📋 Network Architecture Cheat Sheet

Network design patterns and connectivity options for AZ-305.

Network Topologies

  • Hub-spoke: central hub VNet with shared services; spokes for workloads.
  • Virtual WAN: Microsoft-managed hub for large-scale branch and VNet connectivity.
  • ExpressRoute for private, high-bandwidth, low-latency connections.
  • VPN Gateway for encrypted cross-premises connectivity over the internet.

Network Security

  • Azure Firewall: centralized, stateful firewall with threat intelligence.
  • Application Gateway + WAF for Layer 7 protection of web apps.
  • Private Link/Private Endpoint: access PaaS services over private IP.
  • DDoS Protection Standard for volumetric attack mitigation.

Practice Networking Questions

Put your knowledge to the test with practice questions.

More AZ-305 Cheat Sheets