AZ-102 Study notes - Part 1

-

These are my AZ-102 study notes in taking the Microsoft Azure Administrator Certification Transition Exam (AZ-102) exam.

Manage Azure subscriptions and resources (5-10%)

Analyze resource utilization and consumption

Use the Cost Management + Billing section to configure budgets and setup alerts to point to an Azure resource group. Credit alerts are generated automatically at 90% and at 100% of your Azure credit balance when using enterprise agreements with monthly commits.

Configure diagnostic settings on resources

From the Azure portal, select Azure Monitor and select diagnostic settings to enable this. Log to a storage account, Event Hub, or Log Analytics.
Use the Set-AzureRMDiagnosticSetting cmdetlet and the -ResourceId switch to enable via Powershell.

Create baseline for resources; create and rest alerts.

Study up on DSC and using Azure Update management as well as update management via automation accounts.

Analyze alerts across subscription; analyze metrics across subscription, Create action groups.

Know how to create alerts using the new log analytics focused Azure monitor (target, criteria, details, and action groups)
Know about smart groups, enabling and disabling rules.
Azure metrics are kept for 93 days.

 Monitor for unused resources; monitor spend; report on spend.

Know the spending limit for credit and what it does - stops everything. (no pay as you go - off by default for trial)
Use tags to group by cost center. 
Cost analysis tool. (Creating budgets, alerts, etc.)
Azure Advisor - Monitors for idle resources, resources that can made reserved instances. Unused express route, etc.
Utilize Log Search query functions.

If you're familiar with Log analytics and Kusto query language this should be easy. If not, I would recommend the free plural sight course Kusto Query Language and messing around with a Log Analytics workspace.
Query from up to 100 workspace resources using the workspace() function. You can use the query name, the qualified name, the workspace ID, or the Azure resource ID.
Ie:
workspace("contosoretail-it").Update | count
Similarly with Application insights you can use the app() function to query across AppInsights apps.
Use union to group these.

View alerts in Log Analytics.

Know how to target a Log Analytics workspace for Azure monitor alerts.
Metric measurement vs number of results.

Comments

Post a Comment

Popular posts from this blog

Azure - Check Invitation Status to guest user

-
Image
Often times you will need to invite a 3rd party to your Azure AD tenant to support your environment. When you add them to a resource, they will automatically be invited as a guest user in your Azure AD tenant, however they won't be able to access this until they accept the invitation email. If you send an invite to a guest user you can see if they have accepted the invitation or not. You also have the option to resend the invitation. From Azure AD you can search for guest users and drill down into an individual one. Here is what the email looks like - the key here is the email comes from " [email protected] " because it can be sent on behalf of this may end up in the junk or spam email folder, so be sure to have them check there.
Read more

Blogs for Azure Information

-
Here are some of the blogs that I follow for information around new features in Azure, OMS, Log Analytics, Azure Monitor, etc. Azure Monitoring Services Health Status https://blogs.msdn.microsoft.com/servicemap-status/ Microsoft Azure Roadmap https://azure.microsoft.com/en-us/roadmap/ System Center Me http://systemcenterme.com/ Quae Nocent Docent (Great weekly OMS, SCOM, and Azure Info) https://nocentdocent.wordpress.com/ Operations Management Suite Blog https://blogs.technet.microsoft.com/msoms/
Read more

Azure Point to Site VPN failure with error code 809

-
I ran into some trouble today troubleshooting a developer's workstation. The issue was when using a Point to Site IKEV2 VPN some clients could not connect - they received an error: The network connection between your computer and the VPN server could not be established because the remote server is not responding. This could be because one of the network devices (e.g, firewalls, NAT, routers, etc) between your computer and the remote server is not configured to allow VPN connections. Please contact your Administrator or your service provider to determine which device may be causing the problem. (Error 809) The strange thing was that some other workstations seemed fine. After bashing our collective heads against the wall, checking checking the P2SChild, doing all sorts of network troubleshooting to the endpoint DNS name -  azuregateway-8fc2c9e3-26cd-432a-ae47-92b7f6422a5d-e1a7e8cec41d.vpn.azure.com , editing registry, checking firewalls, etc, we finally determined the caus
Read more