AZ-104 covers virtual networks, subnetting, IP addressing, DNS, and security controls such as NSGs and Azure Firewall. It also addresses connectivity options like VNet peering and gateway-based links for Azure and on-premises integration.
Networking in AZ-104 is presented as a core administrator responsibility rather than a specialist-only topic. The program starts with fundamental virtual networking constructs and expands into security, connectivity, and traffic management decisions that affect service reliability.The virtual networking module covers virtual networks and subnets, which establish segmentation and routing boundaries. It also addresses IP addressing concepts and the supporting services used in day-to-day administration, including Azure DNS. Security controls appear as part of this foundation, including network security groups and Azure Firewall. These controls determine what can communicate, how traffic is filtered, and how administrators implement baseline protections at the network layer.Connectivity is handled in a dedicated intersite module. The page lists VNet peering, Virtual Network Gateways, and Site-to-Site Connections as key topics. It also references ExpressRoute and Virtual WAN as connectivity options. This mix reflects the real-world need to choose a connectivity approach that matches latency, reliability, and operational constraints, especially when linking Azure to on-premises environments.Traffic management expands the scope into routing and platform services that steer traffic. The program includes network routing and service endpoints, and it references Azure Load Balancer and Azure Application Gateway. These services can be central to application availability and performance, and administrators often need to understand their purpose even when other teams own the application configuration.The module outcomes emphasize implementation: configuring VNets and subnets, configuring security controls, configuring firewalls and DNS, configuring peering and gateways, selecting connectivity approaches, and configuring traffic management services. Together, these topics build the ability to implement and operate network foundations that support Azure workloads.
Networking skills are often the difference between quick incident resolution and hours of guesswork. AZ-104 is valuable because it links network controls to administrator responsibilities: segmentation, access boundaries, name resolution, and the connectivity choices that tie Azure to on-premises environments.As you study, keep a decision lens. For each connectivity option listed, ask what problem it solves and what it implies operationally. The same applies to traffic services: you should be able to explain when you would use a load balancer versus an application gateway, and what information you would check when traffic fails.Finally, connect networking to monitoring. If you can correlate network changes with Azure Monitor signals and logs, you build a more reliable troubleshooting workflow across layers.
“You will learn about virtual networks, security groups, Azure Firewall, DNS, and intersite connectivity features.”
Expert Trainer
Expert Trainer
AZ-305 includes designing network infrastructure, business continuity, and migration solutions, supported by case study labs.
AZ-700 covers designing, implementing, and operating Azure networking solutions. It includes virtual networks, hybrid connectivity, routing, load balancing, network security, private access, and monitoring.
AZ-104 focuses on operating Azure environments: identity, governance, networking, storage, and compute. You also cover backup and monitoring so you can run workloads reliably day to day.
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.