Last updated: May 2026
AZ-700 — Azure Network Engineer Associate
Test your knowledge with official exam-style questions
Questions and options are shuffled each attempt
▶Microsoft Certified: Azure Network Engineer Associate — Practice Set 4: All Questions & Explanations
Full question text, answer options, and explanations for this practice set — a spoiler-free alternative is the interactive quiz above for scored, shuffled practice.
1. ExpressRoute vs VPN comparison (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 1
2. Subnet address space design (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 2
3. Hub-spoke forced tunneling (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 3
4. Load balancer floating IP (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 4
5. NVA IP forwarding config (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 5
6. Multi-tenant isolation pattern (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 6
7. Private DNS auto-registration (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 7
8. Subnet delegation requirements (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 8
9. ExpressRoute overlapping routes (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 9
10. Azure Virtual WAN architecture (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 10
11. IP Flow Verify troubleshooting (Set 4)
- A. Option A
- B. Option B
- C. Option C
- D. Option D(correct)
Explanation: This is the explanation for question 11
12. UDR traffic direction effects (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 12
13. DNS Private Resolver setup (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 13
14. Load balancer zone failover (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 14
15. DNS zone additional question (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 15
16. ExpressRoute and VPN failover (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 16
17. Multi-region latency optimization (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 17
18. Virtual WAN branch connectivity (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 18
19. VNet topology migration (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 19
20. ExpressRoute route filtering (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 20
21. ExpressRoute Global Reach (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 21
22. VPN gateway throughput scaling (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 22
23. BGP convergence debugging (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 23
24. Multi-cloud with AWS (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 24
25. Hybrid failover capacity (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 25
26. Dynamic routing Route Server (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 26
27. BGP failover VPN (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 27
28. Application Gateway session affinity (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 28
29. CDN and gateway hybrid delivery (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 29
30. WAF exclusion rules (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 30
31. SSL/TLS termination (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 31
32. Application Gateway path security (Set 4)
- A. Option A
- B. Option B
- C. Option C
- D. Option D(correct)
Explanation: This is the explanation for question 32
33. Front Door failover config (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 33
34. Load balancer graceful shutdown (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 34
35. API rate limiting (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 35
36. CDN cache TTL tuning (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 36
37. Global Application Gateway with Front Door (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 37
38. Azure Storage private endpoint (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 38
39. SQL Database private endpoints (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 39
40. Cosmos DB and ExpressRoute (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 40
41. Private endpoint traffic monitoring (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 41
42. Private endpoint traffic filtering (Set 4)
- A. Option A
- B. Option B
- C. Option C
- D. Option D(correct)
Explanation: This is the explanation for question 42
43. On-premises service private link (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 43
44. Private endpoint DNS override (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 44
45. NSG network segmentation (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 45
46. DDoS Protection Standard limits (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 46
47. NSG inbound filtering (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 47
48. WAF penetration testing (Set 4)
- A. Option A
- B. Option B
- C. Option C(correct)
- D. Option D
Explanation: This is the explanation for question 48
49. Threat detection with Defender (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 49
50. Hierarchical firewall policies (Set 4)
- A. Option A
- B. Option B
- C. Option C
- D. Option D(correct)
Explanation: This is the explanation for question 50
51. Forced tunneling exceptions (Set 4)
- A. Option A(correct)
- B. Option B
- C. Option C
- D. Option D
Explanation: This is the explanation for question 51
52. DDoS Protection telemetry (Set 4)
- A. Option A
- B. Option B(correct)
- C. Option C
- D. Option D
Explanation: This is the explanation for question 52