What does the AZ-700 syllabus cover?

The official AZ-700 syllabus covers the domains and topics that Microsoft lists in the current exam guide for Designing and Implementing Microsoft Azure Networking Solutions.

Where can I verify the latest AZ-700 skills measured?

Use the official source links on this page to verify the latest AZ-700 skills measured, topic areas, and outline updates before exam day.

Microsoft Exam Syllabus

AZ-700 syllabus, skills measured, and exam topics

The AZ-700 exam measures Design and implement core networking infrastructure, Design, implement, and manage connectivity services, and Design and implement application delivery services. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Domain	Weight
Design and implement core networking infrastructure	25–30%
Design, implement, and manage connectivity services	20–25%
Design and implement application delivery services	15–20%
Design and implement private access to Azure services	10–15%
Design and implement Azure network security services	15–20%

Design and implement core networking infrastructure (25–30%)

Plan and implement network segmentation and address spaces
Create a virtual network (VNet)
Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion
Plan and configure subnet delegation
Plan and configure shared or dedicated subnets
Create a Public IP Prefix
Choose when to use a public IP address prefix
Plan and implement a Custom IP address prefix (bring your own IP)
Create a public IP address
Associate public IP addresses to resources
Design name resolution inside a VNet
Configure DNS settings for a VNet

Design, implement, and manage connectivity services (20–25%)

Design a site-to-site VPN connection, including for high availability
Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements
Implement a site-to-site VPN connection
Identify when to use a policy-based VPN versus a route-based VPN connection
Create and configure a local network gateway
Create and configure an IPsec/Internet Key Exchange (IKE) policy
Create and configure a virtual network gateway
Diagnose and resolve virtual network gateway connectivity issues
Implement Azure Extended Network
Select an appropriate virtual network gateway SKU for point-to-site VPN requirements
Select and configure a tunnel type
Select an appropriate authentication method

Design and implement application delivery services (15–20%)

Map requirements to features and capabilities of Azure Load Balancer
Identify appropriate use cases for Azure Load Balancer
Choose an Azure Load Balancer SKU and tier
Choose between public and internal load balancers
Choose between regional and cross-region load balancers
Create and configure an Azure Load Balancer
Implement Azure Traffic Manager
Implement Gateway Load Balancer
Implement a load balancing rule
Create and configure inbound NAT rules
Create and configure explicit outbound rules, including source network address translation (SNAT)
Map requirements to features and capabilities of Azure Application Gateway

Design and implement private access to Azure services (10–15%)

Plan private endpoints
Create private endpoints
Configure access to private endpoints
Create a Private Link service
Integrate Private Link and Private Endpoint with DNS
Integrate a Private Link service with on-premises clients
Choose when to use a service endpoint
Create service endpoints
Configure service endpoint policies
Configure access to service endpoints

Design and implement Azure network security services (15–20%)

Create a network security group (NSG)
Associate a NSG to a subnet or network interface
Create an application security group (ASG)
Associate an ASG to a network interface
Create and configure NSG inbound and outbound security rules
Implement virtual network flow logs
Interpret virtual network flow logs
Verify IP flow
Configure an NSG for remote server administration, including Azure Bastion
Implement and manage virtual network security by using Azure Virtual Network Manager
Map requirements to features and capabilities of Azure Firewall
Select an appropriate Azure Firewall SKU

Purpose of this document

This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
Useful links: Description
Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
Exam scoring and score reports: A score of 700 or greater is required to pass.
Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

As a candidate for this exam, you should have subject matter expertise in planning, implementing, and managing Azure networking solutions, including:
Core network infrastructure
Hybrid connectivity
Application delivery services
Private access to Azure services
Network security
As an Azure network engineer your responsibilities include optimizing performance, resiliency, scale, and security of Azure networking solutions. You proactively monitor network environments to identify issues and minimize risk. You also identify and resolve connectivity issues.
To deliver Azure solutions, you work with:
Solution architects
Cloud administrators
Security engineers
Application developers