AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam Topics and Questions

These Microsoft Designing and Implementing Microsoft Azure Networking Solutions (AZ-700) exam topics are organized according to official exam domains to help candidates quickly verify coverage and focus on assessment rather than theory. Each domain is paired with topic-wise AZ-700 sample questions that reflect how objectives are tested in the actual exam. This structure enables efficient review, targeted self-assessment, and rapid identification of weak areas when preparing for the Microsoft Designing and Implementing Microsoft Azure Networking Solutions certification exam.

Let's Practice Free Microsoft AZ-700 Questions Aligned with Official Exam Topics

Follows Microsoft's official outline Updated 14 Sep, 2026 5 Topics

Reviewed by Robert Johnson, Microsoft AZ-700 Certified Professional

Topic Content

Design and implement IP addressing for Azure resources by planning and implementing network segmentation and address spaces, creating virtual networks VNets, and configuring subnets for various services including VNet gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion. This includes planning subnet delegation, choosing between shared or dedicated subnets, creating and managing public IP address prefixes, implementing custom public IP address prefixes bring your own IP, creating public IP addresses, and associating them to appropriate... See More

Sample Questions for Topic 1 : Design and implement core networking infrastructure

You have an Azure virtual network named Vnet1.

You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.

Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

an allow rule that has the IP address range of Vnet1 as the source and destination of Sq1.EastUS a deny rule that has a source of VirtualNetwork and a destination of Sq1 a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24 a deny rule that has the IP address range of Vnet1 as the source and destination of Storage

Topic Content

Design and implement application delivery services by mastering Azure Load Balancer, Azure Traffic Manager, Azure Application Gateway, and Azure Front Door. For Azure Load Balancer, you must understand how to align business requirements with its features, select appropriate SKUs and tiers, differentiate between public and internal configurations, and choose between regional and global deployments. You should be able to create and configure load balancers, implement traffic management rules, establish inbound NAT rules, and configure outbound rules with SNAT capabilities, while... See More

Sample Questions for Topic 2 : Design and implement application delivery services

You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance.

You need to configure the policy to meet the following requirements:

Log all connections from Australia.

Deny all connections from New Zealand.

Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute.

What is the minimum number of objects you should create?

three custom rules that each has one condition one custom rule that has three conditions one custom rule that has one condition one rule that has two conditions and another rule that has one condition

Topic Content

Secure private connectivity to Azure services through Private Link and Private Endpoints by planning endpoint deployment strategies, creating and configuring private endpoints for controlled access, establishing Private Link services for custom applications, and integrating DNS resolution for seamless name resolution. Learn to connect on-premises clients to Private Link services, enabling hybrid network architectures with enhanced security. Understand Service Endpoints as an alternative connectivity method by determining appropriate use cases, provisioning service endpoints within virtual networks, implementing service endpoint policies to... See More

See Premium Questions

Topic Content

Implement and manage network security groups by creating NSGs and associating them to resources, creating application security groups ASGs and associating them to network interface cards NICs, and configuring inbound and outbound security rules. Implement virtual network flow logs to monitor traffic and interpret the logs to understand network behavior, verify IP flow to troubleshoot connectivity issues, and configure NSGs for remote server administration including Azure Bastion. Additionally, implement and manage virtual network security using Azure Virtual Network Manager to... Implement and manage network security groups by creating NSGs and associating them to resources, creating application security groups ASGs and associating them to network interface cards NICs, and configuring inbound and outbound security rules. Implement virtual network flow logs to monitor traffic and interpret the logs to understand network behavior, verify IP flow to troubleshoot connectivity issues, and configure NSGs for remote server administration including Azure Bastion. Additionally, implement and manage virtual network security using Azure Virtual Network Manager to centralize security policy management across multiple virtual networks and subscriptions. Design and implement Azure Firewall and Azure Firewall Manager by mapping organizational requirements to Azure Firewall features and capabilities, selecting appropriate SKUs based on performance and throughput needs, and designing deployments that align with network architecture. Create and implement Azure Firewall deployments, configure application and network rules to control traffic flow, and create Azure Firewall Manager policies for centralized management across multiple firewalls. Deploy Azure Firewall within Azure Virtual WAN hubs to create secure hub-and-spoke network architectures that provide centralized security and simplified management for distributed organizations. Design and implement Web Application Firewall WAF deployments by mapping application security requirements to WAF features and capabilities, designing deployments that protect web applications from common threats, and configuring detection or prevention modes based on organizational risk tolerance. Configure rule sets for WAF on Azure Front Door to protect applications at the edge and on Application Gateway to protect backend web servers, implement WAF policies with custom rules and managed rule sets, and associate policies to Front Door instances and Application Gateway listeners to enforce consistent security controls across web applications. See More

See Premium Questions

Topic Content

Design, implement, and manage a site-to-site VPN connection by planning architectures that support high availability and selecting appropriate virtual network gateway SKUs based on specific requirements. Determine when to deploy policy-based versus route-based VPN connections for optimal performance, then create and configure local network gateways, IPsecIKE policies, and virtual network gateways to establish secure connections between on-premises networks and Azure. Troubleshoot virtual network gateway connectivity issues to ensure reliable communication, and implement Azure Extended Network to expand your network infrastructure.... Design, implement, and manage a site-to-site VPN connection by planning architectures that support high availability and selecting appropriate virtual network gateway SKUs based on specific requirements. Determine when to deploy policy-based versus route-based VPN connections for optimal performance, then create and configure local network gateways, IPsecIKE policies, and virtual network gateways to establish secure connections between on-premises networks and Azure. Troubleshoot virtual network gateway connectivity issues to ensure reliable communication, and implement Azure Extended Network to expand your network infrastructure. Master the configuration of all components including gateway selection, policy creation, and diagnostic procedures to maintain robust site-to-site connectivity. Design, implement, and manage point-to-site VPN connections by selecting appropriate virtual network gateway SKUs and configuring tunnel types that align with your security requirements. Choose suitable authentication methods including RADIUS and Microsoft Entra ID, then implement VPN client configuration files to enable secure remote access. Diagnose and resolve client-side and authentication issues to maintain seamless connectivity, and configure advanced features such as Always On VPN and Azure Network Adapter to meet enterprise requirements. Understand the specific Azure prerequisites for these technologies and ensure proper authentication mechanisms are in place for reliable remote user access. Design, implement, and manage Azure ExpressRoute by selecting appropriate connectivity models, SKUs, and tiers that match your organizations bandwidth and performance needs. Plan ExpressRoute deployments that incorporate cross-region connectivity, redundancy, and disaster recovery capabilities while leveraging advanced options like Global Reach, FastPath, and ExpressRoute Direct. Configure both Azure private peering and Microsoft peering based on your requirements, establish ExpressRoute gateways, and connect virtual networks to circuits with optimized route advertisement configurations. Implement encryption over ExpressRoute, enable Bidirectional Forwarding Detection for network reliability, and develop troubleshooting skills to diagnose and resolve connection issues effectively. Design and implement an Azure Virtual WAN architecture by selecting appropriate SKUs and designing comprehensive hub-and-spoke topologies that integrate multiple services and connectivity options. Create Virtual WAN hubs with properly scaled gateways for VPN, ExpressRoute, and other connectivity types, then configure virtual hub routing to direct traffic efficiently across your network. Integrate third-party network virtual appliances into Virtual WAN hubs to extend cloud connectivity capabilities and enable advanced networking scenarios. Understand scale unit requirements for each gateway type and deploy gateways strategically to support your organizations connectivity and performance objectives. See More

See Premium Questions

Ready to Start Practicing?

Access all questions and start your exam preparation journey

Upgrade to Full AZ-700 Exam Questions 🚀

Main Navigation

Hot Vendors

Hot Exams

AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam Topics and Questions

Let's Practice Free Microsoft AZ-700 Questions Aligned with Official Exam Topics

Ready to Start Practicing?