Merge pull request #50556 from wwlpublish/88e28366958399b804b13cade6c6b7c10004b46e45a1352bb320f41c84dd057b-live

Stacyrch140 · web-flow · commit 821388aa9e55 · 2025-05-20T11:18:30.000-04:00
Modules/M01-configure-virtual-networks
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/1-introduction.yml b/learn-pr/wwl-azure/configure-virtual-networks/1-introduction.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Introduction
   description: "Introduction"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/10-knowledge-check.yml b/learn-pr/wwl-azure/configure-virtual-networks/10-knowledge-check.yml
@@ -2,13 +2,11 @@
 uid: learn.wwl.configure-virtual-networks.knowledge-check
 title: Module assessment
 metadata:
-  hidden_question_numbers: ["EDD34630_34","EDD34630_46","EDD34630_63","EDD34630_79","EDD34630_83","EDD34630_87"]
-  ai_generated_module_assessment: true
   adobe-target: true
   prefetch-feature-rollout: true
   title: Module assessment
   description: "Knowledge check"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
@@ -52,4 +50,4 @@ quiz:
       explanation: "Incorrect. The dynamic IP address doesn't change."
     - content: "Each time the virtual machine is accessed."
       isCorrect: false
-      explanation: "Incorrect. The dynamic IP address doesn't change."
+      explanation: "Incorrect. The dynamic IP address doesn't change."
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/11-summary-resources.yml b/learn-pr/wwl-azure/configure-virtual-networks/11-summary-resources.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Summary and resources
   description: "Summary and resources"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/2-plan-virtual-networks.yml b/learn-pr/wwl-azure/configure-virtual-networks/2-plan-virtual-networks.yml
@@ -6,12 +6,12 @@ metadata:
   prefetch-feature-rollout: true
   title: Plan virtual networks
   description: "Plan virtual networks"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
   ms.custom:
   - N/A
-durationInMinutes: 3
+durationInMinutes: 5
 content: |
   [!include[](includes/2-plan-virtual-networks.md)]
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/3-create-subnets.yml b/learn-pr/wwl-azure/configure-virtual-networks/3-create-subnets.yml
@@ -6,12 +6,12 @@ metadata:
   prefetch-feature-rollout: true
   title: Create subnets
   description: "Create subnets"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
   ms.custom:
   - N/A
-durationInMinutes: 4
+durationInMinutes: 6
 content: |
   [!include[](includes/3-create-subnets.md)]
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/4-create-virtual-networks.yml b/learn-pr/wwl-azure/configure-virtual-networks/4-create-virtual-networks.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Create virtual networks
   description: "Create virtual networks."
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/5-plan-addressing.yml b/learn-pr/wwl-azure/configure-virtual-networks/5-plan-addressing.yml
@@ -6,12 +6,12 @@ metadata:
   prefetch-feature-rollout: true
   title: Plan IP addressing
   description: "Plan IP addressing"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
   ms.custom:
   - N/A
-durationInMinutes: 2
+durationInMinutes: 4
 content: |
   [!include[](includes/5-plan-addressing.md)]
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/6-create-public-ip-addressing.yml b/learn-pr/wwl-azure/configure-virtual-networks/6-create-public-ip-addressing.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Create public IP addressing
   description: "Create public IP addressing."
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/7-associate-public-ip-addresses.yml b/learn-pr/wwl-azure/configure-virtual-networks/7-associate-public-ip-addresses.yml
@@ -6,12 +6,12 @@ metadata:
   prefetch-feature-rollout: true
   title: Associate public IP addresses
   description: "Associate public IP addresses"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
   ms.custom:
   - N/A
-durationInMinutes: 2
+durationInMinutes: 4
 content: |
   [!include[](includes/7-associate-public-ip-addresses.md)]
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/8-associate-private-ip-addresses.yml b/learn-pr/wwl-azure/configure-virtual-networks/8-associate-private-ip-addresses.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Allocate or assign private IP addresses
   description: "Allocate or assign private IP addresses"
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/9-simulation-create-networks.yml b/learn-pr/wwl-azure/configure-virtual-networks/9-simulation-create-networks.yml
@@ -1,17 +1,17 @@
 ### YamlMime:ModuleUnit
 uid: learn.wwl.configure-virtual-networks.lab-simulation-create-networks
-title: Interactive lab simulation
+title: 'Exercise: Create and configure virtual networks'
 metadata:
   adobe-target: true
   prefetch-feature-rollout: true
-  title: Interactive lab simulation
-  description: "Interactive lab simulation"
-  ms.date: 04/28/2025
+  title: 'Exercise: Create and configure virtual networks'
+  description: "Exercise: Create and configure virtual networks"
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
   ms.custom:
   - N/A
-durationInMinutes: 15
+durationInMinutes: 5
 content: |
   [!include[](includes/9-simulation-create-networks.md)]
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/1-introduction.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/1-introduction.md
@@ -2,9 +2,9 @@ Azure virtual networks are an essential component for creating private networks
 
 Suppose you work for a company in the healthcare industry. Your company is looking to migrate their on-premises infrastructure to Azure. They want to ensure secure communication between their resources in Azure and their on-premises network. The company is also concerned about scalability and availability. By using Azure virtual networks, they can create a private network in Azure and securely connect their resources. 
 
-The topics covered in this module include subnetting, creating virtual networks, and using private and public IP addresses. You also learn about the different scenarios where virtual networks can be used, such as creating a dedicated private cloud-only network or extending a data center securely. The module provides a detailed explanation of subnets and their benefits, and how to plan IP addressing for Azure resources.
+The topics covered in this module include subnetting, creating virtual networks, and using private and public IP addresses. You also learn about the different scenarios where virtual networks can be used. These scenarios include creating a dedicated private cloud-only network or extending a data center securely. The module provides a detailed explanation of subnets and their benefits, and how to plan IP addressing for Azure resources.
 
-By the end of this module, you have a clear understanding of how to create and configure virtual networks in Azure. You're able to effectively use subnets, assign IP addresses, and ensure secure communication between your Azure resources and on-premises network.
+By the end of this module, you have a clear understanding of how to create and configure AI-ready virtual networks in Azure. You're able to effectively use subnets, assign IP addresses, and ensure secure communication between your Azure resources and on-premises network.
 
 ## Learning objectives
 
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/2-plan-virtual-networks.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/2-plan-virtual-networks.md
@@ -1,12 +1,10 @@
 A major incentive for adopting cloud solutions like Azure is to enable information technology departments to transition server resources to the cloud. Moving resources to the cloud can save money and simplify administrative operations. Relocating resources removes the need to maintain expensive datacenters with uninterruptible power supplies, generators, multiple fail-safes, or clustered database servers. For small and medium-sized companies, which might not have the expertise to maintain their own robust infrastructure, moving to the cloud is particularly appealing.
 
-After resources are moved to Azure, they require the same networking functionality as an on-premises deployment. In specific scenarios, the resources require some level of network isolation. Azure network services offer a range of components with functionalities and capabilities, as shown in the following image:
-
-:::image type="content" source="../media/network-components-66dff480.png" alt-text="Screenshot that shows the main components of Azure network services." border="false":::
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=b8555734-4289-44e7-82f9-b61bd5fc9915]
 
 ### Things to know about Azure virtual networks
 
-You can implement Azure Virtual Network to create a virtual representation of your network in the cloud. Let's examine some characteristics of virtual networks in Azure.
+You can implement Azure Virtual Network to create a virtual representation of your network in the cloud. With some [planning](/azure/virtual-network/virtual-network-vnet-plan-design-arm), you can deploy virtual networks and connect the resources you need more effectively. Let's examine some characteristics of virtual networks in Azure.
 
 - An Azure virtual network is a logical isolation of the Azure cloud resources.
 
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/3-create-subnets.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/3-create-subnets.md
@@ -1,4 +1,6 @@
-Subnets provide a way for you to implement logical divisions within your virtual network. Your network can be segmented into subnets to help improve security, increase performance, and make it easier to manage. 
+Azure [Subnets](/azure/virtual-network/virtual-network-manage-subnet?tabs=azure-portal) provide a way for you to implement logical divisions within your virtual network. Your network can be segmented into subnets to help improve security, increase performance, and make it easier to manage. 
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=c3bcd0d1-eb99-4605-ad1f-bcfab9ad2b5b]
 
 ### Things to know about subnets
 
@@ -37,8 +39,6 @@ When you plan for adding subnet segments within your virtual network, there are
 
 - **Consider network virtual appliances**. Azure routes network traffic between all subnets in a virtual network, by default. You can override Azure's default routing to prevent Azure routing between subnets. You can also override the default to route traffic between subnets through a network virtual appliance. If you require traffic between resources in the same virtual network to flow through a network virtual appliance, deploy the resources to different subnets.
 
-- **Consider service endpoints**. You can limit access to Azure resources like an Azure storage account or Azure SQL database to specific subnets with a virtual network service endpoint. You can also deny access to the resources from the internet. You might create multiple subnets, and then enable a service endpoint for some subnets, but not others.
-
 - **Consider network security groups**. You can associate zero or one network security group to each subnet in a virtual network. You can associate the same or a different network security group to each subnet. Each network security group contains rules that allow or deny traffic to and from sources and destinations.
 
 - **Consider private links**. Azure Private Link provides private connectivity from a virtual network to Azure platform as a service (PaaS), customer-owned, or Microsoft partner services. Private Link simplifies the network architecture and secures the connection between endpoints in Azure. The service eliminates data exposure to the public internet.
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/5-plan-addressing.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/5-plan-addressing.md
@@ -1,3 +1,7 @@
+Let's begin with an overview of IP addressing. 
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=5eed7999-56ce-4396-9e52-29390e9595d4]
+
 You can assign IP addresses to Azure resources to communicate with other Azure resources, your on-premises network, and the internet. There are two types of Azure IP addresses: _private_ and _public_.
 
 **Private IP addresses** enable communication within an Azure virtual network and your on-premises network. You create a private IP address for your resource when you use a VPN gateway or Azure ExpressRoute circuit to extend your network to Azure.
@@ -22,4 +26,7 @@ Let's take a closer look at the characteristics of IP addresses.
    - IP address-based security models that require apps or services to have a static IP address.
    - TLS/SSL certificates linked to an IP address.
    - Firewall rules that allow or deny traffic by using IP address ranges.
-   - Role-based virtual machines such as Domain Controllers and DNS servers.
+   - Role-based virtual machines such as Domain Controllers and DNS servers.
+
+> [!TIP]
+> Extend your learning with the [Design an IP addressing schema for your Azure deployment](/training/modules/design-ip-addressing-for-azure/) training module. This module has a sandbox where you can try a practical exercise. 
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/7-associate-public-ip-addresses.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/7-associate-public-ip-addresses.md
@@ -1,4 +1,6 @@
-A public IP address resource can be associated with virtual machine network interfaces, internet-facing load balancers, VPN gateways, and application gateways. You can associate your resource with both dynamic and static public IP addresses.
+A [public IP address](/azure/virtual-network/ip-services/public-ip-addresses) resource can be associated with virtual machine network interfaces, internet-facing load balancers, VPN gateways, and application gateways. You can associate your resource with both dynamic and static public IP addresses.
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=8124baac-6dbd-4bc3-97b1-3693b3b465c0]
 
 ### Things to consider when associating public IP addresses
 
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/8-associate-private-ip-addresses.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/8-associate-private-ip-addresses.md
@@ -1,4 +1,4 @@
-A private IP address resource can be associated with virtual machine network interfaces, internal load balancers, and application gateways. Azure can provide an IP address (dynamic assignment) or you can assign the IP address (static assignment).
+A [private IP address](/azure/virtual-network/ip-services/private-ip-addresses) resource can be associated with virtual machine network interfaces, internal load balancers, and application gateways. Azure can provide an IP address (dynamic assignment) or you can assign the IP address (static assignment).
 
 ### Things to consider when associating private IP addresses
 
@@ -20,4 +20,7 @@ A private IP address is allocated from the address range of the virtual network
 
 - **Static**: You select and assign any unassigned or unreserved IP address in the subnet's address range.
 
-   Suppose a subnet's address range is 10.0.0.0/16, and addresses 10.0.0.4 through 10.0.0.9 are already assigned to other resources. In this scenario, you can assign any address between 10.0.0.10 and 10.0.255.254.
+   Suppose a subnet's address range is 10.0.0.0/16, and addresses 10.0.0.4 through 10.0.0.9 are already assigned to other resources. In this scenario, you can assign any address between 10.0.0.10 and 10.0.255.254.
+
+> [!TIP]
+> For a more complete review of virtual networks, consider the [Introduction to Virtual Networks](/training/modules/introduction-to-azure-virtual-networks/) training module. 
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/includes/9-simulation-create-networks.md b/learn-pr/wwl-azure/configure-virtual-networks/includes/9-simulation-create-networks.md
@@ -1,31 +1,31 @@
-## Lab scenario
+## Exercise scenario
 
-Your organization is migrating network infrastructure and virtual machines to Azure. As the Azure Administrator you need to:
+Your organization is migrating a web-based application to Azure. Your first task is to put in place the virtual networks and subnets. You also need to securely peer the virtual networks. You identify these requirements.
 
-+ Configure Azure virtual networks and subnets.
-+ Connect remotely to Azure virtual machines by using RDP.
-+ Verify virtual machines in the same virtual network can communicate. 
+- Two virtual networks are required, app-vnet and hub-vnet. The virtual networks simulate a hub and spoke network architecture.
+- The app-vnet hosts the application. The app-vnet virtual network requires two subnets. The frontend subnet hosts the web servers. The backend subnet hosts the database servers.
+- The hub-vnet only requires a subnet for the firewall.
+- The two virtual networks must be able to communicate with each other securely and privately through virtual network peering.
+- Both virtual networks should be in the same region.
 
 ## Architecture diagram
 
 :::image type="content" source="../media/create-network-architecture.png" alt-text="Diagram of the architecture as explained in the objectives." border="false":::
 
-## Objectives
-
-+ **Task 1**: Create a virtual network.
-    + Create a virtual network, **vnet1**, with an IP address space of 10.1.0.0/16.
-    + Create a subnet, **default**, with an IP address space of 10.1.0.0/24.
-+ **Task 2**: Create two virtual machines.
-    + Create a virtual machine, **vm1**, in **vnet1** and allow inbound RDP.
-    + Create a second virtual machine, **vm2**, in **vnet1** and allow inbound RDP. 
-    + Ensure both virtual machines are deployed and running before continuing.
-+ **Task 3**: Test the virtual machine connections.
-    + Connect to **vm1** with RDP. 
-    + Connect to **vm2** with RDP. 
-    + Disable the public and private Windows Firewall on both virtual machines.
-    + Use Azure PowerShell to confirm **vm1** can ping **vm2**. 
+## Job skills
+
+- Create a virtual network.
+- Create a subnet.
+- Configure virtual network peering.
 
 > [!NOTE]
-> Select the thumbnail image to start the lab simulation. When you're done, be sure to return to this page so you can continue learning. 
+> Estimated time: 30 minutes. 
+> To complete this exercise, you need an [Azure subscription](https://azure.microsoft.com/free/).
+
+Launch the exercise, and follow the instructions. When finished, be sure to return to this page so you can continue learning.
+
+
+[![Button to launch exercise.](../media/launch-exercise.png)](https://microsoftlearning.github.io/Configure-secure-access-to-workloads-with-Azure-virtual-networking-services/Instructions/Labs/LAB_01_virtual_networks.html)
+
+
 
-[![Screenshot of the simulation page.](../media/simulation-create-networks.png)](https://mslearn.cloudguides.com/en-us/guides/AZ-900%20Exam%20Guide%20-%20Azure%20Fundamentals%20Exercise%204?azure-portal=true)
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/index.yml b/learn-pr/wwl-azure/configure-virtual-networks/index.yml
@@ -5,7 +5,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure virtual networks
   description: "Learn how to configure virtual networks and subnets, including IP addressing."
-  ms.date: 04/28/2025
+  ms.date: 05/20/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: module
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/media/azure-subnets-a5c893d5.png b/learn-pr/wwl-azure/configure-virtual-networks/media/azure-subnets-a5c893d5.png
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/media/create-network-architecture.png b/learn-pr/wwl-azure/configure-virtual-networks/media/create-network-architecture.png
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/media/launch-exercise.png b/learn-pr/wwl-azure/configure-virtual-networks/media/launch-exercise.png
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/media/network-components-66dff480.png b/learn-pr/wwl-azure/configure-virtual-networks/media/network-components-66dff480.png
diff --git a/learn-pr/wwl-azure/configure-virtual-networks/media/simulation-create-networks.png b/learn-pr/wwl-azure/configure-virtual-networks/media/simulation-create-networks.png
