Azure AZ 700 Certification

• Design and implement private IP addressing
  for Azure resources
   Plan and implement network segmentation and
  address spaces
   Create a virtual network (VNet)
   Plan and configure subnetting for services,
  including VNet gateways, private endpoints
   Plan and configure subnet delegation
   Create a prefix for public IP addresses
   Choose when to use a public IP address prefix
   Plan and implement a custom public IP address
  prefix
   Create a new public IP address
   Associate public IP addresses to resources

• Design and implement name resolution
   Design name resolution inside a VNet
   Configure DNS settings inside a VNet
   Design public DNS zones
   Design private DNS zones
   Configure a public or private DNS zone
   Link a private DNS zone to a VNet

• Design and implement VNet connectivity and
  routing
   Design service chaining, including gateway transit
   Design virtual private network (VPN) connectivity
  between VNets
   Implement VNet peering
   Design and implement user-defined routes (UDRs)
   Associate a route table with a subnet
   Configure forced tunneling
   Diagnose and resolve routing issues
   Design and implement Azure Route Server
   Identify appropriate use cases for a Virtual Network
  NAT gateway
   Implement a NAT gateway

• Monitor networks

 Configure monitoring, network diagnostics, and logs
in Azure Network Watcher
 Monitor and repair network health by using Azure
Network Watcher
 Activate and monitor distributed denial-of-service
(DDoS) protection
 Activate and monitor Microsoft Defender for DNS

• Design, implement, and manage a site-to-site
  VPN connection
   Design a site-to-site VPN connection for high
  availability
   Select an appropriate VNet gateway SKU for site-to-site
  VPN requirements
   Implement a site-to-site VPN connection
   Identify when to use a policy-based VPN versus a
  route-based VPN connection
   Create and configure an IPsec/IKE policy
   Diagnose and resolve virtual network gateway
  connectivity issues
   Implement Azure Extended Network

• Design, implement, and manage a point-to-site
  VPN connection

 Select an appropriate virtual network gateway SKU for
point-to-site VPN requirements
 Select and configure a tunnel type
 Select an appropriate authentication method
 Configure RADIUS authentication
 Configure certificate-based authentication
 Configure authentication by using Azure Active
Directory (Azure AD)
 Implement a VPN client configuration file
 Diagnose and resolve client-side and authentication
issues
 Specify Azure requirements for Always On
Authentication
 Specify Azure requirements for Azure Network Adapter

• Design, implement, and manage Azure Express
  Route
   Select an ExpressRoute connectivity model
   Select an appropriate ExpressRoute SKU and tier
   Design and implement ExpressRoute to meet
  requirements, including cross-region connectivity,
  redundancy, and disaster recovery
   Design and implement ExpressRoute options, including
  Global Reach, FastPath, and ExpressRoute Direct
   Choose between private peering only, Microsoft peering
  only, or both
   Configure private peering
   Configure Microsoft peering
   Create and configure an ExpressRoute gateway
   Connect a virtual network to an ExpressRoute circuit
   Recommend a route advertisement configuration
   Configure encryption over ExpressRoute
   Implement Bidirectional Forwarding Detection
   Diagnose and resolve ExpressRoute connection issues

• Design and implement an Azure Virtual WAN
  architecture
   Select a Virtual WAN SKU
   Design a Virtual WAN architecture, including selecting
  types and services
   Create a hub in Virtual WAN
   Choose an appropriate scale unit for each gateway type
   Deploy a gateway into a Virtual WAN hub
   Configure virtual hub routing
   Create a network virtual appliance (NVA) in a virtual
  hub
   Integrate a Virtual WAN hub with a third-party NVA

• Plan, Implement and Manage Governance for
  Security
   Create, assign, and interpret security policies and
  initiatives in Azure Policy
   Configure security settings by using Azure Blueprint
   Deploy secure infrastructures by using a landing zone
   Create and configure an Azure Key Vault
   Recommend when to use a Dedicated HSM
   Configure access to Key Vault, including vault access
  policies and Azure Role-Based Access Control
   Manage certificates, secrets, and keys
   Configure key rotation
   Configure backup and recovery of certificates, secrets,
  and keys

• Manage Security Posture by Using Microsoft
  Defender for Cloud
   Identify and remediate security risks by using the
  Microsoft Defender for Cloud Secure Score and
  Inventory
   Assess compliance against security frameworks and
  Microsoft Defender for Cloud
   Add industry and regulatory standards to Microsoft
  Defender for Cloud
   Add custom initiatives to Microsoft Defender for Cloud
   Connect hybrid cloud and multi-cloud environments to
  Microsoft Defender for Cloud

• Configure and Manage Threat Protection by
  Using Microsoft Defender for Cloud
   Enable workload protection services in Microsoft
  Defender for Cloud, including Microsoft Defender for
  Storage, Databases, Containers, App Service, Key Vault,
  Resource Manager, and DNS
   Configure Microsoft Defender for Servers
   Configure Microsoft Defender for Azure SQL Database
   Manage and respond to security alerts in Microsoft
  Defender for Cloud
   Configure workflow automation by using Microsoft
  Defender for Cloud

• Configure and Manage Security Monitoring and
  Automation Solutions
   Monitor security events by using Azure Monitor
   Configure data connectors in Microsoft Sentinel
   Create and customize analytics rules in Microsoft
  Sentinel
   Evaluate alerts and incidents in Microsoft Sentinel
   Configure automation in Microsoft Sentinel
   Evaluate vulnerability scans from Microsoft Defender
  for Server