1. Implement Storage Implement Blobs and Azure Files Manage Access Configure Diagnostics, Monitoring & Analytics Implement SQL Databases Implement Recovery Services See Websites, Cloud Service and Virtual Machines ComparisonWebsites, Cloud Service and Virtual Machines Comparison

3. Azure Files - SMB 2.1 Protocol

4. Share Access Signatures, Pt 1Share Access Signatures, Pt 1 | Stored Access PoliciesStored Access Policies

5. See Monitor Storage AccountMonitor Storage Account

6. Service Tier Common App PatternPerf ObjectivesMax Size BasicSmall databases with a single operation at a given point in time Reliability per hour2 GB StandardWorkgroup and cloud applications with multiple concurrent transactions Reliability per minute250 GB PremiumMission-critical, high transactional volume with many concurrent users Reliability per second500 GB

7. Read More

8. See Configure Azure Back Up to back up Windows ServerConfigure Azure Back Up to back up Windows Server Also Azure Backup OverviewAzure Backup Overview

9. See Install Backup Agent and upload vault credentialInstall Backup Agent and upload vault credential Also Administer Azure Backup with Windows PowerShellAdminister Azure Backup with Windows PowerShell

11. Implement Azure Active Directory Integrate Azure AD with other dirs Configure the Application Panel Integrate an app with Azure AD

12. User attributes are synchronized including the password hash, Authentication can be completed against either Azure or Windows Server Active Directory User attributes are synchronized, Authentication is passed back through federation and completed against Windows Server Active Directory Synchronization Federation AD FS provides conditional access to resources, Work Place Join for device registration and integrated Multi-Factor Authentication *Write back of attributes to support cloud first and co-existence

18. Query an Azure AD directory using the Graph API

20. Implement Virtual Networks Configure a Virtual Network Modify a Network Configuration Design and implement a multi-site or hybrid network

21. Implement Virtual Networks Service consumers Internet On premises Datacenter Azure Virtual Network Front-End Network Access Load-balanced and direct VIPs ACLs & DDoS protection Traffic Manager & Azure DNS Virtual Networks Flexible, multi-tier topology Network segmentation Internal load balancing Hybrid Connectivity Secure Internet cross premises VPN connectivity ExpressRoute – direct connectivity

22. Traffic Manager: DNS-based Load Balancing www.yourapp.com Performance - Direct to “closest” service based on network latency Round-robin - Distribute equally across all services Failover - Direct to “backup” service if primary fails —also included in other policies

23. Nested Profile for Traffic Manager MyApp.TrafficManager.net EUNorth. TrafficManager.net EUNorth. CloudApp.net EUNorth-new. CloudApp.net

24. Internet IP Addresses & Load Balancing DIP1DIP2 VM1 VM2 Cloud service Reserved VIP LB Internet

25. Azure Virtual Network VPN GW Frontend10.1/16Mid-tier10.2/16Backend10.3/16 Internet On Premises 10.0/16 S2S VPNs & ExpressRoute Direct Internet Connectivity

26. Network Security Groups Virtual Network Backend10.3/16Mid-tier10.2/16Frontend10.1/16 VPN GW Internet On Premises 10.0/16 S2S VPNs Internet See About NSGsAbout NSGs

27. Network Security Groups See About NSGsAbout NSGs

29. Read More

30. Bring Your Appliances to the Cloud

31. Secure point-to-site connectivity point-to-site Developers Developers POC Efforts POC Efforts Small scale deployments Small scale deployments Connect from anywhere Connect from anywhere Secure site-to-site VPN connectivity SMB, Enterprises SMB, Enterprises Connect to Azure compute Connect to Azure compute ExpressRoute private connectivity SMB & Enterprises SMB & Enterprises Mission critical workloads Mission critical workloads Backup/DR, media, HPC Backup/DR, media, HPC Connect to all Azure services Connect to all Azure services Virtual Network Express Route Traffic Manager

32. Multi-site & VNet-to-VNet connectivity Connect to multiple virtual networks and on-premises locations Multi-site & VNet-to- VNet Contoso NorthAm HQ (10.0.0.0/16) Contoso East Asia (10.3.0.0/16)

33. “Force” or redirect customer Internet-bound traffic to an on- premises site Auditing & inspecting outbound traffic from Azure Needed by many scenarios for critical security and IT policy requirements Forced Tunneling Virtual Network Backend10.3/16 Mid-tier10.2/16 Frontend10.1/16 VPN GW Internet On Premises S2S VPNs Forced Tunneled via S2S VPN Internet

36. © 2015 Microsoft Corporation. All rights reserved.