Cloud Ops

Az-400 Cloud Ops

design a log aggregation using Azure Monitor manage access control to logs (workspace-centric/resource-centric) integrate crash analytics (App Center Crashes, Crashlytics) Design and implement telemetry design and implement distributed tracing inspect application performance indicators inspect infrastructure performance indicators define and measure key metrics (CPU, memory, disk, network) implement alerts on key metrics (email, SMS, webhooks, Teams/Slack) integrate user analytics (e.g. Application Insights funnels, Visual Studio App Center, TestFlight, Google Analytics) Integrate logging and monitoring solutions configure and integrate container monitoring (Azure Monitor, Prometheus, etc.) configure and integrate with monitoring tools (Azure Monitor Application Insights, Dynatrace, New Relic, Naggios, Zabbix) create feedback loop from platform monitoring tools (e.g. Azure Diagnostics VMextensions, Azure Platform Logs, Event Grid) manage Access control to the monitoring platformDevelop a Site Reliability Engineering (SRE) strategy (5-10%) Develop an actionable alerting strategy identify and recommend metrics on which to base alerts implement alerts using appropriate metrics implement alerts based on appropriate log messages implement alerts based on application health checks analyze combinations of metrics develop communication mechanism to notify users of degraded systems implement alerts for self-healing activities (e.g. scaling, failovers) Design a failure prediction strategy analyze behavior of system with regards to load and failure conditions calculate when a system will fail under various conditions measure baseline metrics for system recommend the appropriate tools for a failure prediction strategyDesign and implement a health check analyze system dependencies to determine which dependency should be included inhealth check calculate healthy response timeouts based on SLO for the service design approach for partial health situations integrate health check with compute environment implement different types of health checks (liveness, startup, shutdown) Develop a security and compliance plan (10-15%) Design an authentication and authorization strategy design an access solution (Azure AD Privileged Identity Management (PIM), Azure ADConditional Access, MFA) organize the team using Azure AD groups implement Service Principals and Managed Identity configure service connectionsDesign a sensitive information management strategy evaluate and configure vault solution (Azure Key Vault, Hashicorp Vault) generate security certificates design a secrets storage and retrieval strategy formulate a plan for deploying secret files as part of a releaseDevelop security and compliance automate dependencies scanning for security (container scanning, OWASP) automate dependencies scanning for compliance (licenses: MIT, GPL) assess and report risks design a source code compliance solution (e.g. GitHub security, pipeline-based scans, Githooks, SonarQube) Design governance enforcement mechanisms implement Azure policies to enforce organizational requirements implement container scanning (e.g. static scanning, malware, crypto mining) design and implement Azure Container Registry Tasks (eg. Azure Policy) design break-the-glass strategy for responding to security incidentsManage source control (10-15%) Develop a modern source control strategy integrate/migrate disparate source control systems (e.g. GitHub, Azure Repos) design authentication strategies design approach for managing large binary files (e.g. Git LFS) design approach for cross repository sharing (e.g. Git sub-modules, packages) implement workflow hoo