Design and implement core networking infrastructure

Official references for this objective

• Microsoft — Network Security Perimeter - Azure SQL Database | Microsoft Learn

  Network Security Perimeter uses Learning Mode , which can be used to log all traffic to and from SQL Database

• Microsoft — Scenarios to use a virtual network with Azure Container Instances - Azure Container Instances | Microsoft Learn

  If you deploy your container group into a virtual network, you must use a NAT gateway for outbound connectivity. This is the only supported configuration

• Microsoft — Create an Azure scale set that uses availability zones - Azure Virtual Machine Scale Sets | Microsoft Learn

  A zone spanning scale set spreads instances across all selected zones

• Microsoft — Use a Public IP address prefix in a Service Fabric managed cluster - Azure Service Fabric | Microsoft Learn

  A public IP address prefix allows you to reserve a range of public IP addresses for your public endpoints in Azure.

• Microsoft — Create a Windows VM with Azure VM Image Builder by using an existing virtual network - Azure Virtual Machines | Microsoft Learn

  -Access Allow -Protocol Tcp -Direction Inbound -Priority 400 -SourceAddressPrefix AzureLoadBalancer -SourcePortRange * -DestinationAddressPrefix VirtualNetwork -DestinationPortRange 60000-60001

• Microsoft — Microsoft.Peering/peeringServices 2021-01-01 - Bicep, ARM template & Terraform AzAPI reference | Microsoft Learn

  providerBackupPeeringLocation The backup peering (Microsoft/service provider) location to be used for customer traffic. string

• Microsoft — Microsoft.Peering/peerings 2022-10-01 - Bicep, ARM template & Terraform AzAPI reference | Microsoft Learn

  directPeeringType The type of direct peering. 'Cdn' 'Edge' 'EdgeZoneForOperators' 'Internal' 'Ix' 'IxRs' 'Transit' 'Voice'

• Microsoft — Network security group test - Azure Virtual Machines | Microsoft Learn

  add to the network security group a security rule that allows RDP connections from the remote IP address. This security rule must have a higher

• Microsoft — Restrict import/export access for managed disks using Azure Private Link - Azure Virtual Machines | Microsoft Learn

  it will be disabled for private endpoints on this subnet only. Other resources on this subnet will retain network security group enforcement

• Microsoft — Restrict managed disk import and export with Private Links - Azure Virtual Machines | Microsoft Learn

  set the network access policy of the disk or snapshot to AllowPrivate to limit access to your virtual network. Set the network access policy to

• Microsoft — Set up IP tags on a Service Fabric managed cluster - Azure Service Fabric | Microsoft Learn

  The IPTag property only applies to the public IPv4 and IPv6 addresses of the default cluster load balancer.