The AZ-300 Microsoft Azure Architect Technologies certification exam tests and validates your expertise as an Azure Architect around Azure administration, Azure development, and DevOps; among a list of specific expertise categories within each of these.

Certification Target Audience

The AZ-300 Microsoft Azure Architecture Technologies certification exam is geared towards Azure Solution Architects who advice stakeholders and translate business requirements into secure, scalable, and reliable solutions.

Candidates should have advanced experience and knowledge across various aspects of IT operations, including:

  • Networking
  • Virtualization
  • Identity
  • Security
  • Business Continuity
  • Disaster Recovery
  • Data Management
  • Budgeting
  • Governance

Overall, this exam tests a cross-cutting set of expertise in the areas of Azure Administration, Azure Development, and DevOps. It is recommended to have expert-level skills in at least one of these 3 expertise areas.

Skills Measured

Here’s a very high level list of the skills and objectives measured on this AZ-300 Microsoft Azure Architect Technologies certification exam. The percentages next to each objective area represents the number of questions on the exam in that objective area.

Deploy and Configure Infrastructure (25-30%)

  • Analyze resource utilization and consumption
    • May include but not limited to: Configure diagnostic settings on resources; create baseline for resources; create and rest alerts; analyze alerts across subscription; analyze metrics across subscription; create action groups; monitor for unused resources; monitor spend; report on spend; utilize Log Search query functions; view alerts in Log Analytics
  • Create and configure storage accounts
    • May include but not limited to: Configure network access to the storage account; create and configure storage account; generate shared access signature; install and use Azure Storage Explorer; manage access keys; monitor activity log by using Log Analytics; implement Azure storage replication
  • Create and configure a Virtual Machine (VM) for Windows and Linux
    • May include but not limited to: Configure high availability; configure monitoring, networking, storage, and virtual machine size; deploy and configure scale sets
  • Automate deployment of Virtual Machines (VMs)
    • May include but not limited to: Modify Azure Resource Manager (ARM) template; configure location of new VMs; configure VHD template; deploy from template; save a deployment as an ARM template; deploy Windows and Linux VMs
  • Create connectivity between virtual networks
    • May include but not limited to: Create and configure VNET peering; create and configure VNET to VNET; verify virtual network connectivity; create virtual network gateway
  • Implement and manage virtual networking
    • May include but not limited to: Configure private and public IP addresses, network routes, network interface, subnets, and virtual network
  • Manage Azure Active Directory (AD)
    • May include but not limited to: Add custom domains; configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming; configure self-service password reset; implement conditional access policies; manage multiple directories; perform an access review
  • Implement and manage hybrid identities
    • May include but not limited to: Install and configure Azure AD Connect; configure federation and single sign-on; manage Azure AD Connect; manage password sync and writeback

Implement Workloads and Security (20-25%)

  • Migrate servers to Azure
    • May include but not limited to: Migrate by using Azure Site Recovery (ASR); migrate using P2V; configure storage; create a backup vault; prepare source and target environments; backup and restore data; deploy Azure Site Recovery (ASR) agent; prepare virtual network
  • Configure serverless computing
    • May include but not limited to: Create and manage objects; manage a Logic App resource; manage Azure Function app settings; manage Event Grid; manage Service Bus
  • Implement application load balancing
    • May include but not limited to: Configure application gateway and load balancing rules; implement front end IP configurations; manage application load balancing
  • Integrate on premises network with Azure virtual network
    • May include but not limited to: Create and configure Azure VPN Gateway; create and configure site to site VPN; configure Express Route; verify on premises connectivity; manage on-premise connectivity with Azure
  • Manage role-based access control (RBAC)
    • May include but not limited to: Create a custom role; configure access to Azure resources by assigning roles; configure management access to Azure; troubleshoot RBAC; implement RBAC policies; assign RBAC roles
  • Implement Multi-Factor Authentication (MFA)
    • May include but not limited to: Enable MFA for an Azure tenant; configure user accounts for MFA; configure fraud alerts; configure bypass options; configure trusted IPs; configure verification methods; manage role-based access control (RBAC); implement RBAC policies; assign RBAC Roles; create a custom role; configure access to Azure resources by assigning roles; configure management access to Azure

Architect Cloud Technology Solutions (5-10%)

  • Select an appropriate compute solution
    • May include but not limited to: Leverage appropriate design patterns; select appropriate network connectivity options; design for hybrid topologies
  • Select an appropriate integration solution
    • May include but not limited to: Address computational bottlenecks, state management, and OS requirements; provide for web hosting if applicable; evaluate minimum number of nodes
  • Select an appropriate storage solution
    • May include but not limited to: Validate data storage technology capacity limitations; address durability of data; provide for appropriate throughput of data access; evaluate structure of data storage; provide for data archiving, retention, and compliance

Create and Deploy Apps (5-10%)

  • Create web applications by using PaaS
    • May include but not limited to: Create an Azure app service web app by using Azure CLI, PowerShell, and other tools; create documentation for the API by using open source and other tools; create an App Service Web App for containers; create an App Service background task by using WebJobs
  • Create app or service that runs on Service Fabric
    • May include but not limited to: Develop a stateful Reliable Service and a stateless Reliable Service; develop an actor-based Reliable Service; write code to consume Reliable Collections in your service
  • Design and develop applications that run in containers
    • May include but not limited to: Configure diagnostic settings on resources; create a container image by using a Docker file; create an Azure Container Service (ACS/AKS) cluster by using the Azure CLI and Azure Portal; publish an image to the Azure Container Registry; implement an application that runs on an Azure Container Instance; implement container instances by using Azure Container Service (ACS/AKS), Azure Service Fabric, and other tools; manage container settings by using code

Implement Authentication and Secure Data (5-10%)

  • Implement authentication
    • May include but not limited to: Implement authentication by using certificates, forms-based authentication, tokens, Windows-integrated authentication; implement multi-factor authentication by using Azure AD options
  • Implement secure data solutions
    • May include but not limited to: Encrypt and decrypt data at rest; encrypt data with Always Encrypted; implement Azure Confidential Compute and SSL/TLS communications; manage cryptographic keys in the Azure Key Vault

Develop for the Cloud (20-25%)

  • Develop long-running tasks
    • May include but not limited to: Implement large-scale, parallel, and high-performance apps by using batches; implement resilient apps by using queues; implement code to address application events by using web hooks; address continuous processing tasks by using web jobs
  • Configure a message-based integration architecture
    • May include but not limited to: Configure an app or service to send emails, Event Grid, and the Azure Relay Service; create and configure a Notification Hub, an Event Hub, and a Service Bus; configure queries across multiple products; configure an app or service with Microsoft Graph
  • Develop for asynchronous processing
    • May include but not limited to: Implement parallelism, multithreading, processing, durable functions, Azure logic apps, interfaces with storage, interfaces to data access, and appropriate asynchronous compute models
  • Develop for autoscaling
    • May include but not limited to: Implement autoscaling rules and patterns (schedule, operational/system metrics, code that addresses singleton application instances, and code that addresses transient state
  • Implement distributed transactions
    • May include but not limited to: Identify tools to implement distributed transactions (e.g., ADO.NET, elastic transactions, multi-database transactions); manage transaction scope; manage transactions across multiple databases and servers
  • Develop advanced cloud workloads
    • May include but not limited to: Develop solutions by using intelligent algorithms that identify items from images and videos; develop solutions by using intelligent algorithms related to speech, natural language processing, Bing Search, and recommendations and decision making; create and integrate bots; integrate machine learning solutions in an app; create and implement IoT solutions

To view the full list of these exam objectives, and to schedule to take the exam, please reference the official AZ-300 exam page.

Azure Solutions Architect Expert Certification

This is one of a total of 2 exams required to pass in order to earn the Microsoft Certified: Azure Solutions Architect Expert certification. The other exam is the AZ-301 Microsoft Azure Architect Design exam. One you pass both individual exams, then you will earn the full Microsoft Certified: Azure Solutions Architect Expert certification.

This Azure Solutions Architect certification is part of a large restructuring of the Microsoft Certifications on a more job-role specific orientation.

Happy Studying!

GET MORE STUFF LIKE THIS

Subscribe to the Build Azure Weekly newsletter to receive similar updates about Microsoft Azure and related topics!


We respect your privacy and take protecting it seriously. We do not sell our email list, and you can unsubscribe at any time.

Posted by Chris Pietschmann

Chris is a Microsoft MVP and has nearly 20 years of experience building enterprise systems both in the cloud and on-premises. He is also a Certified Microsoft Azure Solutions Architect (both MCSD and MCSE), a Microsoft Certified Trainer, and self proclaimed Cloud Advocate. He has a passion for technology and sharing what he learns with others to help enable them to learn faster and be more productive.

One Comment

  1. It seems AZ-300 Exam is more into implementation and management and not into Architecting & Designing. Plus it contains tons of Topics. AZ-301 Exam will focus on Designing & Architecting Azure Solutions.

    Reply

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.