Microsoft AZ-305: Hybrid Connectivity to Azure
Hybrid connectivity is not just a network link between an office and a virtual network. It is the path that lets on-premises systems,…
Read article03 / THE LATESTFresh thinking
From the editorial desk.
New technical explainers, certification perspectives and practical ideas.
Microsoft AZ-305: Highly Available Azure Applications
High availability in Azure is not a single feature that can be enabled after an application is deployed. It is an end-to-end property…
Read articleMicrosoft AZ-305: Azure Landing Zones at Scale
An Azure landing zone is the foundation that lets many workloads use Azure without each team rebuilding identity, networking, governance, security, and operations…
Read articleMicrosoft AZ-305: Cost-Aware Azure Architecture
Cost-aware architecture is not the practice of choosing the cheapest Azure service in every comparison. It is the discipline of designing a workload…
Read articleMicrosoft AZ-305: Azure Governance: Policy, RBAC & Groups
Azure governance works when several controls cooperate without being confused with one another. Management groups organize scope, Azure Policy evaluates resource state, and…
Read articleMicrosoft AZ-305: Azure Disaster Recovery with Paired Regions
Azure disaster recovery becomes more reliable when the secondary region is chosen for a reason rather than because two region names happen to…
Read articleMicrosoft AZ-104: Managed Identity Failures: Tokens, Azure RBAC, and Network Diagnosis
Managed identity problems cross four different boundaries Managed identity replaces stored application credentials with an Azure-managed Microsoft Entra principal. It does not itself…
Read articleMicrosoft AZ-104: Azure Virtual Network Peering Design
Azure Virtual Network peering connects two virtual networks so resources can communicate over the Microsoft backbone by using private IP addresses. The connection…
Read articleMicrosoft AZ-104: Azure Storage Redundancy: LRS, ZRS, GRS, and GZRS
Azure Storage redundancy is a choice about which physical failures your data copies are designed to survive. LRS protects against local hardware failures…
Read articleMicrosoft AZ-104: Azure Storage Access with SAS and Entra ID
Azure Storage gives administrators several ways to authorize data access, and the most important design choice is whether the caller should authenticate as…
Read articleMicrosoft AZ-104: Azure Resource Groups, Locks, and Management Scope
Azure administration becomes easier when resource groups, management groups, subscriptions, and locks are treated as management boundaries instead of as folders. A resource…
Read articleMicrosoft AZ-104: Azure RBAC Without Role Assignment Confusion
Azure role-based access control becomes much easier when every permission decision is reduced to three questions: who is the principal, what role definition…
Read articleMicrosoft AZ-104: Azure Private Endpoints and Private DNS
Azure Private Endpoint changes the network path to a platform service by placing a private IP address from your virtual network on the…
Read articleMicrosoft AZ-104: Azure Monitor, Log Analytics, and Alerting
Azure monitoring becomes much easier once metrics, logs, and alerts are treated as parts of one operating system rather than as three unrelated…
Read articleMicrosoft AZ-104: Azure Load Balancer vs Application Gateway
Azure Load Balancer and Azure Application Gateway both distribute traffic, but they solve different networking problems. In Microsoft AZ-104 network design, choosing between…
Read article