Azure Infrastructure Implementation and Monitoring: 50-55%

• Automation of Configuration and Deployment of Resources – This subsection requires competence in managing template libraries, creating and implementing automation run-books, and deploying from templates. The examinees also need the expertise in configuring virtual disk templates, measuring the location of the latest resources, and modifying the Azure Resource Manager template;
• Storage Accounts Implementation – The potential candidates should have competence in managing access keys as well as implementing Azure storage replication and Azure storage account failover. The topic also covers Shared Access Signatures, access policies, and Azure Active Directory authentication for storage. You must also demonstrate the knowledge of how to configure blob storage, Azure Files, and network access for the storage account;
• Azure Active Directory Implementation – The applicants should demonstrate the skills in managing and implementing guest accounts, self-service password reset, multiple directories, and Conditional Access. They also need competence in adding custom domains and configuring Azure Active Directory Identity Protection. Additionally, they need the skills in configuring fraud alerts, bypass options, user accounts for MFA, verification methods, and Trusted IPs;
• Cloud Infrastructure Monitoring Implementation – This domain requires that you have the skills in monitoring security, cost, performance, and availability & health. It also covers your expertise in configuring advanced logging and logging for workloads. You should also know how to start automated responses with the use of Action Groups;
• Hybrid Identities Implementation and Management – This area requires the knowledge of using Azure Active Directory Connect Health as well as installing and configuring Azure AD Connect and single sign-on. It also covers the skills in identity synchronization alternatives and configuring and managing password writeback and password sync.
• Implementation of Virtual Machines for Linux and Windows – It is important to know how to configure Azure Disk Encryption, High Availability, and storage for Virtual Machines. You also need the skills in configuring and deploying scale sets and choosing virtual machine sizes;

Fundamental Exam Domains

To make sure that every skill is checked, the vendor has divided the test into multiple domains, four in its case. All these domains throw light on key concepts of Azure and include the following:

• Implement and Manage Data Platforms (10-15%)

  The last domain is all about the management of data platforms. This section covers topics like NoSQL databases, CosmosDB APIs, CosmosDB, and ways to set-up storage account tables. Finally, this module includes questions checking the applicants’ familiarity with the configuration of Azure SQL database settings and publishing an Azure SQL database along with the implementation of its managed instances.

• Implement and monitor an Azure Infrastructure (50-55%)

  This is the widest section out of all. It tries to educate the test-taker about how to implement the cloud infrastructure monitoring concepts, handle the storage account, and perform the implementation of VMs for Linux and Windows. Also, it assesses the knowledge of the key concepts regarding virtual networking, the automation of the deployment process, Azure Active Directory implementation, and the management of hybrid identities along with virtual networks.

  As far as the technologies covered, there are Azure AD Identity Protection, Azure AD Connect, Azure AD Connect Health, Trusted IP, self-service password reset, VNet to VNet connections, VNet peering, High Availability, Azure Disk Encryption, Azure Dedicated Hosts, Azure AD authentication, Shared Access Signatures, Azure Resource Manager, and virtual disk template management.

• Implement Management and Security Solutions (25-30%)

  The second Microsoft AZ-303 exam domain requires applicants to learn about workload Azure management, load balancing as well as network security, the management of Azure governance solutions, and application security management. This section is focused on checking one’s understanding of what is included in Azure Backup for VMs, Azure Update Management, Azure Firewall Manager, Azure Traffic Manager, Bastion, Azure Front Door Service, creating and assigning custom RBAC role, proper implementation of Azure Policy and Azure Blueprint, and KeyVault. Besides, the examinees have to be aware of what all it takes to implement the application gateway.

• Implement Solutions for Apps (10-15%)

  This module of the outline includes the subtopics that are dedicated to concepts like creating and configuring Azure App service, App Service plan, and building the App Service Web App for Containers. Also, the candidates need to learn how to handle the implementation of Logic App as well as Azure functions, how to perform the Azure Kubernetes Service setup, and how to publish a solution on Azure Container Instance. In addition, the candidates will be assessed on their ability to use Azure Container Registry for publishing as well as automating image deployment.

Reference: https://docs.microsoft.com/en-us/learn/certifications/exams/az-303

For more info read reference:

Microsoft learning site AZ-303 Skills measured