CheapestExamDumps!

Microsoft Exam Syllabus

AZ-700 syllabus, skills measured, and exam topics

The AZ-700 exam measures Design and implement core networking infrastructure, Design, implement, and manage connectivity services, and Design and implement application delivery services. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Design and implement core networking infrastructure 25–30%
Design, implement, and manage connectivity services 20–25%
Design and implement application delivery services 15–20%
Design and implement private access to Azure services 10–15%
Design and implement Azure network security services 15–20%

What to know before you study

These sections explain the role, audience, and exam framing behind the outline.

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • How to earn the certification: Some certifications only require passing one exam, while others require passing multiple exams.
  • Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
  • Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

  • We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • As a candidate for this exam, you should have subject matter expertise in planning, implementing, and managing Azure networking solutions, including:
  • Core network infrastructure
  • Hybrid connectivity
  • Application delivery services
  • Private access to Azure services
  • Network security
  • As an Azure network engineer your responsibilities include optimizing performance, resiliency, scale, and security of Azure networking solutions. You proactively monitor network environments to identify issues and minimize risk. You also identify and resolve connectivity issues.
  • To deliver Azure solutions, you work with:
  • Solution architects
  • Cloud administrators
  • Security engineers
  • Application developers

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Design and implement core networking infrastructure (25–30%)

  • Plan and implement network segmentation and address spaces
  • Create a virtual network (VNet)
  • Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion
  • Plan and configure subnet delegation
  • Plan and configure shared or dedicated subnets
  • Create a prefix for public IP addresses
  • Choose when to use a public IP address prefix
  • Plan and implement a custom public IP address prefix (bring your own IP)
  • Create a public IP address
  • Associate public IP addresses to resources
  • Design name resolution inside a VNet
  • Configure DNS settings for a VNet

Design, implement, and manage connectivity services (20–25%)

  • Design a site-to-site VPN connection, including for high availability
  • Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements
  • Implement a site-to-site VPN connection
  • Identify when to use a policy-based VPN versus a route-based VPN connection
  • Create and configure a local network gateway
  • Create and configure an IPsec/Internet Key Exchange (IKE) policy
  • Create and configure a virtual network gateway
  • Diagnose and resolve virtual network gateway connectivity issues
  • Implement Azure Extended Network
  • Select an appropriate virtual network gateway SKU for point-to-site VPN requirements
  • Select and configure a tunnel type
  • Select an appropriate authentication method

Design and implement application delivery services (15–20%)

  • Map requirements to features and capabilities of Azure Load Balancer
  • Identify appropriate use cases for Azure Load Balancer
  • Choose an Azure Load Balancer SKU and tier
  • Choose between public and internal load balancers
  • Choose between regional and cross-region load balancers
  • Create and configure an Azure Load Balancer
  • Implement Azure Traffic Manager
  • Implement Gateway Load Balancer
  • Implement a load balancing rule
  • Create and configure inbound NAT rules
  • Create and configure explicit outbound rules, including source network address translation (SNAT)
  • Map requirements to features and capabilities of Azure Application Gateway

Design and implement private access to Azure services (10–15%)

  • Plan private endpoints
  • Create private endpoints
  • Configure access to private endpoints
  • Create a Private Link service
  • Integrate Private Link and Private Endpoint with DNS
  • Integrate a Private Link service with on-premises clients
  • Choose when to use a service endpoint
  • Create service endpoints
  • Configure service endpoint policies
  • Configure access to service endpoints