Category: Certification

Microsoft AZ-700: Exercise – Configure Domain Name Servers Settings in Azure

Reading Time: 2 minutes

Notes from MS Learn AZ-700 Module 1: Introduction to Azure Virtual Networks – Unit 6: Exercise – Configure Domain Name Servers Settings in Azure

Create Private DNS zone and link VNets for registration and resolution. Test with two created VMs

Tasks (taken from MS Learn: Items without “Task” in front of them are personal additions)

  • Task 1: Create a private DNS Zone.
    • Search Private DNS Zones
    • Create
    • Select Resource Group and Create Name
    • Review & Create – Create
    • Go to resource to verify
  • Task 2: Link the subnet for auto registration.
    • Under Private DNS Zone resource created select “Virtual network links”
    • Click Add
    • Add link name
    • Select VNet
    • Check “Enable auto registration” box
    • Okay
    • Repeat for additional VNets
  • Task 3: Test the environment.
    • Use Azure PowerShell to deploy the template to create VMs.
      • Open Powershell (Cloud Shell button next to search bar in Azure Portal)
      • Upload template files (Upload/Download files button in PowerShell menu bar)
      • Verify Subscription
        • az account show –output table
      • Set subscription in PowerShell
        • az account set –subscription “Subscription Name”
      • Deploy ARM template to create VMs
        • $RGName = “ResourceGroupName”
        • New-AzResourceGroupDeployment – ResourceGroupName $RGName – TemplateFile templatename.json – TemplateParameterFile templatefilename.parameters.json
      • Return to Azure Portal to verify VM’s created
        • Search “Virtual Machines” in Portal
        • Select Virtual machines
  • Task 4: Verify records are present in the DNS zone and VMs function properly.
    • Search for Private DNS Zones in Azure Portal search bar
    • Select Private DNS Zones
    • Select Private DNS Zone created earlier
    • Verify A records exist for newly created VMs
    • Search Virtual Machines in Azure Portal search bar
    • Select Virtual machines
    • Select VM
      • In VM bar select Connect > RDP
      • Download RDP File
      • In right panel select Open File
      • Select Connect
      • Enter VM Username and Password and select OK
      • Open command prompt once connected to VM RDP session
      • Verification
        • ipconfig /all
        • Ping another VM by name to verify name resolution
        • nslookup othervmname.domain.com
Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-700-exercise-configure-domain-name-servers-settings-in-azure/

Microsoft AZ-700: Design Name Resolution for your Virtual Network

Reading Time: 3 minutes

Notes from MS Learn AZ-700 Module 1: Introduction to Azure Virtual Networks – Unit 5: Design Name Resolution for your Virtual Network

DNS Services accessible from your own internal networks:

  • Public DNS resolve names and IP’s for resources and services accessible over the internet E.g. Web Servers.
    • Azure DNS is a hosting service for DNS domain that provides name resolution using Azure infrastructure.
    • Host on Azure global network of DNS servers.
    • Utilizes Anycast Networking where each query is sent to closest DNS Server
  • Create address records manually in relevant zones. Examples:
    • Host record – A/AAAA (IPv4/IPv6)
    • Alias record – CNAME
  • Azure DNS provides resolution in a VNet without need for custom DNS solution
  • DNS zone hosts DNS records for domain. Need to create a DNS zone for domain. Records for that domain then created inside the zone
  • Considerations:
    • Zone name must be unique within the resource group and must not already exist
    • Same zone name can be reused in different resource group or subscription
    • When multiple zones share same name, each is assigned different name server address
    • Root/Parent domain is registered at registrar and point to Azure NS
    • Child domains registered in AzureDNS directly
  • Delegate DNS Domains:
    • To delegate domain to Azure DNS must know name server name for your zone
    • Each DNS zone created is allocated an Azure DNS name server from pool
    • Once Name Server assigned, Azure DNS creates authoritative NS records in zone
    • Once DNS zone created, and have name servers, update the parent domain
    • Each registrar has own DNS management tools to change name server records – edit NS records and replaces with Azure DNS created ones
    • Always use all four name servers when delegating
  • Child Domains E.g. partners.contoso.com (taken from MS Learn):
    • Same process as typical delegations
    • Can be in same or different resource group as parent domain
    • Record set is collection of records in a zone that have same name and type
    • Record set can’t contain two identical records.
    • Empty record sets can be created but don’t appear on Azure DNS name servers
    • CNAME Record sets can only have one record
    • A records require TTL and IP address
  • Private DNS services resolve names and IP address for resources and services
    • When resource deployed in VNet and need to resolve to internal IP they use:
      • Azure DNS Private Zones
      • Azure-provided name resolution
      • Your own DNS server
  • Can use recursive where a DC in Azure can respond to DNS for its domain and forward other queries to Azure
    • VMs can see both private DC and Azure forwarder
    • Access to recursive resolvers in Azure via 168.63.129.16
  • Forwarding also enables DNS resolution between VNets and allows on prem machines to resolved Azure host names
    • DNS server VM must reside in the same VNet and configured to forward host name queries to Azure
    • DNS suffix different in each VNet use conditional forwarding rules to send DNS query to correct VNet for resolution.
  • Azure provided DNS
    • Azure provides free default internal DNS
    • Only basic authoritative DNS capabilities
    • If used, DNS zone names and records automatically managed by Azure. No control over zone names or life cycle of records
    • Internal DNS namespace: .internal.cloudapp.net
    • VM created in VNet registered in internal DNS zone get name similar to myVM.internal.cloudapp.net (taken from MS Learn)
    • Is Azure Resource name registered not guest OS name on VM
    • Limitations of Internal DNS
      • No resolution across VNets
      • Resource names no guest OS names registered
      • No manual records
  • Azure Private DNS Zones
    • Available only to internal resources
    • Global in scope = access from any region, subscription, VNet, tenant
    • If permission to read zone, can use for DNS resolution
    • Highly resilient, replicated to regions all throught world
    • Not available to internet resources
  • Custom Private DNS Zones can:
    • Configure specific DNS name for zone
    • Create records manually
    • Resolve names and IPs across zones
    • Resolve names and IPs across VNets
    • Can also use autoregistration which creates record based on Azure resource name
  • Link VNets to Private DNS Zone
    • At VNet level default DNS is part of DHCP assignments by Azure specifying 168.63.129.16 for Azure DNS
    • Override at VM NIC
    • Linking VNets options:
      • Registration – Each can link 1 private DNS zone, up to 100 VNets. Linkable to same zone
      • Resolution – Other private DNS zones for different namespaces
        • Link VNet to each for name resolution
        • VNet can link up to 1000 private Zones for resolution
  • Integration to on-prem DNS with VNets
    • External DNS (On-prem) can run any DNS Server e.g. BIND, AD DNS
    • Often use Azure private DNS zone for auto registration and custom config to forward queries to external zones to external DNS Server
    • Forwarding:
      • Forwarding specifies another DNS server (SOA for zone) to resolve query initial server can’t
      • Conditional forwarding specifies DNS server for a named zone so all queries for that zone sent to specific DNS Server
Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-700-design-name-resolution-for-your-virtual-network/

Microsoft AZ-700: Exercise – Design and Implement a Virtual Network in Azure

Reading Time: < 1 minute

Notes from MS Learn AZ-700 Module 1: Introduction to Azure Virtual Networks – Unit 4: Exercise – Design and Implement a Virtual Network in Azure

Create VNets and Subnets in Azure Portal:

  • Create Resource Group
  • Create First VNet Name
    • Add Addresses
      • Add Subnets under VNet
        • Select – Review and Create
        • Select Create if validation succeeds
  • Repeat for each VNet required
  • Verify Resources Created
    • All Resources under menu
      • Select VNet
        • Select Subnets Under Settings
          • Verify Subnets and address ranges
Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-700-exercise-design-and-implement-a-virtual-network-in-azure/

Microsoft AZ-700: Configure Public IP Services

Reading Time: 2 minutes

Notes from MS Learn AZ-700 Module 1: Introduction to Azure Virtual Networks – Unit 3: Configure Public IP Services

To allow public networks such as the internet to communicate with Azure resources you must use a public IP in use along with the private Azure IP.

A public IP in Azure is dedicated to a specific resource. Resources without public IP’s can communicate outbound through NAT with a non-dedicated IP

  • Azure Resource Manager is where a Public IP has it’s own properties. Example resources that can be assigned a Public IP:
    • VM Interfaces
    • VM Scale Sets
    • Public Load Balancers
    • VPN Gateways
    • NAT Gateways
    • App Gateways
    • Azure FW
    • Bastion Hosts
    • Route Servers
  • Public IP’s can be either IPv4 or IPv6 of different types:
    • Dynamic Public IP
      • Assigned automatically for example when VM created or started
      • Released automatically for example when VM stopped or deleted
      • Default allocation method within region
    • Static Public IP
      • Assigned and doesn’t change
      • Set allocation method to static
      • Released only when resource deleted or Allocation method changed to dynamic

SKU Table: Taken from MS Learn

Public IP addressStandardBasic
Allocation methodStaticFor IPv4: Dynamic or Static; For IPv6: Dynamic.
Idle TimeoutHave an adjustable inbound originated flow idle timeout of 4-30 minutes, with a default of 4 minutes, and fixed outbound originated flow idle timeout of 4 minutes.Have an adjustable inbound originated flow idle timeout of 4-30 minutes, with a default of 4 minutes, and fixed outbound originated flow idle timeout of 4 minutes.
SecuritySecure by default model and be closed to inbound traffic when used as a frontend. Allow traffic with network security group (NSG) is required (for example, on the NIC of a virtual machine with a Standard SKU Public IP attached).Open by default. Network security groups are recommended but optional for restricting inbound or outbound traffic
Availability zonesSupported. Standard IPs can be nonzonal, zonal, or zone-redundant. Zone redundant IPs can only be created in regions where there are three availability zones.Not supported.
Routing preferenceSupported to enable more granular control of how traffic is routed between Azure and the Internet.Not supported.
Global tierSupported via cross-region load balancers.Not supported.

Create a Public IP Address Prefix:

  • Public IP Prefixes are assigned from a pool in an Azure Region
  • Specify name and prefix size
  • IPv4 or IPv6
  • In Availability Zones: create as zone-redundant or associate with specific availability zone
  • After prefix is created you can create public IP addresses

Custom IP Address Prefix (BYOIP)

  • Used the same was as Azure owned public IP address prefixes
  • Can be associated with Azure resources, interact with internal/private Ips and VNets, as well as reach external destinations outbound from Azure WAN
Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-700-configure-public-ip-services/

Microsoft AZ-700: Explore Azure Virtual Networks

Reading Time: 2 minutes

Notes from MS Learn AZ-700 Module 1: Introduction to Azure Virtual Networks – Unit 2: Explore Azure Virtual Networks

Overview:

Azure Virtual Networks = VNets

Mimic on-premises networks with Azure infrastructure benefits such as scale, availability, and isolation

VNets have their own CIDR and can be linked to other Vnets and on-prem networks as long as they don’t overlap.

Vnets offer control of DNS server settings and segmentation in to subnets

Capabilities:

  • Communication with internet by default outbound
  • Inbound requires assigning a public IP or public Load Balancer which can also be used for outbound connections
  • Communication between Azure resources
    • VNets
    • VNet service endpoints
    • VNet peering
  • Can connect not just to VM’s but also Azure resources such as:
    • App Service. Environment
    • Azure Kubernetes Service
    • Azure Virtual Machine Scale Sets
  • Service Endpoints can connect to Azure resource types such as:
    • Azure SQL database
    • Azure storage accounts
  • Communication between on-prem resources
    • Extend using Point-to-site VPN
    • Azure ExpressRoute
  • Filter network traffic
    • Network security groups
    • Network virtual appliances
  • Routing network traffic
    • Azure routes between subnets, connected virtual networks, on-prem networks, and internet by default.
    • Create route tables or BGP routes to override the default Azure created routes

VNET Design Conderations:

  • Create multiple virtual networks per region per subscription. Multiple subnets within each VNet
  • Virtual Networks:
    • Use RFC 1918 rages
      • 10.0.0.0-10.255.255.255 (10/8)
      • 172.16.0.0-172.31.255.255 (172.16/12)
      • 192.168.0.0-192.168.255.255 (192.168/16)
    • Additional Ranges
      • 224.0.0.0/4 (Multicast)
      • 255.255.255.255/32 (Broadcast)
      • 127.0.0.0/8 (Loopback)
      • 169.254.0.0/16 (Link-local)
      • 168.63.129.16/32 (Internal DNS)
  • Azure assigns resources IP’s from address space provisioned. Azure reserves the first 4 and last IP.
    • x.x.x.0-x.x.x.3 as well as the last address is the subnet
  • When planning consider:
    • No overlapping address space with other networks
    • Is security isolation required
    • Need to mitigate IP limitations
    • Connections between Azure VNets and On-prem
    • Isolation requirements for admin purposes
    • Use of Azure services that create their own VNets
  • Subnets
    • Range of IP addresses in a VNet. You can segment VNet into difference size subnets within subscription limit.
  • Smallest supported is /29 and largest is /2.
  • For IPv6 must be exactly /64
  • Considerations:
    • Each subnet must have unique address range in CIDR format
    • Certain Azure services require their own subnet
    • Can be used for traffic management
    • Can limit access to Azure resources to specific subnets with virtual network service endpoint. Can create multiple subnets and enable service endpoint for some subnets and not others.

Determine a naming convention:

  • Example (taken from MS Learn)
    • Pip-sharepoint-prod-westus-001
    • Resource Type-Workload/App-Environment-Region-Instance
  • Azure resource types have a scope that defines level resource must be unique
    • Management group
    • Subscription
    • Resource group
    • Resource

Regions and Subscriptions:

  • Resource can only be created in a VNet that exists in the same region and subscription as the resource
  • You can connect VNets that exist in different subscriptions and regions
  • Deploy as many VNets as needed up to subscription limit
  • Azure Availability Zones
    • Enables you to define unique physical locations with in a region. Zone is made up of one or more datacenters with independent power, cooling, networking.
    • Consider availability zones when designing Azure network and plan for services that support them.
    • Availability Zone categories:
      • Zonal services = Resources pinned to a specific zone
      • Zone-redundant services = Resources replicated/distributed across zones automatically.
        • Azure replicated across three zones for failure resiliency
      • Nonregional services = Service available from geographies is resilient to zone-wide outages
Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-700-explore-azure-virtual-networks/

Fortinet Certified Associate in Cybersecurity Review

Reading Time: 2 minutes

Well at the end of 2024 I was on a contract job that didn’t get renewed in 2025 so since the New Year rolled over I’ve had time on my hands during the day. I figured I should do something productive. Aside from the staples of cleaning up around the house I thought I’d start heading down paths to help my career. So I did a little digging and came across this certification.

While looking into it I found out it was a free self paced training course with a free exam. Considering I have no income at the moment and need to keep my savings for the keys like mortgage, bills, loan payments, groceries, etc so this was a great find.

To add to the benefits of this I’m admittedly not a firewall guy. When I was working at the healthcare system we had out “Network Engineer 1-3” team, and then we had a “Security team”. The security team handled all the web filtering, most of the firewall maintenance with us Network Engineers doing minimal configuration changes as needed.

When working at the various VAR’s (Value Added Resellers) I’ve worked with it was a similar situation. We had our network infrastructure engineers that handled the route/switch and data center networking projects and consulting. Then we had the security engineers that handled all the various firewall vendor consulting and dedicated wireless engineers.

The Fortinet Certified Associate in Cybersecurity certification run off of a self paced course as I mentioned above. This course was perfect for me. It focuses basic configurations and information around the Fortigate firewall. It was a great intro to understanding the fundamentals of the Fortigate firewall to better understand at a high level what others are talking about. The course is: FCA – FortiGate 7.4 Operator Self-Paced

As quoted from Fortinet themselves the description of the course is:
“In this course, you will learn how to harden the security of your network by using the most common FortiGate features. Through demos and interactive simulations, you will learn how to perform basic operation tasks on FortiGate. You can then build on this knowledge by exploring more advanced topics related to these features.”

It goes over topics at a high level such as Interfaces and Routing, Firewall Policies, Authentication, SSL Inspection, Web Filtering, and more. It takes about a day to get through all the video’s and take the exam.

I found it as a good starting point for someone that hasn’t really had much experience with firewalls and a great way to start year 2025 off with a pick me up motivator. It’s kicked me in the pants to start looking back at everything else I started the last half of 2024 to get going again. I highly recommend it for anyone wanting to get their hands wet with Fortinet/Fortigate and have a achievable win to start out 2025 on a positive note. Here is to the new year and let’s all make it a good one!

Share this article:

Permanent link to this article: https://www.packetpilot.com/fortinet-certified-associate-in-cybersecurity-review/

Cloud Networking: So far…

Reading Time: 2 minutes

Since I passed AZ-900 (fundamentals) I decided it was worth it to look into AZ-700 (Networking) as a next step. Why not?!

I currently have access to Udemy so I decided to take a course from the same instructor that wrote/recorded the course for my AZ-900 exam. If I’m honest I wasn’t impressed as compared to the fundamentals course. I do have another recommended course from a previous co-worker that I plan on taking as talking with him he said it was worth the time and helped him pass AZ-700 but as we all know time is hard to come by sometimes.

I’ve been going through the MS Learn course for AZ-700 and it’s intriguing and scaring me a bit. MS Learn is a great tool with lots of courses/modules so surely check it out. https://learn.microsoft.com. The course has been decent but the way it’s written seems to me like the exam is going to be very marketing based. Lot’s of slides about SKU’s and I’ll tell you there are a lot. Azure seems to have a bunch of ways to do similar things and many different SKU’s within each way of doing it. I’m having a tough time organizing it all in my head which will needed to be answering the questions.

I’ve only been going down the MS Azure rabbit hole because for some reason it sparked my brain. I know others that have went down AWS and Google Cloud paths and there is no doubt they all do it differently based on blogs and posts I’ve read. One thing I’ve learned so far is that the basic concepts of our core networking hasn’t really changed. It’s just different products and connectivity options. Whether you are moving 100% to the cloud or doing a hybrid approach of on-prem/colocation data centers and sharing connectivity with your end users to the cloud is a dizzying challenge of making decisions on products that are often usage based making the financial side a key component.

So far from what I’ve seen (and I know I’m late to the party) the overall network concepts of IP addressing, Application services, Virtual Machines, Load Balancing, VPN’s, Hub/Spoke networks with gateways hasn’t really changed it is just a matter of learning the concepts, available technology, and configuration options available with whatever cloud platform you choose. It is certainly a whirlwind and decisions are based on budget and needs as per usual. Luckily the documentation and purchasing calculators seem to be fairly well done to make things easier.

The process really hasn’t changed. As a network guy you still need to work with your app/dev, server, workstation, database teams, etc to discover and map out the needs. Then you have to pick the right products(SKU’s) for your platform to meet the demands and put together a configuration plan to make it happen. Cloud networking is just a new product to study/learn and create something that works.

While I’m early in the process of learning (which never ends) it’s been good to at least get an understanding of the topics/options. I may or may not have to use them but it’s been kind of fun digging into something new to me yet again. Never stop learning!

Share this article:

Permanent link to this article: https://www.packetpilot.com/cloud-networking-so-far/

Learning something new? Make a plan!

Reading Time: 4 minutes

Learning something new is always a task and challenge. Maybe you are studying for a certification. Or maybe just want to learn a new technology or concept. That most daunting task of learning is following through with it and complete it. It is easy to get side tracked and halted or maybe just complete stop and forget about it. One of the best things you can do to keep forward progress is to make a plan. Lay it out and organize it. It’s like a recipe. Make this first, then this second, then put it all together. I’ll go over some things I do for my plan.

The first thing I do is plan time. Set aside time for learning/studying/labing. We all have lives and things to do like laundry, dishes, mowing the lawn, etc. Many have kids with events and sports to go to. This can be a hard thing to do. For me I choose to wake up early to give myself an hour of study/lab time before breakfast (or maybe during breakfast). Maybe you choose the first hour after dinner or an hour after the kids go to bed. Being a NHL fan all the games are in the evenings so after making dinner and doing dishes it’s game time which is why I choose the wake up early method. Maybe you don’t watch much TV so evening may be better. But choose a time and map it out daily.

Leverage weekends! Unless you work on weekends or have migrations/cut overs etc there is more time in the day. In the summer it’s great to just sit on the back deck enjoying the sunshine and warmth and study/learn. For me I get great quiet time lounging around in the summer and since I’m in Michigan in the winter well, you just snow blow the driveway and then relax from the work so it’s good quiet time.

Another thing is “wait/bonus time”. Maybe you have a doctors appoint and are sitting in the waiting room. Or maybe getting an oil change/maintenance at a car shop or dealer. Some have kids at sporting practice. This is a great time to read blogs about your study subject or documentation. Short clips around the topic are great.

A lot of us eat lunch at our desks or at a company food court. Maybe you go out to a fast food restaurant or quick food restaurant to fill your hour lunch break. This is also a great time for blogs or technology documentation reading.

The next thing I do is pick my material. We all learn differently so this is an important decision. For me I usually pick a book, a video course, and a way to lab. You may use all of these or maybe you are just a reader. The important thing is to gather the material you need to study the topic. This is a pivotal point to laying out your plan.

From here I break things into chunks. If studying for a certification this is easy as it usually has a published blueprint for the exam. Even within that blueprint you can break it down even further. Maybe it’s a video course that has modules already broken down for you. Or if it’s a book it can be broken into chapters. You can further break these down into topics within a chapter or module. I like to take these chunks and make a Microsoft OneNote notebook with sections and pages for each topic I break down. I lay the sections and pages out based on my breakdown and leave them empty. As I study I take notes and fill in the pages. This acts like a check list as I proceed down the breakdown I made. If there are notes in it, I attempted/completed it. You might prefer a task board or excel sheet for this. Do whatever works for you.

You can do the same thing with just studying a technology/product. Most products have features that you are going to study. You can break your study plan up into the individual features. For example a firewall you might break it down into firewall rules, connectivity options, protocols, NAT options, and now-a-days some SD-WAN options. You can break your studying up into chunks.

Finally set a goal. This might be a successful deployment (I did this back in the day with a Gigamon deployment which was a device/company I never deployed before). Or if it’s a certification give your self a goal date to take the exam. Pass or not setting that goal date gives you a driving point to keep you motivated to make sure you stay on your study schedule. If you are like me and tend to get distracted another possible motivator is to actually pre-book the exam. This means you already dropped the cash and have to do your work. Or set a deployment date if you are just learning something for work and no exam. Motivate yourself!

For me it’s a chapter/module/chapter/feature a day if possible for whatever I’m studying. Whether certification or just learning a new technology. No, it’s not always possible but it’s a goal to push for.

The short story is set yourself up for success. We all have busy days and life’s and adding in studying something new is tough to fit in our daily schedule. Below is a short list of this post.

Schedule and set aside a time for study
Pick your study materials
Break down your focus (certification or technology) into chunks
Create a checklist (OneNote sections and pages, excel spreadsheet, etc) to cross off
Set a target (date for exam, date for deployment, etc)

Share this article:

Permanent link to this article: https://www.packetpilot.com/learning-something-new-make-a-plan/

Microsoft AZ-900 (Azure Fundamentals) My Experience

Reading Time: 3 minutes

Back (way to long ago) when I got laid off one of the first things I did was buy a couple of books and then looked online. Udemy had a sale going on so I bought a couple of courses. One of them being a course for AZ-900. One of the books was for AZ-900. I did this to learn something new during down time.

My thought process was this. My last couple jobs had dedicated teams for security, route/switch, wireless, cloud, collaboration, etc. The short story is at some point it all overlaps. Being a network engineer I often had to work with the security, wireless, and cloud teams. I’d be in meetings and hearing cloud terms and concepts and collaborating how to combine everything. So I figured it wouldn’t hurt to learn the high level concepts of Azure as it’s one of the popular cloud platforms.

I let it slide as being laid off I ended up feeling defeated and didn’t really want to do much other than apply to anything and everything I could. Well last month I got back on my horse and decided to go down the drain and study for AZ-900. I figured it would at least be nice to know the terminology and concepts at a high level. So I started down the path.

The first thing I did was start the Udemy course. The course was – https://www.udemy.com/course/az900-azure/?couponCode=ACCAGE0923 by Scott Duffy. I’m most certainly a visual learner and struggle to just read books/documentation. It wasn’t the longest course ever but had well built demonstrations and labs to follow along with your free Azure account or built in labs. I think it did a good job at giving you a high level overview of AZ-900.

As an addition to the Udemy course I had purchased the AZ-900 exam reference book: https://www.informit.com/store/exam-ref-az-900-microsoft-azure-fundamentals-9780137955145

I read the topics I watched during the Udemy course as a backup/enforcer to the content I was seeing. Overall I think the book was a great help to my studies and covers the topics well. Again not being the best at reading I leveraged the book in evenings/at night as opposed to watching terrible cable television.

After I finished the course and reading I turned to Microsoft’s free training website. https://learn.microsoft.com/en-us/training/courses/az-900t00 It gave a great refresh overview of the topics on the exam. I’m quite impressed with the coverage of topics and content of a free training course offered by a provider. The practice tests were a decent exam of the topics and I think helped out immensely. I certainly recommend checking out Microsoft Learn for content you want to brush up on or just get a concept of.

On to the exam itself. I won’t talk about the Pearson virtual exam experience because that’s it’s own topic. I booked the exam through the Microsoft website and was lucky enough to book the exam the same day for an evening session. This was just after I finished the MS Learn training so everything was still fresh. Lucky me!

Overall I found the exam to be quite fair. I can’t talk details naturally but I feel it did a good job of covering the exam objectives without throwing in alternative topics that you didn’t study for. The questions were to the tee and concise and not written to pull the wool over your eyes.

Coming from an install career of route/switch networks I think AZ-900 is a great exam to study for to get your feet wet in the Azure cloud and obtain a high level understanding of it’s concepts and offerings. Naturally as it’s called Azure Fundamentals it doesn’t go deep into topics but is a great starting place. It was surely worth the time and effort to get that terminology and concepts down for someone that doesn’t play around in the cloud.

Overall I recommend anyone in the I.T. community study for and take this exam to get a bearing. Cloud is certainly relevant today and whether you are security, route/switch, or server dedicated it is a great intro to the environment.

Share this article:

Permanent link to this article: https://www.packetpilot.com/microsoft-az-900-azure-fundamentals-my-experience/

What a trip!

Reading Time: 7 minutes

So I chose to tweet if I should write a post about how I got to where I am. I got a bit of feed back to do it so here it goes.

It all started growing up as a kid. My dad spent his entire career at the telco. He started out climbing poles and getting stung by yellow jacket nests hidden in transformers while he was roped in and spiked in so he had to climb down slowly while being attacked. After his hard work on the lines he ended up working in the CO’s as a senior guy. He used to take me fishing but if we were ever near one of the CO’s he would stop and fix something he knew needed fixing. The way he would entertain me when he was working on it was an empty block, a cable tool, and some leftover cable. I’d sit there and terminate cable for fun. There is a good chance I still remember the floor tile on the raised floor they hid a case of soda in to keep it cool.

In fact, I still remember two of my favorite toys were promotional aluminum toy GTE trucks that were coin banks. I still have one of his original GTE buttsets he gave me when I started my network career. He went to school for electrical engineering and is an active HAMM radio operator.

Anyways from there I went to elementary school, Junior High, and eventually High School. The first two were mostly filled with sports, broken bones, and stitches. (I’m really good at ER visits now days). The biggest thing about those early days was my early access to computers and the internet. Since dad worked at the telco we were early adopters in my town of computers and the good ol’ dial up internet. Who remembers callwave internet answering machine?

Come to High School and I found music. Technically the music started in 6th grade where we had to try out for instruments. I really wanted to play trumpet but I sucked at it and they handed me drum sticks so in Junior High I ended up in percussion. When I got to High School I got introduced through friends to a lot of punk rock, asked my band director to let me take the drum set home during summer, pissed my neighbors off, and taught myself how to play drum set. Thanks Mr. Bishop for letting me steal the High Schools jazz drum set to teach my self how to play rock music.

At this point I was a High School percussionist in the symphony band and the marching band. I decided to join a punk band which was overall an adventure. In the end I ended up traveling around a 3 state area playing concerts with the band, recording a CD in a lake side cottage, and started getting tattooed. Played in front of record executives at the Hard Rock Cafe in Cleveland Ohio. Of course I was also a skateboarder so spent a lot of time thrashing the town. All of which my parents were great fans of (Sarcasm).

During that time I did all the odd jobs to make money to travel around with the band and afford gear. I worked as a stock boy at a convenience store gas station the town over. I worked as a roofer under the table where the rule was “3 feet before you hit the ground if you fall off you are fired”. Liability you know since I wasn’t on pay roll. Worked as a logger for an old High School teacher during the summer. Worked 3rd shift one summer through a temporary services company at a business that made peg board (yes that stuff to hang your tools on in your garage) for a summer. Then a Jimmy Johns opened up in town. I worked a while making sandwiches and delivering sandwiches and got tired of it.

The band ultimately broke up. Guitarist moved to the Detroit area and my bassist moved to Texas. So I broke down and applied at Staples and my local community college. I ultimately got the job at Staples and got into college. I went into a program that was labeled as “Network Administration”. It was more or less a glorified program that should have been called “Help Desk Associate”. Classes started with basic computer work following the CompTIA A+ and Network+ blueprints. I picked it because I was around computers and networks growing up. It just felt natural. Ultimately I ended up working myself up to an Easy Tech at Staples after passing those two exams and gaining those certifications. I finally achieved my Associated Degree and got engaged to my fiance. That’s when I quit college and decided not to chase a 4 year degree. Instead I kept working and she graduated and wanted to go to a college 5 hours away from our home town.

We went to visit the college and ultimately decided to look for an apartment instead of living so far away from each other and her paying for a dorm. I eventually told my parents what I was going to do and they accepted my fate of quitting chasing a 4 year degree, getting engaged, and moving. I somehow got a transfer to a Staples 30 minutes away from what would ultimately be our first apartment.

That’s the year I started chasing further learning. I was working odd hours at Staples and my fiance was working hard at college. I somehow managed to pay for two people to live off a retail store income and her to go to college. Proud of myself for fighting through that. While she was studying, I was studying and ultimately got a few more certifications.

Fast forward I got tired of the 30 minute drive as it was getting costly paying for two people to live and only me working so I started applying to everything I could find in the area we lived. Then I got a call from two guys that were starting a call center for computers in their basement. I took the shot and accepted their “interview”. They asked to meet at a Starbucks so I said sure and we scheduled a time. What a risk that was. I met them there and they were in full blown suits (pants, dress shirts, ties, suit coats) and SANDALS……..

Either way they offered me a spot and after some thinking I decided to take it hesitantly but sometimes you have to take a chance. Luckily before I started a healthcare company in the area called me about a help desk position that actually offered benefits, a steady job in an office, and had facilities all over the county. So I turned the guys call center down and joined the healthcare company.

I worked help desk for a few years and they promoted the one network engineer to an I.T. Manager. Slowly he quit doing network tasks so I asked if they would send me to a CCENT training course. They eventually said yes and that turned into an awfully awkward situation. The course was in person and an hours drive away for 5 days in a row. As I didn’t really have much disposable income I needed to stay up in the city an hour away. My then wife somehow set up for me to stay on her friends couch up there who was an ex girlfriend of mine. That was super awkward but I pushed through.

After the training I bought the book (Still have it. Thanks Wendell!) and starting studying to take the exam. Eventually I passed CCENT and starting taking over network tasks. Then I started taking over Server, VMWare, and Cisco Voice tasks. So ultimately I got studying and certified in all of those because I didn’t know what my next move would be. There were more certs involved but no one wants to read what is already a long post and read about every exam I took and when I took it. (If interested you can see everything I achieved here.

After all the time I spent the healthcare company got bought by a 3 county hospital system will 2 hospitals and dozens of specialty clinics. They transferred my role to a “Network Engineer II” role where I shared an office with the level III voice technician. I ended up building clinics networks, rolling out an entire layer 2 refresh, migrated from P2P VPN’s to DMVPN, and built a backup data centers network. Shhhh….. There was a bit of voice in there with some UCCX scripting and an analog line to VG224 migration (42? VG224s) and a telehealth setup to call manager complete with video.

Eventually I got bored of all the VLAN changes and chasing down of MAC addresses and a friend of mine put my resume into a VAR. They ultimately called me and I did the awkward thing of doing a technical interview in my car during lunch. I got the job and started the fun.

At that VAR I built networks for the states board of water and light, built an entire new high schools network from the ground up (I’m talking them pouring the foundation and once the building was done I build the IDFs), refreshes for Universities and water sanitation plants, fixed the department of transportation multicast issue’s for their highway camera system, migrated a dental insurance companies DMVPN to Viptela SD-WAN and many more projects. Got sent to a Viptela training in Atlanta, did SD-WAN training through Silverpeaks partner program. Then ultimately got let go because of a lack of new projects coming in.

Back to the drawing board. I did some searching and fairly quickly got into another VAR who ultimately let me go fairly quickly for the same reason. Lack of new projects. I’ve been unemployed ever since (over a year and a half now) but luckily because all of my hard work I was able to save enough to survive that long. It was quite the adventure being laid off that long. The stress got to me and I ended up spending a week in a mental health facility for hallucinations and having two seizures.

While being laid off I didn’t stop. I used cash back from my credit card to buy some books and Udemy courses and have continued to study and read. I’ve been able to mostly keep up on things thanks to all my friends on twitter (somehow during all this adventure I grew to over 2k followers) and all my great friends in the Cisco Champions group (Member since 2017).

The TL;DR……don’t give up and keep on pushing. I kept pushing and went from odd jobs to getting to meet awesome people, do cool projects, and keep on trucking.

Share this article:

Permanent link to this article: https://www.packetpilot.com/what-a-trip/

Load more