AZ-700 Azure Network Engineer Bootcamp
Bootcamp Certificate Track
Hands-on networking labs and real-world hybrid connectivity scenarios. Estimated effort: 60–90 hours.
🔗 Official Certification PageWho This Is For?
- Azure administrators looking to specialize in networking
- Network engineers transitioning to cloud
- Cloud engineers wanting deeper networking expertise
What You'll Achieve
- Design and implement Azure networking solutions
- Confidence managing hybrid and multi-cloud connectivity
- Pass the AZ-700 certification exam
Start Date
Rolling Enrollment
New cohorts start every month
Duration
5 Weeks
Intensive networking training
Instructor
CloudeGree Academy
Learn from industry-expert network engineers with years of real-world Azure networking experience. Our academy provides hands-on, exam-focused training designed to get you certified faster.
What You'll Learn
Core Networking Infrastructure
VNets, IP addressing, DNS, peering, UDRs, NAT Gateway, and network monitoring (25–30%)
Connectivity Services
Site-to-site VPN, point-to-site VPN, ExpressRoute, and Virtual WAN (20–25%)
Application Delivery
Load Balancer, Traffic Manager, Application Gateway, and Front Door (15–20%)
Private Access
Private Link, Private Endpoints, service endpoints, and DNS integration (10–15%)
Network Security Services
NSGs, ASGs, Azure Firewall, Firewall Manager, and WAF (15–20%)
Full Curriculum Outline (Exam-Aligned)
Comprehensive coverage of all AZ-700 exam objectives with hands-on practice
5-Week Bootcamp Curriculum
Intensive networking training with hands-on labs and real-world scenarios
Week 1 - Core Networking Infrastructure
Skills Area: Design and implement core networking infrastructure (25–30%)
What You'll Learn
- Plan and implement network segmentation, address spaces, and subnetting for services (gateways, private endpoints, firewalls, Application Gateway, Bastion)
- Create VNets, configure subnet delegation, shared/dedicated subnets, and public IP prefixes (including bring your own IP)
- Design name resolution inside a VNet: public and private DNS zones, link private DNS to VNet, Azure DNS Private Resolver
- Implement VNet peering, service chaining with gateway transit, and Azure Virtual Network Manager
- Design and implement UDRs, forced tunneling, Azure Route Server, and NAT Gateway
- Configure Azure Network Watcher: diagnostics, logs, Azure Monitor for Networks, DDoS protection monitoring
- Evaluate network security recommendations in Microsoft Defender for Cloud (Secure Score, attack paths, Security Explorer)
Hands-On Labs
- Create and configure VNets with multiple subnets and subnet delegation
- Implement Azure DNS Private Resolver and link private DNS zones to VNets
- Configure VNet peering with gateway transit and UDRs
- Deploy NAT Gateway and diagnose routing with Network Watcher
Week 2 - Connectivity Services: VPN & ExpressRoute
Skills Area: Design, implement, and manage connectivity services (20–25%)
What You'll Learn
- Design site-to-site VPN for high availability: select gateway SKU, policy-based vs route-based, local network gateway, IPsec/IKE policies
- Design point-to-site VPN: tunnel types, RADIUS authentication, Microsoft Entra ID authentication, VPN client configuration, Always On VPN
- Design and implement Azure ExpressRoute: connectivity models, SKU/tier, cross-region connectivity, redundancy, disaster recovery
- Configure ExpressRoute options: Global Reach, FastPath, ExpressRoute Direct, private peering, Microsoft peering
- Create ExpressRoute gateways, connect VNets to circuits, configure route advertisement, encryption, and Bidirectional Forwarding Detection
- Design Azure Virtual WAN: select SKU, create virtual hubs, deploy gateways, configure hub routing, integrate third-party NVAs
- Implement Azure Extended Network and Azure Network Adapter
Hands-On Labs
- Deploy VPN Gateway with site-to-site and IPsec/IKE policies
- Configure point-to-site VPN with Entra ID authentication
- Simulate ExpressRoute private and Microsoft peering configurations
- Create Virtual WAN with secured hub and gateway routing
Week 3 - Application Delivery Services
Skills Area: Design and implement application delivery services (15–20%)
What You'll Learn
- Azure Load Balancer: select SKU/tier, public vs internal, regional vs cross-region, Gateway Load Balancer, inbound NAT rules, explicit outbound rules and SNAT
- Azure Traffic Manager: implement routing profiles (priority, weighted, geographic, performance)
- Azure Application Gateway: manual vs autoscale, backend pools, health probes, listeners, routing rules, HTTP settings, TLS, rewrite rule sets
- Azure Front Door: select tier, configure routing/origins/endpoints, TLS termination, end-to-end TLS, caching, traffic acceleration, URL rewrite and redirect
- Secure origins using Azure Private Link in Azure Front Door
Hands-On Labs
- Deploy Azure Load Balancer with health probes, NAT rules, and outbound SNAT
- Configure Application Gateway with URL path-based routing and TLS
- Implement Azure Front Door with caching, traffic acceleration, and Private Link origin
- Configure Traffic Manager with priority and weighted routing methods
Week 4 - Private Access & Network Security
Skills Area: Private access (10–15%) + Network security services (15–20%)
What You'll Learn
- Azure Private Link and Private Endpoints: plan, create, configure access, create Private Link service, integrate with DNS and on-premises clients
- Service Endpoints: choose when to use, create and configure, endpoint policies
- Network Security Groups: create NSGs and ASGs, associate to resources, inbound/outbound rules, virtual network flow logs, IP flow verify, NSG for Bastion
- Manage virtual network security using Azure Virtual Network Manager
- Azure Firewall: select SKU, design and deploy, configure firewall rules, Firewall Manager policies, secure hub inside Virtual WAN
- Web Application Firewall (WAF): design deployment, detection vs prevention mode, rule sets for Front Door and Application Gateway, WAF policies
Hands-On Labs
- Create Private Endpoints with Private DNS zone integration
- Configure NSGs, ASGs, and interpret virtual network flow logs
- Deploy Azure Firewall with DNAT, network, and application rules
- Implement WAF policies on Application Gateway and Front Door
Week 5 - Integration, Review & Exam Prep
All Skills Areas: Full integration scenarios + Exam readiness
What You'll Learn
- End-to-end scenario: design a multi-region network with VNets, peering, ExpressRoute, and load balancing
- End-to-end scenario: secure an application with Private Link, NSGs, Azure Firewall, and WAF
- Troubleshooting deep dive: diagnose VPN, ExpressRoute, routing, and connectivity issues
- Full exam domain review with weighted focus on high-percentage areas
- Practice tests, question walkthroughs, and exam strategy session
Hands-On Labs
- Build a complete hub-and-spoke topology with VPN, Firewall, and Private Endpoints
- Troubleshoot a broken network configuration using Network Watcher
- Full timed practice exam simulation
Certification Outcome
By completing this bootcamp, learners will be able to:
- Design and implement core Azure networking infrastructure including VNets, IP addressing, DNS, routing, and monitoring
- Configure and manage connectivity services: site-to-site VPN, point-to-site VPN, ExpressRoute, and Virtual WAN
- Implement application delivery with Azure Load Balancer, Application Gateway, Front Door, and Traffic Manager
- Design private access using Private Link, Private Endpoints, and service endpoints
- Secure networks with NSGs, Azure Firewall, Firewall Manager, and Web Application Firewall (WAF)
- Confidently sit the AZ-700 certification exam
Need a Custom Learning Path?
If you are new to cloud or Azure fundamentals, we recommend starting with Cloud Foundation - Live Bootcamp before AZ-700. Check out our Network Engineer Career Path for the complete journey.
You can book a free consultation to receive a personalized learning curriculum.
Begin Your Azure Networking Journey
This comprehensive bootcamp provides practical Azure networking skills for designing and implementing enterprise-grade cloud networks.