AZ-700 · Objectives effective 2026-07-27
AZ-700: Network specialty
A specialty lens for Azure network engineers. The site helps concepts but lacks many specialty networking labs.
25–30% · Exam weight
Design and implement core networking infrastructure
Mapped intro lessons
- VNet segmentation: subnets, routes, and minimal exposure
- Private Link and DNS: private access is more than one endpoint
Known gaps / todo coverage
Full hub-spoke, route table, DNS Resolver, and IPAM implementation is missing.
20–25% · Exam weight
Design, implement, and manage connectivity services
Mapped intro lessons
Known gaps / todo coverage
Site-to-site/point-to-site VPN, ExpressRoute, and Virtual WAN have no end-to-end labs.
15–20% · Exam weight
Design and implement application delivery services
Mapped intro lessons
Known gaps / todo coverage
Load Balancer, Traffic Manager, Application Gateway, and Front Door configuration paths are incomplete.
10–15% · Exam weight
Design and implement private access to Azure services
Mapped intro lessons
Known gaps / todo coverage
Private Link service, private endpoint DNS, service endpoints, and policies need further cases.
15–20% · Exam weight
Design and implement Azure network security services
Mapped intro lessons
Known gaps / todo coverage
Firewall, DDoS, network/application security groups, Web Application Firewall, and TLS ingress are not fully covered.
Architecture decision questions
- Does private access address DNS, authorization, and egress together?
- WAF at the edge means Web Application Firewall, not Well-Architected Framework.