Azure Network Engineer Associate Boot Camp

Azure Network Engineer Associate Boot Camp

DreamsPlus presents an all-inclusive Azure Network Engineer Associate Boot Camp in Singapore, available both in-person and online. This expertly crafted program delivers practical, hands-on training to prepare participants for the prestigious Microsoft Azure Network Engineer Associate certification. Designed for aspiring network professionals in Singapore, the boot camp focuses on equipping you with the essential skills and knowledge to thrive in your Azure certification journey and excel as a network engineering professional.

Course Overview:

• Learn network engineering for the Azure Network Engineer Associate certification.
• Understand Azure networking for Microsoft certification.
• Develop secure, scalable network solutions.
• Gain hands-on experience in focused workshops

Design and implement core networking infrastructure (25–30%)

 Design and implement IP addressing for Azure resources

• Create and put into action address spaces and network segmentation.
• Form an online network (VNet).
• Prepare and set up subnetting for Azure Bastion, VNet gateways, private endpoints, service endpoints, application gateways, firewalls, and VNet-integrated platform services, among other services.
• Arrange and set up subnet delegation.
• Create and set up dedicated or shared subnets.
• Make a prefix for IP addresses that are public.
• When to utilize a public IP address prefix is up to you.
• Create and put into action a unique prefix for your public IP address (bring your own IP)
• Make your IP address public.
• Link resources to public IP addresses
• Update the SKU for IP addresses.

Design and implement name resolution

• Resolution of design names within a VNet
• Configure VNet’s DNS settings.
• Create public DNS zones.
• Create private DNS zones.
• Set up your private and public DNS zones.
• Connect a VNet to a private DNS zone.
• Create and put into use an Azure DNS Private Resolver.

Design and implement VNet connectivity and routing

• Create a service chain that incorporates gateway transit design.
• Put VNet peering into practice.
• Utilizing Azure Virtual Network Manager, create and maintain virtual networks.
• Create and put into action user-defined routes (UDRs).
• Link a subnet to a route table.
• Set up compelled tunneling.
• Analyze and fix problems with routing.
• Design and implement Azure Route Server
• Identify appropriate use cases for a network address translation (NAT) gateway
• Implement a NAT gateway

Monitor networks

• Set up Azure Network Watcher’s monitoring, network diagnostics, and logging.
• Use Azure to track and troubleshoot network health. Observer of Networks
• Use Azure to monitor and troubleshoot networks. Keep an eye on Network Insights
• Turn on and keep an eye on distributed denial-of-service (DDoS) defenses.
• Examine the network security suggestions that Microsoft Defender found for the Cloud Secure Score.
• Examine the network security suggestions that Microsoft Defender for Cloud Attack Path
• Analysis has been identified.
• Use Microsoft Defender for Cloud Security Explorer to find network resources.

 Design, implement, and manage connectivity services (20–25%)

• Design, implement, and manage a site-to-site VPN connection
• Create a site-to-site VPN connection with high availability in mind.
• Choose the right VNet gateway stock-keeping unit (SKU) based on the site-to-site VPN needs.
• Establish a VPN link between two locations.
• Determine when to use a VPN connection that is route-based or policy-based.
• Establish a local network gateway and configure it.
  Establish and set up an Internet Key Exchange (IKE)/IPsec policy.
• Establish a virtual network gateway and configure it.
• Identify and fix problems with virtual network gateway connectivity.
• Put Azure Extended Network into Practice

Design, implement, and manage a point-to-site VPN connection

• Choose the right virtual network gateway SKU for your point-to-site VPN needs.
• Choose and set up a kind of tunnel.
• Choose a suitable authentication technique.
• Set up authentication using RADIUS.
• Use Microsoft Entra ID to configure authentication.
  Use a file with the VPN client setup.
• Determine the cause of and fix client-side and authentication problems.
• Describe Azure’s needs for the Always On VPN.
• Indicate the prerequisites for the Azure Network Adapter.

Design, implement, and manage Azure ExpressRoute

• Choose a model of connectivity for ExpressRoute.
• Pick a suitable ExpressRoute tier and SKU.
• ExpressRoute must be designed and implemented to satisfy specifications for disaster recovery, redundancy, and cross-regional connection.
• Create and execute ExpressRoute options, such as ExpressRoute Direct, FastPath, and Global Reach.
• Configure Azure private peering. Select either Azure private peering alone, Microsoft peering only, or both.
• Set up Microsoft Peer Exchange.
• Establish and set up an ExpressRoute gateway.
• Link a virtual network to a circuit using ExpressRoute.
• Make a route advertisement configuration recommendation.
• Set up encryption using ExpressRoute
• Put Bidirectional Forwarding Detection into Practice
• Examine and fix problems with the ExpressRoute connection.

Design and implement an Azure Virtual WAN architecture

• Choose an SKU for virtual WAN.
• Create a virtual wide area network design, choosing the services and types that you want.
• Establish a virtual WAN hub.
• Select the proper scale unit for every kind of gateway.
• Put a gateway in place inside a virtual WAN hub.
• Set up the virtual hub routing.
• For cloud connectivity, combine a third-party NVA with a virtual WAN hub.

 Design and implement application delivery services (15–20%)

Design and implement Azure Load Balancer and Azure Traffic Manager

• Connect needs to Azure Load Balancer’s features and capabilities
• Determine which Azure Load Balancer use cases are appropriate.
• Select a tier and SKU for Azure Load Balancer.
• Select between load balancers that are internal and external.
• Select between load balancers that are regional or global.
• Establish and set up an Azure load balancer.
• Put Azure Traffic Manager into practice.
• Put in place a load balancer gateway.
• Put a load balancing rule into action.
• Establish and set up incoming NAT rules.
• Establish and set up clear outbound rules, such as SNAT (source network address translation).

Design and implement Azure Application Gateway

• Connect needs to Azure Application Gateway features and capabilities
• Determine which use cases are suitable for Azure Application Gateway.
• Select between autoscale and manual.
• Make an end-to-end pool.
• Set up health probes.
• Set up listeners.
• Set up the routing rules.
• Set up the HTTP settings.
• Set up TLS, or Transport Layer Security.
• Set up rewrite sets.

Design and implement Azure Front Door

• Connect needs to Azure Front Door features and capabilities
• Determine which use cases are suitable for Azure Front Door.
• Select the proper tier.
• Set up an Azure Front Door, taking into account sources, endpoints, and routing.
• Set up end-to-end SSL encryption and SSL termination.
• Set up the caching.
• Set up the acceleration of traffic.
• Put rules in place and redirect and rewrite URLs.
• Use Azure Private Link in Azure Front Door to secure an origin.

Design and implement private access to Azure services (10–15%)

Design and implement Azure Private Link service and Azure private endpoints

• Make a private endpoint plan.
• Establish private endpoints
• Set up private endpoint access.
• Establish a service for private links.
• Connect Private Endpoints and Private Links to DNS
• Connect a Private Link service to customers who are located on-site.

Design and implement service endpoints

• Select a service endpoint’s use case.
• Establish service endpoints
• Establish service endpoint policies.
• Set up service endpoint access.

Design and implement Azure network security services (15–20%)

Implement and manage network security groups

• Form an NSG (network security group).
• Link a resource and an NSG together.
• Form a group for application security (ASG).
• Connect a network interface card (NIC) to an ASG.
• Establish and set up NSG rules.
• Analyze NSG flow records
• Verify the NSG flow regulations.
• Check the IP traffic.
• Set up an NSG to manage servers remotely, including Azure Bastion.

Design and implement Azure Firewall and Azure Firewall Manager

• Connect needs to Azure Firewall’s features and capabilities
• Choose the proper Azure Firewall SKU.
• Create a deployment plan for Azure Firewall.
• Construct and put into action an Azure firewall deployment.
  Establish Azure firewall rules.
• Establish and carry out policies for Azure Firewall Manager.
• By installing Azure Firewall inside an Azure Virtual WAN hub, you may create a secure hub.

Design and implement a Web Application Firewall (WAF) deployment

• Connect criteria to WAF’s features and capabilities.
• Create a deployment strategy for WAF.
• Set up the mode for detection or prevention.
• Set up rule settings on Azure Front Door for WAF.
  Set up WAF rule settings on the application gateway.
• Put in place a WAF policy.
• Attach a WAF policy.