Azure Network Engineer AZ-700 Course
A structured Azure Network Engineer AZ-700 course covering hybrid networking, routing, private connectivity, security, monitoring and architecture, with linked practice questions.
Course progress
0 / 5
Back to courses
What you will learn
- Describe hybrid networking and connectivity.
- Explain routing and load balancing.
- Describe private connectivity and DNS.
- Explain network security.
- Describe monitoring, operations and architecture.
Before you start
- Basic Azure knowledge is helpful.
- Some networking fundamentals are recommended.
- No previous Azure certification is required.
Lesson 1 Hybrid Networking and Connectivity
The Azure Network Engineer AZ-700 exam validates designing, implementing, and monitoring Azure networking solutions. Hybrid networking and connectivity connects on-premises environments to Azure. VPN Gateway creates encrypted tunnels, ExpressRoute provides private connections, and Virtual WAN creates global hubs. Azure Bastion enables secure RDP and SSH without public IPs. Site-to-site VPNs connect networks, point-to-site VPNs connect clients, and virtual networks isolate resources. Hub-spoke design centralizes shared services, and Virtual Network Manager manages networks at scale.
Example
Example: An organization uses ExpressRoute for production, VPN Gateway as backup, Bastion for admin access, and hub-spoke for shared services.Lesson 2 Routing and Load Balancing
Routing and load balancing distribute traffic and control paths. Route tables define custom routes, Azure Load Balancer works at layer 4, Application Gateway works at layer 7, Traffic Manager routes at DNS level, and Front Door provides a global edge. NAT Gateway provides outbound internet access for private subnets. Load balancing rules map traffic to backends, health probes verify backend health, and session affinity keeps clients on one backend. Engineers choose services based on protocol and global requirements.
Example
Example: A web app uses Application Gateway for HTTP routing, Azure Load Balancer for internal traffic, and Front Door for global acceleration.Lesson 3 Private Connectivity and DNS
Private connectivity and DNS keep traffic inside private networks. Private endpoints give Azure services private IP addresses, private DNS zones resolve names inside virtual networks, and VNet peering connects virtual networks. Service endpoints provide access to Azure services, Private Link exposes services privately, and VNet integration connects services to networks. DNS resolution converts names to IPs, private IPs stay inside VNets, and the private resolver handles private DNS across networks. Engineers design private paths and DNS zones.
Example
Example: A database uses a private endpoint, a private DNS zone resolves its name, and VNet peering connects app and data networks.Lesson 4 Network Security
Network security protects traffic and resources. NSGs filter traffic with rules, Azure Firewall is a managed firewall, WAF protects web applications, and DDoS Protection defends against attacks. Application security groups organize VMs by application, service tags represent Azure IP ranges, and NVAs provide network functions. Just-in-time access opens ports temporarily, and Bastion provides secure remote access. Engineers use segmentation, private paths, and layered security controls.
Example
Example: A web workload uses WAF, Azure Firewall, DDoS Protection, NSGs, and Bastion for layered protection.Lesson 5 Monitoring, Operations, and Architecture
Monitoring, operations, and architecture complete the networking lifecycle. Network Watcher provides diagnostics, flow logs record NSG decisions, connection monitors test links, and packet capture records traffic. Topology maps resources, IP flow verify tests traffic, effective rules show applied rules, and Azure Monitor collects metrics. Hub-spoke and Virtual WAN define architecture, quotas limit resources, availability zones support resilience, segmentation isolates workloads, and cost optimization balances spend. Engineers monitor, troubleshoot, and design for scale.