1Design Identity, Governance, and Monitoring Solutions

• 1.1Designing Identity and Access

  Understand designing authentication/authorization on Azure—Microsoft Entra ID, RBAC, Conditional Access, managed identities, PIM, and B2B/B2C. Design a secure identity foundation with least privilege.

• 1.2Designing Governance

  Understand organization-scale governance—management groups/subscriptions, Azure Policy, landing zones, tags, cost management, and resource locks. Design consistent guardrails and cost control.

• 1.3Designing Monitoring

  Understand designing observability—Azure Monitor, Log Analytics (KQL), Application Insights, alerts/action groups, and Network Watcher. Make operations visible with metrics, logs, and traces.