Designing and Implementing Microsoft Azure Networking Solutions
AZ-700 Practice Test
Start today's 10-question AZ-700 set with source-backed review, local progress, and a fresh rotation every morning.
Questions updated at Jul 18, 2026, 1:30 PM CDT
Checking Pro access...
Loading your unlocked practice tools before showing this page.
Go Pro - One Time Unlock
Unlock the full AZ-700 bank
150 verified questions
Exam Mode
Practice Mode
Detailed explanations
Weak-area review
No subscription - one-time unlock
Get the complete source-backed bank with Interview Questions, the full Study Guide, full Course Notes, detailed explanations, weak-area review, and exam-style practice.
Interview Questions
Full Study Guide
Full Course Notes
Exam Mode
Practice Mode
Guided Course
Detailed explanations
Weak-area review
No subscription
$4.99
One-time payment
See bundle and PDF options
We will confirm your site email in one quick checkout step.
Why DotCreds?
Practice with explanations that teach.
Source links for every answer
Every wrong answer explained
Guided Course included
Practice and Exam Mode
Weak-area tracking
Same verified bank across web practice
What you get with free practice
Today's 10 AZ-700 questions
Use this AZ-700 practice test to review Designing and Implementing Microsoft Azure Networking Solutions. Questions rotate daily and each answer links back to the source used to write it.
Today’s Set
10 questions
Rotates at 10:00 AM local time
Progress
0/10
Answered on this page
Accuracy
0%
Loading countdown…
150 verified questions are in the live bank. Free daily questions are selected from a rotating sample set. Unlock Pro to access the full question bank.
Preparing today’s free questions...
Ordering the final locked-bank set before showing the practice cards.
Question 1 of 10
Objective 1.7
Design and implement core networking infrastructure
A network administrator creates a user-defined route that sends subnet traffic through a network virtual appliance for inspection. Which next hop type should be configured?
For a user-defined route that sends traffic through a network virtual appliance, the next hop type is Virtual appliance. Azure supports Virtual network gateway, Virtual network, Internet, and None as UDR next hop types; Custom is not a valid option.
Concept tested:
Question 2 of 10
Objective 5.8
Design and implement Azure network security services
An organization requires a centralized solution for protecting multiple globally distributed web applications. Which Azure service provides this capability?
Unlock Every Answer Explanation
Upgrade to Pro
Want the correct-answer explanation, every distractor breakdown, and Pro-only extra features where available?
- Why the correct answer is right
- Why each wrong answer falls short
- Official source references where available
- Pro-only extra features on supported banks
- Full-bank practice, bundles, and PDF options where available
Concept tested:
Question 3 of 10
Objective 2.2
Design, implement, and manage connectivity services
A remote access solution requires a zone-redundant VPN gateway with a guaranteed throughput of at least 650 Mbps. Which VPN Gateway SKU is the most suitable choice for this scenario?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 4 of 10
Objective 5.1
Design and implement Azure network security services
A security engineer is reviewing the default network security group (NSG) rules for a newly created virtual network. Which inbound rule is guaranteed to be present?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 5 of 10
Objective 3.1
Design and implement application delivery services
What is the primary function of health probes when configuring Azure Load Balancer?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 6 of 10
Objective 4.4
Design and implement private access to Azure services
Application servers within a virtual network are intermittently unable to access Azure Storage, and network diagnostics reveal they are using public IP addresses. What configuration change is most likely to resolve this issue while maintaining secure access to the storage service?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 7 of 10
Objective 1.5
Design and implement core networking infrastructure
A network architect is designing a solution using Azure DNS Private Resolver to manage DNS resolution for several virtual networks. To maximize flexibility and accommodate future growth, what is the maximum number of outbound endpoints that can be configured per DNS forwarding ruleset?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 8 of 10
Objective 2.8
Design, implement, and manage connectivity services
A global organization is deploying Azure Virtual WAN to connect its branch offices. They require a consistent routing policy for all traffic destined for a key internal application. Which configuration is the most effective way to implement this routing intent and ensure traffic always traverses a designated Azure Firewall Manager firewall?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 9 of 10
Objective 3.6
Design and implement application delivery services
To improve the user experience of a globally distributed application, an organization seeks to leverage Microsoft's global edge network. Which Azure service facilitates this capability?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Question 10 of 10
Objective 4.2
Design and implement private access to Azure services
To enable private endpoint connectivity for an Azure Machine Learning workspace, what private DNS zone name should be configured?
Unlock the answer review
Upgrade to Pro
Get correct-answer explanations, distractor breakdowns, sources, and full-bank practice.
Concept tested:
Locked preview
You are viewing today’s free 10. Unlock 140 more questions.
Daily sample
Rotating practice
Free daily questions are selected from a rotating sample set.
Pro bank
Full access
Unlock Pro to access the full question bank, Exam Mode, Practice Mode, and random tests.
AZ-700 Pro
$4.99 one-time
Best if you only need this one certification.
50 Exam Practice Test
$1.99 one-time
A 50-question AZ-700 PDF for short review sessions. Questions come first, then the answer review and explanations later in the file.
Azure Engineer Bundle
$9.99 one-time
Azure fundamentals, administrator, architect, and network engineer practice in one unlock. Best for learners moving through Azure cloud engineer roles.
What’s includedAZ-900, AZ-104, AZ-305, AZ-700
Microsoft Access
$6.99/month
Unlock Microsoft, Azure, Power Platform, Copilot, and AI practice exams.
Why it fitsUnlock Microsoft, Azure, Power Platform, Copilot, and AI practice exams, Includes current and future Microsoft practice banks on dotCreds, Best for learners taking more than one Microsoft exam, PDF downloads sold separately where available
Secure checkout
Where should we send your unlock?
Use the same email for checkout and your dashboard on this browser.
Your selected purchase will stay attached while you confirm the checkout email.
Choose an unlock option to continue. We will confirm your site email in one quick checkout step.
Secure checkout powered by Stripe.
Source-backed questions. Not brain dumps. Checkout stays on this page and unlocks the same Pro builder on this practice page.
AZ-700 AZ-700
Build your practice session
Choose how you want to study today. DotCreds will build the session from your unlocked full bank.
150verified questions
Source-backedexplanations
UpdatedJul 18, 2026, 1:30 PM CDT
iPhonesame bank
Your exam readiness
Answer unique questions to build your mastery-based readiness score.
Mastered Questions: 0/150
Weak Questions: 0
Unseen Questions: 150
Pass plan
Set your target once.
We will keep the next study action visible before every Pro session.
Do this next: start Practice Mode with 20 questions to build your baseline.
Customize your session
Pick the size, question pool, mode, and timer before you start.
1
Question count
How many questions do you want?
2
Question set
What questions should we include?
3
Session mode
How would you like to practice?
4
Timer
Set a time limit per question.
5
Extra features
Choose which coaching cards appear after answers.
Your recent sessions
Box scores, domain breakdowns, and full answer explanations for Pro exam attempts on this browser.
Purchase options
Unlock the full AZ-700 bank.
Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.
The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.
150 verified exam-style questions
Every choice explained
Exam Mode and Practice Mode
Question sets and random tests
Readiness score and trends
Previous test box scores
You've answered 0/10 questions in today's set.
Locked: 140 more questions in the full bank.
Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.
Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.
Cheat Sheets
7-day score keeper
Answer questions today and this will become a rolling 7-day scorecard.
Optional progress sync
Keep today’s practice moving
Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily AZ-700 practice in sync across browsers.
Guest progress saves on this device automatically
Official exam resources
Use these official Microsoft resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.
Need adjacent Microsoft practice pages too? Microsoft practice hub.
Source-backed answer review
The free daily AZ-700 set includes crawlable question text, answer choices, correct answer labels, objective mapping, and source links. Only the first SEO card includes answer explanations and any extra learning features. Pro-only bank questions stay locked; this section mirrors only the 10 free daily questions already shown on this page.
Question 1 A network administrator creates a user-defined route that sends subnet traffic through a network virtual appliance for inspection. Which next hop type should be configured?
Answer choices
- A. Virtual network
- B. Internet
- C. None
- D. Virtual appliance
Correct answer
Virtual appliance
For a user-defined route that sends traffic through a network virtual appliance, the next hop type is Virtual appliance. Azure supports Virtual network gateway, Virtual network, Internet, and None as UDR next hop types; Custom is not a valid option.
Wrong-answer review
- A. Virtual network: Virtual network is used to override routing within a virtual network, not to send traffic to an appliance.
- B. Internet: Internet sends matching traffic toward the internet, not through a private inspection appliance.
- C. None: None drops matching traffic instead of forwarding it to an appliance.
Extra learning features
Why candidates miss this
Selecting 'Virtual network' as the next hop type when routing traffic through a Network Virtual Appliance (NVA) indicates a failure to recognize the specific requirements of NVA integration. NVAs require a dedicated routing path, and Azure provides the 'Virtual appliance' next hop type specifically for this purpose, ensuring traffic is directed to the NVA for inspection before being forwarded. Using 'Virtual network' would simply route traffic within the virtual network, bypassing the NVA. Likely wrong answer: Virtual network Review focus: Azure virtual network traffic routing
Question 2 An organization requires a centralized solution for protecting multiple globally distributed web applications. Which Azure service provides this capability?
Answer choices
- A. Azure Firewall
- B. Azure Web Application Firewall on Azure Front Door
- C. Network Security Groups
- D. Azure Bastion
Correct answer
Azure Web Application Firewall on Azure Front Door
Question 3 A remote access solution requires a zone-redundant VPN gateway with a guaranteed throughput of at least 650 Mbps. Which VPN Gateway SKU is the most suitable choice for this scenario?
Answer choices
- A. VpnGw1
- B. VpnGw2
- C. VpnGw3
- D. VpnGw1AZ
Correct answer
VpnGw1AZ
Question 4 A security engineer is reviewing the default network security group (NSG) rules for a newly created virtual network. Which inbound rule is guaranteed to be present?
Answer choices
- A. Allow inbound traffic from all Azure load balancers.
- B. Allow inbound traffic from all Azure virtual networks.
- C. Deny all inbound traffic from the internet.
- D. Allow inbound traffic from a specific Azure subnet.
Correct answer
Allow inbound traffic from all Azure load balancers.
Question 5 What is the primary function of health probes when configuring Azure Load Balancer?
Answer choices
- A. To encrypt traffic passing through the load balancer.
- B. To manage the scaling of virtual machines in the backend pool.
- C. To provide detailed application-layer routing information.
- D. To ensure traffic is only directed to healthy backend instances.
Correct answer
To ensure traffic is only directed to healthy backend instances.
Question 6 Application servers within a virtual network are intermittently unable to access Azure Storage, and network diagnostics reveal they are using public IP addresses. What configuration change is most likely to resolve this issue while maintaining secure access to the storage service?
Answer choices
- A. Implement Azure Firewall to filter traffic to Azure Storage.
- B. Enable service endpoints for Azure Storage on the virtual network and the relevant subnet.
- C. Configure a Network Security Group (NSG) to allow traffic from the virtual network to Azure Storage.
- D. Create a custom DNS zone to resolve Azure Storage endpoints to private IP addresses.
Correct answer
Enable service endpoints for Azure Storage on the virtual network and the relevant subnet.
Question 7 A network architect is designing a solution using Azure DNS Private Resolver to manage DNS resolution for several virtual networks. To maximize flexibility and accommodate future growth, what is the maximum number of outbound endpoints that can be configured per DNS forwarding ruleset?
Answer choices
- A. 5
- B. 1000
- C. 15
- D. 2
Correct answer
2
Question 8 A global organization is deploying Azure Virtual WAN to connect its branch offices. They require a consistent routing policy for all traffic destined for a key internal application. Which configuration is the most effective way to implement this routing intent and ensure traffic always traverses a designated Azure Firewall Manager firewall?
Answer choices
- A. Configuring a static route in the virtual hub's route table.
- B. Implementing a routing intent with a service association to the desired Azure Firewall Manager firewall.
- C. Creating a network security group (NSG) rule on the virtual hub subnet.
- D. Associating a custom route with a VPN gateway connection.
Correct answer
Implementing a routing intent with a service association to the desired Azure Firewall Manager firewall.
Question 9 To improve the user experience of a globally distributed application, an organization seeks to leverage Microsoft's global edge network. Which Azure service facilitates this capability?
Answer choices
- A. Azure Virtual Network
- B. Azure Front Door
- C. Azure ExpressRoute
- D. Azure Firewall
Correct answer
Azure Front Door
Question 10 To enable private endpoint connectivity for an Azure Machine Learning workspace, what private DNS zone name should be configured?
Answer choices
- A. privatelink.notebooks.azure.net
- B. amlworkspace
- C. api.azureml.ms
- D. instances.azureml.ms
Correct answer
privatelink.notebooks.azure.net
Where to go after the daily web set
How are AZ-700 questions generated?
dotCreds builds AZ-700 practice questions from public exam objectives and Microsoft Learn and exam-objective references. The questions are written for realistic study practice, not copied from exam dumps.
How are explanations sourced?
Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.
What score do I get?
The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.
Why use this site?
The site is the fastest way to start AZ-700 practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.
Search catalog
Find a practice exam
Flexible search understands AI-901, ai901, ai 901, 901, ai, network plus, and saa c03.