AZ-300 Study Guide

AZ-300 Certificate Study Guide

Preparing for AZ-300 Azure Architect exam? Don’t know where to start? This post is the AZ-300 Certificate Study Guide (with links to each exam objective).

I have curated a list of articles from Microsoft documentation for each objective of AZ-103 exam. I hope this article will be your AZ-300 Certificate Study Guide. Also, please share the post within your circles so it helps them to prepare for the exam.


AZ-300 Preparation Options

Pluralsight (Free trial)Microsoft Azure Architect Technologies (AZ-300)
LinkedIn Learning (Free trial)Exam Tips: Azure Architect Technologies (AZ-300)
UdemyAZ-300: Microsoft Azure Architect Technologies


AZ-300 Practice Tests

Whizlabs Practice Tests5 Practice Tests for AZ-300 (a total of 275 questions)
Udemy Practice TestsAZ-300 (Lab Scenarios + Practice Tests)


AZ-300 Exam Reference Books (PDF)


The AZ-301 Exam Certificate Guide is here. To view other Azure certificate study guides, click here

Full disclosure: Some of the links in this post are affiliate links. I receive some commission if you purchase through them. This way you can support my blog at not extra cost to you!


Deploy and Configure Infrastructure (25-30%)

Analyze Resource Utilization and Consumption

Configure diagnostic settings on resources

Linkedin Learning: Configure Diagnostic Setting (check with a free trial)

Create a baseline for resources

LinkedIn Learning: Creating a Baseline for Resources (check with a free trial)

Create and test alerts

Analyze alerts across subscription

Analyze metrics across subscription

Create action groups

Monitor for unused resources

Monitor spend

Report on spend

Utilize Log Search query functions

View alerts in Azure Monitor logs


Create and Configure Storage Accounts

Configure network access to the storage account

Create the storage account

Configure the storage account

Generate shared access signature

Install and use Azure Storage Explorer

Manage access keys

Monitor activity log by using Azure Monitor logs

Implement Azure storage replication

MSDN Blog: Azure Storage Replication Implementation

Create and Configure a Virtual Machine (VM) for Windows and Linux

Configure high availability

Configure monitoring, networking, storage, and virtual machine size
deploy and configure scale sets





Scale set:


Automate Deployment of Virtual Machines (VMs)

Modify Azure Resource Manager template

Configure the location of new VMs

Configure VHD template

Deploy from template

Save a deployment as an Azure Resource Manager template

Deploy Windows VMs

Deploy Linux VMs


Implement Solutions That Use Virtual Machines (VM)

Provision VMs

Create Azure Resource Manager templates

Configure Azure Disk Encryption for VMs


Create Connectivity Between Virtual Networks

Create and configure VNET peering

Create and configure VNET to VNET

Verify virtual network connectivity

Create a virtual network gateway


Implement and Manage Virtual Networking

Configure public IP addresses

Configure private IP addresses

Configure network routes

Configure network interface

Configure subnets

Configure virtual network

Manage Azure Active Directory (AD)

Add custom domains

Configure Azure AD Identity Protection

Configure Azure AD Join

Configure Enterprise State Roaming

Configure self-service password reset

Implement conditional access policies

Manage multiple directories

Perform an access review


Implement and Manage Hybrid Identities

Install and configure Azure AD Connect

Configure federation and single sign-on

Manage Azure AD Connect

Manage password sync

Manage password writeback


Implement Workloads and Security (20-25%)

Migrate Servers to Azure

Migrate by using Azure Site Recovery

Migrate using P2V

Configure storage

Create a backup vault

Prepare source environment

Prepare target environment

Backup and restore data

Deploy Azure Site Recovery agent

Prepare virtual network


Configure Serverless Computing

Manage a Logic App resource

Manage Azure Function app settings

Manage Event Grid

Manage Service Bus


Implement Application Load Balancing

Configure application gateway and load balancing rules

Implement front end IP configurations

Manage application load balancing

Integrate the On-premises Network with Azure Virtual Network

Create and configure Azure VPN Gateway

Create and configure site to site VPN

Configure Express Route

Verify on-premises connectivity

Manage on-premises connectivity with Azure


Manage Role-based Access Control (RBAC)

Create a custom role

Configure access to Azure resources by assigning roles

Configure management access to Azure

Troubleshoot RBAC

Implement RBAC policies

Assign RBAC roles


Implement Multi-factor Authentication (MFA)

Enable MFA for an Azure tenant

Configure user accounts for MFA

Configure fraud alerts

Configure bypass options

Configure trusted IPs

Configure verification methods


Create and Deploy Apps (5-10%)

Create Web Apps by Using PaaS

Create an Azure App Service Web App

Create documentation for the API

Create an App Service Web App for containers

Create an App Service background task by using WebJobs

Enable diagnostics logging


Design and Develop Apps That Run in Containers

Configure diagnostic settings on resources

Create a container image by using a Docker file

Create an Azure Kubernetes Service

Publish an image to the Azure Container Registry

Implement an application that runs on an Azure Container Instance

Manage container settings by using code


Implement Authentication and Secure Data (5-10%)

Implement Authentication

Implement authentication by using certificates

Implement Forms-based authentication

Implement Token-based authentication

Windows-integrated authentication

Implement multi-factor authentication by using Azure AD

Implement OAuth2 authentication

Implement Managed identities for Azure resources Service Principal authentication


Implement Secure Data Solutions

Encrypt and decrypt data at rest and in transit

Encrypt data with Always Encrypted

Implement Azure Confidential Compute

Implement SSL/TLS communications

Create, read, update, and delete keys using the KeyVault API

Create, read, update, and delete secrets using the KeyVault API

Create, read, update, and delete certificates by using the KeyVault API


Develop for the Cloud and for Azure Storage (20-25%)

Develop Solutions That Use Cosmos DB Storage

Create, read, update, and delete data by using appropriate APIs

Implement partitioning schemes

Set the appropriate consistency level for operations


Develop Solutions That Use a Relational Database

Provision relational databases

Configure relational databases

Configure elastic pools for Azure SQL Database

Create, read, update, and delete data tables by using code


Configure a Message-based Integration Architecture

Configure an app or service to send emails

Configure Event Grid

Configure Azure Relay Service

Create and configure Notification Hub

Create and configure Event Hub

Create and configure Service Bus

Configure queries across multiple products


Develop for Autoscaling

Implement autoscaling rules and patterns (schedule, operational/system metrics)

Implement autoscaling rules and patterns (code that addresses singleton application instances)

Check the entire module (Writing Code to Handle Singleton Application Instances) with a free trial

Implement code that addresses the transient state

This brings us to the end of AZ-300 Study Guide

What do you think? Let me know in the Comments section if I have missed out on anything. Also, I love to hear from you how your preparation is going on!

In case you are looking for other Azure certification exams check out this page

Want to be notified as soon as I post? Subscribe to RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.


You may also like


Leave a Reply

Your e-mail address will not be published. Required fields are marked *