Microsoft Azure Network Engineer AZ-700 — Study Guide

By Laurynas Brazys · 1 August 2026 · #microsoft #az-700 #certification #exam-prep #study-guide

Practice as you learn. Every concept maps to real exam questions with verified answers in the Microsoft exam hub, or drill the full exam with timed practice on ExamRoll.io.

This guide covers each AZ-700 domain in depth. Pick a domain to go deep, or work through them in order.

The domains

• ExpressRoute & WAN Connectivity — - Local: peering limited to the metro/region of the peering location; lower cost and smaller routing table footprint. - Standard:
• Azure Virtual Network Design — - VPN Gateway SKUs: VpnGw1 — moderate throughput, supports OpenVPN/IKEv2/P2S; VpnGw2 — higher throughput and TLS scaling; VpnGw3 — highest
• Hybrid Networking — Challenge: Contoso needs resilient, scalable hybrid connectivity with dynamic routing (BGP) between both datacenters and Azure, reliable P2S support
• Azure DNS & Name Resolution — - Azure DNS (Public): global anycast, managed API, per-zone/query billing. - Private DNS zones: VNet-scoped resolution, automatic private
• Network Security — - Azure Firewall Standard: stateful L3–L7 filtering, NAT/DNAT, application and network rules, managed service with autoscale options and
• Load Balancing & Traffic Management — Challenge: Provide a global HTTPS endpoint with edge WAF, rapid cross-region failover, and the ability to route traffic to regional Application
• Network Monitoring & Troubleshooting — Challenge: Intermittent connectivity and high latency to on-premises resources without clear packet-level evidence; existing NSG flow logs are
• Azure Virtual WAN & Hub-Spoke — - Azure Firewall Standard vs Premium: Standard supports stateful F/W, FQDN filtering, basic SNAT/DNAT; Premium adds TLS inspection, IDPS, URL

Ready to practice?

• Browse every question with verified answers → — free, with explanations.
• Start timed practice tests on ExamRoll.io → — the full question bank, in 20+ languages.

Browse Microsoft →