AZ-700 Study Guide Azure Network Engineer

Microsoft Learn provides you with free online training and learning paths for different Microsoft technologies. They not just offer reading material, but also control questions and free online labs. Here are some relevant Microsoft Learn modules and learning paths for the AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Certification Exam. Microsoft Learn is an important part of my AZ-700 Azure Networking solutions exam study guide.

One thing I always used to prepare for my Microsoft exams is Microsoft Docs. Here are the relevant Microsoft Docs which I used to prepare and study for the AZ-700 exam.

Design, Implement, and Manage Hybrid Networking (10–15%)

Design, implement, and manage a site-to-site VPN connection

Design a site-to-site VPN connection for high availability
Select an appropriate virtual network (VNet) gateway SKU
- What is VPN Gateway?
Identify when to use policy-based VPN versus route-based VPN
- VPN Gateway FAQ
Create and configure a local network gateway
- Tutorial: Create a Site-to-Site connection in the Azure portal
Create and configure an IPsec/IKE policy
- Configure IPsec/IKE policy for site-to-site VPN connections
Create and configure a virtual network gateway
- Tutorial: Create and manage a VPN gateway using Azure portal
Diagnose and resolve VPN gateway connectivity issues
- Troubleshoot VPN Gateway
- Troubleshoot Azure VPN Gateway using diagnostic logs

Design, implement, and manage a point-to-site VPN connection

Select an appropriate virtual network gateway SKU
- What is VPN Gateway?
Plan and configure RADIUS authentication
- Configure a Point-to-Site connection to a VNet using RADIUS authentication: PowerShell
Plan and configure certificate-based authentication
- Configure a Point-to-Site VPN connection using Azure certificate authentication: Azure portal
Plan and configure OpenVPN authentication
- Configure OpenVPN for Point-to-Site VPN gateways
- OpenVPN support in Azure VPN gateways
Plan and configure Azure Active Directory (Azure AD) authentication
- Create an Azure Active Directory tenant for P2S OpenVPN protocol connections
- Configure a Point-to-Site VPN connection to a VNet using multiple authentication types: Azure portal
Implement a VPN client configuration file
- Create and install VPN client configuration files for P2S RADIUS authentication
Diagnose and resolve client-side and authentication issues
- Troubleshoot an Azure AD authentication VPN client

Design, implement, and manage Azure ExpressRoute

Choose between provider and direct model (ExpressRoute Direct)
Design and implement Azure cross-region connectivity between multiple ExpressRoute locations
- Cross-network connectivity
- Designing for disaster recovery with ExpressRoute private peering
Select an appropriate ExpressRoute SKU and tier
- About ExpressRoute virtual network gateways
Design and implement ExpressRoute Global Reach
- Configure ExpressRoute Global Reach
Design and implement ExpressRoute FastPath
- About ExpressRoute FastPath
Choose between private peering only, Microsoft peering only, or both
- ExpressRoute circuits and peering
Configure private peering
- Tutorial: Create and modify peering for an ExpressRoute circuit using the Azure portal
Configure Microsoft peering
- Tutorial: Configure route filters for Microsoft peering using the Azure portal
Create and configure an ExpressRoute gateway
- Tutorial: Configure a virtual network gateway for ExpressRoute using the Azure portal
Connect a virtual network to an ExpressRoute circuit
- Tutorial: Connect a virtual network to an ExpressRoute circuit using the portal
Recommend a route advertisement configuration
- ExpressRoute routing requirements
Configure encryption over ExpressRoute
- ExpressRoute encryption: IPsec over ExpressRoute for Virtual WAN
Implement Bidirectional Forwarding Detection
- Configure BFD over ExpressRoute
Diagnose and resolve ExpressRoute connection issues

Design and Implement Core Networking Infrastructure (20–25%)

Design and implement private IP addressing for VNets

Create a VNet
- Quickstart: Create a virtual network using the Azure portal
Plan and configure subnetting for services, including VNet gateways, private endpoints, firewalls, application gateways, and VNet-integrated platform services
Plan and configure subnet delegation
- Add or remove a subnet delegation

Design and implement name resolution

Design public DNS zones
- What is Azure DNS?
- Quickstart: Create an Azure DNS zone and record using the Azure portal
Design private DNS zones
- What is Azure Private DNS?
- Quickstart: Create an Azure private DNS zone using the Azure portal
Design name resolution inside a VNet
- Name resolution for resources in Azure virtual networks
Configure a public or private DNS zone
- Quickstart: Create an Azure DNS zone and record using the Azure portal
- Quickstart: Create an Azure private DNS zone using the Azure portal
Link a private DNS zone to a VNet
- What is a virtual network link?

Design and implement cross-VNet connectivity

Design service chaining, including gateway transit
- Configure VPN gateway transit for virtual network peering
Design VPN connectivity between VNets
- Configure a VNet-to-VNet VPN gateway connection by using the Azure portal
Implement VNet peering
- Virtual network peering
- Create, change, or delete a virtual network peering

Design and implement an Azure Virtual WAN architecture

Design an Azure Virtual WAN architecture, including selecting SKUs and services
- What is Azure Virtual WAN?
Connect a VNet gateway to Azure Virtual WAN
- Connect a VPN Gateway (virtual network gateway) to Virtual WAN
Create a hub in Virtual WAN
- Tutorial: Create a Site-to-Site connection using Azure Virtual WAN
Create a network virtual appliance (NVA) in a virtual hub
- How to create a Network Virtual Appliance in an Azure Virtual WAN hub
Configure virtual hub routing
- How to configure virtual hub routing
Create a connection unit
- Virtual WAN FAQ

Design and Implement Routing (25–30%)

Design, implement, and manage VNet routing

Design and implement user-defined routes (UDRs)
- Virtual network traffic routing
- Tutorial: Route network traffic with a route table using the Azure portal
Associate a route table with a subnet
- Create, change, or delete a route table
Configure forced tunneling
- Configure forced tunneling
Diagnose and resolve routing issues
- Diagnose a virtual machine routing problem
- Troubleshoot VPN Gateway

Design and implement an Azure Load Balancer

Choose an Azure Load Balancer SKU (Basic versus Standard)
- Azure Load Balancer SKUs
Choose between public and internal
- What is Azure Load Balancer?
Create and configure an Azure Load Balancer (including cross-region)
- Quickstart: Create a public load balancer to load balance VMs using the Azure portal
- Tutorial: Create a cross-region Azure Load Balancer using the Azure portal
Implement a load balancing rule
- Outbound rules Azure Load Balancer
Create and configure inbound NAT rules
- Tutorial: Configure port forwarding in Azure Load Balancer using the portal
Create explicit outbound rules for a load balancer
- Outbound-only load balancer configuration

Design and implement Azure Application Gateway

Recommend Azure Application Gateway deployment options
- Application Gateway configuration overview
- Azure Application Gateway features
Choose between manual and autoscale
- Autoscaling and Zone-redundant Application Gateway v2
Create a back-end pool
- Application gateway components
Configure health probes
- Application Gateway health monitoring overview
Configure listeners
- Application Gateway listener configuration
Configure routing rules
- Application Gateway request routing rules
Configure HTTP settings
- Application Gateway HTTP settings configuration
Configure Transport Layer Security (TLS)
- Overview of TLS termination and end to end TLS with Application Gateway
Configure rewrite policies
- Rewrite HTTP headers and URL with Application Gateway

Implement Azure Front Door

Choose an Azure Front Door SKU
- Overview of Azure Front Door Standard/Premium SKU (Preview)
Configure health probes, including customization of HTTP response codes
- Azure Front Door Standard/Premium (Preview) Health probe monitoring
Configure SSL termination and end-to-end SSL encryption
- Frequently asked questions for Azure Front Door
Configure multisite listeners
- Application Gateway listener configuration
Configure back-end targets
- Backends and backend pools in Azure Front Door
Configure routing rules, including redirection rules
- URL redirect and URL rewrite with Azure Front Door Standard/Premium (Preview)

Implement an Azure Traffic Manager profile

Configure a routing method (mode)
- Traffic Manager routing methods
Configure endpoints
- Add, disable, enable, or delete endpoints
Create HTTP settings
- Verify Traffic Manager settings

Design and implement an Azure Virtual Network NAT

Choose when to use a Virtual Network NAT
- What is Virtual Network NAT?
Allocate public IP or public IP prefixes for a NAT gateway
- Designing virtual networks with NAT gateway resources
Associate a Virtual Network NAT with a subnet
- Tutorial: Create a NAT gateway using the Azure portal

Secure and Monitor Networks (15–20%)

Design, implement, and manage an Azure Firewall deployment

Design an Azure Firewall deployment
Create and implement an Azure Firewall deployment
- Deploy and configure Azure Firewall using Azure PowerShell
- Tutorial: Deploy and configure Azure Firewall and policy using the Azure portal
Configure Azure Firewall rules
- Use FQDN filtering in network rules
- Configure Azure Firewall application rules with SQL FQDNs
Create and implement Azure Firewall Manager policies
- Azure Firewall Manager policy overview
- Tutorial: Secure your virtual hub using Azure Firewall Manager
Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub
- Tutorial: Secure your virtual hub using Azure Firewall Manager
Integrate an Azure Virtual WAN hub with a third-party NVA
- About Network Virtual Appliance in an Azure Virtual WAN hub

Implement and manage network security groups (NSGs)

Create an NSG
- Create, change, or delete a network security group
Associate an NSG to a resource
- Create, change, or delete a network security group
Create an application security group (ASG)
- Application security groups
Associate an ASG to a NIC
- Application security groups
Create and configure NSG rules
- Network security groups
Interpret NSG flow logs
- Tutorial: Log network traffic to and from a virtual machine using the Azure portal
Validate NSG flow rules
- Introduction to flow logging for network security groups
Verify IP flow
- Introduction to flow logging for network security groups

Implement a Web Application Firewall (WAF) deployment

Configure detection or prevention mode
- What is Azure Web Application Firewall on Azure Application Gateway?
- Create Web Application Firewall policies for Application Gateway
Configure rule sets for Azure Front Door, including Microsoft managed and user defined
- Azure Web Application Firewall on Azure Front Door
- Configure a Web Application Firewall policy using Azure PowerShell
Configure rule sets for Application Gateway, including Microsoft managed and user defined
- Custom rules for Web Application Firewall v2 on Azure Application Gateway
Implement a WAF policy
- Create Web Application Firewall policies for Application Gateway
Associate a WAF policy
- Create Web Application Firewall policies for Application Gateway

Monitor networks

Configure network health alerts and logging by using Azure Monitor
- Azure Monitor Network Insights
Create and configure a Connection Monitor instance
- Create a monitor in Connection Monitor by using the Azure portal
Configure and use Traffic Analytics
- Traffic Analytics
Configure NSG flow logs
- Introduction to flow logging for network security groups
Enable and configure diagnostic logging
- Resource logging for a network security group
Configure Azure Network Watcher
- What is Azure Network Watcher?
- Create an Azure Network Watcher instance

Design and Implement Private Access to Azure Services (10–15%)

Design and implement Azure Private Link service and Azure Private Endpoint

Create a Private Link service
- What is Azure Private Link service?
Plan private endpoints
- What is Azure Private Endpoint?
Create private endpoints
- Manage a Private Endpoint connection
Configure access to private endpoints
- Using private endpoints for Azure App Configuration
Integrate Private Link with DNS
- Private Link and DNS integration at scale
- Azure Private Endpoint DNS configuration
Integrate a Private Link service with on-premises clients
- What is Azure Private Link service?

Design and implement service endpoints

Create service endpoints
- Create, change, or delete service endpoint policy using the Azure portal
Configure service endpoint policies
- Create, change, or delete service endpoint policy using the Azure portal
Configure service tags
- Virtual network service tags
Configure access to service endpoints
- Virtual Network service endpoints

Configure VNet integration for dedicated platform as a service (PaaS) services

Configure App Service for regional VNet integration
- Integrate your app with an Azure virtual network
Configure Azure Kubernetes Service (AKS) for regional VNet integration
- Create a private Azure Kubernetes Service cluster
Configure clients to access App Service Environment
- Configuring an App Service Environment v1
- Network Architecture Overview of App Service Environments