Study/AZ-104-MicrosoftAzureAdministrator
1
0
Fork 0
mirror of https://github.com/MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator.git synced 2026-02-12 11:57:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #835 from jmenne/lab6corrections

Browse Source 
Lab6 Corrections
This commit is contained in:
staleycyn 2024-02-12 08:13:26 -08:00 committed by GitHub
commit 439f13615c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 82 additions and 164 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
New Instructions/AllFiles/Lab06/az104-06-vms-loop-parameters.json → New Instructions/AllFiles/Lab06/az104-06-vms-parameters.json
View File

138
New Instructions/AllFiles/Lab06/az104-06-vms-loop-template.json → New Instructions/AllFiles/Lab06/az104-06-vms-template.json
View File

@ -45,7 +45,7 @@
"type": "Microsoft.Network/networkSecurityGroups",
"apiVersion": "2023-06-01",
"name": "[parameters('networkSecurityGroups_az104_06_nsg1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"properties": {
"securityRules": [
{
@ -89,11 +89,11 @@
]
}
},
{
{
"type": "Microsoft.Network/virtualNetworks",
"apiVersion": "2023-06-01",
"name": "[parameters('virtualNetworks_az104_06_vnet1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"properties": {
"addressSpace": {
"addressPrefixes": [
@ -103,7 +103,6 @@
"subnets": [
{
"name": "subnet0",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"properties": {
"addressPrefix": "10.60.0.0/24",
"delegations": [],
@ -114,7 +113,6 @@
},
{
"name": "subnet1",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"properties": {
"addressPrefix": "10.60.1.0/24",
"delegations": [],
@ -123,9 +121,8 @@
},
"type": "Microsoft.Network/virtualNetworks/subnets"
},
{
{
"name": "subnet2",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"properties": {
"addressPrefix": "10.60.2.0/24",
"delegations": [],
@ -139,11 +136,11 @@
"enableDdosProtection": false
}
},
{
{
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm0_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic0_name'))]"
],
@ -160,7 +157,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1_5e57d096d8d54757b417a168417a69f8')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach",
@ -171,7 +168,7 @@
"osProfile": {
"computerName": "[parameters('virtualMachines_az104_06_vm0_name')]",
"adminUsername": "localadmin",
"adminPassword": "[parameters('adminPassword')]",
"adminPassword": "[parameters('adminPassword')]",
"windowsConfiguration": {
"provisionVMAgent": true,
"enableAutomaticUpdates": true,
@ -200,7 +197,7 @@
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic1_name'))]"
],
@ -217,7 +214,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1_0c60cd0e9f8d43aaaebfa572d1de0319')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach",
@ -228,7 +225,7 @@
"osProfile": {
"computerName": "[parameters('virtualMachines_az104_06_vm1_name')]",
"adminUsername": "localadmin",
"adminPassword": "[parameters('adminPassword')]",
"adminPassword": "[parameters('adminPassword')]",
"windowsConfiguration": {
"provisionVMAgent": true,
"enableAutomaticUpdates": true,
@ -257,7 +254,7 @@
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm2_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic2_name'))]"
],
@ -274,7 +271,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1_58417ddb19d7418886b4b5c42507a7f0')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach"
@ -284,7 +281,7 @@
"osProfile": {
"computerName": "[parameters('virtualMachines_az104_06_vm2_name')]",
"adminUsername": "localadmin",
"adminPassword": "[parameters('adminPassword')]",
"adminPassword": "[parameters('adminPassword')]",
"windowsConfiguration": {
"provisionVMAgent": true,
"enableAutomaticUpdates": true,
@ -313,7 +310,7 @@
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm0_name'))]"
],
@ -322,17 +319,17 @@
"publisher": "Microsoft.Compute",
"type": "CustomScriptExtension",
"typeHandlerVersion": "1.7",
"settings": {
"settings": {
"commandToExecute": "powershell.exe Install-WindowsFeature -name Web-Server -IncludeManagementTools && powershell.exe remove-item 'C:\\inetpub\\wwwroot\\iisstart.htm' && powershell.exe Add-Content -Path 'C:\\inetpub\\wwwroot\\iisstart.htm' -Value $('Hello World from ' + $env:computername)"
},
},
"protectedSettings": {}
}
},
},
{
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm1_name'))]"
],
@ -343,15 +340,15 @@
"typeHandlerVersion": "1.7",
"settings": {
"commandToExecute": "powershell.exe Install-WindowsFeature -name Web-Server -IncludeManagementTools && powershell.exe remove-item 'C:\\inetpub\\wwwroot\\iisstart.htm' && powershell.exe Add-Content -Path 'C:\\inetpub\\wwwroot\\iisstart.htm' -Value $('Hello World from ' + $env:computername) && powershell.exe New-Item -Path 'c:\\inetpub\\wwwroot' -Name 'image' -Itemtype 'Directory' && powershell.exe New-Item -Path 'c:\\inetpub\\wwwroot\\image\\' -Name 'iisstart.htm' -ItemType 'file' && powershell.exe Add-Content -Path 'C:\\inetpub\\wwwroot\\image\\iisstart.htm' -Value $('Image from: ' + $env:computername)"
},
},
"protectedSettings": {}
}
},
},
{
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm2_name'))]"
],
@ -366,85 +363,13 @@
"protectedSettings": {}
}
},
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-http')]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"properties": {
"protocol": "Tcp",
"sourcePortRange": "*",
"destinationPortRange": "80",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1100,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
},
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-rdp')]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"properties": {
"protocol": "Tcp",
"sourcePortRange": "*",
"destinationPortRange": "3389",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1000,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
},
{
"type": "Microsoft.Network/virtualNetworks/subnets",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet0')]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
],
"properties": {
"addressPrefix": "10.60.0.0/24",
"delegations": [],
"privateEndpointNetworkPolicies": "Disabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
},
{
"type": "Microsoft.Network/virtualNetworks/subnets",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet1')]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
],
"properties": {
"addressPrefix": "10.60.1.0/24",
"delegations": [],
"privateEndpointNetworkPolicies": "Disabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic0_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -484,9 +409,9 @@
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -526,9 +451,9 @@
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic2_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -544,7 +469,7 @@
"privateIPAddress": "10.62.0.4",
"privateIPAllocationMethod": "Dynamic",
"subnet": {
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]"
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet2')]"
},
"primary": true,
"privateIPAddressVersion": "IPv4"
@ -556,12 +481,13 @@
},
"enableIPForwarding": false,
"disableTcpStateTracking": false,
"networkSecurityGroup": {
"networkSecurityGroup": {
"id": "[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
},
"nicType": "Standard",
"auxiliaryMode": "None",
"auxiliarySku": "None"
}}
}
}
]
}

34
New Instructions/Lab/LAB_06-Implement_Network_Traffic_Management.md
View File

@ -32,7 +32,6 @@ There are interactive lab simulations that you might find useful for this topic.
+ Task 2: Configure an Azure Load Balancer.
+ Task 3: Configure an Azure Application Gateway.
## Task 1: Use a template to provision an infrastructure
In this task, you will use a template to deploy one virtual network, one network security group, and two virtual machines.
@ -47,11 +46,11 @@ In this task, you will use a template to deploy one virtual network, one network
1. On the edit template page, select **Load file**.
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-loop-template.json** file and select **Open**.
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-template.json** file and select **Open**.
1. Select **Save**.
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-loop-parameters.json** file.
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-parameters.json** file.
1. Select **Save**.
@ -63,7 +62,7 @@ In this task, you will use a template to deploy one virtual network, one network
| Resource group | `az104-rg6` (If necessary, select **Create new**) |
| Password | Provide a secure password |
>**Note**: If you receive an error that the VM size is unavailable, select a SKU that is available in your subscription and has at least 2 cores.
>**Note**: If you receive an error that the VM size is unavailable, select a SKU that is available in your subscription and has at least 2 cores.
1. Select **Review + Create** and then select **Create**.
@ -75,15 +74,12 @@ In this task, you will use a template to deploy one virtual network, one network
In this task, you implement an Azure Load Balancer in front of the two Azure virtual machines in the virtual network. Load Balancers in Azure provide layer 4 connectivity across resources, such as virtual machines. Load Balancer configuration includes a front-end IP address to accept connections, a backend pool, and rules that define how connections should traverse the load balancer.
## Architecture diagram - Load Balancer
>**Note**: Notice the Load Balancer is distributing across two virtual machines in the same virtual network.
![Diagram of the lab tasks.](../media/az104-lab06-lb-architecture.png)
1. In the Azure portal, search for and select `Load balancers` and, on the **Load balancers** blade, click **+ Create**.
1. Create a load balancer with the following settings (leave others with their default values) then click **Next: Frontend IP configuration**:
@ -109,7 +105,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
| Gateway Load Balancer | None |
| Public IP address | Select **Create new** (use the instructions in the next step) |
1. On the **Add a public IP address** popup, use the following settings before clicking **OK** and then **Add**. When completed click **Next: Backend pools**.
| Setting | Value |
@ -120,7 +115,7 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
| Assignment | Static |
| Routing Preference | **Microsoft network** |
>**Note:** The Standard SKU provides a static IP address. Static IP addresses are assigned with the resource is created and released when the resource is deleted.
>**Note:** The Standard SKU provides a static IP address. Static IP addresses are assigned with the resource is created and released when the resource is deleted.
1. On the **Backend pools** tab, click **Add a backend pool** with the following settings (leave others with their default values). Click **+ Add** (twice) and then click **Next: Inbound rules**.
@ -174,7 +169,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
## Task 3: Configure an Azure Application Gateway
In this task, you implement an Azure Application Gateway in front of two Azure virtual machines. An Application Gateway provides layer 7 load balancing, Web Application Firewall (WAF), SSL termination, and end-to-end encryption to the resources defined in the backend pool. The Application Gateway routes images to one virtual machine and videos to the other virtual machine.
@ -214,8 +208,8 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| Region | The **same** Azure region that you used in Task 1 |
| Tier | **Standard V2** |
| Enable autoscaling | **No** |
| Minimum instance count | `2` |
| Availability zone | **None** |
| Minimum instance count | `2` |
| Availability zone | **None** |
| HTTP2 | **Disabled** |
| Virtual network | **az104-06-vnet1** |
| Subnet | **subnet-appgw (10.60.3.224/27)** |
@ -228,10 +222,10 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| --- | --- |
| Frontend IP address type | **Public** |
| Public IP address| **Add new** |
| Name | `az104-gwpip` |
| Availability zone | **None** |
| Name | `az104-gwpip` |
| Availability zone | **None** |
>**Note:** The Application Gateway can have both a public and private IP address.
>**Note:** The Application Gateway can have both a public and private IP address.
>
1. Click **Next: Backends >** and then **Add a backend pool**. Specify the following settings (leave others with their default values). When completed click **Add**.
@ -240,7 +234,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| Name | `az104-appgwbe` |
| Add backend pool without targets | **No** |
| Virtual machine | **az104-rg6-nic1 (10.60.1.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
1. Click **Add a backend pool**. This is the backend pool for **images**. Specify the following settings (leave others with their default values). When completed click **Add**.
@ -256,7 +250,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| --- | --- |
| Name | `az104-videobe` |
| Add backend pool without targets | **No** |
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
1. Select **Next: Configuration** and then **Add routing rules**. Complete the information.
@ -281,7 +275,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
1. In the **Path based routing** section, select **Add multiple targets to create a path-based rule**. You will create two rules. Click **Add** after the first rule and then add the second rule.
**Rule - routing to the images backend**
**Rule - routing to the images backend**
| Setting | Value |
| --- | --- |
@ -290,7 +284,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| Backend settings | **az104-http** |
| Backend target | `az104-imagebe` |
**Rule - routing to the videos backend**
**Rule - routing to the videos backend**
| Setting | Value |
| --- | --- |
@ -323,8 +317,6 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
## Key takeaways
Congratulations on completing the lab. Here are the main takeaways for this lab.