4Secure and Monitor Networks

• 4.1Securing Networks (NSG, Firewall, WAF, DDoS)

  From a network engineer’s view, understand combining NSG/ASG (L3/L4 filtering), Azure Firewall (centralized stateful), WAF (L7 defense), and DDoS Protection (volumetric mitigation) in a layered design.

• 4.2Network Monitoring with Network Watcher

  Understand Azure Network Watcher for network visibility and diagnostics. Troubleshoot using tools like Connection Monitor, NSG diagnostics (flow logs), IP flow verify, and next hop.