Build the core network
Plan address spaces and subnets, set up private and public DNS, and route traffic with peering, user-defined routes and Route Server.
Partners and press
Overview
Every Azure service sits on a network. This exam asks if you built that network well.
AZ-700 is an Associate exam for network engineers who plan and manage Azure virtual networks, hybrid links and security. Core infrastructure is the largest area, then VPN, ExpressRoute, Virtual WAN, Front Door, Private Link and firewalls. Microsoft expects Azure compute, storage and networking experience plus networking basics; the outline is dated 27 July 2026.
14Modules
100Minutes
1Year valid
7Roles
What it tests
Learn all the way down.
Learn all the way down.
Perform when it matters.
Connect to anywhere
Design site-to-site and point-to-site VPNs, ExpressRoute circuits and Virtual WAN hubs for hybrid and global links.
Deliver applications
Choose and configure Load Balancer, Traffic Manager, Application Gateway and Front Door for each workload.
Lock the network down
Use private endpoints, service endpoints, NSGs, Azure Firewall and WAF policies to control and inspect traffic.
Course outline
Plan, connect, deliver and protect
Plan, connect, deliver and protect
a network in Azure.
We design this course ourselves. Microsoft runs the exam and issues the credential, and LUNARTECH is independent of Microsoft.
A network is hard to re-address once it is running. You plan address spaces and subnets for growth and for hybrid connection, and choose a topology that suits the number of workloads and teams it must serve.
- Address space planning and avoiding overlap
- Subnet sizing and reserved addresses
- Hub-and-spoke and mesh topologies
- Delegated subnets and service subnets
- IPv6 and dual-stack basics
- Public IP addresses, prefixes and NAT Gateway
You build An address plan and topology diagram for a multi-region organization, with room to grow.
Names are what applications actually use. You host public zones in Azure DNS, run private zones for virtual networks, and design resolution between Azure and on premises.
- Public DNS zones and record types
- Private DNS zones and virtual network links
- Azure-provided resolution and custom DNS servers
- DNS Private Resolver and conditional forwarding
- Split-horizon designs
- Troubleshooting resolution failures
You build A name resolution design that resolves private names between a virtual network and on premises.
Traffic follows routes that Azure writes for you until you override them. You peer networks, read effective routes, steer traffic with user-defined routes, and exchange routes dynamically with Route Server.
- System routes and how Azure chooses a route
- Virtual network peering and transitivity
- User-defined routes and network virtual appliances
- Forced tunneling
- Azure Route Server and BGP
- Route tables and propagation
You build A hub-and-spoke network that routes spoke traffic through a virtual appliance with user-defined routes.
Network problems are found by looking at packets and paths. You use Network Watcher, connection monitoring and diagnostics to trace where traffic stops and to measure how a network behaves.
- Network Watcher tools overview
- IP flow verify and next hop
- Connection troubleshoot and connection monitor
- Packet capture
- Topology and effective rules
- Azure Monitor metrics for network resources
You build A diagnosis of three deliberately broken network paths using Network Watcher.
Site-to-site VPN connects an on-premises network to Azure over the internet. You design and configure gateways, tunnels and routing, and choose between static and BGP-based designs.
- VPN gateway SKUs and design
- IPsec and IKE parameters
- Local network gateways and connections
- BGP with VPN gateways
- Active-active and zone-redundant gateways
- Troubleshooting tunnels
You build A site-to-site VPN to a simulated on-premises network, with BGP and a tested failover.
Remote users need a secure way in. You configure point-to-site VPN with the right protocol and authentication, including certificates and Microsoft Entra ID, and manage client configuration.
- Tunnel types and client protocols
- Certificate authentication
- Microsoft Entra ID authentication
- Client configuration and distribution
- Routing and split tunneling
- Capacity and gateway sizing
You build A point-to-site VPN with Entra ID sign-in and a tested client profile.
ExpressRoute provides private, predictable connectivity. You choose circuit types and peering, design for resilience, and connect virtual networks while understanding how routes are exchanged.
- Providers, ports and circuit SKUs
- Private and Microsoft peering
- ExpressRoute gateways and connections
- Resilience: dual circuits and failover to VPN
- ExpressRoute Global Reach
- Route advertisement and BGP
- Monitoring and troubleshooting circuits
You build An ExpressRoute design with a VPN backup path, and the routing it produces.
Large, many-site networks need managed hubs. You build Virtual WAN hubs, connect branches, users and virtual networks, and use routing intent and secured hubs to control traffic.
- Virtual WAN types and hub design
- Connecting branches, users and virtual networks
- Hub routing and route tables
- Secured hubs and routing intent
- ExpressRoute and VPN in a Virtual WAN
- Migrating from hub-and-spoke to Virtual WAN
You build A Virtual WAN with two hubs, a branch and spokes, with routing between them.
Load balancing begins at the transport layer. You configure Azure Load Balancer for traffic inside and in front of a region, and use Traffic Manager to steer clients across regions with DNS.
- Load Balancer SKUs, frontends and backend pools
- Rules, health probes and session persistence
- Inbound NAT and outbound rules
- Cross-region load balancer
- Traffic Manager routing methods
- Choosing between the two
You build A load-balanced service in one region, steered across two regions with Traffic Manager.
Web traffic needs routing by content. You configure Application Gateway inside a region and Front Door across the world, with listeners, rules, TLS and caching, and decide which fits each application.
- Application Gateway listeners, rules and backend settings
- TLS termination and end-to-end TLS
- Path-based and host-based routing
- Front Door origins, routes and caching
- Health probes and failover
- Choosing between Application Gateway and Front Door
You build A web application published through Application Gateway and Front Door, with path-based routing.
Platform services need not be on the internet. You reach them over private endpoints and Private Link, compare them with service endpoints, and solve the DNS and routing issues that follow.
- Private endpoints and the Private Link service
- Private DNS integration
- Service endpoints and service endpoint policies
- Choosing between private and service endpoints
- Exposing your own service through Private Link
- Network policies and troubleshooting
You build Three platform services reached privately, with name resolution and routing verified.
Filtering at the subnet and network interface is the first line of network control. You write NSG and application security group rules, reason about rule priority, and log flows to see what the rules actually do.
- NSG rules, priorities and default rules
- Application security groups
- Effective security rules
- Virtual network flow logs
- Traffic analytics
- Rule hygiene at scale
You build A set of NSG rules for a three-tier application, checked against collected flow logs.
Central inspection protects traffic that simple rules cannot. You deploy Azure Firewall with policy and its rule types, add Web Application Firewall to web front ends, and tune both against false positives.
- Azure Firewall SKUs and deployment
- Network, application and DNAT rules
- Firewall policy and inheritance
- Threat intelligence and TLS inspection
- WAF policies on Application Gateway and Front Door
- Tuning rules and exclusions
You build A firewall policy for a hub network and a WAF policy protecting a web application, tested against sample attacks.
Assemble one network from every layer. You plan addressing, connect on premises, deliver an application, expose services privately, and secure it, then test failure and attack paths.
- Designing from requirements
- Building the core and the hybrid links
- Delivering and protecting applications
- Adding private access and inspection
- Testing failover and diagnosing faults
You build A documented hybrid network with application delivery, private access and layered security.
Issued by
Certifying body · Independent of LUNARTECH
Microsoft
Microsoft publishes its exam outlines and runs its certification program through Microsoft Learn. Exams are delivered through Pearson VUE, and Associate, Expert and Specialty credentials renew each year through a free, unproctored online assessment. LUNARTECH is independent of Microsoft.
How you get there
Top-tier roles go to people who can do the work.
Top-tier roles go to people who can do the work.
Here’s how you get there.
Know where you start.
Microsoft expects experience creating and managing compute, storage and networking resources in Azure, and a grasp of networking fundamentals: name resolution, protocols and address management.
Work through the course.
Fourteen modules, designed by LUNARTECH, at your own pace.
Sit it with Microsoft.
Microsoft runs the exam and issues the credential, so you register and book directly with them.
Support
Support at every stage.
Support at every stage.
You won’t be working through this alone.
Before you start
Try it first.
A 3-day free trial opens a selection of the content. Your card is only charged once it ends.
While you learn
Mentors within reach.
Stuck on a concept? Reach out to a mentor whenever you need help.
While you learn
One-on-one sessions.
On the yearly plan, one-on-one sessions give you dedicated support.
Any time
A team behind you.
Write to info@lunartech.ai at any point, from your trial onwards. If your employer is funding you, we’ll set it up with them directly.
All the way through
A schedule that fits around your life.
Your own paceFrom anywhereAt any hour
After the last lesson
Stay in the network.
Your alumni network stays with you: ongoing support, opportunities and industry insight.
Career support
Career support, past the last lesson. Coaching, a sharper resume, real interview preparation and the people to know.
Career direction
Tailored coaching helps you decide where to aim and how to get there.
Strong portfolio
Hands-on projects become work you can show, not just claim.
Resume and profile
Personalized refinement, so what you send says what you can actually do.
Interview preparation
Preparation for the questions that decide it, so you walk in ready.
Network and search
Connections with industry leaders, and an alumni network that stays with you.
Reviews
Real stories from the community.
LUNARTECH Academy has been the most empowering learning experience of my life, giving me a clear, structured path from the absolute basics to building real-world AI systems with confidence.
Your page is fantastic. As a bachelor’s student in Data Science now accepted for a master’s at UConn, your work has been a real source of motivation.
The programme’s clear, bite-sized content and practical projects dramatically improved my speed from fuzzy idea to MVP and my ability to communicate AI value. I followed the system, and it works.
I really appreciate your teaching style and the way you break down complex topics. It has been incredibly helpful.
After years working mainly with R for econometrics, I found your Python machine learning course a refreshing and engaging way to learn Python.
As a Data Science graduate, I want to thank you for the effort you put into making videos to support growing data scientists.
I’ve been following your work since taking your machine learning course, and I’m impressed by your practical approach to applying AI.
Why choose us
Built around how you actually learn.
One standard behind every course, from the first lesson to long after the last.
Hands-on practice
Apply every idea to real problems, so it becomes something you have used, not only seen.
Industry-aligned curriculum
We keep courses current with the tools, techniques and skills the field asks for.
Flexible learning
Study at your own pace, from anywhere, at any hour.
Certificate of completion
Finish the course and earn a certificate that shows what you have learned.
Focus on your success
Personalized learning plans and support structures carry you through the hard parts.
Lifetime alumni network
Stay connected after you finish, with ongoing support, opportunities and industry insight.
Your certificate
It doesn’t raise its voice. Neither will you.
Finish a LUNARTECH course and its certificate is issued in your name, under our signature. Microsoft’s credential comes from Microsoft, when you pass its exam.
Certificate of completion
Your Name
AZ-700 course
LUNARTECH RISE Academy
Pricing
This course comes with the membership.
This course comes with the membership.
So does everything else.
One membership opens every course, certification, workshop and masterclass in the Academy. Every plan starts with a 3-day free trial. You register and book the exam directly with Microsoft.
3 days free, then $29.97 a month. Your card is only charged once the trial ends.
Included in every plan
- Every course in the Academy
- Every certification course
- Workshops and masterclasses
- A certificate of completion
- A 3-day free trial
- Learning at your own pace
- The lifetime alumni network
- Upgrades at any time
In practice
Seven roles.
Seven roles.
One credential across them all.
No single job owns it. Here’s where each role leans hardest, and where its work ends up.
- 01Core network
- 02Connectivity
- 03App delivery
- 04Private access
- 05Network security
-
Address plans are hard to change later. Get subnets and routes right first.
Core network, Connectivity, Network security
Hybrid cloud networks, Enterprise IT, Telecommunications
-
Hybrid links set latency and failure modes. Choose VPN, ExpressRoute or Virtual WAN on purpose.
Connectivity, App delivery
Hybrid cloud networks, Financial services, Managed service providers
-
Private endpoints take services off the internet. Firewall and WAF rules inspect what remains.
Private access, Network security
Financial services, Enterprise IT
-
Every Azure workload needs addresses, routes and DNS. You build that base before anyone deploys on it.
Core network, Connectivity
Hybrid cloud networks, Enterprise IT
-
Firewalls and Private Link keep traffic off the open internet. Network design is where much of the exposure is set.
Network security, Private access
Financial services, Managed service providers
-
Hybrid links and app delivery are architecture decisions. Latency, resilience and reach all follow from them.
Connectivity, App delivery
Hybrid cloud networks, Financial services
-
Many outages start in routing, DNS or a load balancer. Core network skills shorten the search.
Core network, App delivery
Telecommunications, Enterprise IT
- Hybrid cloud networks
- Enterprise IT
- Financial services
- Telecommunications
- Managed service providers
Network Engineer
Address plans are hard to change later. Get subnets and routes right first.
Over 10,000 students trust LUNARTECH
LUNARTECH gives you the skills
to learn, build, create and lead.
Engineers
Understand systems all the way down. Build the ones others rely on.
Scientists
Understand what the data says. Build models that hold up.
Researchers
Understand the papers. Build on them, and take the work further.
The field
Anyone can use AI.
Anyone can use AI.
Few can engineer it. This is where that starts.
+340%growth in open roles requiring AI skills
Roles and pay
~35,000 open roles right now
Open roles: Built In, Greenhouse, LinkedIn.
Typical salaries: Glassdoor, Levels.fyi, Payscale, Indeed, Ravio, JobRise, U.S. BLS. Military: 2026 U.S. basic pay, drone officers with aviation incentive pay.
Updated November 2026.
FAQ
Frequently asked questions.
Need help? These answers cover most of what people ask before they start.
No. Microsoft issues it. LUNARTECH is independent of Microsoft, and its names and marks belong to it. When you finish a course of ours, you earn a LUNARTECH certificate of completion for that course.
No. We design this course ourselves, around what the exam covers. Microsoft has no part in it, and you still register and book the exam directly with Microsoft.
100 minutes, proctored, pearson vue, in English and 9 other languages. The passing score is 700 of 1000.
Microsoft expects experience creating and managing compute, storage and networking resources in Azure, and a grasp of networking fundamentals: name resolution, protocols and address management.
1 year. Pass a free online assessment on Microsoft Learn.
We last reviewed it on 5 November 2026, from Microsoft’s own pages. Details change, so check the official page before you book.
Our 3-day free trial gives you access to a selection of content in the bootcamps, courses and materials, so you can experience the value of our content first-hand. This includes comprehensive learning materials and interactive sessions. You won’t be charged during this period, though we require your credit card details at the start to ensure a seamless transition should you choose to continue.
Yes, entering your credit card details is a necessary step to begin your free trial. The process is entirely secure, and we ask for it to provide a seamless transition to a paid subscription if you decide to continue beyond the trial. You will only be charged after the trial period ends, with full access to our content based on the plan you choose.
After your 3-day free trial you gain access to the full breadth of our content, depending on the subscription plan you choose. We offer free trials for our monthly, bi-annual and annual plans, and each plan provides a different scope of access and benefits.
If your employer has agreed to fund your learning, in part or in full, please contact us at info@lunartech.ai. We’ll work with you and your employer to set up everything needed for your subscription.
Yes. Our support remains strong both during your free trial and after you subscribe. Reach the team at info@lunartech.ai with any question, whether you’re onboarding, navigating your trial, or need help as a member. Subscribers to the yearly plan also receive dedicated support in one-on-one sessions.
You can upgrade your plan at any time during your subscription. Downgrading is not available for bi-annual or annual plans, but you can cancel and then choose a new plan that suits you better. For bi-annual and annual plans we also offer payment in instalments; please reach out to learn more.
The course
Build the skills behind AZ-700.
Prove you can design and run networks in Azure. Start with a free trial, or enroll in a plan and work through the course at your own pace. Microsoft runs the exam and issues the credential.
LUNARTECH is independent of the vendors and certifying bodies listed here. Their names, exam titles and marks belong to them, exams are run by them, and credentials are issued by them. Reviewed 5 November 2026. Catalogues change often, so confirm the details on the official page before you book.
