Design and Implement Microsoft Azure Network Solutions (AZ-700) Training

This course equips network engineers with the expertise to design, implement, and manage networking solutions in Microsoft Azure. Learners will explore virtual networking, hybrid connectivity, load balancing, routing, private access to services, and network security. The course also introduces monitoring and troubleshooting strategies to ensure optimal network performance. With scenario-based learning and guided labs, participants will build the skills to architect secure, high-performance, and scalable Azure network infrastructures aligned to modern enterprise needs.

Participants should have:

• experience in enterprise networking, including network security and infrastructure
• familiarity with virtualisation technologies such as virtual machines and virtual networks
• knowledge of core networking concepts, including TCP/IP, DNS, VPNs, firewalls, and encryption
• understanding of hybrid network connectivity and disaster recovery

Recommended knowledge or courses:

• Introduction to Cloud Infrastructure (AZ-900) (MAZ900)

Azure virtual network design

• design and implement virtual networks and subnets
• assign public and private IP addresses
• configure name resolution using Azure DNS and custom DNS
• enable virtual network peering and routing
• design and configure Azure Virtual Network NAT

Hybrid networking

• design and configure site-to-site VPN connectivity
• implement point-to-site VPN with certificate or radius-based authentication
• configure and deploy Azure Virtual WAN and virtual hubs
• integrate network virtual appliances into Azure network topologies

ExpressRoute deployment

• plan and deploy ExpressRoute circuits
• configure private and Microsoft peerings
• implement ExpressRoute Global Reach and FastPath
• troubleshoot ExpressRoute connectivity and performance

Load balancing non-HTTP(S) traffic

• identify Azure Load Balancer features and use cases
• configure an Azure Load Balancer for internal and external traffic
• implement Azure Traffic Manager for DNS-based load balancing

Load balancing HTTP(S) traffic

• design and configure Azure Application Gateway
• deploy web application firewall (WAF) with Application Gateway
• implement Azure Front Door for global HTTP(S) load balancing and failover

Network security

• apply and manage network security groups (NSGs)
• deploy Azure Firewall and manage policies using Firewall Manager
• configure Azure DDoS Protection for mitigation against attacks
• secure applications with web application firewall policies

Private access to Azure services

• explain and implement service endpoints
• configure Private Link and private endpoints
• integrate private endpoints with Azure DNS or custom DNS
• restrict access to Azure platform services from the internet

Network monitoring and diagnostics

• enable diagnostics with Azure Monitor and Network Watcher
• configure NSG flow logs and traffic analytics
• deploy Connection Monitor to assess connectivity
• collect and interpret diagnostic and metric data

Exams and assessments

• This course supports learners preparing for the Microsoft Certified: Azure Network Engineer Associate certification.
• The associated exam is AZ-700: Designing and implementing Microsoft Azure networking solutions, which must be booked separately.
• There are no formal assessments or exams included as part of this course.