AZ-700 Exam Domains 2026: Complete Guide to All 5 Content Areas

AZ-700 Domain Overview: How the Exam Blueprint Breaks Down

The Microsoft Certified: Azure Network Engineer Associate credential is earned by passing exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions, delivered through Pearson VUE. Microsoft organizes the exam into five weighted content areas, and understanding exactly what falls inside each one is the single most useful thing you can do before you start studying. This guide breaks down every domain in the current outline, effective July 27, 2026, so you know precisely what to prioritize.

Unlike a flat list of "networking topics," Microsoft's blueprint assigns specific percentage ranges to each domain. That weighting is not decorative - it reflects how many scenario-based questions you're likely to encounter on test day. If you're still deciding whether this certification fits your career plans, our ROI analysis and salary guide are worth reading alongside this domain breakdown.

Domain 1: Design and Implement Core Networking Infrastructure (25-30%)

This is the largest domain on the AZ-700 outline, and it forms the foundation everything else builds on. If you get virtual network design wrong, the connectivity, application delivery, and security domains all become harder to reason about correctly.

Because this domain touches so many downstream decisions, many candidates spend an entire study week here before moving on. Our study guide walks through a sequencing approach that treats this domain as the anchor for everything else.

Domain 2: Design, Implement, and Manage Connectivity Services (20-25%)

The second-largest domain covers how Azure networks connect to on-premises environments, other Azure regions, and hybrid infrastructure. This is where hybrid connectivity design decisions live.

Expect scenario questions that ask you to choose between VPN and ExpressRoute, or to identify why a specific hybrid connectivity design fails to meet a stated requirement (bandwidth, redundancy, or latency). This domain rewards hands-on lab time more than memorization.

Domain 3: Design and Implement Application Delivery Services (15-20%)

This domain shifts focus from "how traffic moves" to "how traffic is distributed and delivered" at the application layer.

A recurring exam pattern in this domain is presenting a business requirement - global reach, SSL offload, path-based routing - and asking which service satisfies it. Knowing the decision criteria between these four services matters more than memorizing every configuration option.

Domain 4: Design and Implement Private Access to Azure Services (10-15%)

The smallest domain by weight, but it's frequently underestimated because private access concepts (Private Link, Private Endpoints, service endpoints) are conceptually dense despite the lower percentage.

Because this domain carries the lowest weight, don't let it consume disproportionate study time - but don't skip it either, since it still represents a real slice of scored questions.

Domain 5: Design and Implement Azure Network Security Services (15-20%)

The final domain covers protecting the network perimeter and internal traffic flows - a natural counterpart to the connectivity and application delivery domains covered earlier.

Security questions often overlap with earlier domains - for example, a question might combine a VNet design decision (Domain 1) with an NSG rule requirement (Domain 5) in a single scenario. Studying domains in isolation can leave gaps at these intersections.

What AZ-700 Questions Actually Look Like

The AZ-700 exam is a proctored, computer-based test delivered through Pearson VUE, with a standard appointment length of 120 minutes and an actual exam time of 100 minutes. Microsoft has not disclosed the exact scored/unscored question count or the precise mix of case studies versus interactive labs, so treat any specific number you see elsewhere with caution. What's consistent across Microsoft's Associate-level networking exams is a heavy reliance on scenario framing: you're given a business or technical requirement and asked to select, configure, or troubleshoot a solution rather than recall a definition.

You may also encounter restricted, in-exam access to Microsoft Learn documentation for certain question types, which rewards candidates who know where to look rather than those who've memorized every setting. Passing requires a scaled score of 700 out of 1000 - this is not the same as answering 70% of questions correctly, since scaled scoring weights questions differently. Our dedicated passing score breakdown explains this scoring mechanic in more depth.

Mapping Domains to a Study Timeline

Rather than studying domains in the order Microsoft lists them, sequence your prep around weight and dependency. Core networking infrastructure underpins everything else, so it comes first regardless of study method.

This sequencing avoids the common mistake of spending equal time on all five domains - a strategy that ignores the fact that Domains 1 and 2 alone can account for roughly half the exam. For a broader look at pacing and technique across the full prep cycle, see our complete AZ-700 study guide.

Who Hires for This Domain Knowledge

The five domains above map directly onto real job responsibilities rather than abstract exam trivia. Organizations running hybrid Azure environments - connecting on-premises data centers to Azure via ExpressRoute or VPN, securing PaaS traffic with Private Link, and load-balancing global applications through Front Door - need engineers who can make the same design tradeoffs the exam tests. If you're evaluating how this credential translates into job titles and hiring demand, browse our AZ-700 jobs overview for a sense of where this skill set is applied.

Because there's no formal prerequisite certification or documented experience requirement for AZ-700, candidates arrive with varying backgrounds - some from network engineering roles, others from cloud administration or infrastructure teams. Microsoft does expect familiarity with Azure compute, storage, and networking fundamentals, along with general networking concepts, before you attempt the exam. Our requirements guide covers this expected baseline in detail, and if you want a sense of how the overall exam difficulty compares to other Azure certifications, check how hard the AZ-700 exam really is.

Keeping the Domains Current After You Pass

Once earned, the AZ-700 credential is valid for 12 months. Microsoft offers a free, open-book, unproctored renewal assessment available during the six months before expiry, which extends validity another year if passed. Because the domain weightings and topic emphasis can shift between outline versions - as they did with the update effective July 27, 2026 - it's worth revisiting the current domain list each renewal cycle rather than assuming nothing changed. Bookmark the official exam dates and scheduling guide so you're not caught off guard by outline transitions near your renewal window.

Frequently Asked Questions