akamsIdentity

akamsMarkGrimes akamsAllergicToCode

F5

akamsIgniteCertPrep

akamsIgniteCertPrep

httpsakamsAzureCertifications

CLOUD PLATFORM amp INFRASTRUCTUREMCSECloud Platform amp InfrastructureEarned 2017

MCSA Windows

Server 2012

MCSA Linux on

Azure

MCSA Windows

Server 2016

MCSA Cloud

Platform

Elective

Choose two from

532 Developing Microsoft Azure Solutions

533 Managing Microsoft Azure Infrastructure Solutions

534 Architecting Microsoft Azure Solutions

473 Designing and Implementing Cloud Data Platform Solutions

475 Designing and Implementing Big Data Analytics Solutions

LFCS

Linux Foundation

Certified System Administrator

533 Managing

Microsoft Azure

Infrastructure Solutions

741

Networking with

Windows Server 2016

740

Installation Storage and

Compute with

Windows Server 2016

411

Administering

Windows Server 2012

410

Installing and Configuring

Windows Server 2012

412

Configuring Advanced

Windows Server 2012

Services

742

Identity with

Windows Server 2016

httpsakamsAzureCertifications

httpsakamsAzureCertifications

azuremicrosoftcom

Caveat Emptor 70-534 exam objectives

Free trial account

Hands-On WorkshopsLabs

Microsoft Virtual Academy

wrong

START

akams70-534

akamsAzureAddresses

akamsAzureAddresses

Get-AzureRmDnsZone ndashName contosonet ndashResourceGroupNameMyResourceGroupakamsAzureDNS

Only TCP or UDP

1686312916

Port 1688

akamsAzureNSG

UDR

akamsAzureUDR

akamsAzureDMZ

akamsAzureALB

WAF

akamsAzureAppGateway

WAF Protects

bull from vulnerabilities and attacks

wo modification to backend code

bull multiple web applications at the

same time

bull supports hosting up to 20 websites

behind a single gateway

bull monitor using real-time report

generated by application gateway

WAF logs

Certain compliance controls require all

internet facing end points to be

protected by a WAF solution

akamsAzureVPN

Supported Services

akamsAzureExpressRoute

Customers

Azure AD as the control plane

On-premises

Partners

Azure

Cloud

Publiccloud

Microsoft Azure Active Directory

BYO

Windows ServerActive Directory

A modern identity management system

spanning cloud and on-premises

providing federation identity management

device registration user provisioning

application access control amp data

protection

Feature belowhellip Active Directory Azure Active Directory

Purpose Authentication and Authentication for

applications file services printers and on-

premises resources

Authentication and Authorization for IaaS

PaaS and SaaS applications and resources

supporting RESTful interfaces

Directory structure Hierarchical based on X500 Flat structure

Delegation Model Through Forest Domain or Organizational

Units (OU)

Uses Role Based Access (RBAC) or

Directory API access controls across Azure

Resources scoped at the Subscription

Resource Group or individual Azure

Resource level This would apply across

IaaS PaaS and SaaS applications as well

Authentication Mechanism Kerberos SAML WS-Fed and OAuth

Directory query LDAP GraphAPI

Directory Structure Forest and domains Individual Azure AD Tenants within one

multi-tenant directory

Administration controls Organizational Units (OU) Group Policy

Objects (GPO)

No GPO or OUs

bullbullbullbullbullbullbullbullbullbull

bullbullbullbullbullbullbullbullbullbull

akamsAzureB2C

Feature belowhellip Active Directory Azure Active Directory

Purpose Authentication and Authentication for

applications file services printers and on-

premises resources

Authentication and Authorization for IaaS

PaaS and SaaS applications and resources

supporting RESTful interfaces

Directory structure Hierarchical based on X500 Flat structure

Delegation Model Through Forest Domain or Organizational

Units (OU)

Uses Role Based Access (RBAC) or

Directory API access controls across Azure

Resources scoped at the Subscription

Resource Group or individual Azure

Resource level This would apply across

IaaS PaaS and SaaS applications as well

Authentication Mechanism Kerberos SAML WS-Fed and OAuth

Directory query LDAP GraphAPI

Directory Structure Forest and domains Individual Azure AD Tenants within one

multi-tenant directory

Administration controls Organizational Units (OU) Group Policy

Objects (GPO)

No GPO or OUs

bullbullbullbullbullbullbullbullbullbull

bullbullbullbullbullbullbullbullbullbull

akamsAzureB2C

bullbullbullbullbullbullbullbullbullbull

bullbullbullbullbullbullbullbullbullbull

akamsAzureB2C

1 Arvind can choose not to create account If not the invitation remains unredeemed

2 b2btest074onmicrosoftcom is the tenant domain and contosocom is an email verified domain

3 Admin can DNS verify the b2btest074com domain and take over this dynamic tenancy

4 When the tenant is taken over -the domain changes to DNS verified

5 Tenant can choose to keep existing cloud passwords for the users or configure On Prem federation if available

msonline-setupcom (host tenant)

Arvind_btbtest074 comEXT

msonline-setupcom

B2btest074onmicrosoftcom(dynamic tenant)

arvindb2btest074com

akamsAzureB2CB

Azure AD B2B Collaboration Azure AD B2C

What is it for

IT Pros providing access to their organizationrsquos data and

applications to partner organizations and collaborators

Developers working on Consumer- amp citizen-facing mobile

amp web apps that reach out to the customer and citizens

directly

Who is it for

Partner users that are acting on behalf of ie as

representatives or employees of their organization

Consumers and citizens that are acting as themselves

Manageability

Access reviews email verification allowlistdenylist etchellip

govern access to host application and resources

Self-Serve Users manage their own profiles

Discoverability

Partner users are discoverable and can see other users from

their own organization (subject to policy)

Consumers and citizens are invisible to other consumers and

citizens Privacy and consent are paramount

Deploy AD FS in Azure Virtual MachinesRead More

Deploy AD FS in Azure Virtual MachinesRead More

akamsAzureDiskEncryption

PowerBI

SIEM

Azure Log Integration

built-in roles

Policies

1 PowerShell

2 Azure CLI

3 The Portal

4 ARM Template

5 Azure AD Connect

1 PowerShell

2 Azure CLI

3 The Portal

4 ARM Template

5 Azure AD Connect

Azure Storage security guide

Azure Storage security guide

Share Access Signature SAS

same model

akamsazurestorage httpstorageexplorercom

Table Storage SQL Database My SQL DocumentDB Blob Storage MongoDB

NoSQL Relational Relational NoSQL Unstructured Data NoSQL

Keyattribute Tables JSONJavaScript Big Data - logs JSON-like

Schemaless WebMobile Config Data- apps Dynamic schemas

Fast Data Access Fast DB High Performance

Lower $$ versusgt Open Source Written in C

Disk Encryption

2 MongoDB

akamsAzureHPC

akamsAzureHPC

akamsAzureStreamAnalytics

FEATURES OF STREAM ANALYTICS WHEN TO USE

Easy to use T-SQL w Intellisense Real-time stock-trading analysis and alerts

Scalable up to 1 Gbps Real-time fraud detection

Integration with Event amp IoT hubs ML Data and identity protection services

Pay-as-you go = streaming unit usage Embedded sensors and actuators (IoT)

Writes to Azure Storage Blobs or Tables

Azure SQL DB Azure Data Lake Stores

DocumentDB Event Hubs Azure Service

Bus Topics or Queues and Power BI

Web clickstream analytics

akamsAzureFunctions

FEATURES OF FUNCTIONS WHEN TO USE

Choice of Language Processing data

Pay-per-use Integrating systems

Integrated Security Working with IoT

Simplified integration Build simple IoT and microservices

Flexible Development and Open-source Tasks imageorder processing file

maintenance

akamsAzureAPI

Design Guidance

akamsAzureServiceBus

akamsAzureWebJobs

akamsAzureADDS

akamsazureADjoin

akamsAzureWebApps

Free

Dev test apps

Shared

Devtest with

higher limits

Basic

Go live with basic

apps

Standard

Go live with web

mobile logic

apps

Premium

Maximum scale

and enterprise

integration

akamsAzureASE

akamsAzureASE

WNS

see more

Notification Hubs

TAGS

Template feature

See more

Read More

akamsAzureMobileApps

akamsAzureMobileApps

akamsAzureOMS

akamsAzureAutomation

akamsazureAppInsights

Azure Site RecoveryOne solution for multiple infrastructures

Hyper-V to Hyper-V(on-premises)

1

Hyper-V Hyper-V

Replication

Hyper-V to Microsoft Azure3

Hyper-VMicrosoft

Azure

Replication

VMware or Physical to VMware (on-premises)

4

VMware or Physical VMware

Replication

VMware or Physical to Microsoft Azure

5

VMware or PhysicalMicrosoft

Azure

Replication

Hyper-V to Hyper-V(on-premises)

2

Hyper-V Hyper-V

Replication

SAN SAN

Protect important applications by coordinating the replication and recovery of private clouds across sites

Protect your applications to your own second site a hosterrsquos site or even use Microsoft Azure as your disaster recovery site

Azure Automation

Runbook

httpswwwchefiosolutionswindows

httppuppetlabscomsolutionsmicrosoft

Azure Automation

Runbook

httpswwwchefiosolutionswindows

httppuppetlabscomsolutionsmicrosoft

akamsAzureARM

akamsAzureRBAC

ARM World Class Templates Proven Practices

$schema httpsschemamanagementazurecomschemas2015-01-01deploymentTemplatejson

contentVersion 1000

parameters

storageAccountName

type string

metadata

description Storage Account Name

resources [

type MicrosoftStoragestorageAccounts

name [parameters(storageAccountName)]

apiVersion 2015-06-15

location [resourceGroup()location]

properties

accountType Standard_LRS

]

create a new resource group

deploy the template to the resource group

Read more

create a new resource group

deploy the template to the resource group

Read more

azure group create -n ExampleResourceGroup -l West Europe

azure group deployment create -f azuredeployjson -g ExampleResourceGroup -n ExampleDeployment

Read more

App Services PDF

Virtual Machines PDF

Azure Storage PDF

Azure AD PDF

Virtual Networks PDF

Azure Resource Manager PDF

httpsdigitalmicrosoftreadycom

httpmyignitemicrosoftcom

httpsakamsignitemobileapp