nominated as a High Performer in se...
New Content: AWS, Azure, Typescript, Java, Docker, 13 New Labs, and Much More
This month, our Content Team released a whopping 13 new labs in real cloud environments! If you haven't tried out our labs, you might not understand why we think that number is so impressive. Our labs are not “simulated” experiences — they are real cloud environments using accounts on A...