WIXLIB

Answers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180Chapter 4Objective 3.1: Thought experiment180Objective 3.1: Review180Objective 3.2: Thought experiment181Objective 3.2: Review181Objective 3.3: Thought experiment183Objective 3.3: Review183Objective 3.4: Thought experiment184Objective 3.4: Review185Objective 3.5: Thought experiment185Objective 3.5: Review186Objective 3.6: Thought experiment187Objective 3.6: Review187Design an advanced application189Objective 4.1: Create compute-intensive applications . . . . . . . . . . . . . . . . 190Using Azure in a high-performance computing environment190Using Azure Batch193Understanding Azure Batch Apps199Implementing the Competing Consumers pattern200Objective summary202Objective review202Objective 4.2: Create long-running applications . . . . . . . . . . . . . . . . . . . . 203Designing available applications203Designing reliable applications207Designing scalable applications211Using Azure Autoscale213Using Cloud Services215Sample scenario: Cloud Services basics217Objective summary220Objective review220Objective 4.3: Select the appropriate storage option . . . . . . . . . . . . . . . . 221xUnderstanding data access patterns222Selecting a data storage solution224Contents697447 ER70-534.indb x5/5/2015 1:59:26 PM

Evaluating data storage qualities226Objective summary228Objective review228Objective 4.4: Integrate Azure services in a solution . . . . . . . . . . . . . . . . . 229Creating data-centric web applications230Working with Big Data and the Internet of Things233Building enterprise mobile applications236Creating media applications238Managing related services240Objective summary241Objective review242Answers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243Chapter 5Objective 4.1: Thought experiment243Objective 4.1: Review243Objective 4.2: Thought experiment244Objective 4.2: Review244Objective 4.3: Thought experiment246Objective 4.3: Review246Objective 4.4: Thought experiment247Objective 4.4: Review248Design Web Apps251Objective 5.1: Design web applications for scalability and performance 252Globally scale websites252Create websites using Microsoft Visual Studio254Debug websites257Understand supported languages259App Service Web Apps, Azure Virtual Machines, and Azure CloudServices263Objective summary268Objective review268Objective 5.2: Deploy websites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268Implement Azure Site Extensions269Create packages271Contents697447 ER70-534.indb xixi5/5/2015 1:59:26 PM

App Service Plan273Deployment slots275Resource groups277Publishing options278Objective summary285Objective review285Objective 5.3: Design websites for business continuity . . . . . . . . . . . . . . . 286Scale-up and scale-out with App Service Web Apps and Azure SQLDatabase287Configure data replication patterns289Update websites with minimal downtime291Backup and restore data291Design for disaster recovery294Deploy websites to multiple regions for high availability294Design data tier296Objective summary298Objective review299Answers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300Chapter 6Objective 5.1: Thought experiment300Objective 5.1: Review300Objective 5.2: Thought experiment301Objective 5.2: Review302Objective 5.3: Thought experiment303Objective 5.3: Review303Design a management, monitoring, and businesscontinuity strategy305Objective 6.1: Evaluate hybrid and Azure-hosted architecturesfor Microsoft System Center deployment . . . . . . . . . . . . . . . . . . . . . . . . 306xiiUnderstanding System Center components supportedin Azure306System Center deployment309Design considerations for managing Azure resources withSystem Center310Contents697447 ER70-534.indb xii5/5/2015 1:59:27 PM

Understanding which scenarios dictate a hybrid scenario312Objective summary315Objective review315Objective 6.2: Design a monitoring strategy . . . . . . . . . . . . . . . . . . . . . . . . 316Identify the Microsoft products and services for monitoringAzure solutions317Understand the capabilities of System Center for monitoringan Azure solution317Understand built-in Azure capabilities322Identify third-party monitoring tools, including open source323Describe use-cases for Operations Manager, Global ServiceMonitor, and Application Insights323Describe the use cases for WSUS, Configuration Manager,and custom solutions325Describe the Azure architecture constructs and how theyaffect a patching strategy327Objective summary329Objective review330Objective 6.3: Design Azure business continuity/disaster recovery(BC/DR) capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330Understand the architectural capabilities of businesscontinuity and disaster recovery331Describe Hyper-V Replica and Azure Site Recovery336Describe use-cases for Hyper-V Replica and Azure SiteRecovery338Objective summary340Objective review340Objective 6.4: Design a disaster recovery strategy . . . . . . . . . . . . . . . . . . . 341Design and deploy Azure Backup and other Microsoftbackup solutions for Azure342Understand use-cases when StorSimple and Data ProtectionManager would be appropriate351Objective summary352Objective review353Contents697447 ER70-534.indb xiiixiii5/5/2015 1:59:27 PM

Objective 6.5: Design Azure Automation and PowerShell workflows . . . 354Create a Windows PowerShell script specific to Azure354Objective summary363Objective review364Objective 6.6: Describe the use cases for Azure Automationconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365Desired State Configuration366Windows PowerShell for automation368Chef and Puppet368Azure Automation369Objective summary370Objective review370Answers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372Objective 6.1: Thought experiment372Objective 6.1: Review372Objective 6.2: Thought experiment373Objective 6.2: Review374Objective 6.3: Thought experiment374Objective 6.3: Review375Objective 6.4: Thought experiment376Objective 6.4: Review376Objective 6.5: Thought experiment377Objective 6.5: Review377Objective 6.6: Thought experiment378Objective 6.6: Review379Index381What do you think of this book? We want to hear from you!Microsoft is interested in hearing your feedback so we can continually improve ourbooks and learning resources for you. To participate in a brief online survey, please tents697447 ER70-534.indb xiv5/5/2015 1:59:27 PM

IntroductionMost books take a very low-level approach, teaching you how to use individual classes andaccomplish fine-grained tasks. This book takes a high-level architectural view, building onyour knowledge of lower-level Microsoft Azure systems management experience and content. Both the exam and the book are so high-level, in fact, that there are very few step-bystep instructions involved. There is some coding (Windows PowerShell and Azure PowerShell)but it is minimized to getting started with managing Azure with PowerShell and an introduction to how you can use Windows and Azure PowerShell to design, build, and deploy systems in the Azure cloud. The Exam Ref has a huge advantage over other study mechanisms:It demonstrates what is on the exam while also helping you to understand what it takes todesign systems in real-world scenarios.This book covers every exam objective, but it does not cover every exam question. Onlythe Microsoft exam team has access to the exam questions themselves and Microsoft regularly adds new questions to the exam, making it impossible to cover specific questions. Youshould consider this book a supplement to your relevant real-world experience and otherstudy materials. If you encounter a topic in this book that you do not feel completely comfortable with, use the links you’ll find in the text to gain access to more information and takethe time to research and study the topic. Great information is available on MSDN, TechNet,and in blogs and forums.Microsoft certificationsMicrosoft certifications distinguish you by proving your command of a broad set of skills andexperience with current Microsoft products and technologies. The exams and correspondingcertifications are developed to validate your mastery of critical competencies as you designand develop, or implement and support, solutions with Microsoft products and technologies,both on-premises and in the cloud. Certification brings a variety of benefits to the individualand to employers and organizations.MORE INFOALL MICROSOFT CERTIFICATIONSFor information about Microsoft certifications, including a full list of available certifications, go to http://www.microsoft.com/learning.xv697447 ER70-534.indb xv5/5/2015 1:59:27 PM

AcknowledgmentsIt takes many people to make a book, and even more to make a technical exam reference.Thanks to the content authors: Haishi Bai (http://haishibai.blogspot.com) Steve Maier (http://42base13.net) Dan Stolts (http://ITProGuru.com)You can visit them and follow them on their blogs. Thanks to content providers and editors: Karen Szall, Devon Musgrave, Roberto Freato, and Bob Russell. Thanks to all those atMicrosoft Press and Microsoft Learning for driving this certification, content, and resultingbook. Most of all, thank you, for taking the time to learn about Azure cloud architecturethrough this exam reference guide.Free ebooks from Microsoft PressFrom technical overviews to in-depth information on special topics, the free ebooks fromMicrosoft Press cover a wide range of topics. These ebooks are available in PDF, EPUB, andMobi for Kindle formats, ready for you to download at:http://aka.ms/mspressfreeCheck back often to see what is new!Microsoft Virtual AcademyBuild your knowledge of Microsoft technologies with free expert-led online training fromMicrosoft Virtual Academy (MVA). MVA offers a comprehensive library of videos, live events,and more to help you learn the latest technologies and prepare for certification exams. You’llfind what you need here:http://www.microsoftvirtualacademy.comErrata, updates, & book supportWe’ve made every effort to ensure the accuracy of this book and its companion content. Youcan access updates to this book—in the form of a list of submitted errata and their If you discover an error that is not already listed, please submit it to us at the same page.xvi Introduction697447 ER70-534.indb xvi5/5/2015 1:59:27 PM

If you need additional support, email Microsoft Press Book Support at mspinput@microsoft.com.Please note that product support for Microsoft software and hardware is not offeredthrough the previous addresses. For help with Microsoft software or hardware, go to http://support.microsoft.com.We want to hear from youAt Microsoft Press, your satisfaction is our top priority, and your feedback our most valuableasset. Please tell us what you think of this book at:http://aka.ms/tellpressThe survey is short, and we read every one of your comments and ideas. Thanks in advance for your input!Stay in touchLet’s keep the conversation going! We’re on Twitter: http://twitter.com/MicrosoftPress.Introduction xvii697447 ER70-534.indb xvii5/5/2015 1:59:27 PM

Preparing for the examMicrosoft certification exams are a great way to build your resume and let the world knowabout your level of expertise. Certification exams validate your on-the-job experience andproduct knowledge. Although there is no substitute for on-the-job experience, preparationthrough study and hands-on practice can help you prepare for the exam. We recommendthat you augment your exam preparation plan by using a combination of available studymaterials and courses. For example, you might use the Exam ref and another study guide foryour “at home” preparation, and take a Microsoft Official Curriculum course for the classroomexperience. Choose the combination that you think works best for you.Note that this Exam Ref is based on publicly available information about the exam and theauthors’ experience. To safeguard the integrity of the exam, authors do not have access to thelive exam questions.xviii Introduction697447 ER70-534.indb xviii5/5/2015 1:59:27 PM

CHAPTER 1Design Microsoft Azureinfrastructure and networkingWhat is the cloud? Among all the possible definitions, one captures the essence of thecloud in the simplest way: “The cloud is a huge pool of resources that supports a variety ofservices.”The foundation of the cloud is a large pool of storage, compute, and networking resources. A key value proposition of the cloud is that you canacquire any amount of these resources at any time, from anyI M P O R TA N Twhere, without needing to worry about managing any underlyHave you reading infrastructures. And when you are done with these resourcpage page xviii?es, you can return them to the cloud just as easily to avoid theIt contains valuableunnecessary cost to keep them around.information regardingYou can run services on top of these resources. Some of thethe skills you need toservices give you access to the infrastructure, such as virtualpass the exam.machines (VMs) and virtual networks—these services are calledInfrastructure as a Service (IaaS). Some of the services providesupport for building your own services in the cloud—theseservices are called Platform as a Service (PaaS). On top of IaaS and PaaS run Software as aService (SaaS), which handle all kinds of workloads in the cloud.After presenting a brief introduction of Microsoft Azure datacenters, this chapter focuses mostly on IaaS. It introduces tools and services for managing compute and networkresources. In addition, it discusses design considerations and patterns to orchestrate theseresources into complete solutions.Objectives in this chapter: Objective 1.1: Describe how Azure uses Global Foundation Services (GFS) datacentersObjective 1.2: Design Azure virtual networks, networking services, DNS, DHCP, and IPaddressing configurationObjective 1.3: Design Azure ComputeObjective 1.4: Describe Azure virtual private network (VPN) and ExpressRoute architecture and designObjective 1.5: Describe Azure services1697447 ER70-534.indb 15/5/2015 1:59:27 PM

Objective 1.1: Describe how Azure uses GlobalFoundation Services (GFS) datacentersTo serve more than 1 billion customers across more than 140 countries and regions, Microsofthas built huge datacenters that have a combined total of more than 1 million servers. Thesedatacenters are strategically placed at different geographic locations and are connected byhigh-performance fiber-optic networks. They provide continuous supports to more than 200cloud services, such as Microsoft Bing, Office 365, OneDrive, Xbox Live, and Azure platform.Managing enormous resource pools is not an easy task. Microsoft has invested tremendous resources to build reliable, secure, and sustainable datacenters. The team that managesand runs Azure infrastructure is called Microsoft Cloud Infrastructure and Operations (MCIO),formerly known as Global Foundation Service (GFS). This objective goes behind the scenesand reveals how these datacenters are designed, built, and maintained.This section covers the following topics: Learning about Azure’s global footprints Understanding the design of cloud-scale data centers Designing for the cloudEXAM TIPYou might find both MCIO and GFS are used in documentation, online materials, andwhite papers to refer to the team that operates Azure datacenters. As far as the exam isconcerned, the two names are interchangeable. Also, sometimes Azure datacenters are referred to as Microsoft datacenters. The exam doesn’t distinguish between the two, either.Azure’s global footprintsAzure is available in 140 countries and supports 10 languages and 19 currencies. Massivedatacenters at 17 geographic regions provide scalable services to all Azure customers aroundthe globe. For example, Azure Storage stores more than 30 trillion objects and serves on average in excess of 3 million requests per second.2CHAPTER 1697447 ER70-534.indb 2Design Microsoft Azure infrastructure and networking5/5/2015 1:59:27 PM

MORE INFOINCREASING NUMBERSBack in 2012, Azure Storage maintained 4 trillion objects and served on average 270,000requests per second s-azure-storage4-trillion-objects-and-counting// ). The number of objects grew to 20 trillion in early and-patterns// ), and then it reached 30 trillion later that same year. But theseexact numbers don’t matter all that match; what’s important is to realize the rapid growthof Azure.Regions and datacentersAzure operates in 17 regions. Each region contains one or more datacenters. Table 1-1 listscurrent Azure regions and their corresponding geographic locations.TABLE 1-1 Azure regions and locationsAzure regionLocationCentral USIowaEast USVirginiaEast US 2VirginiaUS Gov IowaIowaUS Gov VirginiaVirginiaNorth Central USIllinoisSouth Central USTexasWest USCaliforniaNorth EuropeIrelandWest EuropeNetherlandsEast AsiaHong Kong SARSoutheast AsiaSingaporeJapan EastSaitama PrefectureJapan WestOsaka PrefectureBrazil SouthSao Paulo StateAustralia EastNew South WalesAustralia SoutheastVictoriaObjective 1.1: Describe how Azure uses Global Foundation Services (GFS) datacenters697447 ER70-534.indb 3CHAPTER 135/5/2015 1:59:27 PM

Be aware that in some texts the terms “regions” and “locations” are often used interchangeably. A datacenter is also sometimes referred as a facility. Azure doesn’t have a formalconcept of “zones,” although a zone roughly maps to a datacenter or a facility in some contexts. For example, Azure Storage provides Zone-Redundant Storage (ZRS), which maintainsthree copies of your data across two to three facilities within a single region or across tworegions.Another concept regarding compute resource placements is the Affinity Group. AffinityGroup is a way to group your cloud services by proximity to each other in an Azure datacenter to minimize communication latency. When you put your services in the same AffinityGroup, Azure knows that they should be deployed on hardware that is close to one anotherto reduce network latency.MORE INFOSTAMPSIn some online literatures, you might also see references to stamps. A stamp loosely refersto a group of server racks. It’s not an official concept and is never stipulated as a management or deployment boundary.Regional differencesNot all Azure regions provide the same set of services. As a new service is being rolled out,it might at first become available

Architecting Microsoft Azure Solutions Exam Ref 70-534 Haishi Bai Steve Maier Dan Stolts 6697447_ER70-534.indb i974