AZ-1003 – Secure storage for Azure Files and Azure Blob Storage

Modules

Module 1: Create an Azure Storage account

Learn how to set up an Azure Storage account with the appropriate configuration for your business requirements.

Learning objectives
In this module, you will:

• Decide how many storage accounts are required for your project.
• Select the correct configuration options for each storage account.
• Create a storage account using the Azure portal.

Module 2: Configure Azure Blob Storage

Explore how to configure Azure Blob Storage, including storage tiers and object replication.

Learning objectives
In this module, you will:

• Understand the purpose and advantages of Azure Blob Storage.
• Create and configure Azure Blob Storage accounts.
• Manage containers and blobs within Azure Blob Storage.
• Optimise blob storage for performance and scalability.
• Implement lifecycle management policies to automate data movement and deletion.
• Evaluate and choose the most cost-effective pricing plans for Azure Blob Storage.

Module 3: Configure Azure Files

Learn how to configure Azure Files and implement Azure File Sync for centralised file management.

Learning objectives
In this module, you will:

• Differentiate between file share storage and blob data storage.
• Configure Azure file shares and create file share snapshots.
• Identify the features and use cases of Azure File Sync.

Module 4: Configure Azure Storage security

Discover how to apply security controls in Azure Storage, including shared access signatures and encryption.

Learning objectives
In this module, you will:

• Configure shared access signatures (SAS), including the URI and SAS parameters.
• Configure Azure Storage encryption.
• Implement customer-managed keys (CMKs).
• Recommend opportunities to strengthen Azure Storage security.

Module 5: Secure and isolate access to Azure resources with network security groups and service endpoints

Learn how to use network security groups (NSGs) and service endpoints to protect Azure resources from unauthorised network access.

Learning objectives
In this module, you will:

• Identify the capabilities and features of network security groups.
• Identify the capabilities and features of virtual network service endpoints.
• Use network security groups to restrict inbound and outbound network traffic.
• Use virtual network service endpoints to control connectivity to and from Azure services.

Module 6: Guided Project – Azure Files and Azure Blobs

In this guided project, you will practise storing business data securely using both Azure Blob Storage and Azure Files through hands-on exercises.

Learning objectives
In this module, you will:

• Create and configure a storage account.
• Create and configure blob storage.
• Create and configure Azure Files.
• Configure encryption for storage.
• Configure networking for storage.