Section 1: Deploy and Configure Infrastructure

Deploy and Configure Infrastructure (25-30%)
Analyze resource utilization and consumption
Configure diagnostic settings on resources; create baseline for resources; create and test alerts; analyze alerts across subscription; analyze metrics across subscription; create action groups; monitor for unused resources; monitor spend; report on spend; utilize Log Search query functions; view alerts in Log Analytics

• Azure Monitor Overview

• Monitoring data collected by Azure Monitor

• Create, view, and manage metric alerts using Azure Monitor

• Collect and consume log data from your Azure resources

• Alerts with dynamic thresholds in Azure Monitor (Note: Public Preview but may be covered)

• Create and manage action groups in the Azure Portal

• Log alerts in Azure Monitor

• Analyze Log Analytics data in Azure Monitor

• Alert Management solution in Azure Log Analytics

Create and configure storage accounts 

Configure network access to the storage account; create and configure storage account; generate shared access signature; install and use Azure Storage Explorer; manage access keys; monitor activity log by using Log Analytics; implement Azure storage replication 

• Configure Azure Storage Firewalls and Virtual Networks 

• Create a storage account 

• Using shared access signatures (SAS)

• Get started with Storage Explorer

• Azure Storage security guide

• Analyze Log Analytics data in Azure Monitor

• Replication

Create and configure a VM for Windows and Linux 

Configure high availability; configure monitoring, networking, storage, and virtual machine size; deploy and configure scale sets 

• Manage the availability of Windows virtual machines in Azure 

• How to monitor virtual machines in Azure 

• Frequently asked questions about Azure IaaS VM disks and managed and unmanaged premium disks

• Command PowerShell commands for Azure Virtual Networks

• Resize a Windows VM

• Virtual Machine Scale Sets Documentation 

Automate deployment of VMs 

Modify Azure Resource Manager (ARM) template; configure location of new VMs; configure VHD template; deploy from template; save a deployment as an ARM template; deploy Windows and Linux VMs 

• Update a resource in an Azure Resource Manager template 

• Create a Windows VM from a specialized disk by using PowerShell

• Create a Windows virtual machines from a Resource Manager template 

• Download the template for a VM

• Create a Windows virtual machine in the Azure portal

• Create a Linux virtual machine in the Azure portal

Implement solutions that use VMs
Provision VMs; create ARM templates; configure Azure Disk Encryption for VMs

Create connectivity between virtual networks 
Create and configure VNET peering; create and configure VNET to VNET; verify virtual network connectivity; create virtual network gateway 

• Create, change, or delete virtual network peering

• Tutorial: Connect virtual networks with virtual network peering using the Azure portal

• Virtual network peering

• Troubleshoot connections with Azure Network Watcher using the Azure portal

• Create Site-to-Site connection in the Azure portal 

Implement and manage virtual networking 

Configure private and public IP addresses, network routes, network interface, subnets, and virtual networks

• Quickstart: Create a virtual network using the Azure portal

Manage Azure Active Directory (AD) 

Add custom domains; configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming; configure self-service password reset; implement conditional access policies; manage multiple directories; perform an access review 

• How to: Add your custom domain name using the Azure Active Directory portal

• Enabling Azure Active Directory Identity Protection

• Quickstart: Self-service password reset

• How to: Configure conditional access policies for access attempts from untrusted networks

• Manage your Azure Active Directory tenant

• Azure AD access reviews

Implement and manage hybrid identities 

Install and configure Azure AD Connect; configure federation and single sign-on; manage Azure AD Connect; manage password sync and writeback 

• Getting started with Azure AD Connect using express settings

• Deploying Active Directory Federation Services in Azure

• Azure Active Directory Seamless Single Sign-On

• Next steps and how to manage Azure AD Connect

• Enable password hash synchronization

• How-to: Configure password writeback

Download the pdf here