Exam Ref AZ-305 Designing Microsoft Azure Infrastructure Solutions

by Ashish Agrawal, Gurvinder Singh, Avinash Bhavsar, Mohammad Sabir Sopariwala

Overview

Prepare for Microsoft Exam AZ-305 and help demonstrate your real-world expertise in designing cloud and hybrid solutions that run on Microsoft Azure, including identity, governance, monitoring, data storage, business continuity, and infrastructure. Designed for modern IT professionals, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Expert level.

Focus on the expertise measured by these objectives:

• Design identity, governance, and monitoring solutions
• Design data storage solutions
• Design business continuity solutions
• Design infrastructure solutions

This Microsoft Exam Ref:

• Organizes its coverage by exam objectives
• Features strategic, what-if scenarios to challenge you
• Assumes you have advanced experience and knowledge of IT operations, as well as experience in Azure administration, Azure development, and DevOps processes

About the Exam

Exam AZ-305 focuses on knowledge needed to design logging, monitoring, authentication, and authorization solutions; design governance, identities, and application access; design relational and non-relational data storage solutions; design data integration; recommend data storage solutions; design backup and disaster recovery solutions; design for high availability; design compute and network solutions, application architecture, and migration.

About Microsoft Certification

If you hold Microsoft Certified: Azure Administrator Associate certification, passing this exam fulfills your requirements for the Microsoft Certified: Azure Solutions Architect Expert credential. Passing this exam demonstrates your expert-level skills in advising stakeholders and translating business requirements into designs for secure, scalable, and reliable Azure solutions; and in partnering with others to implement these solutions.

See full details at: microsoft.com/learn

Product Details

ISBN-13:	9780137878789
Publisher:	Pearson Education
Publication date:	11/19/2022
Series:	Exam Ref
Pages:	192
Product dimensions:	7.50(w) x 9.25(h) x 0.40(d)

About the Author

ASHISH AGRAWAL is a qualified technocrat, offering over two decades of multifaceted experience as a Cloud Engineering and transformation leader, trusted advisor, developer, consultant, and Enterprise Cloud Architect. He drives a profound influence in the cloud technology landscape with provocative thought leadership and communicates his ideas with clarity and passion. He has deep, hands-on technical expertise, having spearheaded numerous successful cloud engagements for global Fortune 500 companies in advisory, presales, consulting, architecture, leadership, and delivery execution, and he has played technology leadership roles in large, complex, cross-functional, and multi-enterprise project teams.

GURVINDER SINGH is a Microsoft Certified Azure Solutions Architect with 15 years of diversified IT experience working with the Microsoft Technology stack. In the past several years, Gurvinder has been guiding large enterprises in the transformation of legacy applications into cloud-native architecture with a focus on migration to the Microsoft Azure platform. He is extremely passionate about technology, especially with the Microsoft Azure platform (PaaS, IaaS, and Serverless).

AVINASH BHAVSAR is a Microsoft Certified Azure Professional with about 19 years of hands-on experience in all facets of cloud computing, such as discovery, assessment, cloud foundation build, datacenter transformation, cloud-native application development for Azure, and migration of applications and databases from on-premises to the Azure platform. He has an extensive application development background, which includes architecture, design, development, continuous integration, and continuous delivery to the Azure platform (IaaS, PaaS, and Serverless).

MOHAMED SABIR SOPARIWALA is a Senior Architect with key expertise in cloud computing. He is a Microsoft Certified Azure Solutions Architect working as a Cloud Solution Architect on cloud transformation and adoption engagements, helping customers and partners in their cloud and digital transformation journey with the effective use of a broad and continuously changing technology landscape to help them to meet their business goals. His areas of expertise include cloud-native architecture, serverless architecture, application modernization, cloud adoption, service-oriented architecture, performance engineering, and custom application development architecture and design.

Table of Contents

Introduction xi

Organization of this book xi

Microsoft certifications xii

Quick access to online references xii

Errata, updates, & book support xiii

Stay in touch xiii

About the authors xv

Chapter 1 Design identity, governance, and monitoring solutions 1

Skill 1.1 Design a solution for logging and monitoring 2

Design a log routing solution 3

Recommend an appropriate level of logging 6

Recommend monitoring tools for a solution 8

Skill 1.2 Design authentication and authorization solutions 16

Recommend a solution for securing resources with role-based access control 17

Recommend an identity management solution 19

Recommend a solution for securing identities 26

Skill 1.3 Design governance 28

Recommend an organizational and hierarchical structure for Azure resources 29

Recommend a solution for enforcing and auditing compliance 31

Skill 1.4 Design identities and access for applications 36

Recommend solutions to allow applications to access Azure resources 36

Recommend a solution that securely stores passwords and secrets 37

Recommend a solution for integrating applications into Azure Active Directory (Azure AD) 41

Recommend a user consent solution for applications 44

Chapter summary 47

Thought experiment 49

Thought experiment answers 49

Chapter 2 Design data storage solutions 51

Skill 2.1 Design a data storage solution for relational data 51

Recommend database service tier sizing 52

Recommend a solution for database scalability 54

Recommend a solution for encrypting data at rest, data in transmission, and data in use 59

Skill 2.2 Design data integration 62

Recommend a solution for data integration 62

Recommend a solution for data analysis 65

Skill 2.3 Recommend a data storage solution 72

Recommend a solution for storing relational data 73

Recommend a solution for storing semi-structured data 76

Recommend a solution for storing nonrelational data 77

Skill 2.4 Design a data storage solution for nonrelational data 80

Recommend access control solutions to data storage 81

Recommend a data storage solution to balance features, performance, and cost 84

Design a data solution for protection and durability 89

Chapter summary 92

Thought experiment 93

Thought experiment answers 94

Chapter 3 Design business continuity solutions 97

Skill 3.1 Design a solution for backup and disaster recovery 97

Recommend a recovery solution for Azure, hybrid, and on-premises workloads that meets recovery objectives (recovery time objective [RTO], recovery level objective [RLO], recovery point objective [RPO]) 98

Understand the recovery solutions for containers 101

Recommend a backup and recovery solution for compute 102

Recommend a backup and recovery solution for databases 102

Recommend a backup and recovery solution for unstructured data 103

Skill 3.2 Design for high availability 104

Identify the availability requirements of Azure resources 105

Recommend a high-availability solution for compute 106

Recommend a high-availability solution for non-relational data storage 107

Recommend a high-availability solution for relational databases 110

Chapter summary 110

Thought experiment 111

Thought experiment answers 112

Chapter 4 Design infrastructure solutions 113

Skill 4.1 Design a compute solution 113

Recommend a virtual machine-based compute solution 114

Recommend an appropriately sized compute solution based on workload requirements 115

Recommend a container-based compute solution 116

Recommend a serverless-based compute solution 117

Skill 4.2 Design ad-application architecture 119

Recommend a caching solution for applications 119

Recommend a messaging architecture 120

Recommend an event-driven architecture 122

Recommend an application configuration management solution 123

Recommend an automated deployment solution for your application 123

Recommend a solution for API integration 125

Skill 4.3 Design migrations 127

Evaluate a migration solution that leverages the Cloud Adoption Framework for Azure 127

Assess and interpret on-premises servers, data, and applications for migration 128

Recommend a solution for migrating applications and VMs 131

Recommend a solution for migration of databases 135

Recommend a solution for migrating unstructured data 139

Skill 4.4 Design network solutions 143

Recommend a network solution based on workload requirements 144

Recommend a connectivity solution that connects Azure resources to the internet 150

Recommend a connectivity solution that connects Azure resources to on-premises networks 152

Recommend a solution to optimize network performance for applications 154

Recommend a solution to optimize network security 155

Recommend a solution for load balancing and traffic routing 160

Chapter summary 161

Thought experiment 163

Thought experiment answers 164

Index 165