This module introduces Azure networking and the options for connecting resources to each other and to on-premises environments. You will learn the purpose of virtual networks, compare VPN Gateway and ExpressRoute, and understand the role of Azure DNS in name resolution. By the end, you will be able to recommend an appropriate, secure connectivity solution for linking an on-premises network to Azure based on a given scenario's requirements.

This module covers Azure storage and how to manage data cost-effectively and durably. You will learn about storage accounts and core storage services, compare redundancy options, choose appropriate access tiers for different data patterns, and identify the right migration tools such as Azure Migrate and Azure Data Box. By the end, you will be able to design a storage, redundancy, tiering, and migration strategy that balances cost, durability, and practical constraints.

This module focuses on securing identity and access in Azure. You will learn the role of Microsoft Entra ID, the difference between authentication and authorization, and protective mechanisms including Multi-Factor Authentication, Conditional Access, and Role-Based Access Control. You will also explore modern security models such as Zero Trust and Defense in Depth and the role of Microsoft Defender for Cloud. By the end, you will be able to recommend a layered identity and access strategy that reduces risk and limits the impact of compromised accounts.