AZ-305 : Azure Architect Design Certification Prep

Explore the Azure account hierarchy, including enterprise agreements, departments, accounts, and subscriptions, and learn how resource groups and management groups organize and govern resources with role-based access controls and policies.

Organize Azure resources into resource groups that containerize services and enable easy provisioning with secure role-based access control boundaries and policies.

Create and tag resource groups in the Azure portal, assign a subscription and region, label with cost centers and maintenance windows, and monitor deployments, policies, and costs with Azure Monitor.

Explore role-based access control (rbac) in Azure, including built-in, service-specific, and custom roles, and scoping across subscriptions, resource groups, and resources.

Implement role-based access in Azure by creating security groups in Azure Active Directory, assigning read permissions at subscription or resource group levels, and using built-in or custom roles.

Demonstrate resource locks in Azure by creating a resource group and storage account, applying delete and read-only locks, and illustrating how locks prevent deletion yet allow changes through change control.

Azure Monitor alerting uses signals from a target resource (metrics, activity logs, Application Insights, generic logs) and logic to trigger actions through alert rules, severity, and action groups for remediation.

Explore Azure Monitor and Azure Alerts from the portal, view metrics and logs, create alert rules with action groups, pin dashboards, and enable guest-level diagnostics for virtual machines.

Explore resource locks in Azure as you create a resource group and storage account, then apply delete and read-only locks to prevent deletion while allowing constrained changes.

Explore Azure policy in action by creating a resource group, assigning policies and initiatives, and applying governance across resource groups, subscriptions, and management groups with enforcement options.

Explore Azure SQL, a relational database as a service for migrating on-premises databases with data migration assistant. Leverage DTUs, high compatibility, and tiers from basic to premium, including managed instances.

Explore creating an Azure SQL database in the portal, including subscription, resource group, server setup, and pricing options. Learn about elastic pools, backups, geo replication, and failover groups.

Explore how caching improves performance and scalability by using private and shared caches, client-side and server-side caching, and Azure Redis cache for fast, shared data access.

Understand Cosmos DB consistency levels: strong, bounded staleness, session, consistent prefix, and eventual, and how latency versus freshness guides global replication.

Explore end-to-end big data solutions: ingest data with Azure Data Factory, store in big data stores, process with Hadoop/Spark/ML, and query with SQL data warehouse and Polybase for insights.

Create and manage an Azure storage account in the portal, selecting storage v2 (gp2), geo-redundant replication, hot tier, and public or private endpoints, with access keys and SAS.

Master how to control access to Azure blob storage using access policies, public access levels, and SAS tokens—exploring account SAS, service SAS, permissions, expiry, and stored policies.

Use Azure Key Vault to store and manage encryption keys and secrets, bring your own customer managed keys, and leverage hardware security modules for storage encryption.

Azure backup, a cloud-based backup solution using a recovery services vault with unlimited scale, policies, retention, and application consistent backups with data encryption.