Azure Network Engineer Associate AZ-700

• Design and implement core Azure networking infrastructure.
• Configure Azure virtual networks, IP addressing, DNS, routing, and connectivity.
• Implement hybrid networking connections.
• Design and manage VPN and Azure Virtual WAN connectivity.
• Implement Azure load balancing and application delivery services.
• Configure private access to Azure services using Private Link and private endpoints.
• Implement Azure network security services.
• Monitor and troubleshoot Azure networking environments.
• Optimize network performance, resiliency, scale, and security.

Module 1: Design and implement core networking infrastructure

• Design and implement IP addressing for Azure resources
• Design and implement name resolution
• Design and implement VNet connectivity and routing
• Monitor networks
• Configure Azure Virtual Network
• Configure Azure DNS and DNS Private Resolver
• Implement VNet peering and Azure Virtual Network Manager
• Implement user-defined routes
• Configure Azure Route Server
• Implement Azure NAT Gateway
• Use Azure Network Watcher and Azure Monitor for Networks

Module 2: Design, implement, and manage connectivity services

• Design, implement, and manage a site-to-site VPN connection
• Design, implement, and manage a point-to-site VPN connection
• Design and implement Azure ExpressRoute
• Design and implement Azure Virtual WAN
• Configure virtual hub routing
• Integrate virtual hubs with third-party network virtual appliances
• Diagnose and resolve connectivity issues

Module 3: Design and implement application delivery services

• Design and implement Azure Load Balancer
• Design and implement Azure Traffic Manager
• Design and implement Gateway Load Balancer
• Design and implement Azure Application Gateway
• Configure backend pools, health probes, listeners, and routing rules
• Configure TLS and rewrite rules
• Design and implement Azure Front Door
• Configure routing, origins, endpoints, caching, and traffic acceleration
• Configure TLS termination and end-to-end TLS encryption

Module 4: Design and implement private access to Azure services

• Design and implement Azure Private Link service
• Design and implement Azure private endpoints
• Configure private endpoint access
• Integrate Private Link and private endpoints with DNS
• Integrate Private Link services with on-premises clients
• Design and implement service endpoints
• Configure service endpoint policies

Module 5: Design and implement Azure network security services

• Implement and manage network security groups
• Configure application security groups
• Configure NSG inbound and outbound security rules
• Implement virtual network flow logs
• Verify IP flow
• Configure Azure Bastion for secure administration
• Design and implement Azure Firewall
• Configure Azure Firewall rules and Firewall Manager policies
• Implement Web Application Firewall
• Configure WAF detection and prevention modes
• Implement WAF policies
• Monitor and troubleshoot network security

3 Days

Certification: Microsoft Certified: Azure Network Engineer Associate
Exam: AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Duration: 100 minutes
Format: Computer-based, proctored Microsoft role-based certification examination

• Azure network engineers.
• Network engineers specializing in Azure networking solutions.
• Professionals responsible for designing and implementing Azure networking infrastructure.
• Professionals managing hybrid networking, routing, load balancing, network security, and monitoring.
• IT professionals working with solution architects, cloud administrators, security engineers, application developers, and DevOps engineers.

• Experience creating and managing compute, storage, and networking resources in Azure.
• Understanding of networking fundamentals such as name resolution, network protocols, and network address management.
• Understanding of IP addressing, DNS, routing, VPNs, firewalls, and encryption technologies.
• Understanding of software-defined networking.
• Understanding of hybrid network connectivity methods such as VPN.
• Understanding of resilience and disaster recovery, including high availability and restore operations.