Article
FREE AZ-700 Exam Guide 2026: 5 Domains, $165, Pass Score 700/1000
Key Facts
- AZ-700 has 40 to 60 questions delivered in 100 minutes of core exam time at Pearson VUE or online proctored (Microsoft Learn).
- AZ-700 requires a scaled score of 700 out of 1000 to pass, weighted by question difficulty rather than raw percentage (Microsoft Learn).
- AZ-700 costs $165 USD in the United States and is renewed free annually via a Microsoft Learn online assessment (Microsoft Learn).
- The February 22, 2026 AZ-700 outline retains 5 domains: core infra 25-30%, connectivity 20-25%, app delivery 15-20%, private access 10-15%, security 15-20% (Microsoft Learn).
- Azure Virtual WAN Standard supports hub-to-hub transit, ExpressRoute, S2S, P2S, and Routing Intent; Basic supports only S2S VPN (Microsoft Learn).
- ExpressRoute Standard supports up to 4,000 BGP routes per peering; Premium raises the limit to 10,000 routes (Microsoft Learn).
- Private Endpoint provides per-resource isolation with a private IP in your VNet at $0.01 per hour plus data; Service Endpoint is free but keeps the public endpoint (Microsoft Learn).
- Azure Firewall Premium adds TLS inspection, IDPS, URL filtering, and web categories beyond the Standard SKU (Microsoft Learn).
- AZ-700 retakes require 24 hours after first fail, 14 days between subsequent attempts, and a maximum of 5 attempts per 12 months (Microsoft Learn retake policy).
AZ-700 Exam 2026: Your Complete Azure Network Engineer Guide
The Microsoft AZ-700: Designing and Implementing Microsoft Azure Networking Solutions exam is the single requirement to earn the Azure Network Engineer Associate badge. It validates that you can plan, deploy, secure, monitor, and troubleshoot Azure networks across virtual networks, hybrid connectivity (S2S, P2S, ExpressRoute, Virtual WAN), application delivery (Load Balancer, Application Gateway, Front Door), private access (Private Link, Private Endpoint, Service Endpoints), and network security (NSG, ASG, Azure Firewall, WAF).
The February 22, 2026 skills outline still keeps the same five domains, but every functional group received "minor" updates that rolled in Azure Virtual Network Manager as the recommended way to manage VNet topology and security at scale, Microsoft Defender for Cloud Security Explorer as a network monitoring tool, and Azure Front Door tier selection (Standard, Premium, Classic) as an explicit objective.
Where most competitor blogs fall short: they list services without telling you when to choose each . This guide leads with the decision matrices that the AZ-700 case study tests — hub-spoke vs Virtual WAN, Private Link vs Service Endpoint, ExpressRoute SKU and tier, BGP vs UDR, NVA vs Azure Firewall — and adds a 6-week FREE study plan tuned to the 2026 outline.