Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

1

Study guide for Exam AZ-700: Designing

and Implementing Microsoft Azure

Networking Solutions

Purpose of this document

This study guide should help you understand what to expect on the exam and includes a summary of

the topics the exam might cover and links to additional resources. The information and materials in this

A score of 700 or greater is required to pass.

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

2

We always update the English language version of the exam first. Some exams are localized into other

languages, and those are updated approximately eight weeks after the English version is updated.

While Microsoft makes every effort to update localized versions as noted, there may be times when the

localized versions of an exam are not updated on this schedule. Other available languages are listed in

the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred

language, you can request an additional 30 minutes to complete the exam.

The bullets that follow each of the skills measured are intended to illustrate how we are assessing that

skill. Related topics may be covered in the exam.

application delivery services, private access to Azure services, and network security.

Responsibilities for Azure network engineers include optimizing performance, resiliency, scale, and

security of Azure networking solutions. These professionals deploy the solutions by using the Azure

portal, the command line, and templates. They proactively monitor network environments to identify

issues and minimize risk.

Azure network engineers work with solution architects, cloud administrators, security engineers,

application developers, and DevOps engineers to deliver Azure solutions. They also assist Azure support

engineers in resolving connectivity issues reported by customers.

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

3

Candidates for this exam should have experience creating and managing compute, storage, and

networking resources in Azure. They should understand networking fundamentals, such as name

Design and implement core networking infrastructure (20–25%)

• Plan and implement network segmentation and address spaces

• Create a virtual network (VNet)

• Plan and configure subnetting for services, including VNet gateways, private endpoints, firewalls,

application gateways, VNet-integrated platform services, and Azure Bastion

• Plan and configure subnet delegation

• Create a prefix for public IP addresses

• Choose when to use a public IP address prefix

• Plan and implement a custom public IP address prefix (bring your own IP)

• Design private DNS zones

• Configure a public or private DNS zone

• Link a private DNS zone to a VNet

• Design service chaining, including gateway transit

• Design virtual private network (VPN) connectivity between VNets

• Implement VNet peering

• Design and implement user-defined routes (UDRs)

• Associate a route table with a subnet

• Configure forced tunneling

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

4

• Identify appropriate use cases for a Virtual Network NAT gateway

• Activate and monitor distributed denial-of-service (DDoS) protection

• Activate and monitor Microsoft Defender for DNS

Design, implement, and manage connectivity services (20–25%)

• Design a site-to-site VPN connection, including for high availability

• Select an appropriate VNet gateway SKU for site-to-site VPN requirements

• Implement a site-to-site VPN connection

• Identify when to use a policy-based VPN versus a route-based VPN connection

• Create and configure an IPsec/IKE policy

• Diagnose and resolve virtual network gateway connectivity issues

• Configure certificate-based authentication

• Configure authentication by using Azure Active Directory (Azure AD), part of Microsoft Entra

• Implement a VPN client configuration file

• Diagnose and resolve client-side and authentication issues

• Specify Azure requirements for Always On authentication

• Specify Azure requirements for Azure Network Adapter

• Select an ExpressRoute connectivity model

• Select an appropriate ExpressRoute SKU and tier

• Design and implement ExpressRoute to meet requirements, including cross-region connectivity,

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

5

• Configure Microsoft peering

• Select a Virtual WAN SKU

• Design a Virtual WAN architecture, including selecting types and services

• Create a hub in Virtual WAN

• Choose an appropriate scale unit for each gateway type

• Deploy a gateway into a Virtual WAN hub

• Configure virtual hub routing

• Create a network virtual appliance (NVA) in a virtual hub

• Integrate a Virtual WAN hub with a third-party NVA

Design and implement application delivery services (20–25%)

• Implement a load balancing rule

• Create and configure inbound NAT rules

• Create and configure explicit outbound rules, including SNAT

• Map requirements to features and capabilities of Azure Application Gateway

• Identify appropriate use cases for Azure Application Gateway

• Create a back-end pool

• Configure health probes

• Configure listeners

• Configure routing rules

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

6

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

7

• Create and configure NSG rules

• Map requirements to features and capabilities of Azure Firewall

• Design an Azure Firewall deployment

• Create and implement an Azure Firewall deployment

• Configure Azure Firewall rules

• Create and implement Azure Firewall Manager policies

• Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

8

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

9