Book Image

Implementing Microsoft Azure Architect Technologies: AZ-303 Exam Prep and Beyond - Second Edition

By : Brett Hargreaves, Sjoukje Zaal
Book Image

Implementing Microsoft Azure Architect Technologies: AZ-303 Exam Prep and Beyond - Second Edition

By: Brett Hargreaves, Sjoukje Zaal

Overview of this book

From designing solutions on Azure to configuring and managing virtual networks, the AZ-303 certification validates your knowledge and skills for all this and much more. Whether you want to take the certification exam or gain hands-on experience in administering, developing, and architecting Azure solutions, this study guide will help you get started. Divided into four modules, this book systematically takes you through the wide range of concepts and features covered in the AZ-303 exam. The first module demonstrates how to implement and monitor infrastructure. You'll develop the skills required to deploy and manage core Azure components such as virtual machines, networking, storage, and Active Directory (AD). As you progress, you'll build on that knowledge and learn how to create resilient and secure applications before moving on to working with web apps, functions, and containers. The final module will get you up to speed with data platforms such as SQL and Cosmos DB, including how to configure the different high availability options. Finally, you'll solve mock tests and assess yourself with the answers provided to get ready to take the exam with confidence. By the end of this book, you'll have learned the concepts and techniques you need to know to prepare for the AZ-303 exam and design effective solutions on Microsoft Azure.
Table of Contents (25 chapters)
1
Section 1: Implement and Monitor Azure Infrastructure
10
Section 2: Implement Management and Security Solutions
14
Section 3: Implement Solutions for Apps
18
Section 4: Implement and Manage Data Platforms
21
Chapter 17: Mock Exam Questions
22
Chapter 18: Mock Exam Answers

Using Azure Bastion

When working with VMs, it is common to connect to them using RDP or SSH, which, in turn, requires port 3389(RDP) or 22(SSH) to be opened on your VM.

If the VM is connected to an internal network, in other words, you need to use a VPN or an ExpressRoute to connect to your VM, this isn't a problem. However, connecting via RDP to a public IP on your VM is considered insecure, especially if you have to provide this access for all the VMs in your subscription.

One potential solution is to use a jump box, or bastion host in your subscription – a dedicated VM that has RDP open that can then be used to access other VMs using the internal IP addresses. However, this still means at least one VM is open and is susceptible to port scans and attacks.

Another more secure alternative is to use the Azure Bastion service. Azure Bastion is a portal-based solution, meaning you can access your VMs via the Azure portal over HTTPS. This enables you to protect the...