microsoft learning ignite | may 4 – 8, 2015 | chicago, il mark grimes | mcs | mct microsoft...

67
Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up.

Upload: andrew-terry

Post on 19-Dec-2015

213 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL

Mark Grimes | MCS | MCTMicrosoft Consulting Services

Light IT up.

Page 2: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Exam Preparation 70-534Mark GrimesSenior ConsultantMicrosoft Consulting Services

Aka.ms/certification/70-534

Page 3: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Session Objectives And Takeaways

Session Objective(s): Objective 1: Understand the Breakdown of Exam Contents by categoryObjective 2: Understand the correct study resources and linksObjective 3: Try to get you 4-7 conceptual points ahead!

Key Takeaway 1Increase participants’ ability to successfully prepare for and pass, Exam 70-534

Key Takeaway 2Understand architectural decisions for Microsoft Azure solutions

Page 4: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Azure CertificationThree Exams = MCSD: Azure Solutions Architect = BRAND NEW!Got your free book too?

Page 5: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Roadmap – Azure Certification

http://bit.ly/Ignite-CertApp

Page 6: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Breakdown

Mark Grimes

Page 7: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design Azure Infrastructure and Network-ing

17%

Secure Resources17%

Design and Application Storage and Data Access Strategy

17%

Design an Advanced Application17%

Design Websites17%

Design a Management, Monitoring and Business Continuity Strategy

17%

Design Azure Infrastructure and Networking

Secure Resources

Design and Application Storage and Data Access Strategy

Design an Advanced Application

Design Websites

Design a Management, Monitoring and Business Continuity Strategy

70-534 Exam Objectives

Page 8: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Side-by-side Comparison | 70-533/4

70-533 70-534

Implement WebsitesImplement Cloud Services

Design Websites

Implement StorageImplement Cloud Services

Design an Application Storage and Data Access Strategy

Implement Virtual NetworksImplement an Azure ADImplement Virtual Machines

Design Azure Infrastructure and Networking

Implement Cloud Services Design an Advanced Application

Page 9: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Microsoft Azure components

• Compute• Virtual Machines• Web Sites• Mobile Services• Cloud Services• Web Roles• Worker Roles

• Data Services• Storage• SQL Database• HDInsight• Cache• Redis

• Backup• Recovery Manager

• App Services• Media Services• Service Bus• Notification Hubs• Scheduler• Automation• BizTalk Services• BizTalk Hybrid Connections• Visual Studio Online• Active Directory• Multi Factor Authentication• API Management • Azure RemoteApp

Network ExpressRoute Virtual Network Traffic Manager CDN

SDK’s .NET Java PHP Python Node.js Ruby

Page 10: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design Azure Infrastructure & Networking

Global Foundatio

n Services

Virtual Networks

and Services

Azure Compute

VPN & Express Route

Azure Services

Page 11: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Global Foundation Services (GFS) DatacentersDatacenter Architecture19 Datacenters and growingIntegrates Software, hardware, operations

Regional Availability2 Regional Datacenters per Geographic Area16 Buildings per Region~600,000 Servers per regionFiber Infrastructure

High AvailabilityThousands of Servers in pluggable unitsFull Power Redundancy and ContingencyTriple Redundant data storage and geo replication

Global Foundation Services

Microsoft Azure

Office 365

Other Business

(CRM, etc.)

Consumer (Hotmail, OneDrive,

etc.)

MS IT

Page 12: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Virtual Networks and ServicesDNSDNS Resolves VMs by name within the same cloud serviceMachine names are modeled explicitly and registered in the DNS service

BYO DNS Use your on-premise DNS serversDeploy a DNS server in Windows AzureUse public DNS services

DHCPPublic IP Addresses in Azure PoolPublic IP to Every VM = PIPIP to Cloud Services = VIP or Reserved IP is STICKY!Can Move IPs across cloud services

Page 13: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Virtual Networks and ServicesNetwork Storage GroupsTied to subscriptionControl traffic from one VM to anotherContains Access Control rulesRequires a regional Vnet – if not, use ACLNot Compatible with Vnet tied to Affinity group

Understand ACLsCan Secure VM with input ACLsCan Permit or DenyThink “Packet Filtering”For Endpoints onlyCan also configure with PS

Page 14: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure ComputeIaaSInfrastructure-as-a-ServiceStorage/Compute/Network

PaaSInfrastructure-as-a-Service-faster, cheaper, lower risk

Page 15: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure ComputeMachine ClassificationsA FamilyHighest value VM Size

Basic and Standard Sizes

General Purpose and High Memory

High Performance A8/A9 (RDMA)

D Family60% faster CPU

Up to 112 GB Memory

Local SSD storage

G FamilyOptimized for data workloads

Up to 32 CPU cores, 448 GB RAM, 6.5 TB local SSD

Latest generation Intel processor

Page 16: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Cloud Services, Roles and InstancesCloud Service is a management, configuration, security, networking and service model boundary

VM1 VM2 VM3

VM4 VM5 VM…

INS

TA

NC

ES

RO

LES

Page 17: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Virtual Machines“Standalone” Virtual Machines are Cloud Services roles with exactly one instance

VM

Page 18: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Connected Virtual MachinesMultiple Virtual Machines can be hosted within the same cloud service

VM VM

Page 19: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure ComputeFault DomainsRepresent groups of resources anticipated to fail together i.e. Same rack, same serverFabric spreads instances across fault at least 2 fault domains

Update DomainsRepresents groups of resources that will be updated togetherHost OS updates honour service update domainsSpecified in service definitionDefault of 5 (up to 20)

Availability SetsVMs in separate Fault DomainsSLA 99.95 | HW SW | Windows & Linux

Page 20: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

VPN and Express Route

Reduces Risk, Complexity, Costs, Latency | Increases Bandwidth & AvailabilitySee

Cloud Customer Segment and workloads

Secure point-to-site connectivityVirtual network (Point-to-Site)

• Developers• POC Efforts• Small scale

deployments• Connect from

anywhereSecure site-to-site VPN connectivityVirtual network (Site-to-Site)

• SMB, Enterprises• Connect to Azure

compute• IaaS and PaaS workloads

Private site-to-site connectivityExpressRoute

• SMB & Enterprises• Mission critical workloads• Backup/DR, media, HPC• Connect to all hardware

Page 21: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Describe Azure App ServicesAzure ADIdentity and Access capabilitiesLeverage for SSO for LoB and SaaSQuery and Manage Objects through Graph API

Azure CacheProvides super fast data access3 Flavors: Azure Redis, Managed Cache ServiceIn-Role Cache

MFARequires verificationMobile App, phone call, SMSWith Azure AD or customer apps/directories (SDK)On-premises option available

Service BusHosted Communications InfrastructureRelayed and Brokered messagingReliably stores messages until other side ready

Page 22: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Describe Azure ServicesTraffic ManagerControl the distribution of user traffic to various endpointsIntelligent Policy Engine to DNS queries

Media ServicesScalable media management and delivery of applicationsSecure upload, store, encode & package dataBoth on-demand and streaming

CDNGlobal SolutionDeliver High Bandwidth ContentProvide Maximum bandwidth

Page 23: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

This Azure Service provides connectivity options for WCF and other service endpoints e.g. REST1. Service Bus2. Azure Cache3. MFA4. CDN5. Traffic Manager

1. Service Bus2. Azure Cache3. MFA4. CDN5. Traffic Manager

Page 24: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Secure Resources

Using Manage

d Identitie

s

Using Hybrid

Identities

Data Security Solution

Role Based Access

Strategy

Page 25: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Secure Resources using Managed IdentitiesAD On-premises vs Azure ADGraph APIProgrammatic Access to Azure AD | RESTfulCRUD | Application must be registered and configuredRequests use standard HTTP Methods

OAuthAuthZ web apps and web APIs in Azure AD TenantAccess authorization, role-based assignment for app and user authorization

OpenID ConnectAuthZ protocol for SSOExtends Oauth 2.0 for use as AuthN protocol

Page 26: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Secure Resources using Hybrid IdentitiesSAML AuthNClaims or Assertions about objectsXML token form

DirSync ReplicationSynchronization between On-premises and Azure ADFiltering by OU and or Attributes

Federation via AD FS and ACSAD FS - SSO by trusted relationshipsACS – Cloud Based AuthN and AuthZ

Integrated with stds based IdPs and Web IdentitiesMultiple protocol support and web platforms

Page 27: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Use Appropriate Data Security SolutionData In TransitImport/Export ServiceThink Hybrid, Across Service BusAlso includes internal movement e.g. 2 VMsBitlocker Drives to protect in transit –MandatoryCustomer Facing secured with• SSL/TLS• All LDAP within and between datacenters is signed

Data at RestIncludes: Storage Objects, containers % Physical Media2 Types: Data in Production and not e.g. VHDSecret keys all stored in Directory• Encrypted using Distributed Key Manager (DKM)See “Protecting Data in Microsoft Azure”

Page 28: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design an RBAC StrategySecure Resource ScopesEvery Azure subscription associated w/ Azure Active Directory. Built in Roles assigned to Azure AD users, groups, and services3 Ways to Assign roles: 1. subscription 2. resource group 3. resource level. Assigned role defines the level of access on the Azure resource.

3 built-in roles Owner: has full control over Azure resources. Owner can perform all management operations on a resource including access management. Contributor: can perform all management operations except access management. So, a contributor can’t grant access to others.Reader: can only view resources. Reader can’t view secrets associated with a resource.

Xplat-cli | Same functionality as Azure PortalWritten in JavaScript and requires Node.js @github

Page 29: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

This provides programmatic access to Azure AD

1. Remote PowerShell2. LDIFDE3. Graph API4. OpenID Connect5. OAuth

1. Remote PowerShell2. LDIFDE3. Graph API4. OpenID Connect5. OAuth

Page 30: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design Application Access and Data Strategy

Data Storage

Mobile Services

Push Notificatio

n

Web API

Data Access

Strategy

Page 31: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design Data StorageData Storage OptionsTable StorageSQL Database, My SQLDocumentDB (NoSQL)BlobMongoDB

Data Security OptionsAzure Storage | Share Access Signature - SASSQL Database – same model as on-premises

Page 32: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure Mobile Services

Node.js Express

.NET Web API

Azure Active

Directory

User Authentication

Facebook

Twitter Microsoft GoogleR

ES

T A

PI

Data

SQL Tables Mongo DB On-premises

Push Notifications

Windows

iOSOSX

Android

Chrome

Offline Sync

Native SDKs

X-Plat SDKsAzure Active

Directory

WindowsiOSAndroid

HTML5/JSXamarinPhonegapSencha Kindle In-app

Office 365

Salesforce

Dynamics

Page 33: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design Applications using Mobile ServicesCreate and Consume Mobile ServicesChoose Backend | JavaScript or .Net | no going back!Globally Unique name w/in Mobile Svcs | 2-60 charRequires Azure SQL | Use existing (saves cost) or create newMust use Region | Affinity groups not usedSee also See more for Data AccessData stored in Tables

Integrate offline sync capabilities into an AppUpdate App to support feature

initialize MobileServiceClient.SyncContext to a local storeThen reference your table through the IMobileServiceSyncTable interface

SQLite for Windows 8 Phone projectsChange Processor Architecture to x86, x64 or ARMIn VS, run Manage Nuget Packages , install the WindowsAzure.MobileServices.SQLiteStore package see more Using Offline data sync in Mobile Services

Mark Grimes
would using RESTAPI be a way to consume the services?
Page 34: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design Application that use NotificationsImplement Push notification services in Mobile SvcsRegister App with WINS and configure Mobile ServicesUpdate the app to register for notificationsUpdate server scripts to send notificationsInsert data to receive push notifications see more

Send Push Notifications to all subscribersNotification Hubs to broadcastUse TAGS to to subscribe for notifications for different news categoriesUse Template feature for localization. Can use tags also e.g. world_en world_fr

Send Push Notifications to a segment of subscribersCan send only to specific Authenticated UsersUpdate Service to require AuthNSee more

Page 35: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design Applications that use a Web APIImplement a Custom APIPublish to External, Partner and Internal developersExtend Operations for data and servicesEach API has 1 or more operationsEach API can be added to one or more productsThus..Subscribe to Product > which contains that API, then call the API’s operationSee more

Scale using Azure WebsitesFree -> Shared -> Basic -> Standard2 Actions: Change Plan + Configure Settings (Scale tab)Choose Instance Size | S,M,L | but not in Shared modeSelect Instance Count see more

Page 36: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design Applications that use a Web APIOffload long running Websites WebJobsRun Programs or Scripts 3 ways

1. On demand 2. 2.Continuously 3. 3.On a schedule

No Additional Cost to use WebJobsDeploy in 3 ways:

1. Portal 2. VS 3. Continuous Delivery

See more

Secure web API w/Azure ADDeveloper and Standard Pricing TierClient Certs | API Mgt REST API | Ext IDs | DelegationOpen Source for .Net, Windows Store, iOS & Android

Page 37: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design a Data Access Strategy for HybridConnect to On-premises usingService BusBizTalk Hybrid ConnectionsVPN Capabilities of websites

Constraints for Connectivity with VPNS2S - Need externally facing IPv4 IP address & VPN device or RRASP2S - must have VPN client on every clientExpressRoute – Service Provider must support e.g. MPLS

Options to join VMs to domains or Cloud servicesSelect Existing Cloud Service or Create New One

Page 38: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design a Media SolutionOverviewBuild Scalable Media Management and DeliverySecurely Upload, Store, Encode and Package AV for On-Demand and Live StreamingClients such as TV, PC, and mobile devicesCan use end-end workflows

Streaming CapabilitiesIngest, Preview, Store, Deliver Content2 Encode Options• Encode directly to Smooth Streaming • Encode to MP4 and then convert to Smooth StreamingUse Common Protocols e.g. MPEG DASH, Smooth, HLS, HDSOr to a Content Delivery Network for further Distribution – scale to millions

Page 39: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design a Media SolutionVideo on-demandBlobs only supported storage type

Monitoring ServicesBlobs only supported storage typeMonitor Blob, Table and Queue Services

3 Levels

Minimal - Collects metrics such as ingress/egress, availability, latency, and success percentages, which are aggregated for the Blob, Table, and Queue services.Verbose - In addition to the minimal metrics, collects the same set of metrics for each storage operation in the Azure Storage Service API. Verbose metrics enable closer analysis of issues that occur during application operations. Off - Turns off monitoring. Existing monitoring data is persisted through the end of the retention period.

Page 40: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

This feature set of Azure Media Services encrypts live streaming or on demand content 1. Encode2. Ingest3. Protect4. Stream

1. Encode2. Ingest3. Protect4. Stream

Page 41: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design an Advanced Application

Compute Intensive

Worker Roles &

Stateless Component

s

Appropriate Storage Option

Integrate Azure

Services

Page 42: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Create Compute-intensive applicationsDesign High Performance Computing (HPC)HPC Pack 2012 R2Microsoft MPI 2012 R2Scheduler

Other compute-intensive applicationsMPI – Message Passing Interface Applications on A8 and A9 instancesAzure Worker RoleHPC Services for ExcelJava on a Virtual Machine

Deployment OptionsHybrid with On-premisesMicrosoft Azure exclusivelyParametric Sweep

Page 43: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Create Long-Running Applications Implement Worker Roles Can run asynchronous, long-running or perpetual tasks independent of user interaction or input.

Design Stateless ComponentsFollow Communications Pattern of WCFAllows Fabric to route requests to any Web Role in Cluster

Page 44: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Select the Appropriate Storage OptionQueue Centric pattern for developmentAppropriate Storage for PerformanceStorage OptionsFor Cloud ServicesVMs interacting with

Storage ServiceSQL Database

Page 45: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Integrate Azure ServicesUse of Machine LearningA fully managed service Create, test, operationalize and manage predictive analytics solutions in the cloud.

Big DataHDInsight service that deploys and provisions Apache Hadoop clusters in the cloudProvides Software Framework to manage, analyze and report on big data

Media ServicesScalable Media Management and Delivery ApplicationsCan Securely upload, store, encode and package audio/video content OnDemand or Streaming

Azure SearchDelegates Server and Infrastructure ManagementReady to us service to populate search data

Page 46: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Which is the best option to run synchronous, long running or perpetual tasks1. Virtual Machines2. Cloud Services3. Worker Roles4. Web Jobs5. Network Security Groups

1. Virtual Machines2. Cloud Services3. Worker Roles4. Web Jobs5. Network Security Groups

Page 47: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design Websites

Scalability &

Performance

Deploy Websites

Business Continuity

Page 48: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Websites for Scalability and PerformanceWebsitesNear instant deploymentSSL and Custom Domain Names only on Basic / Std modesWebjobs provide background processing for independent scalingCan Scale to larger machines without Redeploy

VMsNeed Affinity Group and LB to prevent simultaneous restarts for maintenance or HW fails

Cloud ServicesBetter for more control over web server envRemote into Server or Startup Tasks

For all the Above SeeWebsites, Cloud Services and Virtual Machines Comparison

Page 49: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Deploy WebsitesImplement Azure Site ExtensionsSite extensions are web apps with simple metadata for extension registration.

Can be authored for any development stack supported by the Azure Websites platformAn extensible management end point per Azure WebsiteSource code editors e.g. VSO for connected resources such as a MySQL database Available per website in Azure Preview Portal:Packaged in NuGet format

Page 50: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Deploy WebsitesCreate PackagesContinuous Delivery w/ VSOUse Tem Foundation Version Control (TFVC) for source control

Deployment SlotsSTANDARD mode websites requiredStaging SlotProduction Slot

Web DeployOlder IIS Extension method to Export and Import

FTP Locations SettingsDeployment or Profile Publishing Settings

Page 51: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Websites for Business Continuity Scale up and out - Azure Websites and SQL

Design for DRSecondary RegionPublish to new regionUpdate DNS, SSL, CNAME, etc..

Design Data TierAzure SQLBuilt-in HAmultiple copies of all data in different physical nodes located across fully independent physical sub-systems to mitigate outages due to failures of individual server components, such as hard drives, network interface adapters, or even entire servers. At any one time, three database replicas are running—

Page 52: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

What is the best option to add background processing to your app?1. Virtual Machines2. Cloud Services3. Worker Roles4. Web Jobs5. Network Security Groups

1. Virtual Machines2. Cloud Services3. Worker Roles4. Web Jobs5. Network Security Groups

Page 53: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Design a Management, Monitoring and Business Continuity Strategy

Hybrid and Azure-

hosted for System Center

Monitoring Strategy

BC/DR Capabilities

Design DR Strategy

Azure Automation and PS WF

Automation Use Cases

Page 54: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Hybrid & Azure Architectures for System CenterCommon ElementsIdentity, Virtualization, Management, Development and Data Platform across…

Considerations for Managing resources with System CenterConfiguration Manger – Client Device and Application ManagementOperations Manager – Monitoring and AlertingVirtual Machine Manager – DataCenter MgtService Manager – ITIL based SM and Human WF + CMDBData Protection Manager – Backup and Disaster RecoveryOrchestrator – Workflow Engine

Scenarios for HybridPrivate CloudPublic Cloud Service Provider Cloud

Page 55: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design a Monitoring Strategy

Real User Experience

Application

Global Service Monitor Operations

Manager

Transaction

Reliability

Availability

Transaction

Team Foundation Server

Ale

rts

Visual Studio Developer

Work Items

IntelliTrace

Build / DeployWebtest

Webtest Upload

PerformanceW

ebte

st

Page 56: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure BCR/DR CapabilitiesHyper-V ReplicaSimple, Affordable Second Site“Extended Replication” -3rd

Hardware Agnostic – either side

Hybrid CloudSeamless Integration:• Private Cloud to…• Service Provider Cloud• Windows Azure

ASRWHEN TO USE: 2nd Site / Use SCCMM, Unprotected workloadsWHEN NOT: Workload requires synchronous replication, data outside of VHDWorkload needs to recover physical servers, beyond Hyper-V replica’s capabilities

Page 57: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Disaster Recovery StrategyBackup SolutionsMicrosoft Azure Backup• Reliable, Simple, Efficient• Use for Branch Office or Small BusinessHyper-V Recovery Manager

StorSimpleProprietary Device | Multiple TiersCloud Integrated Storage (CiS)Seamless view of ALL Enterprise Storage | Windows and VMWare

System Center Data Protection ManagerCan Store backed up DPM data in Azure…• As Physical or VM• As Azure VM

Page 58: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Azure Automation Use CasesAzure AutomationRunbooks

ChefConfigure and Automate. Apply Fine Grained Permissionshttps://www.chef.io/solutions/windows/

PuppetCan Configure and Manage Windows and Azurehttp://puppetlabs.com/solutions/microsoft

Desired State Configuration Make it So

Page 59: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Which of the following is NOT part of the Azure Monitoring Strategy?

1. Automated System Recovery (ASR)2. Systems Center Operations Pack (SCOM)3. Management Pack for Windows Azure4. Desired State Configuration (DSC)5. Global Service Manager (GSM)

1. Automated System Recovery (ASR)2. Systems Center Operations Pack (SCOM)3. Management Pack for Windows Azure4. Desired State Configuration (DSC)5. Global Service Manager (GSM)

Page 60: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Session Objectives And Takeaways

Session Objective(s): Objective 1: Understand the Breakdown of Exam Contents by categoryObjective 2: Understand the correct study resources and linksObjective 3: Try to get you 4-7 conceptual points ahead!

Key Takeaway 1Increase participants’ ability to successfully prepare for and pass, Exam 70-534

Key Takeaway 2Understand architectural decisions for Microsoft Azure solutions

Page 61: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

• Microsoft Learning Site (http://bit.ly/Ignite-Learning) • Your one-stop location for info on all available Microsoft certifications, training, and

exam prep resources

• Microsoft Virtual Academy (http://bit.ly/Ignite-VirtAcad) • Your source for on-demand, online technical training

• Microsoft Training and Certification Guide (http://bit.ly/Ignite-CertApp) • Interactive Windows 8.1 app, to help you choose and traverse your path

• http://aka.ms/certification/70-534

Resources

Page 62: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

© 2015 Microsoft Corporation. All rights reserved.

Page 63: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Extra Study

Slides70-534

Page 64: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

ExpressRoute vs VPNVirtual Network (Point-to-site)

Virtual Network (Site-to-site)

ExpressRoute – Exchange Provider

ExpressRoute – Network Service Provider

Azure services supported

Cloud ServicesVirtual Machines

Cloud ServicesVirtual Machines

Refer to validated list. Refer to validated list.

Typical Bandwidths

Typically < 100 Mbps aggregate

Typically < 100 Mbps aggregate

200 Mbps, 500 Mbps, 1 Gbps and 10 Gbps

10 Mbps, 50 Mbps, 100 Mbps, 500 Mbps, 1 Gbps

Protocols Supported

Secure Sockets Tunneling Protocol (SSTP)

IPsec (Refer to VPN page for more details)

Direct connection over VLANs

NSP’s VPN technologies (MPLS, VPLS, …)

Routing Static Static – We support policy—based (static routing) and route-based (dynamic routing VPN)

BGP BGP

Connection resiliency

Active-passive Active-passive Active-active Active-active

Typical use cases · Prototyping, dev / test / lab scenarios for cloud services and virtual machines

· Dev / test / lab scenarios and small scale production workloads for cloud services and virtual machines

· Access to all Azure services (validated list)· Enterprise-class and mission critical workloads.· Backup· Big Data· Azure as a DR site

· Access to all Azure services (validated list)· Enterprise-class and mission critical workloads.· Backup· Big Data· Azure as a DR site

Page 65: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

MICROSOFT CONFIDENTIAL – INTERNAL ONLY

Design a Monitoring StrategyBuilt-in AbilitiesDiagnostic Monitor:• Web & Worker RolesGlobal Service Manager

System Center CapabilitiesManagement Packs: Azure, Azure SQL, SQL

Third Party ToolsOpen SourceOps Manager, Application Insights (VSO) – Telemetry Data

Use Cases for WSUSConfig ManagerCustom SolutionsArchitecture Constructs: Availability Groups and Update Domains

Page 66: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

VM Type and Size for a Solution

Each Persistent Data Disk Can be up to 1 TB with up to 16 disks per VM

Compute Instance Name

Virtual Cores RAM

Extra Small (A0) Shared 768 MB

Small (A1) 1 1.75 GB

Medium (A2) 2 3.5 GB

Large (A3) 4 7 GB

Extra Large (A4) 8 14 GB

Compute Instance Name

Virtual Cores

RAM

A5 2 14 GB

A6 4 28 GB

A7 8 56 GB

Compute Instance Name

Virtual Cores

RAM Networking

A8 8 56 GB 40 Gbit/s InfiniBand

A9 16 112 GB 40 Gbit/s InfiniBand

General Purpose VMs

Memory Intensive VMs

Compute Intensive VMs

http://azure.microsoft.com/en-us/pricing/details/virtual-machines/

Page 67: Microsoft Learning Ignite | May 4 – 8, 2015 | Chicago, IL Mark Grimes | MCS | MCT Microsoft Consulting Services Light IT up

Graph API

https://graph.windows.net/contoso.com/tenantDetails?api-version=2013-11-08

Returns tenant level Information including company name, tech contact, subscriptions

https://graph.windows.net/contoso.com/groups/7373b0af-d462-406e-ad26-f2bc96d823d9/members?api-version=2013-11-08 Returns a group’s members

https://graph.windows.net/contoso.com/users/[email protected]/memberOf?api-version=2013-11-08 Get a users’ direct group membership

https://graph.windows.net/contoso.com/users/[email protected]/manager?api-version=2013-11-08 Get an individual user's manager

https://graph.windows.net/contoso.com/users/[email protected]/directReports?api-version=2013-11-08 Get an individuals’ Direct Reports

https://graph.windows.net/contoso.com/directoryObjects/2bb8892b-b7bf-4ae9-b2f2-02d9103cb82b?api-version=2013-11-08 Resolve an directory object via GUID

https://graph.windows.net/contoso.com/roles?api-version=2013-11-08 Return Roles

https://graph.windows.net/contoso.com/subscribedSkus?api-version=2013-11-08

Return all subscriptions that the tenant owns