Blog Post

Azure Network Security Blog
12 MIN READ

Become an Azure Network Security Ninja

camilamartins's avatar
camilamartins
Icon for Microsoft rankMicrosoft
May 14, 2021

Last update - April 8, 2026

Welcome to the Azure Network Security Ninja Training. This training is designed to help you build from foundational concepts to advanced deployment and operational guidance across Azure Network Security, with a focus on Azure DDoS Protection, Azure Firewall, Azure Firewall Manager, Azure Web Application Firewall and Azure Bastion. Whether you are just getting started or looking to deepen your expertise, this guide brings together core learning resources, product documentation, architecture guidance, and hands-on content in one place.

Check back here routinely, as we will continue to update this post as new capabilities and learning resources become available.

Anything in here that could be improved or may be missing? Let us know in the comments section. We are looking forward to hearing from you.

Azure Network Security Ninja Certificate

To obtain the Azure Network Security Ninja certificate:

  1. Complete the Azure Network Security knowledge check.
  2. If you score 80% or more, request your certificate from here.
  3. If you score below 80%, review the training materials and try again.

Module 0 - How to use this training

  • Who Is This Training For? - This Ninja training is designed for anyone who needs to design, deploy, secure, and operate Azure Network security controls in real environments. It is especially useful for cloud/network/security practitioners who want a structured path from fundamentals through to advanced scenarios. Whether you are new to Azure Network Security or looking to deepen your expertise, this training provides both foundational knowledge and real-world context.
  • Recommended Prerequisites - To get the most from this training, you should have a basic understanding of Azure fundamentals, including virtual networks, compute, and identity. Familiarity with general networking concepts such as IP addressing, routing, and ports will also be helpful, along with an awareness of common security principles such as the OWASP Top 10 and Zero Trust. While hands-on experience with Azure is beneficial, it is not required, as the training is designed to guide you through key concepts step by step.
  • Suggested Learning Path - This guide follows a practical, layered approach so you can either complete the training end‑to‑end (recommended for beginners) or jump to specific modules based on your role and goals; however, we strongly recommend following the modules in the order they appear, as each module builds on concepts introduced earlier. 
    • Module 1: Azure Network Security Fundamentals - Introduces core Azure Network Security concepts, key scenarios, and foundational features that underpin all subsequent modules.
    • Module 2: Azure DDoS Protection - Covers how Azure DDoS Protection defends applications against DDoS attacks.
    • Module 3: Azure Firewall and Azure Firewall Manager - Explores centralized network security using Azure Firewall and Azure Firewall Manager.
    • Module 4: Azure Web Application Firewall (WAF) - Focuses on protecting web applications from common threats using Azure Web Application Firewall.
    • Module 5: Azure Bastion - Describes how Azure Bastion enables secure, private administrative access to virtual machines.
    • Module 6: Deployment and Architecture – Describes reference architectures and deployment patterns for real-world Azure environments.
    • Module 7: Operations and Monitoring - Focuses on operations, best practices and include logging, metrics, alerting, and troubleshooting across Azure Network Security services.
    • Module 8: Security Integrations - Explores how Azure Network Security services integrate with other security platforms and services for end‑to‑end visibility and protection.
    • Module 9: Hands‑On Labs - Provides practical labs and guided exercises to validate concepts through real deployments and scenarios.
    • Module 10: Other Resources - Offers additional documentation, community links, and supporting resources for continued learning.

Module 1 - Azure Network Security Fundamentals

Module 2 - Azure DDoS Protection

Azure DDoS Protection, combined with application design best practices, provides enhanced DDoS mitigation features to defend against DDoS attacks. It is automatically tuned to help protect your specific Azure resources in a virtual network. Protection is simple to enable on any new or existing virtual network, and it requires no application or resource changes.

Module 3 - Azure Firewall and Azure Firewall Manager

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeter.

Module 4 - Azure Web Application Firewall

Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. You can deploy WAF on Azure Application Gateway, Azure Front Door, and Application Gateway for Containers.

Module 5 - Azure Bastion

Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP/SSH connectivity to your virtual machines directly over TLS from the Azure portal, or via the native SSH or RDP client already installed on your local computer. Azure Bastion is deployed directly in your virtual network and supports all VMs in the virtual network using private IP addresses.

Module 6 - Deployment and Architecture

Module 7 - Operations and Monitoring

Module 8 - Security Integrations

Module 9 - Hands-on Labs

Module 10 - Other Resources

 

Are you ready to take your knowledge check? If so, click here. If you score 80% or more in the knowledge check, request your participation certificate here. If you achieved less than 80%, please review the questions that you got it wrong, study more and take the assessment again.

Note: it can take up to 24 hours for you to receive your certificate via email.

 

Updated Apr 08, 2026
Version 75.0
azure application gateway
azure bastion
azure ddos protection
azure firewall
azure firewall manager
azure front door
azure network security
azure waf

30 Comments