Reviews 4,2
Reviews 4,5
AZ-1002 Configure secure access to your workloads using networking with Azure Virtual Network
Without a well-designed network architecture, no cloud operation is truly secure. In Azure, the structure of the Virtual Network determines how reliably workloads are protected against unauthorized access.
Key topics
- Planning and building Azure Virtual Networks.
- Subnets, routing rules, and network security groups.
- Private endpoints and service endpoints for isolated access.
- Hybrid connectivity via VPN Gateway and ExpressRoute.
- Protecting PaaS and IaaS workloads in Azure.
Prerequisite
Knowledge of Azure fundamentals, networking concepts, and IP addressing is required.
Target group
Cloud engineers, network administrators, security professionals, and IT architects who secure and operate Azure infrastructures.
Solid Azure networking knowledge is a core competency for resilient, compliance-ready cloud environments.
Course content
Planning and setting up Azure networks
- Design network topology and architecture
- Define and segment subnets
- Build network infrastructure in Azure
- Plan and assign IP address ranges
- Create and configure public IP addresses
- Assign private IP addresses
- Work through practical lab scenarios
Setting up VNet Peering
- Understand VNet peering concepts and use cases
- Configure gateway transit
- Create peering between VNets
- Combine custom routes with peering
- Work through peering lab scenarios
Controlling traffic in Azure
- Understand routing mechanisms in Azure networks
- Create and apply custom routes
- Deploy Network Virtual Appliances (NVA)
Using DNS services in Azure
- Azure DNS as Microsoft's native DNS service
- Configure DNS zones for domain hosting
- Implement dynamic name resolution with alias records
Configuring Network Security Groups (NSG)
- Understand NSG concepts and structure
- Define inbound and outbound security rules
- Identify active security rules
- Create and prioritize rules
- Implement application security groups
- Apply NSG behavior in lab exercises
Azure Firewall – fundamentals and deployment
- Azure Firewall as a centralized cloud security solution
- How it works: packet filtering and access control
- When to use Azure Firewall
- Azure Firewall Premium: advanced protection features
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What does secure network architecture mean in Azure?
- Secure Azure networks clearly separate workloads and manage access with precision. The foundation is built on virtual networks, security rules, private endpoints, and structured routing within the cloud.
Which networking concepts are at the center?
- The course covers virtual networks, subnetting, network security groups, DNS configuration, and secure communication between Azure resources – building a complete picture of secure network architectures.
Who should attend the AZ-1002 course?
- Recommended for cloud engineers, administrators, and IT architects who plan or manage Azure infrastructures. Also relevant for security professionals who control and secure network access.
What skills does the training build?
- Participants learn to securely configure Azure networks: structuring virtual networks, securing workloads through NSG and Private Link, and building stable routing architectures for complex cloud scenarios.
How are Azure networks protected?
- Covered topics include network security groups for rule-based control, Private Link for isolated service access, service endpoints, and routing configurations to protect sensitive cloud workloads.
What value does segmentation bring to Azure networks?
- Segmentation logically separates network areas, prevents uncontrolled communication, and contains security incidents. Subnet boundaries and security rules protect resources in multi-tier architectures.
What do private endpoints do in Azure?
- Private endpoints bind Azure services directly into a virtual network, eliminating publicly accessible connections. Traffic remains within the Azure infrastructure and is not exposed to the internet.
What real-world scenarios are covered in the course?
- Typical scenarios include building isolated workload environments, securely connecting services via Private Link, access controls for data platforms, and structured network designs for enterprise applications.
