Study guide · Exam overview
The format, passing score, and five content domains of Microsoft Certified: Azure Network Engineer Associate, updated for skills measured as of July 27, 2026.
Exam version notice: This overview follows the Microsoft study guide for Exam AZ-700 — Designing and Implementing Microsoft Azure Networking Solutions, skills measured as of July 27, 2026. The exam code remains AZ-700. The certification page gives you 100 minutes and requires a score of 700 or greater. Pricing, languages, and delivery options can change. Confirm them on the Microsoft certification site before you register. Items tagged Extra are useful context that the study guide does not name as a measured skill. Shared cloud vocabulary is on the AZ-900 overview; day-to-day Azure operations are on the AZ-104 overview.
Microsoft Certified: Azure Network Engineer Associate checks whether you can plan, implement, and manage Azure networking solutions: virtual networks and DNS, hybrid connectivity, application delivery, private access to PaaS, and network security. The work is hands-on: peer VNets, place a private endpoint, size an ExpressRoute gateway, put Front Door in front of an origin, and prove a flow with Network Watcher. It is a role-based exam. You are not asked only to define a networking slogan.
Microsoft describes the candidate as a network engineer who optimizes performance, resiliency, scale, and security, monitors for issues, and works with architects, administrators, security engineers, developers, and DevOps. Expected background is creating and managing compute, storage, and networking in Azure, plus networking fundamentals such as name resolution, protocols, and address management. AZ-900 and AZ-104 help. Neither is a required prerequisite.
Figures below come from the AZ-700 certification page and the study guide reviewed in October 2026.
| Specification | AZ-700 |
|---|---|
| Level | Intermediate, role-based. Microsoft calls the credential Azure Network Engineer Associate. No prerequisite certification is required. |
| Length of test | 100 minutes to complete the assessment. The exam is proctored and may include interactive components. |
| Number of questions | Microsoft does not publish a fixed count on the certification page. Do not treat a practice length as the live exam length. |
| Passing score | 700 or greater on a scale of 1 to 1,000. A scaled score is not the percentage of questions you answered correctly. |
| Recommended experience | Creating and managing compute, storage, and networking in Azure; networking fundamentals including name resolution, protocols, and address management. |
| Exam price | Price depends on the country or region where the exam is proctored. Confirm the current fee when you schedule. |
| Validity | Associate certifications expire after 12 months. Renew at no cost with an online assessment on Microsoft Learn during the renewal window. |
| Delivery | Schedule through Pearson VUE. English is updated first. Other languages follow later. |
A blank answer earns no credit. Microsoft exams do not subtract extra points for a wrong answer, so answer every question. If the exam is not offered in your preferred language, you can request an additional 30 minutes. Request accommodations before you sit if you need them. After a failed attempt you can retake the exam 24 hours later. Later retakes wait longer. Confirm the current retake policy with Microsoft.
These ranges are the share of scored content in the study guide as of July 27, 2026. The 200 practice questions use shares inside those ranges that add to 100 percent: 28%, 22%, 18%, 12%, and 20%.
The heaviest domain. Address space, names, routes, and proof the path works.
How sites and hubs attach to Azure.
Where the client lands and how traffic is steered.
Keep PaaS on a private IP when the stem requires it.
Filter at the right layer and prove the rule.
The study guide names configuration tasks more often than product slogans. Learn the paired choices first. The same map is in the core notes and flashcards.
| Need | Choose | Remember |
|---|---|---|
| Private IP for PaaS on your VNet | Private endpoint | A service endpoint still uses the service public address while identifying your VNet. |
| Centralized FQDN filtering in a hub | Azure Firewall | An NSG alone does not match FQDNs the way Firewall application rules can. |
| HTTP path and host routing with WAF | Application Gateway or Front Door | Azure Load Balancer is layer 4. Front Door is global; Application Gateway is regional. |
| Dedicated private circuit to Azure | ExpressRoute | Privacy of the circuit is not encryption. Add encryption when the stem requires it. |
| DNS for Private Link names | Private DNS zones linked to the VNet | Creating the endpoint alone does not guarantee correct name resolution from every client. |
| Outbound SNAT at scale from a subnet | NAT Gateway | A public IP on every NIC is the distractor when the stem wants shared outbound. |
| Many VNets under one connectivity policy | Azure Virtual Network Manager | Manual peering still works for a pair; VNet Manager scales connectivity and security admin rules. |
| Global HTTP edge with Private Link to origin | Azure Front Door Premium | Use Private Link for a supported origin and approve the endpoint connection. The client-facing Front Door endpoint remains public. |
| Extra Full Zero Trust architecture paper | Design principles | Useful context. AZ-700 measures implementing the named networking controls, not writing a strategy deck. |
Microsoft says the exam may include interactive components and points you to an exam sandbox so you can try the interface before you sit. This site's bank contains 200 original single-answer multiple-choice questions with four options each. It does not reproduce the live exam's item mix, interactive tasks, or scoring. Use the official sandbox to explore the exam interface.
A typical stem gives a constraint and asks for the first or best action. The storage account must not be reachable from the public internet. Spoke traffic must hairpin through the hub firewall. Clients worldwide need TLS termination at the edge. Distractors are nearby features that solve a different problem. A private endpoint is not a service endpoint. ExpressRoute is not a Site-to-Site VPN. Front Door is not a regional Application Gateway.
There is no published extra penalty for a wrong guess. A blank answer earns nothing. On a timed practice exam, answer every item, then use the review to see which domain actually needs work.
A practical sequence if AZ-104 habits still skip ExpressRoute and Front Door.
Use the five guided labs to connect these objectives with observable results. For each domain, explain one working design and one failure case. Keep a short error log: what the question required, the clue you missed, why your answer failed, and the test that would separate it from the correct answer.
Before a mixed practice session, check that you can calculate usable subnet space; follow a DNS query from on-premises to a private endpoint; compare a default UDR with a more-specific route; distinguish ExpressRoute privacy from encryption; and separate a failed health probe from a client-side access problem. For security, explain NSG state, Azure Virtual Network Manager rule actions, Firewall rule-type order, and WAF false-positive tuning.
Review all five objective areas even when one has a smaller percentage range. A short practice set cannot sample every subtopic. Correct answers after several repetitions can reflect memory of the options rather than transferable understanding. Change the scenario in your own words—for example, replace an Azure client with an on-premises client—and explain which dependencies change.
The official passing score of 700 is a scaled score, not a claim that 70% on this site predicts a pass. This site's score is the percentage of selected questions answered correctly. Use it to locate topics to revisit, then check the current Microsoft guide and official practice assessment before deciding when to schedule.
A score of 700 or greater is required to pass. Microsoft reports scores on a scale of 1 to 1,000. A scaled score is not the percentage of questions you answered correctly.
Microsoft gives you 100 minutes to complete the assessment. The exam is proctored and may include interactive components. Microsoft does not publish a fixed question count on the certification page.
As of July 27, 2026 the study guide measures five areas: core networking infrastructure (25–30%); connectivity services (20–25%); application delivery services (15–20%); private access to Azure services (10–15%); and Azure network security services (15–20%).
No. AZ-700 remains the exam for Microsoft Certified: Azure Network Engineer Associate. The skills measured were updated as of July 27, 2026; the exam code did not change.
Yes. Microsoft associate certifications expire after 12 months unless you renew them. You can renew at no cost by passing an online assessment on Microsoft Learn. Confirm the current policy before you rely on it.
No. The practice questions on this site are original. They are not Microsoft exam items, and a practice score does not predict a result.
Exam versions, objectives, prices, languages, and retirement dates can change. Verify the details on the Microsoft Learn certification page before you register. The AZ-700 study guide lists the skills measured as of July 27, 2026.
Read the notes, then practice under a timer.
Exam format, the 700 passing score, domain weights, and a study plan.
Reference notes for VNets, hybrid connectivity, delivery, Private Link, and network security.
50 recall cards in five decks, plus memory notes for hybrid paths and private access.
200 original questions with custom exams, explanations, and a score report by domain.
Certicab provides general informational, educational, and convenience resources. Calculations, conversions, estimates, and learning materials may contain errors or become outdated. Financial, tax, medical, legal, and travel information is not professional advice. Verify important results and current requirements with qualified professionals or authoritative sources. Protect sensitive files and personal information, review each tool’s privacy limitations, and use only content you are authorized to process. You are responsible for how you use and share results. Study resources are independent and do not guarantee exam success or imply certification-provider endorsement. Microsoft, Azure, and related marks are trademarks of Microsoft Corporation. Certicab is not affiliated with, endorsed by, or sponsored by Microsoft.
Certi