Configure & Manage Virtual Networks — MOC
MS Learn path: Configure and manage virtual networks for Azure administrators · Largest skill area on the AZ-104 exam.
Map / Canvas
The core idea
Virtual networks are Azure’s software-defined networking. You design IP space (CIDR), segment it into subnets, connect VNets to each other (vnet-peering) and to on-premises (vpn-gateway/expressroute), secure traffic (nsg/asg/azure-firewall), route it (route-table/bgp), resolve names (azure-dns/private-dns), and balance load (load-balancer/application-gateway/traffic-manager). One network, many layers — this MOC ties them together.
Concepts (linked from here)
Core topology
Connectivity
Security
Name resolution
Load balancing & traffic
Modules in this path
- 1 · Configure Virtual Networks — design/implement IP addressing & VNets/subnets
- 2 · Configure Virtual Network Peering — vnet-peering, gateway transit, hub & spoke
- 3 · Configure Network Security Groups — nsg/asg
- 4 · Manage & Control Traffic Flow with Routes — UDRs & NVAs
- 5 · Host Your Domain on Azure DNS — azure-dns
- 6 · Introduction to Azure Load Balancer — load-balancer
- 7 · Introduction to Azure Application Gateway — application-gateway (WAF)
- 8 · Introduction to Azure Network Watcher — network-watcher
Hybrid connectivity is covered conceptually here via vpn-gateway and expressroute (no dedicated module in this path; see the associated hybrid-networking learn path).
Skills measured (exam blueprint)
- Configure and manage virtual networks
- Configure and manage virtual network peering
- Configure and manage virtual network routing & DNS
- Configure and manage network security
- Configure and manage Azure load balancing / traffic