AZ-700: Microsoft Azure Network Engineer Associate Exams

了解您需要专注的是AZ-700考试的不同主题区域，以及每个区域的子任务。以下是基于您提供的信息概述的结构化表格，它将帮助您规划学习计划：

A) Implement and manage Azure network resources (25-30%):

1. Design and implement Azure Virtual Network:

   • Plan and create virtual networks.
   • Configure subnets, network security groups (NSGs), and route tables.
   • Implement VNet peering and site-to-site VPN connections.
   • Configure ExpressRoute connections.

2. Design and implement Azure Network Watcher:

   • Set up NSG flow logging.
   • Configure packet capture for network troubleshooting.
   • Implement next hop resolution problem (NHRP) configuration.

3. Design and implement Azure VPN Gateway:

   • Plan and configure a VPN gateway.
   • Implement VNet-to-VNet connections.
   • Configure BGP as an update source for route propagation.

B) Design and implement application acceleration and global availability (10-15%):

1. Design and implement Azure Front Door:
   • Map requirements to features and capabilities of Azure Front Door.
   • Choose an appropriate tier.
   • Configure an Azure Front Door, including routing, origins, and endpoints.
   • Configure SSL termination and end-to-end SSL encryption.
   • Configure caching and traffic acceleration.
   • Implement rules, URL rewrite, and URL redirect.

C) Secure an origin by using Azure Private Link in Azure Front Door (5-10%):

1. Design and implement Azure Private Link service and Azure private endpoints:
   • Plan private endpoints.
   • Create private endpoints.
   • Configure access to private endpoints.
   • Create a Private Link service.
   • Integrate Private Link and Private Endpoint with DNS.
   • Integrate a Private Link service with on-premises clients.

D) Design and implement private access to Azure services (5-10%):

1. Design and implement service endpoints:
   • Choose when to use a service endpoint.
   • Create service endpoints.
   • Configure service endpoint policies.
   • Configure access to service endpoints.

E) Secure network connectivity to Azure resources (15-20%):

1. Implement and manage network security groups:

   • Create a network security group (NSG).
   • Associate a NSG to a resource.
   • Create an application security group (ASG).
   • Associate an ASG to a network interface card (NIC).
   • Create and configure NSG rules.
   • Interpret NSG flow logs.
   • Validate NSG flow rules.
   • Verify IP flow.
   • Configure an NSG for remote server administration, including Azure Bastion.

2. Design and implement Azure Firewall and Azure Firewall Manager:

   • Map requirements to features and capabilities of Azure Firewall.
   • Select an appropriate Azure Firewall SKU.
   • Design an Azure Firewall deployment.
   • Create and implement an Azure Firewall deployment.
   • Configure Azure Firewall rules.
   • Create and implement Azure Firewall Manager policies.
   • Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub.

3. Design and implement a Web Application Firewall (WAF) deployment:

   • Map requirements to features and capabilities of WAF.
   • Design a WAF deployment.
   • Configure detection or prevention mode.
   • Configure rule sets for WAF on Azure Front Door.
   • Configure rule sets for WAF on Application Gateway.
   • Implement a WAF policy.
   • Associate a WAF policy.

4. Implement and manage application security with Azure Security Center:

   • Assess and secure applications by using application security recommendations.

学习计划：

• Time Management: Allocate specific times each day dedicated to studying this material.
• Practice: Use the AZ-70 Practice Test to reinforce your learning.
• Real World Experience: Apply your knowledge by working on live projects that require Azure services.
• Mock Exam: Take full-length mock exams to get used to the question format and time pressure.
• Review and Repeat: Continuously review concepts, revisit areas of weakness, and repeat processes as necessary. 确保您在每个主题区域内专注，并为每个子任务分配足够的时间来理解和掌握所有必要的技能。通过这种方法，您将能够有效地针对AZ-70考试准备。�希在考试日可以顺利度到目标的结果。加油！