MS-AZ-1002: Configure secure access to your workloads using Azure virtual networking

Module 1: Configure Virtual Networks

• Learn to configure virtual networks and subnets, including IP addressing.

Learning Objectives

• Describe Azure virtual network features and components.
• Identify features and usage cases for subnets and subnetting.
• Identify usage cases for private and public IP addresses.
• Create a virtual network and assign IP addresses.

Prerequisites

• Basic knowledge of virtual networking in cloud environments.
• Familiarity with IP address formats and subnetting.

Module 2: Configure Azure Virtual Network Peering

• Learn to configure Azure Virtual Network peering connections and address transit and connectivity concerns.

Learning Objectives

• Identify usage cases and product features of Azure Virtual Network peering.
• Configure your network to implement Azure VPN Gateway for transit connectivity.
• Extend peering using a hub-and-spoke network with user-defined routes and service chaining.

Prerequisites

• Basic understanding of cloud networking, including virtual networks and virtual machines.
• Familiarity with command-line connectivity testing tools.

Module 3: Manage and Control Traffic Flow in Your Azure Deployment with Routes

• Learn how to control Azure virtual network traffic by implementing custom routes.

Learning Objectives

• Identify the routing capabilities of an Azure virtual network.
• Configure routing within a virtual network.
• Deploy a basic network virtual appliance.
• Configure routing to send traffic through a network virtual appliance.

Prerequisites

• Knowledge of basic networking concepts.
• Familiarity with Azure virtual networking.

Module 4: Host Your Domain on Azure DNS

• Create a DNS zone for your domain name and configure DNS records.

Learning Objectives

• Configure Azure DNS to host your domain.

Prerequisites

• Knowledge of networking concepts such as name resolution and IP addresses.

Module 5: Configure Network Security Groups

• Learn how to implement network security groups and ensure rules are correctly applied.

Learning Objectives

• Determine when to use network security groups.
• Create network security groups.
• Implement and evaluate network security group rules.
• Describe the function of application security groups.

Prerequisites

• Familiarity with Azure virtual networks and resources such as virtual machines.
• Working knowledge of the Azure portal for configuring network security groups.
• Basic understanding of traffic routing and traffic control strategies.

Module 6: Introduction to Azure Firewall

• Describe how Azure Firewall protects Azure Virtual Network resources, including features, rules, deployment options, and administration with Azure Firewall Manager.

Learning Objectives

• Explain how Azure Firewall and Azure Firewall Manager work together to protect Azure virtual networks.
• Evaluate whether Azure Firewall is the right solution to protect Azure virtual networks from malicious incoming and outgoing traffic.
• Evaluate whether Azure Firewall Premium is the right solution for advanced protection capabilities.
• Evaluate whether Azure Firewall Manager is the right solution for deploying policies across multiple firewalls.
• Identify and describe use cases for Azure Firewall and Azure Firewall Manager.

Prerequisites

• Beginner-level knowledge of Azure, including Availability Zones, Azure virtual networks, and ExpressRoute.
• Beginner-level knowledge of networking concepts such as IP addresses, hub-and-spoke topology, subnets, and network packets.
• Beginner-level knowledge of cloud computing concepts such as scalability and availability.

Module 7: Guided Project – Configure Secure Access to Workloads with Azure Virtual Networking Services

• Practice configuring secure access to workloads using Azure virtual networking services.

Learning Objectives

• Create and configure virtual networks.
• Create and configure network security groups (NSGs).
• Create and configure Azure Firewall.
• Configure network routing.
• Create DNS zones and configure DNS settings.

Prerequisites

• Experience using the Azure portal to create resources.
• Experience with cloud networking.
• Completion of the previous modules in this learning path is recommended.