Cloud Fundamentals

Cloud Fundamentals (CLFU)

Assignment
1
Number
Assignment Name Practice Labs
NQF Level 5
Credits N/A
Due Date 09 June 2024
Total marks = 140
Formative assessments through the semester contribute
towards the student’s module mark and are used to assess
progress and identify areas for improvement. This formative
Marks assessment will contribute 25% towards final mark.
Take note of the following with regards to late submissions:
a. One (1) day late (-5%)
b. Two (2) days late (-10%)
c. Three (3) days late (-15%)
Individual / Group
Individual
Assignment
Lecturer Information
Lecturer Thaveshan Govender / Harold Erlston
Lecturer E-mail [email protected] / [email protected]

Learning Objective:
Formative assessment 1 will cover the following concepts:
a. Lab ecercise on various aspects covered in the Azure Fundamentals module
Attributes/Competencies Assessed:
The learner should demonstrate the following knowledge in this assessment:
a. Unit standard(s)
a. N/A
Technical Aspects:
The number of pages for this formative assessment is 25 and the following font and size
should be used in your report:
a. Font: Arial
b. Size: 12 and 14 for headings
c. Font colour: Black
Save and upload the report as a .PDF (No backgrounds) with the following naming
convention:
a. Student no_StudentName_StudentSurname_ModuleCode_FA1 (No ZIP folder
uploads)
 Ensure adequate referencing is used when using information from either books or
internet. Plagiarism is a serious offecne and can result in 0% for the assessment when
excessive work is copied without proper referencing.
Please complete the following and sign as requested for Portfolio of Evidence (POE)
a. Pre-Assessment agreement (Save, sign and submit as PDF)
b. Assessment Feedback Agreement (Save, sign and submit as PDF)
Mark allocation for report
See Mark allocation sheet below
Question 1
(20)
Amazon Web Services (AWS) and Microsoft Azure are two of the most prominent cloud
computing platforms, each offering a wide range of cloud services and solutions. While both
provide cloud services, there are some key differences between AWS and Azure. Discuss the
differences under the following headings:
a) Provider
b) Market Share:
c) Service Offerings:
d) Regions and Data Centers:
e) Pricing and Cost Management:
f) Ecosystem and Integration:
g) Certifications and Training:
h) Support and Documentation:
i) Security and Compliance:
j) Community and User Base:

Question 2 (20)
Discuss the various technologies with regards to Amazon Web Services (AWS):
a) Amazon EC2 (Elastic Compute Cloud)
b) Amazon S3 (Simple Storage Service)
c) Amazon RDS (Relational Database Service)
d) AWS Lambda
e) Amazon VPC (Virtual Private Cloud)
f) Amazon DynamoDB
g) AWS Elastic Beanstalk
h) Amazon Redshift
i) AWS CloudFormation
j) Amazon CloudFront

Question 3 (20)
Discuss the various technologies with regards to Microsoft Azure:
a) Virtual Machines (Azure VMs)
b) Azure Blob Storage
c) Azure SQL Database
d) Azure Functions
e) Azure Virtual Network
f) Azure Cosmos DB
g) Azure App Service
h) Azure Data Warehouse
i) Azure Resource Manager
j) Azure Content Delivery Network (CDN)
 Practical section
1. Microsoft Azure Fundamentals
Login Information:
Login to the Lab computer using below credentials
 User Name:
 o Admin
 Password:
o
 Pa55w.rd

Getting Azure Credentials

To fetch your Azure Credentials, Please go to the Info Tab in Overlay screen and click on
Cloud Express Pass (Azure)

Exercise 01 (Create a virtual machine in the portal)

(20)
Introduction:
In this walkthrough, we will create a virtual machine in the Azure portal, connect to the
virtual machine, install the web server role and test.
Note: Take time during this walk-through to click and read the Informational icons.
Exercise 01: Create a virtual machine in the portal
Task 1: Create the virtual machine
1. Sign-in to the Azure portal: https://portal.azure.com
 2. From the All services blade in the Portal Menu, search for and select Virtual machines,
and then click +Add, +Create, +New and choose +Virtual machine from the drop
down.
3. On the Basics tab, fill in the following information (leave the defaults for everything
else):
 Settings | Values
 Subscription | Use default supplied
 Resource group | Create new resource group
 Virtual machine name | myVM
 Region | (US) East US
 Availability options | No infrastructure redundancy options required
 Image | Windows Server 2019 Datacenter - Gen2
 Size | Standard DS1 v2
 Administrator account username | azureuser
 Administrator account password (type in carefully!) | Pa$$w0rd1234
 Inbound port rules - | Allow select ports
 Select inbound ports | RDP (3389) and HTTP (80)
4. Switch to the Networking tab to ensure HTTP (80) and RDP (3389) are selected in
section Select inbound ports.
5. Switch to the Management tab, and in its Monitoring section, select the following
setting:
 Settings | Values
 Boot diagnostics | Disable
6. Leave the remaining values on the defaults and then click the Review + create button
at the bottom of the page.
7. Once Validation is passed click the Create button. It can take anywhere from five to
seven minutes to deploy the virtual machine.
8. You will receive updates on the deployment page and via the Notifications area (the
bell icon in the top menu bar).

Task 2: Connect to the virtual machine

In this task, we will connect to our new virtual machine using RDP (Remote Desktop
Protocol).
1. Click on bell icon from the upper blue toolbar, and select 'Go to resource' when your
deployment has succeded.
Note: You could also use the Go to resource link on the deployment page
2. On the virtual machine Overview blade, click Connect button and choose RDP from
the drop down.
Note: The following directions tell you how to connect to your VM from a Windows
computer. On a Mac, you need an RDP client such as this Remote Desktop Client from
the Mac App Store and on a Linux computer you can use an open source RDP client.
 3. On the Connect to virtual machine page, keep the default options to connect with the
public IP address over port 3389 and click Download RDP File. A file will download on
the bottom left of your screen.
4. Open the downloaded RDP file (located on the bottom left of your lab machine) and
click Connect when prompted.
5. In the Windows Security window, sign in using the Admin Credentials you used when
creating your VM azureuser and the password Pa$$w0rd1234.
6. You may receive a warning certificate during the sign-in process. Click Yes or to
create the connection and connect to your deployed VM. You should connect
successfully.
A new Virtual Machine (myVM) will launch inside your Lab. Close the Server Manager and
dashboard windows that pop up (click "x" at top right). You should see the blue background
of your virtual machine. Congratulations! You have deployed and connected to a Virtual
Machine running Windows Server.

Task 3: Install the web server role and test

In this task, install the Web Server role on the server on the Virtual Machine you just created
and ensure the default IIS welcome page will be displayed.
1. In the newly opened virtual machine, launch PowerShell by searching PowerShell in
the search bar, when found right click Windows PowerShell to Run as administrator.
2. In PowerShell, install the Web-Server feature on the virtual machine by running the
following command. (Paste in the command and hit ENTER for the installment to
begin).

Paste Content
Install-WindowsFeature -name Web-Server -IncludeManagementTools
3. When completed, a prompt will state Success with a value True. You do not need to
restart the virtual machine to complete the installation. Close the RDP connection to
the VM by clicking the x on the blue bar at the top center of your virtual machine. You
can also minimize it by clicking the - on the blue bar at the top center.
4. Back in the portal, navigate back to the Overview blade of myVM and, use the Click to
clipboard button to copy the public IP address of myVM, then open a new browser
tab, paste the public IP address into the URL text box, and press the Enter key to
browse to it.
5. The default IIS Web Server welcome page will be displayed.
Congratulations! You have created a new VM running a web server that is accessible via its
public IP address. If you had a web application to host, you could deploy application files to
the virtual machine and host them for public access on the deployed virtual machine.
Note: To avoid additional costs, you can optionally remove this resource group. Search for
resource groups, click your resource group, and then click Delete resource group. Verify the
name of the resource group and then click Delete. Monitor the Notifications to see verify
that the deletion completed successfully.
ANSWER (Upload a screenshot)
Exercise 02 (Create a virtual network)
(20)
Introduction:
In this walkthrough, we will create a virtual network, deploy two virtual machines onto that
virtual network and then configure them to allow one virtual machine to ping the other
within that virtual network.

Task 1: Create a virtual network

In this task, we will create a virtual network.
Note: Before beginning the lab, disable both the public and private firewall in your virtual
machine by opening the Start menu > Settings > Network and Internet > Locate Windows
Firewall
1. Sign in to the Azure portal at https://portal.azure.com
2. From the All services blade, search for and select Virtual networks, and then click +
Add, + Create, + New.
3. On the Basics tab, fill in the following information (leave the defaults for everything
else):
 Setting | Value
 Subscription | Leave default provided
 Resource Group | Create new resource group
 Name | vnet1
 Region | (US) East US
4. Click the Review + create button. Ensure the validation passes. Then hit create to
deploy the resource.

Task 2: Create two virtual machines

In this task, we will create two virtual machines in the virtual network.
1. From the All services blade, search for Virtual machines and then click + Add, +
Create, + New, from the drop down select Virtual Machine.
2. On the Basics tab, fill in the following information (leave the defaults for everything
else):
 Setting | Value
 Subscription | Use default supplied
 Resource group | Select default in drop down
 Virtual machine name | vm1
 Region | (US) East US
 Image | Windows Server 2019 Datacenter - Gen2
 Username| azureuser
 Password| Pa$$w0rd1234
 Public inbound ports| Select Allow selected ports
 Selected inbound ports| RDP (3389)

3. Select the Networking tab. Make sure the virtual machine is placed in the vnet1
virtual network. Review the default settings, but do not make any other changes.
4. Click Review + create. After the Validation passes, click Create. Deployment times
can vary but it can generally take between three to six minutes to deploy.
5. Monitor your deployment, but continue on to the next step.
6. Create a second virtual machine by repeating steps 2 to 4 above. Make sure you use
a different virtual machine name, that the virtual machine is in the same virtual
network, and is using a new public IP address:
 Setting | Value
 Resource group | myRGVNet
 Virtual machine name | vm2
  Virtual network | vnet1
 Public IP | vm2-ip
7. Wait for both virtual machines to deploy and status says running.

Task 3: Test the connection

In this task, we will try to test whether the virtual machines can communicate (ping) each
other. If not we will install a rule to allow an ICMP connection. Usually ICMP coonnections are
automatically blocked.
1. From the All resources blade, search for vm1, open its Overview blade, and make
sure its Status is Running. You may need to Refresh the page.
2. On the Overview blade, select Connect and then select RDP from the drop down.
Note: The following directions tell you how to connect to your VM from a Windows
computer.
3. On the Connect with RDP blade, keep the default options to connect by IP address
over port 3389 and click Download RDP File.
4. Open the downloaded RDP file (located at the bottom left of you VM) and click
Connect when prompted.
5. In the Windows Security window, type the username azureuser and password Pa$
$w0rd1234 and then click OK.
6. You may receive a certificate warning during the sign-in process. Click Yes to create
the connection and connect to your deployed VM. You should connect successfully.
Close the Windows Server and Dashboard windows that pop up. You should see a
Blue Windows background. You are now in your virtual machine.
Note: In your newly created virtual machine, disable both the public and private
firewall by opening the Start menu > Settings > Network and Internet > Locate
Windows Firewall
7. Open up PowerShell on the virtual machine by clicking the Start button, and in Search
type PowerShell, right click on Windows PowerShell to Run as administrator
8. In Powershell, try to ping vm2 by typing:

Paste Content
ping vm2

9. You should be successful. You have pinged VM2 from VM1.

Congratulations! You have configured and deployed two virtual machines in a virtual
network, and then you were able to connect them.
Note: To avoid additional costs, you can optionally remove this resource group. Search for
resource groups, click your resource group, and then click Delete resource group. Verify the
name of the resource group and then click Delete. Monitor the Notifications to see how the
delete is proceeding.
ANSWER (Upload a screenshot)
Exercise 03 (Create blob storage)
(20)
Task 1: Create a storage account
In this task, we will create a new storage account.
1. Sign in to the Azure portal at https://portal.azure.com
2. From the All services blade, search for and select Storage accounts, and then click +
Add, + Create, + New.
3. On the Basics tab of the Create storage account blade, fill in the following information
(replace xxxx in the name of the storage account with letters and digits such that the
name is globally unique). Leave the defaults for everything else.
 Setting | Value
 Subscription | Leave provided default
  Resource group | Create new resource group
 Storage account name | storageaccountxxxxx
 Location | (US) East US
 Performance | Standard
 Redundancy | Locally redundant storage (LRS)
Note - Remember to change the xxxxx so that it makes a unique Storage account
name
4. Click Review + Create to review your storage account settings and allow Azure to
validate the configuration.
5. Once validated, click Create. Wait for the notification that the account was
successfully created.
6. From the Home page, search for and select Storage accounts and ensure your new
storage account is listed.

Task 2: Work with blob storage

In this task, we will create a Blob container and upload a blob file.
1. Click the name of the new storage account, scroll to the Data storage section in the
left menu, and then click Containers.
2. Click + Container and complete the information. Use the Information icons to learn
more. When done click Create.
 Setting | Value
 Name | container1
 Public access level| Private (no anonymous access)
3. Open a new browser window and search Bing for an image of a flower. Right click on
the image and save it to your VM.
4. Back in the Portal, click on container1 , and then select Upload.
5. Browse for the image file you just saved on your local computer. Select it and then
select upload.
6. Click the Advanced arrow, leave the default values but review the available options,
and then click Upload.
Note: You can upload as many blobs as you like in this way. New blobs will be listed
within the container.
7. Once the file is uploaded, right-click on the file and notice the options including
View/edit, Download, Properties, and Delete.
8. If you have time review the options for Files, Tables, and Queues.

Task 3: Monitor the storage account

1. Return to the storage account blade and click Diagnose and solve problems.
2. Explore some of the most common storage problems. Notice there are multiple
troubleshooters here.
3. On the storage account blade, scroll down to the Monitoring section and click Insights.
Notice there is information on Failures, Performance, Availability, and Capacity. Your
information will be different.
Congratulations! You have created a storage account, then worked with storage blobs.
Note: To avoid additional costs, you can optionally remove this resource group. Search for
resource groups, click your resource group, and then click Delete resource group. Verify the
name of the resource group and then click Delete. Monitor the Notifications to see how the
delete is proceeding.
ANSWER (Upload a screenshot)

Exercise 04 (Create a SQL database)

(20)
Task 1: Create the database
In this task, we will create a SQL database based on the AdventureWorksLT sample
database.
1. Sign in to the Azure portal at https://portal.azure.com.
2. From the All services blade, search for and select SQL databases, and then click +
Add, + Create, + New.
3. On the Basics tab, fill in this information.
 Setting | Value
 Subscription | Use default supplied
 Resource group | Create new resource group
 Database name| db1
  Server | Select Create new (A new sidebar will open on the right)
 Server name | sqlserverxxxx (must be unique)
 Server admin login | sqluser
 Password | Pa$$w0rd1234
 Location | (US) East US
 Click | OK
4. On the Compute + storage, select Configure database. In the Configure window, Click
te dropdown next to Service tier and then select Basic (For less demanding
workload). Click Apply.
5. On the Networking tab and configure the following settings (leave others with their
defaults)
 Setting | Value
 Connectivity method | Public endpoint
 Allow Azure services and resources to access this server | Yes
 Add current client IP address | No
6. On the Security tab.
 Setting | Value
 Azure Defender for SQL| Not now
7. Move to the Additional settings tab. We will be using the AdventureWorksLT sample
database.
 Setting | Value
 Use existing data | Sample
8. Click Review + create and then click Create to deploy and provision the resource
group, server, and database. It can take approx. 2 to 5 minutes to deploy.

Task 2: Test the database.

In this task, we will configure the SQL server and run a SQL query.
1. When the deployment has completed, click Go to resource from the deployment
blade. Alternatively, from the All Resources blade, search and select Databases, then
SQL databases ensure your new database was created. You may need to Refresh the
page.
2. Click the db1 entry representing the SQL database you created. On the db1 blade
click Query editor (preview).
3. Login as sqluser with the password Pa$$w0rd1234.
4. You will not be able to login. Read the error closely and make note of the IP address
that needs to be allowed through the firewall.
5. Back on the db1 blade, click Overview.
6. From the db1 Overview blade, click Set server firewall Located on the top center of
the overview screen.
7. Click + Add client IP (top menu bar) to add the IP address referenced in the error. (it
may have autofilled for you - if not paste it into the IP address fields). Be sure to Save
your changes.
8. Return to your SQL database (slide the bottom toggle bar to the left) and click on
Query Editor (Preview). Try to login again as sqluser with the password Pa$
 $w0rd1234. This time you should succeed. Note that it may take a couple of minutes
for the new firewall rule to be deployed.
9. Once you log in successfully, the query pane appears. Enter the following query into
the editor pane.

Paste Content
SELECT TOP 20 pc.Name as CategoryName, p.name as ProductName
FROM SalesLT.ProductCategory pc
JOIN SalesLT.Product p
ON pc.productcategoryid = p.productcategoryid;
10.Click Run, and then review the query results in the Results pane. The query should
run successfully.

Congratulations! You have created a SQL database in Azure and successfully queried the
data in that database.
Note: To avoid additional costs, you can optionally remove this resource group. Search for
resource groups, click your resource group, and then click Delete resource group. Verify the
name of the resource group and then click Delete. Monitor the Notifications to see how the
delete is proceeding.
ANSWER (Upload a screenshot)

Mark allocation for student

Section Sub-section Maximum Mark Learner mark

Assessment Question 1 20
body
Question 2 20

Question 3 20

Exercise 1 20
 Exercise 2 20

Exercise 3 20

Exercise 4 20
1 day late
-5
2 days late
Deductions -10
3 days late
-15

Total: 140

PRE-ASSESSMENT AGREEMENT

Assessment Preparation: Preparing the Candidate

Student name Date
and surname
Time

Assessor name
Venue
and surname
How to prepare the Document Agree Action Required
candidate Requirements (tick)
Explain to the candidate Assessment Policy
why you are meeting Assessment process
and the purpose of the
assessment.
Discuss the assessment Assessment strategy
plan in detail.
Explain assessment Assessment
process, show instruments
assessment instruments
to candidate and
describe assessment
conditions.
Identify the role-players Assessors
during assessment. Moderator
Describe the evidence Examples of evidence
required to be declared
competent.
Explain how evidence Mark allocation
will be judged. explained
Explain to the candidate Assessment task
how to prepare: Give description
candidate assessment
task description.
Confirm with the Detailed briefing on
candidate what he/she exact requirements to
should bring to the be given to candidate
assessment. in writing
Ensure that candidate Appeals Policy
understands the Appeals procedure
procedures of all
assessment practices. Assessment Policy
Assessment Procedure
Moderation Policy
Moderation procedure
Verification Policy
Verification Procedure
Ask the candidate if List needs
he/she foresees any
problems or identify any
special needs.

Agreed Assessment Plan

Student name and surname:
Assessor name and surname:
Module name: Azure Administrator
Unit Standard/s: N/A
Type of Assessment i.e. Formative
assignment, Formative test, Formative Formative Assessment 1
Practical, Summative etc.
Special Assessment Requirements: N/A
 Event Date, time and Resources Evidence to be
location required generated
Assessments due Assessments Completed
date documentation
Complete activity Completed
on MyAIE and Portfolio of
upload to MyAIE Evidence
Submit Portfolio
of Evidence

Assessor Roles and Responsibility

Roles Assessor
Guide
Feedback Agent
Reviewer
Responsibilities Consult candidate re-assessment, assessment process and
plan.
Agree assessment process and plan with candidate.
Forward documentation to candidate: plan, guide and
assessment instruments.
Assess candidate with the use of different instruments.
Provide feedback on assessment findings.
Support candidate through assessment process.
Source feedback from candidate on assessment process.
Review assessment process and outcome.
Use assessment process as opportunity to transform
assessment activities and outcomes.

Candidate Roles and Responsibility

 Leaner
Roles
 Feedback agent
 Reviewer
 Be available for assessment.
Responsibilities
 Be actively involved in the consultative
process.
 Learn from the assessment process.
 Provide feedback to the assessor in terms of
the assessment as learning activity.
 Provide feedback to the assessor on the
efficacy of the assessment process.
 Review own role and assessor role in the
assessment process.
  Portfolio of Evidence
Assessment Instruments
 Questionnaire
 Report
 Presentation
 Reflexive questions
 Work sample
 Practical’s
 Group Activity
 Research activities

Assessment Process
 Evaluation of POE addressing Essential
Embedded Knowledge in unit standards.
 Evaluation of Research Projects and other
evidence addressing specific unit standards.
 Consultation: assessment plan and assessment
activities and instruments. Pre-assessment
moderation and interviews conducted at this
stage.
 Observation: feedback on assessment against
specific outcomes, critical outcomes in unit
standards.
 Feedback: to candidate regarding sufficiency of
evidence and possible interview to gain
supplementary evidence.
 Feedback to candidate regarding assessment
findings as well as review process.
Feedback Written feedback to be given to all stakeholders at the
end of the assessment process, as well as verbal
feedback to the candidate during assessment activities.
Recording Process and findings to be recorded and submitted for
Process record keeping purposes as well as moderation and
verification.
Review The review process is the responsibility of the assessor
Process and the candidate. Joint reviewing will take place after
feedback has been given to the candidate.
Right to The candidate must be advised of the right to appeal.
appeal
Resources Assignments
Required  POE
 Assessments
 Guides
I confirm that:
 I have been consulted on and have agreed to the training and
assessment process as detailed in the assessment guide.
 I have been advised of my right to appeal against any assessment that
is unfair, unreliable, invalid or impracticable.
 I have read and understood the appeal procedure.
 I know that assessments may be moderated or verified by an external
party.
 The purpose of the assessment has been clearly explained to me.
 The criteria have been discussed with me, and I know I will be assessed
 against these criteria.
 I know when and where I will be assessed, and I was given fair notice.
 I know how the assessment will be done, and any other requirements
related to the assessment.

Signed: _____________________________ Date: ________________

Overall Assessment Competen

Not yet competent
Decision t

Student’s Signature Date:

Assessor’s Signature Date:

Moderator’s Signature Date:

ASSESSMENT FEEDBACK AGREEMENT

Assessment feedback: Feedback to learner

Qualification Name:

Qualification SAQA Number:

Subject Name: Azure Administrator

Subject Code: AZAD

Assessment Name: Formative Assessment 1

Assessment Code: AZAD_FA1

Assessment Type: Formative

1st Attempt 2nd Attempt

Feedback report
C NYC C NYC
Unit standard Number(s)

Question 1

Question 2

Question 3

Question 4

Exercise 1

Exercise 2

Exercise 3

Exercise 4

General feedback to learner (Attempt 1)

Supply comprehensive feedback why learner is found NYC

Learner Number:

Learner name and surname: Date:

Learner Signature:

Lecturer name and surname: Date:

Lecturer Signature:
Assessor name and surname: Date:

Assessor Signature:

Moderator name and surname: Date:

Moderator Signature:

Note to learner

Review the feedback provided by your lecturer to check that you have been
found competent in this assessment. If there are any areas where you have
been found not yet competent, you must redo those parts of the assessment
and resubmit within the stipulated time frame.

The section below will only be completed in cases where the learner was asked
to
resubmit parts of the assessment where they were found not yet competent.

General feedback to learner (Attempt 2)

Supply comprehensive feedback why learner is found NYC

Learner Number:

Learner name and surname: Date:

Learner Signature:
Lecturer name and surname: Date:

Lecturer Signature:

Assessor name and surname: Date:

Assessor Signature:

Moderator name and surname: Date:

Moderator Signature: