AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Study Guide

Exam Overview

The AZ-700 certification validates your expertise in designing and implementing network infrastructure solutions on Microsoft Azure. It is designed for IT professionals who manage and secure complex cloud networks, ensuring they can apply best practices for connectivity, security, and performance optimization.

Exam Domains

• Implement and manage network infrastructure in Azure, including VNets and subnets.
• Implement load balancing and traffic management solutions using Azure services.
• Manage network security by configuring firewalls, NSGs, and DDoS protection.
• Implement site-to-site, VNet-to-VNet, and ExpressRoute connections.
• Monitor and troubleshoot network connectivity and performance issues.

Key Concepts & Common Difficulties

• VNet Peering vs. Global VNet Peering: Candidates often confuse local peering with global peering across regions. Remember that global peering allows traffic between VNets in different Azure regions without requiring a gateway, whereas local peering is restricted to the same region unless explicitly configured otherwise.
• Azure Firewall vs. NSGs: Many mix up the scope of Network Security Groups (NSGs) with Azure Firewall. NSGs operate at the subnet or NIC level using simple allow/deny rules, while Azure Firewall provides application-level filtering, threat intelligence, and centralized management for entire virtual networks.
• ExpressRoute Circuit Configuration: Setting up ExpressRoute circuits involves understanding SKU types (Metered/Reserved) and routing protocols (BGP). A common mistake is failing to configure BGP communities correctly to control route propagation, leading to asymmetric routing or connectivity drops.
• Load Balancer Types (Standard vs. Basic): The Standard Load Balancer is required for most production scenarios due to its support for availability sets, zone redundancy, and outbound rules. Basic LB lacks these features and should only be used for legacy or non-critical workloads.
• DNS Integration in Hybrid Networks: Managing private DNS zones and integrating them with VNet peering or VPN gateways is tricky. Ensure that conditional forwarders are set up correctly on on-premises DNS servers if you need resolution for hybrid resources.

Study Strategy

1. Prerequisites: Ensure you have foundational knowledge of TCP/IP, subnetting, and general cloud computing concepts. Familiarity with Azure portal navigation is essential. 2. Recommended Study Order: Start with Virtual Networks and Subnets, then move to Load Balancing and Traffic Manager. Follow this with Network Security (Firewalls, NSGs), and finally cover Connectivity options like Site-to-Site and ExpressRoute. 3. Practice Approach: Use hands-on labs to configure VNets, set up peering, and deploy Azure Firewall. Practice troubleshooting scenarios by simulating connectivity failures and using tools like Network Watcher. 4. Exam-Day Tips: Read each question carefully to identify the specific service requirement (e.g., Layer 4 vs. Layer 7). Eliminate obviously incorrect options related to deprecated services or mismatched SKUs. Focus on cost-effective and secure solutions as per Microsoft best practices.