The real graded Microsoft Azure tasks the portal assigns, grouped into three levels.
The portal assigns these Microsoft Azure tasks. Finish Level 1 before Level 2 and Level 2 before Level 3. Your mentor may mark some tasks as required for the certificate.
Level 1: Foundations (12 tasks)
Task
What to do
Azure account setup
Create an Azure free or student account, enable MFA, set a budget alert and explain subscriptions and resource groups.
Azure portal and CLI
Create and delete a resource group with the portal, the Azure CLI and Cloud Shell. Commit the commands to a repo named azure-internship.
Cloud concepts
Explain regions, availability zones, IaaS/PaaS/SaaS and shared responsibility with Azure examples.
Virtual machine
Create a Linux VM, connect with SSH and install a web server that shows your name.
Network security groups
Lock the VM's NSG to SSH from your IP and HTTP from anywhere and explain each rule.
Storage account
Create a storage account, upload blobs, and host a static website from it.
Access tiers
Explain hot, cool, cold and archive tiers and set a lifecycle rule.
Microsoft Entra ID basics
Create users and groups in Entra ID and assign a built-in RBAC role at resource group scope.
Azure App Service
Deploy a simple web app to App Service on the free tier.
Azure Monitor
Enable metrics and create an alert for high CPU on your VM.
Cost management
Use the pricing calculator and Cost Management to estimate and review spending.
Clean up
Delete your resource groups and confirm nothing is left billing.
Level 2: Building real features (10 tasks)
Task
What to do
Virtual network design
Build a VNet with two subnets, peer it with another VNet and test connectivity.
Azure SQL Database
Create an Azure SQL database, allow access only from your app and run queries.
Azure Functions
Write an HTTP-triggered and a blob-triggered Azure Function.
Cosmos DB
Create a Cosmos DB container with a sensible partition key and query it.
Managed identity
Let your App Service read secrets from Key Vault with a managed identity, with no secrets in code.
Load balancing
Compare Load Balancer, Application Gateway and Front Door and set up one of them.
VM scale sets
Create a VM scale set with autoscale rules and show it scaling.
Infrastructure as Code
Deploy your resources with Bicep or Terraform.
Azure DevOps or GitHub Actions
Build a pipeline that deploys your app to App Service on every push.
Backup
Configure Azure Backup for a VM and run a restore test.
Level 3: Professional work and capstone (8 tasks)
Task
What to do
Containers on Azure
Deploy a container to Azure Container Apps or AKS from Azure Container Registry.
Monitoring with Log Analytics
Send logs to a Log Analytics workspace and write KQL queries for errors and slow requests.
Security posture
Review Microsoft Defender for Cloud recommendations (free tier) and fix at least three.
Azure Policy
Assign a policy that blocks resources outside allowed regions and show it working.
Hybrid identity concept
Explain how on-premises Active Directory connects to Entra ID and why companies do it.
Well-Architected review
Review your project against the Azure Well-Architected Framework pillars.
Certification practice
Complete an AZ-900 or AZ-104 practice test and write notes on every wrong answer.
Capstone: Azure web solution
Deploy a complete solution (App Service or containers, Azure SQL, Key Vault, monitoring, IaC, CI/CD) with an architecture diagram and cost estimate.
Internship