Book Image

Implementing Microsoft Azure Architect Technologies: AZ-303 Exam Prep and Beyond - Second Edition

By : Brett Hargreaves, Sjoukje Zaal
Book Image

Implementing Microsoft Azure Architect Technologies: AZ-303 Exam Prep and Beyond - Second Edition

By: Brett Hargreaves, Sjoukje Zaal

Overview of this book

From designing solutions on Azure to configuring and managing virtual networks, the AZ-303 certification validates your knowledge and skills for all this and much more. Whether you want to take the certification exam or gain hands-on experience in administering, developing, and architecting Azure solutions, this study guide will help you get started. Divided into four modules, this book systematically takes you through the wide range of concepts and features covered in the AZ-303 exam. The first module demonstrates how to implement and monitor infrastructure. You'll develop the skills required to deploy and manage core Azure components such as virtual machines, networking, storage, and Active Directory (AD). As you progress, you'll build on that knowledge and learn how to create resilient and secure applications before moving on to working with web apps, functions, and containers. The final module will get you up to speed with data platforms such as SQL and Cosmos DB, including how to configure the different high availability options. Finally, you'll solve mock tests and assess yourself with the answers provided to get ready to take the exam with confidence. By the end of this book, you'll have learned the concepts and techniques you need to know to prepare for the AZ-303 exam and design effective solutions on Microsoft Azure.
Table of Contents (25 chapters)
1
Section 1: Implement and Monitor Azure Infrastructure
10
Section 2: Implement Management and Security Solutions
14
Section 3: Implement Solutions for Apps
18
Section 4: Implement and Manage Data Platforms
21
Chapter 17: Mock Exam Questions
22
Chapter 18: Mock Exam Answers

Implementing network security and application security groups

Some Azure components, such as VMs and application gateways, must be connected to a subnet within a VNet. When you create subnets, you can optionally attach an NSG, which can be used to control what ports can route into it.

When we created our VMs, an NSG is created and attached to the subnet they are in, and when we chose the option to open RDP and HTTP, these ports were added to that NSG.

To see the details of the NSG that was created, in the Azure portal, in the search box, type and then select Network Security Groups.

You will see a list of groups; one should be called PacktVM1-nsg and be in the PacktLBResourceGroup. Click on the NSG, as in the following example:

Figure 10.11 – Example NSG ruleset

In the preceding screenshot, we can see five inbound rules and three outbound. The top two inbound rules highlighted in red were created when we created our VM when we specified allowing...