Microsoft Azure Networking Solutions (AZ-700) Study Guide [75 Minute Read]

Welcome to The Integrated Microsoft Azure Networking Solutions (AZ-700) Study Guide. This guide moves beyond surface-level memorization. It is designed to build a robust mental model of how networking works within the Microsoft Azure ecosystem.

We will deconstruct networking concepts into their foundational truths, understanding the "why" behind every architectural decision. Each topic is aligned with the official Microsoft AZ-700 Exam Objectives (November 2025 Update), targeting the specific cognitive skills required for success.

Prerequisites: This exam assumes familiarity with Azure administration (AZ-104 level). You should understand Azure Resource Manager, virtual networks, storage accounts, and basic identity concepts in Microsoft Entra ID before proceeding.

Exam Domain Weights:

Focus your study time proportionally—Core Infrastructure and Connectivity Services together comprise nearly half the exam.


(Table of Contents - For Reference)

  • Phase 1: First Principles of Azure Networking
    • 1.1. The Network as Infrastructure
      • 1.1.1. Why Networks Exist
      • 1.1.2. The Cloud Network Difference
    • 1.2. The Routing Decision
      • 1.2.1. How Packets Find Their Way
      • 1.2.2. Control Planes vs Data Planes
    • 1.3. The Security Boundary
      • 1.3.1. Defense in Depth
      • 1.3.2. Zero Trust in Practice
    • 1.4. Reflection Checkpoint
  • Phase 2: Core Networking Infrastructure (25-30%)
    • 2.1. Virtual Networks and IP Addressing
      • 2.1.1. Planning VNet Address Spaces
      • 2.1.2. Subnet Design Patterns
      • 2.1.3. Public IP Addresses
    • 2.2. Name Resolution
      • 2.2.1. Azure DNS Fundamentals
      • 2.2.2. Private DNS Zones
      • 2.2.3. Azure DNS Private Resolver
    • 2.3. VNet Connectivity and Routing
      • 2.3.1. VNet Peering
      • 2.3.2. User-Defined Routes
      • 2.3.3. Azure Route Server
      • 2.3.4. NAT Gateway
    • 2.4. Network Monitoring
      • 2.4.1. Azure Network Watcher
      • 2.4.2. Azure Monitor Network Insights
      • 2.4.3. DDoS Protection
    • 2.5. Reflection Checkpoint
  • Phase 3: Connectivity Services (20-25%)
    • 3.1. Site-to-Site VPN
      • 3.1.1. VPN Gateway Architecture
      • 3.1.2. High Availability Design
      • 3.1.3. IPsec/IKE Configuration
    • 3.2. Point-to-Site VPN
      • 3.2.1. P2S Authentication Methods
      • 3.2.2. Tunnel Types and Configuration
    • 3.3. Azure ExpressRoute
      • 3.3.1. Connectivity Models
      • 3.3.2. Peering Configuration
      • 3.3.3. ExpressRoute Features
    • 3.4. Azure Virtual WAN
      • 3.4.1. Virtual WAN Architecture
      • 3.4.2. Hub Configuration
      • 3.4.3. Virtual Hub Routing
    • 3.5. Reflection Checkpoint
  • Phase 4: Application Delivery Services (15-20%)
    • 4.1. Azure Load Balancer
      • 4.1.1. Load Balancer SKUs and Types
      • 4.1.2. Load Balancing Rules
      • 4.1.3. Gateway Load Balancer
    • 4.2. Azure Traffic Manager
      • 4.2.1. Routing Methods
      • 4.2.2. Endpoint Configuration
    • 4.3. Azure Application Gateway
      • 4.3.1. Components and Configuration
      • 4.3.2. URL-Based Routing
      • 4.3.3. TLS Configuration
    • 4.4. Azure Front Door
      • 4.4.1. Global Load Balancing
      • 4.4.2. Rules Engine and Caching
      • 4.4.3. Private Link Integration
    • 4.5. Reflection Checkpoint
  • Phase 5: Private Access to Azure Services (10-15%)
    • 5.1. Azure Private Link
      • 5.1.1. Private Endpoints
      • 5.1.2. Private Link Service
      • 5.1.3. DNS Integration
    • 5.2. Service Endpoints
      • 5.2.1. Service Endpoint Configuration
      • 5.2.2. Service Endpoint Policies
    • 5.3. Reflection Checkpoint
  • Phase 6: Network Security Services (15-20%)
    • 6.1. Network Security Groups
      • 6.1.1. NSG Rules and Processing
      • 6.1.2. Application Security Groups
      • 6.1.3. Flow Logs and Diagnostics
    • 6.2. Azure Firewall
      • 6.2.1. Firewall SKUs and Deployment
      • 6.2.2. Rule Configuration
      • 6.2.3. Azure Firewall Manager
    • 6.3. Web Application Firewall
      • 6.3.1. WAF Deployment Options
      • 6.3.2. Rule Sets and Policies
    • 6.4. Reflection Checkpoint
  • Phase 7: Exam Readiness
    • 7.1. Exam Strategy
    • 7.2. Quick Reference
    • 7.3. Practice Questions
  • Phase 8: Glossary
  • Phase 9: Conclusion

🚀

Start Free. Upgrade When You're Ready.

Stay on your structured path while adding targeted practice with the full set of exam-like questions, expanded flashcards to reinforce concepts, and readiness tracking to identify and address weaknesses when needed.

Alvin Varughese
Written byAlvin Varughese
Founder•15 professional certifications

Content last updated