This course is aimed at network engineers and cloud practitioners who already have basic familiarity with Azure. It blends conceptual lessons, hands‑on labs, and mock exams to help you build practical skills and exam readiness.

| Module / Topic | Focus | Outcome |
|---|---|---|
| Fundamentals | VNets, subnets, IP addressing, network security basics | Build and secure core virtual networks |
| Hybrid networking | VPN Gateway, ExpressRoute, site-to-site and point-to-site connectivity | Design secure on-premises ↔ Azure connections |
| Core networking infrastructure | Subnets, private IP strategy, service integration | Implement resilient VNet topologies |
| Routing & BGP | System and custom routes, BGP configuration | Control traffic flow at scale |
| Security & monitoring | NSGs, Azure Firewall, DDoS, Azure Monitor | Protect and observe network workloads |
| Private access patterns | Private endpoints & service endpoints | Securely connect to Azure PaaS services |
| Global traffic management | Azure Traffic Manager, load balancing methods | Design geo-aware and performant routing |
- Fundamentals: Demystify Azure virtual networking and the core building blocks—virtual networks (VNets), subnets, IP addressing, DNS, and baseline network security. Understand how these pieces combine to create secure, scalable cloud networks.
- Hybrid networking: Design and implement hybrid connectivity patterns. Configure VPN Gateway, IPSec site-to-site tunnels, VNet-to-VNet connections, and point-to-site access. Learn ExpressRoute fundamentals for high-throughput, low-latency private connectivity.

- Core networking infrastructure: Learn best practices for building VNets, subnet design, IP allocation strategies, and integrating platform services while maintaining isolation and security.
- Routing: Control traffic using route tables, forced tunneling, and Azure’s routing stack. Configure BGP for dynamic routing across peering, ExpressRoute, and on‑premises networks.

- Security and monitoring: Protect workloads using Network Security Groups (NSGs), Azure Firewall policies, and DDoS Protection. Monitor and troubleshoot networks with Azure Monitor, Network Watcher, and diagnostic logging.

- Private access to Azure services: Implement private endpoints and service endpoints to access platform services (Storage, SQL, etc.) over private network paths, improving security and latency.
Prerequisites: Basic familiarity with Azure concepts (subscriptions, resource groups, core services) and networking fundamentals (IP addressing, routing basics) is recommended. If you’re new to Azure, review the Azure fundamentals materials linked below before proceeding.
- AZ-700 Exam page: https://learn.microsoft.com/certifications/exams/az-700 (official exam skills outline)
- Azure Networking documentation: https://learn.microsoft.com/azure/networking/
- Azure Virtual Network overview: https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview
- Azure Monitor and Network Watcher: https://learn.microsoft.com/azure/azure-monitor/
- Ensure you have an Azure subscription or sandbox tenant to complete labs.
- Review basic networking concepts: CIDR, subnets, routing, and firewall basics.
- Start with the Fundamentals module to solidify core concepts before progressing to hybrid and advanced topics.