AzureAssociate

Microsoft Certified: Azure Network Engineer Associate

AZ-700

Design, implement and manage core networking, hybrid connectivity, application delivery and private access on Azure.

Duration

100 min

Exam questions

40–60

Passing score

700 / 1000

Exam fee

$165

Question formats:Multiple choiceMultiple responseYes / NoYes / No statementsDrag and dropHot areacase study

Free plan

3 free papers

Free account

Mocks locked

Pro only

Upgrade to Pro

Every paper and mock exam.

See Pro

Start with free papers Free

You get 3 free practice papers with your plan. Start here to get familiar with the exam style.

Free

Mixed paper 1

Domain 1 · 25 questionsDomain 1 · 25 questions · 60 min · All topics, in proportion

Practice

Free

Mixed paper 2

Domain 1 · 25 questionsDomain 1 · 25 questions · 60 min · All topics, in proportion

Practice

Free

Mixed paper 3

Domain 1 · 25 questionsDomain 1 · 25 questions · 60 min · All topics, in proportion

Practice

Pro

Case study: Marrowby Building Society

6 questions · 10 min · All topics, in proportion

Pro

Case study: Saltmarsh Live

6 questions · 10 min · All topics, in proportion

Domain papers 529 questions across 57 sets

Free

Mixed paper 1

25 questions · 60 min · All topics, in proportion

Practice

Free

Mixed paper 2

25 questions · 60 min · All topics, in proportion

Practice

Free

Mixed paper 3

25 questions · 60 min · All topics, in proportion

Practice

Pro

Mixed paper 4

25 questions · 60 min · All topics, in proportion

Pro

Mixed paper 5

15 questions · 36 min · All topics, in proportion

Pro

Mixed paper 6

14 questions · 34 min · All topics, in proportion

Mock exams Pro

Full-length, exam-like practice tests. Available with Pro.

Mock exam 1

50 questions · 100 min
Weighted like the real exam

Mock exam 2

50 questions · 100 min
Weighted like the real exam

Mock exam 3

50 questions · 100 min
Weighted like the real exam

Try a sample question

All 10 sample questions →

Question 1Design and implement core networking infrastructure

Northwind has an ExpressRoute circuit to a hub virtual network. On-premises servers must resolve privatelink.blob.core.windows.net records that are held in an Azure private DNS zone, and the design must avoid running and patching DNS forwarder virtual machines. You need to enable the resolution. What should you deploy in the hub virtual network?

A.
A public Azure DNS zone named blob.core.windows.net that contains the private endpoint A records
B.
Configure a conditional forwarder for blob.core.windows.net on the on-premises DNS servers that targets 168.63.129.16, and advertise 168.63.129.16/32 to on-premises over the ExpressRoute circuit
C.
An Azure DNS Private Resolver with an inbound endpoint, then point an on-premises conditional forwarder for blob.core.windows.net at the inbound endpoint IP address
D.
An Azure DNS Private Resolver with an outbound endpoint and a DNS forwarding ruleset for blob.core.windows.net

Show answer

Answer: C

An inbound endpoint on Azure DNS Private Resolver gives on-premises resolvers a private IP address in the VNet to forward Azure private zone queries to.

A. A public DNS zone cannot hold private endpoint resolution for the Microsoft-owned blob namespace and would not be authoritative for on-premises clients anyway.
B. 168.63.129.16 is only reachable from inside a virtual network, so an on-premises forwarder aimed at it cannot receive answers.
C. The inbound endpoint provides a VNet private IP that on-premises resolvers can forward to, and it answers from every private DNS zone linked to that virtual network.
D. Outbound endpoints and forwarding rulesets send queries from Azure toward on-premises DNS, which is the reverse of the required direction.

ShareLinkedIn X WhatsApp Facebook

What's on the exam

5 domains · 16 task statements, straight from the official exam guide (as of July 27, 2026).

1.1Design and implement IP addressing for Azure resources
- Plan and implement network segmentation and address spaces
- Create a virtual network (VNet)
- Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion
- Plan and configure subnet delegation
- Plan and configure shared or dedicated subnets
- Create a Public IP Prefix
- Choose when to use a public IP address prefix
- Plan and implement a Custom IP address prefix (bring your own IP)
- Create a public IP address
- Associate public IP addresses to resources
1.2Design and implement name resolution
- Design name resolution inside a VNet
- Configure DNS settings for a VNet
- Design public DNS zones
- Design private DNS zones
- Configure public and private DNS zones
- Link a private DNS zone to a VNet
- Design and implement Azure DNS Private Resolver
1.3Design and implement VNet connectivity and routing
- Design service chaining, including gateway transit
- Implement VNet peering
- Implement and manage virtual network connectivity by using Azure Virtual Network Manager
- Design and implement user-defined routes (UDRs)
- Associate a route table with a subnet
- Configure forced tunneling
- Diagnose and resolve routing issues
- Design and implement Azure Route Server
- Identify appropriate use cases for Azure NAT Gateway
- Implement Azure NAT Gateway
1.4Monitor networks
- Configure monitoring, network diagnostics, and logs in Azure Network Watcher
- Monitor and troubleshoot network health by using Azure Network Watcher
- Monitor and troubleshoot networks by using Azure Monitor for Networks
- Activate and monitor distributed denial-of-service (DDoS) protection
- Evaluate network security recommendations identified by Microsoft Defender for Cloud Secure Score
- Evaluate network security recommendations identified by Microsoft Defender for Cloud attack path analysis
- Identify network resources by using Cloud Security Explorer in Microsoft Defender for Cloud

Outline reproduced from the vendor's public exam guide for study reference.Official guide

AZ-700 practice — frequently asked questions

Are these real AZ-700 exam questions?

No. Every question on CertifyCloudx is original, written by us against Microsoft Azure's publicly available AZ-700 exam guide to rehearse the skills it lists. None are actual exam questions, and CertifyCloudx is not affiliated with or endorsed by Microsoft Azure.

How many AZ-700 practice questions are there?

529 practice questions, including 3 full-length timed mock exams and 52 domain papers of up to 25 questions (mixed and by topic). Every question has a detailed explanation of why the right answer wins and why each distractor loses.

Is the content up to date with the current AZ-700 exam guide?

The questions are written against the AZ-700 exam guide dated July 27, 2026, and we revise them when Microsoft Azure updates the guide.

What question formats are covered?

The same formats the real AZ-700 uses: Multiple choice, Multiple response, Yes / No, Yes / No statements, Drag and drop, Hot area, case study. Each is rendered and graded the way the exam does it.

How long is the AZ-700 exam and how many questions does it have?

According to Microsoft Azure's published exam details: 40–60 questions, 100 minutes, passing score 700 / 1000. Our mock exams use the same time limit, with a question count in the middle of that range. Always confirm current details with Microsoft Azure before booking.

Can I practise AZ-700 for free?

Yes. 3 papers are free, with up to 10 questions a day on the free plan and no card needed. Pro unlocks every paper and mock exam with no daily limit.

Does CertifyCloudx guarantee that I will pass?

No practice material can guarantee a result. CertifyCloudx helps you find and close your weak areas — accuracy by exam-guide domain and topic shows what to study next.