The AZ-700 training prepares you to design and implement comprehensive network solutions on Microsoft Azure in three days. This official Microsoft course covers virtual networks (VNet) and peering, hybrid connectivity with VPN Gateway and ExpressRoute, load balancing with Azure Load Balancer, Application Gateway and Front Door, network security with Azure Firewall and NSGs, and monitoring with Network Watcher. You develop the expertise needed to manage enterprise-grade Azure network architectures tailored to the needs of organizations in Switzerland.
Delivered in Geneva and Lausanne by MCT certified trainers, this AZ-700 training relies on intensive hands-on labs on the Microsoft cloud platform. You configure VNets with regional and global peering, deploy site-to-site VPN gateways, set up Azure Application Gateway with Web Application Firewall, secure outbound traffic with Azure Firewall, and diagnose network flows with Network Watcher. The Azure Network Engineer Associate certification is included and validates your mastery of Azure network solutions.
Module 1: Introduction to Azure Virtual Networks
Module 2: Design and implement hybrid networking
Module 3: Design and implement Azure ExpressRoute
Module 4: Load balance non-HTTP(S) traffic in Azure
Module 5: Load balance HTTP(S) traffic in Azure
Module 6: Design and implement network security
Module 7: Design and implement private access to Azure Services
Module 8: Design and implement network monitoring
Networking is the backbone of every cloud architecture. Connectivity quality, traffic segmentation, and flow protection determine the performance and security of applications deployed on Azure. Companies in Switzerland, which frequently operate in hybrid mode between their datacenters and the cloud, need network engineers capable of designing robust and scalable architectures.
The AZ-700 training gives you the skills to design and implement all Microsoft Azure network solutions in three days in Geneva or Lausanne, from virtual networks to hybrid connections through security and load balancing.
Virtual networks (VNet) are the fundamental building blocks of Azure network topology. The AZ-700 training covers IP address space design, subnet segmentation, regional and global VNet peering to interconnect networks, and custom route tables (UDR) to control traffic flows. Azure Private DNS and DNS zones ensure name resolution within your networks without internet exposure.
Azure Virtual WAN simplifies multi-site architectures by centralizing routing, security, and hybrid connectivity in a managed hub. This approach is particularly suited to organizations with multiple offices in French-speaking Switzerland and Europe that need to connect their sites to each other and to Azure with simplified management and consistent security.
Site-to-site VPN connections encrypt traffic between your sites and Azure over the internet. Point-to-site connections allow individual users to connect from any location. Azure VPN Gateway supports IKEv2 and OpenVPN protocols with bandwidth up to 10 Gbps in active-active configuration.
ExpressRoute provides a private, high-bandwidth connection that does not transit over the internet, offering reduced latency and guaranteed bandwidth. For Swiss companies in the banking and healthcare sectors, ExpressRoute meets data confidentiality and performance requirements for sensitive data. The training covers circuit provisioning, private and Microsoft peering configuration, routing, and high availability strategies with redundant circuits.
Azure offers four complementary load balancing solutions. Azure Load Balancer distributes TCP/UDP traffic at layer 4 with minimal latency. Azure Application Gateway operates at layer 7 with SSL termination, URL-based routing, and Web Application Firewall (WAF) for web application protection. Azure Front Door provides global load balancing with CDN integration and automatic failover between regions. Azure Traffic Manager directs DNS traffic based on performance, geography, or priority routing methods.
Choosing the right load balancing solution depends on the type of traffic, geographic scope, and security requirements. The AZ-700 training provides a clear decision framework for each scenario. Swiss companies hosting multi-region applications benefit from combining Front Door for global traffic management and Application Gateway for local layer 7 inspection.
Azure Firewall is a managed cloud firewall that inspects and filters traffic at the network and application levels. The training covers DNAT, network, and application rule configuration, FQDN-based filtering, threat intelligence, and integration with Azure Firewall Manager for centralized management. Network security groups (NSGs) provide granular filtering at the subnet and network interface level.
Azure DDoS Protection defends your public endpoints against distributed denial-of-service attacks. Azure Web Application Firewall (WAF) protects web applications against OWASP threats. Network Watcher provides diagnostic tools: IP flow verification, next hop, connection troubleshooting, and NSG flow log analysis. These complementary solutions form a defense-in-depth strategy essential for the security of Azure architectures.
The AZ-700 exam (Designing and Implementing Microsoft Azure Networking Solutions) validates the Azure Network Engineer Associate title. It contains between 40 and 60 questions (multiple choice, scenarios, case studies) and lasts approximately 120 minutes. The passing score is 700 out of 1000. The certification is valid for one year, renewable free of charge via Microsoft Learn.
In Switzerland, Azure networking expertise is particularly sought after by companies operating hybrid architectures. Targeted roles include Azure network engineer, cloud infrastructure architect, network security consultant, and hybrid connectivity specialist. Financial institutions, multinationals, and technology companies in Geneva and Lausanne value this certification.
At ITTA, a Microsoft Learning Partner in Switzerland You benefit from hands-on labs on real Microsoft cloud environments, official course materials (MOC), and MCT certified trainers. Sessions are held in-person in Geneva and Lausanne or via virtual classroom.
What are the prerequisites for the AZ-700 training?
Experience in Azure administration (AZ-104 level) is required. You should understand virtual networks, subnets, and network security groups. Networking fundamentals knowledge (TCP/IP, DNS, routing) is essential.
Is this training suitable for network engineers without Azure experience?
The course requires Azure administration foundations. If you are a network engineer new to Azure, it is recommended to take the AZ-104 training first, then the AZ-700 for Azure networking specialization.
Does the training cover ExpressRoute in detail?
Yes. The training covers ExpressRoute circuit provisioning, private and Microsoft peering, routing, redundancy, and high availability scenarios. Labs allow you to configure and test ExpressRoute connections.
Is the training available as a virtual classroom?
Yes. ITTA offers the AZ-700 training in-person in Geneva and Lausanne as well as via virtual classroom with the same content, the same labs, and the same MCT trainer.
What is the difference between AZ-700 and AZ-104 for networking?
AZ-104 covers networking basics as part of general Azure administration. AZ-700 goes much deeper into advanced network design, hybrid connectivity, and enterprise load balancing. AZ-700 is the networking specialization.
Does the training cover Azure Virtual WAN?
Yes. Azure Virtual WAN is covered as a managed solution for multi-site connectivity, centralized routing, and integrated security with secured virtual hubs.
Is this certification complementary to Cisco or Fortinet certifications?
Yes. The AZ-700 certification adds cloud networking expertise to traditional network certifications. Professionals with Cisco, Fortinet, or Palo Alto certifications strengthen their profile by adding Azure network specialization.
Monday to Friday
8:30 AM to 6:00 PM
Tel. 058 307 73 00
ITTA
Route des jeunes 35
1227 Carouge, Suisse
Monday to Friday, from 8:30 am to 06:00 pm.
