• Successful Azure Solution Architects start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking.
• Understanding of on-premises virtualization technologies, including VMs, virtual networking, and virtual hard disks.
• Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
• Understanding of Active Directory concepts, including domains, forests, domain controllers, replica­tion, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
• Understanding of resilience and disaster recovery, including backup and restore operations.

Expected learning

• Secure identities with Azure Active Directory and users and groups.
• Implement identity solutions spanning on-premises and cloud-based capabilities
• Apply monitoring solutions for collecting, combining, and analyzing data from different sources.
• Manage subscriptions, accounts, Azure policies, and Role-Based Access Control.
• Deploy globally distributed elastic database solutions with Azure Cosmos DB.
• Administer Azure using the Resource Manager, Azure portal, Cloud Shell, Azure PowerShell, CLI, and ARM templates.
• Configure intersite connectivity solutions like VNet Peering, virtual network gateways, and Site-to-Site VPN connections.
• Manage network traffic using network routing and service endpoints, Azure load balancer, and Azure Application Gateway.
• Implement, manage and secure Azure storage accounts and blob storage.
• Administer Azure App Service, Azure Container Instances, and Kubernetes.

This exam is part of the requirements for Microsoft Certified: Azure Solutions Architect Expert Candidates for this exam should have subject matter expertise in designing and implementing solutions that run on Microsoft Azure, including aspects like compute, network, storage, and security. Candidates should have intermediate-level skills for administering Azure. Candidates should understand Azure development and DevOps processes. A candidate for this exam should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance–this role should manage how decisions in each area affect an overall solution. In addition, this role should have expert-level skills in Azure administration and have experience with Azure development and DevOps processes.  

Skills measured

• Implement and monitor an Azure infrastructure (50-55%)
• Implement management and security solutions (25-30%)
• Implement solutions for apps (10-15%)
• Implement and manage data platforms (10-15%)

Exam basics

• How many questions will there be on the exam?

• How much time will I have to complete the exam?

The AZ-304 Microsoft Azure Architect Design certification combined with the AZ-303 Microsoft Azure Architect Technologies certification result in the Microsoft Certified: Azure Solutions Architect Expert certification
This course teaches Solutions Architects how to translate business requirements into secure, scalable, and reliable solutions. Lessons include virtualization, automation, networking, storage, identity, security, data platform, and application infrastructure. This course outlines how decisions in each these areas affects an overall solution. This course is for IT Professionals with expertise in designing and implementing solutions running on Microsoft Azure. They should have broad knowledge of IT operations, including networking, virtualiza­tion, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. Candidates must have expert-level skills in Azure administration and have experience with Azure devel­opment processes and DevOps processes.
Syllabus :
Module 1: Implement Virtual Networking

• Lesson 1: Virtual Networking
• Lesson 2: Virtual Network Peering
• Lesson 3: Implement VNet Peering

• Lesson 1: Overview Running Linux and Windows Virtual Machines on Azure
• Lesson 2: Select Virtual Machine Size
• Lesson 3: Configure High Availability
• Lesson 4: Implement Azure Dedicated Hosts
• Lesson 5: Deploy and Configure Scale Sets
• Lesson 6: Configure Azure Disk Encryption

• Lesson 1: Azure Resource Manager Templates
• Lesson 2: Save a Template for a VM
• Lesson 3: Evaluate Location of New Resources
• Lesson 4: Configure a Virtual Hard Disk Template
• Lesson 5: Deploy from a Template
• Lesson 6: Create and Execute an Automation Runbook

• Lesson 1: Implement Azure Load Balancer
• Lesson 2: Implement an Application Gateway
• Lesson 3: Web Application Firewall
• Lesson 4: Implement Azure Firewall
• Lesson 5: Implement Azure Front Door
• Lesson 6: Implementing Azure Traffic Manager
• Lesson 7: Implement Network Security Groups and Application Security Groups
• Lesson 8: Implement Azure Bastion

• Lesson 1: Storage Accounts
• Lesson 2: Blob Storage
• Lesson 3: Storage Security
• Lesson 4: Managing Storage
• Lesson 5: Accessing Blobs and Queues using AAD
• Lesson 6: Configure Azure Storage Firewalls and Virtual Networks

• Lesson 1: Overview of Azure Active Directory
• Lesson 2: Users and Groups
• Lesson 3: Domains and Custom Domains
• Lesson 4: Azure AD Identity Protection
• Lesson 5: Implement Conditional Access
• Lesson 7: Implement Bypass Options
• Lesson 8: Configure Trusted IPs
• Lesson 9: Configure Guest Users in Azure AD
• Lesson 10: Manage Multiple Directories

• Lesson 1: Create Management Groups, Subscriptions, and Resource Groups
• Lesson 2: Overview of Role-Based Access Control (RBAC)
• Lesson 3: Role-Based Access Control (RBAC) Roles
• Lesson 4: Azure AD Access Reviews
• Lesson 5: Implement and Configure an Azure Policy
• Lesson 6: Azure Blueprints

• Lesson 1: Install and Configure Azure AD Connect
• Lesson 2: Configure Password Sync and Password Writeback
• Lesson 3: Configure Azure AD Connect Health

• Lesson 1: Migrate Workloads using Azure Migrate
• Lesson 2: VMware Agentless Migration
• Lesson 3: VMware Agent-Based Migration
• Lesson 4: Implement Azure Backup
• Lesson 5: Azure to Azure Site Recovery
• Lesson 6: Implement Azure Update Management

• Lesson 1: Azure Infrastructure Security Monitoring
• Lesson 2: Azure Monitor
• Lesson 3: Azure Workbooks
• Lesson 4: Azure Alerts
• Lesson 5: Log Analytics
• Lesson 6: Network Watcher
• Lesson 7: Azure Service Health
• Lesson 8: Monitor Azure Costs
• Lesson 9: Azure Application Insights
• Lesson 10: Unified Monitoring in Azure

• Lesson 1: Azure Key Vault
• Lesson 2: Azure Managed Identity

• Lesson 1: Create and Configure Azure App Service
• Lesson 2: Create an App Service Web App for Containers
• Lesson 3: Create and Configure an App Service Plan
• Lesson 4: Configure Networking for an App Service
• Lesson 5: Create and Manage Deployment Slots
• Lesson 6: Implement Logic Apps
• Lesson 7: Implement Azure Functions

• Lesson 1: Azure Container Instances
• Lesson 2: Configure Azure Kubernetes Service

• Lesson 1: Configure Storage Account Tables
• Lesson 2: Select Appropriate CosmosDB APIs

• Lesson 1: Configure Azure SQL Database Settings
• Lesson 2: Implement Azure SQL Database Managed Instances
• Lesson 3: High-Availability and Azure SQL Database

AZ-303 Documentation Microsoft
Module 1 Implement Virtual Networking
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=thomasmaurer-blog-thmaure
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?WT.mc_id=thomasmaurer-blog-thmaure
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview?toc=/azure/virtual-network/toc.json
Module 2 Implement VMs for Windows and Linux   Module 3 Automate Deployment and Configu­ration of Resources   https://azure.microsoft.com/resources/templates?   https://docs.microsoft.com/en-us/azure/marketplace/cloud-partner-portal/virtual-machine/cpp-deploy-json-template   https://gallery.technet.microsoft.com/   https://docs.microsoft.com/en-us/powershell/scripting/gallery/how-to/publishing-packages/publishing-a-package   Module 4 Implement Load Balancing and Net­work Security   https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project   https://docs.microsoft.com/en-us/azure/frontdoor/front-door-url-rewrite   https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke   https://github.com/MicrosoftLearning/AZ-303-Microsoft-Azure-Architect-Technologies   https://aka.ms/303_Module_4_Lab   Module 5 Implement Storage Accounts
https://azure.microsoft.com/en-us/services/storage/blobs/   https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles   https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control   https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
https://docs.microsoft.com/en-us/cli/azure/authenticate-azure-cli   https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction   https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10   Module 6 Implement Azure Active Directory   Module 7 Implement and Manage Azure Gov­ernance Solutions   https://docs.microsoft.com/en-us/azure/azure-resource-manager/management-groups-overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/error-resource-quota
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules   Module 8 Implement and Manage Hybrid Identities   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-whatis   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis   https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identity-health    https://aka.ms/aadconnecthealth
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-agent-install
Module 9 Manage Workloads in Azure
Migrate Workloads using Azure Migrate

https://docs.microsoft.com/en-us/azure/migrate/tutorial-migrate-vmware
https://docs.microsoft.com/en-us/azure/migrate/server-migrate-overview
Module 10 Implement Cloud Infrastructure Monitoring   https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-collection
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview   https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-windows-agents
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-linux-agents
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-om-agents
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-azure-storage
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/query-language
https://azure.microsoft.com/en-us/services/network-watcher/   Module 11 Manage Security for Applications
https://docs.microsoft.com/en-us/azure/key-vault/quick-create-portal   Module 12 Implement an Application Infra­structure   https://azure.microsoft.com/solutions/serverless/   https://docs.microsoft.com/en-us/azure/azure-functions/supported-languages
Module 13 Implement Container-Based Appli­cations
Configure Azure Kubernetes Service
Module 14 Implement NoSQL Databases
Module 15 Implement Azure SQL Databases
Microsoft Learn
Microsoft Learn provides self paced skills training on a variety of topics. These Learn modules cover the content you have just learned. You can also search for additional content that might be helpful.   https://docs.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/   https://docs.microsoft.com/en-us/learn/modules/manage-users-and-groups-in-aad/   https://docs.microsoft.com/en-us/learn/modules/secure-azure-resources-with-rbac/   https://docs.microsoft.com/en-us/learn/modules/secure-aad-users-with-mfa/   https://docs.microsoft.com/en-us/learn/modules/allow-users-reset-their-password/
https://docs.microsoft.com/en-us/learn/modules/secure-app-with-oidc-and-azure-ad/   https://docs.microsoft.com/en-us/learn/modules/analyze-costs-create-budgets-azure-cost-management/   https://docs.microsoft.com/en-us/learn/modules/predict-costs-and-optimize-spending/   https://docs.microsoft.com/en-us/learn/modules/control-and-organize-with-azure-resource-manager/   https://docs.microsoft.com/en-us/learn/modules/intro-to-governance/   https://docs.microsoft.com/en-us/learn/modules/create-custom-azure-roles-with-rbac/   https://docs.microsoft.com/en-us/learn/modules/manage-subscription-access-azure-rbac/   https://docs.microsoft.com/en-us/learn/modules/secure-azure-resources-with-rbac/   https://docs.microsoft.com/en-us/learn/modules/tour-azure-portal/   https://docs.microsoft.com/en-us/learn/modules/control-and-organize-with-azure-resource-manager/   https://docs.microsoft.com/en-us/learn/modules/build-azure-vm-templates/   https://docs.microsoft.com/en-us/learn/modules/automate-azure-tasks-with-powershell/   https://docs.microsoft.com/en-us/learn/modules/manage-virtual-machines-with-azure-cli/   https://docs.microsoft.com/en-us/learn/modules/network-fundamentals/   https://docs.microsoft.com/en-us/learn/modules/design-ip-addressing-for-azure/   https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/   https://docs.microsoft.com/en-us/learn/modules/integrate-vnets-with-vnet-peering/   https://docs.microsoft.com/en-us/learn/modules/connect-on-premises-network-with-vpn-gateway/   https://docs.microsoft.com/en-us/learn/modules/connect-on-premises-network-with-expressroute/   https://docs.microsoft.com/en-us/learn/modules/control-network-traffic-flow-with-routes/   https://docs.microsoft.com/en-us/learn/modules/improve-app-scalability-resiliency-with-load-balancer/   https://docs.microsoft.com/en-us/learn/modules/load-balance-web-traffic-with-application-gateway/   https://docs.microsoft.com/en-us/learn/modules/distribute-load-with-traffic-manager/   https://docs.microsoft.com/en-us/learn/modules/create-azure-storage-account/