AZ-700: Azure Network Engineer Certification Bootcamp

About this course

Build real, job-ready Azure networking skills while preparing to ace the AZ-700 exam. This hands-on bootcamp walks you from core foundations to advanced, production-grade architectures using the Azure Portal, CLI, and infrastructure-as-code. Every module maps to AZ-700 objectives and pairs clear theory with practical labs, diagrams, and troubleshooting playbooks so you can design, deploy, secure, and operate networks that scale.You’ll start with Azure networking fundamentals—VNets, subnets, IP addressing, and DNS—then move quickly into connectivity. We compare Site-to-Site vs. Point-to-Site VPNs, design high availability, and implement resilient tunnels with correct IPsec/IKE parameters and BGP. You’ll master ExpressRoute connectivity models, SKUs, peering options, Global Reach, and gateway deployment for predictable, private hybrid performance.Next, we tackle routing and traffic control: system routes, user-defined routes (UDRs), forced tunneling, Azure Route Server, and dynamic routing patterns that prevent blackholes and asymmetry. You’ll configure Azure Load Balancer (public/internal), inbound NAT, health probes, session persistence, and explicit outbound rules for controlled egress. At layer 7, you’ll build secure, high-performance application delivery with Application Gateway (including WAF), Azure Front Door, and Traffic Manager for global resiliency.Security is woven end-to-end. You’ll design with Azure Firewall and Firewall Manager, implement rule collections and DNAT/SNAT, and combine NSGs and Application Security Groups for least-privilege micro-segmentation. We go deep on monitoring: NSG Flow Logs, Traffic Analytics, metrics, logs, and Network Watcher tools (Connection Monitor, IP Flow Verify, packet capture) to diagnose latency, MTU, and routing issues fast.Private access gets first-class treatment. You’ll plan and deploy Private Link and private endpoints, compare with service endpoints, integrate DNS for split-horizon resolution, and enable fully private PaaS access f