Microsoft Exam 70-533 Reference Guide

Useful Links

• Azure subscription and service limits, quotas, and constraints
• Azure Documentation Center
• Azure Free Trial

Reference

• Implementing Microsoft Azure Infrastructure Solutions
• Measured Skills
• PDF version of this guide

Design and Implement Azure App Service apps (15-20 %)

Deploy Web Apps

Topics:

• Define deployment slots;
• Roll back deployments;
• Implement pre- and post- deployment actions;
• Create, configure, and deploy packages;
• Create App Service plans;
• Migrate Web Apps between App Service plans;
• Create a Web App within an App Service plan.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/web-sites-deploy/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-staged-publishing/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-backup/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-restore/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-create-web-jobs/
• https://azure.microsoft.com/en-us/documentation/articles/app-service-value-prop-what-is/
• https://azure.microsoft.com/en-us/documentation/articles/azure-web-sites-web-hosting-plans-in-depth-overview/
• https://azure.microsoft.com/en-us/pricing/details/app-service/

Configure Web Apps

Topics:

• Define and use app settings, connection strings, handlers, and virtual directories;
• Configure certificates and custom domains;
• Configure SSL bindings and runtime configurations;
• Manage Web Apps by using Azure PowerShell and Xplat-CLI.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/web-sites-configure/
• https://azure.microsoft.com/en-us/documentation/videos/configuration-and-app-settings-of-azure-web-sites/
• https://azure.microsoft.com/en-us/blog/windows-azure-web-sites-how-application-strings-and-connection-strings-work/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-custom-domain-name/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-configure-ssl-certificate/
• https://blogs.msdn.microsoft.com/waws/2014/03/24/using-azure-traffic-manager-with-azure-web-sites/
• https://azure.microsoft.com/en-us/documentation/articles/traffic-manager-overview/
• https://azure.microsoft.com/en-us/documentation/articles/traffic-manager-endpoints/
• https://azure.microsoft.com/en-us/documentation/articles/traffic-manager-routing-methods/
• https://azure.microsoft.com/en-us/documentation/articles/traffic-manager-powershell-arm/
• https://channel9.msdn.com/Series/Windows-Azure-Web-Sites-Tutorials/Managing-Windows-Azure-Web-Sites-with-PowerShell
• https://azure.microsoft.com/en-us/documentation/articles/xplat-cli-install/
• https://azure.microsoft.com/en-us/documentation/articles/xplat-cli-azure-resource-manager/
• https://azure.microsoft.com/en-us/blog/windows-azure-websites-development-stacks-support/

Configure diagnostics, monitoring, and analytics

Topics:

• Retrieve diagnostics data;
• View streaming logs;
• Configure endpoint monitoring, configure alerts;
• Configure diagnostics;
• Use remote debugging;
• Monitor Web App resources.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/
• https://azure.microsoft.com/en-us/documentation/articles/insights-receive-alert-notifications/
• https://azure.microsoft.com/en-us/documentation/articles/insights-perf-analytics/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-dotnet-troubleshoot-visual-studio/
• https://azure.microsoft.com/en-us/documentation/articles/web-sites-enable-diagnostic-log/
• https://azure.microsoft.com/en-us/documentation/videos/log-streaming-with-azure-web-sites/

Configure Web Apps for scale and resilience

Topics:

• Configure auto-scale using built-in and custom schedules, configure by metric, change the size of an instance, configure Traffic Manager.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/web-sites-scale/
• https://azure.microsoft.com/en-us/documentation/videos/azure-web-sites-free-vs-standard-scaling/
• https://azure.microsoft.com/en-us/documentation/videos/auto-scaling-azure-web-sites/
• https://azure.microsoft.com/en-us/documentation/videos/how-azure-web-sites-scale/

Create and manage Azure Resource Manager Virtual Machines (20-25%)

Deploy workloads on Azure Resource Manager (ARM) virtual machines (VMs)

Topics:

• Identify workloads that can and cannot be deployed;
• Run workloads, including Microsoft and Linux;
• Create VMs;
• Connect to a Windows/Linux VM

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-classic-faq/
• https://azure.microsoft.com/en-us/documentation/services/virtual-machines/
• https://support.microsoft.com/en-us/kb/2721672
• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-windows-hero-tutorial/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-quick-create-cli/
• https://msdn.microsoft.com/en-us/library/azure/dn495240.aspx

Perform configuration management

Topics:

• Automate configuration management by using PowerShell Desired State Configuration (DSC) and VM Agent (custom script extensions);
• Configure VMs using a configuration management tool, such as Puppet or Chef;
• Enable remote debugging.

Resources:

• https://blogs.msdn.microsoft.com/powershell/2014/08/07/introducing-the-azure-powershell-dsc-desired-state-configuration-extension/
• https://azure.microsoft.com/en-us/blog/automating-vm-configuration-using-powershell-dsc-extension/
• https://blogs.msdn.microsoft.com/powershell/2014/04/03/configuring-an-azure-vm-using-powershell-dsc/
• https://www.opsgility.com/blog/2013/11/29/bootstrapping-a-powershell-dsc-pull-server-and-client/
• https://azure.microsoft.com/en-us/blog/automating-vm-customization-tasks-using-custom-script-extension/
• https://blogs.technet.microsoft.com/dcaro/2014/04/22/hands-free-configuration-of-your-vm-in-microsoft-azure/
• https://channel9.msdn.com/Events/Build/2014/2-658
• http://puppetlabs.com/solutions/microsoft
• https://www.chef.io/solutions/windows/
• https://msopentech.com/blog/2014/03/31/using-chef-to-manage-azure-resources/

Design and implement VM storage

Topics:

• Configure disk caching, plan storage capacity, configure operating system disk redundancy, configure shared storage using Azure File service, configure geo-replication, encrypt disks, implement ARM VMs with Standard and Premium Storage

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-classic-create-upload-vhd/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-windows-classic-createupload-vhd/
• https://blogs.technet.microsoft.com/canitpro/2014/05/07/step-by-step-upload-your-own-vhd-to-add-to-the-gallery-in-azure/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-about-disks-vhds/
• https://blogs.msdn.microsoft.com/windowsazurestorage/2013/03/31/azcopy-using-cross-account-copy-blob/
• https://blogs.technet.microsoft.com/uspartner_ts2team/2014/06/09/setting-up-a-file-share-for-the-new-azure-file-service/
• http://blogs.msdn.com/b/windowsazurestorage/archive/2014/05/12/introducing-microsoft-azure-file-service.aspx
• https://azure.microsoft.com/en-us/blog/azure-virtual-machine-disk-encryption-using-cloudlink/
• http://clemmblog.azurewebsites.net/disk-encryption-azure-vms/
• https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/

Monitor ARM VMs

Topics:

• Configure ARM VM monitoring, configure alerts, configure diagnostic and monitoring storage location.

Resources:

• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-monitoring
• https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
• https://docs.microsoft.com/en-us/azure/storage/storage-monitoring-diagnosing-troubleshooting
• https://azure.microsoft.com/en-us/documentation/articles/insights-receive-alert-notifications/
• https://azure.microsoft.com/en-us/documentation/articles/cloud-services-dotnet-diagnostics-performance-counters/
• https://azure.microsoft.com/pt-br/blog/windows-azure-virtual-machine-monitoring-with-wad-extension
• https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview
• https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/azure-diagnostics
• https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-azure-monitor

Monitor ARM VM availability

Topics:

• Configure multiple ARM VMs in an availability set for redundancy, configure each application tier into separate availability sets, combine the Load Balancer with availability sets.

Resources:

• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-availability-set

Scale ARM VMs

Topics:

• Scale up and scale down VM sizes, deploy ARM VM Scale Sets (VMSS), configure ARM VMSS auto-scale.

Resources:

• https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/
• https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-overview

Design and implement a storage strategy (20-25%)

Implement Azure storage blobs and Azure files

Topics:

• Read data, change data, set metadata on a container, store data using block and page blobs, stream data using blobs, access blobs securely, implement async blob copy, configure a Content Delivery Network (CDN), design blob hierarchies, configure custom domains, scale blob storage.

Resources:

• https://azure.microsoft.com/en-us/documentation/services/storage/
• https://azure.microsoft.com/en-us/documentation/articles/storage-create-storage-account/
• https://azure.microsoft.com/en-us/documentation/articles/storage-custom-domain-name/
• https://azure.microsoft.com/en-us/documentation/articles/storage-import-export-service/
• https://azure.microsoft.com/en-us/documentation/articles/cdn-create-new-endpoint/
• https://azure.microsoft.com/en-us/blog/migrating-data-to-microsoft-azure-files/
• https://azure.microsoft.com/en-us/documentation/services/backup/
• https://azure.microsoft.com/en-us/documentation/articles/storage-scalability-targets/
• https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/12/introducing-asynchronous-cross-account-copy-blob/
• https://azure.microsoft.com/en-us/documentation/articles/resiliency-disaster-recovery-high-availability-azure-applications/

Manage access

Topics:

• Create and manage shared access signatures, use stored access policies, regenerate keys.

Resources:

• [https://azure.microsoft.com/en-us/documentation/articles/storage-create-storage-account/]
• https://msdn.microsoft.com/en-us/library/azure/dd179428.aspx
• https://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-1/
• https://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-2/

Configure diagnostics, monitoring, and analytics

Topics:

• Set retention policies and logging levels, analyze logs.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/storage-monitor-storage-account/

Implement Azure SQL Databases

Topics:

• Choose the appropriate database tier and performance level;
• Configure point-in-time recovery, geo-replication, and data sync;
• Import and export data and schema;
• Design a scaling strategy.

Resources:

• https://azure.microsoft.com/en-us/documentation/services/sql-database/
• https://azure.microsoft.com/en-us/blog/choosing-between-sql-server-in-windows-azure-vm-windows-azure-sql-database/
• https://azure.microsoft.com/en-us/documentation/articles/sql-database-service-tiers/
• https://azure.microsoft.com/en-us/documentation/articles/sql-database-geo-replication-overview/
• https://azure.microsoft.com/en-us/blog/azure-sql-database-standard-geo-replication/
• https://azure.microsoft.com/en-us/documentation/articles/sql-database-business-continuity/
• https://azure.microsoft.com/en-us/documentation/articles/sql-database-performance-guidance/
• https://mva.microsoft.com/en-US/training-courses/windows-azure-sql-database-8280

Implement recovery services

Topics:

Create a backup vault, deploy a backup agent, back up and restore data.

Resources:

• https://azure.microsoft.com/en-us/documentation/services/backup/
• https://azure.microsoft.com/en-us/services/site-recovery/
• https://azure.microsoft.com/en-us/documentation/articles/backup-introduction-to-azure-backup/
• https://azure.microsoft.com/en-us/documentation/articles/backup-configure-vault/

Implement an Azure Active Directory (15-20%)

Integrate an Azure Active Directory (Azure AD) with existing directories

Topics:

• Implement Azure AD Connect and single sign-on with on-premises Windows Server 2012 R2, add custom domains, monitor Azure AD.

Resources:

• https://azure.microsoft.com/en-us/documentation/services/active-directory/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/
• https://msdn.microsoft.com/en-us/library/azure/jj573653.aspx
• https://technet.microsoft.com/en-us/library/dn441213.aspx
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-add-domain/
• https://technet.microsoft.com/en-us/library/dn509517.aspx #* https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/
• https://technet.microsoft.com/en-us/library/dn509537.aspx

Configure Application Access

Topics:

• Configure single sign-on with SaaS applications using federation and password based, add users and groups to applications, revoke access to SaaS applications, configure access, configure federation with Facebook and Google ID.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/active-directory-developers-guide/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-integrating-applications/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-saas-access-panel-introduction/
• https://blogs.technet.microsoft.com/enterprisemobility/2013/07/07/application-access-enhancements-for-windows-azure-active-directory/
• https://blogs.technet.microsoft.com/enterprisemobility/2014/05/21/identity-and-access-management-for-the-cloud/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-manage-groups/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-accessmanagement-manage-groups/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-administer/
• https://msdn.microsoft.com/library/azure/hh147631.aspx
• https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-cloud/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-view-access-usage-reports/
• https://msdn.microsoft.com/en-us/library/hh446535.aspx
• https://azure.microsoft.com/en-us/documentation/articles/fundamentals-identity/

Integrate an app with Azure AD

Topics:

• Implement Azure AD integration in web and desktop applications, leverage Graph API.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/active-directory-authentication-scenarios/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-developers-guide/
• https://msdn.microsoft.com/en-us/library/azure/hh974476.aspx
• https://github.com/Azure-Samples/active-directory-dotnet-graphapi-web
• https://github.com/Azure-Samples/active-directory-dotnet-webapp-openidconnect
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-appssoaccess-whatis/
• https://azure.microsoft.com/en-us/documentation/samples/active-directory-dotnet-native-desktop/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-devquickstarts-dotnet/
• https://azure.microsoft.com/en-us/documentation/articles/active-directory-protocols-oauth-code/

Implement Azure AD B2C and Azure B2B

Topics:

• Create an Azure AD B2C Directory, register an application, implement social identity provider authentication, enable multi-factor authentication, set up self-service password reset, implement B2B collaboration, configure partner users, integrate with applications.

Resources:

• https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-overview
• https://docs.microsoft.com/en-us/azure/active-directory/active-directory-b2b-what-is-azure-ad-b2b
• https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-app-registration
• https://docs.microsoft.com/en-us/azure/active-directory-b2c/
• https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-reference-sspr
• https://docs.microsoft.com/en-us/azure/active-directory/active-directory-create-users-external

Implement Virtual Networks (10-15%)

Configure virtual networks

Topics:

• Deploy a VM into a virtual network;
• Configure external and internal load balancing;
• Implement Application Gateway;
• Design subnets;
• Configure static, public, and private IP addresses;
• Set up Network Security Groups (NSGs), DNS at the virtual network level, HTTP and TCP health probes, public IPs, User Defined Routes (UDRs), firewall rules, and direct server return.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-acl/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-reserved-private-ip/
• https://azure.microsoft.com/en-us/documentation/services/virtual-network/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-create-vnet-arm-pportal/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-network-ip-addresses-overview-arm/
• https://azure.microsoft.com/en-us/documentation/articles/load-balancer-overview/
• https://azure.microsoft.com/en-us/documentation/articles/load-balancer-internal-overview/
• https://azure.microsoft.com/en-us/blog/microsoft-azure-load-balancing-services/
• https://azure.microsoft.com/en-us/blog/new-configurable-idle-timeout-for-azure-load-balancer/
• https://www.opsgility.com/blog/windows-azure-powershell-reference-guide/using-the-internal-load-balancer-with-azure-virtual-machines/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-overview/
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
• https://www.opsgility.com/blog/windows-azure-powershell-reference-guide/setting-static-ip-addresses-in-a-virtual-network/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-name-resolution-for-vms-and-role-instances/
• https://azure.microsoft.com/en-us/blog/network-isolation-options-for-machines-in-windows-azure-virtual-networks/
• https://blogs.msdn.microsoft.com/mcsuksoldev/2014/03/04/creating-a-dns-server-in-azure-iaas/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-windows-portal-sql-alwayson-int-listener/

Modify network configuration

Topics:

• Modify subnets, NSGs, and UDRs

Resources:

• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-nsg-arm-portal
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-nsg

Design and implement a multi-site or hybrid network

Topics:

• Choose the appropriate solution between ExpressRoute, site-to-site, and point-to-site;
• Choose the appropriate gateway;
• Identify supported devices and software VPN solutions;
• Identify networking prerequisites;
• Configure virtual networks and multi-site virtual networks.

Resources:

• https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-cross-premises-options/
• https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-about-vpn-devices/
• https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-multi-site/
• https://azure.microsoft.com/en-us/documentation/articles/hdinsight-hbase-geo-replication-configure-vnets/
• https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-vnet-vnet-rm-ps/
• https://azure.microsoft.com/en-us/documentation/articles/guidance-hybrid-network-vpn/
• https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-create-vnet-arm-pportal/

Design and deploy ARM templates (10-15%)

Implement ARM templates

Topics:

• Author ARM templates;
• Create ARM templates to deploy ARM Resource Providers resources;
• Deploy templates with PowerShell, CLI, and REST API.

Resources:

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy-portal
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy-cli
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy-rest
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-create-first-template

Control access

Topics:

• Leverage service principles with ARM authentication, use Azure Active Directory Authentication with ARM, set management policies, lock resources

Resources:

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-create-service-principal-portal
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Design role-based access control (RBAC)

Topics:

• Secure resource scopes, such as the ability to create VMs and Azure Web Apps; implement Azure role-based access control (RBAC) standard roles;
• Design Azure RBAC custom roles.

Resources:

• https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-what-is
• https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles
• https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-configure
• https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-custom-roles
• https://blogs.msdn.microsoft.com/uk_faculty_connection/2017/05/30/role-based-access-control-and-azure-subscription-guid/
• https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-create-custom-roles-for-internal-external-users