Exam Overview 70-533 Implementing Azure Infrastructure Solutions

Gustavo Zimmermann | MVP in Cloud and Datacenter
Management
@gustavopercio

Recursos para certificação
Management
@gustavopercio

Free Credits
on Azure!
https://azure.microsoft.com/en-us/free/

Visual Studio Dev Essentials = $25/mês
https://www.visualstudio.com/dev-essentials/

Oferta Certificação
Até 30 de junho de 2017, você pode!
https://www.microsoft.com/pt-br/learning/azure-certification-training.aspx

Certification Overview
Management
@gustavopercio

Roadmap – Azure Certification

Roadmap – Azure Certification
aka.ms/azure/mcsd
aka.ms/mcsecloud

How to prepare and take the Exam
Almost everything written that you need can be found at azure.microsoft.com
Caveat Emptor! Anything not in the exam 70-533 exam objectives, future “previews”, or really old (ASM)
Get a Free trial account.
Microsoft Virtual Academy (MVA)
USE THIS DECK and the links plus the Ignite Decks
Select all of the questions for a particular topic, then click END.
Review all the answers right and wrong
Have a mental cheat sheet
Right before you start – DUMP IT on the paper they give you for notes

Module 1
Design and Implement
Azure App Service Apps
Management
@gustavopercio

aka.ms/Azure/AppService
Design and Implement Azure App Service Apps

Deploy WebApps
– Region
– Scale
– Instance Count
– SKU
– App Service Environment (ASE)
– No Slots in Basic!
– Scale Up, Scale Out
– Can’t change Free until remove
spending limits first!

WebApps Deployment
Powered by Kudu Deployment Engine
Integrated with App Service
Select OneDrive (AppsAzure Web Apps )or DropBox (DropboxAppsAzure)
as deployment source
Continuous deployment workflow
Deployment Source Control Options
BitBucket, GitHub, and Visual Studio Team Services
Best for integration of frequent/multiple contributions
Disable with Disconnect option in deployment
Development Stack…
Read more

Local Git Deployment
Can use cmd program like GitBash, Bash (UNIX) or Terminal (OSX)
Intiialize it with git init
If no repository content, create index.hml
Add the files to the repository git add -A
Commit the changes to the repository git commit -m "Hello Azure App Service“
If first time, need to setup deployment credentials Settings>Deployment>Credentials from the App’s blade
Click Settings>Properties for the Git URL. Use git remote to add the remote reference listed in Git URL.
Push content with git push azure master

Deploy WebApps
– Need Standard or Premium
– Staging Environments
– Swap Slots between environments
– Auto Swap Option
– With >1 slot, cannot change App Service Plan
– From cloud folder to Azure App Service
– Use Kudu Deployment Engine
– Git or FTP
– Username/Password for ALL subscriptions

Post Deployment Options
Anonymous
Azure AD
Social Providers
Scale Up – pricing tiers
Custom Domains, Certs, staging slots, autoscaling
Scale Out – Instance, CPU, Perf
Up to 20 instances per tier
Azure CDN
Metrics
Events

Migrate Web Apps Between Plans
App is resource intensive
Requires different scaling options than other apps in plan
Needs resources in different geo
Must be same Resource Group
And Geographical Region
To move to different region
A plan with no apps, still charges!
Deleting last app in plan, deletes the plan

App Service Environment (ASE)
Premium Service Plan
High Scale
Network Isolation
P1-P4 sizes
Dedicated to a single subscription
Up to 50 compute resources per application
Up to 3 worker pools (plus front end pool) per ASE e.g. dev/test/prod
V1 or V2
Only ASE in VNet with 8 or more addresses
Can’t change address range once created

Configure WebApps
– Frameworks | .Net, .PHP, Java, Python | Enabling Java for
app disables the others!
– Free or Shared 32 Bit | Basic or Standard 64 Bit
– In Basic/Standard can enable Always On
– Auto Swap | updates to slot will push to Production
– Application Logging (lasts 12 hours)
– Web Server Logging (W3C extended log format)
– Detailed Error Messages saved in /LogFiles/DetailedErrors
– Failed Request Tracing (XML)
– FTP download Logs

Configure WebApps
– Basic or Standard mode only
– Upload SSL certs for custom domain names
Requires Shared, Basic or Standard modes!
1. Reserve Domain Name
2. Create DNS record to map DNS to Azure Web App
3. Add Domain Name in Azure Portal
Can map subdomains to different web apps
– Only Basic or Standard modes
– HTTP/S endpoints > 3 geo-distributed locations

PowerShell AzureRMWebApp*
Verbs Nouns
Edit BackupConfiguration
Get Backup, Metrics, Slot, SSL Binding
New Backup, Slot, SSL Binding
Remove Backup, Slot, SSL Binding
Reset PublishingProfile, SlotPublishingProfile
Restart Slot
Restore Backup
Set Slot, SlotConfigName,
Start Slot
Stop Slot
See ALL Azure Website cmdlets

Manage WebApps | Xplat-CLI
To list the commands available for Azure WebApps in the xplat-cli,
Azure site create MSIgnite2016
Azure site list
delete
See moreSee Use the Azure CLI for Mac, Linux, and Windows with Azure Resource Manager

Module 2
Implement Virtual Machines
Management
@gustavopercio

aka.ms/Azure/VM
aka.ms/Azure/VMSS

Deploy and Connect to Linux VM
Secure with SSH public key
Create or Select Resource Group
Select VM Size, Storage
Consider OS Patching VM Extension
RBAC for DevOps
See Best Practices
see more
Version 0.90 or greater
Switch to ARM mode azure config mode arm
Quick Test and Setup with azure vm quick-create
Can use Parameters and Template also
Custom VM Image possible
Prepare and Upload the Image
Create a VM running Windows. Create a VM running Linux

Create and Upload Custom VHDs
1. Sysprep VHD – OOBE and “Generalized”
2. Create Storage Account and Container
3. Upload VHD file | local source file > blob storage URL
4. Add Image to Custom images list… Add-AzureVMImage
Can now create VM with ARM Template or by command line
Must be Linux on Azure Endorsed
1. Create a Resource Group
2. Create a Storage Account
3. List Access Keys
4. Create containers with Access Keys above
5. Upload VHD to container – QEMU or KVM to convert to VHD
Can now create VM with ARM Template or by CLI
Read more

Perform Configuration Management
PS – Find, Create, Delete.
DSC – w Azure Extension
Custom Script Exts Helper Extensions e.g.BGInfo, VMAccess, VMM
Chef
– Resources managed by code-based “Recipes”
• Reusable definitions for tasks
Puppet
– “Puppet Master” pre-configured on Ubuntu server
– “Puppet Enterprise” Agent – install as agent
See “About Azure VM Configuration settings” & “Manage Images Using PowerShell”

Fault and Update Domains
Read more

Design and implement VM storage
Azure Security Center will check
see Setup Script
PowerShell or CLI
Cryptographic Keys in Key Vault
aka.ms/azure/DiskEncryption
Portal, PSH, CLI & RestAPI
Can apply SAS and policies
Quota up to 5120GB
Save Credentials in app.config
aka.ms/Azure/Files and AZCopy
Only LRS/GRS. Port 445 on-prem to Files w/o ER
see FAQ

VM Scale Sets
Change Capacity property
Match SKU in template
<20 VMs per Storage Account
“overprovision” set to false
w/ managed disks -1,000’s!
Linux/Windows
Portal
Visual Studio 2013/5 + SDK
PowerShell or Azure CLI
See aka.ms/Azure/VMSS

Design and implement VM storage
LRS – 3 local copies
ZRS – 3 copies w/in a region
GRS is recommended
over ZRS or LRS for maximum durability.
= 6 copies of data – three times each in two
data centers “Paired Regions”
RA-GRS (Default for new)
Read-Access geo-redundant
allows read access at secondary.
NOTE:
– Can Change Replication type
aka.ms/Azure/Replication

Module 3
Design & Implement Storage
Management
@gustavopercio

Ad Hoc SAS SAS controlled by Stored Access Policy
Delegated access Blobs, Queues, Tables
URI format permissions specified time | signedidentifier specifies Stored Access Policy
Best Practice to use with SAS
5 policies per Container
Share Access Signatures, Pt 1 | Stored Access Policies

Minimal
Blob Table Queue
Verbose
Off
blob container $logs
Blob svc API Read more on logs!
See Monitor Storage Account

Reference
Storage Explorer
Any apps used by this – you’ll need to update the storage key
Applications
Web apps using storage will lose connection unless you roll the keys
Media Services
Resync access keys with media service after regenerate keys

Resource Health Alerts
See aka.ms/Azure/CDN

Geo-Restore & Point in Time
BACPAC Storage Account | Use Export Data-tier Application Wizard
Automated Exports & Also Can Import/Export using REST API
DAC package BACPAC
BACPAC both schema and data,
DAC packages only schema SSDT
Read More

Elastic Pool
aka.ms/azure/SQLRestore

Module 4
Implement Azure Active Directory
Management
@gustavopercio

aka.ms/Azure/AD
aka.ms/Azure/SSO
aka.ms/Azure/B2C
aka.ms/Azure/B2B

Integrate an Azure AD with existing directories
User attributes are synchronized including the password
hash, Authentication can be completed against either
Azure or Windows Server Active Directory
User attributes are synchronized, Authentication is
passed back through federation and completed
against Windows Server Active Directory
Synchronization
Federation
AD FS provides conditional access to
resources, Work Place Join for device
registration and integrated Multi-Factor
Authentication
*Write back of attributes to support
cloud first and co-existence

aka.ms/Azure/ADReports aka.ms/Azure/ADReporting

Prerequisites
aka.ms/Azure/SSPR aka.ms/Azure/SSPRSetup

http://myapps.microsoft.com
contosobuild.com
Read more…

REST API Endpoint
CRUD operations
must register APP with AAD
Query an Azure AD directory using the Graph API

Invite users
New-AzureADMSInvitation
optional fields
aka.ms/Azure/B2B

Module 5
Implement Virtual Networks
Management
@gustavopercio

Get-AzureRmDnsZone –Name contoso.net –ResourceGroupName MyResourceGrou
aka.ms/Azure/DNS

www.yourapp.com
Performance - Direct to “closest” service based on network latency
Round-robin - Distribute equally across all services
Failover - Direct to “backup” service if primary fails
—also included in other policies

Address spaces – Private/RFC1918 & Public IP*
Multi-tier subnet topology
Bring your own AD & DNS
Linux, virtual appliances, & Windows
Azure Virtual Network
VPN
GW
Frontend
10.1/16
Mid-tier
10.2/16
Backend
10.3/16
Internet
On Premises
10.0/16
S2S VPNs &
ExpressRoute
Direct Internet
Connectivity

Test-AzureRMStaticVNetIP –VNetName TestVNet –IPAddress 192.168.4.7
see all PS Examples
Existing virtual networks that have been configured for an affinity group cannot use ILB
Read More

Module 6
Design & Deploy ARM Templates
Management
@gustavopercio

aka.ms/Azure/ARM
aka.ms/Azure/RBAC

{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters" : {
"storageAccountName": {
"type": "string",
"metadata": {
"description": "Storage Account Name"
}
}
},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"name": "[parameters('storageAccountName')]",
"apiVersion": "2015-06-15",
"location": "[resourceGroup().location]",
"properties": {
"accountType": "Standard_LRS"
}
}
]
}

# create a new resource group
# deploy the template to the resource group
Read more

azure group create -n ExampleResourceGroup -l "West Europe"
azure group deployment create -f azuredeploy.json -g
ExampleResourceGroup -n ExampleDeployment
Read more

aka.ms/Azure/Policies
http://aka.ms/Azure/Locks

©2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the
U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft
must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after
the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Exam Overview 70-533 Implementing Azure Infrastructure Solutions

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Exam Overview 70-533 Implementing Azure Infrastructure Solutions

Similar to Exam Overview 70-533 Implementing Azure Infrastructure Solutions (20)

Recently uploaded

Recently uploaded (20)

Exam Overview 70-533 Implementing Azure Infrastructure Solutions

Editor's Notes