AZ-700 Practice Questions & Exam Prep — Microsoft Azure Network Engineer
Get exam-ready for AZ-700 (Microsoft Azure Network Engineer) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all five AZ-700 domains, build a personalised study plan from your weak spots, and surface topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.
The exam
What is the AZ-700 exam?
AZ-700 is the Microsoft Certified: Azure Network Engineer Associate exam — the credential hiring managers expect when posting "Cloud Network Engineer", "Azure Networking Specialist", or "Cloud Connectivity Architect" roles. It's the natural next step after AZ-104 for anyone whose day job has shifted from generalist administration into network-specific design and operation. AZ-700 also pairs with SC-500 for cloud-network security and feeds the AZ-305 architect track when networking is a candidate's specialty area.
AZ-700 is hands-on and design-oriented. It validates that you can plan and implement Azure network infrastructure (VNets, subnets, IP plans, route tables); hybrid connectivity (VPN Gateway, ExpressRoute, Virtual WAN); application delivery (Azure Load Balancer, Application Gateway, Front Door, Traffic Manager); private access to PaaS (Private Link, Private Endpoints, service endpoints); and network security (Azure Firewall, Firewall Manager, NSGs, DDoS Protection, WAF). Expect scenario questions where a customer has a constraint — "spoke VNets must reach an on-prem subnet without traversing the hub" — and you pick the right service combination.
Microsoft updated the AZ-700 skills outline on 24 April 2026. Every question in Azure Mastery's AZ-700 bank is mapped to the current outline — no leftover questions on retired services. Read the official outline at learn.microsoft.com.
Questions40–60 multiple choice
Duration100 minutes (120 min seat)
Pass score700 / 1000
CostUSD $165 (≈ £128 UK)
ValidityRenew annually (Associate)
FormatOnline or test centre
Skills measured · April 2026
AZ-700 exam objectives
Five domains, with weights set by Microsoft's April 2026 update. Every domain summary below is paraphrased from the official skills outline; bullet-level objectives in Azure Mastery are tagged so you always know which domain you're being tested on and where your weak spots cluster.
Azure skill mapIdentityComputeNetworkOperations
Design and implement core networking infrastructure25–30%
Explore key topics
The largest domain by weight. Plan and implement VNets, subnets, IP addressing, public IPs, prefixes, IPv6 considerations; VNet peering (regional, global, gateway transit, hub-and-spoke topologies); route tables and user-defined routes; name resolution via Azure DNS (public, private zones, virtual network links, conditional forwarding). Plus the resource design patterns — when to choose hub-and-spoke vs Virtual WAN. Around 10–18 questions per sitting.
Design, implement, and manage connectivity services20–25%
Explore key topics
Hybrid connectivity. VPN Gateway — site-to-site, point-to-site, VNet-to-VNet, BGP, active-active vs active-standby. ExpressRoute — circuits, peering types, FastPath, ExpressRoute Direct vs Provider. Azure Virtual WAN — secured virtual hubs, branch connectivity, custom routing, integration with Azure Firewall. Encrypt-in-transit story: VPN over ExpressRoute, MACsec. Around 8–15 questions.
Design and implement application delivery services15–20%
Explore key topics
Layer-4 vs Layer-7 load balancing. Azure Load Balancer (public, internal, Standard SKU, backend pools, health probes, NAT rules). Azure Application Gateway v2 (URL-based routing, multi-site hosting, SSL termination, WAF integration, autoscaling). Azure Front Door (global, HTTP/2, caching, WAF) and Azure Traffic Manager (DNS-based, routing methods — priority, weighted, performance, geographic). Choose the right service for the scenario — global vs regional, L4 vs L7, latency-sensitive vs failover-sensitive. Around 6–12 questions.
Design and implement private access to Azure services10–15%
Explore key topics
Smallest domain by weight, distinct conceptually. Azure Private Link and Private Endpoints for PaaS access without public exposure; service endpoints for VNet-restricted access; VNet integration for App Service / Functions; Private Link Service for exposing your own services privately to consumers in other tenants. Around 4–9 questions.
Design and implement Azure network security services15–20%
Explore key topics
Security at the network layer (overlaps with AZ-500 territory). Azure Firewall (rules, threat intelligence, Premium-tier IDPS and TLS inspection, Firewall Manager hierarchies); NSGs and application security groups; Web Application Firewall on App Gateway and Front Door (managed rule sets, custom rules, geo filtering); DDoS Protection (Network vs IP plans). Plus encryption choices: VNet encryption, MACsec on ER. Around 6–12 questions.
Designed for AZ-700
How Azure Mastery helps you pass AZ-700
Azure Mastery ships with 396 AZ-700 practice questions — the largest cert-specific bank we ship — every one written specifically against the current (April 2026) skills outline. Each question carries a domain tag mapped to the official five domains (core infrastructure, connectivity, application delivery, private access, network security), so you always know which area you're being tested on and where your weak spots are clustered. Bicep snippets, route tables, BGP configs, and CLI commands appear in roughly a third of the questions — matching the format of the live exam.
The on-device Exam IQ engine predicts your AZ-700 score before you sit the exam. After roughly 30 questions it has enough signal to give a confidence-scored prediction (e.g. "786 ±37, 68% confidence") — and tells you the specific topics that are dragging your readiness down. No vague "study more" advice; just a ranked list of objectives where improvement would move your score the furthest.
The adaptive study plan rebuilds itself from your answer history. Get a hub-and-spoke routing question wrong? You'll see another VNet-peering scenario in the next session. Master "Application Gateway vs Front Door" three sessions running and the engine backs off, surfacing fresh ExpressRoute or Private Link scenarios. The plan optimises for the gap between where you are and the 700 pass score, not for blind volume.
Knowledge decay tracking matters more for AZ-700 than for foundational exams — five domains is a lot to retain, and the topic you mastered three weeks into your study window is the topic you'll forget by exam day if you stop revising. Azure Mastery tracks every topic's decay curve and flags topics approaching expiry. The padlock icon on the Today screen is your "revisit before you forget" cue, and weak-spot drills automatically pull from decayed topics first.
Real exam simulation mode runs at AZ-700's actual length and time pressure: a randomised 40–60-question set drawn from the full 396-question bank, weighted by domain percentages from the April 2026 outline, with the 100-minute timer running and no jumping back to flag-and-review. It's the closest you can get to the live Pearson VUE / online-proctored experience without sitting the exam.
Answer Coach turns each missed answer into a private, grounded lesson: the misconception, key distinction, and rule to remember. It always uses authored certification guidance; on supported devices, an optional on-device model may rewrite the note only when it passes grounding checks.
During your first week, Aura adapts the next step as you go. Every session ends with a concise recap of what changed, what to focus on, and the best follow-up.
Everything essential runs on-device. Your answer history, readiness gauge, and coaching stay private. Optional sync uses your private iCloud account; there is no Azure Mastery account, tracking, or external processing server.
6-week study plan
Suggested AZ-700 study plan
Most candidates pass AZ-700 after four to eight weeks of focused study, depending on prior Azure experience. The six-week plan below maps onto the five AZ-700 domains, Azure Mastery's adaptive sessions, and the in-app exam simulator. Adjust pace to taste — the readiness gauge tells you when you're done, not the calendar.
Core infrastructure and DNS
Days 1–3: VNets, subnets, IP addressing strategy (RFC1918, public IP SKUs, IPv6). Then VNet peering — regional, global, gateway transit, hub-and-spoke topology design.
Days 4–6: Route tables, user-defined routes, BGP-propagated routes, route propagation rules. Hub-and-spoke vs Virtual WAN trade-offs.
Days 7–9: Azure DNS — public zones, private zones, virtual network links, registration vs resolution, conditional forwarding via custom DNS servers.
Days 10–14: Hybrid connectivity foundations — VPN Gateway (S2S, P2S, V2V, BGP), ExpressRoute (circuits, peerings, FastPath, ER Direct), Virtual WAN (secured hubs, branch connections).
Application delivery and private access
Days 15–17: Azure Load Balancer — public, internal, Standard SKU, backend pools, health probes, NAT rules.
Days 18–21: Application Gateway v2 — URL routing, multi-site, SSL termination, autoscaling, integration with WAF. Then Azure Front Door — global, caching, WAF, custom domains.
Days 22–24: Traffic Manager routing methods — priority, weighted, performance, geographic, multi-value, subnet. Choosing between Front Door and Traffic Manager.
Days 25–28: Private Link, Private Endpoints, service endpoints, VNet integration for App Service / Functions, Private Link Service for cross-tenant private exposure.
Network security, sharpen, simulate
Days 29–32: Azure Firewall — rules, threat intelligence, Premium-tier IDPS and TLS inspection, Firewall Manager hierarchies. Plus NSGs and ASGs (effective rules, flow logs).
Days 33–36: Web Application Firewall — managed rule sets (CRS), custom rules, geo filtering, rate limiting on App Gateway and Front Door. DDoS Protection (Network vs IP plans, mitigation reports).
Days 37–40: Run Focus Weak Spots every morning. Core infrastructure (25–30%) and connectivity (20–25%) are the heaviest — weight your time accordingly.
Days 41–42: Two end-to-end Exam Simulator runs at full 100-minute length. Review carefully. If readiness gauge is 750+ with reasonable confidence, schedule the exam.
Inside the app
Every Microsoft question type, on iPhone
AZ-700's question bank uses the same formats Microsoft puts on the live exam — not just multiple choice. Each visualisation below is a faithful mock of how the type renders inside Azure Mastery on iPhone and iPad. Exam-simulator mode runs all of them at full 100-minute length with no flag-and-review jumps, mirroring Pearson VUE.
How many IP addresses does Azure reserve in each subnet?
3
4
5
2
Multiple choice
A real AZ-700 question-bank example with one correct answer. The app explains every option after you answer.
Exam-specific sample
Which THREE protocols can be used for Azure point-to-site VPN connections? Select three.
OpenVPN
SSTP
IKEv2
L2TP
PPTP
Multi-select
A real AZ-700 multi-select item. Every required selection must be correct to earn the mark.
All-or-nothing
Arrange the steps in the correct order to create a VNet peering between VNet-A and VNet-B using the Azure portal.
⋮⋮1Navigate to VNet-A and select 'Peerings' under Settings
⋮⋮2Click 'Add' to create a new peering
⋮⋮3Specify the remote VNet (VNet-B) and name the peering links
⋮⋮4Configure the peering settings (allow virtual network access, allow…
⋮⋮5Review and create the peering
Drag-and-drop
A real AZ-700 interactive-format prompt, rendered for touch on iPhone and iPad.
Interactive item
You are configuring a VNet peering connection. Select the correct settings to enable spoke VNets to use the hub VNet's VPN gateway for on-premises connectivity.
Hotspot
A real AZ-700 prompt that tests recognition inside a visual or contextual interface.
Tap target
Global Logistics Network Design This case study examines Global Logistics Inc. Hybrid network spanning three regions, requiring ExpressRoute for New York and Amsterdam, site-to-site VPN with BGP for…
1Based on the case study, which connectivity solution should Global Logistics use…
2Based on the case study, which Azure networking architecture best meets the…
3Based on the case study, which P2S VPN tunnel protocol and authentication…
Case studies
A real AZ-700 case-study scenario with linked questions that share the same requirements and environment.
Multi-question
✕Your answer: 3
✨ Answer Coach:This count leaves out two of the platform's reserved entries; Azure withholds the network identifier, the gateway, both DNS mapping addresses, and the broadcast address in every subnet.
— grounded in authored certification guidance
Answer Coach
Answer Coach uses the bank's authored rationale to explain the misconception, key distinction, and rule to remember. On supported devices, an optional on-device model may rewrite the note only when it passes grounding checks.
App exclusive
Frequently asked
AZ-700 FAQs
How much does the AZ-700 exam cost?
The AZ-700 voucher is USD $165 in the United States. Pricing varies by region — in the UK it's typically around £128. Microsoft sometimes runs free-voucher promotions during events such as Microsoft Build or Microsoft Ignite, so check your Microsoft Learn profile for any active offers before booking. AZ-700 also requires annual renewal (free, online), so factor that into long-term cost planning.
Does the AZ-700 certification expire?
Yes. Microsoft Associate certifications including AZ-700 expire annually. Renewal is free — a 25–30 question online assessment on Microsoft Learn within the six-month window before your expiration date. The renewal targets recent skills outline updates, so staying current is straightforward if you remain broadly active in the role. (Fundamentals certifications such as AZ-900 are different — those don't expire.)
What is the AZ-700 retake policy if I fail?
The first retake is allowed after 24 hours. Second and third retakes each require a 14-day wait. Microsoft caps retakes at five attempts per 12-month rolling period. Each attempt requires a new voucher purchase.
How long should I study for AZ-700?
Most candidates plan four to eight weeks with prior Azure networking experience. Build and troubleshoot virtual networks, hybrid connectivity, routing, private access, application delivery, and network security in a lab; know when to choose services such as Virtual WAN, ExpressRoute, Application Gateway, Front Door, Azure Firewall, and Private Link. Azure Mastery's readiness gauge tells you when you're exam-ready.
AZ-700 vs AZ-104 — should I do AZ-104 first?
Microsoft strongly recommends AZ-104 first, and it shows. AZ-700 assumes you already know how Azure compute, storage, and the basic VNet model work day-to-day — it's the deep-network specialism on top of that knowledge. If you've never deployed a VM with a public IP or set up a basic NSG outside of fundamentals, take AZ-104 (Microsoft Azure Administrator) first; you'll save weeks on AZ-700 prep. If you're already a working network engineer crossing into Azure, you can skip AZ-104 and go straight in.
AZ-700 vs SC-500 — which is the right network/security pairing?
They overlap around cloud-network protection, but the roles differ. AZ-700 expects you to design and operate connectivity, including hybrid networks, routing, private access, and application delivery. SC-500 applies security controls across cloud and AI workloads, including identity, posture, threat protection, and workload security. Take AZ-700 for network engineering depth; add SC-500 when your remit includes end-to-end cloud security.
Where AZ-700 fits
Certification paths that include AZ-700
AZ-700 is the Azure-specific networking Associate cert. It pairs with AZ-104 for working network engineers stepping into Azure, and feeds the AZ-305 architect track when networking is your specialty area. Tap any linked exam below to see its dedicated study app page.
AZ-700 sits in the middle of the network-engineer cert path. AZ-104 builds the operational base it assumes; SC-500 adds current cloud and AI security coverage. Pair AZ-700 with one or both for a broader cloud-networking story.
Ready to pass AZ-700?
Download Azure Mastery free. 396 AZ-700 practice questions across all five domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
