What is the AZ-700 exam?

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions is the exam for the Microsoft Certified: Azure Network Engineer Associate certification. It tests core networking infrastructure, hybrid connectivity, application delivery, private access to Azure services and network security. A score of 700 or greater is required to pass.

What is on the AZ-700 exam?

Five domains: design and implement core networking infrastructure (25 to 30 percent), design, implement, and manage connectivity services (20 to 25 percent), design and implement application delivery services (15 to 20 percent), design and implement Azure network security services (15 to 20 percent), and design and implement private access to Azure services (10 to 15 percent).

Is the AZ-700 exam changing in 2026?

Only slightly. A refreshed skills outline takes effect July 27, 2026, and Microsoft's change log grades the listed updates Minor for IP addressing, network monitoring and network security groups, with the rest No change. No domains or weights move, so current study material remains valid.

How hard is the AZ-700 exam?

AZ-700 is a breadth exam: no domain exceeds 30 percent, so you cannot carry it with one strong subject. In the outline, firewall appears 13 times, ExpressRoute and VPN 11 times each, and DNS 9 times. Most candidates are weakest on hybrid connectivity details like ExpressRoute peering choices and policy-based versus route-based VPNs.

Does AZ-700 have prerequisites?

No. There is no prerequisite exam for AZ-700. The audience profile expects subject matter expertise in planning, implementing and managing Azure networking, and Microsoft lists associate-level exams at typically US$165 in the United States. The certification renews free every 12 months with an online renewal assessment.

How many questions are on the AZ-700 exam?

Microsoft does not publish an official question count for AZ-700. It does publish a passing score of 700, the exam page allots 100 minutes for the assessment, and there is a free official practice assessment on Microsoft Learn. Treat any site quoting an exact question count as unofficial.

Is the AZ-700 certification worth it?

For network engineers moving into cloud roles, yes. It is the only Microsoft associate certification dedicated to networking, and the skills it covers, ExpressRoute, Virtual WAN, Azure Firewall, Front Door and Private Link, are the exact services enterprises pay network specialists to design and troubleshoot.

AZ-700 practice test

AZ-700 Practice Test: Azure Network Engineer Practice Exam Questions

Upload your Azure networking notes, and the AI writes unlimited AZ-700 practice questions with an answer key in seconds. Spread across all five domains, because this exam has no anchor topic: nothing on it is worth more than 30 percent.

Your study files are processed securely and deleted automatically after your practice questions are built.

Upload your networking notes and generate your first question set

Click to upload or drag and drop

PDF, DOCX, PPTX, TXT, JPG, JPEG, PNG, HEIC, ODP, ODT, BMP, or TIFF

up to 20MB

Please wait, your quiz is being created...

Uploading...

Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions is the exam for the Microsoft Certified: Azure Network Engineer Associate certification, with a published passing score of 700, 100 minutes on the exam clock, and a free official practice assessment on Microsoft Learn. It is a pure breadth exam: five domains and none of them worth more than 30 percent, from core networking (25 to 30 percent) down to private access (10 to 15 percent). A refreshed outline takes effect July 27, 2026, and the official change log grades every listed change Minor or No change, so nothing structural moves. There is no prerequisite exam.

Last updated July 2026

What the AZ-700 exam tests from July 27, 2026

We read the official skills-measured outline on Microsoft Learn the way we do for every certification page on this site. In the roughly 1,400-word outline, firewall appears 13 times, ExpressRoute 11 times, VPN 11 times, DNS 9 times and Load Balancer 9 times. That distribution is the study plan.

Domain	What is actually in it	Weight
Design and implement core networking infrastructure	IP addressing and subnetting for gateways, private endpoints, firewalls and Bastion, subnet delegation, public IP prefixes and bring-your-own-IP, name resolution with public and private DNS zones plus Azure DNS Private Resolver, VNet peering and gateway transit, UDRs and forced tunneling, Azure Virtual Network Manager, Azure Route Server, NAT Gateway, and monitoring with Network Watcher, Azure Monitor for Networks, DDoS protection and Defender for Cloud attack path analysis.	25 to 30%
Design, implement, and manage connectivity services	The hybrid domain. Site-to-site VPNs including HA designs, gateway SKUs, policy-based vs route-based decisions and IPsec/IKE policies, point-to-site VPNs with tunnel types, RADIUS and Entra ID authentication, ExpressRoute end to end: connectivity models, SKUs and tiers, Global Reach, FastPath, ExpressRoute Direct, private vs Microsoft peering, encryption and Bidirectional Forwarding Detection, plus Virtual WAN architectures with hubs, gateway scale units and third-party NVA integration.	20 to 25%
Design and implement application delivery services	Azure Load Balancer SKUs, public vs internal and regional vs cross-region choices, Gateway Load Balancer, inbound NAT and explicit outbound SNAT rules, Traffic Manager, Application Gateway with backend pools, health probes, listeners, routing rules, TLS and rewrite rule sets, and Azure Front Door with tiers, TLS termination, caching, and Private Link origins.	15 to 20%
Design and implement Azure network security services	NSGs and application security groups, inbound and outbound rules, virtual network flow logs and IP flow verification, Azure Firewall SKU selection, rules and Firewall Manager policies, secured hubs inside Virtual WAN, and WAF deployments in detection or prevention mode with rule sets on both Front Door and Application Gateway.	15 to 20%
Design and implement private access to Azure services	The smallest domain, and a giveaway if you know it: planning and creating private endpoints, building a Private Link service, DNS integration for Private Link, reaching it from on-premises clients, and when a service endpoint with policies is the right call instead.	10 to 15%

A breadth exam punishes uneven preparation. Build a question set that mirrors the whole blueprint: generate practice questions from your own networking notes and drill all five domains in proportion.

Domains: 5, none over 30%
Passing score: 700
Refreshed outline: Jul 27, 2026
Practice questions: Unlimited

Where AZ-700 candidates actually lose marks

The July 27, 2026 refresh is quiet: Minor updates to IP addressing, network monitoring and NSG objectives, No change everywhere else, no weight movement. So the exam's shape is stable, and so are its trouble spots.

Hybrid connectivity detail

ExpressRoute is where cloud-first candidates struggle: connectivity models, Global Reach vs FastPath vs ExpressRoute Direct, and the private peering vs Microsoft peering decision. Add policy-based vs route-based VPN selection and gateway SKU sizing, and this domain decides borderline results.

DNS with Private Link

Private endpoints are easy to create and easy to break with DNS. The outline asks for Private Link and private endpoint DNS integration, DNS Private Resolver design, and on-premises name resolution paths. Scenario questions here read simple and are not.

Load balancer lineup

Four services overlap on purpose: Load Balancer, Traffic Manager, Application Gateway and Front Door. The exam hands you requirements and expects the right service, tier and SKU. If you cannot explain when Gateway Load Balancer earns its place, drill this grid.

Every one of those topics is a named objective group on the outline. The free official practice assessment shows you the question style; generated drills from your own notes give you the volume the official mock cannot.

Why strong on-premises network engineers still fail AZ-700

CCNA-grade fundamentals help, but the exam tests Azure's opinionated versions of familiar ideas.

What you know from on-premises networking	What the exam also expects
You design VLANs and subnets	Subnet delegation, dedicated subnets for gateways, Bastion and firewalls, public IP prefixes, and bring-your-own-IP with custom address prefixes
You configure routers and static routes	UDRs with route table association, forced tunneling, gateway transit through peering, Azure Route Server, and Virtual Network Manager for connectivity at scale
You run BGP over MPLS circuits	ExpressRoute circuits with SKUs and tiers, route advertisement configuration, Bidirectional Forwarding Detection, and encryption over ExpressRoute
You terminate IPsec tunnels on firewalls	Virtual network gateway SKU selection, policy-based vs route-based tunnels, IPsec/IKE policy configuration, and point-to-site authentication via RADIUS or Entra ID
You load balance with a hardware appliance	Choosing between Load Balancer, Traffic Manager, Application Gateway and Front Door per scenario, plus WAF policies in detection or prevention mode on the last two

Every right-hand cell is a named objective on the July 2026 outline. Generated question drills are the cheapest way to find out which of those you can only half-explain, before the proctored clock is running.

How to build AZ-700 practice questions that match the real blueprint

Cover all five domains in proportion, then drill the hybrid and DNS scenarios twice.

1 Upload current material: The AZ-700 study guide, Microsoft Learn modules, or your own notes. If it never mentions DNS Private Resolver, Virtual Network Manager or Gateway Load Balancer, check it against the July 2026 outline first.
2 Drill the service picker: Generate requirement-to-service questions: which load balancer, which VPN type, which ExpressRoute option, which firewall SKU. That decision pattern is most of the exam's scenario format.
3 Trace DNS end to end: Private zones, zone links, Private Resolver, private endpoint records, on-premises forwarding. Drill name-resolution paths until you can predict what resolves from where without drawing it.
4 Finish with the official mock: AZ-700 has a free official practice assessment on Microsoft Learn. Use generated questions to close gaps domain by domain, then confirm readiness on the official mock before booking.

AZ-700 exam questions, answered

What is the AZ-700 exam?: Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions is the exam for the Microsoft Certified: Azure Network Engineer Associate certification. It tests core networking infrastructure, hybrid connectivity, application delivery services, private access to Azure services and network security. A score of 700 or greater is required to pass, and the study guide is published on Microsoft Learn.
What is on the AZ-700 exam?: Five domains: design and implement core networking infrastructure (25 to 30 percent), design, implement, and manage connectivity services (20 to 25 percent), design and implement application delivery services (15 to 20 percent), design and implement Azure network security services (15 to 20 percent), and design and implement private access to Azure services (10 to 15 percent). The outline names ExpressRoute Global Reach, Virtual WAN, DNS Private Resolver, Route Server, Gateway Load Balancer, Front Door and Azure Firewall Manager verbatim.
Is the AZ-700 exam changing in 2026?: Only at the edges. A refreshed skills outline takes effect July 27, 2026, and the official change log grades the listed updates Minor for IP addressing, network monitoring and network security group objectives, with everything else No change. No domains are added or removed and no weights move, so study material aligned to the current outline stays valid through the refresh.
How hard is the AZ-700 exam?: Its difficulty is breadth. With five domains and none above 30 percent, you cannot pass on one specialty, and the outline rewards production-grade detail: BGP route advertisement over ExpressRoute, IPsec/IKE policy settings, WAF rule sets on two different services, and DNS integration for Private Link. On-premises network engineers usually find the Azure service catalog, not the networking theory, is what needs study.
Does AZ-700 have prerequisites?: No exam is a prerequisite. The audience profile expects hands-on Azure networking experience, and many candidates come from the AZ-104 practice test path since the administrator exam introduces VNets, peering and NSGs at a lighter depth. Microsoft lists associate-level exams at typically US$165 in the United States, and the certification renews free every 12 months with an online renewal assessment.
How many questions are on the AZ-700 exam?: Microsoft does not publish an official question count for AZ-700. It does publish a passing score of 700, the exam page allots 100 minutes for the assessment, and a free official practice assessment is available on Microsoft Learn. Treat any site quoting an exact question count as unofficial, and confirm details on the exam page when you schedule.
Is the AZ-700 certification worth it?: For network engineers moving toward cloud roles it is the most direct Microsoft credential there is: the only associate certification dedicated to networking, covering the services enterprises actually run their traffic through. Azure architects also take it to firm up the networking half of design work; the AZ-305 practice exam assumes exactly this material when it asks for network architecture recommendations.

PDFQuiz is not affiliated with, endorsed by, or sponsored by Microsoft. Azure, ExpressRoute, Microsoft Entra and Microsoft Defender are trademarks of Microsoft Corporation. This generator builds practice questions from material you upload and is a study aid, not a substitute for official learning paths. Always confirm the current skills-measured document before you book.

Related study tools

AZ-700 sits between two tracks: the AZ-104 practice test covers the administrator exam most network engineers pass first, and the AZ-500 practice test covers the security exam whose firewall, NSG and Private Link objectives overlap this one heavily. Any study guide works with the certification exam generator.

Build your first AZ-700 practice set

Upload your networking notes and generate exam-style questions with an answer key in under a minute, spread across all five domains the way the real paper is.

Start Creating Practice Questions

Z tej samej rodziny narzędzi