The AZ-300 Microsoft Azure Architect Technologies certification exam tests and validates your expertise as an Azure Architect around Azure administration, Azure development, and DevOps; among a list of specific expertise categories within each of these.
EXAM IS RETIRED: This exam was retired and replaced with the AZ-303 exam.
AZ-300 Certification Target Audience
The AZ-300 Microsoft Azure Architecture Technologies certification exam is geared towards Azure Solution Architects who advise stakeholders and translate business requirements into secure, scalable, and reliable solutions.
Candidates should have advanced experience and knowledge across various aspects of IT operations, including:
- Networking
- Virtualization
- Identity
- Security
- Business Continuity
- Disaster Recovery
- Data Management
- Budgeting
- Governance
Overall, this exam tests a cross-cutting set of expertise in the areas of Azure Administration, Azure Development, and DevOps. It is recommended to have expert-level skills in at least one of these 3 expertise areas.
AZ-300 Exam Prep Session from Microsoft Ignite 2019
The core skills measured in the Microsoft Azure Architect Technologies AZ-300 exam is a part of the Microsoft Certified Azure Solutions Architect Expert certification. Tiago Costa helped hundreds of Azure professionals to get certified in the past 12 months being a trainer with one of the best pass-rates in the industry. He covers exam-focused topics, and shares strategies and best practices on how you should prepare to have a successful exam. Use this session to interactively engage on your journey to become Azure Solutions Architect Expert certified.
AZ-300 Objective Domains
Here’s a very high level list of the skills and objectives measured on this AZ-300 Microsoft Azure Architect Technologies certification exam. The percentages next to each objective area represents the number of questions on the exam in that objective area.
Deploy and configure infrastructure
- Analyze resource utilization and consumption
- configure diagnostic settings on resources
- create baseline for resources
- create and rest alerts
- analyze alerts across subscription
- analyze metrics across subscription
- create action groups
- monitor for unused resources
- monitor spend
- report on spend
- utilize Log Search query functions
- view alerts in Azure Monitor logs
- Create and configure storage accounts
- configure network access to the storage account
- create and configure storage account
- generate shared access signature
- install and use Azure Storage Explorer
- manage access keys
- monitor activity log by using Azure Monitor logs
- implement Azure storage replication
- Create and configure a Virtual Machine (VM) for Windows and Linux
- configure high availability
- configure monitoring, networking, storage, and virtual machine size
- deploy and configure scale sets
- Automate deployment of Virtual Machines (VMs)
- Modify Azure Resource Manager template
- configure location of new VMs
- configure VHD template
- deploy from template
- save a deployment as an Azure Resource Manager template
- deploy Windows and Linux VMs
- Implement solutions that use virtual machines (VM)
- provision VMs
- create Azure Resource Manager templates
- configure Azure Disk Encryption for VMs
- Create connectivity between virtual networks
- create and configure VNET peering
- create and configure VNET to VNET
- verify virtual network connectivity
- create virtual network gateway
- Implement and manage virtual networking
- configure private and public IP addresses, network routes, network interface, subnets, and virtual network
- Manage Azure Active Directory (AD)
- add custom domains
- configure Azure AD Identity Protection, Azure AD Join, and Enterprise State Roaming
- configure self-service password reset
- implement conditional access policies
- manage multiple directories
- perform an access review
- Implement and manage hybrid identities
- install and configure Azure AD Connect
- configure federation and single sign-on
- manage Azure AD Connect
- manage password sync and writeback
Implement workloads and security
- Migrate servers to Azure
- migrate by using Azure Site Recovery
- migrate using P2V
- configure storage
- create a backup vault
- prepare source and target environments
- backup and restore data
- deploy Azure Site Recovery agent
- prepare virtual network
- Configure serverless computing
- manage a Logic App resource
- manage Azure Function app settings
- manage Event Grid
- manage Service Bus
- Implement application load balancing
- configure application gateway and load balancing rules
- implement front end IP configurations
- manage application load balancing
- Integrate on-premises network with Azure virtual network
- create and configure Azure VPN Gateway
- create and configure site to site VPN
- configure Express Route
- verify on-premises connectivity
- manage on-premises connectivity with Azure
- Manage role-based access control (RBAC)
- create a custom role
- configure access to Azure resources by assigning roles
- configure management access to Azure
- troubleshoot RBAC
- implement RBAC policies
- assign RBAC roles
- Implement Multi-Factor Authentication (MFA)
- enable MFA for an Azure tenant
- configure user accounts for MFA
- configure fraud alerts
- configure bypass options
- configure trusted IPs
- configure verification methods
- manage role-based access control (RBAC)
- implement RBAC policies
- assign RBAC Roles
- create a custom role
- configure access to Azure resources by assigning roles
- configure management access to Azure
Create and deploy apps
- Create web apps by using PaaS
- create an Azure App Service Web App
- create documentation for the API
- create an App Service Web App for containers
- create an App Service background task by using WebJobs
- enable diagnostics logging
- Design and develop apps that run in containers
- configure diagnostic settings on resources
- create a container image by using a Docker file
- create an Azure Kubernetes Service
- publish an image to the Azure Container Registry
- implement an application that runs on an Azure Container Instance
- manage container settings by using code
Implement authentication and secure data
- Implement authentication
- implement authentication by using certificates, forms-based authentication, tokens, or Windows-integrated authentication
- implement multi-factor authentication by using Azure AD
- implement OAuth2 authentication
- implement Managed identities for Azure resources Service Principal authentication
- Implement secure data solutions
- encrypt and decrypt data at rest and in transit
- encrypt data with Always Encrypted
- implement Azure Confidential Compute and SSL/TLS communications
- create, read, update, and delete keys, secrets, and certificates by using the KeyVault API
Develop for the cloud and for Azure storage
- Develop solutions that use Cosmos DB storage
- create, read, update, and delete data by using appropriate APIs
- implement partitioning schemes
- set the appropriate consistency level for operations
- Develop solutions that use a relational database
- provision and configure relational databases
- configure elastic pools for Azure SQL Database
- create, read, update, and delete data tables by using code
- Configure a message-based integration architecture
- configure an app or service to send emails, Event Grid, and the Azure Relay Service
- create and configure Notification Hub, Event Hub, and Service Bus
- configure queries across multiple products
To view the full list of these exam objectives, and to schedule to take the exam, please reference the official AZ-300 exam page.
Azure Solutions Architect Expert Certification
This is one of a total of 2 exams required to pass in order to earn the Microsoft Certified: Azure Solutions Architect Expert certification. The other exam is the AZ-301 Microsoft Azure Architect Design exam. One you pass both individual exams, then you will earn the full Microsoft Certified: Azure Solutions Architect Expert certification.
This Azure Solutions Architect certification is part of a large restructuring of the Microsoft Certifications on a more job-role specific orientation.
Happy Studying!
About the Author
Chris Pietschmann
Chris Pietschmann is a Microsoft MVP, HashiCorp Ambassador, and Microsoft Certified Trainer (MCT) with 20+ years of experience designing and building Cloud & Enterprise systems. He has worked with companies of all sizes from startups to large enterprises. He has a passion for technology and sharing what he learns with others to help enable them to learn faster and be more productive.
Azure Functions: Extend Execution Timeout Past 5 Minutes
Terraform: If/Else Conditional Resource and Module Deployment
Terraform: Use for_each to deploy multiple resources
IPv4 Address CIDR Range Reference and Calculator
It seems AZ-300 Exam is more into implementation and management and not into Architecting & Designing. Plus it contains tons of Topics. AZ-301 Exam will focus on Designing & Architecting Azure Solutions.
Any recommendations for online trainings for AZ-300? I can’t find something on popular training websites (LinuxAcademy, Cousera, Cloudacademy, A Cloud Guru, Udemy,..)
Many organizations in the online training space have difficulty keeping up with all the latest changes in the Microsoft Azure and cloud space. I recommend you check out http://SkillMeUp.com from Opsgility. You will find lots of up-to-date content there to help you. 🙂
Pearson had cancelled my exam due to Microsoft has added labs test into this exam and my existing test center is not qualified to deliver this exam. Do you have any idea about the labs test? Thank you.
I’m not sure what the requirements are for the testing center. You’ll just have to reschedule with a testing center that’s supported.
Typo: “Azure Solution Architects who advice stakeholders and translate business requirements”. Advice should be Advise.
Thanks! It’s fixed.
Does the AZ-300 exam actually cover Azure IoT? In your list above it says it does, however on the official MS page for AZ-300 exam ‘skills covered’ it is not listed.
It looks like they updated the exam objectives and IoT is no longer listed, in addition to other changes. Thanks for pointing this out! I’ve updated the article.
How many hours study is needed on average to pass the exam? And how may practice hours (labs, MC questions)?
The total study time will vary depending on where you’re starting from. I think a typical study time to prepare for the exams is likely somewhere between 20 and 60 hours depending on how much experience you already have.
Thank you for sharing information on Azure certification exams. It has been really useful to a complete Azure novice like me. My plans to learn Azure include going through the AZ-900 study material, taking the AZ-300 followed by AZ-301 exams. From my internet research I understand that these are probably the hardest certifications for Azure. Could you please let me know if there is any prior work experience required in Azure to be able to grasp the concepts covered in these exams? And if not, how many hours of preparation would be tentatively required for a beginner to prepare for each of these exams. Thanks for your help.
The time to study for each certification exam varies per person. It depends on a number of factors. Make sure you review the exam objective areas and study each one so you’re familiar with all areas of the exam. Also, make sure to get lots of hands-on experience with the products and services covered on the exam.