[AZ-700] Azure Network Engineer Study Notes - Course Curriculum

Study the official exam domains. Each lesson teaches the concept from the vendor exam guide and first-party docs.

5 Modules

50 Lessons

Self-paced Learning

🔒 Course Content Preview

This page shows the complete course curriculum. Enroll now to access all video lessons, hands-on projects, and downloadable resources.

Enroll in This Course

Module 1: Domain 1: Core Networking Infrastructure

10 lessons

1.1 Virtual Networks and Address Spaces

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Plan and implement network segmentation and address spaces and Create a virtual network as the first IP addr...

Enroll to Access

1.2 Subnet Design for Azure Services

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Plan and configure subnetting for services, including virtual network gateways, private endpoints, service e...

Enroll to Access

1.3 Public IP Addresses and Prefixes

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Create a public IP address, Associate public IP addresses to resources, Create a Public IP Prefix, Choose wh...

Enroll to Access

1.4 Name Resolution Inside a VNet

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Design name resolution inside a VNet and Configure DNS settings for a VNet. This lesson is the resolver the...

Enroll to Access

1.5 Public and Private DNS Zones

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Design public DNS zones, Design private DNS zones, Configure public and private DNS zones, and Link a privat...

Enroll to Access

1.6 Azure DNS Private Resolver

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Design and implement Azure DNS Private Resolver. Lesson 1.4 was the virtual network DNS list. Lesson 1.5 was...

Enroll to Access

1.7 VNet Peering, Gateway Transit, and Virtual Network Manager

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Design and implement VNet connectivity and routing as the skill group that starts with peering and Azure Vir...

Enroll to Access

1.8 User-Defined Routes and Forced Tunneling

Enroll to Access

1.9 Azure Route Server and NAT Gateway

Enroll to Access

1.10 Network Watcher, DDoS, and Defender for Cloud

Official Domain 1 still sits on Design and implement core networking infrastructure. Official Domain 1 names Monitor networks as the last skill group: Network Watcher, Azure Monitor for Networks, DDoS, and Defender fo...

Enroll to Access

Module 2: Domain 2: Connectivity Services

10 lessons

2.1 VPN Gateway SKUs and Creating the Gateway

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Select an appropriate virtual network gateway stock-keeping unit (SKU) for site-to-site VPN requirements and...

Enroll to Access

2.2 Site-to-Site VPN and Local Network Gateway

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Design a site-to-site VPN connection, including for high availability, Identify when to use a policy-based V...

Enroll to Access

2.3 IPsec IKE Policies and Azure Extended Network

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Create and configure an IPsec/Internet Key Exchange (IKE) policy, Diagnose and resolve virtual network gatew...

Enroll to Access

2.4 Point-to-Site Tunnel Types and SKU Scale

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Select an appropriate virtual network gateway SKU for point-to-site VPN requirements and Select and configur...

Enroll to Access

2.5 Point-to-Site Authentication, Always On, and Network Adapter

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Select an appropriate authentication method, Configure RADIUS authentication, Configure authentication by us...

Enroll to Access

2.6 ExpressRoute Connectivity Models, SKUs, and Direct

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Select an ExpressRoute connectivity model, Select an appropriate ExpressRoute SKU and tier, Design and imple...

Enroll to Access

2.7 ExpressRoute Private Peering, Microsoft Peering, and BFD

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Choose between private peering and Microsoft peering, Advertise BGP prefixes, and Configure Bidirectional Fo...

Enroll to Access

2.8 ExpressRoute Global Reach, FastPath, and Encryption

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Design and implement ExpressRoute to meet requirements, including cross-region connectivity, redundancy, and...

Enroll to Access

2.9 Virtual WAN SKUs, Hubs, and Scale Units

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Select a Virtual WAN SKU, Design a Virtual WAN architecture, including selecting the correct SKU and scale u...

Enroll to Access

2.10 Virtual WAN Hub Routing and NVAs

Official Domain 2 still sits on Design, implement, and manage connectivity services. Official Domain 2 names Design a Virtual WAN architecture, Configure virtual hub routing, and Deploy a network virtual appliance in...

Enroll to Access

Module 3: Domain 3: Application Delivery Services

10 lessons

3.1 Load Balancer SKUs Tiers and Public vs Internal

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Map requirements to features and capabilities of Azure Load Balancer, Identify appropriate use cases for Azur...

Enroll to Access

3.2 Regional and Cross-Region Load Balancer

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Choose between regional and cross-region load balancers and Create and configure an Azure Load Balancer after...

Enroll to Access

3.3 Load-Balancing Rules and Inbound NAT

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Implement a load balancing rule and Create and configure inbound NAT rules. Lesson 3.1 created the Standard o...

Enroll to Access

3.4 Outbound Rules and SNAT

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Create and configure explicit outbound rules, including source network address translation (SNAT). Lesson 3.1...

Enroll to Access

3.5 Gateway Load Balancer

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Implement Gateway Load Balancer after the Standard public and internal objects in lesson 3.1. This lesson is...

Enroll to Access

3.6 Azure Traffic Manager

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Implement Azure Traffic Manager in the same skill group as Load Balancer. This lesson is the DNS map. Traffic...

Enroll to Access

3.7 Application Gateway Scale, Pools, Probes, and Listeners

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Map requirements to features and capabilities of Azure Application Gateway, Identify appropriate use cases, C...

Enroll to Access

3.8 Application Gateway Routing, HTTP Settings, TLS, and Rewrite

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Configure routing rules, Configure HTTP settings, Configure Transport Layer Security (TLS), and Configure rew...

Enroll to Access

3.9 Azure Front Door Tiers, Routes, Origins, and TLS

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names Azure Front Door, choose a SKU, configure routing, configure an origin group, and configure TLS. Lesson 3.7 a...

Enroll to Access

3.10 Front Door Cache, Acceleration, Rules, and Private Link

Official Domain 3 still sits on Design and implement application delivery services. Official Domain 3 names caching, traffic acceleration, rule sets, and a Private Link origin on Azure Front Door. Lesson 3.9 created t...

Enroll to Access

Module 4: Domain 4: Private Access to Azure Services

10 lessons

4.1 Plan Private Endpoints

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Plan private endpoints. This lesson is the placement decision before anyone clicks Create. Lesson 1.2 alre...

Enroll to Access

4.2 Create Private Endpoints

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Create private endpoints. Lesson 4.1 already picked the resource, the subresource, the subnet, and the app...

Enroll to Access

4.3 Configure Access to Private Endpoints

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Configure access to private endpoints. Lesson 4.2 left an Approved or Pending NIC in snet-pe. This lesson...

Enroll to Access

4.4 Create a Private Link Service

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Create a Private Link service. Lessons 4.1 through 4.3 were the consumer NIC against Azure PaaS. This less...

Enroll to Access

4.5 Integrate Private Link and Private Endpoint with DNS

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Integrate Private Link and Private Endpoint with DNS. Lessons 4.2 and 4.3 left an Approved NIC with a priv...

Enroll to Access

4.6 Integrate a Private Link Service with On-Premises Clients

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Integrate a Private Link service with on-premises clients. Lesson 4.4 published pls-app and mailed the ali...

Enroll to Access

4.7 Choose When to Use a Service Endpoint

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Choose when to use a service endpoint. Lessons 4.1 through 4.6 were the private IP path. This lesson is th...

Enroll to Access

4.8 Create Service Endpoints

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Create service endpoints. Lesson 4.7 already chose this path. This lesson is the subnet tick, the CLI, and...

Enroll to Access

4.9 Configure Service Endpoint Policies

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Configure service endpoint policies. Lesson 4.8 stamped Microsoft.Storage on snet-app. Without a policy, t...

Enroll to Access

4.10 Configure Access to Service Endpoints

Official Domain 4 still sits on Design and implement private access to Azure services. Official Domain 4 names Configure access to service endpoints. Lesson 4.8 ticked the subnet. Lesson 4.9 named the allowed storage...

Enroll to Access

Module 5: Domain 5: Azure Network Security Services

10 lessons

5.1 Create and Associate Network Security Groups

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Create a network security group and Associate a NSG to a subnet or network interface. Lesson 1.2 already re...

Enroll to Access

5.2 Create and Associate Application Security Groups

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Create an application security group and Associate an ASG to a network interface. Lesson 5.1 hung nsg-app o...

Enroll to Access

5.3 Create and Configure NSG Inbound and Outbound Rules

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Create and configure NSG inbound and outbound security rules. Lesson 5.1 left nsg-app on snet-app. Lesson 5...

Enroll to Access

5.4 Implement Virtual Network Flow Logs

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Implement virtual network flow logs. Lesson 1.10 already introduced the log and retired NSG flow logs on 30...

Enroll to Access

5.5 Interpret Flow Logs and Verify IP Flow

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Interpret virtual network flow logs and Verify IP flow. Lesson 5.4 left a JSON blob in stfloweastus. Lesson...

Enroll to Access

5.6 Configure NSG for Remote Administration including Azure Bastion

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Configure an NSG for remote server administration, including Azure Bastion. Lesson 1.2 already cut AzureBas...

Enroll to Access

5.7 Implement Virtual Network Security with Azure Virtual Network Manager

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Implement and manage virtual network security by using Azure Virtual Network Manager. Lesson 1.7 already gr...

Enroll to Access

5.8 Map Azure Firewall Features and Select a SKU

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Map requirements to features and capabilities of Azure Firewall, Select an appropriate Azure Firewall SKU,...

Enroll to Access

5.9 Configure Firewall Rules, Firewall Manager, and Secure Hubs

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Configure Azure Firewall rules, Create and implement Azure Firewall Manager policies, and Create a secure h...

Enroll to Access

5.10 Design and Implement a Web Application Firewall Deployment

Official Domain 5 still sits on Design and implement Azure network security services. Official Domain 5 names Map requirements to features and capabilities of WAF, Design a WAF deployment, Configure detection or preve...

Enroll to Access

Ready to Start Learning?

Enroll in [AZ-700] Azure Network Engineer Study Notes today and get instant access to all 50 lessons, hands-on projects, and expert support.

Enroll Now - It's Free!