Az-700: Azure Network Engineer Certification Bootcamp

Master VNets, VPNs, ExpressRoute, load balancing & security to pass AZ-700 and build resilient Azure networks.

What you'll learn

Master core Azure networking: VNets, subnets, IP addressing, DNS design and governance.

Design and implement secure connectivity: Site-to-Site/Point-to-Site VPN, ExpressRoute, and Virtual WAN.

Configure traffic management and load balancing with Azure Load Balancer, Application Gateway, Front Door, and Traffic Manager.

Harden networks with Azure Firewall, NSGs, and WAF; apply Zero Trust, segmentation, and policy-driven access controls.

Deliver private access to PaaS via Private Link, private endpoints, NAT Gateway, and service endpoints—integrated with DNS.

Monitor and troubleshoot routing, connectivity, and performance using Network Watcher, logs, metrics—and prepare for the AZ-700 exam.

Requirements

Basic networking (TCP/IP, routing, DNS)

Azure subscription (Contributor+)

Comfort with Azure Portal + CLI/PowerShell

Description

Build real, job-ready Azure networking skills while preparing to ace the AZ-700 exam. This hands-on bootcamp walks you from core foundations to advanced, production-grade architectures using the Azure Portal, CLI, and infrastructure-as-code. Every module maps to AZ-700 objectives and pairs clear theory with practical labs, diagrams, and troubleshooting playbooks so you can design, deploy, secure, and operate networks that scale.You’ll start with Azure networking fundamentals—VNets, subnets, IP addressing, and DNS—then move quickly into connectivity. We compare Site-to-Site vs. Point-to-Site VPNs, design high availability, and implement resilient tunnels with correct IPsec/IKE parameters and BGP. You’ll master ExpressRoute connectivity models, SKUs, peering options, Global Reach, and gateway deployment for predictable, private hybrid performance.Next, we tackle routing and traffic control: system routes, user-defined routes (UDRs), forced tunneling, Azure Route Server, and dynamic routing patterns that prevent blackholes and asymmetry. You’ll configure Azure Load Balancer (public/internal), inbound NAT, health probes, session persistence, and explicit outbound rules for controlled egress. At layer 7, you’ll build secure, high-performance application delivery with Application Gateway (including WAF), Azure Front Door, and Traffic Manager for global resiliency.Security is woven end-to-end. You’ll design with Azure Firewall and Firewall Manager, implement rule collections and DNAT/SNAT, and combine NSGs and Application Security Groups for least-privilege micro-segmentation. We go deep on monitoring: NSG Flow Logs, Traffic Analytics, metrics, logs, and Network Watcher tools (Connection Monitor, IP Flow Verify, packet capture) to diagnose latency, MTU, and routing issues fast.Private access gets first-class treatment. You’ll plan and deploy Private Link and private endpoints, compare with service endpoints, integrate DNS for split-horizon resolution, and enable fully private PaaS access from on-prem via VPN/ExpressRoute. We’ll also cover NAT Gateway for scalable, predictable outbound connectivity.Throughout, you’ll use battle-tested checklists, decision trees, and templates to accelerate real deployments—plus quiz questions and exam-style scenarios to lock in AZ-700 readiness.By the end, you’ll be able to:Design secure hub-and-spoke or Virtual WAN architectures.Implement VPN, ExpressRoute, and private access with correct routing/DNS.Configure load balancing at L4/L7 and engineer traffic for scale and resiliency.Harden networks with Firewall, NSGs, WAF, and Zero Trust segmentation.Monitor, troubleshoot, and optimize performance using Azure’s native tooling.Prereqs: basic networking (TCP/IP, routing, DNS), an Azure subscription, and comfort with Portal/CLI/PowerShell. If you want practical Azure networking skills and a clear path to passing AZ-700, this course is for you.

Overview

Section 1: Course Introduction

Lecture 1 Introduction

Section 2: Module 1: AZ-700: Azure Network Engineer Associate—Course Kickoff

Lecture 2 Introduction to AZ-700 Certification and Cloud Networking Fundamentals

Lecture 3 Exploring Azure Virtual Networks

Lecture 4 Configuring Public IP Services in Azure

Lecture 5 Implementing Domain Name Services (DNS) in Azure

Lecture 6 Designing Cross-Virtual Network Connectivity with Peering

Lecture 7 Routing and Traffic Management in Azure Virtual Networks

Lecture 8 Implementing Internet Access with Azure Virtual Network NAT

Section 3: Module 2: Configure Azure VPNs: Site-to-Site & Point-to-Site

Lecture 9 Introduction to VPN Connections: Site-to-Site vs. Point-to-Site

Lecture 10 Designing High Availability for Site-to-Site VPN Connections

Lecture 11 Implementing Site-to-Site VPN Connections in Azure

Lecture 12 Troubleshooting Site-to-Site VPN Connectivity Issues

Lecture 13 Designing and Planning Point-to-Site VPN Connections

Lecture 14 Implementing Authentication for Point-to-Site VPN Connections

Lecture 15 Troubleshooting and Optimizing Point-to-Site VPN Connections

Section 4: Module 3: Azure ExpressRoute: Design, Deployment & Operations

Lecture 16 Introduction to Azure ExpressRoute and Module Overview

Lecture 17 Azure ExpressRoute Connectivity Models and Deployment Options

Lecture 18 Designing ExpressRoute Global Reach and Cross-Region Connectivity

Lecture 19 ExpressRoute Peering: Private and Microsoft Peering Configurations

Lecture 20 Deploying ExpressRoute Gateway and Connecting Virtual Networks

Lecture 21 Advanced ExpressRoute Features: FastPath, Encryption, and BFD

Lecture 22 Troubleshooting, Diagnostics, and Best Practices for ExpressRoute

Section 5: Module 4: Core Networking: Private IP Addressing & Azure DNS

Lecture 23 Foundations of Private IP Addressing and VNets

Lecture 24 Creating and Configuring Virtual Networks (VNets)

Lecture 25 Designing and Configuring Subnetting for Core Services

Lecture 26 Implementing Subnet Delegation and Azure Route Server Configuration

Lecture 27 Designing Name Resolution Strategies in Azure

Lecture 28 Best Practices, Governance, and Troubleshooting in Networking Infrastructure

Section 6: Module 5: Azure Virtual WAN & Core Network Architecture

Lecture 29 Introduction to Azure Core Networking and Virtual WAN Concepts

Lecture 30 Designing Cross-VNet Connectivity and VNet Peering

Lecture 31 Service Chaining and Gateway Transit Strategies

Lecture 32 Implementing VPN Connectivity Between VNets

Lecture 33 Designing Azure Virtual WAN Architecture

Lecture 34 Deploying Virtual WAN Components: Hubs, VNet Gateways, and NVAs

Lecture 35 Configuring Virtual Hub Routing and Network Optimization

Section 7: Module 6: VNet Routing & Azure Load Balancer: Design and Deploy

Lecture 36 Introduction to VNet Routing and Core Concepts

Lecture 37 Design and Implementation of User-Defined Routes (UDRs)

Lecture 38 Advanced VNet Routing: Diagnostics and Azure Route Server

Lecture 39 Introduction to Azure Load Balancer Concepts and SKUs

Lecture 40 Configuring Azure Load Balancer and Inbound NAT Rules

Lecture 41 Implementing Advanced Load Balancing and Explicit Outbound Rules

Lecture 42 Integration, Best Practices, and Troubleshooting

Section 8: Module 7: App Delivery: Application Gateway, Front Door & NAT Gateway

Lecture 43 Overview and Deployment Strategies of Azure Application Gateway

Lecture 44 Implementing Azure Application Gateway: Configuration Essentials

Lecture 45 Implementing Azure Front Door: Setup, Configuration, and Best Practices

Lecture 46 Implementing Azure Traffic Manager: Dynamic Routing Strategies

Lecture 47 Design and Deployment of Azure Virtual Network NAT

Section 9: Module 8: Azure Firewall & NSGs: Secure Network Design and Management

Lecture 48 Introduction to Azure Firewall and NSG Concepts

Lecture 49 Designing Your Azure Firewall Deployment

Lecture 50 Deploying and Configuring Azure Firewall

Lecture 51 Managing Azure Firewall Policies and Integrations

Lecture 52 Implementing NSGs: Creation, Association, and ASGs

Lecture 53 Configuring NSG Rules and Analyzing Flow Logs

Lecture 54 NSG Validation, Troubleshooting, and Best Practices

Section 10: Module 9: Azure WAF & Network Monitoring: Design and Implementation

Lecture 55 Introduction to Azure Web Application Firewall and Network Security

Lecture 56 Designing an Azure Firewall Deployment

Lecture 57 Implementing Azure Firewall Deployment

Lecture 58 Configuring Firewall Rules and Azure Firewall Manager Policies

Lecture 59 Implementing and Managing NSGs and ASGs

Lecture 60 Monitoring Networks with NSG Flow Logs and IP Flow Verification

Lecture 61 Integrating Azure Virtual WAN and Third-Party NVAs for Secure Hubs

Section 11: Module 10: Private Access to Azure Services: Design & Deployment

Lecture 62 Introduction to Private Access in Azure Services

Lecture 63 Designing and Implementing Azure Private Link Services

Lecture 64 Creating and Configuring Private Endpoints

Lecture 65 Implementing Service Endpoints and Policies

Lecture 66 VNet Integration for Dedicated PaaS Services

Lecture 67 Deployment Best Practices and Troubleshooting

Section 12: Course Outro & Next Steps

Lecture 68 Course Outro & Next Steps

Aspiring Azure Network Engineers targeting the AZ-700 certification.,Cloud Administrators migrating or managing enterprise Azure networking.,Security Engineers designing Zero Trust with Firewall, NSGs, and WAF.,Solutions Architects building scalable hybrid and multi-region networks.,DevOps/SRE teams optimizing connectivity, routing, and app delivery.