Microsoft Azure is the fastest growing cloud provider. Azure’s revenue grew an incredible 76% in the last quarter of 2018. As more and more businesses move their IT infrastructure to Microsoft’s cloud platform, the demand for Azure professionals keeps rising. Since there are relatively few people with extensive Azure experience, many employers rely on certifications as evidence that a candidate has the required knowledge and skills.
Up until the end of 2018, Microsoft had 3 primary exams to test Azure knowledge: 70-532, 70-533, and 70-535. All of those exams have now been retired. Why? Microsoft received a lot of feedback that those exams were too broad, covering a range of skills that few IT professionals would have. So, Microsoft researched how people in different roles use Azure, and then they completely overhauled their certifications.
The result is that Microsoft now has a larger number of role-based Azure certifications. The roles include Administrator, Developer, Architect, DevOps Engineer, and Security Engineer, with more to come.
Cloud Architect is a key role that’s in high demand. So what do cloud architects do? Here’s a quick summary from Cloud Roster, the job roles matrix from Cloud Academy:
“A Cloud Architect is responsible for converting the technical requirements of a project into the architecture and design that will guide the final product.”
The Microsoft Azure Solutions Architect certification has more specific requirements:
“Candidates should have advanced experience and knowledge across various aspects of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data management, budgeting, and governance. . . . Candidates must be proficient in Azure administration, Azure development, and DevOps, and have expert-level skills in at least one of those domains.”
Wait a minute. That’s an incredibly wide range of topics. Didn’t Microsoft say that its new certifications would be narrower than the previous ones? Well, that’s true for the Associate-level certifications, such as Administrator and Developer, but not for Expert-level certifications like Solutions Architect.
To obtain the Azure Solutions Architect certification, you need to pass two exams: AZ-300 and AZ-301. You do not need to pass any Associate-level exams before taking these ones. The AZ-300 exam focuses on Azure technologies, and the AZ-301 exam focuses on design.
Here are the topics covered in the AZ-300 exam and the relative weight of each section:
- Deploy and Configure Infrastructure (25-30%)
- Implement Workloads and Security (20-25%)
- Create and Deploy Apps (5-10%)
- Implement Authentication and Secure Data (5-10%)
- Develop for the Cloud and for Azure Storage (20-25%)
The first section is the biggest, and it covers a wide variety of topics, including storage, virtual machines, networking, and Azure Active Directory. You have to know these topics in great depth for the exam. For example, in addition to knowing how to create a virtual machine, you also need to know how to make it highly available and how to automate VM deployment using Azure Resource Manager. In the network area, you need to know how to connect virtual networks together using VNET peering and virtual network gateways. In the Azure Active Directory area, you need to know how to synchronize Azure AD with an on-premises Active Directory server and also enable single sign-on.
The next section is on implementing workloads and security. You need to know how to connect your on-premises network to an Azure virtual network and how to migrate your on-premises servers to Azure using Site Recovery. Once you have applications in Azure, you’ll usually want to implement load balancing, which helps improve both performance and availability, so that’s an important topic, too. In the security area, you have to be able to make it harder for hackers to get in by using multi-factor authentication, and you also need to know how to limit each user’s access level to only as much as they need by using role-based access control.
The third section is one of the shortest. It covers creating and deploying apps using either Azure App Service or Azure Container Service.
The fourth section is also short, and it covers two main topics. The first is how to implement authentication using a variety of different methods. One especially important concept is Managed Identity (which used to be called Managed Service Identity). This makes it easy to authenticate an application so it can access other services. The second major topic in this section is how to encrypt your data. One of the most important concepts in this area is how to use Azure Key Vault, which is where you can store your cryptographic keys.
The final section covers how to develop for the cloud. One of the greatest features of the cloud is autoscaling. Instead of having to provision enough compute power to handle peaks, you can just tell Azure to add and remove compute resources based on the demand. You have to be careful how you configure autoscaling, though, because if you don’t set up the rules correctly, it could have a big impact on your application’s performance and cost.
Another great feature of Azure is how easy it is to set up messaging between your applications. Azure has messaging services for every need, including Event Grid, Service Bus, Relay Service, Event Hub, and Notification Hub. You need to know all of them for the exam.
Here are the topics covered in the AZ-301 exam:
- Determine Workload Requirements (10-15%)
- Design for Identity and Security (20-25%)
- Design a Data Platform Solution (15-20%)
- Design a Business Continuity Strategy (15-20%)
- Design for Deployment, Migration, and Integration (10-15%)
- Design an Infrastructure Strategy (15-20%)
In my opinion, AZ-301 is more difficult than AZ-300 because you need to apply a deep knowledge of IT architecture to Azure solution designs. This is especially true of the first section of the exam, which expects you to have some general knowledge of a wide variety of subjects about designing IT environments, such as capacity planning, governance, and maintainability. The more Azure-specific topics in this section are optimizing Azure costs and designing a monitoring strategy.
The second section is on designing for identity and security. Not surprisingly, the focus is on how to use Azure Active Directory. In a large organization, there are many identities to manage. This includes not only users but also applications. To manage them effectively and securely, you need to design a proper identity management system. You also need to set up authentication for all of these identities, usually including single sign-on for your users. After a user or application is authenticated, it needs to be granted the right level of authorization to access Azure resources.
The third section is on designing data solutions. Azure includes many different data services, including relational databases, non-relational databases, data warehouses, data lakes, and many other related services. You’ll need to know when to choose each of the data services, how to size them, and how to design for data protection, availability, consistency, and durability. You’ll also need to know how to design and document how data flows between the various services.
The fourth section is on designing a business continuity strategy. The two most important concepts are high availability and disaster recovery. You can design for high availability using various levels of redundancy. For disaster recovery, the two most important services to know are Azure Site Recovery and Azure Backup.
The fifth section is one of the smallest. The subject is how to design for deployment, migration, and integration. It’s about migrating from an on-premises environment to an Azure environment, designing a repeatable way to deploy Azure resources, and integrating your applications using services such as Azure API Management.
The final section is on designing an infrastructure strategy. You have to know how to design strategies for storage, compute, and networking. In each of these areas, you need to choose the right solution, design secure access to the solution, and recommend appropriate management tools.
Preparing for the Exams
Considering the breadth of topics covered in the exams, you will almost certainly be unfamiliar with some of the parts of Azure that you need to know to pass the exams. For example, most people have not had to configure Azure Active Directory Connect, virtual network peering, NoSQL databases, and Azure Event Grid all in the same job.
To fill in the gaps and to review all of the other topics, I recommend taking self-paced courses, getting hands-on experience in a few key areas of Azure, and taking practice exams. The easiest way to do that is to go through Cloud Academy’s AZ-300 and AZ-301 Exam Preparation learning paths. Both of them include video-based courses and a practice exam. The AZ-300 learning path also includes hands-on labs in compute, storage, networking, and security. The AZ-301 learning path, which focuses on concepts rather than configuration, includes additional mini-exams for the compute, data, and networking areas.
Good luck on the exams!
NEW: Custom Hands-On Labs for Azure and Google Cloud Platform
Harvard Business Review recently estimated that some 90% of corporate training never gets applied on the job. Given the $200B training industry, that is a staggering amount of waste. One reason for the disconnect? Lack of context.Cloud Academy’s platform was built to make it extraor...
What is Heroku? Getting Started with PaaS Development
So just what is Heroku? It's a service for developers eager to get their applications online without having to worry about infrastructure details.Metered, pay-as-you-go Cloud Computing services come in all kinds of flavors. Infrastructure as a Service (IaaS) offerings like AWS allow e...
Understanding Object Storage and Block Storage Use Cases
Cloud Computing, like any computing, is a combination of CPU, memory, networking, and storage. Infrastructure as a Service (IaaS) platforms allow you to store your data in either Block Storage or Object Storage formats.Understanding the differences between these two formats - and how ...
Azure Hybrid Identity Authentication Methods
The move to the cloud is picking up steam. As such, many corporations are beginning to find themselves supporting a mixture of on-prem apps as well as cloud apps. Users are finding that they need access to this mix of applications as well. As one would expect, this can become a challe...
Google Cloud Certification: Preparation and Prerequisites
Google Cloud Platform (GCP) has evolved from being a niche player to a serious competitor to Amazon Web Services and Microsoft Azure. In 2018, research firm Gartner placed Google in the Leaders quadrant in its Magic Quadrant for Cloud Infrastructure as a Service for the first time. In t...
Azure Stack Use Cases and Applications
This is the second of a two-part series covering Azure Stack. Our first post provided an introduction to Azure Stack. Why would your organization consider using Azure Stack? What are the key differences between Azure Stack and Microsoft Azure? In this post, we'll begin to answer bot...
Highlights from Microsoft Ignite 2018
Microsoft Ignite 2018 was a big success. Over 26,000 people attended Microsoft’s flagship conference for IT professionals in sunny Orlando, Florida. As usual, Microsoft made a huge number of announcements, ranging from minor to major in importance. To save you the trouble of sifting thr...
Planning for Microsoft Ignite 2018 Sessions: What Not to Miss
Cloud Academy is proud to be a sponsor of the Microsoft Ignite Conference to be held September 24 - 28 in Orlando, Florida. This is Microsoft’s biggest event of the year and is a great way to stay up to date on how to get the most from Microsoft’s products. In this post, I’ll help you p...
How to Optimize Cloud Costs with Spot Instances: New on Cloud Academy
One of the main promises of cloud computing is access to nearly endless capacity. However, it doesn’t come cheap. With the introduction of Spot Instances for Amazon Web Services’ Elastic Compute Cloud (AWS EC2) in 2009, spot instances have been a way for major cloud providers to sell sp...
What are the Benefits of Machine Learning in the Cloud?
A Comparison of Machine Learning Services on AWS, Azure, and Google CloudArtificial intelligence and machine learning are steadily making their way into enterprise applications in areas such as customer support, fraud detection, and business intelligence. There is every reason to beli...
How Does Azure Encrypt Data?
In on-premises environments, data security is typically a siloed activity, with a company's security team telling the internal technology groups (server administration, database, networking, and so on) what needs to be protected against intrusion.This approach is absolutely a bad idea...
Disadvantages of Cloud Computing
If you want to deliver digital services of any kind, you’ll need to compute resources including CPU, memory, storage, and network connectivity. Which resources you choose for your delivery, cloud-based or local, is up to you. But you’ll definitely want to do your homework first. In this...