These are the sub-topics that you have to cover in the Design-Azure-Resource-Manager-ARM-Networking topic of exam Exam 70-535 (Architecting Microsoft Azure Solutions). This sub-topic should cover 5-10% of the exam.
For the complete list of the seven topics, please refer to the first post of this series :
That is entitled: Microsoft Exam 70-535 (Architecting Microsoft Azure Solutions) in a nutshell!
• Design Azure virtual networks
•Design solutions that use Azure networking services: design for load balancing using Azure Load Balancer and Azure Traffic Manager; define DNS, DHCP, and IP strategies; determine when to use Azure Application Gateway; determine when to use multi-node application gateways, Traffic Manager and load balancers
• Design external connectivity for Azure Virtual Networks
•Determine when to use Azure VPN, ExpressRoute and Virtual Network Peering architecture and design; determine when to use User Defined Routes (UDRs); determine when to use VPN gateway site-to-site failover for ExpressRoute
• Design security strategies
•Determine when to use network virtual appliances; design a perimeter network (DMZ); determine when to use a Web Application Firewall (WAF), Network Security Group (NSG), and virtual network service tunneling
• Design connectivity for hybrid applications
•Design connectivity to on-premises data from Azure applications using Azure Relay Service, Azure Data Management Gateway for Data Factory, Azure On-Premises Data Gateway, Hybrid Connections, or Azure Web App’s virtual private network (VPN) capability; identify constraints for connectivity with VPN; identify options for joining VMs to domains