AZ-700 Cheat Sheet 2026

The 30 highest-yield AZ-700 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which Azure monitoring service would you use to set alerts for network connectivity issues? → Azure Monitor
2. What is the significance of documentation in Virtual Networks? → It provides a record for accountability, quality assurance, and legal compliance
3. What does ExpressRoute FastPath do? → Bypasses the ExpressRoute gateway for the data path, sending traffic directly to VNet VMs
4. In a VPN connection, which protocol is commonly used to secure data during transmission? → IPsec
5. What is the purpose of a private DNS zone group on a private endpoint? → To automatically create and manage DNS records in a linked private DNS zone
6. What IKE versions does Azure VPN Gateway support for site-to-site connections? → Both IKEv1 and IKEv2
7. What role does continuing education play in Connectivity Solutions? → Keeping practitioners current with evolving best practices and new developments
8. What is the default Azure-provided DNS server IP address that VMs use when no custom DNS is configured? → 168.63.129.16
9. What is the significance of documentation in Network Security? → It provides a record for accountability, quality assurance, and legal compliance
10. A VM behind an internal Standard Load Balancer cannot initiate outbound connections to the internet. What is the recommended fix? → Attach a NAT Gateway to the subnet
11. What quality metrics are most important in Network Security? → Measurable outcomes, process compliance, and stakeholder satisfaction
12. What is the minimum circuit bandwidth available for an ExpressRoute circuit? → 50 Mbps
13. What is the primary purpose of standardized procedures in Virtual Networks? → To ensure consistency, safety, and quality across all practitioners
14. At which level are Azure service endpoints enabled? → Subnet level
15. Which Azure service provides a managed WAF that protects web applications from OWASP Top 10 vulnerabilities at the edge? → Azure Front Door with WAF policy
16. A BGP route learned over a site-to-site VPN takes priority over a static route to the same prefix. You need the static route to always win. What should you do? → Disable BGP route propagation on the route table and use only static routes
17. Which Azure Virtual WAN component is responsible for managing route propagation and aggregation between connected branches, VNets, and hubs? → Virtual Hub Router
18. What does Azure Private Link Center provide? → Centralized monitoring and management for private endpoints and Private Link services
19. A VNet peering shows status 'Disconnected'. What is the most likely cause? → One side of the peering was deleted
20. An organization needs to route traffic to the nearest available endpoint based on network latency. Which Azure Traffic Manager routing method should they use? → Performance
21. Which Azure service provides a dedicated private connection between on-premises networks and Azure datacenters? → Azure ExpressRoute
22. Why are private DNS zones important when using private endpoints? → To resolve the service's public FQDN to its private IP address
23. What is ExpressRoute Global Reach used for? → Connecting two on-premises networks to each other through the Microsoft backbone
24. What is the purpose of the 'effective routes' view in Azure Network Watcher? → It shows the combined routing table applied to a network interface
25. Which approach is most effective for problem-solving in Load Balancing and DNS? → Systematic analysis followed by evidence-based decision making
26. What role does continuing education play in Load Balancing and DNS? → Keeping practitioners current with evolving best practices and new developments
27. What is the maximum number of private DNS zones that can be linked to a single virtual network in Azure? → 1000
28. Which OSI layer does the Azure Application Gateway primarily operate at? → Layer 7 (Application)
29. What is the naming requirement for the subnet used by an Azure VPN Gateway? → It must be named 'GatewaySubnet'
30. What is the correct priority order when multiple routes exist for the same address prefix in an Azure subnet? → User Defined Routes > BGP routes > System routes