ciply.io

Microsoft · Associate · AZ-700

AZ-700 Practice Exams & Study Guide

523 original practice questions across all five AZ-700 domains — every answer explained and backed by official Microsoft documentation. No dumps, no recycled braindumps: the link to that documentation sits under every answer, so you can check any of it yourself.

Prepares you for Designing and Implementing Microsoft Azure Networking Solutions Exam (AZ-700)Matches Microsoft's current AZ-700 objectives (27 July 2026)Microsoft's outline →
523
original questions
108
drag-and-drop & hotspot items
100%
questions with an official source link

Everything in this pack

  • 523 original questions, written from official Microsoft documentation
  • All four question formatssingle answer, multi-select, drag-and-drop, hotspot
  • 3 practice modesExam, Review, Domain practice
  • A weak-area report after every session, scored by official domain
  • The designed AZ-700 Study Guide and Quick Recap card deck (PDF, in the bundle)
  • Every answer linked to the exact official page behind it
  • 16 free to try right now — no card needed
  • 12 months of access, including every content update we publish in that time
  • Runs in your browser — nothing to install, no player to configure

Coverage follows the official AZ-700 blueprint

Official domainExam weightOur questions
Design and implement core networking infrastructure2530%147
Design, implement, and manage connectivity services2025%128
Design and implement application delivery services1520%102
Design and implement private access to Azure services1015%53
Design and implement Azure network security services1520%93

Weights from Microsoft's current Skills Measured outline for AZ-700, dated 27 July 2026. Question counts follow the blueprint — never padded to hit a number.

What you'll be able to do

  • Work through every domain of the AZ-700 blueprint, in the official weighting
  • Find your weak domains before the exam does — every session scores you by domain and unit
  • Handle all four question formats under time, including drag-and-drop and hotspot
  • Explain why an answer is right, not just which one it is — and check it against the official page

Judge the quality yourself

Sample question 1

A hub-and-spoke connectivity configuration has two spoke network groups, Production and Test. Direct connectivity is enabled for Production only. What connectivity results?

  • a.Every spoke reaches the hub; Production spokes also reach one another; Test spokes reach neither each other nor the Production spokes✓ correct
  • b.Every spoke reaches the hub and every other spoke, because one configuration covers them all
  • c.Production spokes reach one another but lose their path to the hub
  • d.Test spokes reach one another through the hub, while Production spokes reach one another directly
Why A: (A) is correct. The hub-and-spoke part of the configuration connects the hub to all spokes in both groups, and that is unaffected by the direct-connectivity setting. Direct connectivity adds spoke-to-spoke communication, and it is scoped to the single network group you enable it for. Production members can therefore talk to each other; Test members cannot, and nothing reaches across from one group to the other. Effective routes make the two mechanisms visible: hub-to-spoke routes carry a next hop type of VNetPeering or GlobalVNetPeering, while the routes between Production spokes read ConnectedGroup, because enabling direct connectivity built a connected group over that group. (B) is the assumption that one configuration means one flat network. (C) invents a trade-off that does not exist. (D) gives Test the connectivity it was not granted; a spoke group without direct connectivity has no path between its own members. The reason to enable it at all is performance — trusted spokes talk directly instead of taking the extra hop through the hub.
Sample question 2

Your hub learns 172.20.0.0/16 twice: once from an ExpressRoute gateway and once from an SD-WAN appliance. The prefix length is identical on both. Which path does the route server select, and how can that choice be changed?

  • a.The appliance path, because routes from a peer outrank routes from a gateway; the order is fixed
  • b.Both paths, load balanced; a user-defined route is needed to force one of them
  • c.The ExpressRoute path by default; the routing preference setting changes it✓ correct
  • d.The path whose AS path is longer; only AS path prepending changes it
Why C: (C) is correct. Selection runs in a fixed order. The most specific prefix wins first, so a longer mask always beats a shorter one whatever else is configured. Where two candidates carry the same prefix length — the case in this scenario — the routing preference setting decides, and BGP attributes settle anything still open. The setting offers three values. ExpressRoute preference is the default and favours what the ExpressRoute gateway advertises. VPN preference favours what VPN gateways and appliances advertise, and it does not separate those two sources, so a prefix learned from both is settled on AS path length. AS Path preference ignores where a route came from and compares AS path length directly. One failover caution applies to the default: after an ExpressRoute outage clears, traffic may stay on the backup path, so prepend the backup's AS path to make it less attractive. (A) reverses the default. (B) offers a remedy the service does not need, because a preference setting decides between two sources rather than a user-defined route. (D) inverts BGP, which prefers the shorter AS path.

Every explanation names why the right answer is right and what each wrong option actually refers to — that's the standard across all 523 questions. Try 16 of them free →

Look inside the AZ-700 Study Guide

The real opening of Chapter 1 — how the whole guide teaches. The full guide continues like this, chapter by chapter, with original diagrams and verified questions woven in.

Chapter 1 · free excerpt

The Address Space You Cannot Take Back

A virtual network begins with one decision: which block of addresses it owns. That decision takes a minute to make and a year to undo. Every peering, every VPN tunnel and every route you add later has to live with it. This chapter teaches the decision properly. It covers the ranges Azure accepts and the ones it refuses. It covers the arithmetic of a subnet, and the addresses you never get to use. It covers the subnets Azure names for you and will not deploy without, and what changes when you hand a subnet to a platform service. Get this chapter right and the rest of the exam is about traffic. Get it wrong and the rest of the exam is about migrations.

A virtual network is the private network your Azure resources live in. It gives them a way to talk to each other, to the internet, and to your on-premises estate, and it does that on addresses you choose rather than addresses Azure assigns. The choice is written in CIDR notation — a base address and a prefix length, such as 10.20.0.0/16 — and it defines the whole pool the network may hand out. Everything in the chapters that follow is traffic moving between resources inside such a pool, or across the boundary of one.
Microsoft frames virtual network design as a short list of things to consider before you build. The one that costs most to get wrong comes first: ensure nonoverlapping address spaces, so your block does not collide with any other network range your organization uses. The rest ask what the design has to accommodate. Whether security isolation is required, and separately whether administrative isolation is. Whether you need to work around IP addressing limitations. Whether the estate will carry connections between Azure virtual networks and on-premises networks. And whether you are adopting any Azure service that creates a virtual network of its own.

Mental model

Think of the address space as a street-numbering scheme for a town you are about to build. Choosing 10.20.0.0/16 is choosing which numbers exist. You can lay the streets out differently later. You can knock houses down and rebuild them. What gets harder is renumbering once the town is connected to its neighbours. Azure refuses a subnet change while gateways, gateway connections, IP addresses, peerings or an App Service Environment still hold the range — five kinds of attachment, and the one people forget is the plain IP address. The range is freely changeable only while nothing is deployed in it. So the question to ask before typing a range is not whether it fits today. It is what will be attached to it by the time you want to change it.
SUBNET NAME REQUIRED BY FLOOR THE EXCEPTIONGatewaySubnetVPN gateways (ExpressRoute: Ch9)/27 or larger/29 on the Basic SKU onlyAzureBastionSubnetAzure Bastion/26 or larger/27 before 2 Nov 2021, still runningAzureFirewallSubnetAzure Firewall/26no smaller option(your choice)Application Gatewayno other typeother app gateways MAY share it
Figure 1.1 — Three subnets you do not get to name, and one you do. The exception column is where the exam questions live.

Worked example

Sizing a hub before you create it. A hub virtual network has to hold a VPN gateway, Azure Bastion, Azure Firewall, and a small subnet for two management servers. Work from the floors, not from the workload. The VPN gateway wants /27 on any SKU but Basic. Bastion wants /26. The firewall wants /26. The management pair looks like a /29 until you remember that five reserved addresses leave three usable. That is two servers with one spare, and nothing for the third server somebody adds in March. Take a /28. Now add them up honestly: 64 plus 64 plus 32 plus 16 is 176 addresses, and a /24 carries 256. Laid out so the boundaries align — .0/26, .64/26, .128/27, .160/28 — all four fit inside a /24 with 80 addresses spare, contiguous as a free /28 and a free /26. A /24 is the right answer here, with room left for the subnet nobody has asked for yet. The lesson is the order of operations: the named services set the floor, the workload takes what remains, and you check the sum rather than trusting the feel of it.

Excerpt ends here — the full chapter continues with the five workloads in depth, exam traps, and verified practice questions.

Quick Recap — two of the AZ-700 cards

A landscape card deck for last-mile review, ending in a Cram Sheet. One chapter card and one of the four Cram Sheet cards:

Chapter card

The subnets Azure names for you

SUBNET NAME REQUIRED BY FLOOR THE EXCEPTIONGatewaySubnetVPN gateways (ExpressRoute: Ch9)/27 or larger/29 on the Basic SKU onlyAzureBastionSubnetAzure Bastion/26 or larger/27 before 2 Nov 2021, still runningAzureFirewallSubnetAzure Firewall/26no smaller option(your choice)Application Gatewayno other typeother app gateways MAY share it
Four services need a subnet with an exact name and a size floor. Getting the name wrong is not a warning — the deployment simply refuses.

Cram sheet · 1 of 4

Must-memorize numbers

5
addresses Azure reserves in every subnet (Ch 1)
/29
smallest IPv4 subnet — 3 usable addresses (Ch 1)
/28–/31
the four Azure-owned public IP prefix sizes (Ch 2)
500
peerings per virtual network, by default (Ch 4)
/24 · /23 · /22
Virtual WAN hub: minimum · recommended · with Azure Firewall (Ch 10)
64,000
SNAT flows per frontend public IP, allocated in multiples of 8 (Ch 11)
20 s
Application Gateway request timeout default (Ch 13)
30 / 30 / 3
App Gateway default probe → 120 s to detection (Ch 13)
100–4096
NSG rule priority range; first match wins (Ch 16)
15
public IP resources — the DDoS IP vs Network Protection line (Ch 21)

What the designed PDFs look like

Real pages from the files you download — the polish is part of what you're paying for.

AZ-700 Study Guide — real pageAZ-700 Quick Recap — real card

Simple pricing, 12 months of access

Practice Exams

$10.90launch price · 12-month access
  • 523 original questions across all 5 official domains
  • All four question formats: single, multi-select, drag-and-drop, hotspot
  • Exam, Review and Section modes with a weak-area report
  • Every answer explained and linked to the official Microsoft page behind it
Best value — save $3.90

Complete Bundle

$13.90launch price · 12-month access
  • Everything in Practice Exams
  • The designed AZ-700 Study Guide (PDF), taught in learning order
  • The Quick Recap card deck for last-mile review
  • One purchase, complete preparation
  • See what's inside ↓

Study Guide + Quick Recap

$6.90launch price · 12-month access
  • Designed AZ-700 Study Guide (PDF) with original diagrams
  • Quick Recap card deck ending in a cram sheet
  • Plain-English teaching around precise exam terms
  • See what's inside ↓

Secure checkout by Stripe · VAT handled · instant access

Introductory launch pricing. The regular price applies after our launch window. Prices shown in USD; local currency and tax shown at checkout.

Who this is for

  • Anyone sitting AZ-700 for the first time and wanting the blueprint covered, not sampled
  • Retakers who need to find the gap that cost them, rather than re-reading everything
  • Practitioners stepping up from fundamentals to a role-based certification
  • Anyone who wants to check an answer against the official documentation instead of trusting it

Who it isn't for

  • Anyone looking for the live exam's actual questions. We don't have them, and nobody should be selling them to you — using them puts your certification at risk and teaches you nothing.
  • Anyone who wants to pass without understanding the material. Every answer here comes with the reasoning and the source, which is slower than memorising and the entire point.

Questions people ask before buying

Are these AZ-700 exam dumps?
No. Every question is original — built on the official exam blueprint and backed by free, public, official Microsoft documentation, with every answer linked to the exact official page behind it. We never use braindumps, leaked questions, or paywalled material. If you are looking for the live exam's actual questions, we do not have them, and we would not sell them.
How long do I have access?
12 months from purchase, including all content updates during that time — certification content changes, so we keep it current rather than promising a hollow 'lifetime'. PDFs you download during that period stay yours to keep.
Can I try before buying?
Yes — 16 questions from this bank are free with a free account, in the same player you would use after purchase. Full sample questions with their explanations are also printed on this page.
What kinds of questions are included?
The bank has 523 questions across all four formats: single answer, multi-select, drag-and-drop, hotspot.
What happens when Microsoft updates the AZ-700 exam?
We re-check the bank against the new Skills Measured outline and update the questions that need it, then republish. Updates during your 12 months are included at no extra cost. We date our claim against Microsoft's published outline rather than simply saying the pack was "recently updated", so you can check the correspondence yourself.
Can I get a refund?
Yes, before you access what you bought. Because these are digital products delivered immediately, opening a paid question bank or downloading a purchased PDF ends the statutory 14-day withdrawal right — until you do, it is intact. We also refund genuine cases such as a technical failure we cannot fix. The full detail, including exactly what counts as access, is in our Refund Policy.

Full detail: Refund Policy · Terms · How we build content

The no-dumps promise

Braindump sites recycle stolen exam content — using them risks your certification and teaches you nothing. Every ciply.io question is original: built on the official exam blueprint, backed by official Microsoft documentation, and every answer links the exact page behind it — so you learn why it's right. How we build content →

Every question in this pack maps to Microsoft's published Skills Measured outline for AZ-700 — the current outline, dated 27 July 2026. When Microsoft revises it, we re-diff the bank against the new outline. Read Microsoft's outline →

ciply.io is an independent study resource and is not affiliated with, authorized, sponsored, or endorsed by Microsoft. Designing and Implementing Microsoft Azure Networking Solutions Exam, AZ-700, and related names are trademarks of their respective owners.