AZ-700 Skills Measured: Azure Networking Breakdown

Core networking infrastructure covers virtual networks, subnets, IP addressing, public IPs, DNS, virtual network peering, route tables, network virtual appliances, Azure Route Server, and monitoring. Candidates should understand how Azure routes traffic and how to verify effective routes and connectivity.

Connectivity services cover site-to-site VPN, point-to-site VPN, VPN Gateway SKUs, active-active gateway designs, ExpressRoute, ExpressRoute FastPath, ExpressRoute Global Reach, Virtual WAN, and routing between Azure and on-premises networks. The key distinction is which service meets security, reliability, bandwidth, and routing requirements.

Application delivery includes Azure Load Balancer, Application Gateway, Web Application Firewall, Azure Front Door, Traffic Manager, health probes, backend pools, routing methods, TLS, and global versus regional delivery. The exam often tests whether traffic is Layer 4, Layer 7, DNS-based, or edge-accelerated.

Network security and private access include NSGs, application security groups, Azure Firewall, firewall policy, DDoS Protection, WAF, Private Link, Private Endpoints, service endpoints, Private DNS, and secure access to Azure PaaS services. Study how each control changes visibility, routing, and exposure.

Monitoring topics include Network Watcher, Connection Monitor, flow logs, packet capture, diagnostics, metrics, alerts, and log review. Replace sample-question placeholders with real troubleshooting skills: trace traffic, verify DNS, inspect routes, check security rules, and confirm health probes.