Details

MCA Microsoft Certified Associate Azure Network Engineer Study Guide


MCA Microsoft Certified Associate Azure Network Engineer Study Guide

Exam AZ-700
1. Aufl.

von: Puthiyavan Udayakumar, Kathiravan Udayakumar

38,99 €

Verlag: Wiley
Format: EPUB
Veröffentl.: 15.09.2022
ISBN/EAN: 9781119872931
Sprache: englisch
Anzahl Seiten: 768

DRM-geschütztes eBook, Sie benötigen z.B. Adobe Digital Editions und eine Adobe ID zum Lesen.

Beschreibungen

<p><b>Prepare to take the NEW Exam AZ-700 with confidence and launch your career as an Azure Network Engineer </b></p> <p>Not only does <i>MCA Microsoft Certified Associate Azure Network Engineer Study Guide: Exam AZ-700</i> help you prepare for your certification exam, it takes a deep dive into the role and responsibilities of an Azure Network Engineer, so you can learn what to expect in your new career. You’ll also have access to additional online study tools, including hundreds of bonus practice exam questions, electronic flashcards, and a searchable glossary of important terms. Prepare smarter with Sybex's superior interactive online learning environment and test bank.</p> <p>Exam AZ-700, Designing and Implementing Microsoft Azure Networking Solutions, measures your ability to design, implement, manage, secure, and monitor technical tasks such as hybrid networking; core networking infrastructure; routing; networks; and private access to Azure services. With this in-demand certification, you can qualify for jobs as an Azure Network Engineer, where you will work with solution architects, cloud administrators, security engineers, application developers, and DevOps engineers to deliver Azure solutions. This study guide covers 100% of the objectives and all key concepts, including:</p> <ul> <li>Design, Implement, and Manage Hybrid Networking</li> <li>Design and Implement Core Networking Infrastructure</li> <li>Design and Implement Routing</li> <li>Secure and Monitor Networks</li> <li>Design and Implement Private Access to Azure Services</li> </ul> <p>If you’re ready to become the go-to person for recommending, planning, and implementing Azure networking solutions, you’ll need certification with Exam AZ-700. This is your one-stop study guide to feel confident and prepared on test day. Trust the proven Sybex self-study approach to validate your skills and to help you achieve your career goals!</p>
<p>Introduction xxv</p> <p>Assessment Test xxxvii</p> <p><b>Chapter 1 Getting Started with AZ-700 Certification for Azure Networking 1</b></p> <p>Basics of Cloud Computing and Networking 2</p> <p>The Need for Networking Infrastructure 3</p> <p>The Need for the Cloud 3</p> <p>Basics of Networking 6</p> <p>Enterprise Cloud Networking 10</p> <p>Microsoft Azure Overview 11</p> <p>Azure Cloud Foundation 12</p> <p>Azure Global Infrastructure 14</p> <p>Azure Networking Terminology 20</p> <p>Azure Networking Overview 21</p> <p>Azure Networking Services 23</p> <p>Azure Virtual Network 26</p> <p>VNet Concepts and Best Practices 28</p> <p>Deploying a Virtual Network with Azure PowerShell 35</p> <p>Configure Public IP Services 37</p> <p>Basic SKUs 38</p> <p>Standard SKUs 39</p> <p>Configure a Basic SKU Public IP 40</p> <p>Configure a Standard SKU Public IP with Zones 40</p> <p>Configuring Domain Name Services 40</p> <p>Configure an Azure DNS Zone and Record Using Azure PowerShell 42</p> <p>Configuring Cross-Virtual Network Connectivity with Peering 43</p> <p>Configuring Peering between Two Virtual Networks in the Same Region 45</p> <p>Configuring Virtual Network Traffic Routing 46</p> <p>Using Forced Tunneling to Secure the VNet Route 52</p> <p>Configuring Internet Access with Azure Virtual NAT 53</p> <p>Deploy the NAT Gateway Using Azure PowerShell 54</p> <p>Summary 56</p> <p>Exam Essentials 56</p> <p>Hands-On Lab: Design and Deploy a Virtual Network via the Azure Portal 57</p> <p>Activity 1: Prepare the Network Schema 58</p> <p>Activity 2: Build the Aviation Resource Group 60</p> <p>Activity 3a: Build the CoreInfraVnet Virtual Network and Subnets 60</p> <p>Activity 3b: Build the EngineeringVnet Virtual Network and Subnets 64</p> <p>Activity 3c: Build the BranchofficeVnet Virtual Network and Subnets 66</p> <p>Activity 4: Validate the Build of VNets and Subnets 68</p> <p>Review Questions 70</p> <p><b>Chapter 2 Design, Deploy, and Manage a Site-to-Site VPN Connection and Point-to-Site VPN Connection 75</b></p> <p>Overview of Azure VPN Gateway 76</p> <p>Designing an Azure VPN Connection 79</p> <p>Design Pattern 1 86</p> <p>Design Pattern 2 87</p> <p>Design Pattern 3 88</p> <p>Choosing a Virtual Network Gateway SKU for Site-to-Site VPN 89</p> <p>Using Policy-Based VPNs vs. Route-Based VPNs 92</p> <p>Building and Configuring a Virtual Network Gateway 94</p> <p>Building and Configuring a Local Network Gateway 97</p> <p>Building and Configuring an IPsec/IKE Policy 101</p> <p>Configuration Workflow 104</p> <p>Diagnosing and Resolving VPN Gateway Connectivity Issues 109</p> <p>Choosing a VNet Gateway SKU for Point-to-Site VPNs 112</p> <p>Configuring RADIUS, Certificate-Based, and Azure AD Authentication 116</p> <p>Configuration Workflow for Native Azure Certification Authentication 117</p> <p>Configuration Workflow for Native Azure Active Directory 124</p> <p>Configuration Workflow for Windows Active Directory 127</p> <p>Diagnosing and Resolving Client-Side and Authentication Issues 133</p> <p>Summary 136</p> <p>Exam Essentials 136</p> <p>Review Questions 140</p> <p><b>Chapter 3 Design, Deploy, and Manage Azure ExpressRoute 145</b></p> <p>Getting Started with Azure ExpressRoute 146</p> <p>Key Use Case for ExpressRoute 151</p> <p>ExpressRoute Deployment Model 151</p> <p>Choosing Between the Network Service Provider and ExpressRoute Direct 153</p> <p>Designing and Deploying Azure Cross-Region Connectivity between Multiple ExpressRoute Locations 156</p> <p>Selecting ExpressRoute Circuit SKUs 156</p> <p>Estimating Price Based on ExpressRoute SKU 156</p> <p>Select a Peering Location 157</p> <p>Select the Proper ExpressRoute Circuit 157</p> <p>Select a Billing Model 159</p> <p>Select a High Availability Design 159</p> <p>Pick a Business Continuity and Disaster Recovery Design Pattern 162</p> <p>Choosing an Appropriate ExpressRoute SKU and Tier 169</p> <p>Designing and Deploying ExpressRoute Global Reach 171</p> <p>Deploying ExpressRoute Global Reach 173</p> <p>Use Case 1: Enabling Circuits in the Same Region 173</p> <p>Use Case 2: Enabling Circuits in Different Regions 174</p> <p>Designing and Deploying ExpressRoute FastPath 175</p> <p>Evaluate Private Peering Only, Microsoft Peering Only, or Both 176</p> <p>Setting Up Private Peering 178</p> <p>Setting Up Microsoft Peering 181</p> <p>Building and Configuring an ExpressRoute Gateway 182</p> <p>Connect a Virtual Network to an ExpressRoute Circuit 186</p> <p>Recommend a Route Advertisement Configuration 190</p> <p>Configure Encryption over ExpressRoute 191</p> <p>Deploy Bidirectional Forwarding Detection 192</p> <p>Diagnose and Resolve ExpressRoute Connection Issues 193</p> <p>Summary 196</p> <p>Exam Essentials 196</p> <p>Review Questions 199</p> <p><b>Chapter 4 Design and Deploy Core Networking Infrastructure: Private IP and DNS 203</b></p> <p>Designing Private IP Addressing for VNets 204</p> <p>Deploying a VNet 210</p> <p>Preparing Subnetting for Services 213</p> <p>Subnetting Design Considerations 214</p> <p>Example Case Study: Preparing Subnetting for Services 218</p> <p>Configuring Subnetting for Services 220</p> <p>Preparing and Configuring a Subnet Delegation 223</p> <p>Configure Subnet Delegation 225</p> <p>Planning and Configuring Subnetting for Azure Route Server 226</p> <p>Designing and Configuring Public DNS Zones 231</p> <p>Creating an Azure DNS Zone and Record Using PowerShell 233</p> <p>Designing and Configuring Private DNS Zones 235</p> <p>Creating a Private DNS Zone and Record Using PowerShell 238</p> <p>Designing Name Resolution Inside a VNet 240</p> <p>VMs and Role Instances 243</p> <p>Web Apps 243</p> <p>Linking a Private DNS Zone to a VNet 245</p> <p>Summary 248</p> <p>Exam Essentials 249</p> <p>Review Questions 251</p> <p><b>Chapter 5 Design and Deploy Core Networking Infrastructure and Virtual WANs 255</b></p> <p>Overview of Virtual Network Peering, Service Chaining, and Gateway Transit 256</p> <p>Configure VPN Gateway Transit for Virtual Network Peering 258</p> <p>Design VPN Connectivity between VNets 263</p> <p>Deploy VNet Peering 266</p> <p>Deployment Model 1: Running in the Same Azure Subscription and Deployed Using Azure Resource Manager 267</p> <p>Deployment Model 2: Running in Different Subscriptions and Deploying Using Resource Manager 270</p> <p>Deployment Model 3: Running in the Same Subscription and Deploying One VNet Using Resource Manager and Another Using the Classic Model 273</p> <p>Deployment Model 4: Running in Different Subscriptions and Deploying One VNet Using Resource Manager and Another Using the Classic Model 275</p> <p>Design an Azure Virtual WAN Architecture 277</p> <p>Choosing SKUs and Services for Virtual WANs 289</p> <p>Connect a VNet Gateway to an Azure Virtual WAN and Build a Hub in a Virtual WAN 291</p> <p>Build a Virtual Network Appliance (NVA) in a Virtual Hub 299</p> <p>Set Up Virtual Hub Routing 304</p> <p>Build a Connection Unit 306</p> <p>Summary 309</p> <p>Exam Essentials 310</p> <p>Review Questions 312</p> <p><b>Chapter 6 Design and Deploy VNet Routing and Azure Load Balancer 317</b></p> <p>Design and Deploy User-Defined Routes 318</p> <p>Basic Routing Concepts 318</p> <p>Azure Routes 321</p> <p>Associate a Route Table with a Subnet 328</p> <p>Set Up Forced Tunneling 329</p> <p>Diagnose and Resolve Routing Issues 334</p> <p>Design and Deploy Azure Route Server 336</p> <p>Route Server Design Pattern 1 338</p> <p>Route Server Design Pattern 2 339</p> <p>Choosing an Azure Load Balancer SKU 344</p> <p>Choosing Between Public and Internal Load Balancers 349</p> <p>Build and Configure an Azure Load Balancer (Including Cross-Region) 353</p> <p>Build and Configure Cross-Region Load Balancer Resources 361</p> <p>Deploy a Load Balancing Rule 366</p> <p>Build and Configure Inbound NAT Rules 370</p> <p>Build Explicit Outbound Rules for a Load Balancer 371</p> <p>Summary 374</p> <p>Exam Essentials 375</p> <p>Review Questions 377</p> <p><b>Chapter 7 Design and Deploy Azure application gateway, Azure front door, and Virtual NAT 381</b></p> <p>Azure Application Gateway Overview 383</p> <p>How Application Gateway Works 385</p> <p>Scaling Options for Application Gateway and WAF 389</p> <p>Overview of Application Gateway Deployment 390</p> <p>Front-End Setup 390</p> <p>Back-End Setup 390</p> <p>Health Probes Setup 391</p> <p>Configuring Listeners 393</p> <p>Redirection Overview 394</p> <p>Application Gateway Request Routing Rules 395</p> <p>Redirection Setting 397</p> <p>Application Gateway Rewrite Policies 397</p> <p>Features and Capabilities of Azure Front Door SKUs 409</p> <p>Health Probe Characteristics and Operation 411</p> <p>Secure Front Door with SSL 412</p> <p>Front Door for Web Applications with a High-Availability Design Pattern 413</p> <p>SSL Termination and End-to-End SSL Encryption 421</p> <p>Multisite Listeners 423</p> <p>Back-Ends, Back-End Pools, Back-End Host Headers, and Back-End Health Probes 424</p> <p>Routing and Routing Rules 426</p> <p>URL Redirection and URL Rewriting in Front Door Standard and Premium 427</p> <p>Design and Deploy Traffic Manager Profiles 429</p> <p>How Traffic Manager Works 430</p> <p>Traffic Manager Routing Methods 432</p> <p>Priority-Based Traffic Routing 433</p> <p>Weighted-Based Traffic Routing 433</p> <p>Performance-Based Traffic Routing 435</p> <p>Geographic-Based Traffic Routing 436</p> <p>Multivalue-Based Traffic Routing 437</p> <p>Subnet-Based Traffic Routing 437</p> <p>Building a Traffic Manager Profile 438</p> <p>Virtual Network NAT 442</p> <p>Using a Virtual Network NAT 443</p> <p>Allocate Public IP or Public IP Prefixes for a NAT Gateway 445</p> <p>Associate a Virtual Network NAT with a Subnet 447</p> <p>Summary 451</p> <p>Exam Essentials 451</p> <p>Review Questions 455</p> <p><b>Chapter 8 Design, Deploy, and Manage Azure Firewall and Network Security Groups 459</b></p> <p>Azure Firewall and Firewall Manager Features 460</p> <p>How Azure Firewall Manager Works 467</p> <p>How Azure Firewall and Firewall Manager Protect VNets 468</p> <p>Build and Configure an Azure Firewall Deployment 476</p> <p>Azure Firewall Policy 495</p> <p>Build and Configure a Secure Hub within an Azure Virtual WAN Hub 501</p> <p>Build and Configure a Secure Hub within an Azure Virtual WAN Hub Using Azure PowerShell 503</p> <p>Integrate an Azure Virtual WAN Hub with a Third-Party Network Virtual Appliance 507</p> <p>High-Level Use Case for Network Virtual Appliances 508</p> <p>Create and Attach a Network Security Group to a Resource 509</p> <p>Create an Application Security Group and Attach It to a NIC 519</p> <p>Create and Configure NSG Rules and Read Network Security Group Flow Logs 524</p> <p>Validate NSG Flow Rules 531</p> <p>Verify IP Flow 534</p> <p>Summary 536</p> <p>Exam Essentials 536</p> <p>Review Questions 539</p> <p><b>Chapter 9 Design and Deploy Azure Web Application Firewall and Monitor Networks 543</b></p> <p>Azure Web Application Firewall Functions and Features 544</p> <p>WAF on Application Gateway 547</p> <p>WAF on Front Door 549</p> <p>WAF on Azure CDN from Microsoft 550</p> <p>Set Up Detection or Prevention Mode 551</p> <p>Azure Front Door WAF Policy Rule Sets 553</p> <p>Managed Rule Sets 555</p> <p>Custom Rule Sets 558</p> <p>WAF Policies 560</p> <p>Application Gateway WAF Policy Rule Sets 566</p> <p>Per-Site WAF Policy 568</p> <p>Per-URI Policy 568</p> <p>Managed Rules 568</p> <p>WAF Policies 572</p> <p>Custom Rules 573</p> <p>Deploy and Attach WAF Policies 580</p> <p>Set Up Network Health Alerts and Logging Using Azure Monitor 582</p> <p>Build and Configure Azure Network Watcher 591</p> <p>Build and Configure a Connection Monitor Instance 595</p> <p>Build, Configure, and Use Traffic Analytics 600</p> <p>Build and Configure NSG Flow Logs 604</p> <p>Enable and Set Up Diagnostic Logging 607</p> <p>Enabling Diagnostic Logging 608</p> <p>Summary 609</p> <p>Exam Essentials 609</p> <p>Review Questions 611</p> <p><b>Chapter 10 Design and Deploy Private Access to Azure Services 615</b></p> <p>Overview of Private Link Services and Private Endpoints 616</p> <p>Key Benefits of Private Link 618</p> <p>How Private Link Integrates into an Azure Virtual Network 619</p> <p>How Azure Private Endpoint Works 619</p> <p>Plan Private Endpoints 628</p> <p>Configure Access to Private Endpoints 632</p> <p>Azure Private Link RBAC Permissions 634</p> <p>Integrate Private Link with DNS and Private Link Services with On-Premises Clients 634</p> <p>Use Case 1: Workloads on Virtual Networks without a Custom DNS Server 635</p> <p>Use Case 2: Workloads That Use a DNS Forwarder On-Premises 637</p> <p>Use Case 3: Using a DNS Forwarder for Virtual Network Workloads and On-Premises Workloads 640</p> <p>Set Up Service Endpoints and Configure Service Endpoint Policies 642</p> <p>Overview of Service Tags and Access to Service Endpoints 646</p> <p>Configure Access to Service Endpoints 651</p> <p>Integrating App Services into Regional VNets 657</p> <p>Azure Regional VNet Integration 658</p> <p>How Azure Regional VNet Integration Works 659</p> <p>Subnet Requirements 660</p> <p>Access Management 661</p> <p>Route Management 661</p> <p>Application Route Management 662</p> <p>Configure Azure Kubernetes Service (AKS) for Regional VNet Integration 665</p> <p>Configure Clients to Access the App Service Environment 670</p> <p>Summary 673</p> <p>Exam Essentials 673</p> <p>Review Questions 675</p> <p>Appendix Answers to Review Questions 679</p> <p>Chapter 1: Getting Started with AZ-700 Certification for Azure Networking 680</p> <p>Chapter 2: Design, Deploy, and Manage a Site-to-Site VPN Connection and Point-to-Site VPN Connection 681</p> <p>Chapter 3: Design, Deploy, and Manage Azure ExpressRoute 683</p> <p>Chapter 4: Design and Deploy Core Networking Infrastructure: Private IP and DNS 685</p> <p>Chapter 5: Design and Deploy Core Networking Infrastructure and Virtual WANs 686</p> <p>Chapter 6: Design and Deploy VNet Routing and Azure Load Balancer 688</p> <p>Chapter 7: Design and Deploy Azure application gateway, Azure front door, and Virtual NAT 690</p> <p>Chapter 8: Design, Deploy, and Manage Azure Firewall and Network Security Groups 691</p> <p>Chapter 9: Design and Deploy Azure Web Application Firewall and Monitor Networks 693</p> <p>Chapter 10: Design and Deploy Private Access to Azure Services 694</p> <p>Index 697</p>
<p> <b> ABOUT THE AUTHORs</b></p> <p><b>PUTHIYAVAN UDAYAKUMAR</b> is an infrastructure architect with over 14 years of experience in modernizing and securing IT infrastructure, including the Cloud. He has been writing technical books for more than ten years on various infrastructure and security domains. He has designed, deployed, and secured IT infrastructure out of on-premises and Cloud, including virtual servers, networks, storage, and desktops for various industries, including pharmaceutical, banking, healthcare, aviation, federal entities, etc. He is an open group certified Master certified architect. <p><b>KATHIRAVAN UDAYAKUMAR</b> is Head of Delivery and Chief Architect for Oracle Digital Technologies (Europe Practice) at Cognizant, covering various elements of technology stack in on-prem and cloud. He has over 18 years of experience in architecture, design, implementation, administration and integration with Green-field IT Systems, ERP, Cloud Platforms and Solutions across various business domains and Industries. He has had a passion for networking since he was an undergraduate and becoming a Cisco Certified Network Associate (CCNA).
<p><b>Your comprehensive roadmap to the MCA Azure<sup>®</sup> Network Engineer exam</b></p> <p>The <i>MCA Microsoft<sup>®</sup> Certified Associate Azure<sup>®</sup> Network Engineer Study Guide</i> is your one-stop resource for complete coverage of the challenging AZ-700 exam. This Sybex Study Guide covers all of the AZ-700 objectives. Prepare for the exam efficiently and fully with Sybex thanks to complete and accurate content, including an assessment test that validates and measures exam readiness, objective map, real-world examples and scenarios, practical exercises, and challenging chapter review questions. Reinforce and retain what you’ve learned with the Sybex online learning environment and test bank, accessible across a variety of devices. Get prepared for the MCA Azure<sup>®</sup> Network Engineer exam with Sybex. <p> <b> Coverage of 100% of all exam objectives in this Study Guide means you’ll be ready for:</b> <ul><li>Designing, implementing, and managing hybrid networking</li> <li>Designing and implementing core networking infrastructure</li> <li>Designing and implementing routing</li> <li>Securing and monitoring networks</li> <li>Designing and implementing private access to Azure<sup>®</sup> services</li></ul> <p> <b> ABOUT THE MCA AZURE<sup>®</sup> NETWORK ENGINEER CERTIFICATION</b> <p> The MCA Azure<sup>®</sup> Network Engineer certification validates a candidate’s ability to work with solution architects, cloud administrators, security engineers, application developers, and DevOps engineers to deliver Azure<sup>®</sup> solutions. Candidates for this exam should have expert Azure<sup>®</sup> administration skills, in addition to extensive experience and knowledge of networking, hybrid connections, and network security. <p> <b> Interactive learning environment</b> <p> Take your exam prep to the next level with Sybex’s superior interactive online study tools. To access our learning environment, simply visit <b>www.wiley.com/go/sybextestprep,</b> register your book to receive your unique PIN, and instantly gain one year of FREE access after activation to: <ul><li><b>Interactive test bank</b> with a practice exam to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you’re ready to take the certification exam.</li> <li><b>100 electronic flashcards</b> to reinforce learning and last-minute prep before the exam</li> <li><b>Comprehensive glossary</b> in PDF format gives you instant access to the key terms so you are fully prepared </li></ul>

Diese Produkte könnten Sie auch interessieren:

Google Earth For Dummies
Google Earth For Dummies
von: David A. Crowder
PDF ebook
19,99 €