Microsoft · AZ-700
Validates expertise in designing, implementing, and maintaining Azure networking solutions including hybrid connectivity, application delivery services, private access to Azure services, and network security.
Practice Questions
554
≈ 11 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2026
Use this AZ-700 practice exam to prepare for Microsoft Certified: Azure Network Engineer Associate (AZ-700) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 554 questions for Microsoft AZ-700, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Core Networking Infrastructure, Routing, Azure ExpressRoute, Network Security, and Private Access to Azure Services. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The Microsoft Certified: Azure Network Engineer Associate (AZ-700) validates subject matter expertise in designing, implementing, and managing Azure networking solutions. The certification covers five core domains: core network infrastructure (virtual networks, IP addressing, DNS, routing, and NAT), hybrid connectivity (site-to-site VPN, point-to-site VPN, Azure ExpressRoute, and Azure Virtual WAN), application delivery services (Azure Load Balancer, Traffic Manager, Application Gateway, and Azure Front Door), private access to Azure services (Private Link, private endpoints, and service endpoints), and network security (NSGs, Azure Firewall, Firewall Manager, and Web Application Firewall). The exam was last updated on January 21, 2026, reflecting the latest Azure networking capabilities.
Earning this certification demonstrates that a professional can optimize performance, resiliency, scale, and security across Azure networking environments, proactively monitor network health, diagnose routing and connectivity issues, and collaborate effectively with solution architects, cloud administrators, security engineers, and application developers. It is recognized across the industry as a benchmark for Azure network engineering proficiency at the associate level.
This certification targets network engineers and cloud infrastructure professionals who plan, implement, and manage Azure networking solutions as part of their day-to-day responsibilities. Ideal candidates typically hold roles such as Azure Network Engineer, Cloud Network Architect, Infrastructure Engineer, or Network Administrator working in organizations that operate workloads in Azure or are migrating from on-premises environments.
Candidates should have hands-on experience creating and managing compute, storage, and networking resources in Azure, along with a solid understanding of networking fundamentals including name resolution, network protocols (TCP/IP, BGP, IPsec/IKE), and network address management (CIDR, subnetting). Those who regularly work with Azure VNets, ExpressRoute circuits, Application Gateway, Azure Firewall, or hybrid connectivity scenarios will find the exam content closely aligned with their practical experience.
There are no formal prerequisite certifications required to sit for the AZ-700 exam. However, Microsoft recommends that candidates possess practical experience creating and managing compute, storage, and networking resources in Azure before attempting the exam. A working knowledge of Azure fundamentals—such as the concepts covered in the AZ-900 (Azure Fundamentals) certification—provides a useful foundation, though it is not mandatory.
Candidates should be proficient in core networking concepts including IP addressing and subnetting, DNS, routing protocols (including BGP for ExpressRoute scenarios), VPN technologies (IPsec/IKE, SSL/TLS), and network security principles. Familiarity with Azure-specific services such as Virtual Networks, Azure Portal, Azure CLI, and Azure PowerShell is strongly recommended. Prior experience with on-premises networking technologies and hybrid connectivity scenarios involving site-to-site VPNs or MPLS/ExpressRoute circuits will be advantageous.
Exam AZ-700 is a proctored assessment delivered through Pearson VUE, available in both online proctored and in-person test center formats. Candidates are given 100 minutes to complete the exam. The exam may include interactive components such as labs or case studies in addition to standard question types like multiple choice, multiple select, drag-and-drop, and scenario-based questions.
The passing score is 700 out of 1000 on Microsoft's scaled scoring system, which uses a compensatory model—meaning candidates do not need to achieve a minimum score in each individual domain, only an overall scaled score of 700 or above. The exam is available in English, German, Spanish, French, Italian, Japanese, Korean, Portuguese (Brazil), Chinese (Simplified), and Chinese (Traditional). The exam fee is $165 USD (pricing varies by country/region). Certification earned is valid for 12 months and can be renewed at no cost by passing an online renewal assessment on Microsoft Learn.
The Azure Network Engineer Associate certification opens doors to roles such as Azure Network Engineer, Cloud Infrastructure Engineer, Network Architect, and Cloud Solutions Architect at organizations across virtually every industry undertaking Azure adoption or hybrid cloud migrations. As of early 2026, Azure Network Engineers in the United States earn average annual salaries of approximately $109,000–$145,000, with top earners in high-cost markets such as California, Massachusetts, and Washington D.C. commanding $155,000–$165,000 or more depending on experience and seniority.
Demand for certified Azure networking professionals continues to grow as enterprises expand hybrid connectivity using ExpressRoute and Virtual WAN, adopt Zero Trust network security models, and migrate application delivery infrastructure to Azure-native services like Front Door and Application Gateway. Compared to general cloud associate certifications, the AZ-700's specialization in networking positions holders for higher-compensation, more technically complex roles. The certification also serves as a natural stepping stone toward expert-level credentials such as the Azure Solutions Architect Expert (AZ-305) or specialized security certifications, making it a strategically valuable milestone in a cloud networking career path.
5 sample questions with answers and explanations. The full bank has 554 questions, enough for 11 full-length practice exams.
Preview — answers shown1. Fabrikam Inc wants to deploy Azure Bastion to an existing virtual network to support standard SKU features and host scaling capabilities. What minimum subnet size should you recommend for the Azure Bastion deployment?
Explanation
Azure Bastion requires a minimum subnet size of /26 to function properly, especially when supporting standard SKU features and host scaling. While you can use larger subnets like /25 or /24, the minimum requirement is /26. Smaller subnets like /27 or /28 do not provide sufficient IP addresses for Azure Bastion operations.
2. Fabrikam Residences deploys Azure Virtual WAN using Basic WAN type for their branch office connectivity. Based on this configuration, which connection type will be included in the solution?
Explanation
Basic Virtual WAN type exclusively supports Site-to-Site VPN connections between branch offices and Azure. To enable ExpressRoute circuits, Point-to-Site VPN, VNet-to-VNet connectivity, Azure Firewall, or Network Virtual Appliances, you must upgrade to Standard Virtual WAN type. The Basic tier is specifically designed for simple branch-to-Azure S2S VPN scenarios.
3. As the world runs out of available IPv4 addresses, a newer version of the Internet Protocol has been developed to provide a vastly larger address space. This newer version uses 128-bit addresses, represented as eight groups of four hexadecimal digits. What is this protocol called?
Explanation
IPv6 (Internet Protocol version 6) is the successor to IPv4 and was designed to solve the problem of IPv4 address exhaustion. Its 128-bit address space allows for a virtually limitless number of unique addresses. IPv5 was an experimental protocol that was never widely adopted. TCPv6 is not a standard protocol, and IPX is an older networking protocol primarily used by Novell NetWare.
4. A network administrator is looking at an IP address configuration written as 10.10.0.0/16. This notation is a compact way to represent the IP network address and its associated subnet mask. What is this notation called?
Explanation
This is Classless Inter-Domain Routing (CIDR) notation. [20] The number after the slash (/16) represents the number of bits in the network portion of the address, which in turn defines the subnet mask. In this case, /16 means the first 16 bits are for the network, corresponding to a subnet mask of 255.255.0.0. This method is the standard for representing network prefixes today.
5. A computer at Horizon Manufacturing needs to send a data packet to another computer on the same local Ethernet network. The sending computer knows the destination computer's IP address but does not know its physical hardware address. Which protocol is used to discover the destination's MAC address?
Explanation
ARP (Address Resolution Protocol) is used to map a network layer address (like an IP address) to a data link layer address (like a MAC address) for communication within a local network. [8, 14, 27] The sending computer broadcasts an ARP request asking 'Who has this IP address?', and the computer with that IP replies with its MAC address. [45, 49] ICMP is used for diagnostic messages, DNS for name resolution, and DHCP for IP address assignment.
Microsoft Certified: Azure for SAP Workloads Specialty (AZ-120)
AZ-120 · 582 questions
Microsoft Certified: Azure Fundamentals (AZ-900)
AZ-900 · 382 questions
Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
AZ-305 · 530 questions
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
AZ-500 · 469 questions
Microsoft Certified: AI Business Professional (AB-730)
AB-730 · 699 questions
Microsoft Certified: AI Transformation Leader (AB-731)
AB-731 · 700 questions
$17.99
One-time access to this exam