AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

Course Summary

This course prepares IT professionals to plan, implement, and manage Azure networking solutions across five core domains: core network infrastructure, hybrid connectivity, application delivery, private access to Azure services, and network security. Throughout the course participants will learn how to design resilient, scalable, and secure networking architectures in Azure, troubleshoot connectivity issues, and optimize network performance. Upon successful completion of the course participants will gain the skills needed to prepare for taking the Microsoft Certified: Azure Network Engineer Associate certification exam.

Prerequisites:

In order to succeed in this course you will need:

Experience creating and managing compute, storage, and networking resources in Azure
An understanding of core networking fundamentals including name resolution, network protocols, and network address management
Familiarity with Azure core services

Purpose	Learn the necessary skills needed to prepare for taking the AZ-700: Designing and ImplementingMicrosoft Azure Networking Solutions certification exam
Audience	IT professionals who are responsible for planning, implementing, and managing Azure networking solutions
Role	Network Engineers \| Cloud Solutions Architects \| Azure Administrators \| DevOps Engineers \| Technical Managers
Skill level	Intermediate
Style	Lecture \| Hands-on Activities \| Labs
Duration	3 days
Related technologies	Cloud \| Azure services

Learning objectives

Build and configure virtual networks in Azure
Connect Azure environments to on-premises networks using VPN, ExpressRoute, and Virtual WAN
Distribute and optimize application traffic using Azure load balancing and content delivery tools
Securely connect Azure services using private endpoints and service endpoints
Protect Azure networks using firewalls, network security groups, and web application firewalls
Monitor network performance, diagnose connectivity issues, and respond to security threats

What you'll learn:

In this AZ-700: Designing and Implementing Microsoft Azure Networking Solutions course, you'll learn:

Design and Implement Core Networking Infrastructure

Design and implement IP addressing for Azure resources
- Plan and implement network segmentation and address spaces
- Create a virtual network (VNet)
- Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion
- Plan and configure subnet delegation
- Plan and configure shared or dedicated subnets
- Create a prefix for public IP addresses
- Choose when to use a public IP address prefix
- Plan and implement a custom public IP address prefix (bring your own IP)
- Create a public IP address
- Associate public IP addresses to resources
Design and implement name resolution
- Design name resolution inside a VNet
- Configure DNS settings for a VNet
- Design public DNS zones
- Design private DNS zones
- Configure public and private DNS zones
- Link a private DNS zone to a VNet
- Design and implement Azure DNS Private Resolver
Design and implement VNet connectivity and routing
- Design service chaining, including gateway transit
- Implement VNet peering
- Implement and manage virtual network connectivity by using Azure Virtual Network Manager
- Design and implement user-defined routes (UDRs)
- Associate a route table with a subnet
- Configure forced tunneling
- Diagnose and resolve routing issues
- Design and implement Azure Route Server
- Identify appropriate use cases for Azure NAT Gateway
- Implement Azure NAT Gateway
Monitor networks
- Configure monitoring, network diagnostics, and logs in Azure Network Watcher
- Monitor and troubleshoot network health by using Azure Network Watcher
- Monitor and troubleshoot networks by using Azure Monitor for Networks
- Activate and monitor distributed denial-of-service (DDoS) protection
- Evaluate network security recommendations identified by Microsoft Defender for Cloud Secure Score
- Evaluate network security recommendations identified by Microsoft Defender for Cloud attack oaths
- Identify network resources by using Microsoft Defender for Cloud Security Explorer

Design, Implement, and Manage Connectivity Services

Design, implement, and manage a site-to-site VPN connection
- Design a site-to-site VPN connection, including for high availability
- Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements
- Implement a site-to-site VPN connection
- Identify when to use a policy-based VPN versus a route-based VPN connection
- Create and configure a local network gateway
- Create and configure an IPsec/Internet Key Exchange (IKE) policy
- Create and configure a virtual network gateway
- Diagnose and resolve virtual network gateway connectivity issues
- Implement Azure Extended Network
Design, implement, and manage a point-to-site VPN connection
- Select an appropriate virtual network gateway SKU for point-to-site VPN requirements
- Select and configure a tunnel type
- Select an appropriate authentication method
- Configure RADIUS authentication
- Configure authentication by using Microsoft Entra ID
- Implement a VPN client configuration file
- Diagnose and resolve client-side and authentication issues
- Specify Azure requirements for Always On VPN
- Specify Azure requirements for Azure Network Adapter
Design, implement, and manage Azure ExpressRoute
- Select an ExpressRoute connectivity model
- Select an appropriate ExpressRoute SKU and tier
- Design and implement ExpressRoute to meet requirements, including cross-region connectivity, redundancy, and disaster recovery
- Design and implement ExpressRoute options, including Global Reach, FastPath, and ExpressRoute Direct
- Choose between Azure private peering only, Microsoft peering only, or both
- Configure Azure private peering
- Configure Microsoft peering
- Create and configure an ExpressRoute gateway
- Connect a virtual network to an ExpressRoute circuit
- Recommend a route advertisement configuration
- Configure encryption over ExpressRoute
- Implement Bidirectional Forwarding Detection
- Diagnose and resolve ExpressRoute connection issues
Design and implement an Azure Virtual WAN architecture
- Select a Virtual WAN SKU
- Design a Virtual WAN architecture, including selecting types and services
- Create a virtual hub in Virtual WAN
- Choose an appropriate scale unit for each gateway type
- Deploy a gateway into a virtual hub
- Configure virtual hub routing
- Integrate a virtual hub with a third-party NVA for cloud connectivity

Design and Implement Application Delivery Services

Design and implement Azure Load Balancer and Azure Traffic Manager
- Map requirements to features and capabilities of Azure Load Balancer
- Identify appropriate use cases for Azure Load Balancer
- Choose an Azure Load Balancer SKU and tier
- Choose between public and internal load balancers
- Choose between regional and cross-region load balancers
- Create and configure an Azure Load Balancer
- Implement Azure Traffic Manager
- Implement Gateway Load Balancer
- Implement a load balancing rule
- Create and configure inbound NAT rules
- Create and configure explicit outbound rules, including source network address translation (SNAT)
Design and implement Azure Application Gateway
- Map requirements to features and capabilities of Azure Application Gateway
- Identify appropriate use cases for Azure Application Gateway
- Choose between manual and autoscale
- Create a backend pool
- Configure health probes
- Configure listeners
- Configure routing rules
- Configure HTTP settings
- Configure Transport Layer Security (TLS)
- Configure rewrite rule sets
Design and implement Azure Front Door
- Map requirements to features and capabilities of Azure Front Door
- Identify appropriate use cases for Azure Front Door
- Choose an appropriate tier
- Configure an Azure Front Door, including routing, origins, and endpoints
- Configure TLS termination and end-to-end TLS encryption
- Configure caching
- Configure traffic acceleration
- Implement rules, URL rewrite, and URL redirect
- Secure an origin by using Azure Private Link in Azure Front Door

Design and Implement Private Access to Azure Services

Design and implement Azure Private Link service and Azure private endpoints
- Plan private endpoints
- Create private endpoints
- Configure access to private endpoints
- Create a Private Link service
- Integrate Private Link and Private Endpoint with DNS
- Integrate a Private Link service with on-premises clients
Design and implement service endpoints
- Choose when to use a service endpoint
- Create service endpoints
- Configure service endpoint policies
- Configure access to service endpoints

Design and Implement Azure Network Security Services

Implement and manage network security groups
- Create a network security group (NSG)
- Associate a NSG to a resource
- Create an application security group (ASG)
- Associate an ASG to a network interface
- Create and configure NSG inbound and outbound security rules
- Implement virtual network flow logs
- Interpret virtual network flow logs
- Verify IP flow
- Configure an NSG for remote server administration, including Azure Bastion
- Implement and manage virtual network security by using Azure Virtual Network Manager
Design and implement Azure Firewall and Azure Firewall Manager
- Map requirements to features and capabilities of Azure Firewall
- Select an appropriate Azure Firewall SKU
- Design an Azure Firewall deployment
- Create and implement an Azure Firewall deployment
- Configure Azure Firewall rules
- Create and implement Azure Firewall Manager policies
- Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub
Design and implement a Web Application Firewall (WAF) deployment
- Map requirements to features and capabilities of WAF
- Design a WAF deployment
- Configure detection or prevention mode
- Configure rule sets for WAF on Azure Front Door
- Configure rule sets for WAF on Application Gateway
- Implement a WAF policy
- Associate a WAF policy

AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

Real-World Content

Project-focused demos and labs using your tool stack and environment, not some canned "training room" lab.

Expert Practitioners

Industry experts that bring their battle scars into the classroom.

Experiential Learning

More coding than lecture, coupled with architectural and design discussions.

Tailored Outlines

Once-size-fits-all doesn't apply to training teams. That's where we come in!

Dive in and learn more

When transforming your workforce, it’s important to have expert advice and tailored solutions. We can help. Tell us your unique needs and we'll explore ways to address them.

Let's chat

First name*

Last name*

Business email*

Company*

Job title*

Phone*

Country*

Tell us about what you’re looking to accomplish:

By clicking submit, you agree to our Privacy Policy and Terms of Use, and consent to receive marketing emails from Pluralsight.

AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

Course Summary

Purpose

Audience

Role

Skill level

Style

Duration

Related technologies

Learning objectives

What you'll learn:

In this AZ-700: Designing and Implementing Microsoft Azure Networking Solutions course, you'll learn:

AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

Real-World Content

Expert Practitioners

Experiential Learning

Tailored Outlines

Dive in and learn more