AZ-1002 Configure secure access to your workloads using networking with Azure Virtual Network

Target group

This course is designed for students who are planning to take the Configure Secure Access to your Workloads using Azure Virtual Networking Assessment, or students who are performing Azure Administrator network security tasks in their day-to-day job.

Course structure

Module 1: Configure virtual networks

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses
• Interactive lab simulation

Module 2: Configure Azure Virtual Network peering

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining
• Interactive lab simulation

Module 3: Manage and control traffic flow in your Azure deployment with routes

• Identify routing capabilities of an Azure virtual network
• Exercise – Create custom routes
• What is an NVA?
• Exercise – Create an NVA and virtual machines
• Exercise – Route traffic through the NVA

Module 4: Host your domain on Azure DNS

• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise – Create a DNS zone and an A record by using Azure DNS
• Exercise – Create alias records for Azure DNS

Module 5: Configure network security groups

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups
• Interactive lab simulation

Module 6: Introduction to Azure Firewall

• What is Azure Firewall?
• How Azure Firewall works
• When to use Azure Firewall and/or Azure Firewall Premium

Module 7: Wrap-up Project – Configure secure access to workloads with Azure virtual networking services

• Introduction
• Exercise – Provide network isolation and segmentation for the web application
• Exercise – Control the network traffic to and from the web application
• Exercise – Protect the web application from malicious traffic and block unauthorized access