AZ-700 decision sheets

• Application Gateway HTTP settings: probes, session affinity, connection draining, WAF
• Azure Firewall DNAT vs network vs application rules
• Azure Firewall Basic vs Standard vs Premium
• DDoS Protection vs WAF vs Azure Firewall vs NSG: which layer each covers
• DNS Private Resolver: inbound endpoint vs outbound endpoint and forwarding rulesets
• ExpressRoute FastPath: what it accelerates and what falls back to the gateway
• Firewall Manager: secured virtual hub vs hub virtual network
• Public vs internal vs gateway vs cross-region load balancer
• Network Watcher: IP flow verify vs effective security rules vs packet capture vs traffic analytics
• Bastion vs NAT Gateway vs Application Gateway vs Front Door vs Load Balancer
• NSG evaluation order, statefulness, and VNet Manager security admin rules
• Private DNS zones: virtual network links, cross-VNet resolution, and fallback to internet
• Private Link: connection approval, cross-tenant, and Front Door Private Link
• Service endpoints vs service endpoint policies vs private endpoints vs NSG service tags
• Traffic Manager: priority vs weighted vs multivalue vs subnet routing
• User-defined routes: valid next hop types, forced tunnelling, and gateway transit
• Basic Virtual WAN vs Standard Virtual WAN
• VNet peering: flexibility, non-transitivity, and cross-region constraints
• Site-to-site VPN vs route-based vs policy-based VPN vs ExpressRoute