Reading back on what I posted originally. I was not clear and could have clarified what I was looking for more so. Thank your feedback @Ronnie-Wong. I will read through this article.

No problem - I am standing by if I can help further.

Also, don't forget that you can always create a free trial account in Azure. I mention this because you can always build a test Azure AD to test the synchronization and its termination.

It is always so valuable to practice in a non-production environment.

@Philip-Curley,

We are currently planning on both MS-102 and MD-102 to replace the current MS and MD series.

Our goal is that we will have both series by end of Q2. We've got a lot on our plate but that is the plan.

Hi Ronnie,

Thank you, I have just checked my settings and I had skip outro's and intro's set. After changing this I am now able to view the video.

Thanks,
Jake

Thanks. I already have that from the course. I was looking for basically a huge outline with quick definitions. I know where to find everything Microsoft has to say about everything, but was looking for exam-specific help.

Hey @Mo-Hussain, we apologize for any inconvenience you are facing. If you sent an email request to support@practicelabs.com with the details and they will respond.

Yeah - it sounds like Azure Purview is your answer - https://www.microsoft.com/en-us/security/business/microsoft-purview

Unfortunately, I do not believe we have hit this in our ITPRO or AUDIT libraries.

I would imagine this will be hitting our build plan soon - so please stay tuned.

Also - as you know - we have many courses in the Azure product itself should you need to bolster your skills on the cloud platform in general.

Thanks for the response Ronnie, I'll continue with the current study material.

Thanks Anthony,

I'm pretty new to Hyper V, we are wanting to create a failover cluster with two nodes, there will be 7 Virtual Servers running anything from SQL, Active Directory, Web Server, File Server, as I know you guys are the experts, would you have any general recommendations for bandwith between the two servers?, in your opinion would 1gig be enough, would you recommend 10gig, would just like to get your take on what you have seen, I appreciate any responses, if you have any resources I would appreciate,
Thank You!!

@Alwin-Gomez-0,

Is this a site-to-site vpn access between 2 VNGs?

Is this another type of vpn access?

Verify that your on premises server has routes to your 172.16.x.x. network and vice versa.

Thank you, I appreciate the reply. I found most of your information within the MS Query notes. I have not validated that your example is pulled all from the document but in any case I will need to spend time with all the BI documentation. Thank you again for your support and clear instructions you share. I enjoy your sessions as I am also doing the CISSP curriculum.

Regards

@Mahogany-Fragata & @Ronnie-Wong , I hope all is well. I do cover what emergency addresses are & how to create them in 2 different places in the MS-700 course, but not the specifics of how to assign to a user.

It is actually a very simple process once you have the address(es) in the system, and the instructions on how to do so are here if you want to take a look:

https://learn.microsoft.com/en-us/microsoftteams/assign-change-emergency-location-user

If you have any other questions as you continue your Teams journey, please be in touch as needed.

Good Luck !!

Cheers,

Adam

Here is the new Azure-based SCCM that you are looking for. Note that this documentation is excellent. I have yet to see any published texts that rival this source.

https://learn.microsoft.com/en-us/mem/configmgr/

@Dwayne-Coleman The Endpoint Manager and Intune course will release in Q1 - we are hoping in February.

We have no firm dates to announce at this point for the Microsoft Endpoint Configuration Manager - in fact, we are still assessing demand.

@Rachael-Gill , I hope all is well. What kind of address objects are you looking to export? Are they Exchange Server? Firewall? need to know specifically to help point you in the correct direction.

Cheers,

Adam

@Sean-Forseth-0 to add to Ronnie's response, here is the documentation about the changes: https://learn.microsoft.com/en-us/certifications/exams/md-101

9fae99d8-bec5-443e-ab38-bcd64d5bd2b4-image.png

Click on the MD-101 study guide and the deltas Ronnie mentioned can be found here!

@Adam-Tyler said in Azure vnet and throughput:

I am still troubleshooting this, but thought I would post an update. I've created a direct peering between the two vnets containing Windows VMs. The throughput when transferring files between az-svr1 and az-svr2 shot up to almost 1.5Gbps. This effectively rules out disk performance and VM sizing as a potential issue. For some reason (I have a theory) when using the hub network, performance drops through the floor.

My guess is that the virtual appliance NAT/firewall that is dc3nsv can't handle the traffic. When the hub network is in use, all traffic has to bounce of this router and back down to the internal networks. This is a SonicWALL NSv270 which on paper should be able to handle much more throughput, however I can't seem to get it to perform a basic internet speed test over about 700 Mbps.. Which, interesting enough, if you cut in half is about 350Mbps. Approximately the throughput I am seeing when transferring files between both internal servers when using hub network.

0c64c1c7-cf19-4540-815e-dd4be9560ad1-image.png

I've gotten to the bottom of this. The virtual appliance used for the firewall was the bottleneck. I threw the SonicWALL out and deployed a pay as you go Fortigate, traffic runs at line speed. No issues.

One word of caution, if you plan to build your networks in Azure like this, Vnet peering costs 1 cent per GB transferred within the same region.

https://azure.microsoft.com/en-us/pricing/details/virtual-network/

Regards,
Adam Tyler

@Stephen-Rodriguez great question and I hope others will add commentary to this as well. When using certificates for your organization, you are right in the fact that a web server will use a certificate to validate the server, distribute a public key and establish trust.

These certificates are provided by public trusted certificate authorities for a fee and are typically trusted by the web clients across the Internet.
However, if your organization wants to support certificate-based authentication for users, network devices, workstations or servers you can bring up an Active Directory Certificate Services (ADCS) server and issue certificates. This is typically done in a tiered public key infrastructure (PKI) implementation with a root CA that issues a certificate to a subordinate CA. The root CA will be protected by taking it offline an allowing the subordinate CA to issue the certificates to users, computers, network devices (through the NDES service) and servers.

These entities will not (by default) trust the certificate that is being presented unless the root CA certificate is imported into the device that is validating the certificate. For this the certificate that is issued to the, let's say user or device, must go through a validation process by checking the subordinate CA's certificate and then checking the validity of the root CA certificate. This is why you might bring up a private CA (root for the first one), issue a certificate to a subordinate CA and let the subordinate be the "issuing CA".

The root CA certificate must be installed on the devices before any certificates in the chain are trusted. A single public certificate can be expensive and to scale this to enterprise levels, a company can create their own internal/private CA to issue certificates to the company devices and manage the internal PKI.

b57e0d87-9052-4c39-965c-c975c52a6224-image.png

As you see above this is a public CA with a root CA and the issuing CA. For companies to deploy an internal or private PKI, there is no difference, except for the fact that the company's certificates are only trusted by the company and nobody on the internet.

@Brad-Aanderud,

We are evaluating right now to see our capacity for Server 2022 in 2023 and also for demand

Please submit a course request for Server 2022 offerings via the chat bubble on our site. This will ensure that your request is logged officially. The more requests that we see from these the more likely they are to make it onto our roadmap.