Azure 305

This deck covers the Azure governance design principles aligned with Microsoft Learn modules, including: • Governance fundamentals • Management groups • Subscriptions • Resource groups • Resource tags • Azure Policy • Role-Based Access Control (RBAC) • Landing zones

Flashcard Pack: Azure Authentication & Authorization Solutions • Identity & Access Management fundamentals • Microsoft Entra ID (Azure AD) design considerations • B2B external collaboration design • B2C customer identity design • Conditional Access signals, policies & enforcement • Identity Protection risks, responses & automation • Access Reviews for governance & compliance • Service principals – security & lifecycle • Managed identities vs secrets • Azure Key Va

• Recovery objectives: RTO (downtime) & RPO (data loss) • Balancing business needs, cost, and recovery goals • HA vs DR – keeping databases running vs restoring them • Redundancy, clustering, and replication basics • Active-active vs active-passive for SQL workloads • Synchronous vs asynchronous database replication • Geo-redundancy & paired regions for resilience • Azure Availability Sets & Availability Zones for SQL VMs • Azure Backup & Site Recovery for databases

• Recovery planning aligned to business continuity • Workload dependency mapping in recovery design • Centralized management with Recovery Services vaults • Azure Backup features and retention policies • Incremental backup efficiency and monitoring • Blob storage protection: versioning, snapshots, soft delete • Blob immutability, object replication, and redundancy design • Azure Files protection: snapshots, soft delete, and large share limits • VM backup: application-c

• Designing non-relational data storage architectures • Structured vs semi-structured vs unstructured data in Azure • Choosing the right Azure storage service for data access patterns • Azure Storage Account types, tiers, and scalability limits • Managing performance and cost with access tiers and premium storage • Understanding redundancy: LRS, ZRS, GRS, and RA-GRS • Blob storage structure, tiers, and lifecycle management • Versioning, immutability, and replication in Bl