📖 What is Azure Networking?
Azure Networking delivers services to connect Azure resources with each other and to on-premises infrastructure. Core components include Virtual Networks (VNet) for isolated networks, Network Security Groups (NSG) for traffic filtering, and Load Balancers for distributing traffic across multiple resources, ensuring high availability and security.
"Understand the difference between public and private IP addresses, and the role of DNS in Azure networking. Be familiar with Azure Virtual Network peering and ExpressRoute for hybrid connectivity. Exam questions often involve troubleshooting network connectivity issues."
📚 Certification: Microsoft Azure Fundamentals (AZ-900)
🔑 What are the Key Concepts of Azure Networking?
- ▸ Virtual Networks (VNets) are fundamental, providing isolated network spaces within Azure, similar to on-premises networks, and enabling resource grouping.
- ▸ Network Security Groups (NSGs) act as virtual firewalls, controlling inbound and outbound network traffic based on rules you define for security.
- ▸ Azure Load Balancer distributes incoming network traffic across multiple virtual machines, improving application availability and responsiveness.
- ▸ Public IP addresses are used for resources accessible from the internet, while private IPs are used for communication within the VNet.
- ▸ Azure DNS allows you to host your DNS domains in Azure, managing domain names and translating them to IP addresses for your resources.
🎯 How does Azure Networking appear on the AZ-900 Exam?
You may be asked to identify the Azure service that allows you to create a secure, isolated network environment for your virtual machines and other resources.
A scenario might describe a company needing to connect their on-premises network to Azure – expect questions about ExpressRoute or VPN Gateway.
Expect questions about troubleshooting connectivity issues, such as identifying whether an NSG rule is blocking traffic or if routing is misconfigured.
❓ Frequently Asked Questions
What is the difference between Azure Virtual Network peering and a VPN Gateway?
Peering connects VNets directly within Azure, offering low latency and high bandwidth. A VPN Gateway creates an encrypted connection over the internet to on-premises networks.
How do NSGs differ from Azure Firewall?
NSGs provide basic layer 4 filtering at the subnet or NIC level. Azure Firewall is a managed, cloud-based network security service offering more advanced features like threat intelligence and intrusion prevention.
When would I use a public load balancer versus a basic load balancer?
Public load balancers are for internet-facing applications, providing a single public IP. Basic load balancers are for internal load balancing within a VNet and don't offer advanced features.