Azure Container Service: Containerized Applications Go Mainstream
Just the other week at AzureCon, the Azure team announced the next phase of their support for containerized applications on Azure. The Azure Contai...Learn More
Microsoft Azure is the fastest growing cloud provider. Azure’s revenue grew an incredible 76% in the last quarter of 2018. As more and more businesses move their IT infrastructure to Microsoft’s cloud platform, the demand for Azure professionals keeps rising. Since there are relatively few people with extensive Azure experience, many employers rely on certifications as evidence that a candidate has the required knowledge and skills.
Up until the end of 2018, Microsoft had 3 primary exams to test Azure knowledge: 70-532, 70-533, and 70-535. All of those exams have now been retired. Why? Microsoft received a lot of feedback that those exams were too broad, covering a range of skills that few IT professionals would have. So, Microsoft researched how people in different roles use Azure, and then they completely overhauled their certifications.
The result is that Microsoft now has a larger number of role-based Azure certifications. The roles include Administrator, Developer, Architect, DevOps Engineer, and Security Engineer, with more to come.
Cloud Architect is a key role that’s in high demand. So what do cloud architects do? Here’s a quick summary from Cloud Roster, the job roles matrix from Cloud Academy:
“A Cloud Architect is responsible for converting the technical requirements of a project into the architecture and design that will guide the final product.”
The Microsoft Azure Solutions Architect certification has more specific requirements:
“Candidates should have advanced experience and knowledge across various aspects of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data management, budgeting, and governance. . . . Candidates must be proficient in Azure administration, Azure development, and DevOps, and have expert-level skills in at least one of those domains.”
Wait a minute. That’s an incredibly wide range of topics. Didn’t Microsoft say that its new certifications would be narrower than the previous ones? Well, that’s true for the Associate-level certifications, such as Administrator and Developer, but not for Expert-level certifications like Solutions Architect.
To obtain the Azure Solutions Architect certification, you need to pass two exams: AZ-300 and AZ-301. You do not need to pass any Associate-level exams before taking these ones. The AZ-300 exam focuses on Azure technologies, and the AZ-301 exam focuses on design.
Here are the topics covered in the AZ-300 exam and the relative weight of each section:
The first section is the biggest, and it covers a wide variety of topics, including storage, virtual machines, networking, and Azure Active Directory. You have to know these topics in great depth for the exam. For example, in addition to knowing how to create a virtual machine, you also need to know how to make it highly available and how to automate VM deployment using Azure Resource Manager. In the network area, you need to know how to connect virtual networks together using VNET peering and virtual network gateways. In the Azure Active Directory area, you need to know how to synchronize Azure AD with an on-premises Active Directory server and also enable single sign-on.
The next section is on implementing workloads and security. You need to know how to connect your on-premises network to an Azure virtual network and how to migrate your on-premises servers to Azure using Site Recovery. Once you have applications in Azure, you’ll usually want to implement load balancing, which helps improve both performance and availability, so that’s an important topic, too. In the security area, you have to be able to make it harder for hackers to get in by using multi-factor authentication, and you also need to know how to limit each user’s access level to only as much as they need by using role-based access control.
The third section is one of the shortest. It covers creating and deploying apps using either Azure App Service or Azure Container Service.
The fourth section is also short, and it covers two main topics. The first is how to implement authentication using a variety of different methods. One especially important concept is Managed Identity (which used to be called Managed Service Identity). This makes it easy to authenticate an application so it can access other services. The second major topic in this section is how to encrypt your data. One of the most important concepts in this area is how to use Azure Key Vault, which is where you can store your cryptographic keys.
The final section covers how to develop for the cloud. One of the greatest features of the cloud is autoscaling. Instead of having to provision enough compute power to handle peaks, you can just tell Azure to add and remove compute resources based on the demand. You have to be careful how you configure autoscaling, though, because if you don’t set up the rules correctly, it could have a big impact on your application’s performance and cost.
Another great feature of Azure is how easy it is to set up messaging between your applications. Azure has messaging services for every need, including Event Grid, Service Bus, Relay Service, Event Hub, and Notification Hub. You need to know all of them for the exam.
Here are the topics covered in the AZ-301 exam:
In my opinion, AZ-301 is more difficult than AZ-300 because you need to apply a deep knowledge of IT architecture to Azure solution designs. This is especially true of the first section of the exam, which expects you to have some general knowledge of a wide variety of subjects about designing IT environments, such as capacity planning, governance, and maintainability. The more Azure-specific topics in this section are optimizing Azure costs and designing a monitoring strategy.
The second section is on designing for identity and security. Not surprisingly, the focus is on how to use Azure Active Directory. In a large organization, there are many identities to manage. This includes not only users but also applications. To manage them effectively and securely, you need to design a proper identity management system. You also need to set up authentication for all of these identities, usually including single sign-on for your users. After a user or application is authenticated, it needs to be granted the right level of authorization to access Azure resources.
The third section is on designing data solutions. Azure includes many different data services, including relational databases, non-relational databases, data warehouses, data lakes, and many other related services. You’ll need to know when to choose each of the data services, how to size them, and how to design for data protection, availability, consistency, and durability. You’ll also need to know how to design and document how data flows between the various services.
The fourth section is on designing a business continuity strategy. The two most important concepts are high availability and disaster recovery. You can design for high availability using various levels of redundancy. For disaster recovery, the two most important services to know are Azure Site Recovery and Azure Backup.
The fifth section is one of the smallest. The subject is how to design for deployment, migration, and integration. It’s about migrating from an on-premises environment to an Azure environment, designing a repeatable way to deploy Azure resources, and integrating your applications using services such as Azure API Management.
The final section is on designing an infrastructure strategy. You have to know how to design strategies for storage, compute, and networking. In each of these areas, you need to choose the right solution, design secure access to the solution, and recommend appropriate management tools.
Preparing for the Exams
Considering the breadth of topics covered in the exams, you will almost certainly be unfamiliar with some of the parts of Azure that you need to know to pass the exams. For example, most people have not had to configure Azure Active Directory Connect, virtual network peering, NoSQL databases, and Azure Event Grid all in the same job.
To fill in the gaps and to review all of the other topics, I recommend taking self-paced courses, getting hands-on experience in a few key areas of Azure, and taking practice exams. The easiest way to do that is to go through Cloud Academy’s AZ-300 and AZ-301 Exam Preparation learning paths. Both of them include video-based courses and a practice exam. The AZ-300 learning path also includes hands-on labs in compute, storage, networking, and security.
Watch this short video for an overview of the AZ-300 Exam Preparation:
The AZ-301 learning path, which focuses on concepts rather than configuration, includes additional mini-exams for the compute, data, and networking areas.
Watch this short video for an overview of the AZ-301 Exam Preparation:
Good luck with the exams!
Microsoft Azure is one of the hottest cloud services on the planet, and it’s growing at a phenomenal rate. This rapid growth has created a huge demand for people who know how to administer and manage Azure implementations.To make it easier for employers to verify the skills of Azure...
Microsoft has offered Azure certification exams for years, but until recently, they were all meant for technical IT professionals. Now non-technical professionals, such as salespeople and managers, can take the new AZ-900 exam to prove their understanding of Azure fundamentals. People w...
Archive StorageArchive Storage offers the lowest storage costs of all Azure storage. Its retrieval costs, however, are higher when compared to Hot and Cool storage. The archive tier of storage is designed for data that can tolerate several hours of latency when being retrieved. It’s a...
Welcome to part one of our series on Azure Storage. Stay tuned for the second part. An Overview of Azure StorageMicrosoft Azure Storage is a cloud-based storage offering that provides multiple storage solutions for organizations. In addition to a massively scalable object store for ...
Harvard Business Review recently estimated that some 90% of corporate training never gets applied on the job. Given the $200B training industry, that is a staggering amount of waste. One reason for the disconnect? Lack of context.Cloud Academy’s platform was built to make it extraor...
So just what is Heroku? It's a service for developers eager to get their applications online without having to worry about infrastructure details.Metered, pay-as-you-go Cloud Computing services come in all kinds of flavors. Infrastructure as a Service (IaaS) offerings like AWS allow e...
Cloud Computing, like any computing, is a combination of CPU, memory, networking, and storage. Infrastructure as a Service (IaaS) platforms allow you to store your data in either Block Storage or Object Storage formats.Understanding the differences between these two formats - and how ...
What are Azure Blueprints?Blueprints, in the traditional sense, are used by architects and engineers to design and build new things. They are used to ensure that the final products are built to specifications and in compliance with certain standards and requirements.Azure Bluepri...
The move to the cloud is picking up steam. As such, many corporations are beginning to find themselves supporting a mixture of on-prem apps as well as cloud apps. Users are finding that they need access to this mix of applications as well. As one would expect, this can become a challe...
As Head of Content at Cloud Academy I work closely with our customers and my domain leads to prioritize quarterly content plans that will achieve the best outcomes for our customers.We started 2018 with two content objectives: To show customer teams how to use Cloud Services to solv...
IoT, or the ‘Internet of Things’, is an intriguing and rapidly growing technology that's bringing significant change to important elements of modern life. According to Gartner, IoT security spending alone is set to reach $1.5 billion during 2018.Like many newly minted terms, the def...
Azure Storage is a managed cloud storage offering from Microsoft. It provides a scalable store for data objects, a cloud-based file system, and even provides a messaging and NoSQL store. As a managed service, maintenance and support is handled by Microsoft Azure, taking the care and f...