Section 2: Workloads and Security

Implement Workloads and Security (20-25%)
Migrate servers to Azure
Migrate by using Azure Site Recovery (ASR); migrate using P2V; configure storage; create a backup vault; prepare source and target environments; backup and restore data; deploy Azure Site Recovery (ASR) agent; prepare virtual network

• Migrate on-premises machines to Azure

• Prepare Azure resources for disaster recovery on-premises machines

• Create a replication policy

Configure serverless computing 

Manage a Logic App resource; manage Azure Function app settings; manage Event Grid; manage Service Bus 

• Create and route custom events with Azure portal and Event Grid

• Dead letter retry policies

• How to manage a function app in the Azure portal

• Monitor status, set up diagnostics logging, and turn on alerts for Azure Logic Apps

• Azure Service Bus metrics in Azure Monitor

Implement application load balancing 

Configure application gateway and load balancing rules; implement front end IP configurations; manage application load balancing

• Quickstart: Direct web traffic with Azure Application Gateway – Azure portal

• Manage web traffic with an application gateway using Azure PowerShell

• Create and configure an application gateway to host multiple web sites using the Azure portal

Integrate on premises network with Azure virtual network 

Create and configure Azure VPN Gateway; create and configure site to site VPN; configure Express Route; verify on premises connectivity; manage on-premise connectivity with Azure 

• Create and modify an ExpressRoute circuit

• Tutorial: Connect virtual networks with virtual network peering using the Azure portal

• What is a VPN Gateway?

• Verify a VPN Gateway connection

• Configure a VNet-to-VNet VPN gateway connection using the Azure portal

Manage role-based access control (RBAC) 

Create a custom role; configure access to Azure resources by assigning roles; configure management access to Azure; troubleshoot RBAC; implement RBAC policies; assign RBAC roles 

• Manage access using RBAC and the Azure portal

• Troubleshoot RBAC in Azure

Implement Multi-Factor Authentication (MFA) 

Enable MFA for an Azure tenant; configure user accounts for MFA; configure fraud alerts; configure bypass options; configure trusted IPs; configure verification methods; manage role-based access control (RBAC); implement RBAC policies; assign RBAC Roles; create a custom role; configure access to Azure resources by assigning roles; configure management access to Azure 

• Fraud alert 

• Deploy cloud-based Azure Multi-Factor Authentication 

• Trusted IPs 

Download the pdf here