Configure secure access to your workloads using networking with Azure Virtual Network [M-AZ1002]

OVERVIEW

This course is designed for students who are planning to take the Configure Secure Access to your Workloads using Azure Virtual Networking Assessment (APL-1002) and provides a bridge between fundamental level skills and entry-level associate skills.

This course helps learners progress in multiple IT roles, including infrastructure and security administrators and architects.

In this course, the student will have many opportunities to practice configuring and securing network resources through lab based scenarios. Skills developed will include creating and configuring virtual networks, network routing, DNS Zones, DNS Settings, network security groups, and Azure Firewall.

OBJECTIVES

After this course, participants should be able to;

• Configure virtual networks
• Configure Azure Virtual Network peering
• Manage and control traffic flow in your Azure deployment with routes
• Host your domain on Azure DNS
• Configure network security groups
• Configure Azure Firewall

AUDIENCE

This course is designed for students who are planning to take the Configure Secure Access to your Workloads using Azure Virtual Networking Assessment, or students who are performing Azure Administrator network security tasks in their day-to-day job.

CONTENT

Module 1: Configure virtual networks

• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Allocate or assign private IP addresses
• Interactive lab simulation

Module 2: Configure Azure Virtual Network peering

• Determine Azure Virtual Network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Extend peering with user-defined routes and service chaining
• Interactive lab simulation

Module 3: Manage and control traffic flow in your Azure deployment with routes

• Identify routing capabilities of an Azure virtual network
• Exercise – Create custom routes
• What is an NVA?
• Exercise – Create an NVA and virtual machines
• Exercise – Route traffic through the NVA

Module 4: Host your domain on Azure DNS

• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise – Create a DNS zone and an A record by using Azure DNS
• Exercise – Create alias records for Azure DNS

Module 5: Configure network security groups

• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Implement application security groups
• Interactive lab simulation

Module 6: Introduction to Azure Firewall

• What is Azure Firewall?
• How Azure Firewall works
• When to use Azure Firewall and/or Azure Firewall Premium

Module 7: Wrap-up Project - Configure secure access to workloads with Azure virtual networking services

• Introduction
• Exercise – Provide network isolation and segmentation for the web application
• Exercise – Control the network traffic to and from the web application
• Exercise – Protect the web application from malicious traffic and block unauthorized access