Designing and Implementing Microsoft Azure Networking Solutions (AZ-700) Exam Blueprint

Plan and implement a custom public IP address prefix (bring your own IP); Create a public IP address; Associate public IP addresses to resources

Plan and configure subnetting for services, including virtual network gateways, private endpoints, service endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion

Design service chaining, including gateway transit; Implement VNet peering; Implement and manage virtual network connectivity by using Azure Virtual Network Manager; Design and implement user-defined routes (UDRs); Associate a route table with a subnet; Configure forced tunneling; Diagnose and resolve routing issues; Design and implement Azure Route Server

Design name resolution inside a VNet; Configure DNS settings for a VNet; Design public DNS zones; Design private DNS zones; Link a private DNS zone to a VNet; Design and implement Azure DNS Private Resolver

Configure monitoring, network diagnostics, and logs in Azure Network Watcher; Monitor and troubleshoot network health by using Azure Network Watcher; Monitor and troubleshoot networks by using Azure Monitor for Networks; Activate and monitor distributed denial-of-service (DDoS) protection; Evaluate network security recommendations identified by Microsoft Defender for Cloud Secure Score; Evaluate network security recommendations identified by Microsoft Defender for Cloud attack oaths; Identify network resources by using Microsoft Defender for Cloud Security Explorer

Design a site-to-site VPN connection, including for high availability; Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements; Implement a site-to-site VPN connection; Identify when to use a policy-based VPN versus a route-based VPN connection; Create and configure a local network gateway; Create and configure an IPsec/Internet Key Exchange (IKE) policy; Create and configure a virtual network gateway; Diagnose and resolve virtual network gateway connectivity issues

Select an appropriate virtual network gateway SKU for point-to-site VPN requirements; Select and configure a tunnel type; Select an appropriate authentication method; Configure RADIUS authentication; Configure authentication by using Microsoft Entra ID; Implement a VPN client configuration file; Diagnose and resolve client-side and authentication issues; Specify Azure requirements for Always On VPN; Specify Azure requirements for Azure Network Adapter

Select an ExpressRoute connectivity model; Select an appropriate ExpressRoute SKU and tier; Design and implement ExpressRoute to meet requirements, including cross-region connectivity, redundancy, and disaster recovery; Design and implement ExpressRoute options, including Global Reach, FastPath, and ExpressRoute Direct; Choose between Azure private peering only, Microsoft peering only, or both; Configure Azure private peering; Configure Microsoft peering; Create and configure an ExpressRoute gateway; Connect a virtual network to an ExpressRoute circuit; Recommend a route advertisement configuration; Configure encryption over ExpressRoute; Implement Bidirectional Forwarding Detection; Diagnose and resolve ExpressRoute connection issues

Select a Virtual WAN SKU; Design a Virtual WAN architecture, including selecting types and services; Create a virtual hub in Virtual WAN; Choose an appropriate scale unit for each gateway type; Deploy a gateway into a virtual hub; Configure virtual hub routing; Integrate a virtual hub with a third-party NVA for cloud connectivity

Map requirements to features and capabilities of Azure Load Balancer; Identify appropriate use cases for Azure Load Balancer; Choose an Azure Load Balancer SKU and tier; Choose between public and internal load balancers; Choose between regional and cross-region load balancers; Create and configure an Azure Load Balancer; Implement Azure Traffic Manager; Implement Gateway Load Balancer; Implement a load balancing rule; Create and configure inbound NAT rules; Create and configure explicit outbound rules, including source network address translation (SNAT)

Map requirements to features and capabilities of Azure Application Gateway; Identify appropriate use cases for Azure Application Gateway; Choose between manual and autoscale; Create a backend pool; Configure health probes; Configure listeners; Configure routing rules; Configure HTTP settings; Configure Transport Layer Security (TLS); Configure rewrite rule sets

Map requirements to features and capabilities of Azure Front Door; Identify appropriate use cases for Azure Front Door; Choose an appropriate tier; Configure an Azure Front Door, including routing, origins, and endpoints; Configure TLS termination and end-to-end TLS encryption; Configure caching; Configure traffic acceleration; Implement rules, URL rewrite, and URL redirect; Secure an origin by using Azure Private Link in Azure Front Door

Plan private endpoints; Create private endpoints; Configure access to private endpoints; Create a Private Link service; Integrate Private Link and Private Endpoint with DNS; Integrate a Private Link service with on-premises clients

Choose when to use a service endpoint; Create service endpoints; Configure service endpoint policies; Configure access to service endpoints

Create a network security group (NSG); Associate a NSG to a resource; Create an application security group (ASG); Associate an ASG to a network interface; Create and configure NSG inbound and outbound security rules; Implement virtual network flow logs; Interpret virtual network flow logs; Verify IP flow; Configure an NSG for remote server administration, including Azure Bastion

Map requirements to features and capabilities of Azure Firewall; Select an appropriate Azure Firewall SKU; Design an Azure Firewall deployment; Create and implement an Azure Firewall deployment; Configure Azure Firewall rules; Create and implement Azure Firewall Manager policies; Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub

Map requirements to features and capabilities of WAF; Design a WAF deployment; Configure detection or prevention mode; Configure rule sets for WAF on Azure Front Door; Configure rule sets for WAF on Application Gateway; Implement a WAF policy; Associate a WAF policy