Microsoft Certified: Azure Network Engineer Associate Questions and Answers
200 questions organized by topic with detailed explanations
Microsoft
AZ-700
200 questions
5 topics
Updated May 2026Design and implement core networking infrastructure
56 questions14 easy30 medium12 hard~28% of exam
A hub virtual network contains BGP-capable SD-WAN and security appliances. The network team wants Azure routing to updat...What is the recommended Azure service for explicit outbound internet connectivity from a subnet?A subnet uses an Azure NAT Gateway for outbound internet access. An engineer then adds a user-defined route for 0.0.0.0/...
Design, implement, and manage connectivity services
44 questions11 easy22 medium11 hard~23% of exam
A network team has two on-premises datacenters, each attached to its own ExpressRoute circuit, and wants those sites to ...A legacy on-premises VPN device supports only static routing. Which Azure VPN type is the best match for that constraint...An organization wants a managed global transit architecture that can connect branches, remote users, ExpressRoute circui...
Design and implement application delivery services
36 questions10 easy14 medium12 hard~18% of exam
A globally distributed web application needs anycast-based acceleration, edge TLS offload, and rapid global failover. Wh...A company wants Azure Front Door to reach an origin privately so the origin doesn't need to be publicly exposed to inter...A web team needs host-based and URL path-based routing with TLS termination for applications hosted behind a regional Az...
Design and implement private access to Azure services
27 questions9 easy11 medium7 hard~13% of exam
An application already connects to a storage account by its normal FQDN. After a private endpoint is created, the team w...You want to publish your own service privately to consumers in Azure by placing it behind a Standard Load Balancer. Whic...A subnet must access Azure Storage over the Azure backbone while the storage account continues to use its public endpoin...
Design and implement Azure network security services
37 questions8 easy23 medium6 hard~18% of exam
A security architect needs an Azure firewall SKU that provides L3 through L7 filtering and Microsoft threat intelligence...An administrator removes the NSG rule that originally allowed an active SSH session to a virtual machine. What happens n...A company hosts an internet-facing web application in Azure and wants protection against volumetric Layer 3 and Layer 4 ...
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | An application already connects to a storage account by its normal FQDN. After a private endpoint is... | Design and implement private access to Azure services | hard |
| 2 | A security architect needs an Azure firewall SKU that provides L3 through L7 filtering and Microsoft... | Design and implement Azure network security services | medium |
| 3 | A network team has two on-premises datacenters, each attached to its own ExpressRoute circuit, and w... | Design, implement, and manage connectivity services | medium |
| 4 | A hub virtual network contains BGP-capable SD-WAN and security appliances. The network team wants Az... | Design and implement core networking infrastructure | medium |
| 5 | What is the recommended Azure service for explicit outbound internet connectivity from a subnet? | Design and implement core networking infrastructure | easy |
Sign in to see all 200 questions
Create a free account to browse all questions — completely free during our launch phase.
Ready to test your knowledge?
Take a full Microsoft Certified: Azure Network Engineer Associate practice test with timed exam simulation.
Start Practice Test