AZ-303 Azure Architect Technologies : Study Guide

I passed my AZ-303 exam in June 2021. The exam consisted of around MCQs and 1 case study. You can find my badge here :

AZ-303 Microsoft Azure Architect Technologies was issued by Microsoft to Mohommed Rimaz Ramalie…

What follows is the study guide I created based on the exam skills outline to help me prepare. Hope this helps you too. Cheers!

Implement and Monitor an Azure Infrastructure (50–55%)

Implement cloud infrastructure monitoring

Basics

• https://docs.microsoft.com/en-us/azure/azure-monitor/overview
• https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview
• https://docs.microsoft.com/en-us/learn/modules/design-monitoring-strategy-on-azure/
• https://docs.microsoft.com/en-us/learn/modules/incident-response-with-alerting-on-azure/

Monitor security

• https://docs.microsoft.com/en-us/learn/modules/secure-vms-with-azure-security-center/
• https://docs.microsoft.com/en-us/learn/modules/identify-threats-with-azure-security-center/
• https://docs.microsoft.com/en-us/learn/modules/resolve-threats-with-azure-security-center/
• https://docs.microsoft.com/en-us/learn/modules/monitor-report-aad-security-events/

Monitor performance

• https://docs.microsoft.com/en-us/azure/azure-monitor/app/azure-web-apps?tabs=net
• https://docs.microsoft.com/en-us/learn/modules/instrument-web-app-code-with-application-insights/
• https://docs.microsoft.com/en-us/learn/modules/capture-page-load-times-application-insights/

Monitor health and availability

• https://docs.microsoft.com/en-us/azure/azure-monitor/app/monitor-web-app-availability
• https://docs.microsoft.com/en-us/learn/modules/app-service-autoscale-rules/

Monitor cost

• https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/quick-acm-cost-analysis?tabs=azure-portal
• https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending
• https://docs.microsoft.com/en-us/learn/modules/analyze-costs-create-budgets-azure-cost-management/

Configure advanced logging

• https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/
• https://docs.microsoft.com/en-us/learn/modules/aspnet-logging/
• https://docs.microsoft.com/en-us/learn/modules/analyze-infrastructure-with-azure-monitor-logs/

Initiate automated responses by using Action Groups

• https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups

Configure and manage advanced alerts

• https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log

Implement storage accounts

Select storage account options based on a use case

• https://docs.microsoft.com/en-us/learn/modules/choose-storage-approach-in-azure/
• https://docs.microsoft.com/en-us/learn/modules/create-azure-storage-account/

Configure Azure Files and Azure Blob storage

• https://docs.microsoft.com/en-us/learn/modules/store-and-share-with-azure-files/

Configure network access to the storage account

• https://docs.microsoft.com/en-us/learn/modules/secure-azure-storage-account/

Implement Shared Access Signatures and access policies

• https://husseinsalman.com/securing-access-to-azure-storage-part-4-shared-access-signature/
• https://husseinsalman.com/securing-access-to-azure-storage-part-5-stored-access-policy/

Implement Azure AD authentication for storage

• https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad

Manage access keys

• https://docs.microsoft.com/en-us/learn/modules/secure-azure-storage-account/

Implement Azure storage replication | Implement Azure storage account failover

• https://docs.microsoft.com/en-us/learn/modules/ha-application-storage-with-grs/2-storage-account-replication-features

Implement VMs for Windows and Linux

Configure High Availability

• https://docs.microsoft.com/en-us/azure/virtual-machines/availability-set-overview
• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
• https://docs.microsoft.com/en-us/azure/availability-zones/az-overview?context=/azure/virtual-machines/context/context

Configure storage for VMs

• https://docs.microsoft.com/en-us/learn/modules/choose-the-right-disk-storage-for-vm-workload/

Select virtual machine size

• https://docs.microsoft.com/en-us/learn/modules/create-linux-virtual-machine-in-azure/
• https://docs.microsoft.com/en-us/learn/modules/create-windows-virtual-machine-in-azure/
• https://docs.microsoft.com/en-us/learn/modules/manage-virtual-machines-with-azure-cli/

Implement Azure Dedicated Hosts

• https://www.altaro.com/hyper-v/azure-dedicated-host/
• https://www.vembu.com/blog/an-overview-of-creating-azure-dedicated-hosts/

Deploy and configure scale sets

• https://docs.microsoft.com/en-us/learn/modules/build-app-with-scale-sets/

Configure Azure Disk Encryption

• https://docs.microsoft.com/en-us/learn/modules/secure-your-azure-virtual-machine-disks/

Automate deployment and configuration of resources

Save a deployment as an Azure Resource Manager template

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal

Modify Azure Resource Manager template

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-cli
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-powershell
• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-visual-studio-code?tabs=CLI

Evaluate location of new resources

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-location?tabs=azure-powershell

Configure a VHD template

• https://docs.microsoft.com/en-us/learn/modules/deploy-vms-from-vhd-templates/

Deploy from a template

• https://docs.microsoft.com/en-us/learn/modules/build-azure-vm-templates/

Manage an image library

• https://docs.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries
• https://azure.microsoft.com/en-us/blog/azure-shared-image-gallery-now-generally-available/

Create and execute an automation runbook

• https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-create-account
• https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-create-runbook

Implement virtual networking

Implement VNet to VNet connections

• https://docs.microsoft.com/en-us/learn/modules/connect-on-premises-network-with-vpn-gateway/
• https://docs.microsoft.com/en-us/learn/modules/connect-on-premises-network-with-expressroute/
• https://docs.microsoft.com/en-us/learn/modules/control-network-traffic-flow-with-routes/
• https://docs.microsoft.com/en-us/learn/modules/design-ip-addressing-for-azure/

Implement VNet peering

• https://docs.microsoft.com/en-us/learn/modules/integrate-vnets-with-vnet-peering/

Implement Azure Active Directory

Basics

• https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-ad/
• https://docs.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/

Add custom domains

• https://docs.microsoft.com/en-us/learn/modules/add-custom-domain-name-azure-active-directory/

Configure Azure AD Identity Protection

• https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection
• https://docs.microsoft.com/en-us/learn/modules/protect-identities-with-aad-idp/
• https://docs.microsoft.com/en-us/learn/modules/m365-identity-cultural-shift/

Implement self-service password reset

• https://docs.microsoft.com/en-us/learn/modules/allow-users-reset-their-password/

Implement conditional access including MFA

• https://docs.microsoft.com/en-us/learn/modules/secure-aad-users-with-mfa/
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Configure fraud alerts

• https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#fraud-alert

Configure verification methods

• https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#verification-methods

Implement and manage guest accounts

• https://docs.microsoft.com/en-us/learn/modules/manage-users-and-groups-in-aad/

Manage multiple directories

• https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-access-create-new-tenant

Implement and manage hybrid identities

Install and configure Azure AD Connect

• https://docs.microsoft.com/en-us/learn/modules/implement-azure-ad-connect/

Identity synchronization options

• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identity
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

Configure and manage password sync and password writeback

• https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback
• https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

Configure single sign-on

• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

Configure Azure AD Connect cloud sync

• https://docs.microsoft.com/en-us/azure/active-directory/cloud-sync/what-is-cloud-sync
• https://docs.microsoft.com/en-us/azure/active-directory/cloud-sync/tutorial-pilot-aadc-aadccp

Use Azure AD Connect Health

• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-agent-install
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-roadmap

Implement Management and Security Solutions (25%-30%)

Manage workloads in Azure

Migrate workloads using Azure Migrate

• https://docs.microsoft.com/en-us/learn/modules/design-your-migration-to-azure/

Implement Azure Backup for VMS

• https://docs.microsoft.com/en-us/learn/modules/protect-virtual-machines-with-azure-backup/

Implement disaster recovery

• https://docs.microsoft.com/en-us/learn/modules/protect-on-premises-infrastructure-with-azure-site-recovery/
• https://docs.microsoft.com/en-us/learn/modules/protect-infrastructure-with-site-recovery/

Implement Azure Automation Update Management

• https://docs.microsoft.com/en-us/learn/modules/manage-azure-updates/

Implement load balancing and network security

Implement Azure Load Balancer

• https://docs.microsoft.com/en-us/learn/modules/improve-app-scalability-resiliency-with-load-balancer/

Implement an Azure application Gateway

• https://docs.microsoft.com/en-us/learn/modules/load-balance-web-traffic-with-application-gateway/

Implement Web Application Firewall

• https://docs.microsoft.com/en-us/learn/modules/introduction-azure-web-application-firewall/
• https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview

Implement Azure Firewall

• https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

Implement Azure Firewall Manager

• https://docs.microsoft.com/en-us/azure/firewall-manager/overview
• https://docs.microsoft.com/en-us/azure/firewall-manager/policy-overview
• https://docs.microsoft.com/en-us/azure/firewall-manager/deployment-overview
• https://docs.microsoft.com/en-us/azure/firewall-manager/secure-cloud-network

Implement Azure Front Door

• https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-front-door/
• https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview
• https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door
• https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

Implement Azure Traffic Manager

• https://docs.microsoft.com/en-us/learn/modules/distribute-load-with-traffic-manager/

Implement Network Security Groups | Implement Application Security Groups

• https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/

Implement Bastion

• https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-bastion/
• https://docs.microsoft.com/en-us/learn/modules/connect-vm-with-azure-bastion/

Implement and manage Azure governance solutions

Create and manage hierarchical structure that contains management groups, subscriptions and resource groups

• https://docs.microsoft.com/en-us/learn/modules/build-cloud-governance-strategy-azure/
• https://docs.microsoft.com/en-us/azure/governance/management-groups/overview
• https://docs.microsoft.com/en-us/azure/governance/management-groups/create-management-group-portal
• https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription

Assign RBAC roles

• https://docs.microsoft.com/en-us/learn/modules/secure-azure-resources-with-rbac/

Create a custom RBAC role | Configure access to Azure resources by assigning roles

• https://docs.microsoft.com/en-us/learn/modules/create-custom-azure-roles-with-rbac/

Configure management access to Azure

• https://docs.microsoft.com/en-us/learn/modules/control-and-organize-with-azure-resource-manager/
• https://docs.microsoft.com/en-us/learn/modules/manage-subscription-access-azure-rbac/

Interpret effective permissions

• https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions
• https://docs.microsoft.com/en-us/azure/role-based-access-control/check-access

Set up and perform an access review

• https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-start-security-review
• https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-perform-security-review

Implement and configure Azure Policy

• https://docs.microsoft.com/en-us/learn/modules/build-cloud-governance-strategy-azure/8-control-audit-resources-azure-policy

Implement and configure Azure Blueprints

• https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
• https://docs.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal

Manage Security for applications

Implement and configure key vault

• https://docs.microsoft.com/en-us/learn/modules/configure-and-manage-azure-key-vault/
• https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/
• https://docs.microsoft.com/en-us/azure/storage/common/customer-managed-keys-configure-key-vault?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json&tabs=portal
• https://docs.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli
• https://docs.microsoft.com/en-us/learn/modules/protect-against-security-threats-azure/

Implement and configure Managed Identities

• https://docs.microsoft.com/en-us/learn/modules/authenticate-apps-with-managed-identities/
• https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

Register and manage applications in Azure AD

• https://docs.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad
• https://docs.microsoft.com/en-us/azure/app-service/tutorial-auth-aad?pivots=platform-windows
• https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app
• https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-expose-web-apis
• https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis
• https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest#configure-the-app-manifest

Implement Solutions for Apps (10%-15%)

Implement an application infrastructure

Create and configure Azure App Service

• https://docs.microsoft.com/en-us/learn/modules/host-a-web-app-with-azure-app-service/
• https://docs.microsoft.com/en-us/learn/modules/design-a-geographically-distributed-application/

Create an App Service Web app for containers

• https://docs.microsoft.com/en-us/learn/modules/deploy-run-container-app-service/

Create and configure an App Service Plan

• https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans
• https://docs.microsoft.com/en-us/learn/modules/app-service-scale-up-scale-out/

Configure App Service

• https://docs.microsoft.com/en-us/azure/app-service/configure-common

Configure networking for App Service

• https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions
• https://docs.microsoft.com/en-us/azure/app-service/networking-features
• https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

Create and manage deployment slots

• https://docs.microsoft.com/en-us/learn/modules/stage-deploy-app-service-deployment-slots/

Implement Logic Apps

• https://docs.microsoft.com/en-us/learn/paths/build-workflows-with-logic-apps/

Implement Azure Functions

• https://docs.microsoft.com/en-us/learn/paths/create-serverless-applications/

Implement container-based applications

Create a container image

• https://docs.microsoft.com/en-us/learn/modules/intro-to-containers/

Configure Azure Kubernetes Service

• https://docs.microsoft.com/en-us/learn/paths/develop-deploy-applications-kubernetes/

Publish and automate image management by using the Azure Container Registry

• https://docs.microsoft.com/en-us/learn/modules/build-and-store-container-images/

Deploy a solution on an Azure Container Instance

• https://docs.microsoft.com/en-us/learn/modules/run-docker-with-azure-container-instances/

Implement and Manage Data Platforms (10%-15%)

Implement NoSQL databases

Configure Azure Storage account tables

• https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overview
• https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-quickstart-portal

Select appropriate Cosmos DB APIs | Set up replicas in Cosmos DB

• https://docs.microsoft.com/en-us/learn/paths/work-with-nosql-data-in-azure-cosmos-db/
• https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-multi-master?tabs=api-async
• https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability

Implement Azure SQL databases

Configure Azure SQL database settings

• https://docs.microsoft.com/en-us/learn/modules/azure-database-fundamentals/
• https://docs.microsoft.com/en-us/learn/modules/provision-azure-sql-db/
• https://docs.microsoft.com/en-us/learn/modules/scale-sql-databases-elastic-pools/
• https://docs.microsoft.com/en-us/learn/modules/migrate-sql-server-relational-data/
• https://docs.microsoft.com/en-us/learn/modules/develop-app-that-queries-azure-sql/
• https://docs.microsoft.com/en-us/learn/modules/azure-sql-intro/
• https://docs.microsoft.com/en-us/learn/modules/azure-sql-performance/

Implement Azure SQL managed instances

• https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview
• https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/instance-create-quickstart

Configure HA for an Azure SQL database

• https://docs.microsoft.com/en-us/learn/modules/azure-sql-high-availability/

Deploy an Azure SQL database

• https://docs.microsoft.com/en-us/learn/modules/azure-sql-deploy-configure/