Prepare for the AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
Design and implement Azure networking solutions such as virtual networks, connectivity, application delivery, and network security.
A complete prep system — free study guide, adaptive practice exams, spaced-repetition flashcards, and a personalized learning journey that tracks when you're ready.
For networking professionals designing and implementing Microsoft Azure infrastructure.
Content last updated
Try Free Practice Questions & Flashcards
Get 40 exam-style questions and 40 flashcards with detailed explanations — free, no credit card required.
Every answer counts toward your progress. Enroll to access 307 practice questions, 155 flashcards, and a learning journey that targets your weaknesses.
Free AZ-700 Practice Questions (With Answers)
5 real questions from the AZ-700 bank, with the full explanation for each answer. No sign-up needed to read them.
- Question 1Design and implement connectivity services [Connectivity]
You have Virtual WAN hubs in East US and West Europe. Branch offices connect to their nearest hub. How do branches in East US reach branches in West Europe?
- A.Configure static routes between hubs using custom route tables
- B.Create VNet peering between the hub VNets directly
- C.Virtual WAN Standard SKU provides automatic hub-to-hub connectivity
- D.Deploy a VPN Gateway in each hub for inter-hub connectivity
Show answer and explanation
Correct answer: C
Correct. Standard SKU Virtual WAN automatically enables hub-to-hub (inter-hub) routing. Traffic between hubs flows through Microsoft's backbone.
Why the other options are wrong
A. Incorrect. Virtual WAN handles inter-hub routing automatically. Manual static routes aren't needed or supported for hub-to-hub.
B. Incorrect. Virtual WAN hubs don't use VNet peering. They have built-in hub-to-hub connectivity.
D. Incorrect. VPN Gateways connect branches to hubs but don't enable hub-to-hub connectivity. That's automatic with Standard SKU.
- Question 2Design and implement application delivery services [Nested Profiles]
You want to route users to the nearest region first, then within that region, implement failover between primary and secondary endpoints. How should you configure Traffic Manager?
- A.Single profile with MultiValue routing returning all healthy IPs
- B.Nested profiles: parent with Priority routing, child profiles with Weighted routing
- C.Single profile with Geographic routing and endpoint Priority as a tiebreaker
- D.Nested profiles: parent with Performance routing, child profiles with Priority routing
Show answer and explanation
Correct answer: D
Correct. Nested profiles allow combining routing methods. The parent profile uses Performance to route to the nearest region, and child profiles use Priority for failover within each region.
Why the other options are wrong
A. Incorrect. MultiValue returns multiple healthy endpoints to the client but doesn't provide performance-based region selection or priority failover.
B. Incorrect. This nesting combination would prioritize endpoints globally then distribute by weight. It doesn't route to the nearest region first—Performance routing is needed at the parent level for latency-based selection.
C. Incorrect. Geographic routing maps fixed regions to endpoints, not dynamic latency-based selection. A single profile also can't combine two routing methods.
- Question 3Design and implement connectivity services [SKU Selection]
A company requires zone-redundant VPN Gateways for high availability. Which SKU series should they choose?
- A.Basic
- B.VpnGw1
- C.VpnGw1AZ
- D.VpnGw1Standard
Show answer and explanation
Correct answer: C
Correct. SKUs with 'AZ' suffix (VpnGw1AZ, VpnGw2AZ, etc.) support Availability Zone deployment.
Why the other options are wrong
A. Incorrect. Basic doesn't support zone redundancy or most advanced features.
B. Incorrect. Standard VpnGw SKUs are regionally redundant but not zone-redundant.
D. Incorrect. This isn't a valid SKU name. Zone-redundant SKUs use the 'AZ' suffix.
- Question 4Design and implement application delivery services [Backend Pool]Choose all that apply
Which THREE can be members of an Application Gateway backend pool? (Choose 3)
- A.Azure VMs
- B.VMSS instances
- C.Azure Firewall
- D.App Service
Show answer and explanation
Correct answer: A, B, D
Correct. Azure VMs with NICs are the most common backend pool members for Application Gateway.
Correct. Virtual Machine Scale Set instances can be pool members, enabling auto-scaling backend capacity.
Correct. App Services can be backend pool targets.
Why the other options are wrong
C. Incorrect. Firewall is not a backend pool target—it's a security device.
- Question 5Design and implement private access to Azure services [UDR]
Do UDRs (User-Defined Routes) apply to traffic destined for Private Endpoints by default?
- A.UDRs never apply to traffic destined for Private Endpoints
- B.No, UDR network policies must be enabled on the subnet
- C.Yes, UDRs always route all subnet traffic including to endpoints
- D.Only for outbound traffic from the Private Endpoint subnet
Show answer and explanation
Correct answer: B
Correct. By default, UDRs don't apply to Private Endpoint traffic. Enable 'PrivateEndpointNetworkPolicies' to allow UDRs.
Why the other options are wrong
A. Incorrect. They can work when network policies are enabled.
C. Incorrect. UDR support requires explicit enablement.
D. Incorrect. The setting affects all Private Endpoint traffic routing.
Those are 5 of the 40 questions in the free sample exam. Sign up to take the remaining 35 under exam conditions, get scored, and see which topics are holding you back.
Exam Topics Covered
- Design and implement core networking infrastructure
- Design and implement connectivity services
- Design and implement application delivery services
- Design and implement private access to Azure services
- Design and implement network security
What's Included with Enrollment
- Personalized Learning Journey – a guided path built around your weak spots
- Readiness Score & Weakness Analytics – know exactly when you're ready
- Unlimited Practice Exams – build confidence with real test conditions
- Memory-First Flashcards – lock in knowledge that lasts
- Integrated Study Guide – streamline your prep in one place
Your free practice progress carries over. Enroll for full access for $39.99.
Start Free. Upgrade When You're Ready.
Stay on your structured path while adding targeted practice with the full set of exam-like questions, expanded flashcards to reinforce concepts, and readiness tracking to identify and address weaknesses when needed.
Frequently Asked Questions
Written by
Alvin Varughese
Founder, MindMesh Academy
Alvin Varughese is the founder of MindMesh Academy and holds 20 professional certifications including Microsoft Agentic AI Business Solutions Architect, AWS Solutions Architect Professional, and Azure DevOps Engineer Expert. He's held senior engineering and architecture roles at Humana (Fortune 50) and GE Appliances. He built MindMesh Academy to share the study methods and first-principles approach that helped him pass each exam.
Start Your Certification Journey Today
Join thousands of students who have successfully prepared for their certifications with MindMesh Academy's comprehensive practice exams and study materials.