Site icon Digital Thought Disruption

DP-900 for Sysadmins: Building a Hybrid Data Lab on Azure Local with SDN

Paul Bryant

Unlock your DP-900 certification success by getting hands-on with hybrid data fundamentals using Azure Local and SDN Express. This lab guide walks sysadmins through real-world setup and security concepts, step by step.

Table of Contents

  1. Introduction
  2. What is DP-900? Why Use Azure Local for Labs?
  3. Lab Architecture Overview
  4. Prerequisites & Lab Prep
  5. Step 1: Deploying Azure Local (Physical or Nested)
  6. Step 2: SDN Express Setup
  7. Step 3: Creating the Hybrid Network Topology (VNet, Subnets, NSGs, SLB)
  8. Step 4: Deploying Relational (SQL) & Non-Relational (MongoDB) Workloads
  9. Step 5: Securing Data Tiers with SDN & NSG Rules
  10. Step 6: Populating and Querying the Databases
  11. Step 7: Validating Network Isolation
  12. Mapping Lab Steps to DP-900 Exam Objectives
  13. Conclusion & Next Steps

1. Introduction

The DP-900 (Microsoft Azure Data Fundamentals) certification is the foundation for any data professional or sysadmin moving into cloud data services. Passing is easier when you reinforce theory with hands-on work. This guide helps you build a hybrid data lab using Azure Local, allowing you to experience core concepts with real networking and security, skills you’ll actually use in production.

2. What is DP-900? Why Use Azure Local for Labs?

DP-900 covers core database concepts, data workloads, and cloud/hybrid data services. Azure Local, with SDN Express, lets you simulate the same environments found in regulated industries, enterprises, and hybrid deployments. Unlike pure cloud labs, you can fully control networking, storage, and VM deployment, making it perfect for deep practice.

3. Lab Architecture Overview

Below is the target topology:

You’ll isolate the SQL and MongoDB data tiers, using NSGs and SLB rules to control access.

4. Prerequisites & Lab Prep

5. Step 1: Deploying Azure Local (Physical or Nested)

A. Physical Cluster

  1. Install Azure Stack HCI on at least two physical nodes.
  2. Join nodes to Active Directory.
  3. Configure cluster networking (storage, management, workload networks).

B. Nested Lab (Hyper-V Example)

  1. Create VMs for two Azure Local nodes (min. 4 vCPU, 16GB RAM each).
  2. Create internal networks for management and workload.
  3. Install Azure Stack HCI on each VM.
  4. Cluster the nodes and validate.

Tip: Use nested virtualization for risk-free learning and repeatable lab rebuilds.

6. Step 2: SDN Express Setup

SDN Express automates the deployment of SDN infrastructure.

On Management VM (PowerShell):

# Import SDN module
Import-Module SdnExpress

# Start SDN Express wizard
Start-SdnExpress

# Follow prompts:  
# - Choose Topology: OneNode, TwoNode, FourNode (select your setup)
# - Specify management and workload networks
# - Define IP pools for SLB and NC services

Automate with Bicep (Example):

resource sdnController 'Microsoft.NetworkCloud/sdnControllers@2023-09-01' = {
  name: 'sdnController'
  location: resourceGroup().location
  properties: {
    ...
  }
}

(Adjust for your exact environment. Refer to Azure Local/Bicep documentation.)

7. Step 3: Creating the Hybrid Network Topology

A. VNet and Subnet Creation

Using Windows Admin Center:

Using ARM Template Example:

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.Network/virtualNetworks",
      "apiVersion": "2020-06-01",
      "name": "HybridLab-VNet",
      "location": "[resourceGroup().location]",
      "properties": {
        "addressSpace": { "addressPrefixes": [ "10.1.0.0/16" ] },
        "subnets": [
          { "name": "mgmt-subnet",  "properties": { "addressPrefix": "10.1.1.0/24" } },
          { "name": "sql-subnet",   "properties": { "addressPrefix": "10.1.2.0/24" } },
          { "name": "mongo-subnet", "properties": { "addressPrefix": "10.1.3.0/24" } }
        ]
      }
    }
  ]
}

B. NSG and SLB Setup

Example NSG Rule (PowerShell):

New-NetworkControllerAccessControlListRule -Name "Allow-SQL-App" `
  -Action Allow -Protocol TCP -SourceAddressPrefix "10.1.1.0/24" `
  -DestinationAddressPrefix "10.1.2.0/24" -DestinationPortRange 1433

8. Step 4: Deploying Relational and Non-Relational Data Workloads

A. Deploy SQL Server VM

  1. Create a VM in the sql-subnet.
  2. Install SQL Server Express.
  3. Open SQL port 1433 in Windows Firewall.

B. Deploy MongoDB VM

  1. Create a VM in the mongo-subnet.
  2. Install MongoDB Community Edition.
  3. Open MongoDB port 27017 in the firewall.

C. Connect VMs to the SDN VNet

9. Step 5: Securing Data Tiers with SDN & NSG Rules

10. Step 6: Populating and Querying the Databases

A. SQL Server

CREATE DATABASE DP900Lab;
USE DP900Lab;
CREATE TABLE DemoData (ID int PRIMARY KEY, Value nvarchar(50));
INSERT INTO DemoData VALUES (1, 'AzureLocal'), (2, 'DP-900');
SELECT * FROM DemoData;

B. MongoDB

mongo
use DP900Lab
db.demoData.insertMany([{ID: 1, Value: "AzureLocal"}, {ID: 2, Value: "DP-900"}])
db.demoData.find()

11. Step 7: Validating Network Isolation

12. Mapping Lab Steps to DP-900 Exam Objectives

DP-900 ObjectiveLab Section
Describe core data conceptsDatabase setup, VNet and subnet planning
Describe relational data on AzureSQL Server VM deployment, firewall and NSG
Describe non-relational data on AzureMongoDB VM deployment, subnet configuration
Describe analytics workload and tasksSample queries, data validation
Cloud and hybrid data servicesAzure Local + SDN, hybrid topology, NSG/SLB config

Pro Tip: This entire lab gives you scenario-based experience you can reference on exam day.

13. Conclusion & Next Steps

This guided lab demonstrates how core DP-900 concepts map directly to hybrid Azure Local deployments. You practiced deploying both relational and non-relational workloads, reinforced network security, and learned how to use SDN Express for real-world network controls.
For further study, rebuild the lab with additional data services (PostgreSQL, Redis), or script the entire process for automation mastery.

Disclaimer: The views expressed in this article are those of the author and do not represent the opinions of Microsoft, my employer or any affiliated organization. Always refer to the official Microsoft documentation before production deployment.

Exit mobile version