Opleidingen

Volg de AZ-500 training Microsoft Azure Security Technologies en krijg de kennis en vaardigheden die nodig zijn om beveiligingscontroles te implementeren, de beveiligingshouding van een organisatie te behouden en beveiligingsproblemen te identificeren en te verhelpen. Na afronding van deze training kun je onder andere: Enterprise governance-strategieën, waaronder op rollen gebaseerd toegangsbeheer, Azure-beleid en resourcevergrendelingen implementeren Azure AD Identity Protection inclusief risicobeleid, voorwaardelijke toegang en toegangsbeoordelingen implementeren Strategieën voor containerbeveiliging, waaronder Azure Container Instances, Azure Container Registry en Azure Kubernetes toepassen Deze training bevat Engelstalig lesmateriaal en wordt gegeven door een Nederlandssprekende docent (indien gewenst ook mogelijk in het Engels). The AZ-500 course, recognized as "Microsoft Azure Security Technologies," offers comprehensive training to empower IT Security Professionals with the expertise needed to secure Microsoft Azure environments. This training delves into a broad spectrum of security aspects within the Azure ecosystem, enabling participants to proficiently safeguard digital assets and data. With a strong emphasis on both Microsoft Azure and its associated security technologies, including Azure Active Directory (Azure AD), the course equips attendees with an in-depth understanding of the platform's security measures.Throughout the Microsoft training, participants gain mastery in utilizing various Azure security technologies, including Azure Security Center and Azure AD, to detect and address potential vulnerabilities and threats. The curriculum spans diverse Azure services, enabling individuals to implement robust security measures across their deployments. Key areas of focus within the AZ-500 training include:  Azure Security Center: Implementing security policies, adhering to recommendations, and gaining visibility into Azure resources' security posture.   Azure Active Directory (Azure AD) Security: Covering identity and access management, multi-factor authentication, conditional access policies, and more.   Network Security: Implementing effective network security using Azure Firewall, Network Security Groups, and Application Security Groups.   Data and Application Security: Strategies for safeguarding data, applications, and databases within Azure, including encryption, access control, and data masking.   Platform Protection: Securing platforms through host security practices, endpoint protection, and remote access management.   Security Operations: Emphasizing security operations in Azure, covering monitoring through Azure Monitor, incident response via Azure Sentinel, and more. By the completion of this training, participants are equipped with the knowledge and skills to secure Microsoft Azure environments effectively. This expertise substantially enhances an organization's cybersecurity posture. The AZ-500 training provides hands-on experience with Microsoft Azure security technologies, particularly Azure AD, coupled with a comprehensive understanding of leveraging the Azure platform securely. This course is particularly relevant for those seeking to become an "Azure Security Engineer," showcasing proficiency in key areas like Azure AD and security technologies. Lesmethode Bij Master IT train je met onze unieke lesmethode Active Learning, hiermee leer je aantoonbaar effectiever! Wij zjn er namelijk van overtuigd dat je slimmer en met meer plezier leert als je actief met je lesstof omgaat. Onze klassen zijn gevuld met maximaal 8 cursisten. Hierbij luister je niet passief naar een trainer, maar ga je interactief en 1-op-1 met de trainer aan de slag om ervoor te zorgen dat jouw leerdoelen behaald worden. De theorie maak je je zoveel mogelijk zelf eigen, de nadruk van de begeleiding ligt op het begrijpen en toepassen van die theorie in de praktijk. Zo leer je alleen datgene wat je echt nodig hebt. Je bepaalt zelf je leertempo. De trainer coacht je bij het definiëren van jouw leertraject. Je onthoudt en begrijpt je nieuwe kennis beter. Alles draait om toepassing van de stof in jouw praktijk. Om alle beschikbare trainingsdata in te zien, bekijk dan onze eigen website Doelgroep This AZ-500 training is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.This AZ-500 training is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data. Voorkennis Successful learners will have prior knowledge and understanding of: Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Successful learners will have prior knowledge and understanding of: Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Onderdelen Module 1: Manage Identity and Access This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity. Lessons Azure Active Directory Azure Identity Protection Enterprise Governance Azure AD Privileged Identity Management Hybrid Identity Lab : Role-Based Access ControlLab : Azure PolicyLab : Resource Manager LocksLab : MFA, Conditional Access and AAD Identity ProtectionLab : Azure AD Privileged Identity ManagementLab : Implement Directory Synchronization After completing this module, students will be able to: Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. Implement Azure AD Connect including authentication methods and on-premises directory synchronization. Module 2: Implement Platform Protection This module covers perimeter, network, host, and container security. Lessons Perimeter Security Network Security Host Security Container Security Lab : Network Security Groups and Application Security GroupsLab : Azure FirewallLab : Configuring and Securing ACR and AKS After completing this module, students will be able to: Implement perimeter security strategies including Azure Firewall. Implement network security strategies including Network Security Groups and Application Security Groups. Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. Module 3: Secure Data and Applications This module covers Azure Key Vault, application security, storage security, and SQL database security. Lessons Azure Key Vault Application Security Storage Security SQL Database Security Lab : Key Vault (Implementing Secure Data by setting up Always Encrypted)Lab : Securing Azure SQL DatabaseLab : Service Endpoints and Securing Storage After completing this module, students will be able to: Implement Azure Key Vault including certificates, keys, and secretes. Implement application security strategies including app registration, managed identities, and service endpoints. Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. Module 4: Manage Security Operations This module covers Azure Monitor, Azure Security Center, and Azure Sentinel. Lessons Azure Monitor Azure Security Center Azure Sentinel Lab : Azure MonitorLab : Azure Security CenterLab : Azure Sentinel After completing this module, students will be able to: Implement Azure Monitor including connected sources, log analytics, and alerts. Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. Implement Azure Sentinel including workbooks, incidents, and playbooks. Module 1: Manage Identity and Access This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity. Lessons Azure Active Directory Azure Identity Protection Enterprise Governance Azure AD Privileged Identity Management Hybrid Identity Lab : Role-Based Access ControlLab : Azure PolicyLab : Resource Manager LocksLab : MFA, Conditional Access and AAD Identity ProtectionLab : Azure AD Privileged Identity ManagementLab : Implement Directory Synchronization After completing this module, students will be able to: Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. Implement Azure AD Connect including authentication methods and on-premises directory synchronization. Module 2: Implement Platform Protection This module covers perimeter, network, host, and container security. Lessons Perimeter Security Network Security Host Security Container Security Lab : Network Security Groups and Application Security GroupsLab : Azure FirewallLab : Configuring and Securing ACR and AKS After completing this module, students will be able to: Implement perimeter security strategies including Azure Firewall. Implement network security strategies including Network Security Groups and Application Security Groups. Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. Module 3: Secure Data and Applications This module covers Azure Key Vault, application security, storage security, and SQL database security. Lessons Azure Key Vault Application Security Storage Security SQL Database Security Lab : Key Vault (Implementing Secure Data by setting up Always Encrypted)Lab : Securing Azure SQL DatabaseLab : Service Endpoints and Securing Storage After completing this module, students will be able to: Implement Azure Key Vault including certificates, keys, and secretes. Implement application security strategies including app registration, managed identities, and service endpoints. Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. Module 4: Manage Security Operations This module covers Azure Monitor, Azure Security Center, and Azure Sentinel. Lessons Azure Monitor Azure Security Center Azure Sentinel Lab : Azure MonitorLab : Azure Security CenterLab : Azure Sentinel After completing this module, students will be able to: Implement Azure Monitor including connected sources, log analytics, and alerts. Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. Implement Azure Sentinel including workbooks, incidents, and playbooks.

Volg de AZ-500 training Microsoft Azure Security Technologies en krijg de kennis en vaardigheden die nodig zijn om beveiligingscontroles te implementeren, de beveiligingshouding van een organisatie te behouden en beveiligingsproblemen te identificeren en te verhelpen. Na afronding van deze training kun je onder andere: Enterprise governance-strategieën, waaronder op rollen gebaseerd toegangsbeheer, Azure-beleid en resourcevergrendelingen implementeren Azure AD Identity Protection inclusief risicobeleid, voorwaardelijke toegang en toegangsbeoordelingen implementeren Strategieën voor containerbeveiliging, waaronder Azure Container Instances, Azure Container Registry en Azure Kubernetes toepassen The AZ-500 course, recognized as "Microsoft Azure Security Technologies," offers comprehensive training to empower IT Security Professionals with the expertise needed to secure Microsoft Azure environments. This training delves into a broad spectrum of security aspects within the Azure ecosystem, enabling participants to proficiently safeguard digital assets and data. With a strong emphasis on both Microsoft Azure and its associated security technologies, including Azure Active Directory (Azure AD), the course equips attendees with an in-depth understanding of the platform's security measures.Throughout the Microsoft training, participants gain mastery in utilizing various Azure security technologies, including Azure Security Center and Azure AD, to detect and address potential vulnerabilities and threats. The curriculum spans diverse Azure services, enabling individuals to implement robust security measures across their deployments. Key areas of focus within the AZ-500 training include:  Azure Security Center: Implementing security policies, adhering to recommendations, and gaining visibility into Azure resources' security posture.   Azure Active Directory (Azure AD) Security: Covering identity and access management, multi-factor authentication, conditional access policies, and more.   Network Security: Implementing effective network security using Azure Firewall, Network Security Groups, and Application Security Groups.   Data and Application Security: Strategies for safeguarding data, applications, and databases within Azure, including encryption, access control, and data masking.   Platform Protection: Securing platforms through host security practices, endpoint protection, and remote access management.   Security Operations: Emphasizing security operations in Azure, covering monitoring through Azure Monitor, incident response via Azure Sentinel, and more. By the completion of this training, participants are equipped with the knowledge and skills to secure Microsoft Azure environments effectively. This expertise substantially enhances an organization's cybersecurity posture. The AZ-500 training provides hands-on experience with Microsoft Azure security technologies, particularly Azure AD, coupled with a comprehensive understanding of leveraging the Azure platform securely. This course is particularly relevant for those seeking to become an "Azure Security Engineer," showcasing proficiency in key areas like Azure AD and security technologies. Lesmethode Ben je op zoek naar volledige zelfstudie? Wij bieden je de mogelijkheid om deze training volledig in jouw eigen tijd te volgen. Uiteraard met het officiële Engelstalige lesmateriaal waarmee je de juiste kennis opdoet. Doelgroep This AZ-500 training is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.This AZ-500 training is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data. Voorkennis Successful learners will have prior knowledge and understanding of: Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Successful learners will have prior knowledge and understanding of: Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model. Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods. Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information. Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI. Onderdelen Module 1: Manage Identity and Access This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity. Lessons Azure Active Directory Azure Identity Protection Enterprise Governance Azure AD Privileged Identity Management Hybrid Identity Lab : Role-Based Access ControlLab : Azure PolicyLab : Resource Manager LocksLab : MFA, Conditional Access and AAD Identity ProtectionLab : Azure AD Privileged Identity ManagementLab : Implement Directory Synchronization After completing this module, students will be able to: Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. Implement Azure AD Connect including authentication methods and on-premises directory synchronization. Module 2: Implement Platform Protection This module covers perimeter, network, host, and container security. Lessons Perimeter Security Network Security Host Security Container Security Lab : Network Security Groups and Application Security GroupsLab : Azure FirewallLab : Configuring and Securing ACR and AKS After completing this module, students will be able to: Implement perimeter security strategies including Azure Firewall. Implement network security strategies including Network Security Groups and Application Security Groups. Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. Module 3: Secure Data and Applications This module covers Azure Key Vault, application security, storage security, and SQL database security. Lessons Azure Key Vault Application Security Storage Security SQL Database Security Lab : Key Vault (Implementing Secure Data by setting up Always Encrypted)Lab : Securing Azure SQL DatabaseLab : Service Endpoints and Securing Storage After completing this module, students will be able to: Implement Azure Key Vault including certificates, keys, and secretes. Implement application security strategies including app registration, managed identities, and service endpoints. Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. Module 4: Manage Security Operations This module covers Azure Monitor, Azure Security Center, and Azure Sentinel. Lessons Azure Monitor Azure Security Center Azure Sentinel Lab : Azure MonitorLab : Azure Security CenterLab : Azure Sentinel After completing this module, students will be able to: Implement Azure Monitor including connected sources, log analytics, and alerts. Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. Implement Azure Sentinel including workbooks, incidents, and playbooks. Module 1: Manage Identity and Access This module covers Azure Active Directory, Azure Identity Protection, Enterprise Governance, Azure AD PIM, and Hybrid Identity. Lessons Azure Active Directory Azure Identity Protection Enterprise Governance Azure AD Privileged Identity Management Hybrid Identity Lab : Role-Based Access ControlLab : Azure PolicyLab : Resource Manager LocksLab : MFA, Conditional Access and AAD Identity ProtectionLab : Azure AD Privileged Identity ManagementLab : Implement Directory Synchronization After completing this module, students will be able to: Implement enterprise governance strategies including role-based access control, Azure policies, and resource locks. Implement an Azure AD infrastructure including users, groups, and multi-factor authentication. Implement Azure AD Identity Protection including risk policies, conditional access, and access reviews. Implement Azure AD Privileged Identity Management including Azure AD roles and Azure resources. Implement Azure AD Connect including authentication methods and on-premises directory synchronization. Module 2: Implement Platform Protection This module covers perimeter, network, host, and container security. Lessons Perimeter Security Network Security Host Security Container Security Lab : Network Security Groups and Application Security GroupsLab : Azure FirewallLab : Configuring and Securing ACR and AKS After completing this module, students will be able to: Implement perimeter security strategies including Azure Firewall. Implement network security strategies including Network Security Groups and Application Security Groups. Implement host security strategies including endpoint protection, remote access management, update management, and disk encryption. Implement container security strategies including Azure Container Instances, Azure Container Registry, and Azure Kubernetes. Module 3: Secure Data and Applications This module covers Azure Key Vault, application security, storage security, and SQL database security. Lessons Azure Key Vault Application Security Storage Security SQL Database Security Lab : Key Vault (Implementing Secure Data by setting up Always Encrypted)Lab : Securing Azure SQL DatabaseLab : Service Endpoints and Securing Storage After completing this module, students will be able to: Implement Azure Key Vault including certificates, keys, and secretes. Implement application security strategies including app registration, managed identities, and service endpoints. Implement storage security strategies including shared access signatures, blob retention policies, and Azure Files authentication. Implement database security strategies including authentication, data classification, dynamic data masking, and always encrypted. Module 4: Manage Security Operations This module covers Azure Monitor, Azure Security Center, and Azure Sentinel. Lessons Azure Monitor Azure Security Center Azure Sentinel Lab : Azure MonitorLab : Azure Security CenterLab : Azure Sentinel After completing this module, students will be able to: Implement Azure Monitor including connected sources, log analytics, and alerts. Implement Azure Security Center including policies, recommendations, and just in time virtual machine access. Implement Azure Sentinel including workbooks, incidents, and playbooks.

Volg de AZ-700 training Designing and Implementing Microsoft Azure Networking Solutions bij Master IT ✅ Leer hoe je een veilige, betrouwbare netwerkinfrastructuur in Azure ontwerpt en implementeert en hoe je hybride connectiviteit, routing, privétoegang tot Azure-services en monitoring tot stand brengt in Azure. Na afronding van deze training kun je onder andere: Hybride netwerkverbindingen ontwerpen, implementeren en beheren Azure-netwerkinfrastructuur ontwerpen en implementeren Routing and load balancing in Azure ontwerpen en toepassen Deze training bevat Engelstalig lesmateriaal en wordt gegeven door een Nederlandssprekende docent (indien gewenst ook mogelijk in het Engels). The AZ-700 training is a comprehensive course designed for network engineers who want to master the art of designing, implementing, and maintaining Azure networking solutions. You will learn how to create and manage core Azure networking infrastructure, including hybrid networking connections, load balancing, traffic network routing, private acces to Azure services, network security, and monitoring. Our training program will equip you with the skills to design and implement a secure and reliable network infrastructure in Azure, establish hybrid connectivity, set up routing and load balancing, secure and monitor networks, and enable private access to Azure services. By the end of this course, you'll well-versed in designing and implementing hybrid network connections, core Azure networking infrastructure, routing and load balancing private access to Azure services, as well as secure and monitor networks effectively in Azure. Join us to take your skills to the next lever and achieve success in the Azure networking space. Create strategies for designing and implementing core Azure networking infrastructure. Develop plans for designing, implementing, and managing hybrid network connections. Establish routing and load balancing in Azure through careful design and implementation. Implement secure and effective monitoring practices to maintain network security. Design and implement private access to Azure services in a secure and efficient manner. Lesmethode Bij Master IT train je met onze unieke lesmethode Active Learning, hiermee leer je aantoonbaar effectiever! Wij zjn er namelijk van overtuigd dat je slimmer en met meer plezier leert als je actief met je lesstof omgaat. Onze klassen zijn gevuld met maximaal 8 cursisten. Hierbij luister je niet passief naar een trainer, maar ga je interactief en 1-op-1 met de trainer aan de slag om ervoor te zorgen dat jouw leerdoelen behaald worden. De theorie maak je je zoveel mogelijk zelf eigen, de nadruk van de begeleiding ligt op het begrijpen en toepassen van die theorie in de praktijk. Zo leer je alleen datgene wat je echt nodig hebt. Je bepaalt zelf je leertempo. De trainer coacht je bij het definiëren van jouw leertraject. Je onthoudt en begrijpt je nieuwe kennis beter. Alles draait om toepassing van de stof in jouw praktijk. Om alle beschikbare trainingsdata in te zien, bekijk dan onze eigen website Doelgroep This AZ-700 training is for Network Engineers looking to specialize in Azure networking solutions. An Azure Network engineer designs and implements core Azure networking infrastructure, hybrid networking connections, load balance traffic, network routing, private access to Azure services, network security and monitoring. The azure network engineer will manage networking solutions for optimal performance, resiliency, scale, and security. This AZ-700 training is for Network Engineers looking to specialize in Azure networking solutions. An Azure Network engineer designs and implements core Azure networking infrastructure, hybrid networking connections, load balance traffic, network routing, private access to Azure services, network security and monitoring. The azure network engineer will manage networking solutions for optimal performance, resiliency, scale, and security. Voorkennis Successful Azure Network Engineers start this role with experience in enterprise networking, on-premises or cloud infrastructure and network security. Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks. Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies. Understanding of software defined networking. Understanding hybrid network connectivity methods, such as VPN. Understanding resilience and disaster recovery, including high availability and restore operations. Successful Azure Network Engineers start this role with experience in enterprise networking, on-premises or cloud infrastructure and network security. Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks. Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies. Understanding of software defined networking. Understanding hybrid network connectivity methods, such as VPN. Understanding resilience and disaster recovery, including high availability and restore operations. Onderdelen Module 1: Introduction to Azure Virtual Networks In this module you will learn how to design and implement fundamental Azure Networking resources such as virtual networks, public and private IPs, DNS, virtual network peering, routing, and Azure Virtual NAT. Lessons Explore Azure Virtual Networks Configure public IP services Design name resolution for your Virtual Network Enable Cross-VNet connectivity with peering Implement virtual network traffic routing Configure internet access with Azure Virtual NAT Lab : Exercise: design and implement a Virtual Network in AzureLab : Exercise: configure DNS settings in AzureLab : Exercise: connect two Azure Virtual Networks using global virtual network peering After completing this module, students will be able to: Implement virtual networks Configure public IP services Configure private and public DNS zones Design and implement cross-VNET connectivity Implement virtual network routing Design and implement an Azure Virtual Network NAT Module 2: Design and Implement Hybrid Networking In this module you will learn how to design and implement hybrid networking solutions such as Site-to-Site VPN connections, Point-to-Site VPN connections, Azure Virtual WAN and Virtual WAN hubs. Lessons Design and implement Azure VPN Gateway Connect networks with Site-to-site VPN connections Connect devices to networks with Point-to-site VPN connections Connect remote resources by using Azure Virtual WANs Create a network virtual appliance (NVA) in a virtual hub Lab : Exercise: create a Virtual WAN by using Azure PortalLab : Exercise: create and configure a virtual network gateway After completing this module, students will be able to: Design and implement a site-to-site VPN connection Design and implement a point-to-site VPN connection Design and implement Azure Virtual WAN Resources Module 3: Design and implement Azure ExpressRoute In this module you will learn how to design and implement Azure ExpressRoute, ExpressRoute Global Reach, ExpressRoute FastPath and ExpressRoute Peering options. Lessons Explore Azure ExpressRoute Design an ExpressRoute deployment Configure peering for an ExpressRoute deployment Connect an ExpressRoute circuit to a VNet Connect geographically dispersed networks with ExpressRoute global reach Improve data path performance between networks with ExpressRoute FastPath Troubleshoot ExpressRoute connection issues Lab : Exercise: configure an ExpressRoute gatewayLab : Exercise: provision an ExpressRoute circuit After completing this module, students will be able to: Design and implement Expressroute Design and implement Expressroute Direct Design and implement Expressroute FastPath Module 4: load balancing non-HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for non-HTTP(S) traffic in Azure with Azure Load balancer and Traffic Manager. Lessons Explore load balancing Design and implement Azure load balancer using the Azure portal Explore Azure Traffic Manager Lab : Exercise: create a Traffic Manager profile using the Azure portalLab : Exercise: create and configure an Azure load balancer After completing this module, students will be able to: Design and implement Azure Laod Balancers Design and implement Azure Traffic Manager Module 5: Load balancing HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for HTTP(S) traffic in Azure with Azure Application gateway and Azure Front Door. Lessons Design Azure application gateway Configure Azure application gateway Design and configure Azure front door Lab : Exercise: deploy Azure application gatewayLab : Exercise: create a front door for a highly available web application After completing this module, students will be able to: Design and implement Azure Application Gateway Implement Azure Front Door Module 6: Design and implement network security In this module you will learn to design and imponent network security solutions such as Azure DDoS, Azure Firewalls, Network Security Groups, and Web Application Firewall. Lessons Secure your virtual networks in the Azure portal Deploy Azure DDoS Protection by using the Azure portal Deploy Network Security Groups by using the Azure portal Design and implement Azure Firewall Working with Azure Firewall Manager Implement a Web Application Firewall on Azure Front Door Lab : Exercise: deploy and configure Azure Firewall using the Azure portalLab : Exercise: secure your virtual hub using Azure Firewall ManagerLab : Exercise: configure DDoS Protection on a virtual network using the Azure portal After completing this module, students will be able to: Configure and monitor an Azure DDoS protection plan implement and manage Azure Firewall Implement network security groups Implement a web application firewall (WAF) on Azure Front Door Module 7: Design and implement private access to Azure Services In this module you will learn to design and implement private access to Azure Services with Azure Private Link, and virtual network service endpoints. Lessons Define Private Link Service and private endpoint Explain virtual network service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Lab : Exercise: create an Azure private endpoint using Azure PowerShellLab : Exercise: restrict network access to PaaS resources with virtual network service endpoints After completing this module, students will be able to: Define the difference between Private Link Service and private endpoints Design and configure private endpoints Explain virtual network service endpoints Design and configure access to service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Module 8: Design and implement network monitoring In this module you will learn to design and implement network monitoring solutions such as Azure Monitor and Network watcher. Lessons Monitor your networks with Azure Monitor Monitor your networks with Azure Network Watcher Lab : Exercise: Monitor a load balancer resource by using Azure Monitor After completing this module, students will be able to: Configure network health alerts and logging by using Azure Monitor Create and configure a Connection Monitor instance Configure and use Traffic Analytics Configure NSG flow logs Enable and configure diagnostic logging Configure Azure Network Watcher Module 1: Introduction to Azure Virtual Networks In this module you will learn how to design and implement fundamental Azure Networking resources such as virtual networks, public and private IPs, DNS, virtual network peering, routing, and Azure Virtual NAT. Lessons Explore Azure Virtual Networks Configure public IP services Design name resolution for your Virtual Network Enable Cross-VNet connectivity with peering Implement virtual network traffic routing Configure internet access with Azure Virtual NAT Lab : Exercise: design and implement a Virtual Network in AzureLab : Exercise: configure DNS settings in AzureLab : Exercise: connect two Azure Virtual Networks using global virtual network peering After completing this module, students will be able to: Implement virtual networks Configure public IP services Configure private and public DNS zones Design and implement cross-VNET connectivity Implement virtual network routing Design and implement an Azure Virtual Network NAT Module 2: Design and Implement Hybrid Networking In this module you will learn how to design and implement hybrid networking solutions such as Site-to-Site VPN connections, Point-to-Site VPN connections, Azure Virtual WAN and Virtual WAN hubs. Lessons Design and implement Azure VPN Gateway Connect networks with Site-to-site VPN connections Connect devices to networks with Point-to-site VPN connections Connect remote resources by using Azure Virtual WANs Create a network virtual appliance (NVA) in a virtual hub Lab : Exercise: create a Virtual WAN by using Azure PortalLab : Exercise: create and configure a virtual network gateway After completing this module, students will be able to: Design and implement a site-to-site VPN connection Design and implement a point-to-site VPN connection Design and implement Azure Virtual WAN Resources Module 3: Design and implement Azure ExpressRoute In this module you will learn how to design and implement Azure ExpressRoute, ExpressRoute Global Reach, ExpressRoute FastPath and ExpressRoute Peering options. Lessons Explore Azure ExpressRoute Design an ExpressRoute deployment Configure peering for an ExpressRoute deployment Connect an ExpressRoute circuit to a VNet Connect geographically dispersed networks with ExpressRoute global reach Improve data path performance between networks with ExpressRoute FastPath Troubleshoot ExpressRoute connection issues Lab : Exercise: configure an ExpressRoute gatewayLab : Exercise: provision an ExpressRoute circuit After completing this module, students will be able to: Design and implement Expressroute Design and implement Expressroute Direct Design and implement Expressroute FastPath Module 4: load balancing non-HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for non-HTTP(S) traffic in Azure with Azure Load balancer and Traffic Manager. Lessons Explore load balancing Design and implement Azure load balancer using the Azure portal Explore Azure Traffic Manager Lab : Exercise: create a Traffic Manager profile using the Azure portalLab : Exercise: create and configure an Azure load balancer After completing this module, students will be able to: Design and implement Azure Laod Balancers Design and implement Azure Traffic Manager Module 5: Load balancing HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for HTTP(S) traffic in Azure with Azure Application gateway and Azure Front Door. Lessons Design Azure application gateway Configure Azure application gateway Design and configure Azure front door Lab : Exercise: deploy Azure application gatewayLab : Exercise: create a front door for a highly available web application After completing this module, students will be able to: Design and implement Azure Application Gateway Implement Azure Front Door Module 6: Design and implement network security In this module you will learn to design and imponent network security solutions such as Azure DDoS, Azure Firewalls, Network Security Groups, and Web Application Firewall. Lessons Secure your virtual networks in the Azure portal Deploy Azure DDoS Protection by using the Azure portal Deploy Network Security Groups by using the Azure portal Design and implement Azure Firewall Working with Azure Firewall Manager Implement a Web Application Firewall on Azure Front Door Lab : Exercise: deploy and configure Azure Firewall using the Azure portalLab : Exercise: secure your virtual hub using Azure Firewall ManagerLab : Exercise: configure DDoS Protection on a virtual network using the Azure portal After completing this module, students will be able to: Configure and monitor an Azure DDoS protection plan implement and manage Azure Firewall Implement network security groups Implement a web application firewall (WAF) on Azure Front Door Module 7: Design and implement private access to Azure Services In this module you will learn to design and implement private access to Azure Services with Azure Private Link, and virtual network service endpoints. Lessons Define Private Link Service and private endpoint Explain virtual network service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Lab : Exercise: create an Azure private endpoint using Azure PowerShellLab : Exercise: restrict network access to PaaS resources with virtual network service endpoints After completing this module, students will be able to: Define the difference between Private Link Service and private endpoints Design and configure private endpoints Explain virtual network service endpoints Design and configure access to service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Module 8: Design and implement network monitoring In this module you will learn to design and implement network monitoring solutions such as Azure Monitor and Network watcher. Lessons Monitor your networks with Azure Monitor Monitor your networks with Azure Network Watcher Lab : Exercise: Monitor a load balancer resource by using Azure Monitor After completing this module, students will be able to: Configure network health alerts and logging by using Azure Monitor Create and configure a Connection Monitor instance Configure and use Traffic Analytics Configure NSG flow logs Enable and configure diagnostic logging Configure Azure Network Watcher

Volg de AZ-700 training Designing and Implementing Microsoft Azure Networking Solutions bij Master IT ✅ Leer hoe je een veilige, betrouwbare netwerkinfrastructuur in Azure ontwerpt en implementeert en hoe je hybride connectiviteit, routing, privétoegang tot Azure-services en monitoring tot stand brengt in Azure. Na afronding van deze training kun je onder andere: Hybride netwerkverbindingen ontwerpen, implementeren en beheren Azure-netwerkinfrastructuur ontwerpen en implementeren Routing and load balancing in Azure ontwerpen en toepassen The AZ-700 training is a comprehensive course designed for network engineers who want to master the art of designing, implementing, and maintaining Azure networking solutions. You will learn how to create and manage core Azure networking infrastructure, including hybrid networking connections, load balancing, traffic network routing, private acces to Azure services, network security, and monitoring. Our training program will equip you with the skills to design and implement a secure and reliable network infrastructure in Azure, establish hybrid connectivity, set up routing and load balancing, secure and monitor networks, and enable private access to Azure services. By the end of this course, you'll well-versed in designing and implementing hybrid network connections, core Azure networking infrastructure, routing and load balancing private access to Azure services, as well as secure and monitor networks effectively in Azure. Join us to take your skills to the next lever and achieve success in the Azure networking space. Create strategies for designing and implementing core Azure networking infrastructure. Develop plans for designing, implementing, and managing hybrid network connections. Establish routing and load balancing in Azure through careful design and implementation. Implement secure and effective monitoring practices to maintain network security. Design and implement private access to Azure services in a secure and efficient manner. Lesmethode Ben je op zoek naar volledige zelfstudie? Wij bieden je de mogelijkheid om deze training volledig in jouw eigen tijd te volgen. Uiteraard met het officiële Engelstalige lesmateriaal waarmee je de juiste kennis opdoet. Doelgroep This AZ-700 training is for Network Engineers looking to specialize in Azure networking solutions. An Azure Network engineer designs and implements core Azure networking infrastructure, hybrid networking connections, load balance traffic, network routing, private access to Azure services, network security and monitoring. The azure network engineer will manage networking solutions for optimal performance, resiliency, scale, and security. This AZ-700 training is for Network Engineers looking to specialize in Azure networking solutions. An Azure Network engineer designs and implements core Azure networking infrastructure, hybrid networking connections, load balance traffic, network routing, private access to Azure services, network security and monitoring. The azure network engineer will manage networking solutions for optimal performance, resiliency, scale, and security. Voorkennis Successful Azure Network Engineers start this role with experience in enterprise networking, on-premises or cloud infrastructure and network security. Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks. Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies. Understanding of software defined networking. Understanding hybrid network connectivity methods, such as VPN. Understanding resilience and disaster recovery, including high availability and restore operations. Successful Azure Network Engineers start this role with experience in enterprise networking, on-premises or cloud infrastructure and network security. Understanding of on-premises virtualization technologies, including: VMs, virtual networking, and virtual hard disks. Understanding of network configurations, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies. Understanding of software defined networking. Understanding hybrid network connectivity methods, such as VPN. Understanding resilience and disaster recovery, including high availability and restore operations. Onderdelen Module 1: Introduction to Azure Virtual Networks In this module you will learn how to design and implement fundamental Azure Networking resources such as virtual networks, public and private IPs, DNS, virtual network peering, routing, and Azure Virtual NAT. Lessons Explore Azure Virtual Networks Configure public IP services Design name resolution for your Virtual Network Enable Cross-VNet connectivity with peering Implement virtual network traffic routing Configure internet access with Azure Virtual NAT Lab : Exercise: design and implement a Virtual Network in AzureLab : Exercise: configure DNS settings in AzureLab : Exercise: connect two Azure Virtual Networks using global virtual network peering After completing this module, students will be able to: Implement virtual networks Configure public IP services Configure private and public DNS zones Design and implement cross-VNET connectivity Implement virtual network routing Design and implement an Azure Virtual Network NAT Module 2: Design and Implement Hybrid Networking In this module you will learn how to design and implement hybrid networking solutions such as Site-to-Site VPN connections, Point-to-Site VPN connections, Azure Virtual WAN and Virtual WAN hubs. Lessons Design and implement Azure VPN Gateway Connect networks with Site-to-site VPN connections Connect devices to networks with Point-to-site VPN connections Connect remote resources by using Azure Virtual WANs Create a network virtual appliance (NVA) in a virtual hub Lab : Exercise: create a Virtual WAN by using Azure PortalLab : Exercise: create and configure a virtual network gateway After completing this module, students will be able to: Design and implement a site-to-site VPN connection Design and implement a point-to-site VPN connection Design and implement Azure Virtual WAN Resources Module 3: Design and implement Azure ExpressRoute In this module you will learn how to design and implement Azure ExpressRoute, ExpressRoute Global Reach, ExpressRoute FastPath and ExpressRoute Peering options. Lessons Explore Azure ExpressRoute Design an ExpressRoute deployment Configure peering for an ExpressRoute deployment Connect an ExpressRoute circuit to a VNet Connect geographically dispersed networks with ExpressRoute global reach Improve data path performance between networks with ExpressRoute FastPath Troubleshoot ExpressRoute connection issues Lab : Exercise: configure an ExpressRoute gatewayLab : Exercise: provision an ExpressRoute circuit After completing this module, students will be able to: Design and implement Expressroute Design and implement Expressroute Direct Design and implement Expressroute FastPath Module 4: load balancing non-HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for non-HTTP(S) traffic in Azure with Azure Load balancer and Traffic Manager. Lessons Explore load balancing Design and implement Azure load balancer using the Azure portal Explore Azure Traffic Manager Lab : Exercise: create a Traffic Manager profile using the Azure portalLab : Exercise: create and configure an Azure load balancer After completing this module, students will be able to: Design and implement Azure Laod Balancers Design and implement Azure Traffic Manager Module 5: Load balancing HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for HTTP(S) traffic in Azure with Azure Application gateway and Azure Front Door. Lessons Design Azure application gateway Configure Azure application gateway Design and configure Azure front door Lab : Exercise: deploy Azure application gatewayLab : Exercise: create a front door for a highly available web application After completing this module, students will be able to: Design and implement Azure Application Gateway Implement Azure Front Door Module 6: Design and implement network security In this module you will learn to design and imponent network security solutions such as Azure DDoS, Azure Firewalls, Network Security Groups, and Web Application Firewall. Lessons Secure your virtual networks in the Azure portal Deploy Azure DDoS Protection by using the Azure portal Deploy Network Security Groups by using the Azure portal Design and implement Azure Firewall Working with Azure Firewall Manager Implement a Web Application Firewall on Azure Front Door Lab : Exercise: deploy and configure Azure Firewall using the Azure portalLab : Exercise: secure your virtual hub using Azure Firewall ManagerLab : Exercise: configure DDoS Protection on a virtual network using the Azure portal After completing this module, students will be able to: Configure and monitor an Azure DDoS protection plan implement and manage Azure Firewall Implement network security groups Implement a web application firewall (WAF) on Azure Front Door Module 7: Design and implement private access to Azure Services In this module you will learn to design and implement private access to Azure Services with Azure Private Link, and virtual network service endpoints. Lessons Define Private Link Service and private endpoint Explain virtual network service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Lab : Exercise: create an Azure private endpoint using Azure PowerShellLab : Exercise: restrict network access to PaaS resources with virtual network service endpoints After completing this module, students will be able to: Define the difference between Private Link Service and private endpoints Design and configure private endpoints Explain virtual network service endpoints Design and configure access to service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Module 8: Design and implement network monitoring In this module you will learn to design and implement network monitoring solutions such as Azure Monitor and Network watcher. Lessons Monitor your networks with Azure Monitor Monitor your networks with Azure Network Watcher Lab : Exercise: Monitor a load balancer resource by using Azure Monitor After completing this module, students will be able to: Configure network health alerts and logging by using Azure Monitor Create and configure a Connection Monitor instance Configure and use Traffic Analytics Configure NSG flow logs Enable and configure diagnostic logging Configure Azure Network Watcher Module 1: Introduction to Azure Virtual Networks In this module you will learn how to design and implement fundamental Azure Networking resources such as virtual networks, public and private IPs, DNS, virtual network peering, routing, and Azure Virtual NAT. Lessons Explore Azure Virtual Networks Configure public IP services Design name resolution for your Virtual Network Enable Cross-VNet connectivity with peering Implement virtual network traffic routing Configure internet access with Azure Virtual NAT Lab : Exercise: design and implement a Virtual Network in AzureLab : Exercise: configure DNS settings in AzureLab : Exercise: connect two Azure Virtual Networks using global virtual network peering After completing this module, students will be able to: Implement virtual networks Configure public IP services Configure private and public DNS zones Design and implement cross-VNET connectivity Implement virtual network routing Design and implement an Azure Virtual Network NAT Module 2: Design and Implement Hybrid Networking In this module you will learn how to design and implement hybrid networking solutions such as Site-to-Site VPN connections, Point-to-Site VPN connections, Azure Virtual WAN and Virtual WAN hubs. Lessons Design and implement Azure VPN Gateway Connect networks with Site-to-site VPN connections Connect devices to networks with Point-to-site VPN connections Connect remote resources by using Azure Virtual WANs Create a network virtual appliance (NVA) in a virtual hub Lab : Exercise: create a Virtual WAN by using Azure PortalLab : Exercise: create and configure a virtual network gateway After completing this module, students will be able to: Design and implement a site-to-site VPN connection Design and implement a point-to-site VPN connection Design and implement Azure Virtual WAN Resources Module 3: Design and implement Azure ExpressRoute In this module you will learn how to design and implement Azure ExpressRoute, ExpressRoute Global Reach, ExpressRoute FastPath and ExpressRoute Peering options. Lessons Explore Azure ExpressRoute Design an ExpressRoute deployment Configure peering for an ExpressRoute deployment Connect an ExpressRoute circuit to a VNet Connect geographically dispersed networks with ExpressRoute global reach Improve data path performance between networks with ExpressRoute FastPath Troubleshoot ExpressRoute connection issues Lab : Exercise: configure an ExpressRoute gatewayLab : Exercise: provision an ExpressRoute circuit After completing this module, students will be able to: Design and implement Expressroute Design and implement Expressroute Direct Design and implement Expressroute FastPath Module 4: load balancing non-HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for non-HTTP(S) traffic in Azure with Azure Load balancer and Traffic Manager. Lessons Explore load balancing Design and implement Azure load balancer using the Azure portal Explore Azure Traffic Manager Lab : Exercise: create a Traffic Manager profile using the Azure portalLab : Exercise: create and configure an Azure load balancer After completing this module, students will be able to: Design and implement Azure Laod Balancers Design and implement Azure Traffic Manager Module 5: Load balancing HTTP(S) traffic in Azure In this module you will learn how to design and implement load balancing solutions for HTTP(S) traffic in Azure with Azure Application gateway and Azure Front Door. Lessons Design Azure application gateway Configure Azure application gateway Design and configure Azure front door Lab : Exercise: deploy Azure application gatewayLab : Exercise: create a front door for a highly available web application After completing this module, students will be able to: Design and implement Azure Application Gateway Implement Azure Front Door Module 6: Design and implement network security In this module you will learn to design and imponent network security solutions such as Azure DDoS, Azure Firewalls, Network Security Groups, and Web Application Firewall. Lessons Secure your virtual networks in the Azure portal Deploy Azure DDoS Protection by using the Azure portal Deploy Network Security Groups by using the Azure portal Design and implement Azure Firewall Working with Azure Firewall Manager Implement a Web Application Firewall on Azure Front Door Lab : Exercise: deploy and configure Azure Firewall using the Azure portalLab : Exercise: secure your virtual hub using Azure Firewall ManagerLab : Exercise: configure DDoS Protection on a virtual network using the Azure portal After completing this module, students will be able to: Configure and monitor an Azure DDoS protection plan implement and manage Azure Firewall Implement network security groups Implement a web application firewall (WAF) on Azure Front Door Module 7: Design and implement private access to Azure Services In this module you will learn to design and implement private access to Azure Services with Azure Private Link, and virtual network service endpoints. Lessons Define Private Link Service and private endpoint Explain virtual network service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Lab : Exercise: create an Azure private endpoint using Azure PowerShellLab : Exercise: restrict network access to PaaS resources with virtual network service endpoints After completing this module, students will be able to: Define the difference between Private Link Service and private endpoints Design and configure private endpoints Explain virtual network service endpoints Design and configure access to service endpoints Integrate Private Link with DNS Integrate your App Service with Azure virtual networks Module 8: Design and implement network monitoring In this module you will learn to design and implement network monitoring solutions such as Azure Monitor and Network watcher. Lessons Monitor your networks with Azure Monitor Monitor your networks with Azure Network Watcher Lab : Exercise: Monitor a load balancer resource by using Azure Monitor After completing this module, students will be able to: Configure network health alerts and logging by using Azure Monitor Create and configure a Connection Monitor instance Configure and use Traffic Analytics Configure NSG flow logs Enable and configure diagnostic logging Configure Azure Network Watcher

Volg de AZ-800 Administering Windows Server Hybrid Core Infrastructure training bij Master IT. Leer technieken en tools in Windows Server te gebruiken om hybride oplossingen te implementeren, waaronder Windows Admin Center en PowerShell. In combinatie met het AZ-801 examen certificeer je jezelf als Windows Server Hybrid Administrator Associate. Na afronding van deze training kun je onder andere: Active Directory Domain Services (AD DS) in on-premises en cloudomgevingen implementeren en beheren Windows Servers en workloads in een hybride omgeving beheren Een on-premises en hybride netwerkinfrastructuur implementeren en beheren Deze training bevat Engelstalig lesmateriaal en wordt gegeven door een Nederlandssprekende docent (indien gewenst ook mogelijk in het Engels). This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment. Use administrative techniques and tools in Windows Server. Identify tools used to implement hybrid solutions, including Windows Admin Center and PowerShell. Implement identity services in Windows Server. Lesmethode Bij Master IT train je met onze unieke lesmethode Active Learning, hiermee leer je aantoonbaar effectiever! Wij zjn er namelijk van overtuigd dat je slimmer en met meer plezier leert als je actief met je lesstof omgaat. Onze klassen zijn gevuld met maximaal 8 cursisten. Hierbij luister je niet passief naar een trainer, maar ga je interactief en 1-op-1 met de trainer aan de slag om ervoor te zorgen dat jouw leerdoelen behaald worden. De theorie maak je je zoveel mogelijk zelf eigen, de nadruk van de begeleiding ligt op het begrijpen en toepassen van die theorie in de praktijk. Zo leer je alleen datgene wat je echt nodig hebt. Je bepaalt zelf je leertempo. De trainer coacht je bij het definiëren van jouw leertraject. Je onthoudt en begrijpt je nieuwe kennis beter. Alles draait om toepassing van de stof in jouw praktijk. Om alle beschikbare trainingsdata in te zien, bekijk dan onze eigen website Doelgroep This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment. Voorkennis Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell Onderdelen Module 1: Identity services in Windows Server This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment. Lessons Introduction to AD DS Manage AD DS domain controllers and FSMO roles Implement Group Policy Objects Manage advanced features of AD DS Lab : Implementing identity services and Group Policy Deploying a new domain controller on Server Core Configuring Group Policy After completing this module, students will be able to: Describe AD DS in a Windows Server environment. Deploy domain controllers in AD DS. Describe Azure AD and benefits of integrating Azure AD with AD DS. Explain Group Policy basics and configure GPOs in a domain environment. Module 2: Implementing identity in hybrid scenarios This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network (VNet) subnet. Lessons Implement hybrid identity with Windows Server Deploy and manage Azure IaaS Active Directory domain controllers in Azure Lab : Implementing integration between AD DS and Azure AD Preparing Azure AD for AD DS integration Preparing on-premises AD DS for Azure AD integration Downloading, installing, and configuring Azure AD Connect Verifying integration between AD DS and Azure AD Implementing Azure AD integration features in AD DS After completing this module, students will be able to: Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure. Install and configure directory synchronization using Azure AD Connect. Implement and configure Azure AD DS. Implement Seamless Single Sign-on (SSO). Implement and configure Azure AD DS. Install a new AD DS forest on an Azure VNet. Module 3: Windows Server administration This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation confguration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC). Lessons Perform Windows Server secure administration Describe Windows Server administration tools Perform post-installation configuration of Windows Server Just Enough Administration in Windows Server Lab : Managing Windows Server Implementing and using remote server administration After completing this module, students will be able to: Explain least privilege administrative models. Decide when to use privileged access workstations. Select the most appropriate Windows Server administration tool for a given situation. Apply different methods to perform post-installation configuration of Windows Server. Constrain privileged administrative operations by using Just Enough Administration (JEA). Module 4: Facilitating hybrid management This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data. Lessons Administer and manage Windows Server IaaS virtual machines remotely Manage hybrid workloads with Azure Arc Lab : Using Windows Admin Center in hybrid scenarios Provisioning Azure VMs running Windows Server Implementing hybrid connectivity by using the Azure Network Adapter Deploying Windows Admin Center gateway in Azure Verifying functionality of the Windows Admin Center gateway in Azure After completing this module, students will be able to: Select appropriate tools and techniques to manage Windows IaaS VMs remotely. Explain how to onboard on-premises Windows Server instances in Azure Arc. Connect hybrid machines to Azure from the Azure portal. Use Azure Arc to manage devices. Restrict access using RBAC. Module 5: Hyper-V virtualization in Windows Server This modules describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes. Lessons Configure and manage Hyper-V Configure and manage Hyper-V virtual machines Secure Hyper-V workloads Run containers on Windows Server Orchestrate containers on Windows Server using Kubernetes Lab : Implementing and configuring virtualization in Windows Server Creating and configuring VMs Installing and configuring containers After completing this module, students will be able to: Install and configure Hyper-V on Windows Server. Configure and manage Hyper-V virtual machines. Use Host Guardian Service to protect virtual machines. Create and deploy shielded virtual machines. Configure and manage container workloads. Orchestrate container workloads using a Kubernetes cluster. Module 6: Deploying and configuring Azure VMs This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions. Lessons Plan and deploy Windows Server IaaS virtual machines Customize Windows Server IaaS virtual machine images Automate the configuration of Windows Server IaaS virtual machines Lab : Deploying and configuring Windows Server on Azure VMs Authoring Azure Resource Manager (ARM) templates for Azure VM deployment Modifying ARM templates to include VM extension-based configuration Deploying Azure VMs running Windows Server by using ARM templates Configuring administrative access to Azure VMs running Windows Server Configuring Windows Server security in Azure VMs After completing this module, students will be able to: Create a VM from the Azure portal and from Azure Cloud Shell. Deploy Azure VMs by using templates. Automate the configuration of Windows Server IaaS VMs. Detect and remediate noncompliant servers. Create new VMs from generalized images. Use Azure Image Builder templates to create and manage images in Azure. Module 7: Network infrastructure services in Windows Server This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address managment and how to use Remote Access Services. Lessons Deploy and manage DHCP Implement Windows Server DNS Implement IP address management Implement remote access Lab : Implementing and configuring network infrastructure services in Windows Server Deploying and configuring DHCP Deploying and configuring DNS After completing this module, students will be able to: Implement automatic IP configuration with DHCP in Windows Server. Deploy and configure name resolution with Windows Server DNS. Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space. Select, use, and manage remote access components. Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications. Module 8: Implementing hybrid networking infrastructure This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s needs, and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage manage Microsoft Azure virtual networks (VNets) and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines. Lessons Implement hybrid network infrastructure Implement DNS for Windows Server IaaS VMs Implement Windows Server IaaS VM IP addressing and routing Lab : Implementing Windows Server IaaS VM networking Implementing virtual network routing in Azure Implementing DNS name resolution in Azure After completing this module, students will be able to: Implement an Azure virtual private network (VPN). Configure DNS for Windows Server IaaS VMs. Run a DNS server in a Windows Server Azure IaaS VM. Create a route-based VPN gateway using the Azure portal. Implement Azure ExpressRoute. Implement an Azure wide area network (WAN). Manage Microsoft Azure virtual networks (VNets). Manage IP address configuration for Windows Server IaaS virtual machines (VMs). Module 9: File servers and storage management in Windows Server This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica. Lessons Manage Windows Server file servers Implement Storage Spaces and Storage Spaces Direct Implement Windows Server Data Deduplication Implement Windows Server iSCSI Implement Windows Server Storage Replica Lab : Implementing storage solutions in Windows Server Implementing Data Deduplication Configuring iSCSI storage Configuring redundant Storage Spaces Implementing Storage Spaces Direct After completing this module, students will be able to: Configure and manage the Windows Server File Server role. Protect data from drive failures using Storage Spaces. Increase scalability and performance of storage management using Storage Spaces Direct. Optimize disk utilization using Data DeDuplication. Configure high availability for iSCSI. Enable replication of volumes between clusters using Storage Replica. Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes. Module 10: Implementing a hybrid file server infrastructure This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync. Lessons Overview of Azure file services Implementing Azure File Sync Lab : Implementing Azure File Sync Implementing DFS Replication in your on-premises environment Creating and configuring a sync group Replacing DFS Replication with File Sync–based replication Verifying replication and enabling cloud tiering Troubleshooting replication issues After completing this module, students will be able to: Configure Azure file services. Configure connectivity to Azure file services. Implement Azure File Sync. Deploy Azure File Sync Manage cloud tiering. Migrate from DFSR to Azure File Sync. Module 1: Identity services in Windows Server This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment. Lessons Introduction to AD DS Manage AD DS domain controllers and FSMO roles Implement Group Policy Objects Manage advanced features of AD DS Lab : Implementing identity services and Group Policy Deploying a new domain controller on Server Core Configuring Group Policy After completing this module, students will be able to: Describe AD DS in a Windows Server environment. Deploy domain controllers in AD DS. Describe Azure AD and benefits of integrating Azure AD with AD DS. Explain Group Policy basics and configure GPOs in a domain environment. Module 2: Implementing identity in hybrid scenarios This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network (VNet) subnet. Lessons Implement hybrid identity with Windows Server Deploy and manage Azure IaaS Active Directory domain controllers in Azure Lab : Implementing integration between AD DS and Azure AD Preparing Azure AD for AD DS integration Preparing on-premises AD DS for Azure AD integration Downloading, installing, and configuring Azure AD Connect Verifying integration between AD DS and Azure AD Implementing Azure AD integration features in AD DS After completing this module, students will be able to: Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure. Install and configure directory synchronization using Azure AD Connect. Implement and configure Azure AD DS. Implement Seamless Single Sign-on (SSO). Implement and configure Azure AD DS. Install a new AD DS forest on an Azure VNet. Module 3: Windows Server administration This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation confguration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC). Lessons Perform Windows Server secure administration Describe Windows Server administration tools Perform post-installation configuration of Windows Server Just Enough Administration in Windows Server Lab : Managing Windows Server Implementing and using remote server administration After completing this module, students will be able to: Explain least privilege administrative models. Decide when to use privileged access workstations. Select the most appropriate Windows Server administration tool for a given situation. Apply different methods to perform post-installation configuration of Windows Server. Constrain privileged administrative operations by using Just Enough Administration (JEA). Module 4: Facilitating hybrid management This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data. Lessons Administer and manage Windows Server IaaS virtual machines remotely Manage hybrid workloads with Azure Arc Lab : Using Windows Admin Center in hybrid scenarios Provisioning Azure VMs running Windows Server Implementing hybrid connectivity by using the Azure Network Adapter Deploying Windows Admin Center gateway in Azure Verifying functionality of the Windows Admin Center gateway in Azure After completing this module, students will be able to: Select appropriate tools and techniques to manage Windows IaaS VMs remotely. Explain how to onboard on-premises Windows Server instances in Azure Arc. Connect hybrid machines to Azure from the Azure portal. Use Azure Arc to manage devices. Restrict access using RBAC. Module 5: Hyper-V virtualization in Windows Server This modules describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes. Lessons Configure and manage Hyper-V Configure and manage Hyper-V virtual machines Secure Hyper-V workloads Run containers on Windows Server Orchestrate containers on Windows Server using Kubernetes Lab : Implementing and configuring virtualization in Windows Server Creating and configuring VMs Installing and configuring containers After completing this module, students will be able to: Install and configure Hyper-V on Windows Server. Configure and manage Hyper-V virtual machines. Use Host Guardian Service to protect virtual machines. Create and deploy shielded virtual machines. Configure and manage container workloads. Orchestrate container workloads using a Kubernetes cluster. Module 6: Deploying and configuring Azure VMs This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions. Lessons Plan and deploy Windows Server IaaS virtual machines Customize Windows Server IaaS virtual machine images Automate the configuration of Windows Server IaaS virtual machines Lab : Deploying and configuring Windows Server on Azure VMs Authoring Azure Resource Manager (ARM) templates for Azure VM deployment Modifying ARM templates to include VM extension-based configuration Deploying Azure VMs running Windows Server by using ARM templates Configuring administrative access to Azure VMs running Windows Server Configuring Windows Server security in Azure VMs After completing this module, students will be able to: Create a VM from the Azure portal and from Azure Cloud Shell. Deploy Azure VMs by using templates. Automate the configuration of Windows Server IaaS VMs. Detect and remediate noncompliant servers. Create new VMs from generalized images. Use Azure Image Builder templates to create and manage images in Azure. Module 7: Network infrastructure services in Windows Server This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address managment and how to use Remote Access Services. Lessons Deploy and manage DHCP Implement Windows Server DNS Implement IP address management Implement remote access Lab : Implementing and configuring network infrastructure services in Windows Server Deploying and configuring DHCP Deploying and configuring DNS After completing this module, students will be able to: Implement automatic IP configuration with DHCP in Windows Server. Deploy and configure name resolution with Windows Server DNS. Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space. Select, use, and manage remote access components. Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications. Module 8: Implementing hybrid networking infrastructure This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s needs, and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage manage Microsoft Azure virtual networks (VNets) and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines. Lessons Implement hybrid network infrastructure Implement DNS for Windows Server IaaS VMs Implement Windows Server IaaS VM IP addressing and routing Lab : Implementing Windows Server IaaS VM networking Implementing virtual network routing in Azure Implementing DNS name resolution in Azure After completing this module, students will be able to: Implement an Azure virtual private network (VPN). Configure DNS for Windows Server IaaS VMs. Run a DNS server in a Windows Server Azure IaaS VM. Create a route-based VPN gateway using the Azure portal. Implement Azure ExpressRoute. Implement an Azure wide area network (WAN). Manage Microsoft Azure virtual networks (VNets). Manage IP address configuration for Windows Server IaaS virtual machines (VMs). Module 9: File servers and storage management in Windows Server This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica. Lessons Manage Windows Server file servers Implement Storage Spaces and Storage Spaces Direct Implement Windows Server Data Deduplication Implement Windows Server iSCSI Implement Windows Server Storage Replica Lab : Implementing storage solutions in Windows Server Implementing Data Deduplication Configuring iSCSI storage Configuring redundant Storage Spaces Implementing Storage Spaces Direct After completing this module, students will be able to: Configure and manage the Windows Server File Server role. Protect data from drive failures using Storage Spaces. Increase scalability and performance of storage management using Storage Spaces Direct. Optimize disk utilization using Data DeDuplication. Configure high availability for iSCSI. Enable replication of volumes between clusters using Storage Replica. Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes. Module 10: Implementing a hybrid file server infrastructure This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync. Lessons Overview of Azure file services Implementing Azure File Sync Lab : Implementing Azure File Sync Implementing DFS Replication in your on-premises environment Creating and configuring a sync group Replacing DFS Replication with File Sync–based replication Verifying replication and enabling cloud tiering Troubleshooting replication issues After completing this module, students will be able to: Configure Azure file services. Configure connectivity to Azure file services. Implement Azure File Sync. Deploy Azure File Sync Manage cloud tiering. Migrate from DFSR to Azure File Sync.

Volg de AZ-800 Administering Windows Server Hybrid Core Infrastructure training bij Master IT. Leer technieken en tools in Windows Server te gebruiken om hybride oplossingen te implementeren, waaronder Windows Admin Center en PowerShell. In combinatie met het AZ-801 examen certificeer je jezelf als Windows Server Hybrid Administrator Associate. Na afronding van deze training kun je onder andere: Active Directory Domain Services (AD DS) in on-premises en cloudomgevingen implementeren en beheren Windows Servers en workloads in een hybride omgeving beheren Een on-premises en hybride netwerkinfrastructuur implementeren en beheren This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment. Use administrative techniques and tools in Windows Server. Identify tools used to implement hybrid solutions, including Windows Admin Center and PowerShell. Implement identity services in Windows Server. Lesmethode Ben je op zoek naar volledige zelfstudie? Wij bieden je de mogelijkheid om deze training volledig in jouw eigen tijd te volgen. Uiteraard met het officiële Engelstalige lesmateriaal waarmee je de juiste kennis opdoet. Doelgroep This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment. Voorkennis Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell Onderdelen Module 1: Identity services in Windows Server This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment. Lessons Introduction to AD DS Manage AD DS domain controllers and FSMO roles Implement Group Policy Objects Manage advanced features of AD DS Lab : Implementing identity services and Group Policy Deploying a new domain controller on Server Core Configuring Group Policy After completing this module, students will be able to: Describe AD DS in a Windows Server environment. Deploy domain controllers in AD DS. Describe Azure AD and benefits of integrating Azure AD with AD DS. Explain Group Policy basics and configure GPOs in a domain environment. Module 2: Implementing identity in hybrid scenarios This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network (VNet) subnet. Lessons Implement hybrid identity with Windows Server Deploy and manage Azure IaaS Active Directory domain controllers in Azure Lab : Implementing integration between AD DS and Azure AD Preparing Azure AD for AD DS integration Preparing on-premises AD DS for Azure AD integration Downloading, installing, and configuring Azure AD Connect Verifying integration between AD DS and Azure AD Implementing Azure AD integration features in AD DS After completing this module, students will be able to: Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure. Install and configure directory synchronization using Azure AD Connect. Implement and configure Azure AD DS. Implement Seamless Single Sign-on (SSO). Implement and configure Azure AD DS. Install a new AD DS forest on an Azure VNet. Module 3: Windows Server administration This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation confguration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC). Lessons Perform Windows Server secure administration Describe Windows Server administration tools Perform post-installation configuration of Windows Server Just Enough Administration in Windows Server Lab : Managing Windows Server Implementing and using remote server administration After completing this module, students will be able to: Explain least privilege administrative models. Decide when to use privileged access workstations. Select the most appropriate Windows Server administration tool for a given situation. Apply different methods to perform post-installation configuration of Windows Server. Constrain privileged administrative operations by using Just Enough Administration (JEA). Module 4: Facilitating hybrid management This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data. Lessons Administer and manage Windows Server IaaS virtual machines remotely Manage hybrid workloads with Azure Arc Lab : Using Windows Admin Center in hybrid scenarios Provisioning Azure VMs running Windows Server Implementing hybrid connectivity by using the Azure Network Adapter Deploying Windows Admin Center gateway in Azure Verifying functionality of the Windows Admin Center gateway in Azure After completing this module, students will be able to: Select appropriate tools and techniques to manage Windows IaaS VMs remotely. Explain how to onboard on-premises Windows Server instances in Azure Arc. Connect hybrid machines to Azure from the Azure portal. Use Azure Arc to manage devices. Restrict access using RBAC. Module 5: Hyper-V virtualization in Windows Server This modules describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes. Lessons Configure and manage Hyper-V Configure and manage Hyper-V virtual machines Secure Hyper-V workloads Run containers on Windows Server Orchestrate containers on Windows Server using Kubernetes Lab : Implementing and configuring virtualization in Windows Server Creating and configuring VMs Installing and configuring containers After completing this module, students will be able to: Install and configure Hyper-V on Windows Server. Configure and manage Hyper-V virtual machines. Use Host Guardian Service to protect virtual machines. Create and deploy shielded virtual machines. Configure and manage container workloads. Orchestrate container workloads using a Kubernetes cluster. Module 6: Deploying and configuring Azure VMs This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions. Lessons Plan and deploy Windows Server IaaS virtual machines Customize Windows Server IaaS virtual machine images Automate the configuration of Windows Server IaaS virtual machines Lab : Deploying and configuring Windows Server on Azure VMs Authoring Azure Resource Manager (ARM) templates for Azure VM deployment Modifying ARM templates to include VM extension-based configuration Deploying Azure VMs running Windows Server by using ARM templates Configuring administrative access to Azure VMs running Windows Server Configuring Windows Server security in Azure VMs After completing this module, students will be able to: Create a VM from the Azure portal and from Azure Cloud Shell. Deploy Azure VMs by using templates. Automate the configuration of Windows Server IaaS VMs. Detect and remediate noncompliant servers. Create new VMs from generalized images. Use Azure Image Builder templates to create and manage images in Azure. Module 7: Network infrastructure services in Windows Server This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address managment and how to use Remote Access Services. Lessons Deploy and manage DHCP Implement Windows Server DNS Implement IP address management Implement remote access Lab : Implementing and configuring network infrastructure services in Windows Server Deploying and configuring DHCP Deploying and configuring DNS After completing this module, students will be able to: Implement automatic IP configuration with DHCP in Windows Server. Deploy and configure name resolution with Windows Server DNS. Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space. Select, use, and manage remote access components. Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications. Module 8: Implementing hybrid networking infrastructure This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s needs, and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage manage Microsoft Azure virtual networks (VNets) and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines. Lessons Implement hybrid network infrastructure Implement DNS for Windows Server IaaS VMs Implement Windows Server IaaS VM IP addressing and routing Lab : Implementing Windows Server IaaS VM networking Implementing virtual network routing in Azure Implementing DNS name resolution in Azure After completing this module, students will be able to: Implement an Azure virtual private network (VPN). Configure DNS for Windows Server IaaS VMs. Run a DNS server in a Windows Server Azure IaaS VM. Create a route-based VPN gateway using the Azure portal. Implement Azure ExpressRoute. Implement an Azure wide area network (WAN). Manage Microsoft Azure virtual networks (VNets). Manage IP address configuration for Windows Server IaaS virtual machines (VMs). Module 9: File servers and storage management in Windows Server This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica. Lessons Manage Windows Server file servers Implement Storage Spaces and Storage Spaces Direct Implement Windows Server Data Deduplication Implement Windows Server iSCSI Implement Windows Server Storage Replica Lab : Implementing storage solutions in Windows Server Implementing Data Deduplication Configuring iSCSI storage Configuring redundant Storage Spaces Implementing Storage Spaces Direct After completing this module, students will be able to: Configure and manage the Windows Server File Server role. Protect data from drive failures using Storage Spaces. Increase scalability and performance of storage management using Storage Spaces Direct. Optimize disk utilization using Data DeDuplication. Configure high availability for iSCSI. Enable replication of volumes between clusters using Storage Replica. Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes. Module 10: Implementing a hybrid file server infrastructure This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync. Lessons Overview of Azure file services Implementing Azure File Sync Lab : Implementing Azure File Sync Implementing DFS Replication in your on-premises environment Creating and configuring a sync group Replacing DFS Replication with File Sync–based replication Verifying replication and enabling cloud tiering Troubleshooting replication issues After completing this module, students will be able to: Configure Azure file services. Configure connectivity to Azure file services. Implement Azure File Sync. Deploy Azure File Sync Manage cloud tiering. Migrate from DFSR to Azure File Sync. Module 1: Identity services in Windows Server This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment. Lessons Introduction to AD DS Manage AD DS domain controllers and FSMO roles Implement Group Policy Objects Manage advanced features of AD DS Lab : Implementing identity services and Group Policy Deploying a new domain controller on Server Core Configuring Group Policy After completing this module, students will be able to: Describe AD DS in a Windows Server environment. Deploy domain controllers in AD DS. Describe Azure AD and benefits of integrating Azure AD with AD DS. Explain Group Policy basics and configure GPOs in a domain environment. Module 2: Implementing identity in hybrid scenarios This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network (VNet) subnet. Lessons Implement hybrid identity with Windows Server Deploy and manage Azure IaaS Active Directory domain controllers in Azure Lab : Implementing integration between AD DS and Azure AD Preparing Azure AD for AD DS integration Preparing on-premises AD DS for Azure AD integration Downloading, installing, and configuring Azure AD Connect Verifying integration between AD DS and Azure AD Implementing Azure AD integration features in AD DS After completing this module, students will be able to: Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure. Install and configure directory synchronization using Azure AD Connect. Implement and configure Azure AD DS. Implement Seamless Single Sign-on (SSO). Implement and configure Azure AD DS. Install a new AD DS forest on an Azure VNet. Module 3: Windows Server administration This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation confguration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC). Lessons Perform Windows Server secure administration Describe Windows Server administration tools Perform post-installation configuration of Windows Server Just Enough Administration in Windows Server Lab : Managing Windows Server Implementing and using remote server administration After completing this module, students will be able to: Explain least privilege administrative models. Decide when to use privileged access workstations. Select the most appropriate Windows Server administration tool for a given situation. Apply different methods to perform post-installation configuration of Windows Server. Constrain privileged administrative operations by using Just Enough Administration (JEA). Module 4: Facilitating hybrid management This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data. Lessons Administer and manage Windows Server IaaS virtual machines remotely Manage hybrid workloads with Azure Arc Lab : Using Windows Admin Center in hybrid scenarios Provisioning Azure VMs running Windows Server Implementing hybrid connectivity by using the Azure Network Adapter Deploying Windows Admin Center gateway in Azure Verifying functionality of the Windows Admin Center gateway in Azure After completing this module, students will be able to: Select appropriate tools and techniques to manage Windows IaaS VMs remotely. Explain how to onboard on-premises Windows Server instances in Azure Arc. Connect hybrid machines to Azure from the Azure portal. Use Azure Arc to manage devices. Restrict access using RBAC. Module 5: Hyper-V virtualization in Windows Server This modules describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes. Lessons Configure and manage Hyper-V Configure and manage Hyper-V virtual machines Secure Hyper-V workloads Run containers on Windows Server Orchestrate containers on Windows Server using Kubernetes Lab : Implementing and configuring virtualization in Windows Server Creating and configuring VMs Installing and configuring containers After completing this module, students will be able to: Install and configure Hyper-V on Windows Server. Configure and manage Hyper-V virtual machines. Use Host Guardian Service to protect virtual machines. Create and deploy shielded virtual machines. Configure and manage container workloads. Orchestrate container workloads using a Kubernetes cluster. Module 6: Deploying and configuring Azure VMs This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions. Lessons Plan and deploy Windows Server IaaS virtual machines Customize Windows Server IaaS virtual machine images Automate the configuration of Windows Server IaaS virtual machines Lab : Deploying and configuring Windows Server on Azure VMs Authoring Azure Resource Manager (ARM) templates for Azure VM deployment Modifying ARM templates to include VM extension-based configuration Deploying Azure VMs running Windows Server by using ARM templates Configuring administrative access to Azure VMs running Windows Server Configuring Windows Server security in Azure VMs After completing this module, students will be able to: Create a VM from the Azure portal and from Azure Cloud Shell. Deploy Azure VMs by using templates. Automate the configuration of Windows Server IaaS VMs. Detect and remediate noncompliant servers. Create new VMs from generalized images. Use Azure Image Builder templates to create and manage images in Azure. Module 7: Network infrastructure services in Windows Server This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address managment and how to use Remote Access Services. Lessons Deploy and manage DHCP Implement Windows Server DNS Implement IP address management Implement remote access Lab : Implementing and configuring network infrastructure services in Windows Server Deploying and configuring DHCP Deploying and configuring DNS After completing this module, students will be able to: Implement automatic IP configuration with DHCP in Windows Server. Deploy and configure name resolution with Windows Server DNS. Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space. Select, use, and manage remote access components. Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications. Module 8: Implementing hybrid networking infrastructure This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s needs, and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage manage Microsoft Azure virtual networks (VNets) and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines. Lessons Implement hybrid network infrastructure Implement DNS for Windows Server IaaS VMs Implement Windows Server IaaS VM IP addressing and routing Lab : Implementing Windows Server IaaS VM networking Implementing virtual network routing in Azure Implementing DNS name resolution in Azure After completing this module, students will be able to: Implement an Azure virtual private network (VPN). Configure DNS for Windows Server IaaS VMs. Run a DNS server in a Windows Server Azure IaaS VM. Create a route-based VPN gateway using the Azure portal. Implement Azure ExpressRoute. Implement an Azure wide area network (WAN). Manage Microsoft Azure virtual networks (VNets). Manage IP address configuration for Windows Server IaaS virtual machines (VMs). Module 9: File servers and storage management in Windows Server This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica. Lessons Manage Windows Server file servers Implement Storage Spaces and Storage Spaces Direct Implement Windows Server Data Deduplication Implement Windows Server iSCSI Implement Windows Server Storage Replica Lab : Implementing storage solutions in Windows Server Implementing Data Deduplication Configuring iSCSI storage Configuring redundant Storage Spaces Implementing Storage Spaces Direct After completing this module, students will be able to: Configure and manage the Windows Server File Server role. Protect data from drive failures using Storage Spaces. Increase scalability and performance of storage management using Storage Spaces Direct. Optimize disk utilization using Data DeDuplication. Configure high availability for iSCSI. Enable replication of volumes between clusters using Storage Replica. Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes. Module 10: Implementing a hybrid file server infrastructure This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync. Lessons Overview of Azure file services Implementing Azure File Sync Lab : Implementing Azure File Sync Implementing DFS Replication in your on-premises environment Creating and configuring a sync group Replacing DFS Replication with File Sync–based replication Verifying replication and enabling cloud tiering Troubleshooting replication issues After completing this module, students will be able to: Configure Azure file services. Configure connectivity to Azure file services. Implement Azure File Sync. Deploy Azure File Sync Manage cloud tiering. Migrate from DFSR to Azure File Sync.

Volg de AZ-801 Configuring Windows Server Hybrid Advanced Services training bij Master IT. In deze training ligt er veel focus op het verbeteren van hybride beveiliging met Azure Security Center, Azure Sentinel en Windows Update Management. In combinatie met de AZ-800 training certificeer je jezelf als Windows Server Hybrid Administrator Associate. Na afronding van deze training kun je onder andere: Windows Server on-premises en hybride infrastructuren beveiligen Disaster recovery doorvoeren Windows Server high availability implementeren en beheren Deze training bevat Engelstalig lesmateriaal en wordt gegeven door een Nederlandssprekende docent (indien gewenst ook mogelijk in het Engels). This four-day instructor-led AZ-801 training is designed for IT professionals who configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. These professionals manage and support an infrastructure that includes on-premises and Azure IaaS-hosted Windows Server-based workloads. The course teaches IT professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to manage and secure Azure VMs running Windows Server. The course also covers how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights various administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor. Harden the security configuration of the Windows Server operating system environment. Enhance hybrid security using Azure Security Center, Azure Sentinel, and Windows Update Management. Apply security features to protect critical resources. Lesmethode Bij Master IT train je met onze unieke lesmethode Active Learning, hiermee leer je aantoonbaar effectiever! Wij zjn er namelijk van overtuigd dat je slimmer en met meer plezier leert als je actief met je lesstof omgaat. Onze klassen zijn gevuld met maximaal 8 cursisten. Hierbij luister je niet passief naar een trainer, maar ga je interactief en 1-op-1 met de trainer aan de slag om ervoor te zorgen dat jouw leerdoelen behaald worden. De theorie maak je je zoveel mogelijk zelf eigen, de nadruk van de begeleiding ligt op het begrijpen en toepassen van die theorie in de praktijk. Zo leer je alleen datgene wat je echt nodig hebt. Je bepaalt zelf je leertempo. De trainer coacht je bij het definiëren van jouw leertraject. Je onthoudt en begrijpt je nieuwe kennis beter. Alles draait om toepassing van de stof in jouw praktijk. Om alle beschikbare trainingsdata in te zien, bekijk dan onze eigen website Doelgroep This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting. Voorkennis Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts An awareness of basic security best practices Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR). Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces). Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell An understanding of the following concepts as related to Windows Server technologies: High availability and disaster recovery Automation Monitoring Troubleshooting Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts An awareness of basic security best practices Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR). Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces). Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell An understanding of the following concepts as related to Windows Server technologies: High availability and disaster recovery Automation Monitoring Troubleshooting Onderdelen Module 1: Windows Server security This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure. Lessons Secure Windows Sever user accounts Hardening Windows Server Windows Server Update Management Secure Windows Server DNS Lab : Configuring security in Windows Server Configuring Windows Defender Credential Guard Locating problematic accounts Implementing LAPS After completing this module, students will be able to: Diagnose and remediate potential security vulnerabilities in Windows Server resources. Harden the security configuration of the Windows Server operating system environment. Deploy operating system updates to computers on a network by using Windows Server Update Services. Secure Windows Server DNS to help protect the network name resolution infrastructure. Implement DNS policies. Module 2: Implementing security solutions in hybrid scenarios This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) virtual machines (VMs) and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The modules explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software. Lessons Implement Windows Server IaaS VM network security. Audit the security of Windows Server IaaS Virtual Machines Manage Azure updates Create and implement application allowlists with adaptive application control Configure BitLocker disk encryption for Windows IaaS Virtual Machines Implement change tracking and file integrity monitoring for Windows Server IaaS VMs Lab : Using Azure Security Center in hybrid scenarios  Provisioning Azure VMs running Windows Server Configuring Azure Security Center Onboarding on-premises Windows Server into Azure Security Center Verifying the hybrid capabilities of Azure Security Center Configuring Windows Server 2019 security in Azure VMs After completing this module, students will be able to: Diagnose network security issues in Windows Server IaaS virtual machines. Onboard Windows Server computers to Azure Security Center. Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management. Implement Adaptive application controls to protect Windows Server IaaS VMs. Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs). Back up and recover encrypted data. Monitor Windows Server Azure IaaS VMs for changes in files and the registry. Module 3: Implementing high availability This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load-balanced VMs, and how to implement Azure Site Recovery. Lessons Introduction to Cluster Shared Volumes. Implement Windows Server failover clustering. Implement high availability of Windows Server VMs. Implement Windows Server File Server high availability. Implement scale and high availability with Windows Server VMs. Lab : Implementing failover clustering Configuring iSCSI storage Configuring a failover cluster Deploying and configuring a highly available file server Validating the deployment of the highly available file server After completing this module, students will be able to: Implement highly available storage volumes by using Clustered Share Volumes. Implement highly available Windows Server workloads using failover clustering. Describe Hyper-V VMs load balancing. Implement Hyper-V VMs live migration and Hyper-V VMs storage migration. Describe Windows Server File Server high availablity options. Implement scaling for virtual machine scale sets and load-balanced VMs. Implement Azure Site Recovery. Module 4: Disaster recovery in Windows Server This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters. Lessons Implement Hyper-V Replica Protect your on-premises infrastructure from disasters with Azure Site Recovery Lab : Implementing Hyper-V Replica and Windows Server Backup Implementing Hyper-V Replica Implementing backup and restore with Windows Server Backup After completing this module, students will be able to: Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components Describe Hyper-V Replica use cases and security considerations. Configure Hyper-V Replica settings, health monitoring, and failover options. Describe extended replication. Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery. Module 5: Implementing recovery services in hybrid scenarios This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focus on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implementRecovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The modules also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery. Lessons Implement hybrid backup and recovery with Windows Server IaaS Protect your Azure infrastructure with Azure Site Recovery Protect your virtual machines by using Azure Backup Lab : Implementing Azure-based recovery services Implementing the lab environment Creating and configuring an Azure Site Recovery vault Implementing Hyper-V VM protection by using Azure Site Recovery vault Implementing Azure Backup After completing this module, students will be able to: Recover Windows Server IaaS virtual machines by using Azure Backup. Use Azure Backup to help protect the data for on-premises servers and virtualized workloads. Implement Recovery Vaults and Azure Backup policies. Protect Azure VMs with Azure Site Recovery. Run a disaster recovery drill to validate protection. Failover and failback Azure virtual machines. Module 6: Upgrade and migrate in Windows Server This module discusses approaches to migrating Windows Server workloads running in earlier versions of Windows Server to more current versions. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server. Lessons Active Directory Domain Services migration Migrate file server workloads using Storage Migration Service Migrate Windows Server roles Lab : Migrating Windows Server workloads to IaaS VMs Deploying AD DS domain controllers in Azure Migrating file server shares by using Storage Migration Service After completing this module, students will be able to: Compare upgrading an AD DS forest and migrating to a new AD DS forest. Describe the Active Directory Migration Tool (ADMT). Identify the requirements and considerations for using Storage Migration Service. Describe how to migrate a server with storage migration. Use the Windows Server Migration Tools to migrate specific Windows Server roles. Module 7: Implementing migration in hybrid scenarios This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service. Lessons Migrate on-premises Windows Server instances to Azure IaaS virtual machines Upgrade and migrate Windows Server IaaS virtual machines Containerize and migrate ASP.NET applications to Azure App Service Lab : Migrating on-premises VMs servers to IaaS VMs Implementing assessment and discovery of Hyper-V VMs using Azure Migrate Implementing migration of Hyper-V workloads using Azure Migrate After completing this module, students will be able to: Plan a migration strategy and choose the appropriate migration tools. Perform server assessment and discovery using Azure Migrate. Migrate Windows Server workloads to Azure VM workloads using Azure Migrate. Explain how to migrate workloads using Windows Server Migration tools. Migrate file servers by using the Storage Migration Service. Discover and containerize ASP.NET applcations running on Windows. Migrate a containerized application to Azure App Service. Module 8: Server and performance monitoring in Windows Server This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troublshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues. Lessons Monitor Windows Server performance Manage and monitor Windows Server event logs Implement Windows Server auditing and diagnostics Troubleshoot Active Directory Lab : Monitoring and troubleshooting Windows Server Establishing a performance baseline Identifying the source of a performance problem Viewing and configuring centralized event logs After completing this module, students will be able to: Explain the fundamentals of server performance tuning. Use built-in tools in Windows Server to monitor server performance. Use Server Manager and Windows Admin Center to review event logs. Implement custom views. Configure an event subscription. Audit Windows Server events. Configure Windows Server to record diagnostic information. Recover the AD DS database and objects in AD DS. Troubleshoot AD DS replication. Troubleshoot hybrid authentication issues. Module 9: Implementing operational monitoring in hybrid scenarios This module covers using monitoring and troubleshooing tools, processes, and best practices to streamline app performance and availabilty of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, and how to view VM metrics in Azure Metrics Explorer, and how to create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption. Lessons Monitor Windows Server IaaS Virtual Machines and hybrid instances Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts Monitor performance of virtual machines by using Azure Monitor VM Insights Troubleshoot on-premises and hybrid networking Troubleshoot Windows Server Virtual Machines in Azure Lab : Monitoring and troubleshooting of IaaS VMs running Windows Server Enabling Azure Monitor for virtual machines Setting up a VM with boot diagnostics Setting up a Log Analytics workspace and Azure Monitor VM Insights After completing this module, students will be able to: Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. View VM metrics in Azure Metrics Explorer. Use monitoring data to diagnose problems. Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights. Configure a Log Analytics workspace. Troubleshoot on-premises connectivity and hybrid network connectivity. Troubleshoot AD DS service failures or degraded performance. Recover deleted security objects and the AD DS database. Troubleshoot hybrid authentication issues. Module 1: Windows Server security This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure. Lessons Secure Windows Sever user accounts Hardening Windows Server Windows Server Update Management Secure Windows Server DNS Lab : Configuring security in Windows Server Configuring Windows Defender Credential Guard Locating problematic accounts Implementing LAPS After completing this module, students will be able to: Diagnose and remediate potential security vulnerabilities in Windows Server resources. Harden the security configuration of the Windows Server operating system environment. Deploy operating system updates to computers on a network by using Windows Server Update Services. Secure Windows Server DNS to help protect the network name resolution infrastructure. Implement DNS policies. Module 2: Implementing security solutions in hybrid scenarios This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) virtual machines (VMs) and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The modules explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software. Lessons Implement Windows Server IaaS VM network security. Audit the security of Windows Server IaaS Virtual Machines Manage Azure updates Create and implement application allowlists with adaptive application control Configure BitLocker disk encryption for Windows IaaS Virtual Machines Implement change tracking and file integrity monitoring for Windows Server IaaS VMs Lab : Using Azure Security Center in hybrid scenarios  Provisioning Azure VMs running Windows Server Configuring Azure Security Center Onboarding on-premises Windows Server into Azure Security Center Verifying the hybrid capabilities of Azure Security Center Configuring Windows Server 2019 security in Azure VMs After completing this module, students will be able to: Diagnose network security issues in Windows Server IaaS virtual machines. Onboard Windows Server computers to Azure Security Center. Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management. Implement Adaptive application controls to protect Windows Server IaaS VMs. Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs). Back up and recover encrypted data. Monitor Windows Server Azure IaaS VMs for changes in files and the registry. Module 3: Implementing high availability This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load-balanced VMs, and how to implement Azure Site Recovery. Lessons Introduction to Cluster Shared Volumes. Implement Windows Server failover clustering. Implement high availability of Windows Server VMs. Implement Windows Server File Server high availability. Implement scale and high availability with Windows Server VMs. Lab : Implementing failover clustering Configuring iSCSI storage Configuring a failover cluster Deploying and configuring a highly available file server Validating the deployment of the highly available file server After completing this module, students will be able to: Implement highly available storage volumes by using Clustered Share Volumes. Implement highly available Windows Server workloads using failover clustering. Describe Hyper-V VMs load balancing. Implement Hyper-V VMs live migration and Hyper-V VMs storage migration. Describe Windows Server File Server high availablity options. Implement scaling for virtual machine scale sets and load-balanced VMs. Implement Azure Site Recovery. Module 4: Disaster recovery in Windows Server This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters. Lessons Implement Hyper-V Replica Protect your on-premises infrastructure from disasters with Azure Site Recovery Lab : Implementing Hyper-V Replica and Windows Server Backup Implementing Hyper-V Replica Implementing backup and restore with Windows Server Backup After completing this module, students will be able to: Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components Describe Hyper-V Replica use cases and security considerations. Configure Hyper-V Replica settings, health monitoring, and failover options. Describe extended replication. Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery. Module 5: Implementing recovery services in hybrid scenarios This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focus on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implementRecovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The modules also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery. Lessons Implement hybrid backup and recovery with Windows Server IaaS Protect your Azure infrastructure with Azure Site Recovery Protect your virtual machines by using Azure Backup Lab : Implementing Azure-based recovery services Implementing the lab environment Creating and configuring an Azure Site Recovery vault Implementing Hyper-V VM protection by using Azure Site Recovery vault Implementing Azure Backup After completing this module, students will be able to: Recover Windows Server IaaS virtual machines by using Azure Backup. Use Azure Backup to help protect the data for on-premises servers and virtualized workloads. Implement Recovery Vaults and Azure Backup policies. Protect Azure VMs with Azure Site Recovery. Run a disaster recovery drill to validate protection. Failover and failback Azure virtual machines. Module 6: Upgrade and migrate in Windows Server This module discusses approaches to migrating Windows Server workloads running in earlier versions of Windows Server to more current versions. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server. Lessons Active Directory Domain Services migration Migrate file server workloads using Storage Migration Service Migrate Windows Server roles Lab : Migrating Windows Server workloads to IaaS VMs Deploying AD DS domain controllers in Azure Migrating file server shares by using Storage Migration Service After completing this module, students will be able to: Compare upgrading an AD DS forest and migrating to a new AD DS forest. Describe the Active Directory Migration Tool (ADMT). Identify the requirements and considerations for using Storage Migration Service. Describe how to migrate a server with storage migration. Use the Windows Server Migration Tools to migrate specific Windows Server roles. Module 7: Implementing migration in hybrid scenarios This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service. Lessons Migrate on-premises Windows Server instances to Azure IaaS virtual machines Upgrade and migrate Windows Server IaaS virtual machines Containerize and migrate ASP.NET applications to Azure App Service Lab : Migrating on-premises VMs servers to IaaS VMs Implementing assessment and discovery of Hyper-V VMs using Azure Migrate Implementing migration of Hyper-V workloads using Azure Migrate After completing this module, students will be able to: Plan a migration strategy and choose the appropriate migration tools. Perform server assessment and discovery using Azure Migrate. Migrate Windows Server workloads to Azure VM workloads using Azure Migrate. Explain how to migrate workloads using Windows Server Migration tools. Migrate file servers by using the Storage Migration Service. Discover and containerize ASP.NET applcations running on Windows. Migrate a containerized application to Azure App Service. Module 8: Server and performance monitoring in Windows Server This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troublshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues. Lessons Monitor Windows Server performance Manage and monitor Windows Server event logs Implement Windows Server auditing and diagnostics Troubleshoot Active Directory Lab : Monitoring and troubleshooting Windows Server Establishing a performance baseline Identifying the source of a performance problem Viewing and configuring centralized event logs After completing this module, students will be able to: Explain the fundamentals of server performance tuning. Use built-in tools in Windows Server to monitor server performance. Use Server Manager and Windows Admin Center to review event logs. Implement custom views. Configure an event subscription. Audit Windows Server events. Configure Windows Server to record diagnostic information. Recover the AD DS database and objects in AD DS. Troubleshoot AD DS replication. Troubleshoot hybrid authentication issues. Module 9: Implementing operational monitoring in hybrid scenarios This module covers using monitoring and troubleshooing tools, processes, and best practices to streamline app performance and availabilty of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, and how to view VM metrics in Azure Metrics Explorer, and how to create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption. Lessons Monitor Windows Server IaaS Virtual Machines and hybrid instances Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts Monitor performance of virtual machines by using Azure Monitor VM Insights Troubleshoot on-premises and hybrid networking Troubleshoot Windows Server Virtual Machines in Azure Lab : Monitoring and troubleshooting of IaaS VMs running Windows Server Enabling Azure Monitor for virtual machines Setting up a VM with boot diagnostics Setting up a Log Analytics workspace and Azure Monitor VM Insights After completing this module, students will be able to: Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. View VM metrics in Azure Metrics Explorer. Use monitoring data to diagnose problems. Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights. Configure a Log Analytics workspace. Troubleshoot on-premises connectivity and hybrid network connectivity. Troubleshoot AD DS service failures or degraded performance. Recover deleted security objects and the AD DS database. Troubleshoot hybrid authentication issues.

Volg de AZ-801 Configuring Windows Server Hybrid Advanced Services training bij Master IT. In deze training ligt er veel focus op het verbeteren van hybride beveiliging met Azure Security Center, Azure Sentinel en Windows Update Management. In combinatie met de AZ-800 training certificeer je jezelf als Windows Server Hybrid Administrator Associate. Na afronding van deze training kun je onder andere: Windows Server on-premises en hybride infrastructuren beveiligen Disaster recovery doorvoeren Windows Server high availability implementeren en beheren This four-day instructor-led AZ-801 training is designed for IT professionals who configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. These professionals manage and support an infrastructure that includes on-premises and Azure IaaS-hosted Windows Server-based workloads. The course teaches IT professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to manage and secure Azure VMs running Windows Server. The course also covers how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights various administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor. Harden the security configuration of the Windows Server operating system environment. Enhance hybrid security using Azure Security Center, Azure Sentinel, and Windows Update Management. Apply security features to protect critical resources. Lesmethode Ben je op zoek naar volledige zelfstudie? Wij bieden je de mogelijkheid om deze training volledig in jouw eigen tijd te volgen. Uiteraard met het officiële Engelstalige lesmateriaal waarmee je de juiste kennis opdoet. Doelgroep This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting. Voorkennis Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts An awareness of basic security best practices Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR). Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces). Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell An understanding of the following concepts as related to Windows Server technologies: High availability and disaster recovery Automation Monitoring Troubleshooting Before attending this course, students must have: Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services Experience with common Windows Server management tools (implied in the first prerequisite). Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite). Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP) Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts An awareness of basic security best practices Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR). Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces). Basic experience with implementing and managing IaaS services in Microsoft Azure Basic knowledge of Azure Active Directory Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11 Basic experience with Windows PowerShell An understanding of the following concepts as related to Windows Server technologies: High availability and disaster recovery Automation Monitoring Troubleshooting Onderdelen Module 1: Windows Server security This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure. Lessons Secure Windows Sever user accounts Hardening Windows Server Windows Server Update Management Secure Windows Server DNS Lab : Configuring security in Windows Server Configuring Windows Defender Credential Guard Locating problematic accounts Implementing LAPS After completing this module, students will be able to: Diagnose and remediate potential security vulnerabilities in Windows Server resources. Harden the security configuration of the Windows Server operating system environment. Deploy operating system updates to computers on a network by using Windows Server Update Services. Secure Windows Server DNS to help protect the network name resolution infrastructure. Implement DNS policies. Module 2: Implementing security solutions in hybrid scenarios This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) virtual machines (VMs) and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The modules explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software. Lessons Implement Windows Server IaaS VM network security. Audit the security of Windows Server IaaS Virtual Machines Manage Azure updates Create and implement application allowlists with adaptive application control Configure BitLocker disk encryption for Windows IaaS Virtual Machines Implement change tracking and file integrity monitoring for Windows Server IaaS VMs Lab : Using Azure Security Center in hybrid scenarios  Provisioning Azure VMs running Windows Server Configuring Azure Security Center Onboarding on-premises Windows Server into Azure Security Center Verifying the hybrid capabilities of Azure Security Center Configuring Windows Server 2019 security in Azure VMs After completing this module, students will be able to: Diagnose network security issues in Windows Server IaaS virtual machines. Onboard Windows Server computers to Azure Security Center. Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management. Implement Adaptive application controls to protect Windows Server IaaS VMs. Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs). Back up and recover encrypted data. Monitor Windows Server Azure IaaS VMs for changes in files and the registry. Module 3: Implementing high availability This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load-balanced VMs, and how to implement Azure Site Recovery. Lessons Introduction to Cluster Shared Volumes. Implement Windows Server failover clustering. Implement high availability of Windows Server VMs. Implement Windows Server File Server high availability. Implement scale and high availability with Windows Server VMs. Lab : Implementing failover clustering Configuring iSCSI storage Configuring a failover cluster Deploying and configuring a highly available file server Validating the deployment of the highly available file server After completing this module, students will be able to: Implement highly available storage volumes by using Clustered Share Volumes. Implement highly available Windows Server workloads using failover clustering. Describe Hyper-V VMs load balancing. Implement Hyper-V VMs live migration and Hyper-V VMs storage migration. Describe Windows Server File Server high availablity options. Implement scaling for virtual machine scale sets and load-balanced VMs. Implement Azure Site Recovery. Module 4: Disaster recovery in Windows Server This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters. Lessons Implement Hyper-V Replica Protect your on-premises infrastructure from disasters with Azure Site Recovery Lab : Implementing Hyper-V Replica and Windows Server Backup Implementing Hyper-V Replica Implementing backup and restore with Windows Server Backup After completing this module, students will be able to: Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components Describe Hyper-V Replica use cases and security considerations. Configure Hyper-V Replica settings, health monitoring, and failover options. Describe extended replication. Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery. Module 5: Implementing recovery services in hybrid scenarios This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focus on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implementRecovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The modules also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery. Lessons Implement hybrid backup and recovery with Windows Server IaaS Protect your Azure infrastructure with Azure Site Recovery Protect your virtual machines by using Azure Backup Lab : Implementing Azure-based recovery services Implementing the lab environment Creating and configuring an Azure Site Recovery vault Implementing Hyper-V VM protection by using Azure Site Recovery vault Implementing Azure Backup After completing this module, students will be able to: Recover Windows Server IaaS virtual machines by using Azure Backup. Use Azure Backup to help protect the data for on-premises servers and virtualized workloads. Implement Recovery Vaults and Azure Backup policies. Protect Azure VMs with Azure Site Recovery. Run a disaster recovery drill to validate protection. Failover and failback Azure virtual machines. Module 6: Upgrade and migrate in Windows Server This module discusses approaches to migrating Windows Server workloads running in earlier versions of Windows Server to more current versions. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server. Lessons Active Directory Domain Services migration Migrate file server workloads using Storage Migration Service Migrate Windows Server roles Lab : Migrating Windows Server workloads to IaaS VMs Deploying AD DS domain controllers in Azure Migrating file server shares by using Storage Migration Service After completing this module, students will be able to: Compare upgrading an AD DS forest and migrating to a new AD DS forest. Describe the Active Directory Migration Tool (ADMT). Identify the requirements and considerations for using Storage Migration Service. Describe how to migrate a server with storage migration. Use the Windows Server Migration Tools to migrate specific Windows Server roles. Module 7: Implementing migration in hybrid scenarios This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service. Lessons Migrate on-premises Windows Server instances to Azure IaaS virtual machines Upgrade and migrate Windows Server IaaS virtual machines Containerize and migrate ASP.NET applications to Azure App Service Lab : Migrating on-premises VMs servers to IaaS VMs Implementing assessment and discovery of Hyper-V VMs using Azure Migrate Implementing migration of Hyper-V workloads using Azure Migrate After completing this module, students will be able to: Plan a migration strategy and choose the appropriate migration tools. Perform server assessment and discovery using Azure Migrate. Migrate Windows Server workloads to Azure VM workloads using Azure Migrate. Explain how to migrate workloads using Windows Server Migration tools. Migrate file servers by using the Storage Migration Service. Discover and containerize ASP.NET applcations running on Windows. Migrate a containerized application to Azure App Service. Module 8: Server and performance monitoring in Windows Server This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troublshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues. Lessons Monitor Windows Server performance Manage and monitor Windows Server event logs Implement Windows Server auditing and diagnostics Troubleshoot Active Directory Lab : Monitoring and troubleshooting Windows Server Establishing a performance baseline Identifying the source of a performance problem Viewing and configuring centralized event logs After completing this module, students will be able to: Explain the fundamentals of server performance tuning. Use built-in tools in Windows Server to monitor server performance. Use Server Manager and Windows Admin Center to review event logs. Implement custom views. Configure an event subscription. Audit Windows Server events. Configure Windows Server to record diagnostic information. Recover the AD DS database and objects in AD DS. Troubleshoot AD DS replication. Troubleshoot hybrid authentication issues. Module 9: Implementing operational monitoring in hybrid scenarios This module covers using monitoring and troubleshooing tools, processes, and best practices to streamline app performance and availabilty of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, and how to view VM metrics in Azure Metrics Explorer, and how to create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption. Lessons Monitor Windows Server IaaS Virtual Machines and hybrid instances Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts Monitor performance of virtual machines by using Azure Monitor VM Insights Troubleshoot on-premises and hybrid networking Troubleshoot Windows Server Virtual Machines in Azure Lab : Monitoring and troubleshooting of IaaS VMs running Windows Server Enabling Azure Monitor for virtual machines Setting up a VM with boot diagnostics Setting up a Log Analytics workspace and Azure Monitor VM Insights After completing this module, students will be able to: Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. View VM metrics in Azure Metrics Explorer. Use monitoring data to diagnose problems. Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights. Configure a Log Analytics workspace. Troubleshoot on-premises connectivity and hybrid network connectivity. Troubleshoot AD DS service failures or degraded performance. Recover deleted security objects and the AD DS database. Troubleshoot hybrid authentication issues. Module 1: Windows Server security This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure. Lessons Secure Windows Sever user accounts Hardening Windows Server Windows Server Update Management Secure Windows Server DNS Lab : Configuring security in Windows Server Configuring Windows Defender Credential Guard Locating problematic accounts Implementing LAPS After completing this module, students will be able to: Diagnose and remediate potential security vulnerabilities in Windows Server resources. Harden the security configuration of the Windows Server operating system environment. Deploy operating system updates to computers on a network by using Windows Server Update Services. Secure Windows Server DNS to help protect the network name resolution infrastructure. Implement DNS policies. Module 2: Implementing security solutions in hybrid scenarios This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) virtual machines (VMs) and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The modules explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software. Lessons Implement Windows Server IaaS VM network security. Audit the security of Windows Server IaaS Virtual Machines Manage Azure updates Create and implement application allowlists with adaptive application control Configure BitLocker disk encryption for Windows IaaS Virtual Machines Implement change tracking and file integrity monitoring for Windows Server IaaS VMs Lab : Using Azure Security Center in hybrid scenarios  Provisioning Azure VMs running Windows Server Configuring Azure Security Center Onboarding on-premises Windows Server into Azure Security Center Verifying the hybrid capabilities of Azure Security Center Configuring Windows Server 2019 security in Azure VMs After completing this module, students will be able to: Diagnose network security issues in Windows Server IaaS virtual machines. Onboard Windows Server computers to Azure Security Center. Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management. Implement Adaptive application controls to protect Windows Server IaaS VMs. Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs). Back up and recover encrypted data. Monitor Windows Server Azure IaaS VMs for changes in files and the registry. Module 3: Implementing high availability This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load-balanced VMs, and how to implement Azure Site Recovery. Lessons Introduction to Cluster Shared Volumes. Implement Windows Server failover clustering. Implement high availability of Windows Server VMs. Implement Windows Server File Server high availability. Implement scale and high availability with Windows Server VMs. Lab : Implementing failover clustering Configuring iSCSI storage Configuring a failover cluster Deploying and configuring a highly available file server Validating the deployment of the highly available file server After completing this module, students will be able to: Implement highly available storage volumes by using Clustered Share Volumes. Implement highly available Windows Server workloads using failover clustering. Describe Hyper-V VMs load balancing. Implement Hyper-V VMs live migration and Hyper-V VMs storage migration. Describe Windows Server File Server high availablity options. Implement scaling for virtual machine scale sets and load-balanced VMs. Implement Azure Site Recovery. Module 4: Disaster recovery in Windows Server This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters. Lessons Implement Hyper-V Replica Protect your on-premises infrastructure from disasters with Azure Site Recovery Lab : Implementing Hyper-V Replica and Windows Server Backup Implementing Hyper-V Replica Implementing backup and restore with Windows Server Backup After completing this module, students will be able to: Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components Describe Hyper-V Replica use cases and security considerations. Configure Hyper-V Replica settings, health monitoring, and failover options. Describe extended replication. Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery. Module 5: Implementing recovery services in hybrid scenarios This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focus on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implementRecovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The modules also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery. Lessons Implement hybrid backup and recovery with Windows Server IaaS Protect your Azure infrastructure with Azure Site Recovery Protect your virtual machines by using Azure Backup Lab : Implementing Azure-based recovery services Implementing the lab environment Creating and configuring an Azure Site Recovery vault Implementing Hyper-V VM protection by using Azure Site Recovery vault Implementing Azure Backup After completing this module, students will be able to: Recover Windows Server IaaS virtual machines by using Azure Backup. Use Azure Backup to help protect the data for on-premises servers and virtualized workloads. Implement Recovery Vaults and Azure Backup policies. Protect Azure VMs with Azure Site Recovery. Run a disaster recovery drill to validate protection. Failover and failback Azure virtual machines. Module 6: Upgrade and migrate in Windows Server This module discusses approaches to migrating Windows Server workloads running in earlier versions of Windows Server to more current versions. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server. Lessons Active Directory Domain Services migration Migrate file server workloads using Storage Migration Service Migrate Windows Server roles Lab : Migrating Windows Server workloads to IaaS VMs Deploying AD DS domain controllers in Azure Migrating file server shares by using Storage Migration Service After completing this module, students will be able to: Compare upgrading an AD DS forest and migrating to a new AD DS forest. Describe the Active Directory Migration Tool (ADMT). Identify the requirements and considerations for using Storage Migration Service. Describe how to migrate a server with storage migration. Use the Windows Server Migration Tools to migrate specific Windows Server roles. Module 7: Implementing migration in hybrid scenarios This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service. Lessons Migrate on-premises Windows Server instances to Azure IaaS virtual machines Upgrade and migrate Windows Server IaaS virtual machines Containerize and migrate ASP.NET applications to Azure App Service Lab : Migrating on-premises VMs servers to IaaS VMs Implementing assessment and discovery of Hyper-V VMs using Azure Migrate Implementing migration of Hyper-V workloads using Azure Migrate After completing this module, students will be able to: Plan a migration strategy and choose the appropriate migration tools. Perform server assessment and discovery using Azure Migrate. Migrate Windows Server workloads to Azure VM workloads using Azure Migrate. Explain how to migrate workloads using Windows Server Migration tools. Migrate file servers by using the Storage Migration Service. Discover and containerize ASP.NET applcations running on Windows. Migrate a containerized application to Azure App Service. Module 8: Server and performance monitoring in Windows Server This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troublshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues. Lessons Monitor Windows Server performance Manage and monitor Windows Server event logs Implement Windows Server auditing and diagnostics Troubleshoot Active Directory Lab : Monitoring and troubleshooting Windows Server Establishing a performance baseline Identifying the source of a performance problem Viewing and configuring centralized event logs After completing this module, students will be able to: Explain the fundamentals of server performance tuning. Use built-in tools in Windows Server to monitor server performance. Use Server Manager and Windows Admin Center to review event logs. Implement custom views. Configure an event subscription. Audit Windows Server events. Configure Windows Server to record diagnostic information. Recover the AD DS database and objects in AD DS. Troubleshoot AD DS replication. Troubleshoot hybrid authentication issues. Module 9: Implementing operational monitoring in hybrid scenarios This module covers using monitoring and troubleshooing tools, processes, and best practices to streamline app performance and availabilty of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, and how to view VM metrics in Azure Metrics Explorer, and how to create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption. Lessons Monitor Windows Server IaaS Virtual Machines and hybrid instances Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts Monitor performance of virtual machines by using Azure Monitor VM Insights Troubleshoot on-premises and hybrid networking Troubleshoot Windows Server Virtual Machines in Azure Lab : Monitoring and troubleshooting of IaaS VMs running Windows Server Enabling Azure Monitor for virtual machines Setting up a VM with boot diagnostics Setting up a Log Analytics workspace and Azure Monitor VM Insights After completing this module, students will be able to: Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments. View VM metrics in Azure Metrics Explorer. Use monitoring data to diagnose problems. Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights. Configure a Log Analytics workspace. Troubleshoot on-premises connectivity and hybrid network connectivity. Troubleshoot AD DS service failures or degraded performance. Recover deleted security objects and the AD DS database. Troubleshoot hybrid authentication issues.

Volg de AZ 900 training Microsoft Azure Fundamentals en krijg basiskennis over de belangrijkste Azure-concepten; kern Azure-services; kernoplossingen en beheertools; algemene beveiliging en netwerkbeveiliging; governance-, privacy- en compliancefuncties; Azure-kostenbeheer en Service Level Agreements. Na afronding van deze training kun je onder andere: De belangrijkste Microsoft Azure-services en cloudconcepten beschrijven Identiteit, governance, privacy en compliance-functies beschrijven Goed bekend raken met de onderwerpen van het AZ-900 examen Deze training bevat Engelstalig lesmateriaal en wordt gegeven door een Nederlandssprekende docent (indien gewenst ook mogelijk in het Engels). De AZ 900 training is ontworpen om je te voorzien van een uitgebreid begrip van de belangrijkste concepten in cloud computing, Azure architectuur en Azure services, die essentieel zijn voor succes in het AZ-900 examen. De Microsoft Azure Fundamentals biedt veel mogelijkheden wat betreft vervolgtrainingen. Een echte basistraining dus.    Het primaire doel van de cursus is om je te voorzien van fundamentele kennis over cloud concepten, Azure services en Azure management en governance tools die allemaal cruciaal zijn om het AZ-900 examen te halen. Tijdens de training zul je je verdiepen in onderwerpen zoals Azure concepten, waardoor je inzicht krijgt in het bredere landschap van cloud computing en de betekenis daarvan. Verder verken je de architectuur van Azure en ontdek je de onderliggende structuur die de services ondersteunt. Aan het einde van deze training heb je een goed begrip van de AZ-900 inhoud, waardoor je met vertrouwen Azure oplossingen kunt plannen en beheren en door de wereld van Azure en cloud computing kunt navigeren.       Lesmethode Bij Master IT train je met onze unieke lesmethode Active Learning, hiermee leer je aantoonbaar effectiever! Wij zjn er namelijk van overtuigd dat je slimmer en met meer plezier leert als je actief met je lesstof omgaat. Onze klassen zijn gevuld met maximaal 8 cursisten. Hierbij luister je niet passief naar een trainer, maar ga je interactief en 1-op-1 met de trainer aan de slag om ervoor te zorgen dat jouw leerdoelen behaald worden. De theorie maak je je zoveel mogelijk zelf eigen, de nadruk van de begeleiding ligt op het begrijpen en toepassen van die theorie in de praktijk. Zo leer je alleen datgene wat je echt nodig hebt. Je bepaalt zelf je leertempo. De trainer coacht je bij het definiëren van jouw leertraject. Je onthoudt en begrijpt je nieuwe kennis beter. Alles draait om toepassing van de stof in jouw praktijk. Om alle beschikbare trainingsdata in te zien, bekijk dan onze eigen website Doelgroep Deze training is geschikt voor IT-personeel dat net begint te werken met Azure. De AZ-900 training maakt voornamelijk gebruik van het Azure portaal en de opdrachtregelinterface om resources aan te maken en vereist geen scriptingvaardigheden. Cursisten zullen vertrouwen krijgen om andere rolgebaseerde cursussen en certificeringen te volgen, zoals Azure Administrator. Met deze training ben je volledig voorbereid voor het AZ-900 examen. Deze training is geschikt voor IT-personeel dat net begint te werken met Azure. De AZ-900 training maakt voornamelijk gebruik van het Azure portaal en de opdrachtregelinterface om resources aan te maken en vereist geen scriptingvaardigheden. Cursisten zullen vertrouwen krijgen om andere rolgebaseerde cursussen en certificeringen te volgen, zoals Azure Administrator. Met deze training ben je volledig voorbereid voor het AZ-900 examen. Voorkennis Er zijn geen vereisten om de AZ 900 training te volgen. Bekendheid met cloud computing is handig, maar niet noodzakelijk. Er zijn geen vereisten om de AZ 900 training te volgen. Bekendheid met cloud computing is handig, maar niet noodzakelijk. Onderdelen Module 1: Cloud ConceptsIn deze module krijg je een end-to-end blik op cloudconcepten op instapniveau waarmee je een solide basis legt voor het voltooien van de beschikbare modules voor Azure Fundamentals. Cloud Voordelen van cloud Typen cloudservices Na het voltooien van deze module zijn cursisten in staat om: Cloud computing beschrijven. De voordelen van het gebruik van cloudservices beschrijven. Typen cloudservices beschrijven. Module 2: Azure Architecture and ServicesDeze module verkent Microsoft Azure, de architectuur en enkele van de meest gebruikte services en resources. Kernonderdelen van de Azure architectuur Azure reken- en netwerkservices Azure opslagdiensten Azure identiteit, toegang en beveiliging Lab : Verken de Microsoft Learn sandboxLab : Maak een Azure resourceLab: Een Azure virtuele machine makenLab : Netwerktoegang configurerenLab : Een opslag blob maken Na het afronden van deze module ben je al cursist in staat om: De belangrijkste architecturale componenten van Azure te beschrijven. Azure compute en networking services te beschrijven. Azure opslagdiensten te beschrijven. Azure identiteit, toegang en beveiliging beschrijven. Module 3: Core SolutionsIn deze module leer je over de management- en governancebronnen die beschikbaar zijn om je te helpen bij het beheren van je cloud- en on-premise resources. Kostenbeheer in Azure Functies en tools in Azure voor governance en compliance Functies en tools voor het beheren en inzetten van Azure resources Monitoring tools in Azure Lab : Een resource lock configurerenLab : Vergelijk de kosten van een werklast met behulp van de Total Cost of Ownership calculatorLab : De kosten van de werklast schatten met de prijscalculator Na het afronden van deze module ben je in staat om: Kostenbeheer in Azure te beschrijven. Beschrijf functies en tools in Azure voor governance en compliance. Beschrijf functies en tools voor het beheren en inzetten van Azure resources. Monitoring tools in Azure beschrijven. Module 1: Cloud ConceptsIn deze module krijg je een end-to-end blik op cloudconcepten op instapniveau waarmee je een solide basis legt voor het voltooien van de beschikbare modules voor Azure Fundamentals. Cloud Voordelen van cloud Typen cloudservices Na het voltooien van deze module zijn cursisten in staat om: Cloud computing beschrijven. De voordelen van het gebruik van cloudservices beschrijven. Typen cloudservices beschrijven. Module 2: Azure Architecture and ServicesDeze module verkent Microsoft Azure, de architectuur en enkele van de meest gebruikte services en resources. Kernonderdelen van de Azure architectuur Azure reken- en netwerkservices Azure opslagdiensten Azure identiteit, toegang en beveiliging Lab : Verken de Microsoft Learn sandboxLab : Maak een Azure resourceLab: Een Azure virtuele machine makenLab : Netwerktoegang configurerenLab : Een opslag blob maken Na het afronden van deze module ben je al cursist in staat om: De belangrijkste architecturale componenten van Azure te beschrijven. Azure compute en networking services te beschrijven. Azure opslagdiensten te beschrijven. Azure identiteit, toegang en beveiliging beschrijven. Module 3: Core SolutionsIn deze module leer je over de management- en governancebronnen die beschikbaar zijn om je te helpen bij het beheren van je cloud- en on-premise resources. Kostenbeheer in Azure Functies en tools in Azure voor governance en compliance Functies en tools voor het beheren en inzetten van Azure resources Monitoring tools in Azure Lab : Een resource lock configurerenLab : Vergelijk de kosten van een werklast met behulp van de Total Cost of Ownership calculatorLab : De kosten van de werklast schatten met de prijscalculator Na het afronden van deze module ben je in staat om: Kostenbeheer in Azure te beschrijven. Beschrijf functies en tools in Azure voor governance en compliance. Beschrijf functies en tools voor het beheren en inzetten van Azure resources. Monitoring tools in Azure beschrijven.

Volg de AZ 900 training Microsoft Azure Fundamentals en krijg basiskennis over de belangrijkste Azure-concepten; kern Azure-services; kernoplossingen en beheertools; algemene beveiliging en netwerkbeveiliging; governance-, privacy- en compliancefuncties; Azure-kostenbeheer en Service Level Agreements. Na afronding van deze training kun je onder andere: De belangrijkste Microsoft Azure-services en cloudconcepten beschrijven Identiteit, governance, privacy en compliance-functies beschrijven Goed bekend raken met de onderwerpen van het AZ-900 examen De AZ 900 training is ontworpen om je te voorzien van een uitgebreid begrip van de belangrijkste concepten in cloud computing, Azure architectuur en Azure services, die essentieel zijn voor succes in het AZ-900 examen. De Microsoft Azure Fundamentals biedt veel mogelijkheden wat betreft vervolgtrainingen. Een echte basistraining dus.    Het primaire doel van de cursus is om je te voorzien van fundamentele kennis over cloud concepten, Azure services en Azure management en governance tools die allemaal cruciaal zijn om het AZ-900 examen te halen. Tijdens de training zul je je verdiepen in onderwerpen zoals Azure concepten, waardoor je inzicht krijgt in het bredere landschap van cloud computing en de betekenis daarvan. Verder verken je de architectuur van Azure en ontdek je de onderliggende structuur die de services ondersteunt. Aan het einde van deze training heb je een goed begrip van de AZ-900 inhoud, waardoor je met vertrouwen Azure oplossingen kunt plannen en beheren en door de wereld van Azure en cloud computing kunt navigeren.       Lesmethode Ben je op zoek naar volledige zelfstudie? Wij bieden je de mogelijkheid om deze training volledig in jouw eigen tijd te volgen. Uiteraard met het officiële Engelstalige lesmateriaal waarmee je de juiste kennis opdoet. Doelgroep Deze training is geschikt voor IT-personeel dat net begint te werken met Azure. De AZ-900 training maakt voornamelijk gebruik van het Azure portaal en de opdrachtregelinterface om resources aan te maken en vereist geen scriptingvaardigheden. Cursisten zullen vertrouwen krijgen om andere rolgebaseerde cursussen en certificeringen te volgen, zoals Azure Administrator. Met deze training ben je volledig voorbereid voor het AZ-900 examen. Deze training is geschikt voor IT-personeel dat net begint te werken met Azure. De AZ-900 training maakt voornamelijk gebruik van het Azure portaal en de opdrachtregelinterface om resources aan te maken en vereist geen scriptingvaardigheden. Cursisten zullen vertrouwen krijgen om andere rolgebaseerde cursussen en certificeringen te volgen, zoals Azure Administrator. Met deze training ben je volledig voorbereid voor het AZ-900 examen. Voorkennis Er zijn geen vereisten om de AZ 900 training te volgen. Bekendheid met cloud computing is handig, maar niet noodzakelijk. Er zijn geen vereisten om de AZ 900 training te volgen. Bekendheid met cloud computing is handig, maar niet noodzakelijk. Onderdelen Module 1: Cloud ConceptsIn deze module krijg je een end-to-end blik op cloudconcepten op instapniveau waarmee je een solide basis legt voor het voltooien van de beschikbare modules voor Azure Fundamentals. Cloud Voordelen van cloud Typen cloudservices Na het voltooien van deze module zijn cursisten in staat om: Cloud computing beschrijven. De voordelen van het gebruik van cloudservices beschrijven. Typen cloudservices beschrijven. Module 2: Azure Architecture and ServicesDeze module verkent Microsoft Azure, de architectuur en enkele van de meest gebruikte services en resources. Kernonderdelen van de Azure architectuur Azure reken- en netwerkservices Azure opslagdiensten Azure identiteit, toegang en beveiliging Lab : Verken de Microsoft Learn sandboxLab : Maak een Azure resourceLab: Een Azure virtuele machine makenLab : Netwerktoegang configurerenLab : Een opslag blob maken Na het afronden van deze module ben je al cursist in staat om: De belangrijkste architecturale componenten van Azure te beschrijven. Azure compute en networking services te beschrijven. Azure opslagdiensten te beschrijven. Azure identiteit, toegang en beveiliging beschrijven. Module 3: Core SolutionsIn deze module leer je over de management- en governancebronnen die beschikbaar zijn om je te helpen bij het beheren van je cloud- en on-premise resources. Kostenbeheer in Azure Functies en tools in Azure voor governance en compliance Functies en tools voor het beheren en inzetten van Azure resources Monitoring tools in Azure Lab : Een resource lock configurerenLab : Vergelijk de kosten van een werklast met behulp van de Total Cost of Ownership calculatorLab : De kosten van de werklast schatten met de prijscalculator Na het afronden van deze module ben je in staat om: Kostenbeheer in Azure te beschrijven. Beschrijf functies en tools in Azure voor governance en compliance. Beschrijf functies en tools voor het beheren en inzetten van Azure resources. Monitoring tools in Azure beschrijven. Module 1: Cloud ConceptsIn deze module krijg je een end-to-end blik op cloudconcepten op instapniveau waarmee je een solide basis legt voor het voltooien van de beschikbare modules voor Azure Fundamentals. Cloud Voordelen van cloud Typen cloudservices Na het voltooien van deze module zijn cursisten in staat om: Cloud computing beschrijven. De voordelen van het gebruik van cloudservices beschrijven. Typen cloudservices beschrijven. Module 2: Azure Architecture and ServicesDeze module verkent Microsoft Azure, de architectuur en enkele van de meest gebruikte services en resources. Kernonderdelen van de Azure architectuur Azure reken- en netwerkservices Azure opslagdiensten Azure identiteit, toegang en beveiliging Lab : Verken de Microsoft Learn sandboxLab : Maak een Azure resourceLab: Een Azure virtuele machine makenLab : Netwerktoegang configurerenLab : Een opslag blob maken Na het afronden van deze module ben je al cursist in staat om: De belangrijkste architecturale componenten van Azure te beschrijven. Azure compute en networking services te beschrijven. Azure opslagdiensten te beschrijven. Azure identiteit, toegang en beveiliging beschrijven. Module 3: Core SolutionsIn deze module leer je over de management- en governancebronnen die beschikbaar zijn om je te helpen bij het beheren van je cloud- en on-premise resources. Kostenbeheer in Azure Functies en tools in Azure voor governance en compliance Functies en tools voor het beheren en inzetten van Azure resources Monitoring tools in Azure Lab : Een resource lock configurerenLab : Vergelijk de kosten van een werklast met behulp van de Total Cost of Ownership calculatorLab : De kosten van de werklast schatten met de prijscalculator Na het afronden van deze module ben je in staat om: Kostenbeheer in Azure te beschrijven. Beschrijf functies en tools in Azure voor governance en compliance. Beschrijf functies en tools voor het beheren en inzetten van Azure resources. Monitoring tools in Azure beschrijven.