I just toke my AZ-700 Designing and Implementing Microsoft Azure Networking Solutions exam (available since the 21th of july 21 in beta) and it is time now to share my preparation notes for those who are interested to pass this exam and get certified.

This article is just one another preparation guide to Microsoft exam AZ-700 but I hope it will be useful. You will find here : 5 Powerpoint presentations (around 500 slides), a lot of URL with content to read and understand and links to practice with hands on labs.

Even you don’t plan to take the exam, all this content is really interesting to read and understand if you want to discover and improve your knowledge on networking on Azure.

Before starting studying, you must know very well what this certification is about and what are the prerequisites.

The topics included in this exam are the following:

• Design, Implement, and Manage Hybrid Networking (10% to 15%)
• Design and Implement Core Networking Infrastructure (20% to 25%)
• Design and Implement Routing (25% to 30%)
• Secure and Monitor Networks (15% to 20%)
• Design and Implement Private Access to Azure Services (10% to 15%)

More details : https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4PaHw

If you want to check your knowledge before starting your study, you can explore my Azure Networking Mindmap to verify if you need to spend more time on specific subjects (click on image to display a full screen SVG file more readable)

Design, Implement, and Manage Hybrid Networking (10% to 15%)

Design, implement, and manage a site-to-site VPN connection

Highly Available cross-premises and VNet-to-VNet connectivity
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

Azure VN Gateway SKU
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways#gwsku

About cryptographic requirements and Azure VPN gateways
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto

About VPN devices and IPsec/IKE parameters for Site-to-Site VPN Gateway connections
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices

https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

Troubleshooting: An Azure site-to-site VPN connection cannot connect and stops working
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connect

Design, implement, and manage a point-to-site VPN connection

About Point-to-Site VPN
https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about

Configure a Point-to-Site VPN connection using Azure certificate authentication
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

Create an Azure Active Directory tenant for P2S OpenVPN protocol connections
https://docs.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant

Azure VPN Client
https://www.microsoft.com/en-us/p/azure-vpn-client/9np355qt2sqb?activetab=pivot:overviewtab

Design, implement, and manage Azure ExpressRoute

What is Azure ExpressRoute?
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction

ExpressRoute connectivity partners and peering locations
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-locations

About ExpressRoute Direct
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-erdirect-about

How to configure ExpressRoute Direct
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-erdirect

ExpressRoute Premium
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-faqs#expressroute-premium

ExpressRoute FastPath
https://docs.microsoft.com/en-us/azure/expressroute/about-fastpath

ExpressRoute circuits and peering
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings

Microsoft peering
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-portal-resource-manager#to-create-microsoft-peering

What is an Autonomous System Number (ASN)?
https://blog.stackpath.com/autonomous-system-number/

Azure Private peering
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-portal-resource-manager#private

Configure a virtual network gateway for ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-gateway-portal-resource-manager

Connect a virtual network to an ExpressRoute circuit
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-portal-resource-manager

ExpressRoute encryption
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption

Configure MACsec on ExpressRoute Direct ports
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-macsec

Configure BFD over ExpressRoute
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-bfd

Troubleshooting network performance
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-troubleshooting-network-performance

Design and Implement Core Networking Infrastructure (20% to 25%)

Design and implement private IP addressing for Vnets

What is Azure Virtual Network?
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

Quickstart: Create a virtual network using PowerShell
https://docs.microsoft.com/en-us/azure/virtual-network/quick-create-powershell

What is Azure Firewall?
https://docs.microsoft.com/en-us/azure/firewall/overview

Deploy and configure Azure Firewall using Azure CLI
https://docs.microsoft.com/en-us/azure/firewall/deploy-cli

What is subnet delegation?
https://docs.microsoft.com/en-us/azure/virtual-network/subnet-delegation-overview

Design and implement name resolution

Overview of DNS zones and records
https://docs.microsoft.com/en-us/azure/dns/dns-zones-records

Buy a custom domain name for Azure App Service
https://docs.microsoft.com/en-us/azure/app-service/manage-custom-dns-buy-domain

Azure DNS FAQ
https://docs.microsoft.com/en-us/azure/dns/dns-faq

Azure Private DNS zone
https://docs.microsoft.com/en-us/azure/dns/private-dns-privatednszone

Create Private DNS Zone
https://docs.microsoft.com/en-us/azure/dns/private-dns-getstarted-cli

Design and implement cross-VNet connectivity design public DNS zones

Virtual network peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

Create, change, or delete a virtual network peering
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

VNet peering requirement and constraint
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints

Design and implement an Azure Virtual WAN architecture

What is Azure Virtual WAN?
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

Migrate to Azure Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/migrate-from-hub-spoke-topology

Global transit network architecture and Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-global-transit-network-architecture

Connect a VPN Gateway (virtual network gateway) to Virtual WAN
https://docs.microsoft.com/en-us/azure/virtual-wan/connect-virtual-network-gateway-vwan

About virtual hub routing
https://docs.microsoft.com/en-us/azure/virtual-wan/about-virtual-hub-routing
https://docs.microsoft.com/en-us/azure/virtual-wan/how-to-virtual-hub-routing

Design and Implement Routing (25% to 30%)

Design, implement, and manage VNet routing design a site-to-site VPN connection for high availability

Virtual network traffic routing
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

Reserved Ip Adresses
https://en.wikipedia.org/wiki/Reserved_IP_addresses

IANA-Reserved IPv4 Prefix for Shared Address Space
https://datatracker.ietf.org/doc/html/rfc6598

Routing example (to check if you understand everything)
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview#routing-example

Create, change, or delete a route table
https://docs.microsoft.com/en-us/azure/virtual-network/manage-route-table

az network vnet subnet
https://docs.microsoft.com/en-us/cli/azure/network/vnet/subnet?view=azure-cli-latest

Diagnose a virtual machine routing problem
https://docs.microsoft.com/en-us/azure/virtual-network/diagnose-network-routing-problem

Design and implement an Azure Load Balancer choose between public and internal

What is Azure Load Balancer?
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

Azure Load Balancer SKUs
https://docs.microsoft.com/en-us/azure/load-balancer/skus

Build cross region solution on existing Azure Load Balancer
https://docs.microsoft.com/en-us/azure/load-balancer/cross-region-overview#build-cross-region-solution-on-existing-azure-load-balancer

Load balancing rule
https://docs.microsoft.com/en-us/azure/load-balancer/components#load-balancing-rules

Inbound NAT Rules
https://docs.microsoft.com/en-us/azure/load-balancer/components#inbound-nat-rules

Outbound rules
https://docs.microsoft.com/en-us/azure/load-balancer/components#outbound-rules

Design and implement Azure Application Gateway

Application Gateway FAQ
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

Feature comparison between v1 SKU and v2 SKU
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant#differences-from-v1-sku

Scaling Application Gateway and WAF v2
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant#scaling-application-gateway-and-waf-v2

Autoscaling and Zone-redundant Application Gateway v2
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant

Application Gateway components
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-components

Rewrite HTTP headers and URL with Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url

Application Gateway HTTP settings configuration
https://docs.microsoft.com/en-us/azure/application-gateway/configuration-http-settings

Overview of TLS termination and end to end TLS with Application Gateway
https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview

Implement Azure Front Door

What is Azure Front Door Standard/Premium (Preview)?
https://docs.microsoft.com/en-us/azure/frontdoor/standard-premium/overview

Azure Front Door Standard/Premium (Preview) Health probe monitoring
https://docs.microsoft.com/en-us/azure/frontdoor/standard-premium/concept-health-probes

Front Door routing methods
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-routing-methods

What is Rules Engine for Azure Front Door?
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine

Implement an Azure Traffic Manager profile

What is Traffic Manager?
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

Traffic Manager routing methods
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods

Design and implement an Azure Virtual Network NAT

What is Virtual Network NAT?
https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview

Secure and Monitor Networks (15% to 20%)

Design, implement, and manage an Azure Firewall deployment

What is Azure Firewall?
https://docs.microsoft.com/en-us/azure/firewall/overview

Deploy and configure Azure Firewall and policy using the Azure portal
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy

Network Virtual Appliance in an Azure Virtual WAN hub
https://docs.microsoft.com/en-us/azure/virtual-wan/about-nva-hub

Implement and manage network security groups (NSGs)

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Virtual network service tags
https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview

Application Security Group
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#application-security-groups

Read NSG flow logs
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-read-nsg-flow-logs

Troubleshoot NSG configuration using IP Flow Verify
https://azure.microsoft.com/en-gb/resources/videos/troubleshoot-nsg-configuration-using-ip-flow-verify/

Implement a Web Application Firewall (WAF) deployment

https://docs.microsoft.com/en-us/azure/web-application-firewall/

What is Azure Web Application Firewall?
https://docs.microsoft.com/en-us/azure/web-application-firewall/overview

Azure Web Application Firewall on Azure Front Door
https://docs.microsoft.com/en-us/azure/web-application-firewall/afds/afds-overview

Monitor Network

Azure Monitor Network Insights
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-insights-overview

Network Connectivity Monitoring with Connection Monitor
https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor-overview

Create a monitor in Connection Monitor by using the Azure portal
https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor-create-using-portal

Install monitoring agents
https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor-overview#install-monitoring-agents

Design and Implement Private Access to Azure Services (10% to 15%)

Design and implement Azure Private Link service and Azure Private Endpoint

What is Azure Private Link service?
https://docs.microsoft.com/en-us/azure/private-link/private-link-service-overview

Quickstart: Create a Private Link service using Azure CLI
https://docs.microsoft.com/en-us/azure/private-link/create-private-link-service-cli

What is Azure Private Endpoint?
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview

Private link resource
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview#private-link-resource

Azure Private Endpoint DNS configuration
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns

Design and implement service endpoints

Virtual Network service endpoints
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

Tutorial: Restrict network access to PaaS resources with virtual network service endpoints using the Azure portal
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-restrict-network-access-to-resources

Services Tags
https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview

VNet endpoint policies
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview#vnet-service-endpoint-policies

Virtual network service endpoint policies for Azure Storage
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview

Create, change, or delete service endpoint policy using the Azure portal
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-portal

Azure Virtual Network frequently asked questions (FAQ) – Service Endpoint
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#virtual-network-service-endpoints

Configure VNet integration for dedicated platform as a service (PaaS) services

configure App Service for regional VNet integration

Integrate your app with an Azure virtual network
https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

Use an App Service Environment
https://docs.microsoft.com/en-us/azure/app-service/environment/using-an-ase#app-access

Last be not least, I found very good lab material to practice :

https://microsoftlearning.github.io/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/

AZ-700 Labs
https://github.com/MicrosoftLearning/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions

Hope this preparation guide will be useful for you. Don’t hesitate to post a comment or send me a message on Twitter @squastana or on LinkedIn
https://www.linkedin.com/in/stanislasquastana/

Last but not least, don’t forget to spend time on http://microsoft.com/learn where you can find additional materials to prepare your certification.

— Stanislas Quastana —