Unit 4 roadmap — Implement and manage virtual networking

What this unit is really testing

Unit 4 is a path unit. Almost every question describes traffic that is not arriving and asks which of the three things standing in its way is responsible: a route, a filter, or a name. Establish which of the three the stem is really about before comparing the options, because each has its own evaluation order and they are frequently offered as alternatives to one another.

The order to work through it

1. Build the network first: address space, subnets, peering, public addressing and routing. Routing before filtering, because a packet that is not routed is never filtered.
2. Then the filters and the private paths — security groups, their evaluation, and the two different ways a platform service is reached from inside a network.
3. Finish with name resolution and load balancing, which decide where a client is sent once the path exists.

Topic map

Every objective title below is quoted from Microsoft's skills-measured outline, as of 2026-04-17.

Configure and manage virtual networks in Azure

AZ104-U4.T1 · 5 objectives

• Create and configure virtual networks and subnets
• Create and configure virtual network peering
• Configure public IP addresses
• Configure user-defined routes
• Troubleshoot network connectivity

Configure secure access to virtual networks

AZ104-U4.T2 · 5 objectives

• Create and configure network security groups (NSGs) and application security groups
• Evaluate effective security rules in NSGs
• Implement Azure Bastion
• Configure service endpoints for Azure platform as a service (PaaS)
• Configure private endpoints for Azure PaaS

Configure name resolution and load balancing

AZ104-U4.T3 · 3 objectives

• Configure Azure DNS
• Configure an internal or public load balancer
• Troubleshoot load balancing

Traps

Check yourself

Are you ready to move on?

• You can state this unit's published range without looking it up.
• You can name every sub-area and say what separates it from its neighbours.
• You can explain each trap above to somebody else, in your own words.
• You have worked the unit's 107 bank questions and can say why the wrong options are wrong.

When all four are true, take a blueprint-weighted mock rather than more of this unit. A mock is the only asset here that tells you how this unit performs against the other four under time.