After this training day you can set up virtual networks and subnets in Azure, connect them with peering, steer traffic with custom routes and host a domain in Azure DNS. Using network security groups and Azure Firewall, you decide who can reach which workloads. The course suits Azure administrators and network engineers who know the Azure portal and want to strengthen their networking practice in one continuous lab or prepare for the Applied Skills assessment.
What you’ll take away.
- Create virtual networks and subnets with sensible IP addressing
- Connect VNets with peering and steer traffic with custom routes
- Manage DNS zones and records in Azure DNS
- Restrict access with network security groups and Azure Firewall
Your training in detail
- Who is it for?
- Azure administrators, network engineers and security staff who secure workloads in Azure at network level.
- Prerequisites
- Confident use of the Azure portal and basic knowledge of IP networking, DNS and firewall concepts.
- Format & planning
- Standard length: 1 training day. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Virtual networks, subnets and IP addressing
VNet peering, transit and connectivity
Controlling traffic with custom routes
Hosting a domain in Azure DNS
Network security groups: creating rules and checking their effect
Azure Firewall: rules, deployment and management with Azure Firewall Manager
In the guided project you build a hub-and-spoke network: you peer the VNets, route traffic through Azure Firewall, set NSG rules and create a DNS zone.
Exams, licences & credentials
The course prepares you for the “Microsoft Applied Skills: Configure secure access to your workloads using Azure networking” assessment, a hands-on lab on Microsoft Learn. The assessment and any fees are included only if the offer confirms it. The credential is issued by Microsoft. This is not an official Microsoft course unless the offer states otherwise.
Vendor references & review date
Sources checked on 2026-11-10. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
How does AZ-1002 differ from AZ-700?
AZ-700 is a multi-day course for a certification exam and also covers VPN, ExpressRoute and load balancing. AZ-1002 focuses on VNets, routing, DNS, NSGs and Azure Firewall in one day.
How does the Applied Skills assessment work?
You complete tasks in an interactive Azure lab rather than answering multiple-choice questions. According to Microsoft, after launching a lab you must wait 72 hours before launching it again.
Does AZ-1002 Configure secure access to your workloads using Azure virtual networking: securing Azure networks include a certificate?
The course prepares you for the “Microsoft Applied Skills: Configure secure access to your workloads using Azure networking” assessment, a hands-on lab on Microsoft Learn. The assessment and any fees are included only if the offer confirms it. The credential is issued by Microsoft. This is not an official Microsoft course unless the offer states otherwise.