Implementing 70-533 - Objective 5 - Implement Virtual Networks (10-15%)

Design and implement a multi-site or hybrid network

1. ExpressRoute is a direct private connection to Azure data center
2. Site-to-site VPN is fast and secure but uses public internet and requires VPN
3. Point-to-site is meant for individual users not for connecting multiple resources to Azure
4. VNet-to-VNet is suitable for connecting two Azure networks together but not on-premise
5. RDP connection only allows connections to one computer

Configure virtual networks

1. /28 16 networks, /24 256 networks, /16 65,000 networks, /8 16 million networks
2. Azure load balancing uses probes to monitor a servers health
3. An HTTP probe checks for HTTP 200 status, otherwise it will direct traffic to a healthy instance
4. A TCP probe checks specific ports but does not allow you to set additional parameters like CPU threshold
5. Azure Application Gateway to route inbound traffic to a specific back end server
6. Azuire Traffic Manager to distribute software downloads to users
7. Traffic Manager can use either Priority, Weighted or Performance methods to distribute traffic
8. Traffic Manager Performance method chooses the closest server based on network latency
9. A NSG is a container that holds ACLs. 
10. You cannot create a new NSG on a VM that already has an endpoint-based ACL
11. Get-AzureVM, Set-AzureVM, Update-AzuireVM

Modify a network configuration

1. New-AzureRmNetworkSecurityRuleConfig allows you to create new rules for network security
2. New-AzureRmNetworkSecurityGroup to create a new NSG
3. Get-AzureRmVirtualNetwork to retrieve information about the network in an RG
4. Set-AzureRmVirtualNetwork to apply the network configuration
5. You cannot modify a subnet unless it is empy of resources