AZ-300 (Microsoft Azure Architect Tech.) Exam Study Guide

Preparing for AZ-300 Azure Architect exam? Don’t know where to start? This post is the AZ-300 Certificate Study Guide (with links to each exam objective).

I have curated a list of articles from Microsoft documentation for each objective of AZ-103 exam. I hope this article will be your AZ-300 Certificate Study Guide. Also, please share the post within your circles so it helps them to prepare for the exam.

 

AZ-300 Course (Online Training)

LinkedIn Learning (Free trial)
Prepare for Architect Certification [Learning Path]
Pluralsight (Learning Path)Microsoft Azure Architect Technologies
WhizlabsMicrosoft Azure Certified Architect
UdemyExam Preparation for Microsoft Architect Role

 

AZ-300 Practice Tests & Labs

Whizlabs Practice Tests5 Practice Tests (a total of 275 questions)
Udemy Practice Tests100 Practice Tests + Lab Scenarios

 

AZ-300 Exam Reference Books (PDF)

 

AZ-300 Exam Voucher

Test VoucherMicrosoft Azure Single Shot Exam Voucher ($30 OFF)

 

The AZ-301 Exam Certificate Guide is here. To view other Azure certificate study guides, click here

Full Disclosure: Some of the links in this post are affiliate links. I receive a commission when you purchase through them.

 

Looking for AZ-300 dumps? Read this!

Using az-300 exam dumps can get you permanently banned from taking any future Microsoft certificate exam. Read the FAQ page for more information. However, I strongly suggest you validate your understanding with practice questions.

If you are confused, if you should take az-300 or wait for az-303, this post will help answer some of your queries.

 

Deploy and Configure Infrastructure (40-45%)

Analyze Resource Utilization and Consumption

Configure diagnostic settings on resources

Linkedin Learning: Configure Diagnostic Setting (check with a free trial)

Create a baseline for resources

LinkedIn Learning: Creating a Baseline for Resources (check with a free trial)

Create and test alerts

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

Analyze alerts across subscription

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-managing-alert-instances

Analyze metrics across subscription

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-charts

Create action groups

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

Monitor for unused resources

https://docs.bmc.com/docs/reclaiming-the-unused-and-overallocated-azure-virtual-machines-785283461.html

Monitor spend

https://docs.microsoft.com/en-us/azure/billing/billing-getting-started

Report on spend

https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-usage-date

Utilize Log Search query functions

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries

View alerts in Azure Monitor logs

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-activity-log

Visualize diagnostics data using Azure Monitor Workbooks

https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-workbooks

https://github.com/microsoft/Application-Insights-Workbooks/blob/Visualizations.md

 

Create and Configure Storage Accounts

Configure network access to the storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Create and configure storage account

https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?tabs=azure-portal

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Generate shared access signature

https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1

Implement Azure AD authentication for storage

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app

Install and use Azure Storage Explorer

https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

Manage access keys

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage

Monitor activity log by using Azure Monitor logs

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit

Implement Azure storage replication

MSDN Blog: Azure Storage Replication Implementation

Implement Azure storage account failover

https://docs.microsoft.com/en-us/azure/storage/common/storage-initiate-account-failover?tabs=azure-portal

Amazon link (affiliate)

Create and Configure a VM for Windows and Linux

Check out this course on Azure VM

Configure high availability

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

https://www.youtube.com/watch?v=7tXoWN6Ucuw

Configure monitoring

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-monitoring

Configure networking

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-virtual-network

Configure storage

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/managed-disks-overview

Configure Virtual Machine Size

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes

Implement dedicated hosts

https://www.youtube.com/watch?v=5qegfWl5woo&feature=youtu.be

Deploy and configure scale sets

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-portal

 

Automate Deployment of VMs

Modify Azure Resource Manager template

https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource

Configure the location of new VMs

https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-migrate

Configure VHD template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-specialized

Deploy from template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Save a deployment as an Azure Resource Manager template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/download-template

Deploy Windows and Linux VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/create-ssh-secured-vm-from-template

 

Create Connectivity Between Virtual Networks

Create and configure Vnet peering

https://www.youtube.com/watch?v=SKGsf6J4IVI

Create and configure Vnet to Vnet connections

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps

Verify virtual network connectivity

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Create virtual network gateway

https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal

 

Implement and Manage Virtual Networking

Configure private IP addressing

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

Configure public IP addresses

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

Create and configure network routes

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table-portal

Create and configure network interface

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Create and configure subnets

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

Create and configure virtual network

https://docs.microsoft.com/en-us/azure/virtual-network/manage-virtual-network

Create and configure Network Security Groups and Application Security Groups

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic#create-a-network-security-group

https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic#create-application-security-groups

Amazon link (affiliate)

Manage Azure Active Directory

Add custom domains

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

Configure Azure AD Identity Protection

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/enable

Configure Azure AD Join

https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains

Configure self-service password reset

https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr

Implement conditional access policies

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-sign-in-risk

Manage multiple directories

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-directory-independence

Perform an access review

https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

 

Implement and Manage Hybrid Identities

Install and configure Azure AD Connect

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express

Configure federation and single sign-on

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-single-adfs-multitenant-federation

Configure single sign-on

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-portal

Manage and troubleshoot Azure AD Connect

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-post-installation

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-connectivity

Troubleshoot password sync and writeback

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-password-hash-synchronization

https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-passwords-troubleshoot#troubleshoot-password-writeback

 

Implement solutions that use virtual machines (VM)

Provision VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quick-create-portal

Create Azure Resource Manager templates

https://docs.microsoft.com/en-us/azure/azure-resource-manager/template-tutorial-create-first-template?tabs=azure-powershell

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

Configure Azure Disk Encryption for VMs

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-portal-quickstart

Implement Azure Backup for VMs

https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm

 

Implement Workloads and Security (20-25%)

Migrate Servers to Azure

Migrate servers using Azure Migrate

https://docs.microsoft.com/en-in/azure/migrate/tutorial-migrate-hyper-v

Backup and restore data

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

https://docs.microsoft.com/en-us/azure/backup/tutorial-restore-disk

 

Configure Serverless Computing

Create and manage objects

https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-your-first-function-visual-studio

Manage a Logic App resource

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview

Manage Azure Function app settings

https://docs.microsoft.com/en-us/azure/azure-functions/functions-how-to-use-azure-function-app-settings

Manage Event Grid

https://docs.microsoft.com/en-us/azure/event-grid/overview

Manage Service Bus

https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview

 

Implement Application Load Balancing

Configure application gateway

https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-powershell

Configure Azure Front Door service

https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

Configure Azure Traffic Manager

https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile

Check the FAQs on Azure Certification

Integrate On premises Network with Azure Virtual Network

Create and configure Azure VPN Gateway

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-tutorial-create-gateway-powershell

Create and configure site to site VPN

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Configure Express-Route

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

Configure Virtual WAN

https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan

Verify on premises connectivity

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Troubleshoot on premises connectivity with Azure

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

 

Implement Multi factor Authentication (MFA)

Configure user accounts for MFA

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates/enable-azure-mfa-by-changing-user-state

Configure fraud alerts

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings/fraud-alert

Configure bypass options

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings/one-time-bypass

Configure trusted IPs

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings/trusted-ips

Configure verification methods

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings/verification-methods

 

Manage Role based Access Control (RBAC)

Create a custom role

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Configure access to Azure resources by assigning roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Configure management access to Azure

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Troubleshoot RBAC

https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting

Implement Azure policies

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Assign RBAC roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/quickstart-assign-role-user-portal

 

Create and Deploy Apps (5-10%)

Create Web Apps by Using PaaS

Create an Azure App Service Web App

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-dotnet

Create documentation for the API

https://www.c-sharpcorner.com/article/azure-app-service-api-configure-swashbuckle/

Create an App Service Web App for containers

https://docs.microsoft.com/en-us/azure/app-service/app-service-web-get-started-windows-container

Create an App Service background task by using WebJobs

https://docs.microsoft.com/en-us/azure/app-service/webjobs-create

Enable diagnostics logging

https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs

 

Design and Develop Apps That Run in Containers

Configure diagnostic settings on resources

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-get-logs

Create a container image by using a Docker file

https://docs.microsoft.com/en-us/azure/container-registry/container-registry-quickstart-task-cli

Create an Azure Kubernetes Service

https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal

Publish an image to the Azure Container Registry

https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli

Implement an application that runs on an Azure Container Instance

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart-portal

Manage container settings by using code

https://azure.microsoft.com/en-gb/resources/samples/container-service-python-manage/

Amazon link (affiliate)

Implement Authentication and Secure Data (5-10%)

Implement Authentication

Implement authentication by using certificates, forms-based authentication, tokens, or Windows-integrated authentication

https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/forms-authentication

https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/integrated-windows-authentication

Implement multi-factor authentication by using Azure AD

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-mfa-applications

Implement OAuth2 authentication

https://docs.microsoft.com/en-us/azure/active-directory/develop/tutorial-v2-asp-webapp

Implement Managed identities for Azure resources Service Principal authentication

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

 

Implement Secure Data Solutions

Encrypt and decrypt data at rest and in transit

https://cloudacademy.com/blog/how-does-azure-encrypt-data/

Encrypt data with Always Encrypted

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-always-encrypted-azure-key-vault

Implement Azure Confidential Compute

https://azure.microsoft.com/en-in/blog/azure-confidential-computing/

Implement SSL/TLS communications

https://docs.microsoft.com/en-us/azure/storage/common/storage-security-tls

Create, read, update, and delete keys, secrets and certificates by using the KeyVault API

Keys

https://docs.microsoft.com/en-us/rest/api/keyvault/createkey/createkey

https://docs.microsoft.com/en-us/rest/api/keyvault/getkey/getkey

https://docs.microsoft.com/en-us/rest/api/keyvault/updatekey

https://docs.microsoft.com/en-us/rest/api/keyvault/deletekey

Secrets

https://docs.microsoft.com/en-us/rest/api/keyvault/setsecret/setsecret

https://docs.microsoft.com/en-us/rest/api/keyvault/getsecret/getsecret

https://docs.microsoft.com/en-us/rest/api/keyvault/updatesecret

https://docs.microsoft.com/en-us/rest/api/keyvault/deletesecret

Certificates

https://docs.microsoft.com/en-us/rest/api/keyvault/createcertificate/create

https://docs.microsoft.com/en-us/rest/api/keyvault/getcertificate/get

https://docs.microsoft.com/en-us/rest/api/keyvault/updatecertificate/update

https://docs.microsoft.com/en-us/rest/api/keyvault/deletecertificate/delete

 

Develop for the Cloud and for Azure Storage (15-20%)

Configure a Message-based Integration Architecture

Configure an app or service to send emails

https://docs.microsoft.com/en-us/azure/sendgrid-dotnet-how-to-send-email

Configure Event Grid

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-quickstart-powershell

Configure Azure Relay Service

https://docs.microsoft.com/en-us/azure/service-bus-relay/relay-hybrid-connections-dotnet-get-started

Create and configure a Notification Hub

https://docs.microsoft.com/en-us/azure/notification-hubs/create-notification-hub-portal

Create and configure an Event Hub

https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-create

Create and configure a Service Bus

https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-portal

Configure queries across multiple products

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query

 

Develop for Autoscaling

Implement autoscaling rules and patterns (schedule, operational/system metrics)

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-get-started

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-common-scale-patterns

Implement code that addresses singleton application instances

Check the entire module (Writing Code to Handle Singleton Application Instances) with a free trial

Implement code that addresses transient state

https://docs.microsoft.com/en-us/azure/architecture/best-practices/retry-service-specific

 

Develop Solutions That Use Cosmos DB Storage

Create, read, update, and delete data by using appropriate APIs

https://docs.microsoft.com/en-us/rest/api/cosmos-db/documents

Implement partitioning schemes

https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-model-partition-example

Set the appropriate consistency level for operations

https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels-choosing

 

Develop Solutions That Use a Relational Database

Provision and configure relational databases

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-single-database-get-started

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-server-level-firewall-rule

Configure elastic pools for Azure SQL Database

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-pool

Implement Azure SQL Database managed instances

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-get-started

Create, read, update, and delete data tables by using code

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connect-query-dotnet-core

This brings us to the end of AZ-300 Study Guide

What do you think? Let me know in the Comments section if I have missed out on anything. Also, I love to hear from you how your preparation is going on!

In case you are looking for other Azure certification exams check out this page

Sign up for Newsletter

Want to be notified as soon as I post? Subscribe to RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.

  • 1
  •  
  •  
  •  
  •  
    1
    Share

You may also like

13 Comments

  1. Hi Ravi,

    You had shown an Excel file for Azure topics in YouTube video , will you be able share in the soft copy

    Thanks
    Rajul

Leave a Reply

Your e-mail address will not be published. Required fields are marked *