Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Prepare to design and configure virtual networks
   • Gather multi-tier application networking requirements according to business needs
   • Identify business and industry requirements for virtual network in cloud environment
   • Research and identify available security options for virtual network
2. Design and configure virtual networks
   • Design virtual network according to networking and business requirements for a multi-tier application
   • Allocate virtual network and subnets for documented IP ranges
   • Enable network gateways and its service as required
   • Configure route tables and routing targets as required
   • Configure security controls to support test environment
   • Check expected network traffic is permitted into, through and out of virtual network
   • Collect and monitor network traffic logs and metrics
   • Test external connectivity to a resource within virtual network and demonstrate only permitted traffic reaches the resource
   • Troubleshoot and fix errors as required
3. Configure virtual network peering
   • Establish peering connection between two virtual networks
   • Adjust routing tables to direct traffic between both networks
   • Demonstrate network connectivity between hosts in each network
   • Test and troubleshoot network peering configuration
4. Document virtual networks
   • Document work, including a network diagram, and submit to required personnel as required
   • Obtain final task sign off from required personnel as required

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, and to:

design and deploy virtual network to support a multi-tier application in a cloud environment

modify at least one network configuration to peer with another virtual network.

In the course of the above, the candidate must:

enable security controls and confirm that controls accurately affect network traffic as required

use cloud management console, cloud software development kits or command line tools

create user documentation.

---

Knowledge Evidence

The candidate must demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit. This includes knowledge of:

industry technology standards used in cloud computing solutions and services

industry standard hardware and software products, their general features, capabilities and application, including storage technology

roles and principles of virtual networks in cloud environments

uses and purpose of routing, routing targets, subnets, networking security controls, virtual private network (VPN) and IP address ranges

uses of technology to connect to resources within a virtual network, including secure shell (SSH), virtual private network (VPN) and peering

uses and differences between:

public and private subnets

networking gateways

routing targets

network security controls

testing and debugging techniques

methodology and techniques to collect and analyse network traffic metrics and traffic logs.

---