AZ-104: Configure and manage virtual networks for Azure administrators

• Module 1: You will learn to configure virtual networks and subnets, including IP addressing.

After completing this module, you will be able to:

• Describe virtual network features and components.
• Identify features and usage cases for subnets and subnetting.
• Identify usage cases for private and public IP addresses.
• Create and determine which resources require public IP addresses.
• Create and determine which resources require private IP addresses.
• Create virtual networks.
• Module 2: You will learn how to implement network security groups and ensure network security group rules are correctly applied.

After completing this module, you will be able to:

• Determine when to use network security groups.
• Implement network security group rules.
• Evaluate network security group effective rules.
• Module 3: You will learn how to configure the Azure Firewall including firewall rules.

After completing this module, you will be able to:

• Determine when to use Azure Firewall.
• Implement Azure Firewall including firewall rules
• Module 4: You will learn how to configure Azure DNS including custom domain names and record sets.

After completing this module, you will be able to:

• Identify features and usage cases for domains, custom domains, and private zones.
• Verify custom domain names using DNS records.
• Implement DNS zones, DNS delegation, and DNS record sets.
• Module 5: You will learn to configure a VNet peering connection and address transit and connectivity concerns.

After completing this module, you will be able to:

• Identify usage cases and product features of virtual network peering.
• Configure gateway transit, connectivity, and service chaining.
• Module 6: You will learn how to create VPN gateways and securely connect your company sites to Azure.

After completing this module, you will be able to:

• Identify features and usage cases for VPN gateways.
• Implement high availability scenarios.
• Configure site-to-site VPN connections using a VPN gateway.
• Module 7: You will learn how to configure ExpressRoute and Virtual WAN to provide connection services.

After completing this module, you will be able to:

• Identify features and usage cases for ExpressRoute.
• Coexist site-to-site and ExpressRoute networks.
• Identify features and usage cases for virtual WAN.
• Module 8: You will learn how to configure routes including endpoints and private links.

After completing this module, you will be able to:

• Implement system routes and user-defined routes.
• Configure a custom route.
• Implement service endpoints.
• Identify features and usage cases for private links and endpoint services.
• Module 9: You will learn how to configure an internal or public load balancer.

After completing this module, you will be able to:

• Identify features and usage cases for Azure load balancer.
• Implement public and internal Azure load balancers.
• Configure load balancer SKUs, backend pools, session persistence, and health probes.
• Module 10: You will learn how to configure an Azure Application Gateway.

After completing this module, you will be able to:

• Identify features and usage cases for Azure Application Gateway.
• Implement Azure Application Gateway, including selecting a routing method.
• Configure gateway features such as routing rules.
• Module 11: In this module, you will learn how to plan and implement an IP addressing scheme for virtual networks and virtual machines in Azure.

In this module, you will:

• Identify the private IP addressing capabilities of Azure virtual networks.
• Identify the public IP addressing capabilities of Azure.
• Identify the requirements for IP addressing when integrating with on-premises networks.
• Module 12: Use virtual network peering to enable communication across virtual networks in a way that's secure and minimally complex.

In this module, you will:

• Identify use cases for virtual network peering.
• Identify the features and limitations of virtual network peering.
• Configure peering connections between virtual networks.
• Module 13: Learn how to host your domain on Azure DNS.

In this module, you will:

• Configure Azure DNS to host your domain
• Module 14: Learn how to control Azure virtual network traffic by implementing custom routes.

In this module, you will:

• Identify the routing capabilities of an Azure virtual network
• Configure routing within a virtual network
• Deploy a basic network virtual appliance
• Configure routing to send traffic through a network virtual appliance
• Module 15: In this module, you will learn how to use Azure Load Balancer to distribute traffic between multiple virtual servers or services.

In this module, you will:

• Identify the features and capabilities of Azure Load Balancer
• Deploy and configure an Azure load balancer

• Module 1: Configure virtual networks
• Introduction
• Plan virtual networks
• Create subnets
• Create virtual networks
• Plan IP addressing
• Create public IP addressing
• Associate public IP addresses
• Associate private IP addresses
• Knowledge check
• Summary and resources
• Module 2: Configure network security groups
• Introduction
• Implement network security groups
• Determine network security group rules
• Determine network security group effective rules
• Create network security group rules
• Knowledge check
• Summary and resources
• Module 3: Configure Azure Firewall
• Introduction
• Determine Azure Firewall uses
• Create Azure Firewalls
• Create firewall rules
• Knowledge check
• Summary and resources
• Module 4: Configure Azure DNS
• Introduction
• Identify domains and custom domains
• Verify custom domain names
• Create Azure DNS zones
• Delegate DNS domains
• Add DNS record sets
• Plan for private DNS zones
• Determine private zone scenarios
• Knowledge check
• Summary and resources
• Module 5: Configure virtual network peering
• Introduction
• Determine virtual network peering uses
• Determine gateway transit and connectivity
• Create virtual network peering
• Determine service chaining uses
• Knowledge check
• Summary and resources
• Module 6: Configure VPN Gateway
• Introduction
• Determine VPN gateway uses
• Create site-to-site connections
• Create the gateway subnet
• Create the VPN gateway
• Determine the VPN gateway type
• Determine gateway SKU and generation
• Create the local network gateway
• Setup the on-premises VPN gateway
• Create the VPN connection
• Determine high availability scenarios
• Knowledge check
• Summary and resources
• Module 7: Configure ExpressRoute and Virtual WAN
• Introduction
• Determine ExpressRoute uses
• Determine ExpressRoute capabilities
• Coexist site-to-site and ExpressRoute
• Compare intersite connection options
• Determine Virtual WAN uses
• Knowledge check
• Summary and resources
• Module 8: Configure network routing and endpoints
• Introduction
• Review system routes
• Identify user-defined routes
• Examine a routing example
• Determine service endpoint uses
• Determine service endpoint services
• Identify private link uses
• Knowledge check
• Summary and resources
• Module 9: Configure Azure Load Balancer
• Introduction
• Determine Azure load balancer uses
• Implement a public load balancer
• Implement an internal load balancer
• Determine load balancer SKUs
• Create backend pools
• Create load balancer rules
• Configure session persistence
• Create health probes
• Knowledge check
• Summary and resources
• Module 10: Configure Azure Application Gateway
• Introduction
• Implement Application Gateway
• Determine Application Gateway routing
• Application Gateway component set up
• Knowledge check
• Summary and resources
• Module 11: Design an IP addressing schema for your Azure deployment
• Introduction
• Network IP addressing and integration
• Public and private IP addressing in Azure
• Plan IP addressing for your networks
• Exercise - Design and implement IP addressing for Azure virtual networks
• Summary
• Module 12: Distribute your services across Azure virtual networks and integrate them by using virtual network peering
• Introduction
• Connect services by using virtual network peering
• Exercise - Prepare virtual networks for peering by using Azure CLI commands
• Exercise - Configure virtual network peering connections by using Azure CLI commands
• Exercise - Verify virtual network peering by using SSH between Azure virtual machines
• Summary
• Module 13: Host your domain on Azure DNS
• Introduction
• What is Azure DNS?
• Configure Azure DNS to host your domain
• Exercise - Create a DNS zone and an A record by using Azure DNS
• Dynamically resolve resource name by using alias record
• Exercise - Create alias records for Azure DNS
• Summary
• Module 14: Manage and control traffic flow in your Azure deployment with routes
• Introduction
• Identify routing capabilities of an Azure virtual network
• Exercise - Create custom routes
• What is an NVA?
• Exercise - Create an NVA and virtual machines
• Exercise - Route traffic through the NVA
• Summary
• Module 15: Improve application scalability and resiliency by using Azure Load Balancer
• Introduction
• Azure Load Balancer features and capabilities
• Configure a public load balancer
• Exercise - Configure a public load balancer
• Internal load balancer
• Summary