AZ-1002: Configure secure access to your workloads using networking with Azure Virtual Network

Course Description

Secure your cloud infrastructure and elevate your network architecture by mastering secure access to workloads using Azure Virtual Network. In this one-day, intermediate-level course, IT professionals and network engineers learn to configure VNet peering, custom routes, Azure DNS, NSGs, and Azure Firewall to protect and connect workloads in Azure. Through practical demonstrations and strategic implementation, you’ll acquire the skills to build robust, secure, and well-architected network environments.

Target Audience

This course is ideal for:

• Azure Administrators, Network Engineers, and Cloud Architects managing secure connectivity and access to Azure workloads

• Systems and Security Administrators responsible for enforcing Azure networking and firewall policies

Prerequisites:

• Basic familiarity with cloud networking concepts and the Azure portal 

Course Outline

Module 1: Configure Virtual Networks

• Design and create Azure Virtual Networks and subnets

• Plan IP addressing for public and private connections

• Associate public IPs and manage private IP assignments 

Module 2: Set Up Azure Virtual Network Peering

• Establish peering between VNets for low-latency connectivity

• Design hub-and-spoke topologies with gateway transit and service chaining 

Module 3: Control Network Traffic with Custom Routes

• Implement user-defined routes to direct traffic across VNets

• Understand and deploy network virtual appliances (NVAs) for advanced traffic flow control 

Module 4: Host Your Domain with Azure DNS

• Create DNS zones and records (A, alias) for Azure resources

• Enhance workload accessibility through custom domain resolution 

Module 5: Harden Virtual Network with Network Security Groups

• Define inbound/outbound rules to control traffic

• Implement Application Security Groups for simplified policy management 

Module 6: Protect Workloads with Azure Firewall

• Deploy Azure Firewall and manage centralized firewall policies

• Evaluate when to use Azure Firewall Premium and Firewall Manager 

HandsOn Experience

Expect 40–50% of the course time dedicated to interactive demos, guided configuration activities, and real-world scenarios—reinforcing how to effectively secure access to workloads using Azure Virtual Network.

Skills You’ll Gain

By completing AZ1002, you will be able to:

• Plan and configure VNets, subnets, and IP addressing schemes

• Implement VNet peering and hub-and-spoke topologies

• Use custom routes and NVAs to control traffic flow

• Deploy Azure DNS for custom domain resolution

• Enforce granular network security policies with NSGs

• Secure workloads using Azure Firewall and policy management