Training: Configure secure access to your workloads using networking with Azure Virtual Network (AZ-1002)

Why Azure Virtual Network Training is Essential in 2026

Cloud migration requires Swiss companies to completely rethink their network architecture. Workloads hosted on Microsoft Azure require secure, performant access that complies with local regulatory requirements. Virtual networks (VNet) form the foundation of any cloud infrastructure, and mastering them has become a prerequisite for cloud engineers, system administrators, and network architects.

The AZ-1002 training, “Configure secure access to workloads using Azure Virtual Network,” provides you with practical skills to design and deploy robust network architectures on Azure. In one intensive day delivered by MCT certified trainers, you learn to segment, protect, and interconnect your cloud resources in an official Microsoft lab environment. Companies in Geneva, Lausanne, and throughout French-speaking Switzerland face these challenges daily.

Azure Virtual Network Architecture and Segmentation

An Azure Virtual Network (VNet) logically isolates your cloud resources within a private address space. You define subnets to segment different application layers: front-end, back-end, databases, and shared services. This segmentation limits the attack surface and facilitates applying granular security policies. Virtual network peering then connects multiple VNets together, even across different Azure regions, without traffic traversing the internet.

The AZ-1002 training covers subnet creation, VNet peering configuration, and custom route tables in detail. You also learn to configure private DNS for internal name resolution, an often underestimated but critical element for production environment stability.

Network Security: NSG, Azure Firewall and Private Endpoints

Network security groups (NSGs) are the first line of defense in Azure networks. The training teaches you to create inbound and outbound security rules to precisely control traffic between subnets and towards external resources. Application Security Groups (ASGs) simplify rule management by grouping virtual machines by function rather than by IP address.

Azure Firewall provides centralized inspection of outbound and east-west traffic with FQDN-based application rules, network rules, and threat intelligence. Private endpoints and Azure Private Link isolate access to PaaS services (Storage, SQL Database, Key Vault) from the public network. This combination of NSGs, Firewall, and private endpoints forms a defense-in-depth architecture compliant with Swiss security requirements.

Hybrid Connectivity and Network Monitoring

Swiss companies operating in hybrid mode need to connect their on-premises infrastructure to Azure securely. The AZ-1002 training introduces VPN Gateway for encrypted site-to-site connections and service endpoints for securing Azure service access from a VNet. These concepts prepare you for more advanced architectures covered in the AZ-700 training.

Network Watcher is the essential diagnostic tool for Azure networking. You learn to verify IP flows, analyze security rules, capture packets, and visualize network topology. These capabilities are indispensable for troubleshooting connectivity issues and verifying that security rules work as intended in production environments.

Practical Applications and Career Opportunities in Switzerland

Azure virtual networking skills are directly applicable to everyday scenarios: deploying a multi-tier web application with network isolation, securing access to a database with private endpoints, connecting a site in Geneva to Azure via VPN, or monitoring traffic between production subnets. These use cases reflect the reality of IT teams in French-speaking Switzerland.

The AZ-1002 training is an ideal entry point for professionals preparing for the AZ-104 (Azure Administrator) or AZ-700 (Network Engineer) certifications. Cloud infrastructure and network security positions are among the most recruited profiles in the Geneva and Lausanne job market, especially in the financial, healthcare, and international organization sectors.

At ITTA, a Microsoft Learning Partner in Switzerland, this training is delivered by MCT certified trainers in one day. The hands-on labs on official Microsoft cloud environments allow you to practice in near-production conditions. Sessions are available in-person in Geneva and Lausanne or via virtual classroom.

FAQ

What are the prerequisites for the AZ-1002 training?

A basic understanding of networking concepts (IP addressing, subnets, DNS) and basic Azure familiarity (portal, resource groups) are recommended. No certification is required.

Is this training sufficient to manage Azure networks in production?

AZ-1002 provides solid foundations for Azure virtual networking. For complex production architectures (ExpressRoute, Virtual WAN, advanced load balancing), the AZ-700 training is recommended as the next step.

Does this training prepare for the AZ-104 certification?

Yes, the networking module of AZ-1002 directly covers part of the AZ-104 exam content. It is an excellent practical complement for candidates preparing for Azure Administrator certification.

Is the training available as a virtual classroom?

Yes. ITTA offers this training in-person in Geneva and Lausanne as well as via virtual classroom with the same content and the same Microsoft cloud labs.