Microsoft Learn: Design and Implement Microsoft Azure Networking Solutions (AZ-700)
Microsoft's free official learning path for Azure networking and the AZ-700 exam: eight modules on virtual networks, hybrid VPNs and Virtual WAN, ExpressRoute, load balancing, network security, private access to services and monitoring. The structured way to carry routing and security skills into Azure.
8
Microsoft Learn · Sept 2026
100 minutes
Microsoft Learn · Sept 2026
Every 12 months
Microsoft Learn · Sept 2026
Course
Other
Microsoft
8 modules, self-paced
Intermediate
Free
What this learning path is
This is Microsoft's free, self-paced learning path for Azure networking, aligned with exam AZ-700, which earns the Microsoft Certified: Azure Network Engineer Associate certification. Microsoft rates it intermediate and describes it as teaching how to design and implement a secure network infrastructure in Azure and how to establish hybrid connectivity, routing, private access to Azure services and monitoring.
The eight modules
- Introduction to Azure Virtual Networks: virtual networks, public and private IPs, DNS, peering, routing and NAT.
- Design and implement hybrid networking: site-to-site and point-to-site VPNs, Azure Virtual WAN and its hubs.
- Design and implement Azure ExpressRoute: private circuits, Global Reach and FastPath.
- Load balance non-HTTP(S) traffic: choosing and implementing Azure's layer 4 load balancing.
- Load balance HTTP(S) traffic: Application Gateway and Front Door.
- Design and implement network security: DDoS protection, network security groups, Azure Firewall and web application firewall.
- Design and implement private access to Azure services: Private Link and service endpoints.
- Design and implement network monitoring: Azure Monitor and Network Watcher.
Prerequisites
Microsoft lists experience with networking concepts such as IP addressing, DNS and routing; experience with connectivity methods such as VPN or WAN; and the ability to use the Azure portal and Azure PowerShell. In other words, this path assumes the network basics first. On a cloud networking path, take it after your routing, security and VPN stages, not before.
Is it worth it?
Yes, if Azure is the cloud your target employers use. It is free, official and structured, and the modules include exercises you can do in an Azure subscription. It maps cleanly onto what network engineers already know: VNets are networks, NSGs are stateful filters, VPN gateways speak IPsec and BGP, and ExpressRoute is a private circuit. Build each piece yourself after reading, and delete resources afterwards to control cost.
The certification
The AZ-700 exam is proctored, lasts 100 minutes and needs a score of 700 or more to pass, according to Microsoft Learn. The certification must be renewed every 12 months, which Microsoft does through a free online renewal assessment. The exam fee is separate from the free training and varies by country.
Common questions
Do I need an Azure subscription? To read, no. To practise, yes; free and student offers exist, but check what they include and set spending limits.
Should I take AZ-700 before a networking certificate? No. The prerequisites assume you already understand IP addressing, routing and VPNs.
Is there an instructor-led version? Yes, Microsoft lists course AZ-700T00 through training partners, but the self-paced path covers the same ground for free.
Ready to start?
Opens on Microsoft in a new tab.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
Follow along
New writing, resources and project ideas land here first.