Azure Mastery Download
Azure Mastery

Microsoft Certification AZ-700

Predict your score. Pass with proof.

On-device AI scores your readiness, builds an adaptive study plan, and flags topics fading from memory — before they cost you the exam.

383 practice questions AI score prediction 100% offline
Download free iPhone & iPad · Free to start

AZ-700 Study App for iOS — Microsoft Azure Network Engineer

Get exam-ready for AZ-700 (Microsoft Azure Network Engineer) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all five AZ-700 domains, build a personalised study plan from your weak spots, and surface topics you're forgetting — all without sending a single byte off your device.

The exam

What is the AZ-700 exam?

AZ-700 is the Microsoft Certified: Azure Network Engineer Associate exam — the credential hiring managers expect when posting "Cloud Network Engineer", "Azure Networking Specialist", or "Cloud Connectivity Architect" roles. It's the natural next step after AZ-104 for anyone whose day job has shifted from generalist administration into network-specific design and operation. AZ-700 also pairs with AZ-500 for the network-security overlap (Azure Firewall, Private Link, DDoS Protection, WAF) and feeds the AZ-305 architect track when networking is a candidate's specialty area.

AZ-700 is hands-on and design-oriented. It validates that you can plan and implement Azure network infrastructure (VNets, subnets, IP plans, route tables); hybrid connectivity (VPN Gateway, ExpressRoute, Virtual WAN); application delivery (Azure Load Balancer, Application Gateway, Front Door, Traffic Manager); private access to PaaS (Private Link, Private Endpoints, service endpoints); and network security (Azure Firewall, Firewall Manager, NSGs, DDoS Protection, WAF). Expect scenario questions where a customer has a constraint — "spoke VNets must reach an on-prem subnet without traversing the hub" — and you pick the right service combination.

Microsoft updated the AZ-700 skills outline on 24 April 2026. Every question in Azure Mastery's AZ-700 bank is mapped to the current outline — no leftover questions on retired services. Read the official outline at learn.microsoft.com.

Skills measured · April 2026

AZ-700 exam objectives

Five domains, with weights set by Microsoft's April 2026 update. Every domain summary below is paraphrased from the official skills outline; bullet-level objectives in Azure Mastery are tagged so you always know which domain you're being tested on and where your weak spots cluster.

Design and implement core networking infrastructure25–30%

The largest domain by weight. Plan and implement VNets, subnets, IP addressing, public IPs, prefixes, IPv6 considerations; VNet peering (regional, global, gateway transit, hub-and-spoke topologies); route tables and user-defined routes; name resolution via Azure DNS (public, private zones, virtual network links, conditional forwarding). Plus the resource design patterns — when to choose hub-and-spoke vs Virtual WAN. Around 10–18 questions per sitting.

Design, implement, and manage connectivity services20–25%

Hybrid connectivity. VPN Gateway — site-to-site, point-to-site, VNet-to-VNet, BGP, active-active vs active-standby. ExpressRoute — circuits, peering types, FastPath, ExpressRoute Direct vs Provider. Azure Virtual WAN — secured virtual hubs, branch connectivity, custom routing, integration with Azure Firewall. Encrypt-in-transit story: VPN over ExpressRoute, MACsec. Around 8–15 questions.

Design and implement application delivery services15–20%

Layer-4 vs Layer-7 load balancing. Azure Load Balancer (public, internal, Standard SKU, backend pools, health probes, NAT rules). Azure Application Gateway v2 (URL-based routing, multi-site hosting, SSL termination, WAF integration, autoscaling). Azure Front Door (global, HTTP/2, caching, WAF) and Azure Traffic Manager (DNS-based, routing methods — priority, weighted, performance, geographic). Choose the right service for the scenario — global vs regional, L4 vs L7, latency-sensitive vs failover-sensitive. Around 6–12 questions.

Design and implement private access to Azure services10–15%

Smallest domain by weight, distinct conceptually. Azure Private Link and Private Endpoints for PaaS access without public exposure; service endpoints for VNet-restricted access; VNet integration for App Service / Functions; Private Link Service for exposing your own services privately to consumers in other tenants. Around 4–9 questions.

Design and implement Azure network security services15–20%

Security at the network layer (overlaps with AZ-500 territory). Azure Firewall (rules, threat intelligence, Premium-tier IDPS and TLS inspection, Firewall Manager hierarchies); NSGs and application security groups; Web Application Firewall on App Gateway and Front Door (managed rule sets, custom rules, geo filtering); DDoS Protection (Network vs IP plans). Plus encryption choices: VNet encryption, MACsec on ER. Around 6–12 questions.

Designed for AZ-700

How Azure Mastery helps you pass AZ-700

Azure Mastery ships with 383 AZ-700 practice questions — the largest cert-specific bank we ship — every one written specifically against the current (April 2026) skills outline. Each question carries a domain tag mapped to the official five domains (core infrastructure, connectivity, application delivery, private access, network security), so you always know which area you're being tested on and where your weak spots are clustered. Bicep snippets, route tables, BGP configs, and CLI commands appear in roughly a third of the questions — matching the format of the live exam.

The on-device Exam IQ engine predicts your AZ-700 score before you sit the exam. After roughly 30 questions it has enough signal to give a confidence-scored prediction (e.g. "708 ±60, 68% confidence") — and tells you the specific topics that are dragging your readiness down. No vague "study more" advice; just a ranked list of objectives where improvement would move your score the furthest.

The adaptive study plan rebuilds itself from your answer history. Get a hub-and-spoke routing question wrong? You'll see another VNet-peering scenario in the next session. Master "Application Gateway vs Front Door" three sessions running and the engine backs off, surfacing fresh ExpressRoute or Private Link scenarios. The plan optimises for the gap between where you are and the 700 pass score, not for blind volume.

Knowledge decay tracking matters more for AZ-700 than for foundational exams — five domains is a lot to retain, and the topic you mastered three weeks into your study window is the topic you'll forget by exam day if you stop revising. Azure Mastery tracks every topic's decay curve and flags topics approaching expiry. The padlock icon on the Today screen is your "revisit before you forget" cue, and weak-spot drills automatically pull from decayed topics first.

Real exam simulation mode runs at AZ-700's actual length and time pressure: a randomised 40–60-question set drawn from the full 383-question bank, weighted by domain percentages from the April 2026 outline, with the 100-minute timer running and no jumping back to flag-and-review. It's the closest you can get to the live Pearson VUE / online-proctored experience without sitting the exam.

Everything runs on-device. Your answer history, your readiness gauge, your decay alerts — none of it leaves your iPhone or iPad. No account required to start, no tracking, no sync server. Privacy-first by design.

6-week study plan

Suggested AZ-700 study plan

Most candidates pass AZ-700 after four to eight weeks of focused study, depending on prior Azure experience. The six-week plan below maps onto the five AZ-700 domains, Azure Mastery's adaptive sessions, and the in-app exam simulator. Adjust pace to taste — the readiness gauge tells you when you're done, not the calendar.

  1. Core infrastructure and DNS

    • Days 1–3: VNets, subnets, IP addressing strategy (RFC1918, public IP SKUs, IPv6). Then VNet peering — regional, global, gateway transit, hub-and-spoke topology design.
    • Days 4–6: Route tables, user-defined routes, BGP-propagated routes, route propagation rules. Hub-and-spoke vs Virtual WAN trade-offs.
    • Days 7–9: Azure DNS — public zones, private zones, virtual network links, registration vs resolution, conditional forwarding via custom DNS servers.
    • Days 10–14: Hybrid connectivity foundations — VPN Gateway (S2S, P2S, V2V, BGP), ExpressRoute (circuits, peerings, FastPath, ER Direct), Virtual WAN (secured hubs, branch connections).

  2. Application delivery and private access

    • Days 15–17: Azure Load Balancer — public, internal, Standard SKU, backend pools, health probes, NAT rules.
    • Days 18–21: Application Gateway v2 — URL routing, multi-site, SSL termination, autoscaling, integration with WAF. Then Azure Front Door — global, caching, WAF, custom domains.
    • Days 22–24: Traffic Manager routing methods — priority, weighted, performance, geographic, multi-value, subnet. Choosing between Front Door and Traffic Manager.
    • Days 25–28: Private Link, Private Endpoints, service endpoints, VNet integration for App Service / Functions, Private Link Service for cross-tenant private exposure.

  3. Network security, sharpen, simulate

    • Days 29–32: Azure Firewall — rules, threat intelligence, Premium-tier IDPS and TLS inspection, Firewall Manager hierarchies. Plus NSGs and ASGs (effective rules, flow logs).
    • Days 33–36: Web Application Firewall — managed rule sets (CRS), custom rules, geo filtering, rate limiting on App Gateway and Front Door. DDoS Protection (Network vs IP plans, mitigation reports).
    • Days 37–40: Run Focus Weak Spots every morning. Core infrastructure (25–30%) and connectivity (20–25%) are the heaviest — weight your time accordingly.
    • Days 41–42: Two end-to-end Exam Simulator runs at full 100-minute length. Review carefully. If readiness gauge is 750+ with reasonable confidence, schedule the exam.

Inside the app

Every Microsoft question type, on iPhone

AZ-700's question bank uses the same formats Microsoft puts on the live exam — not just multiple choice. Each visualisation below is a faithful mock of how the type renders inside Azure Mastery on iPhone and iPad. Exam-simulator mode runs all of them at full 100-minute length with no flag-and-review jumps, mirroring Pearson VUE.

Multiple choice

One correct answer from four to six options. The most common type on every Azure exam — practical recall of services, settings, and limits.

~50% of questions

Multi-select

Pick two or more correct answers from a list. Microsoft tells you exactly how many to choose. Partial credit not awarded — you need every selection right.

All-or-nothing

Drag-and-drop

Arrange items into the correct sequence — deployment steps, the order operations occur in a pipeline, troubleshooting flows. Long-press to drag on touch.

Order matters

Hotspot

Tap the correct area of an image — the right setting in a portal screenshot, the right resource in a topology diagram. Practical visual recall under time pressure.

Tap target

Case studies

A multi-paragraph scenario followed by 4–6 linked questions. Common on AZ-700 in the storage and identity domains; dominant on AZ-305 and AZ-400.

Multi-question

Why Wrong AI

An Azure Mastery exclusive. When you answer incorrectly, an on-device Apple Foundation Model writes a targeted explanation grounded in the correct rationale. Never leaves your device.

App exclusive

Frequently asked

AZ-700 FAQs

How much does the AZ-700 exam cost?

The AZ-700 voucher is USD $165 in the United States. Pricing varies by region — in the UK it's typically around £128. Microsoft sometimes runs free-voucher promotions during events such as Microsoft Build or Microsoft Ignite, so check your Microsoft Learn profile for any active offers before booking. AZ-700 also requires annual renewal (free, online), so factor that into long-term cost planning.

Does the AZ-700 certification expire?

Yes. Microsoft Associate certifications including AZ-700 expire annually. Renewal is free — a 25–30 question online assessment on Microsoft Learn within the six-month window before your expiration date. The renewal targets recent skills outline updates, so staying current is straightforward if you remain broadly active in the role. (Fundamentals certifications such as AZ-900 are different — those don't expire.)

What is the AZ-700 retake policy if I fail?

The first retake is allowed after 24 hours. Second and third retakes each require a 14-day wait. Microsoft caps retakes at five attempts per 12-month rolling period. Each attempt requires a new voucher purchase.

How long should I study for AZ-700?

Most candidates pass AZ-700 after four to eight weeks of focused study, assuming some prior IT or cloud experience. If Azure is genuinely new to you, plan for two to three months — the exam expects you to know specific PowerShell and Azure CLI commands, not just describe concepts. Azure Mastery's readiness gauge tells you when you're at exam-ready; don't book until it shows roughly 720 or higher with reasonable confidence.

AZ-700 vs AZ-104 — should I do AZ-104 first?

Microsoft strongly recommends AZ-104 first, and it shows. AZ-700 assumes you already know how Azure compute, storage, and the basic VNet model work day-to-day — it's the deep-network specialism on top of that knowledge. If you've never deployed a VM with a public IP or set up a basic NSG outside of fundamentals, take AZ-104 (Microsoft Azure Administrator) first; you'll save weeks on AZ-700 prep. If you're already a working network engineer crossing into Azure, you can skip AZ-104 and go straight in.

AZ-700 vs AZ-500 — which is the right network/security pairing?

They overlap significantly — Azure Firewall, Private Link, NSGs, DDoS Protection, and WAF appear in both. The difference is depth and angle. AZ-700 expects you to design connectivity (hub-and-spoke vs Virtual WAN, ExpressRoute peering choices, Application Gateway vs Front Door routing) — networking is the lens. AZ-500 expects you to secure workloads end-to-end including identity, compute, storage, and Defender / Sentinel — security is the lens. Many candidates hold both for cloud architect or security engineer roles where the boundary blurs.

Where AZ-700 fits

Certification paths that include AZ-700

AZ-700 is the Azure-specific networking Associate cert. It pairs with AZ-104 for working network engineers stepping into Azure, and feeds the AZ-305 architect track when networking is your specialty area. Tap any linked exam below to see its dedicated study app page.

Ready to pass AZ-700?

Download Azure Mastery free. 383 AZ-700 practice questions across all five domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.

Download Azure Mastery — free iPhone & iPad · Free to start · No account required