Prepare for the AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
Design and implement Azure networking solutions such as virtual networks, connectivity, application delivery, and network security.
A complete prep system — free study guide, adaptive practice exams, spaced-repetition flashcards, and a personalized learning journey that tracks when you're ready.
For networking professionals designing and implementing Microsoft Azure infrastructure.
Content last updated
Try Free Practice Questions & Flashcards
Get 40 exam-style questions and 40 flashcards with detailed explanations — free, no credit card required.
Every answer counts toward your progress. Enroll to access 387 practice questions, 165 flashcards, and a learning journey that targets your weaknesses.
Free AZ-700 Practice Questions (With Answers)
5 real questions from the AZ-700 bank, with the full explanation for each answer. No sign-up needed to read them.
- Question 1Design, implement, and manage connectivity services [Connectivity]
You have Virtual WAN hubs in East US and West Europe. Branch offices connect to their nearest hub. How do branches in East US reach branches in West Europe?
- A.Configure static routes between hubs using custom route tables
- B.Create VNet peering between the hub VNets directly
- C.Virtual WAN Standard SKU provides automatic hub-to-hub connectivity
- D.Deploy a VPN Gateway in each hub for inter-hub connectivity
Show answer and explanation
Correct answer: C
Correct. Standard SKU Virtual WAN automatically enables hub-to-hub (inter-hub) routing. Traffic between hubs flows through Microsoft's backbone.
Why the other options are wrong
A. Incorrect. Virtual WAN handles inter-hub routing automatically. Manual static routes aren't needed or supported for hub-to-hub.
B. Incorrect. Virtual WAN hubs don't use VNet peering. They have built-in hub-to-hub connectivity.
D. Incorrect. VPN Gateways connect branches to hubs but don't enable hub-to-hub connectivity. That's automatic with Standard SKU.
- Question 2Design and implement application delivery services [Nested Profiles]
You want to route users to the nearest region first, then within that region, implement failover between primary and secondary endpoints. How should you configure Traffic Manager?
- A.Single profile with MultiValue routing returning all healthy IPs
- B.Nested profiles: parent with Priority routing, child profiles with Weighted routing
- C.Single profile with Geographic routing and endpoint Priority as a tiebreaker
- D.Nested profiles: parent with Performance routing, child profiles with Priority routing
Show answer and explanation
Correct answer: D
Correct. Nested profiles allow combining routing methods. The parent profile uses Performance to route to the nearest region, and child profiles use Priority for failover within each region.
Why the other options are wrong
A. Incorrect. MultiValue returns multiple healthy endpoints to the client but doesn't provide performance-based region selection or priority failover.
B. Incorrect. This nesting combination would prioritize endpoints globally then distribute by weight. It doesn't route to the nearest region first—Performance routing is needed at the parent level for latency-based selection.
C. Incorrect. Geographic routing maps fixed regions to endpoints, not dynamic latency-based selection. A single profile also can't combine two routing methods.
- Question 3Design, implement, and manage connectivity services [SKU Selection]
A company requires zone-redundant VPN Gateways for high availability. Which SKU series should they choose?
- A.Basic
- B.VpnGw1
- C.VpnGw1AZ
- D.VpnGw1Standard
Show answer and explanation
Correct answer: C
Correct. SKUs with 'AZ' suffix (VpnGw1AZ, VpnGw2AZ, etc.) support Availability Zone deployment.
Why the other options are wrong
A. Incorrect. The Basic gateway SKU predates zonal deployment, and it also rules out BGP, active-active pairs and custom IPsec policies, so it fails this requirement several times over.
B. Incorrect. A plain VpnGw1 is placed in a single zone. Azure keeps it available through redundant instances inside that zone, which is not the same as surviving the loss of the zone.
D. Incorrect. There is no VpnGw1Standard SKU. The families run VpnGw1 through VpnGw5, each with an optional AZ variant, and 'Standard' belongs to the older legacy naming.
- Question 4Design and implement application delivery services [Backend Pool]Choose all that apply
Which THREE can be members of an Application Gateway backend pool? (Choose 3)
- A.Azure VMs
- B.VMSS instances
- C.Azure Firewall
- D.App Service
- E.Virtual network
- F.Availability set
Show answer and explanation
Correct answer: A, B, D
Correct. Azure VMs with NICs are the most common backend pool members for Application Gateway.
Correct. Virtual Machine Scale Set instances can be pool members, enabling auto-scaling backend capacity.
Correct. An App Service is added by its hostname rather than an IP, which is also why the HTTP setting must override the host header so the app answers on the right site binding.
Why the other options are wrong
C. Incorrect. Azure Firewall is not addressable as an application backend. Placing a firewall in front of or behind Application Gateway is done through routing, never by adding it to a pool.
E. Incorrect. A backend pool holds individual targets such as NICs, IP addresses, FQDNs or scale set instances. You cannot add an entire virtual network as a member; you add the specific endpoints inside it.
F. Incorrect. An availability set is a placement grouping, not a backend target type. You add the virtual machines in the set to the pool individually.
- Question 5Design and implement private access to Azure services [UDR]
Do UDRs (User-Defined Routes) apply to traffic destined for Private Endpoints by default?
- A.UDRs never apply to traffic destined for Private Endpoints
- B.No, UDR network policies must be enabled on the subnet
- C.Yes, UDRs always route all subnet traffic including to endpoints
- D.Only for outbound traffic from the Private Endpoint subnet
Show answer and explanation
Correct answer: B
Correct. By default, UDRs don't apply to Private Endpoint traffic. Enable 'PrivateEndpointNetworkPolicies' to allow UDRs.
Why the other options are wrong
A. Incorrect. This turns a default into an absolute. UDRs are ignored only until PrivateEndpointNetworkPolicies is enabled on the subnet; once it is, the private endpoint honours your route table like any other destination.
C. Incorrect. The default is the opposite. Azure installs a /32 system route for the private endpoint that is more specific than any route you write, so your route table is bypassed until network policies are enabled.
D. Incorrect. The setting is not directional. PrivateEndpointNetworkPolicies controls whether route table and NSG rules are evaluated for the private endpoint at all, rather than distinguishing inbound traffic from outbound.
Those are 5 of the 40 questions in the free sample exam. Sign up to take the remaining 35 under exam conditions, get scored, and see which topics are holding you back.
Exam Topics Covered
- Design and implement core networking infrastructure
- Design, implement, and manage connectivity services
- Design and implement application delivery services
- Design and implement private access to Azure services
- Design and implement Azure network security services
What's Included with Enrollment
- Personalized Learning Journey – a guided path built around your weak spots
- Readiness Score & Weakness Analytics – know exactly when you're ready
- Unlimited Practice Exams – build confidence with real test conditions
- Memory-First Flashcards – lock in knowledge that lasts
- Integrated Study Guide – streamline your prep in one place
Your free practice progress carries over. Enroll for full access for $39.99.
Free Account vs. Enrolled
| Feature | Free | Enrolled |
|---|---|---|
| Practice questions | 40 | 387 |
| Flashcards | 40 | 165 |
| Full study guide | ✓ | ✓ |
| Explanations for every answer | ✓ | ✓ |
| Full-length timed practice exams | — | ✓ |
| Spaced-repetition review | — | ✓ |
| Learning Journey and personal study plan | Preview | ✓ |
Start Free. Upgrade When You're Ready.
Stay on your structured path while adding targeted practice with the full set of exam-like questions, expanded flashcards to reinforce concepts, and readiness tracking to identify and address weaknesses when needed.
Frequently Asked Questions
The Designing and Implementing Microsoft Azure Networking Solutions consists of 50 questions. You are given 100 minutes to complete the exam.
The Designing and Implementing Microsoft Azure Networking Solutions exam reports a scaled score from 1 to 1,000, and you need at least 700 to pass. A scaled score is not the percentage of questions you answered correctly. Our practice exams use 70% as their pass mark.
You have 100 minutes to complete the Designing and Implementing Microsoft Azure Networking Solutions. That works out to roughly 120 seconds per question, so time management is important during your preparation.
The Designing and Implementing Microsoft Azure Networking Solutions covers the following domains: Design and implement core networking infrastructure, Design, implement, and manage connectivity services, Design and implement application delivery services, Design and implement private access to Azure services, Design and implement Azure network security services. Each domain carries a different weight on the exam, so focus your study time on the areas that count most.
The Designing and Implementing Microsoft Azure Networking Solutions is rated Intermediate. This means candidates should have hands-on experience and foundational knowledge before attempting this exam.
Before attempting the Designing and Implementing Microsoft Azure Networking Solutions, it is recommended to complete AZ-104 Microsoft Azure Administrator. These certifications build the foundational knowledge you'll need to succeed.
The Designing and Implementing Microsoft Azure Networking Solutions is part of one career path:
• Azure Network Engineer Journey: AZ-900 → AZ-104 → AZ-700
MindMesh Academy provides multiple study modes to match your preparation style. Timed Practice simulates real exam conditions with a countdown timer. Review Mode shows detailed explanations after every question so you can learn as you go. Section-Based Practice lets you focus on specific exam domains to target weak areas. Flashcards support spaced repetition (SRS) for long-term retention, plus burst, deep study, and cram modes for flexible review. A guided Learning Journey ties everything together into a structured study path. All modes are fully mobile-friendly, so you can study on any device.
Official vendor practice tests typically offer a limited number of questions with minimal explanations. MindMesh Academy provides a comprehensive question bank with detailed explanations for every answer choice — both correct and incorrect — so you understand the reasoning behind each answer. You also get flashcards with spaced repetition, a complete study guide covering every exam domain, section-based practice, progress analytics that identify your weakest topics, and a guided learning journey. All study materials are accessible on desktop and mobile.
Yes. Our team reviews and updates the question bank to reflect the latest exam objectives and real-world scenarios. When exam versions change or new topics are added, we update our practice questions, flashcards, and study guide to ensure you are always studying current material.
MindMesh Academy offers practice exams that simulate real test conditions, flashcards with spaced repetition to strengthen long-term retention, and an integrated study guide covering every exam domain. You can also track your progress with analytics that pinpoint your weak areas so you know exactly where to focus.
Written by
Alvin Varughese
Founder, MindMesh Academy
Alvin Varughese is the founder of MindMesh Academy and an enterprise architecture leader. An electrical engineer by training, he moved from factory automation in South Africa to cloud architecture at GE Appliances and Humana (Fortune 50), and holds 20 professional certifications including AWS Solutions Architect Professional, Azure DevOps Engineer Expert, and Microsoft Agentic AI Business Solutions Architect. He built MindMesh Academy after interviewing too many highly certified candidates who couldn't answer basic questions: the goal is prep that makes you better at the job, not just able to pass the exam.
Start Your Certification Journey Today
Join thousands of students who have successfully prepared for their certifications with MindMesh Academy's comprehensive practice exams and study materials.