EN简体繁體
Sign in
Home / Microsoft / AZ-700
Microsoft · AZ-700

AZ-700 Exam Practice Questions

Designing and Implementing Microsoft Azure Networking Solutions

AZ-700 English PDF practice questions: 387 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For network engineers implementing Azure networking, hybrid connectivity, application delivery, private access and security.

Exam code
AZ-700
Official exam / credential
Designing and Implementing Microsoft Azure Networking Solutions
Exam format
Proctored assessment; interactive items may be included
Exam duration
100 minutes
Official exam languages
English, German, Spanish, French, Italian, Japanese, Korean, Portuguese (Brazil), Simplified Chinese, Traditional Chinese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

387 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 11

Question#11Topic1

HOTSPOT -
You have the Azure environment shown in the exhibit.
Question illustration
You have virtual network peering between Vnet1 and Vnet2. You have virtual network peering between Vnet4 and Vnet5. The virtual network peering is configured as shown in the following table.
Question illustration
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:
Question illustration

Show answer and explanation

Answer

YYN

Explanation

Box 1: Yes -
Virtual network peering seamlessly connects two Azure virtual networks, merging the two virtual networks into one for connectivity purposes. Gateway transit is a peering property that lets one virtual network use the VPN gateway in the peered virtual network for cross-premises or VNet-to-VNet connectivity.
The following diagram shows how gateway transit works with virtual network peering.
Question illustration
In the diagram, gateway transit allows the peered virtual networks to use the Azure VPN gateway in Hub-RM. Connectivity available on the VPN gateway, including S2S, P2S, and VNet-to-VNet connections, applies to all three virtual networks.
In hub-and-spoke network architecture, gateway transit allows spoke virtual networks to share the VPN gateway in the hub, instead of deploying VPN gateways in every spoke virtual network.

Box 2: Yes -
VM2 uses the remote gateway GW1 to reach VM4.

Box 3: No -
VM2 can reach VM4 through GW1, but not VM5 as VNEt1 does not use remote Gateways.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-troubleshoot-peering-issues

Question 12

Question#12Topic1

HOTSPOT -
You have on-premises datacenters in New York and Seattle.
You have an Azure subscription that contains the ExpressRoute circuits shown in the following table.
Question illustration
You need to ensure that all the data sent between the datacenters is routed via the ExpressRoute circuits. The solution must minimize costs.
How should you configure the network? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Question illustration

Show answer and explanation

Answer

CB

Explanation

Box 1: Global Reach -
ExpressRoute Global Reach is the service where if you have two datacenters, which are located at different geo-locations and both are connected to Microsoft
Azure via Express Route then these two datacenters can also connect to each other securely via Microsoft's backbone.
Incorrect:
FastPath is designed to improve the data path performance between your on-premises network and your virtual network. When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.

Box 2: Private -
With ExpressRoute Global Reach, you can link ExpressRoute circuits together to make a private network between your on-premises networks.
Reference:
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-global-reach

Question 13

Question#13Topic1

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices.
In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.
You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.
Question illustration
You need to ensure that the on-premises network can connect to the route-based GW1.
What should you do before you create the connection?

  1. A. Set Connection Mode to ResponderOnly.
  2. B. Set BGP to Enabled.
  3. C. Set Use Azure Private IP Address to Enabled.
  4. D. Set IPsec / IKE policy to Custom.
Show answer and explanation

Answer

D

Explanation

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps

Question 14

Question#14Topic1

HOTSPOT
-

Your on-premises network contains a VPN device.

You have an Azure subscription that contains a virtual network and a virtual network gateway.

You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question illustration

Show answer

Answer

Question illustration

Question 15

Question#15Topic1

HOTSPOT
-

You have an Azure virtual network and an on-premises datacenter that connect by using a Site-to-Site VPN tunnel.

You need to ensure that all traffic from the virtual network to the internet is routed through the datacenter.

How should you complete the PowerShell script to configure forced tunneling? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question illustration

Show answer

Answer

Question illustration

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification