- What AZ-700 Actually Tests
- Exam Logistics at a Glance
- Domain Breakdown Cheat Sheet
- Domain 1: Core Networking Infrastructure
- Domain 2: Connectivity Services
- Domain 3: Application Delivery Services
- Domain 4: Private Access to Azure Services
- Domain 5: Network Security Services
- One-Week Crunch Schedule
- Exam Day Checklist
- Renewal and Validity Rules
- FAQ
- AZ-700 covers five domains; core networking infrastructure and connectivity services together make up 45-55% of the exam.
- Passing requires a scaled score of 700 out of 1000, not a fixed percentage of questions correct.
- The exam runs 100 minutes inside a 120-minute proctored appointment via Pearson VUE.
- The credential is valid 12 months, but a free renewal assessment in the final six months extends it another year.
What AZ-700 Actually Tests
Microsoft Certified: Azure Network Engineer Associate is earned by passing exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions. It's a Microsoft credential, delivered through Pearson VUE, aimed at engineers who design, implement, and maintain networking infrastructure inside Azure. If you want the full context before diving into this cheat sheet, the What Is AZ-700? overview and the AZ-700 Certification page both walk through the credential's scope in more depth.
This page is meant to be your one-stop reference in the final stretch before test day - a condensed version of everything covered in the full AZ-700 Study Guide 2026, distilled into scannable facts, domain callouts, and a last-mile checklist.
Exam Logistics at a Glance
Before you memorize a single VNet peering rule, lock in the mechanics of the exam itself. These are the facts that trip up candidates who prepared the content but not the format.
| Item | Detail |
|---|---|
| Certifying body | Microsoft Corporation |
| Exam code | AZ-700 |
| Delivery | Pearson VUE, proctored, computer-based, possible interactive item types |
| Exam time | 100 minutes |
| Total appointment | 120 minutes (includes check-in and instructions) |
| Passing score | 700 on a 1000-point scale |
| Question count | Not officially disclosed; general Microsoft associate exams often fall in a 40-60 range, but this is not guaranteed for AZ-700 |
| Validity | 12 months from pass date |
| Renewal | Free, open-book, unproctored assessment in the six months before expiry |
Note that the exact scored/unscored item split isn't published, and the standard baseline Associate-level fee (around US$165 for many Microsoft Associate exams) may not reflect your current localized AZ-700 checkout total - always confirm the live price before scheduling. For a deeper breakdown of what you'll actually pay, see the AZ-700 Certification Cost 2026 guide, and for the scoring mechanics specifically, check AZ-700 Passing Score 2026.
Domain Breakdown Cheat Sheet
AZ-700 is organized into five domains with published weight ranges. Two domains dominate the exam, so your prep time should mirror that imbalance. For the full explanation of each domain's subtopics, see the AZ-700 Exam Domains 2026 guide - the quick-reference version is below.
| Domain | Weight |
|---|---|
| 1. Design and implement core networking infrastructure | 25-30% |
| 2. Design, implement, and manage connectivity services | 20-25% |
| 3. Design and implement application delivery services | 15-20% |
| 4. Design and implement private access to Azure services | 10-15% |
| 5. Design and implement Azure network security services | 15-20% |
Domain 1: Core Networking Infrastructure
Core Networking Infrastructure (25-30%)
This is the largest domain and the backbone of the exam. Expect scenario questions on virtual network design, IP addressing, and routing decisions.
- Virtual network (VNet) planning: address space, subnetting, and peering configurations
- Route tables and user-defined routes (UDRs), including how they interact with system routes
- Azure DNS: public zones, private zones, and custom DNS server scenarios
- IPv6 dual-stack considerations for VNets and NICs
Because this domain carries the most weight, most first-time failures trace back to gaps here. If you're unsure whether your current knowledge is exam-ready, the How Hard Is the AZ-700 Exam? guide breaks down where candidates typically underestimate the difficulty of this domain specifically.
Domain 2: Connectivity Services
Connectivity Services (20-25%)
This domain tests hybrid and cross-network connectivity - the "how do two networks talk to each other" portion of the exam.
- Site-to-site, point-to-site, and VNet-to-VNet VPN gateway configurations
- ExpressRoute circuits, peerings, and connection resiliency patterns
- VNet peering versus VPN gateway tradeoffs for hub-and-spoke topologies
- Azure Virtual WAN design for global connectivity scenarios
Core networking and connectivity together account for close to half the exam, so pairing your review of these two domains is the single highest-leverage move you can make in the final weeks.
Domain 3: Application Delivery Services
Application Delivery Services (15-20%)
This domain shifts from "getting traffic across networks" to "getting traffic to the right application instance."
- Azure Load Balancer: public vs. internal, SKU differences, health probes
- Azure Application Gateway: listeners, backend pools, and WAF integration
- Azure Front Door and Traffic Manager routing methods (priority, weighted, geographic, performance)
- Choosing between these services based on OSI layer and global vs. regional scope
Domain 4: Private Access to Azure Services
Private Access to Azure Services (10-15%)
The smallest domain by weight, but conceptually dense - expect questions on keeping traffic off the public internet.
- Private Endpoints vs. Service Endpoints: when to use each
- Private Link service configuration for custom services
- Network integration for Azure PaaS services (App Service, Storage, SQL)
- DNS resolution nuances when private endpoints are involved
Domain 5: Network Security Services
Network Security Services (15-20%)
This domain closes out the exam with defense-in-depth scenarios across network layers.
- Network Security Groups (NSGs) and Application Security Groups (ASGs)
- Azure Firewall: rules, policies, and forced tunneling
- Web Application Firewall (WAF) policies on Application Gateway and Front Door
- DDoS Protection tiers and when standard protection isn't sufficient
Key Takeaway
Don't study domains in isolation - many scenario questions blend connectivity design with security controls (e.g., a hub-and-spoke topology that also requires Azure Firewall policies). Practice questions that combine domains, not just single-topic recall.
One-Week Crunch Schedule
If your exam is close and you need a condensed review rather than a full study plan, use this sequencing. It prioritizes domain weight and known difficulty spikes rather than a generic day-by-day template.
Core Networking + Connectivity
- Re-drill VNet peering, UDRs, and DNS zone types
- Rebuild a hub-and-spoke topology from memory, including gateway and ExpressRoute choices
Application Delivery + Private Access
- Compare Load Balancer, Application Gateway, and Front Door side by side
- Map out Private Endpoint vs. Service Endpoint decision criteria
Network Security + Mixed Scenarios
- Review NSG/ASG rule precedence and Azure Firewall policy structure
- Run full-length practice tests that mix domains
Light Review Only
- Skim weak-area notes, avoid new material
- Confirm Pearson VUE appointment details and required ID
For a longer runway with more structure, the AZ-700 Study Guide 2026 lays out a multi-week plan; this crunch version is meant for candidates who are already deep into prep and just need a final-week map.
Exam Day Checklist
- Confirm your Pearson VUE testing method (test center or online proctoring, where supported) at least 24 hours ahead
- Arrive or log in early - the 120-minute appointment window includes check-in, not just exam time
- Remember the exam itself is 100 minutes; pace yourself against the heavier domains (core networking, connectivity) early
- Do not expect open Microsoft Learn access - restricted, in-exam reference material means you must know configuration syntax and defaults from memory
- Read scenario questions twice; AZ-700 favors "design the right solution for this constraint" over pure definition recall
Renewal and Validity Rules
The Microsoft Certified: Azure Network Engineer Associate credential is valid for 12 months from your pass date. In the six months before it expires, Microsoft offers a free renewal assessment - open-book and unproctored - that extends validity another year if you pass it. There's no continuing-education credit quota to track, which simplifies long-term maintenance compared to credentials that require ongoing point accumulation.
If you're weighing whether the investment of time and the checkout fee are worth it given this renewal cycle, the Is the AZ-700 Certification Worth It? analysis and the AZ-700 Salary Guide 2026 both dig into the return side of the equation. And if you're not yet sure the exam fits your current experience level, check AZ-700 Requirements 2026 - there's no mandatory prerequisite certification or documented experience quota, though Azure compute, storage, and networking familiarity is expected going in.
Key Takeaway
Set a calendar reminder five to six months before your certification expires - that's your window to take the free renewal assessment instead of re-registering for the full proctored exam.
Who This Cheat Sheet Is For
This condensed reference is built for candidates who've already done the heavy lifting - labs, documentation reading, maybe a first practice exam - and now need a tight recall tool. It's also useful for network engineers, cloud infrastructure administrators, and hybrid connectivity specialists who are evaluating whether AZ-700's scope matches roles they're targeting; the AZ-700 Jobs page outlines the kinds of positions that reference this credential. If you want more practice scenarios modeled on the domain weights above, the question bank at our AZ-700 practice test platform is built specifically around these five domains.
Still unclear on terminology or scope? Start with AZ-700 Meaning or What Does AZ-700 Stand For? before returning to this cheat sheet - those pages clarify exactly what the credential covers so you're not cross-referencing the wrong material while studying.
FAQ
The exam itself is 100 minutes, but the total Pearson VUE appointment is scheduled for 120 minutes to account for check-in and instructions.
You need a scaled score of 700 out of 1000. This is not the same as answering 70% of questions correctly, since scaling and question weighting are not fully disclosed.
Core networking infrastructure, at 25-30% of the exam, is the single largest domain, followed by connectivity services at 20-25%. Together they make up close to half the exam content.
Only restricted, in-exam access to Microsoft Learn is provided, and the precise scope of that access isn't fully detailed. Treat the exam as closed-book for practical purposes.
Yes, it's valid for 12 months. A free, unproctored, open-book renewal assessment available in the six months before expiry extends validity for another year.