Skip to main content
Ace Skills Consulting
Microsoft logoIntermediate

AZ-700: Azure Network Engineer

Design and troubleshoot Azure networks that connect, protect and deliver applications — and prepare for the AZ-700 exam.

  • 24 hours of live, lab-heavy sessions
  • Builds a hub-and-spoke network across the three days
  • VPN, ExpressRoute and Virtual WAN design covered in depth
  • Private Link, DNS and Azure Firewall labs
  • Troubleshooting drills with Network Watcher
Aligned to Microsoft exam AZ-700
Duration
3 Days | 24 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Intermediate
Exam
AZ-700
Language
English

Why learn AZ-700 with Ace Skills

  • Built for network engineers

    Concepts are mapped to routing, BGP and DNS principles you already know, so you focus on how Azure behaves differently.

  • Troubleshooting as a skill

    Deliberately broken labs teach you to diagnose effective routes, NSG flows and DNS resolution with Network Watcher.

  • Hybrid connectivity explained

    VPN, ExpressRoute and Virtual WAN are compared on resilience, throughput and cost, with design workshops for each.

  • Private by design

    Private Link, DNS Private Resolver and Azure Firewall are combined into patterns you can take straight to production.

Course overview

Networking is where many Azure projects stall: a private endpoint that will not resolve, a route that sends traffic the wrong way, or a hybrid link that works for one subnet and not another. This three-day course is built for network engineers who need to design Azure networks properly and fix them quickly when something goes wrong.

Day one covers core infrastructure — IP planning, virtual networks, peering, routing with user-defined routes and route servers, and name resolution with Azure DNS and the DNS Private Resolver. Day two moves to hybrid connectivity: site-to-site and point-to-site VPN, ExpressRoute circuits and private peering, and Azure Virtual WAN for larger topologies.

Day three focuses on application delivery and security. You configure Azure Load Balancer, Application Gateway, Front Door and Traffic Manager, then secure the environment with network security groups, Azure Firewall, Web Application Firewall policies and Private Link. A final troubleshooting block uses Network Watcher to diagnose broken paths.

Labs are designed around one evolving hub-and-spoke network, so you see how each change affects routing, DNS and security across the whole environment rather than in isolation.

The course is aligned to the AZ-700 exam. Microsoft updates exam outlines periodically, so check the current skills measured on Microsoft Learn before booking.

Key features

  • One hub-and-spoke network built and extended through the course
  • Routing, DNS and private endpoint troubleshooting drills
  • VPN and ExpressRoute design workshops
  • Load balancing decision guide for all four services
  • Azure Firewall and WAF policy labs
  • Exam strategy session with practice questions
  • 30 days of post-training doubt support

Who should attend

  • Network engineers extending on-premises networks into Azure
  • Azure administrators responsible for connectivity
  • Cloud architects who design network topologies
  • Security engineers working with network controls

Prerequisites

  • Solid networking fundamentals: IP subnetting, routing, DNS and VPNs
  • Hands-on Azure experience (AZ-104 level recommended)
  • Basic familiarity with PowerShell or Azure CLI

Curriculum

3 Days · 24 Hours · 10 Modules · 9 Labs

  1. Virtual networks and IP planning

    • Address space planning and IPv6 support
    • Subnets and subnet delegation
    • Public IP addresses and prefixes
    • NAT Gateway for outbound traffic
    • Lab: Plan and deploy a hub-and-spoke address scheme · 40 min

    Peering and routing

    • VNet peering and gateway transit
    • System routes and user-defined routes
    • Azure Route Server and BGP
    • Forced tunnelling
    • Lab: Route spoke traffic through a hub appliance with UDRs · 50 min

    Name resolution

    • Azure DNS public zones
    • Private DNS zones and auto-registration
    • Azure DNS Private Resolver
    • Hybrid DNS forwarding
    • Lab: Configure hybrid DNS with the Private Resolver · 45 min

  2. VPN connectivity

    • VPN Gateway SKUs and generations
    • Site-to-site with policy- and route-based VPN
    • Active-active gateways and BGP
    • Point-to-site with Entra ID authentication
    • Lab: Build a site-to-site VPN between two simulated sites · 55 min

    ExpressRoute

    • Circuits, peering locations and providers
    • Private and Microsoft peering
    • ExpressRoute Global Reach and FastPath
    • Resilience and VPN failover design
    • Lab: Design workshop: resilient ExpressRoute for two regions · 40 min

    Azure Virtual WAN

    • Virtual hubs and routing
    • Secured virtual hubs
    • When Virtual WAN beats a custom hub
    • Lab: Connect spokes and branches through Virtual WAN · 45 min

  3. Load balancing and delivery

    • Azure Load Balancer (internal and public)
    • Application Gateway and path-based routing
    • Azure Front Door
    • Traffic Manager
    • Choosing the right service
    • Lab: Publish an application through Application Gateway with WAF · 50 min

    Network security and private access

    • NSGs, ASGs and flow logs
    • Azure Firewall and Firewall Manager
    • Private Link and private endpoints
    • Service endpoints and policies
    • Lab: Secure PaaS access with private endpoints and Azure Firewall · 45 min

    Monitoring and troubleshooting

    • Network Watcher tools
    • Connection monitor
    • Effective routes and IP flow verify
    • Lab: Troubleshoot three deliberately broken network paths · 30 min

    Exam readiness

    • Exam format and design scenarios
    • Practice questions with review
Download full syllabus (PDF)

Skills you will gain

  • Azure Virtual Network
  • VNet peering
  • User-defined routes
  • Azure Route Server
  • Azure DNS
  • DNS Private Resolver
  • VPN Gateway
  • ExpressRoute
  • Virtual WAN
  • Load Balancer
  • Application Gateway
  • Front Door
  • Azure Firewall
  • Private Link
  • Network Watcher

Tools & technologies

  • Azure portal
  • Azure CLI
  • Azure PowerShell
  • Network Watcher
  • Azure Firewall Manager
  • Bicep

Certification exam

Exam details
Exam nameMicrosoft Certified: Azure Network Engineer Associate
Exam codeAZ-700
Duration100 minutes
Passing score700 / 1000 (scaled)
Voucher includedNo — book directly with the vendor
Question formatMultiple choice, Multiple response, Drag and drop, Case study
DeliveryOnline proctored or Test centre
Validity & renewal1 year (free online renewal assessment)

Skill areas measured

  1. Design and implement core networking infrastructure
  2. Design, implement, and manage connectivity services
  3. Design and implement application delivery services
  4. Design and implement private access to Azure services
  5. Design and implement Azure network security services

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 24 hours of live, trainer-led sessions
  • 9 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 1 · 50 min

    Route spoke traffic through a hub appliance with UDRs

  • Day 3 · 50 min

    Publish an application through Application Gateway with WAF

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The Microsoft certification itself is awarded by Microsoft when you pass exam AZ-700.

Frequently asked questions

Do I need AZ-104 before AZ-700?

It is not mandatory, but Azure administration experience makes the course much easier. Strong on-premises networking skills are the more important prerequisite.

Will I configure ExpressRoute in the labs?

ExpressRoute requires a provider circuit, so it is covered through design workshops and portal walkthroughs; VPN and Virtual WAN are fully hands-on.

How do I book the AZ-700 exam?

You schedule it through Microsoft Learn, either online-proctored or at a test centre. We walk through the process in the final session.

What happens if Microsoft updates the AZ-700 exam?

We map the curriculum to the current published skills outline and revise it when Microsoft changes the exam. Always check the latest outline on Microsoft Learn before booking.

Can you run a private batch for our team?

Yes. We run private online or onsite batches for corporate teams, and we can weight the labs towards your hybrid network design. Request a corporate quote with your team size and preferred dates.

Related courses

Explore more

All Microsoft Azure courses Microsoft certifications

Microsoft, Azure, Microsoft 365, Power BI and Microsoft Entra are trademarks of the Microsoft group of companies.

Train your team on AZ-700

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.