- Explore the core components of Azure Virtual Networks (VNets), including subnets and IP address spaces.
- Learn to create and configure VNets to support cloud-based applications and services.
- Understand network peering to enable communication between VNets across regions or subscriptions.
- Practice assigning and managing IP configurations for Azure resources.
Microsoft Certification Training Course
Microsoft Certified Azure Network Engineer Associate Certification Training Course AZ-700
Design and implement Azure networking solutions with Accumentum’s Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700), a comprehensive exploration of virtual networks, hybrid connectivity, network security, routing, load balancing, and network monitoring.
Course focus: Virtual networks, hybrid connectivity, network security, traffic management and load balancing, routing, DNS, remote access, performance optimization, and networking governance and compliance in Azure.
Course Overview
Design, secure, and optimize Azure networking solutions.
The Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700) with Accumentum delivers a comprehensive exploration of Azure networking, designed for IT professionals, network engineers, and individuals aiming to specialize in cloud network management. This course focuses on designing and implementing Azure networking solutions, including planning and configuring virtual networks, managing connectivity between on-premises and cloud environments, securing network resources, optimizing network performance, implementing hybrid networking, load balancing traffic, and monitoring network operations. It also dives into critical areas such as network security, routing, and integration with Azure services, providing hands-on labs and real-world scenarios to master practical applications, evaluate cloud networking opportunities, understand design principles, and assess the strategic value of network solutions in business contexts, equipping participants for the AZ-700 exam to earn the Microsoft Certified: Azure Network Engineer Associate certification.
Course Objectives
Course objectives for the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700).
01
Design Azure Networking Solutions
Master the design and implementation of Azure networking solutions, including virtual networks, hybrid connectivity, and secure network architectures, to support scalable and resilient cloud environments.
02
Manage Security, Routing and Load Balancing
Develop proficiency in configuring and managing network security, traffic routing, and load balancing to optimize performance and ensure compliance with organizational requirements.
03
Apply Skills in Practical Labs
Gain hands-on experience through practical labs to troubleshoot network issues, integrate Azure services, and deploy real-world networking scenarios effectively.
04
Prepare for the AZ-700 Exam
Prepare comprehensively for the AZ-700 exam by understanding key concepts, design considerations, and the strategic role of Azure networking in enhancing business operations.
Who Should Attend
- Network engineers and IT professionals seeking to specialize in designing and managing Azure-based networking solutions.
- System administrators looking to expand their skills in cloud network configuration, security, and hybrid connectivity.
- Technical professionals aiming to earn the Microsoft Certified: Azure Network Engineer Associate certification to advance their careers in cloud computing.
- IT decision-makers or consultants interested in understanding Azure networking capabilities to support business infrastructure and strategy.
Prerequisites
- Basic understanding of networking concepts, including IP addressing, routing, DNS, and network security principles.
- Familiarity with Microsoft Azure fundamentals, such as virtual machines, storage, and basic cloud architecture, equivalent to AZ-900 certification knowledge.
- Prior experience with on-premises or cloud network administration, including configuring firewalls, VPNs, or load balancers.
- Comfort with using the Azure portal and PowerShell or Azure CLI for managing resources, though advanced scripting skills are not required.
Pathway Map
The AZ-700 training course follows the Azure networking lifecycle.
The curriculum moves from virtual networking fundamentals and hybrid connectivity through network security, traffic management, routing, monitoring, DNS, remote access, performance optimization, and governance and compliance.
1
Azure Virtual Networking Fundamentals
2
Hybrid Networking with Azure
3
Network Security Implementation
4
Traffic Management and Load Balancing
5
Routing and Connectivity Optimization
6
Monitoring and Troubleshooting Networks
7
DNS and Name Resolution in Azure
8
Azure Bastion and Remote Access
9
Network Performance Optimization
10
Governance and Compliance in Networking
Course Content
- Implement Azure VPN Gateway to establish secure site-to-site and point-to-site connections.
- Configure Azure ExpressRoute for private, high-bandwidth connectivity between on-premises and Azure.
- Troubleshoot hybrid connectivity issues using diagnostic tools and logs.
- Design hybrid network architectures to integrate on-premises infrastructure with Azure services.
- Deploy Azure Firewall to protect VNets and filter network traffic based on rules.
- Configure Network Security Groups (NSGs) to control inbound and outbound traffic at the subnet and VM level.
- Implement Azure DDoS Protection to safeguard applications from distributed denial-of-service attacks.
- Explore best practices for securing network perimeters and enforcing compliance.
- Set up Azure Load Balancer to distribute traffic across multiple VMs for high availability.
- Configure Azure Application Gateway for Layer 7 load balancing and web application firewall features.
- Utilize Azure Traffic Manager to route global traffic based on geographic location or performance.
- Optimize traffic flow with hands-on labs simulating real-world load balancing scenarios.
- Design custom routing tables using User-Defined Routes (UDRs) to control traffic flow.
- Implement Azure Route Server to simplify dynamic routing in complex network setups.
- Manage Border Gateway Protocol (BGP) configurations for enhanced hybrid routing.
- Analyze and resolve routing conflicts to ensure efficient network performance.
- Use Azure Network Watcher to monitor network health, diagnose connectivity issues, and capture packets.
- Interpret logs and metrics to identify and resolve performance bottlenecks.
- Set up alerts and automated actions for proactive network management.
- Simulate network failures in labs to practice troubleshooting techniques.
- Configure Azure DNS to host and manage custom domains within the cloud.
- Implement private DNS zones for secure name resolution within VNets.
- Integrate Azure DNS with on-premises DNS systems for seamless hybrid resolution.
- Troubleshoot DNS-related issues using Azure tools and best practices.
- Deploy Azure Bastion for secure RDP and SSH access to VMs without public IP exposure.
- Configure Bastion hosts to enhance security in remote management scenarios.
- Manage access policies and session monitoring for Bastion deployments.
- Compare Bastion with traditional VPN solutions through practical exercises.
- Analyze network latency and bandwidth usage to improve application performance.
- Implement Azure Content Delivery Network (CDN) to accelerate content delivery globally.
- Use Virtual Network Gateway diagnostics to optimize VPN and ExpressRoute performance.
- Explore Quality of Service (QoS) techniques to prioritize critical traffic.
- Apply Azure Policy to enforce network configuration standards across subscriptions.
- Implement tagging strategies for resource organization and cost management.
- Ensure compliance with industry regulations through network security controls.
- Review case studies on aligning Azure networking with organizational governance frameworks.
Course Features
Course features of the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700).
Interactive Learning
Participate in training sessions, discussions, and hands-on labs with experienced instructors.
Practical Scenarios
Engage in real-world exercises and case studies to apply your knowledge.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Certification Preparation
Receive guidance and tips to successfully pass the Microsoft Certified: Azure Network Engineer Associate (AZ-700) exam.
Certification Exam
Prepare for the Microsoft Certified: Azure Network Engineer Associate (AZ-700) exam.
AZ-700 Exam Readiness
Accumentum’s AZ-700 Training Course prepares learners to design, implement, and manage virtual networks, hybrid connectivity, and network security across Azure environments.
Upon completing the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700) with Accumentum, you will be thoroughly equipped to pass the AZ-700 exam. This certification confirms your expertise in Azure networking, encompassing the design, implementation, and management of virtual networks, hybrid connectivity, and network security. It showcases your ability to optimize network performance, enforce security and compliance standards, and leverage Azure’s networking tools to support robust cloud solutions. Earning the Microsoft Certified: Azure Network Engineer Associate certification will elevate your career prospects, opening doors to roles that demand advanced networking skills and strategic oversight of Azure network architectures for operational success.
Skills Measured
The full AZ-700 skills outline.
Microsoft lists the skills measured for Exam AZ-700 as of July 27, 2026. Here are all 5 domains, 16 skill groups and 136 tasks in Microsoft's own wording. Our course maps a lesson or lab to each one.
Design and implement IP addressing for Azure resources
Part of Design and implement core networking infrastructure (25 to 30%)
- Plan and implement network segmentation and address spaces
- Create a virtual network (VNet)
- Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion
- Plan and configure subnet delegation
- Plan and configure shared or dedicated subnets
- Create a Public IP Prefix
- Choose when to use a public IP address prefix
- Plan and implement a Custom IP address prefix (bring your own IP)
- Create a public IP address
- Associate public IP addresses to resources
Design and implement name resolution
Part of Design and implement core networking infrastructure (25 to 30%)
- Design name resolution inside a VNet
- Configure DNS settings for a VNet
- Design public DNS zones
- Design private DNS zones
- Configure public and private DNS zones
- Link a private DNS zone to a VNet
- Design and implement Azure DNS Private Resolver
Design and implement VNet connectivity and routing
Part of Design and implement core networking infrastructure (25 to 30%)
- Design service chaining, including gateway transit
- Implement VNet peering
- Implement and manage virtual network connectivity by using Azure Virtual Network Manager
- Design and implement user-defined routes (UDRs)
- Associate a route table with a subnet
- Configure forced tunneling
- Diagnose and resolve routing issues
- Design and implement Azure Route Server
- Identify appropriate use cases for Azure NAT Gateway
- Implement Azure NAT Gateway
Monitor networks
Part of Design and implement core networking infrastructure (25 to 30%)
- Configure monitoring, network diagnostics, and logs in Azure Network Watcher
- Monitor and troubleshoot network health by using Azure Network Watcher
- Monitor and troubleshoot networks by using Azure Monitor for Networks
- Activate and monitor distributed denial-of-service (DDoS) protection
- Evaluate network security recommendations identified by Microsoft Defender for Cloud Secure Score
- Evaluate network security recommendations identified by Microsoft Defender for Cloud attack path analysis
- Identify network resources by using Cloud Security Explorer in Microsoft Defender for Cloud
Design, implement, and manage a site-to-site VPN connection
Part of Design, implement, and manage connectivity services (20 to 25%)
- Design a site-to-site VPN connection, including for high availability
- Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements
- Implement a site-to-site VPN connection
- Identify when to use a policy-based VPN versus a route-based VPN connection
- Create and configure a local network gateway
- Create and configure an IPsec/Internet Key Exchange (IKE) policy
- Create and configure a virtual network gateway
- Diagnose and resolve virtual network gateway connectivity issues
- Implement Azure Extended Network
Design, implement, and manage a point-to-site VPN connection
Part of Design, implement, and manage connectivity services (20 to 25%)
- Select an appropriate virtual network gateway SKU for point-to-site VPN requirements
- Select and configure a tunnel type
- Select an appropriate authentication method
- Configure RADIUS authentication
- Configure authentication by using Microsoft Entra ID
- Implement a VPN client configuration file
- Diagnose and resolve client-side and authentication issues
- Specify Azure requirements for Always On VPN
- Specify Azure requirements for Azure Network Adapter
Design, implement, and manage Azure ExpressRoute
Part of Design, implement, and manage connectivity services (20 to 25%)
- Select an ExpressRoute connectivity model
- Select an appropriate ExpressRoute SKU and tier
- Design and implement ExpressRoute to meet requirements, including cross-region connectivity, redundancy, and disaster recovery
- Design and implement ExpressRoute options, including Global Reach, FastPath, and ExpressRoute Direct
- Choose between Azure private peering only, Microsoft peering only, or both
- Configure Azure private peering
- Configure Microsoft peering
- Create and configure an ExpressRoute gateway
- Connect a virtual network to an ExpressRoute circuit
- Recommend a route advertisement configuration
- Configure encryption over ExpressRoute
- Implement Bidirectional Forwarding Detection
- Diagnose and resolve ExpressRoute connection issues
Design and implement an Azure Virtual WAN architecture
Part of Design, implement, and manage connectivity services (20 to 25%)
- Select a Virtual WAN SKU
- Design a Virtual WAN architecture, including selecting types and services
- Create a virtual hub in Virtual WAN
- Choose an appropriate scale unit for each gateway type
- Deploy a gateway into a virtual hub
- Configure virtual hub routing
- Integrate a virtual hub with a third-party NVA for cloud connectivity
Design and implement Azure Load Balancer and Azure Traffic Manager
Part of Design and implement application delivery services (15 to 20%)
- Map requirements to features and capabilities of Azure Load Balancer
- Identify appropriate use cases for Azure Load Balancer
- Choose an Azure Load Balancer SKU and tier
- Choose between public and internal load balancers
- Choose between regional and cross-region load balancers
- Create and configure an Azure Load Balancer
- Implement Azure Traffic Manager
- Implement Gateway Load Balancer
- Implement a load balancing rule
- Create and configure inbound NAT rules
- Create and configure explicit outbound rules, including source network address translation (SNAT)
Design and implement Azure Application Gateway
Part of Design and implement application delivery services (15 to 20%)
- Map requirements to features and capabilities of Azure Application Gateway
- Identify appropriate use cases for Azure Application Gateway
- Choose between manual and autoscale
- Create a backend pool
- Configure health probes
- Configure listeners
- Configure routing rules
- Configure HTTP settings
- Configure Transport Layer Security (TLS)
- Configure rewrite rule sets
Design and implement Azure Front Door
Part of Design and implement application delivery services (15 to 20%)
- Map requirements to features and capabilities of Azure Front Door
- Identify appropriate use cases for Azure Front Door
- Choose an appropriate tier
- Configure an Azure Front Door, including routing, origins, and endpoints
- Configure TLS termination and end-to-end TLS encryption
- Configure caching
- Configure traffic acceleration
- Implement rules, URL rewrite, and URL redirect
- Secure an origin by using Azure Private Link in Azure Front Door
Design and implement Azure Private Link service and Azure private endpoints
Part of Design and implement private access to Azure services (10 to 15%)
- Plan private endpoints
- Create private endpoints
- Configure access to private endpoints
- Create a Private Link service
- Integrate Private Link and Private Endpoint with DNS
- Integrate a Private Link service with on-premises clients
Design and implement service endpoints
Part of Design and implement private access to Azure services (10 to 15%)
- Choose when to use a service endpoint
- Create service endpoints
- Configure service endpoint policies
- Configure access to service endpoints
Implement and manage network security groups
Part of Design and implement Azure network security services (15 to 20%)
- Create a network security group (NSG)
- Associate a NSG to a subnet or network interface
- Create an application security group (ASG)
- Associate an ASG to a network interface
- Create and configure NSG inbound and outbound security rules
- Implement virtual network flow logs
- Interpret virtual network flow logs
- Verify IP flow
- Configure an NSG for remote server administration, including Azure Bastion
- Implement and manage virtual network security by using Azure Virtual Network Manager
Design and implement Azure Firewall and Azure Firewall Manager
Part of Design and implement Azure network security services (15 to 20%)
- Map requirements to features and capabilities of Azure Firewall
- Select an appropriate Azure Firewall SKU
- Design an Azure Firewall deployment
- Create and implement an Azure Firewall deployment
- Configure Azure Firewall rules
- Create and implement Azure Firewall Manager policies
- Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub
Design and implement a Web Application Firewall (WAF) deployment
Part of Design and implement Azure network security services (15 to 20%)
- Map requirements to features and capabilities of WAF
- Design a WAF deployment
- Configure detection or prevention mode
- Configure rule sets for WAF on Azure Front Door
- Configure rule sets for WAF on Application Gateway
- Implement a WAF policy
- Associate a WAF policy
Study Plan
Turning the AZ-700 outline into a plan.
Core networking infrastructure is the largest domain at 25 to 30 percent, so we start there. IP addressing, virtual networks, name resolution with Azure DNS and cross network connectivity are the base for everything else.
Connectivity services come next. You build site to site and point to site VPNs, plan ExpressRoute, set up Virtual WAN and work through routing until hybrid traffic flows the way you expect.
Then we cover application delivery and private access. Load Balancer, Application Gateway, Front Door and Traffic Manager each get labs, followed by Private Link and service endpoints.
We close with network security, including Azure Firewall, network security groups and DDoS protection. The final week is review and the exam sandbox.
Exam Policies
How Microsoft runs the AZ-700 exam.
AZ-700 leads to Microsoft Certified: Azure Network Engineer Associate. Microsoft requires a score of 700 or greater to pass.
Microsoft notes that the bullets under each skill show how a skill is assessed, and related topics may also be covered. Most questions cover features that are generally available, but the exam can include Preview features if they are commonly used.
Before test day you can try the exam sandbox to see the exam interface. If you use assistive devices or need extra time, Microsoft lets you request an accommodation. If the exam is not offered in your preferred language, you can request an extra 30 minutes.
Microsoft associate certifications expire annually. You renew by passing a free online assessment on Microsoft Learn, and we show you how to keep AZ-700 current.
Career Outlook
Where AZ-700 can take you.
AZ-700 suits network engineers moving into cloud and Azure admins who keep getting the networking tickets. Typical titles include Azure network engineer, cloud network engineer, network architect and infrastructure engineer. The work covers virtual networks and routing, hybrid connections with VPN and ExpressRoute, load balancing and application delivery, private access and network security.
For a sense of pay, BLS puts the May 2025 median annual wage for computer network architects at $134,050. That figure is a national midpoint. Where you live, how long you have been in the field and who you work for all move the number. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for AZ-700 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps. We'll help you line up the course with your request.
Paying on your own? AZ-700 prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can always talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Understand how Accumentum’s Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700) supports certification readiness, course delivery, and career advancement.
The certification confirms your expertise in Azure networking, encompassing the design, implementation, and management of virtual networks, hybrid connectivity, and network security. It showcases your ability to optimize network performance, enforce security and compliance standards, and leverage Azure’s networking tools to support robust cloud solutions.
The course is designed for network engineers and IT professionals seeking to specialize in designing and managing Azure-based networking solutions, system administrators expanding their skills in cloud network configuration, security, and hybrid connectivity, technical professionals aiming to earn the certification, and IT decision-makers or consultants interested in understanding Azure networking capabilities.
A basic understanding of networking concepts, including IP addressing, routing, DNS, and network security principles is expected, along with familiarity with Microsoft Azure fundamentals equivalent to AZ-900 knowledge, prior experience with on-premises or cloud network administration, and comfort using the Azure portal and PowerShell or Azure CLI, though advanced scripting skills are not required.
The curriculum covers Azure Virtual Networking Fundamentals, Hybrid Networking with Azure, Network Security Implementation, Traffic Management and Load Balancing, Routing and Connectivity Optimization, Monitoring and Troubleshooting Networks, DNS and Name Resolution in Azure, Azure Bastion and Remote Access, Network Performance Optimization, and Governance and Compliance in Networking.
Yes. The Hybrid Networking with Azure module covers implementing Azure VPN Gateway for site-to-site and point-to-site connections, configuring Azure ExpressRoute for private high-bandwidth connectivity, troubleshooting hybrid connectivity issues, and designing hybrid network architectures.
The Network Security Implementation module covers deploying Azure Firewall, configuring Network Security Groups (NSGs), implementing Azure DDoS Protection, and best practices for securing network perimeters and enforcing compliance.
Yes. You will set up Azure Load Balancer, configure Azure Application Gateway for Layer 7 load balancing and web application firewall features, utilize Azure Traffic Manager for global routing, and optimize traffic flow with hands-on labs simulating real-world load balancing scenarios.
The course features interactive learning, where you participate in training sessions, discussions, and hands-on labs with experienced instructors, plus practical scenarios that let you engage in real-world exercises and case studies to apply your knowledge.
You receive comprehensive study materials with access to extensive resources, including e-books, video lectures, and practice exams, along with certification preparation guidance and tips to successfully pass the AZ-700 exam.
Enroll in the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700) with Accumentum to advance your cloud networking expertise and achieve a globally recognized certification. For complete details and to secure your spot, visit Accumentum's registration page linked below.
Microsoft requires a score of 700 or greater to pass.
Microsoft lists these domains:
- Design and implement core networking infrastructure, 25 to 30%
- Design, implement, and manage connectivity services, 20 to 25%
- Design and implement application delivery services, 15 to 20%
- Design and implement private access to Azure services, 10 to 15%
- Design and implement Azure network security services, 15 to 20%
Design and implement core networking infrastructure is the largest at 25 to 30%. We give it the most lab time.
Microsoft lists 136 tasks across 16 skill groups as of July 27, 2026. Our course covers all of them.
Microsoft associate certifications expire annually. You renew by passing a free online assessment on Microsoft Learn, and we show you how to keep AZ-700 current.
Yes. Microsoft offers an exam sandbox that shows you the exam interface and question types.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help you with the rest.
Microsoft says most questions cover generally available features, but Preview features can appear if they are commonly used.
Yes. AZ-700 prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee, and longer terms add 5% to 15%.
Enrollment
Enroll in the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700).
Enroll in the Microsoft Certified: Azure Network Engineer Associate Certification Training Course (AZ-700) with Accumentum to advance your cloud networking expertise and achieve a globally recognized certification. This course is your pathway to becoming a Microsoft Certified: Azure Network Engineer Associate. For complete details and to secure your spot, visit Accumentum's registration page linked below.
Advance your Azure networking career with AZ-700 training.
Prepare for the AZ-700 exam, design and implement secure virtual networks and hybrid connectivity, and optimize routing, load balancing, and network monitoring across Azure.