Reading Time: < 1 minute
Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email

A lot of people have been asking me for a study guide for the new Azure Exams. I started with the AZ-104 (Microsoft Azure Administrator). https://pixelrobots.co.uk/2020/02/study-resources-for-the-az-104-microsoft-certified-azure-administrator/

This one is all about the Az-303. It’s not 100% finished yet, but I thought it best to get it out now.

At the time of writing this guide, the exam is not even out. The Beta should be coming soon, around the end of April 2020. The old Exam AZ-300 will still be around for 90 days after the AZ-303 becomes available.

Below, you will find the study guide. This time around its all hosted in GitHub so feel free to create a pull request with updated links or resources. You can find the GitHub repo at https://github.com/PixelRobots/Azure-Study-Guides.

Last updated
16/03/2020

Links you may find useful

Here is a list of links that you might find useful when studying for your Azure exams. Feel free to create a pull request to add more.


Skyline Academy:
https://courses.skylinesacademy.com/p/microsoft-az-300-certification-azure-architect-technologies

Scott Duffy:
https://www.udemy.com/course/70534-azure/


Microsoft Learn Resources

Below you will find a list of free resources from Microsoft on their Microsoft Learn site.

Architect great solutions in Azure
https://docs.microsoft.com/learn/paths/architect-great-solutions-in-azure?WT.mc_id=AZ-MVP-5003450

Architect network infrastructure in Azure
https://docs.microsoft.com/learn/paths/architect-network-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect a data platform in Azure
https://docs.microsoft.com/learn/paths/architect-data-platform?WT.mc_id=AZ-MVP-5003450

Architect storage infrastructure in Azure
https://docs.microsoft.com/learn/paths/architect-storage-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect compute infrastructure in Azure
https://docs.microsoft.com/learn/paths/architect-compute-infrastructure?WT.mc_id=AZ-MVP-5003450

Architect infrastructure operations in Azure
https://docs.microsoft.com/learn/paths/architect-infrastructure-operations?WT.mc_id=AZ-MVP-5003450

Architect migration, business continuity, and disaster recovery in Azure
https://docs.microsoft.com/learn/paths/architect-migration-bcdr?WT.mc_id=AZ-MVP-5003450

Architect modern applications in Azure
https://docs.microsoft.com/learn/paths/architect-modern-apps?WT.mc_id=AZ-MVP-5003450

Architect secure infrastructure in Azure
https://docs.microsoft.com/learn/paths/architect-secure-infrastructure?WT.mc_id=AZ-MVP-5003450


Exam registration page

https://docs.microsoft.com/en-us/learn/certifications/exams/az-303?WT.mc_id=AZ-MVP-5003450


The study guide

Implement and monitor an Azure infrastructure (50-55%)


Implement cloud infrastructure monitoring

Monitor security
https://docs.microsoft.com/en-us/azure/security-center/security-center-monitoring?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/security/fundamentals/infrastructure-monitoring?WT.mc_id=AZ-MVP-5003450

Monitor performance

Configure diagnostic settings on resources
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings-template?WT.mc_id=AZ-MVP-5003450

Create a performance baseline for resources
https://docs.microsoft.com/en-us/rest/api/monitor/metricbaseline/get?WT.mc_id=AZ-MVP-5003450

Monitor for unused resources
https://docs.microsoft.com/en-us/azure/azure-monitor/overview?WT.mc_id=AZ-MVP-5003450

Monitor performance capacity
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-overview?WT.mc_id=AZ-MVP-5003450

Visualize diagnostics data using Azure Monitor
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-visualizations?WT.mc_id=AZ-MVP-5003450

Monitor health and availability

Monitor networking
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-insights-overview?WT.mc_id=AZ-MVP-5003450

Monitor service health
https://azure.microsoft.com/en-us/features/service-health?WT.mc_id=AZ-MVP-5003450

Monitor cost

Monitor spend
https://docs.microsoft.com/en-us/azure/architecture/framework/cost/monitoring?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending?WT.mc_id=AZ-MVP-5003450

Report on spend
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/download-azure-invoice-daily-usage-date?WT.mc_id=AZ-MVP-5003450

Configure advanced logging

Implement and configure Azure Monitor insights, including App Insights, Networks, Containers
https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/azure-monitor/insights/insights-overview?WT.mc_id=AZ-MVP-5003450

Configure a Log Analytics workspace
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-create-workspace?WT.mc_id=AZ-MVP-5003450

configure logging for workloads
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-logs?WT.mc_id=AZ-MVP-5003450

Initiate automated responses by using Action Groups
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups?WT.mc_id=AZ-MVP-5003450

Configure and manage advanced alerts

Collect alerts and metrics across multiple subscriptions
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances?WT.mc_id=AZ-MVP-5003450

View Alerts in Azure Monitor logs
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview?WT.mc_id=AZ-MVP-5003450


Implement storage accounts

Select storage account options based on a use case
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction?WT.mc_id=AZ-MVP-5003450

Configure Azure Files and blob storage
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?WT.mc_id=AZ-MVP-5003450
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal?WT.mc_id=AZ-MVP-5003450

Configure network access to the storage account
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?WT.mc_id=AZ-MVP-5003450

Implement Shared Access Signatures and access policies
https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?WT.mc_id=AZ-MVP-5003450

Implement Azure AD authentication for storage
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad?WT.mc_id=AZ-MVP-5003450

Manage access keys
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage?WT.mc_id=AZ-MVP-5003450

Implement Azure storage replication
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?WT.mc_id=AZ-MVP-5003450

Implement Azure storage account failover
https://docs.microsoft.com/en-us/azure/storage/common/storage-initiate-account-failover?WT.mc_id=AZ-MVP-5003450


Implement VMs for Windows and Linux

Configure High Availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets?WT.mc_id=AZ-MVP-5003450

Configure storage for VMs
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-disk-ps?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types?WT.mc_id=AZ-MVP-5003450

Select virtual machine size
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/virtual-machines/linux/sizes?WT.mc_id=AZ-MVP-5003450

Implement Azure Dedicated Hosts
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts-portal?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/virtual-machines/windows/dedicated-hosts?WT.mc_id=AZ-MVP-5003450

Deploy and configure scale sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal?WT.mc_id=AZ-MVP-5003450

Configure Azure Disk Encryption
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview?WT.mc_id=AZ-MVP-5003450


Automate deployment and configuration of resources

Save a deployment as an Azure Resource Manager template
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal?WT.mc_id=AZ-MVP-5003450

Modify Azure Resource Manager template
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell?WT.mc_id=AZ-MVP-5003450

Evaluate location of new resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/conditional-resource-deployment?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-location?WT.mc_id=AZ-MVP-5003450

Configure a virtual disk template
https://docs.microsoft.com/en-us/azure/marketplace/cloud-partner-portal/virtual-machine/cpp-deploy-json-template?WT.mc_id=AZ-MVP-5003450

Deploy from a template
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal?WT.mc_id=AZ-MVP-5003450

Manage a template library
https://bentaylor.work/2016/05/azure-arm-template-library/?WT.mc_id=AZ-MVP-5003450

Create and execute an automation runbook
https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-create-runbook?WT.mc_id=AZ-MVP-5003450


Implement virtual networking

Implement VNet to VNet connections
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal?WT.mc_id=AZ-MVP-5003450

Implement VNet peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=AZ-MVP-5003450


Implement Azure Active Directory

Add custom domains
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain?WT.mc_id=AZ-MVP-5003450

Configure Azure AD Identity Protection
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection?WT.mc_id=AZ-MVP-5003450

Implement self-service password reset
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing?WT.mc_id=AZ-MVP-5003450

Implement Conditional Access including MFA
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk?WT.mc_id=AZ-MVP-5003450

Configure user accounts for MFA
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa?WT.mc_id=AZ-MVP-5003450

Configure fraud alerts
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings?WT.mc_id=AZ-MVP-5003450

Configure bypass options
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings?WT.mc_id=AZ-MVP-5003450

Configure Trusted IPs
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-configure-named-locations?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition?WT.mc_id=AZ-MVP-5003450

Configure verification methods
https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-manage-settings?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-first-time?WT.mc_id=AZ-MVP-5003450

Implement and manage guest accounts
https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-guest-access-with-access-reviews?WT.mc_id=AZ-MVP-5003450 https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal?WT.mc_id=AZ-MVP-5003450

Manage multiple directories
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-directory-independence?WT.mc_id=AZ-MVP-5003450


Implement and manage hybrid identities

Install and configure Azure AD Connect
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express?WT.mc_id=AZ-MVP-5003450

Identity synchronization options
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis?WT.mc_id=AZ-MVP-5003450

Configure and manage password sync and password writeback
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback?WT.mc_id=AZ-MVP-5003450

Configure single sign-on
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications?WT.mc_id=AZ-MVP-5003450

Use Azure AD Connect Health
https://docs.microsoft.com/bs-latn-ba/azure/active-directory/hybrid/whatis-azure-ad-connect?WT.mc_id=AZ-MVP-5003450


Implement management and security solutions (25-30%)

Manage workloads in Azure

Migrate workloads using Azure Migrate Assess infrastructure
https://docs.microsoft.com/en-gb/azure/migrate/migrate-services-overview?WT.mc_id=AZ-MVP-5003450

Select a migration method
https://azure.microsoft.com/en-gb/migration/migration-journey/#migrate?WT.mc_id=AZ-MVP-5003450

Prepare the on-premises for migration
https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure?WT.mc_id=AZ-MVP-5003450

Recommend target infrastructure
https://azure.microsoft.com/en-gb/blog/identify-your-move-groups-and-target-sizes-for-migration-with-azure-migrate/?WT.mc_id=AZ-MVP-5003450

Implement Azure Backup for VMs
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm?WT.mc_id=AZ-MVP-5003450

Implement disaster recovery
https://azure.microsoft.com/en-gb/services/site-recovery/?WT.mc_id=AZ-MVP-5003450

Implement Azure Update Management
https://docs.microsoft.com/en-us/azure/automation/automation-update-management?WT.mc_id=AZ-MVP-5003450


Implement load balancing and network security

Implement Azure Load Balancer
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview?WT.mc_id=AZ-MVP-5003450

Implement an application gateway
https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal?WT.mc_id=AZ-MVP-5003450

Implement a Web Application Firewall
https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview?WT.mc_id=AZ-MVP-5003450

Implement Azure Firewall
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal?WT.mc_id=AZ-MVP-5003450

Implement the Azure Front Door Service
https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door?WT.mc_id=AZ-MVP-5003450

Implement Azure Traffic Manager
https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile?WT.mc_id=AZ-MVP-5003450

Implement Network Security Groups and Application Security Groups
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview?WT.mc_id=AZ-MVP-5003450

Implement Bastion
https://docs.microsoft.com/en-us/azure/bastion/bastion-create-host-portal?WT.mc_id=AZ-MVP-5003450


Implement and manage Azure governance solutions

Create and manage hierarchical structure that contains management groups, subscriptions and resource groups
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview?WT.mc_id=AZ-MVP-5003450

Assign RBAC roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?WT.mc_id=AZ-MVP-5003450

Create a custom RBAC role
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell?WT.mc_id=AZ-MVP-5003450

Configure access to Azure resources by assigning roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?WT.mc_id=AZ-MVP-5003450

Configure management access to Azure
https://docs.microsoft.com/en-us/azure/role-based-access-control/conditional-access-azure-management?WT.mc_id=AZ-MVP-5003450

Interpret effective permissions
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview?WT.mc_id=AZ-MVP-5003450

Set up and perform an access review
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review?WT.mc_id=AZ-MVP-5003450

Implement and configure an Azure Policy
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage?WT.mc_id=AZ-MVP-5003450

Implement and configure an Azure Blueprint
https://docs.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal?WT.mc_id=AZ-MVP-5003450


Manage security for applications

Implement and configure KeyVault
https://docs.microsoft.com/en-us/azure/key-vault/quick-create-portal?WT.mc_id=AZ-MVP-5003450

Implement and configure Azure AD Managed Identities
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm?WT.mc_id=AZ-MVP-5003450

Register and manage applications in Azure AD
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-application-management?WT.mc_id=AZ-MVP-5003450


Implement solutions for apps (10-15%)

Implement an application infrastructure

Create and configure Azure App Service
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet?WT.mc_id=AZ-MVP-5003450

Create an App Service Web App for Containers
https://docs.microsoft.com/en-us/azure/app-service/containers/quickstart-docker?WT.mc_id=AZ-MVP-5003450

Create and configure an App Service plan
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage?WT.mc_id=AZ-MVP-5003450

Configure an App Service
https://docs.microsoft.com/en-us/azure/app-service/configure-common?WT.mc_id=AZ-MVP-5003450

Configure networking for an App Service
https://docs.microsoft.com/en-us/azure/app-service/networking-features?WT.mc_id=AZ-MVP-5003450

Create and manage deployment slots
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots?WT.mc_id=AZ-MVP-5003450

Implement Logic Apps
https://docs.microsoft.com/en-us/azure/logic-apps/quickstart-create-first-logic-app-workflow?WT.mc_id=AZ-MVP-5003450

Implement Azure Functions
https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-first-azure-function?WT.mc_id=AZ-MVP-5003450


Implement container-based applications

Create a container image
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task?WT.mc_id=AZ-MVP-5003450

Configure Azure Kubernetes Service
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal?WT.mc_id=AZ-MVP-5003450

Publish and automate image deployment to the Azure Container Registry
https://docs.microsoft.com/en-us/azure/container-registry/?WT.mc_id=AZ-MVP-5003450

Publish a solution on an Azure Container Instance
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart?WT.mc_id=AZ-MVP-5003450


Implement and manage data platforms (10-15%)

Implement NoSQL databases

Configure storage account tables
https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overview?WT.mc_id=AZ-MVP-5003450

Select appropriate CosmosDB APIs
https://docs.microsoft.com/en-us/azure/cosmos-db/table-introduction?WT.mc_id=AZ-MVP-5003450

Set up replicas in CosmosDB
https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability?WT.mc_id=AZ-MVP-5003450


Implement Azure SQL databases

Configure Azure SQL database settings
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-howto-single-database?WT.mc_id=AZ-MVP-5003450

Implement Azure SQL Database managed instances
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-get-started?WT.mc_id=AZ-MVP-5003450

Configure HA for an Azure SQL database
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability?WT.mc_id=AZ-MVP-5003450

Publish an Azure SQL database
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-dotnet-sqldatabase?WT.mc_id=AZ-MVP-5003450


Share:
Twitter
LinkedIn
Facebook
Reddit
Whatsapp
Follow by Email

Pixel Robots.

I’m Richard Hooper aka Pixel Robots. I started this blog in 2016 for a couple reasons. The first reason was basically just a place for me to store my step by step guides, troubleshooting guides and just plain ideas about being a sysadmin. The second reason was to share what I have learned and found out with other people like me. Hopefully, you can find something useful on the site.

1 Comment

Azure Icons Now Available To Download - Pixel Robots. · August 5, 2020 at 3:00 pm

[…] and as you are here, why not look at my Azure Architect study guides. AZ-303 Microsoft Azure Architect Technologies and AZ-304 Microsoft Azure Architect Design (coming […]

Leave a Reply

Your email address will not be published. Required fields are marked *