AZ-700 Designing and Implementing Microsoft Azure Networking Solutions

What's inside

Chapters

1. Virtual networks and IP addressing
2. Name resolution with Azure DNS
3. Connecting virtual networks: peering, gateway transit and Virtual Network Manager
4. Routing and outbound connectivity: UDRs, Route Server and NAT gateway
5. Site-to-site VPN
6. Point-to-site VPN
7. Azure ExpressRoute
8. Azure Virtual WAN
9. Load balancing with Azure Load Balancer and Traffic Manager
10. Azure Application Gateway
11. Azure Front Door
12. Private access: Private Link, private endpoints and service endpoints
13. Network security groups, application security groups and Azure Bastion
14. Azure Firewall and Firewall Manager
15. Web Application Firewall
16. Monitoring, DDoS protection and network security posture

Plus an appendix glossary of 600+ terms, each linked to Microsoft Learn, and free online for print readers.

Sample diagrams

Free study notes

Some sections of the book, free to read online:

• Azure subnet sizing: the five reserved addresses and the smallest subnet

  How many usable addresses each prefix gives in Azure, why five are always reserved, and how to size subnets for gateways, Bastion and VMs.

• Hybrid DNS with Azure DNS Private Resolver: inbound endpoints, outbound endpoints and rulesets

  Resolving Azure private zones from on-premises and on-premises names from Azure, with subnet sizing and ruleset rules.

• Gateway transit in hub-and-spoke networks: Allow gateway transit and Use remote gateways

  Where each peering setting goes, what spokes can reach, and why peering isn't transitive.

• How Azure selects routes: longest prefix match, UDRs and forced tunnelling

  Longest prefix match, system routes versus user-defined routes, and how a 0.0.0.0/0 route forces internet traffic on-premises.

• ExpressRoute Global Reach, FastPath and ExpressRoute Direct compared

  What each ExpressRoute feature does, which SKUs and gateways it needs, and where it fits on a circuit.

• Choosing an Azure load-balancing service: Load Balancer, Application Gateway, Front Door or Traffic Manager

  A decision guide by traffic type (HTTP or not) and scope (regional or global).

• Private endpoint DNS: how privatelink zones resolve a service to its private IP

  The CNAME chain from a public service name to a private endpoint, zone groups and zone links.

• How NSG rules are evaluated: priorities, default rules and stateful flows

  Rule order, the default rules, and what happens to a flow between subnets and to return traffic.