- AZ-700 validates the skills behind Designing and Implementing Microsoft Azure Networking Solutions.
- The exam runs 100 minutes inside a 120-minute proctored appointment via Pearson VUE.
- Core networking infrastructure (25-30%) and connectivity (20-25%) carry the most weight.
- Passing requires a scaled score of 700 out of 1000, not a fixed percentage correct.
What Is AZ-700 Certification?
Microsoft Certified: Azure Network Engineer Associate is the credential earned by passing exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions. It is issued by Microsoft and demonstrates that a candidate can plan, build, and secure networking infrastructure inside Microsoft Azure - everything from virtual networks and hybrid connectivity to load balancing, private access, and network security controls.
This is not a general cloud administration credential and it is not a generic "networking" certification from another vendor. The AZ-700 label is specific to Microsoft's Azure networking track, and every skill measured on the exam maps directly to Azure services: virtual networks, ExpressRoute, VPN gateways, Azure Firewall, Application Gateway, Private Link, and related components. If you have seen conflicting details about "AZ-700" elsewhere online, make sure you are reading about this exact Microsoft exam and not a similarly numbered credential from a different organization.
For a broader breakdown of the terminology itself, see AZ-700 Meaning and What Does AZ-700 Stand For?. If you want a shorter primer before diving into the details below, What Is AZ-700? covers the same ground at a higher level.
Exam Format and Registration Basics
AZ-700 is delivered as a proctored, computer-based exam through Pearson VUE, with online proctoring available where supported. The scheduled appointment is 120 minutes, but the actual exam time allotted is 100 minutes - the difference covers check-in, the non-disclosure agreement, and any post-exam survey. The exam may include interactive item types in addition to traditional multiple-choice and multiple-select questions; Microsoft has not disclosed the precise mix of case studies or lab-style items, so candidates should be prepared for a variety of formats rather than assuming a single question style throughout.
During the exam, access to Microsoft Learn documentation is restricted to specific moments rather than available throughout, so memorizing configuration syntax and service limits ahead of time matters more than knowing where to look things up. The exact total number of questions and how many are scored versus unscored is not publicly disclosed by Microsoft. General Microsoft Associate-level exams often fall somewhere in a broad range, but no specific count is guaranteed for AZ-700, so pacing yourself by the 100-minute clock is more reliable than counting questions.
Pricing follows Microsoft's generic Associate-level exam structure, with a typical baseline around US$165 for standard registrations; the exact current checkout total for AZ-700 in your country, along with any applicable taxes, is best confirmed directly at registration since it is not independently verified here. For a full pricing breakdown, see AZ-700 Certification Cost 2026: Complete Pricing Breakdown.
Passing requires a scaled score of 700 out of 1000. This is not the same as answering 70% of questions correctly - different questions can carry different weight, and Microsoft does not publish the exact conversion formula. If you want a deeper explanation of how scaled scoring works, read AZ-700 Passing Score 2026: Exactly What You Need to Pass. Microsoft also does not publish an official pass rate for AZ-700; any specific percentage you see elsewhere should be treated skeptically unless it cites a verifiable source - our own analysis of what public data does exist is in AZ-700 Pass Rate 2026: What the Data Shows.
Key Takeaway
Treat the 100-minute clock, not question count, as your primary pacing reference - Microsoft has not disclosed exactly how many questions appear or how many are scored.
The Five AZ-700 Domains Explained
AZ-700's content outline is organized into five domains, each with a published weight range. The current English-language outline took effect July 27, 2026, with the credential page itself updated July 29. Domain weighting determines roughly how much of your exam is likely to draw from each area, which makes it the single most useful planning tool you have.
Domain 1: Design and implement core networking infrastructure (25-30%)
This is the largest domain and the foundation for everything else on the exam. It centers on virtual network design, IP addressing, routing, and the building blocks that every other Azure networking service depends on.
- Virtual network peering, subnetting, and route tables
- Name resolution with Azure DNS and Azure Private DNS zones
- Network Security Groups and Azure Firewall placement within a topology
Domain 2: Design, implement, and manage connectivity services (20-25%)
The second-largest domain covers how Azure networks connect to on-premises environments and to each other across regions.
- Site-to-site, point-to-site, and ExpressRoute connectivity models
- Virtual WAN hub-and-spoke architectures
- Gateway transit, BGP routing, and connection troubleshooting
Domain 3: Design and implement application delivery services (15-20%)
This domain focuses on distributing and optimizing traffic to applications.
- Azure Load Balancer versus Application Gateway use cases
- Azure Front Door and Traffic Manager for global routing
- Web Application Firewall policy configuration
Domain 4: Design and implement private access to Azure services (10-15%)
The smallest domain, but frequently tested through scenario-based questions about restricting public exposure of PaaS resources.
- Private Endpoints versus Service Endpoints
- Private Link service configuration for custom services
- Integrating private access with existing virtual network designs
Domain 5: Design and implement Azure network security services (15-20%)
This domain ties security controls across the networking stack together.
- Azure Firewall and Firewall Manager policies
- DDoS Protection configuration decisions
- Network security monitoring and diagnostic logging
Because Domains 1 and 2 together account for roughly half the exam, most successful candidates spend disproportionate study time there. For a domain-by-domain study breakdown with more granular subtopics, see AZ-700 Exam Domains 2026: Complete Guide to All 5 Content Areas.
Who Hires AZ-700 Holders
The Azure Network Engineer Associate credential is aimed at professionals who design and maintain networking infrastructure for organizations running workloads in Azure. In practice, this includes cloud network engineers, infrastructure engineers who have moved from on-premises networking into Azure, and hybrid cloud architects responsible for connecting corporate networks to Azure via ExpressRoute or VPN.
Employers hiring for these roles typically look for candidates who can already speak the language of subnets, routing, firewalls, and load balancers, and who are extending that knowledge specifically to Azure's implementation of those concepts. Because the certification is tightly scoped to networking rather than general Azure administration, it tends to appeal to specialists rather than generalists. If you're evaluating whether this specialization fits your career path, AZ-700 Jobs looks at the kinds of roles that reference this credential, and Is the AZ-700 Certification Worth It? Complete ROI Analysis 2026 weighs the investment against the potential career benefit.
Concrete Topics You Must Master
Beyond the domain outline, certain topics show up repeatedly across the AZ-700 blueprint because they connect multiple domains at once. Candidates should be comfortable not just defining these services but choosing between them in a given scenario:
- Hub-and-spoke vs. Virtual WAN topologies - knowing when a traditional hub-and-spoke design is sufficient versus when Virtual WAN's managed hub model is the better architectural fit.
- ExpressRoute circuit sizing and failover - understanding peering types, circuit SKUs, and how to design redundancy with a VPN as backup.
- Load Balancer vs. Application Gateway vs. Front Door vs. Traffic Manager - these four services are frequently confused, and the exam tests your ability to pick the right one based on OSI layer, global vs. regional scope, and required features like WAF.
- Private Endpoint vs. Service Endpoint - a classic Domain 4 distinction that also affects how you architect DNS resolution and security boundaries.
- NSG vs. Azure Firewall vs. Firewall Manager policy layering - how these security tools interact rather than compete, and where each is best applied.
Because the exam heavily favors "choose the right service for this situation" questions over simple recall, spend time building comparison charts of your own for services that overlap in function.
| Domain | Weight | Primary Focus |
|---|---|---|
| Core networking infrastructure | 25-30% | VNets, routing, DNS, NSGs |
| Connectivity services | 20-25% | VPN, ExpressRoute, Virtual WAN |
| Application delivery services | 15-20% | Load Balancer, App Gateway, Front Door |
| Network security services | 15-20% | Firewall, Firewall Manager, DDoS Protection |
| Private access to Azure services | 10-15% | Private Link, Private Endpoints |
Mapping a Study Timeline to the Domains
Because Domain 1 and Domain 2 together make up nearly half the exam, a sensible prep sequence front-loads those areas before moving into the lighter-weighted domains. A structured multi-week plan also gives you room to revisit weak areas before your Pearson VUE appointment.
Core Networking Infrastructure
- Build and peer virtual networks in a test tenant
- Configure route tables and NSGs from scratch
- Set up Azure DNS and Private DNS zones
Connectivity Services
- Configure a site-to-site VPN gateway
- Review ExpressRoute peering types and SKUs
- Build a Virtual WAN hub-and-spoke lab
Application Delivery and Private Access
- Compare Load Balancer, App Gateway, and Front Door configurations
- Deploy a Private Endpoint against a PaaS service
- Practice WAF policy rules
Security Services and Full Review
- Configure Azure Firewall and Firewall Manager policies
- Review DDoS Protection tiers
- Take full-length timed practice exams
This sequencing is just one approach; for a more detailed week-by-week methodology, including how to allocate review days, see AZ-700 Study Guide 2026: How to Pass on Your First Attempt. If you're still deciding how challenging this exam will feel relative to your background, How Hard Is the AZ-700 Exam? Complete Difficulty Guide 2026 breaks down the difficulty factors in more depth, and AZ-700 Requirements 2026: Eligibility, Prerequisites & How to Qualify clarifies that there is no mandatory prerequisite certification, though prior Azure and networking fundamentals experience is expected.
Key Takeaway
No formal prerequisite exists for AZ-700, but candidates without hands-on Azure networking experience should budget extra lab time before attempting scenario-based questions.
Validity and Renewal
The Azure Network Engineer Associate credential is valid for 12 months from the date you pass. Microsoft offers a free renewal assessment that becomes available during the six months before expiry. It is open-book and unproctored, and passing it extends your certification validity by one year without requiring you to retake the full proctored AZ-700 exam. There is no continuing-education credit quota to track separately - the renewal assessment itself is the mechanism.
This renewal structure means the certification is not a one-time credential you earn and forget; staying current requires periodically re-engaging with the material, which also helps keep your practical skills aligned with ongoing changes to Azure networking services. If you're mapping out testing windows around your schedule, AZ-700 Exam Dates 2026: Testing Windows, Deadlines & Scheduling covers how Pearson VUE scheduling works for this exam.
Before your appointment, a quick final review pass against a condensed reference can help lock in details you might otherwise second-guess. Our AZ-700 Cheat Sheet 2026: One-Page Review of Must-Know Facts is built for exactly that last-mile review, and structured practice on our practice exam platform can reveal which domains still need attention before you commit to a test date.
Frequently Asked Questions
It is the Microsoft Certified: Azure Network Engineer Associate credential, earned by passing exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions. It validates skills in designing and implementing Azure virtual networks, hybrid connectivity, application delivery, private access, and network security.
The exam itself allots 100 minutes, though the total scheduled appointment through Pearson VUE runs 120 minutes to account for check-in and administrative steps.
You need a scaled score of 700 out of 1000. This scaled score does not directly translate to a fixed percentage of questions answered correctly, since Microsoft weights questions differently.
No formal prerequisite certification, degree, or documented training-hour requirement is listed. Microsoft does expect candidates to already have experience with Azure compute, storage, and networking, along with general networking fundamentals.
It is valid for 12 months. You can extend it another year by completing a free, open-book, unproctored renewal assessment available during the six months before your certification expires.