Troubleshoot a deliberately broken Azure network in 60–75 minutes with Azure PowerShell and Network Watcher. You will deploy two private Ubuntu VMs, activate an overriding NSG deny and a blackhole route at the same time, diagnose each layer independently, restore connectivity, verify HTTP 200, and delete the complete lab. WORKSHOP AT A GLANCE Level: Beginner to intermediate Time: 60–75 minutes Region: West Europe Estimated lab cost: about €0.03 of B1s compute for 75 minutes,

Build a highly available Azure web tier with PowerShell, two zonal Ubuntu VMs, a zone-redundant Standard Load Balancer, health probes, failover testing, recovery, and cleanup.

Build and test a secure Azure hub-and-spoke network with VNet peering, Azure Firewall Basic, user-defined routes, and private Ubuntu VMs—then clean up every lab resource.