AZ-1002: Configure Secure Access to Your Workloads Using Networking with Azure Virtual Network

Course Prerequisites

Before taking this course, it is recommended that participants have:

• A basic understanding of cloud computing and Microsoft Azure.
• Familiarity with Azure fundamentals, including Azure resources such as VMs, Azure Storage, and Azure Networking.
• Understanding of IP addressing concepts, subnetting, and DNS configuration.
• Experience with network security protocols like firewalls, VPNs, and encryption.
• Familiarity with Azure portal for basic configuration tasks.

Learning Objectives

By the end of this course, you will be able to:

1. Understand the fundamental concepts of Azure Virtual Network (VNet) and its role in connecting cloud resources securely.
2. Create and configure subnets, VNets, and network interfaces for Azure workloads.
3. Implement network security groups (NSGs) to control traffic to and from Azure resources and secure network access.
4. Configure Azure Load Balancers to distribute traffic across multiple cloud resources and ensure high availability.
5. Implement Azure Firewall for advanced network security and traffic filtering.
6. Set up VPN Gateways for secure, encrypted connections between Azure and on-premises resources.
7. Configure Azure ExpressRoute to establish private, dedicated connections between on-premises networks and Azure.
8. Deploy Azure Bastion to securely access virtual machines (VMs) in your Azure Virtual Network without exposing them to the public internet.
9. Implement DNS services in Azure to manage domain names and facilitate efficient routing for cloud applications.
10. Secure virtual networks with advanced features such as network peering, private link, and network segmentation.
11. Understand and implement hybrid networking solutions for extending on-premises networks to Azure, ensuring seamless integration.
12. Monitor and troubleshoot network connectivity issues using Azure tools like Network Watcher and Azure Monitor.

Target Audience

This course is ideal for:

• Network engineers and administrators who need to configure secure and scalable Azure Virtual Networks for cloud workloads.
• Cloud architects who want to design secure, high-performance network solutions for Azure-based applications.
• Azure professionals involved in securing access and managing network connectivity to workloads hosted in Microsoft Azure.
• IT professionals working with hybrid environments, connecting on-premises infrastructure to Azure resources.
• System administrators who aim to ensure optimal network performance, security, and connectivity for cloud applications.