Microsoft - Azure Academy: Infrastructure and Networking

Curriculum

Module 1: Cloud Computing Environments

• Comparing on Premise Virtualisation with Cloud Virtualisation: In this topic we will look at on premise virtualisation, we will look at Hyper-V and talk about the characteristics of Hyper-V virtual machines we will give an overview of Vmware environments.

• Comparing Microsoft Azure with AWS and Google: In this topic we will compare Microsoft Azure with two of the other marketing leading cloud environments Amazon Web Services and Google Cloud. We will compare feature sets, administration options and the scale of each environment.

• Microsoft Azure Security and Compliance: In this topic we will look at the security that Microsoft has in place to protect your Azure subscription from attack. We will discuss the Network protection in place to help prevent external attacks, we will discuss the how data is stored securely and we will discuss the internal Data and Security standards that Azure is certified to support.

Module 2: Networking

• A Look on Premise Networking in a Virtualised Environment: In this topic we will talk about on premise virtual networks and network virtualisation. We will then compare on premise virtualisation with cloud virtualisation

• Azure Virtual Network: This lesson covers a detailed look at Azure Virtual Networks. We will talk about Classic and ARM virtual networks and how we connect the two, we will look at IP Addressing in Azure. We will look at how to use the Network config file to create point-to-multipoint connections and how we use json files to deploy virtual networks

• A Detailed look at Virtual Network Connectivity: In this section we will look at connecting Classic and ARM virtual networks, we will look at Vnet-Vnet connectivity as well as Point-to-site and Site-to-Site connectivity. We will look at deploying VMs to virtual networks and we will take a first look at protecting access to our virtual networks.

• A Closer look at Express Route: In this topic we will discuss what Express Route is, we will talk about some of the telecoms companies offering Express route connectivity in the UK and in Europe, we will discuss Express Route Premium and the its benefits. We will also discuss Express route pricing and using BGP across express route to propagate our routing information.

Module 3: Infrastructure as a Service (IAAS) Virtual Machines

• Moving Microsoft VMs from on Premise to Azure: In this topic we will take a Microsoft VM from an on premise Hyper-V server and move it to Azure, this will involve preparing the VM before moving it to Azure. We will discuss creating an Image on premise to use to create multiple VMs in Azure.

• Moving Linux based VMs from on Premise to Azure: In this topic we will take a Linux VM from an on premise Hyper-V server and move it to Azure, this will involve preparing the VM before moving it to Azure.

• Moving Physical Machines and VMware Virtual Machine to Azure: In this topic we will discuss using Azure Recovery services to move both physical machines and VMware virtual machines in to the Azure cloud.

• A Closer look at Gallery Images and Azure Virtual Machine Families: In this topic we will look at the gallery images and the Virtual machine families that are available to deploy them. We will discuss specialist high performance, high memory and SSD SKUs. We will also look at the VM depot and how we can interact with it. We will also look at scaling up and scaling out our deployed VMs with Auto-Scaling and Scale sets.

Module 4: Azure Storage, Backup and Recovery

• An In-depth look at Azure Recovery Services: In this topic we will take a closer look at Azure Recovery Services first seen in Module 3 . We will discuss using Azure recovery services to protect both virtual and physical machines between two of our datacentres and between our datacentre and Azure.

• An In-depth look at Azure Backup: In this topic we will use Azure Backup to protect both files and Virtual machines on premise and how to restore these. We will also look at using Azure Backup to protect our Virtual machines deployed to Azure.

• Comparing Azure Standard and Premium Storage: In this topic we will look at both standard and premium storage accounts, we will discuss using cool storage. We will talk about pricing for both standard and premium storage. We will also discuss the different redundancy options available for our storage accounts

• How Data is Stored Accessed and Secured: In this topic we will talk about how our stored data can be accessed and how it is protected at rest and in transit. we will discuss Store simple and how we can use it to replace our traditional SAN solutions.

Module 5: Azure Active Directory

• Working with Azure AD to Manage Multiple Microsoft Cloud Services: In this topic we will look at using a single Azure AD partition to manage our Azure subscription and our O365 Tennent and our Intune account.

• Working with Azure B2C and B2B: In this topic we will look at the new B2C feature that allows us to use providers like Facebook, Linkedin etc. to authenticate users against out Azure AD integrated applications. We will then look at Azure B2B that will allow you to invite business partner to access your applications without the need for Active Directory Federation Services.

• Working with Azure Active Directory Domain Services: In this topic we will look at the new Azure Active Directory Domain Services feature, we look at deploying the feature and how we enable both Classic and ARM VMs to join our Azure AD Domain Services domain and how we can then use GPOs to manage those domains joined VMs

• Deploying your Domain Controllers to Azure: In this topic we will look at deploying one of your on premise forests domain controllers to Azure, we will look at why you might want to do this, what is needed for high availability and what we can do to make sure that in the event that there is a disaster your Azure deploy infrastructure still functions.

Module 6: Working with a Hybrid Azure AD infrastructure

• Azure AD Connect Deep Dive: In this topic we will look at preparing your On premise Active Directory forest for directory synchronisation, we will then look at install Azure AD connect and discuss how it can be used to configure Hybrid and Single sign on environments. We will also discuss filtering of AD objects and attributes.

• Active Directory Federation Service Deep Dive: In this topic we will be installing an Active Directory Federations Service farm, we will also install a web application proxy to act as a proxy for your newly installed Federation Service farm, we will then see how to configure a registered domain for single sign on.

Module 7: Securing your Azure Environment

• Working with Network Security Groups: In this topic we will be looking how network security groups can be used to manage traffic flowing through subnets, virtual machines and Network interface cards. We will discuss design best practices for Network Security groups and we will look at comparisons between Network Security Groups and Endpoint ACLs

• Working with Virtual Appliances: In this topic we will look at some of the virtual appliances available in Azure, we will look at some of the way we can deploy virtual appliances into Azure and how these Virtual Appliances are licenced.

• Working with User Defined Routes: In this topic we will see how User Defined Routes can be used to route traffic leaving a subnet to a virtual appliance for inspection before the traffic is passed on to its destination.

• Building DMZs in Azure: Building on lessons 1, 2 and 3 we will see how Network Security Groups, Virtual Appliances and User defined routes can be used to build DMZ’s (perimeter networks) in Azure. This lesson will discuss network design in Azure.

Module 8: Monitoring your Azure Infrastructure

• Microsoft’s Operations Management Suite (OMS): In this topic we will look at operational insights in Azure and how we work with Microsoft Operations Management Suite (OMS) we will see how OMS can be used to monitor and offer best practice advice to both Azure and on premise environments and how we can use OMS in conduction with System Centre Operations Manager and Amazon Web Services.

• Azure Security Centre: In this less we will look at Azure Security Centre and see how it offer both protection of our Azure subscription and detection of threatens to our Azure subscription.

• Logging and Monitoring of IAAS machines: In this topic we will be look at some of the built-in logging and monitor options we have in Azure while also showing how we can use external tools to monitor our Azure environment,

Module 9: Automation, PowerShell and the Azure CLI

• Azure Automation Workflows: In this topic we will look at Azure Automation using PowerShell, PowerShell workflows and Graphical workflows to automate tasks in Azure, we will also discuss monitoring Azure automation and how we can use Azure Automation to automate tasks on premise.

• Managing Azure from PowerShell: In this topic we will take a detailed look at PowerShell focusing on the Azure and Azure AD PowerShell modules. We will look at creating PowerShell scrips and PowerShell modules to manage Azure.

• Managing Azure from the Azure CLI: In this topic we will look and managing Azure using the Azure cross platform Command Line Interface (X-plat)

• PowerShell Desired State Configuration (DSC): Building on the knowledge gained in this module we will look at PowerShell Desired State Configuration (DSC) and how we can use it to automate the configuration of Azure and on premise resources, we will be looking at DSC push and pull modes and discuss how we use DSC to prevent configuration drift.

• Infrastructure as Code using Json to Deploy your Azure Infrastructure: In this topic we will take a look at Json scripting language, we will look at how we can use Json to deploy Azure Resource Manager recourses from ARM templates. We will use Visual studios and the Azure portal to author and deploy ARM templates and how we can use json to manage other features such as ARM Policies.

Module 10: Microsoft Cloud Estate

• Microsoft Enterprise Mobility Suite (EMS): In this less we will introduce Microsoft Enterprise Mobility Suite (EMS) and how we can use it to manage mobile devices, applications and Security.

• Office 365 Overview: In this topic we will introduce Office 365, we will talk about Office 365s new features as well as long existing applications and we will show how Office 365 and Azure work together to offer a complete cloud experiences (IAAS, PAAS and SAAS)

• Azure Stack Overview: In this topic we will introduce Azure Stack and see how it can be used to bring an Azure like environment to your datacentre and how it can be used to integrate with the Azure cloud.

• Windows Server 2016 and the Cloud: In this topic we will be looking at Windows Server 2016 and how it can be used to integrate your on premise environment with the Cloud. We will see what makes Server 2016 a cloud ready platform and we will take a look at some of the exciting new features provided by Server 2016.