Exam Ref 70-533 Implementing Microsoft Azure Infrastructure Solutions

Michael Washam, Rick Rainey, Dan Patrick, Steve Ross

• Publisher: Microsoft Press
• Year: 2018
• ISBN:
  9781509304660
• Edition: 2
• Topic: Ciencia de la computación
• Subtopic: MCSE

Prepare for the newest versions of Microsoft Exam 70-533 –and help demonstrate your real-world mastery of implementing Microsoft Azure Infrastructure as a Service (IaaS). Designed for experienced IT professionals ready to advance their status, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the MCSA level.

• Focus on the expertise measured by these objectives:
• Design and implement Azure App Service Apps
• Create and manage compute resources, and implement containers
• Design and implement a storage strategy, including storage encryption
• Implement virtual networks, including new techniques for hybrid connections
• Design and deploy ARM Templates
• Manage Azure security and Recovery Services
• Manage Azure operations, including automation and data analysis
• Manage identities with Azure AD Connect Health, Azure AD Domain Services, and Azure AD single sign on

This Microsoft Exam Ref:

• Organizes its coverage by exam objectives
• Features strategic, what-if scenarios to challenge you
• Assumes you are an IT professional with experience implementing and monitoring cloud and hybrid solutions and/or supporting application lifecycle management

This book covers the 533 objectives as of December 2017. If there are updates for this book, you will find them at https://aka.ms/examref5332E/errata.

About the Exam

Exam 70-533 focuses on skills and knowledge for provisioning and managing services in Microsoft Azure, including: implementing infrastructure components such as virtual networks, virtual machines, containers, web and mobile apps, and storage; planning and managing Azure AD, and configuring Azure AD integration with on-premises Active Directory domains.

About Microsoft Certification

Passing this exam helps qualify you for MCSA: Cloud Platform Microsoft Certified Solutions Associate certification, demonstrating your expertise in applying Microsoft cloud technologies to reduce costs and deliver value. To earn this certification, you must also pass any one of the following exams: 70-532 Developing Microsoft Azure Solutions, or 70-534 Architecting Microsoft Azure Solutions, or 70-535, Architecting Microsoft Azure Solutions, or 70-537: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack.

CHAPTER 1
Design and implement Azure App Service Web Apps

Microsoft Azure Web Apps is a fully managed Platform as a Service (PaaS) that enables you to build, deploy, and scale enterprise-grade web applications in seconds. Whether your organization requires a global web presence for the organization’s .com site, a solution to a line-of-business intranet application that is secure and highly available, or a site for a digital marketing campaign, Web Apps is the fastest way to create these web applications in Azure. Of all the Azure compute options, Web Apps is among the simplest to implement for scalability and manageability, and for capitalizing on the elasticity of cloud computing.

IMPORTANT: Have you read page xvii?

It contains valuable information regarding the skills you need to pass the exam.

MORE INFO COMPARING AZURE COMPUTE CHOICES

A feature comparison between the different Azure compute choices is available at https://docs.microsoft.com/en-us/azure/app-service-web/choose-web-site-cloud-service-vm.

This chapter covers Azure Web Apps through the lens of an IT professional responsible for deploying, configuring, monitoring, and managing Web Apps. As such, the tools that will be used to demonstrate these functions will be as follows:

• Azure Portal
• Azure PowerShell Cmdlets, v4.2.1
• Azure CLI 2.0, v2.0.12

MORE INFO AZURE POWERSHELL CMDLETS AND CLI TOOLS

The Azure PowerShell Cmdlets and CLI tools can be downloaded and installed at: https://azure.microsoft.com/en-us/downloads/. Scroll down to the command-line tools section for installation links and documentation.

Skills covered in this chapter

• Skill 1.1: Deploy web apps
• Skill 1.2: Configure web apps
• Skill 1.3: Configure diagnostics, monitoring, and analytics
• Skill 1.4: Configure scale and resilience

Skill 1.1: Deploy web apps

As an IT professional, you need to understand how to create the infrastructure to host a web application. At a minimum, this means creating two resources: a web app and an App Service plan. The web app is the resource for which an application runs in. The App Service plan is the resource that defines the location, size, capacity, and features for which the web app will run on.

You will often need to create additional resources the application requires. For example, the application may require a SQL Database for storing data, a Redis cache for caching, a storage account for storing metadata, and perhaps a Contend Delivery Network (CDN) for serving static data to end users. Understanding the resource requirements for the application will help you determine the infrastructure you need to deploy to support it.

This skill covers how to:

• Create an App Service Plan
• Create a web app
• Create deployment slots
• Swap deployment slots
• Deploy an application
• Migrate a web app to a different App Service Plan

Create an App Service Plan

Azure Web Apps use App Service plans to group features and capacity settings that can be shared across one or more web apps. This enables you to more easily manage costs and resources for your web apps. App service plans are available in the following pricing tiers:

• Free
• Shared
• Basic
• Standard
• Premium
• Isolated

EXAM TIP

The Basic, Standard, Premium, and Isolated tiers offer you dedicated compute resources. The Free and Shared tiers use shared compute resources with other Azure tenants. Furthermore, with Free and Shared, you are throttled to not exceed certain limits, such as CPU time, RAM consumption, and network bandwidth. More information on limits, quotas and constraints is available at https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits.

Within the Basic, Standard, Premium, and Isolated tiers, you have three types of plans to choose from that vary only in their capacity, such as the number of cores and amount of RAM. As an example, the three types of plans in the Premium tier are shown in Figure 1-1.

FIGURE 1-1 Premium tier options for web apps as shown in the Azure portal

You can create a new app service plan when you create a new web app using the Azure portal. Or, you can create an app service plan first and then use it later when creating one or more web apps.

EXAM TIP

The Isolated pricing tier is only available for App Service Environments (ASE). ASE’s is a feature of Azure App Service that provides a dedicated and fully isolated environment for running app service apps (web apps, API apps, and mobile apps). Because ASE’s provide dedicated resources, they are ideal for scenarios where you have very high scale and/or memory requirements.

A unique feature of ASE’s is that they are deployed inside a subnet in a virtual network. This is how isolation is achieved. Being contained within a virtual network, ASE’s can be protected using network security controls such as Network Security Groups (NSGs) with inbound and outbound traffic rules. Because ASE’s are always deployed in a virtual network, they are ideal for scenarios where you have increased security requirements or when you want to use a virtual appliance for packet inspection, firewall protection, and other network security controls.

ASE’s can be internet-facing through one or more public IP addresses. These are called External ASE’s. An example where you may have multiple IP addresses is when your app service is hosting multiple web apps, and you need separate public IP addresses for each.

ASE’s can be strictly internal (not internet-facing), where web apps are deployed behind an internal load balancer (ILB). These are called ILB ASE’s and generally intended for scenarios where your virtual network is connected to an on-premises environment using either a site-to-site or ExpressRoute VPN.

Finally, because ASE’s are bound to a virtual network, there are some things you need to consider regarding your virtual network configuration, inbound and outbound traffic rules, and portal dependencies. Information on these additional considerations are available at: https://docs.microsoft.com/en-us/azure/app-service/app-service-environment/network-info.

Create an app service plan (Azure portal)

In the Azure portal, search the Marketplace for App Service Plan and open the New App Service Plan blade. Specify a name, location, operating system type (Windows or Linux), and the pricing tier as shown in Figure 1-2.

FIGURE 1-2 New App Service Plan blade in the Azure portal

Create an app service plan (PowerShell)

Use the New-AzureRmAppServicePlan cmdlet to create a new app service plan.

Click here to view code image

# Define properties for the app service plan
$resourceGroupName = "cont...