AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Design, implement, and manage enterprise Azure networking solutions including core routing, virtual network peering, ExpressRoute, VPNs, Azure Firewall, Application Gateway, and Network Watcher.
Official Exam Specification & Quick Facts
Question Difficulty Breakdown
Recommended Study Guides & Exam Preparation Blueprints
Reinforce your knowledge with domain breakdowns, trap question analyses, and architectural cheat sheets:
Exam Guidelines & Simulation Rules
Frequently Asked Questions (FAQ)
The AZ-700 exam contains 45-60 scenario, network topology, and configuration questions over 120 minutes. Cost is $165 USD with a passing mark of 700/1000 (70%).
Domains include: (1) Design and implement core networking infrastructure (~20-25%), (2) Design, implement, and manage connectivity services (~20-25%), (3) Design and implement application delivery services (~20-25%), (4) Design and implement private access to Azure services (~15-20%), and (5) Secure and monitor network connections (~15-20%).
Azure Virtual WAN is a unified networking service that provides optimized and automated branch-to-branch, branch-to-Azure, and multi-region transit connectivity through managed virtual hubs.
Azure Route Server allows network virtual appliances (NVAs) to exchange dynamic BGP routing information directly with the Azure Software Defined Network (SDN) without manually updating route tables.
ExpressRoute Direct connects directly to Microsoft's global backbone routers at 10 Gbps or 100 Gbps dedicated ports, while standard circuits connect via partner exchange providers at speeds from 50 Mbps to 10 Gbps.
Application Gateway v2 supports zone redundancy across multiple availability zones and automatically scales capacity units (0 to 125 instances) based on fluctuating HTTP/HTTPS traffic demands.
Connection Monitor provides unified end-to-end connection monitoring across Azure and hybrid endpoints, measuring latency, packet drops, and hop-by-hop network paths.
Private Endpoints assign a private IP address from your VNet to Azure PaaS resources (Storage, SQL, Cosmos DB) via Azure Private Link, eliminating public internet exposure.
Azure DNS Private Resolver enables direct, bidirectional querying of Azure private DNS zones from on-premises environments and vice versa without deploying custom IaaS VM DNS servers.
Azure Front Door uses Microsoft's global Anycast edge network to terminate client TCP/SSL connections close to users (split-TCP) and routes traffic to the fastest backend region.
AZ-700 is valid for one year and can be renewed annually for free through an unproctored assessment on Microsoft Learn prior to expiration.
AZ-700 certifies Senior Cloud Network Engineers, Hybrid Network Architects, and Infrastructure Engineers earning average US salaries between $130,000 and $170,000.