AZ-700: Designing and Implementing Microsoft Azure

Module: Design, implement, and manage hybrid networking (10–15%)

• Design and implement Azure ExpressRoute

  • Configure ExpressRoute and ExpressRoute Direct

  • Configure ExpressRoute gateways and routing

• Design and implement site-to-site VPN connections

  • Configure VPN gateways, connections, and IPsec/IKE policies

  • Configure VPN Gateway high availability

Module: Design and implement core networking infrastructure (20–25%)

• Design and implement private IP addressing and subnets

  • Plan IP addressing for VNets and subnets

  • Configure subnet delegation and service endpoints

• Design and implement name resolution

  • Configure private DNS zones and DNS resolution

  • Integrate with on-premises DNS

• Design and implement cross-VNet connectivity

  • Configure VNet peering and routing

  • Configure global VNet peering

Module: Design and implement routing (25–30%)

• Design and implement Azure routing

  • Configure user-defined routes (UDRs)

  • Configure BGP and route filtering

• Design and implement routing using Azure Virtual WAN

  • Configure Virtual WAN hubs, routing policies, and connectivity

  • Implement routing in hub-and-spoke and mesh topologies

Module: Design and implement Azure secure network perimeter (20–25%)

• Design and implement perimeter security strategies

  • Configure Azure Firewall, WAF, and Azure DDoS Protection

  • Configure network security groups (NSGs) and application security groups (ASGs)

• Design and implement network security monitoring

  • Configure diagnostic logging and NSG flow logs

  • Monitor traffic using Azure Monitor and Network Watcher

Module: Design and implement network security (10–15%)

• Design and implement Azure Bastion

  • Configure Bastion access

  • Secure and manage Bastion deployments

• Secure network traffic

  • Implement private endpoints

  • Configure service endpoints and Azure Private Link