Skip to content
Azure Mastery Exam AZ-700 Download
Azure Mastery

Microsoft Certification AZ-700

AZ-700: Predict your score. Know what to study next.

See your predicted score, follow a study plan based on your answers, and revisit topics you're starting to forget. It all runs on your device.

669 practice questions AI score prediction 100% offline
Try a practice question →

50+ free questions per exam · No account needed.
Full banks: one-time purchase. Pro adds every bank and advanced study tools. Compare access options.

Original questions with written explanations. How we review them · About readiness estimates

Download free iPhone & iPad · Free to start QR code — scan with your iPhone to open Azure Mastery on the App Store On your Mac?
Scan to install

Inside the app

Nine interactive practice formats, on iPhone

Azure Mastery has nine interactive formats for exam practice. The examples below show original AZ-700 practice questions in Azure Mastery on iPhone and iPad. The exam simulator uses timed sessions with the published domain weights. Microsoft's live interface and question mix may differ.

How many IP addresses does Azure reserve in each subnet?

  • 3
  • 4
  • 5
  • 2

Multiple choice

An original AZ-700 practice question with one correct answer. Choose an option to read its written rationale.

Exam-specific sample
Explore more question formats

Which THREE protocols can be used for Azure point-to-site VPN connections? Select three.

  • OpenVPN
  • SSTP
  • IKEv2
  • L2TP
  • PPTP

Multi-select

An original AZ-700 multi-select question. Select all the correct options to earn the mark.

All-or-nothing

Drag-and-drop

An original AZ-700 ordering question you can answer by touch on iPhone and iPad.

Interactive item

Hotspot

An original AZ-700 question with a visual prompt, designed for touch on iPhone and iPad.

Tap target

Case studies

An original AZ-700 case study with several questions about the same requirements and environment.

Multi-question

Answer Coach

Answer Coach explains why the answer is correct and, where available, why each option is right or wrong. It helps you understand a mistake and remember the distinction. Read explanations after each question or at the end of a practice test. On supported devices, optional AI can reword a note on your device after checking it against the written guidance.

App exclusive

AZ-700 Practice Questions & Exam Prep — Microsoft Azure Network Engineer

Get exam-ready for AZ-700 (Microsoft Azure Network Engineer) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all five AZ-700 domains, build a personalised study plan from your weak spots, and surface topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.

The exam

What is the AZ-700 exam?

AZ-700 is the Microsoft Certified: Azure Network Engineer Associate exam — the credential hiring managers expect for "Cloud Network Engineer" or "Azure Networking Specialist" roles. It's the natural next step after AZ-104 once your day job shifts from generalist administration into network-specific design. AZ-700 also pairs with SC-500 for cloud-network security and feeds the AZ-305 architect track for networking specialists.

AZ-700 is hands-on and design-oriented. It validates that you can plan and implement across five areas:

Expect scenario questions where a customer has a constraint — "spoke VNets must reach an on-prem subnet without traversing the hub" — and you pick the right service combination.

Microsoft’s current AZ-700 skills outline is effective 27 July 2026. Every exam-scoped question in Azure Mastery is mapped to a published objective; adjacent material is kept separate as supplemental practice. Read the official outline at learn.microsoft.com.

Skills measured · 27 July 2026

AZ-700 exam objectives

Five domains, with weights set by Microsoft’s July 2026 update. Microsoft's own skill-group wording appears verbatim under each domain below, taken straight from the official skills outline, so you always know which domain a topic sits in and where the gaps are.

Aura presents a visual map of identity, compute, networking, and Azure operations skills.
Azure skill map

Design and implement core networking infrastructurePublished weight 25–30%

187 exam-scoped practice questions in the app

Explore Core topics
  • Design and implement IP addressing for Azure resources
  • Design and implement name resolution
  • Design and implement VNet connectivity and routing
  • Monitor networks
  • Tests IP addressing, DNS, VNet connectivity, and routing as the foundation every other domain builds on.
  • Candidates treat hub-and-spoke and Virtual WAN as always interchangeable regardless of how many spokes exist.
  • Match the number of branch sites in the scenario to hub-and-spoke or Virtual WAN before answering.

Design, implement, and manage connectivity servicesPublished weight 20–25%

166 exam-scoped practice questions in the app

Explore Connectivity topics
  • Design, implement, and manage a site-to-site VPN connection
  • Design, implement, and manage a point-to-site VPN connection
  • Design, implement, and manage Azure ExpressRoute
  • Design and implement an Azure Virtual WAN architecture
  • Site-to-site VPN, point-to-site VPN, ExpressRoute, and Virtual WAN are tested here as four separate hybrid-connectivity skills.
  • A familiar VPN option gets picked even when the scenario's bandwidth or SLA requirement actually calls for ExpressRoute.
  • Check the scenario's throughput and reliability numbers before choosing between VPN and ExpressRoute options.

Design and implement application delivery servicesPublished weight 15–20%

125 exam-scoped practice questions in the app

Explore Delivery topics
  • Design and implement Azure Load Balancer and Azure Traffic Manager
  • Design and implement Azure Application Gateway
  • Design and implement Azure Front Door
  • Tests choosing Load Balancer, Application Gateway, or Front Door for a stated global or regional requirement.
  • Candidates reach for a regional service on a clearly global requirement, or the reverse.
  • Look for the words global or regional and Layer 4 or Layer 7 before picking a delivery service.

Design and implement private access to Azure servicesPublished weight 10–15%

75 exam-scoped practice questions in the app

Explore Access topics
  • Design and implement Azure Private Link service and Azure private endpoints
  • Design and implement service endpoints
  • Whenever public exposure has to be removed entirely, choosing a private endpoint over a service endpoint is the judgement call.
  • Picking the cheaper service endpoint even when the scenario says no public exposure at all is the trap to avoid.
  • Reach for Private Link whenever the stem rules out any public IP on the resource.

Design and implement Azure network security servicesPublished weight 15–20%

116 exam-scoped practice questions in the app

Explore Security topics
  • Implement and manage network security groups
  • Design and implement Azure Firewall and Azure Firewall Manager
  • Design and implement a Web Application Firewall (WAF) deployment
  • NSGs, Azure Firewall, Firewall Manager, and WAF each do a different job, and telling them apart is the point.
  • The WAF story differing slightly between Application Gateway and Azure Front Door is easy to forget.
  • Check which product, Application Gateway or Front Door, the WAF question is actually describing.

Common traps

Where AZ-700 candidates slip

Three recurring misconceptions that trip up otherwise well-prepared AZ-700 candidates, grounded in the current skills outline.

A service endpoint and a private endpoint restrict different things

A service endpoint keeps traffic on the Azure backbone while the resource still uses its public endpoint. A private endpoint adds a private IP in your virtual network, but public access must be disabled or restricted separately when the scenario requires private-only access.

  • The exam is testing whether you'd choose Private Link over a service endpoint when no public exposure is allowed.
  • Reach for a private endpoint whenever the scenario explicitly rules out any public IP.

Application Gateway and Front Door aren't interchangeable just because both do Layer 7

Application Gateway is regional, while Azure Front Door is global with edge points of presence and built-in caching.

  • Cross-region routing calls for a global service over a regional one, and that swap is precisely what gets scored.
  • Match global or regional in the stem to Front Door or Application Gateway before answering.

Virtual WAN and hub-and-spoke solve the same problem at different scale

Hub-and-spoke via VNet peering suits a handful of spokes, while Virtual WAN automates routing for large branch counts.

  • The number of branch sites in a scenario decides the right topology, and that count is worth reading twice.
  • Count the spokes or branches described before choosing between Virtual WAN and plain peering.

Designed for AZ-700

How Azure Mastery helps you pass AZ-700

Exam-specific practice

  • 669 AZ-700 practice questions, mapped to the 27 July 2026 outline across all five networking domains.
  • Core networking infrastructure carries the largest single share, and coverage weights it to match.
  • Questions rehearse picking the right service for a stated topology constraint, the exam's actual scenario style.

Predicted score

  • Exam IQ predicts your AZ-700 score on-device after roughly 30 questions, with a confidence range attached.
  • Five domains share the weight fairly evenly, so the prediction points at one or two, not a single obvious gap.
  • See exactly which domain, core, connectivity, delivery, access, or security, needs more work before you book.

Adaptive study plan

  • Miss a hub-and-spoke or ExpressRoute question and a similar scenario returns in your next session.
  • Get three sessions right in a row on a topic and the plan quietly moves on to the next one.
  • The plan is built around closing the gap to 700, not around how many questions you've done.

Knowledge decay

  • Five networking domains compete for the same memory, so an early-mastered topic can fade fastest by exam day.
  • The Today screen's padlock cue flags exactly which domain is due for a revisit.
  • Weak-spot drills pull from decayed domains first, ahead of anything you haven't studied yet.

Exam rehearsal

  • Practise pacing. Microsoft allows marking and review; breaks and some section transitions restrict returning to earlier questions.
  • The five domains appear in the same proportions Microsoft set out on 27 July 2026.
  • Every rehearsal question is original, exam-scoped material, never a copy of the live paper.

Answer Coach

  • Names the sibling service you reached for by mistake, Load Balancer instead of Application Gateway, say, and why.
  • Flags the one detail in a stem that ruled out a service that otherwise looked right.
  • On devices that support it, a note may be reworded locally, only once it passes its own grounding check.

Aura guidance

  • Aura adapts the next step during your first week, whether you're stuck on BGP or Bicep templates.
  • Each session closes with a quick note on what shifted and where to focus next.

Private by design

  • Your AZ-700 answer history, readiness gauge, and Answer Coach notes stay on your device by default.
  • Route tables and BGP configs are exactly the kind of detail that never needs to touch a server.
  • iCloud sync switches on only if you choose it, and stays private when it's on.

6-week study plan

Suggested AZ-700 study plan

Build networking foundations, then practise traffic delivery, private access and protection. Use the final study blocks of this six-week route for review and timed rehearsal.

  1. Virtual network design

    • Plan subnets and IP addressing.
    • Compare regional and global peering.
    • Review gateway transit and hub-and-spoke designs.

  2. Routing and topology

    • Configure route tables and user-defined routes.
    • Review BGP routes and propagation.
    • Compare hub-and-spoke with Virtual WAN.

  3. Azure DNS

    • Compare public and private zones.
    • Configure virtual network links.
    • Review registration, resolution and conditional forwarding.

  4. Hybrid connectivity

    • Compare site-to-site, point-to-site and VNet-to-VNet VPNs.
    • Review ExpressRoute circuits, peerings, FastPath and Direct.
    • Explore Virtual WAN hubs and branch connections.

  5. Azure Load Balancer

    • Compare public and internal load balancing.
    • Configure backend pools and health probes.
    • Review NAT rules.

  6. Application delivery

    • Configure Application Gateway routing, TLS and autoscaling.
    • Review WAF integration.
    • Explore Front Door caching, domains and global delivery.

  7. Traffic Manager

    • Compare priority, weighted and performance routing.
    • Review geographic, multi-value and subnet routing.
    • Choose between Traffic Manager and Front Door.

  8. Private connectivity

    • Distinguish Private Link, private endpoints and service endpoints.
    • Review VNet integration for App Service and Functions.
    • Explore Private Link Service across tenants.

  9. Firewall and network rules

    • Review Azure Firewall rules, threat intelligence and Firewall Manager.
    • Explore Premium IDPS and TLS inspection.
    • Analyse NSG and ASG rules and flow logs.

  10. Web and DDoS protection

    • Compare managed and custom WAF rules.
    • Review geographic filtering and rate limits.
    • Compare DDoS plans and mitigation reports.

  11. Target weaker topics

    • Use Focus Weak Spots to identify gaps.
    • Revisit core infrastructure and connectivity decisions.
    • Review the explanations for missed questions.

  12. Timed rehearsal

    • Complete two 100-minute Exam Simulator sessions.
    • Review mistakes after each run.
    • Plan further practice where needed.

Frequently asked

AZ-700 FAQs

What does the AZ-700 exam format actually look like?

AZ-700 follows Microsoft's general 40–60 question guidance, with formats varying by sitting. Azure Mastery's bank weights single-answer and scenario-based items heaviest, then adds multi-select, hotspot, and linked case-study questions — every one original, never a copy of Microsoft's live item mix.

AZ-700 vs AZ-104 — should I do AZ-104 first?

Microsoft strongly recommends it, and it shows. AZ-700 assumes you already know how Azure compute, storage, and the basic VNet model work day-to-day. If you've never deployed a VM with a public IP or set up a basic NSG, take AZ-104 first. Working network engineers can often skip straight in.

What's the current AZ-700 voucher price?

The AZ-700 voucher is USD $165 in the US, or around £128 in the UK — pricing varies by region. Microsoft sometimes runs free-voucher promotions around Build or Ignite. AZ-700 also needs annual renewal, so factor that into long-term cost planning.

Does AZ-700 overlap with cloud security certs like SC-500?

A little, but the roles differ. AZ-700 treats network security (Firewall, NSGs, WAF) as one domain among five. SC-500 applies security controls across an entire cloud and AI estate, well beyond networking. Take AZ-700 for network engineering depth; add SC-500 for end-to-end cloud security.

Does the AZ-700 badge need renewing every year?

Yes. Associate certifications including AZ-700 expire annually. Renewal is a free, short online assessment on Microsoft Learn within six months of your expiry date. Fundamentals certs like AZ-900 are different — those never expire.

Do I need a home lab to pass AZ-700?

Hands-on time helps more here than on most Associate exams, since AZ-700 is a design-and-build exam, not pure recall. A free-tier subscription is enough to build a hub-and-spoke topology, a site-to-site VPN, and an Application Gateway deployment. Azure Mastery's scenarios cover the harder-to-lab decisions too.

If I don't pass AZ-700, when can I try again?

Not immediately, and each attempt needs its own voucher.

  • First retake: after 24 hours.
  • All subsequent retakes: a 14-day wait each.
  • Cap: five total attempts within 12 months of the first attempt.
How many weeks of AZ-700 prep is realistic?

Most candidates plan four to eight weeks with prior Azure networking experience. Build and troubleshoot virtual networks, hybrid connectivity, routing, private access, application delivery, and network security in a lab. Azure Mastery's readiness gauge tells you when you're exam-ready.

Can I test-drive Azure Mastery's AZ-700 content for free?

Yes. The app is free to download, with 50+ free AZ-700 questions and written explanations. The full bank of 669 AZ-700 practice questions unlocks with a one-time exam-pack purchase, or unlock every exam with a subscription or lifetime upgrade. Advanced study tools require Pro.

Free study guides

Free guides that pair with AZ-700

Where AZ-700 fits

Certification paths that include AZ-700

AZ-700 is the Azure-specific networking Associate cert. It pairs with AZ-104 for working network engineers stepping into Azure, and feeds the AZ-305 architect track when networking is your specialty area. Tap any linked exam below to see its dedicated study app page.

Ready to pass AZ-700?

Download Azure Mastery free. 669 AZ-700 practice questions across all five domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.

Download Azure Mastery — free iPhone & iPad · Free to start · No account required
AZ-700 practice — free on the App Store Download

Search Azure Mastery