Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 1:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You need to ensure that the owner of VNET3 receives an alert if an administrative operation is performed in the virtual network.

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See explanation below.

  ---

  Explanation

  Monitoring Azure virtual network

  Alerts

  Azure Monitor alerts proactively notify you when important conditions are found in your monitoring data. They allow you to identify and address issues in your system before your customers notice them. You can set alerts on metrics, logs, and the activity log.

  Create a new alert rule in the Azure portal

  Step 1: In the portal, select Monitor > Alerts.

  Step 2: Open the + Create menu and select Alert rule.

  

  Step 3: On the Select a resource pane, set the scope for your alert rule. You can filter by subscription, resource type, or resource location. We select Virtual Network.

  The Available signal types for your selected resources are at the bottom right of the pane.

  Step 4: Select Include all future resources to include any future resources added to the selected scope.

  Step 5: Select Done.

  Step 6:

  Select Next: Condition at the bottom of the page.

  Step 7: On the Select a signal pane, filter the list of signals by using the signal type and monitor service:

  * Signal type: The type of alert rule you're creating.

  We select Activity log

  * Monitor service: The service sending the signal. This list is pre-populated based on the type of alert rule you selected.

  We select Activity log - Administrative (The service that provides the Administrative activity log events)

  Step 8: On the Actions tab, select to create the required action group.

  

  Step 9: Configure basic action group settings

  

  Step 10: Configure notifications. To open the Notifications tab, select

  Next: Notifications. Alternately, at the top of the page, select the Notifications tab.

  Step 11: Define a list of notifications to send when an alert is triggered.

  Notification: Email Azure Resource Manager Role

  Name: Notify Owner

  

  Step 12: Select OK.

  Step 13: Finish the remaining steps in the wizard.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network

  https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-new-alert-rule?tabs=metric#create-a-new-alert-rule-in-the-azure-portal

• Question 2:

  You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.

  

  You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.

  You need to ensure that Traffic Manager routes traffic for www.contoso.com.

  Which DNS record should you create?

  A. two A records that map www.contoso.com to 131.107.100.1 and 131.107.200.1
  B. a CNAME record that maps www.contoso.com to TMprofile1.azurefd.net
  C. a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net
  D. a TXT record that contains a string of as1.contoso.com and as2.contoso.com in the details
  C. a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile

  https://docs.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager

• Question 3:

  HOTSPOT

  Your company has an Azure subscription that contains a virtual network named VNet1 and an Azure VPN gateway named vGW1.

  The company has 50 users that have Windows 11 devices.

  You need to ensure that the users can access the resources on VNet1. The solution must meet the following requirements:

  1. Ensure that the users can establish Point-to-Site (P2S) VPN connections to vGW1.

  2. Ensure that the users can authenticate by using only their Microsoft Entra credentials.

  Which type of tunnel should you configure, and which VPN client should you configure on the users' devices? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 4:

  You have an Azure subscription that contains the resources shown in the following table.

  

  Subnet1 is associated with a service endpoint policy named Policy1. Policy1 specifies a single resource that references storage1.

  To Subnet1, you deploy an Azure Batch pool named Pool1.

  You need to ensure that the compute resources in Pool1 can access storage1.

  What should you do?

  A. To Policy1, add a resource.
  B. To Policy1, add an alias.
  C. To Subnet1, add a storage endpoint for the storage service.
  D. To Subnet1, add a subnet delegation.
  C. To Subnet1, add a storage endpoint for the storage service.

• Question 5:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Zone2.contoso.com is not linked to any virtual networks. Therefore, no VMs are able to resolve names in the zone.

  Box 2: Yes

  VM4 is in VNet3. Zone1.contoso.com has a link to VNet3 and auto-registration is enabled on the link.

  Box3: No

  VNet3 is linked to zone1.contoso.com and auto-registration is enabled on the link. A virtual network can only have one registration zone. You can link zone2.contoso.com to VNet3 but you won't be able to enable auto-registration on the link.

• Question 6:

  You have an Azure subscription that contains a user named Admin1 and a resource group named RG1.

  RG1 contains an Azure Network Watcher instance named NW1.

  You need to ensure that Admin1 can place a lock on NW1. The solution must use the principle of least privilege.

  Which role should you assign to Admin1?

  A. User Access Administrator
  B. Network Contributor
  C. Resource Policy Contributor
  D. Monitoring Contributor
  A. User Access Administrator

  ---

  Explanation

  As an administrator, you can lock an Azure subscription, resource group, or resource to protect them from accidental user deletions and modifications. The lock overrides any user permissions.

  Unlike role-based access control (RBAC), you use management locks to apply a restriction across all users and roles.

  Who can create or delete locks

  To create or delete management locks, you need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Only the Owner and the User Access Administrator built-in roles can create and delete management locks. You can create a custom role with the required permissions.

  Note: Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network. Network Watcher is designed to monitor and repair the network health of IaaS (Infrastructure-as-a-Service) products including Virtual Machines (VM), Virtual Networks, Application Gateways, Load balancers, etc.

  References:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

• Question 7:

  DRAG DROP

  You have an Azure virtual network named Vnet1 that connects to an on-premises network.

  You have an Azure Storage account named storageaccount1 that contains blob storage.

  You need to configure a private endpoint for the blob storage. The solution must meet the following requirements:

  Ensure that all on-premises users can access storageaccount1 through the private endpoint.

  Prevent access to storageaccount1 from being interrupted.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 8:

  Note: This question is part ofa series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have two Azure virtual networks named Vnet1 and Vnet2.

  You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2

  VPN.

  You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

  You discover that Client1 cannot communicate with Vnet2.

  You need to ensure that Client1 can communicate with Vnet2.

  Solution: You enable BGP on the gateway of Vnet1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

  References:

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

• Question 9:

  HOTSPOT

  You have an on-premises network that includes the sites shown in the following table.

  

  Each site is connected to the Internet by a firewall. All sites are connected to an SD-WAN. Each site is configured to propagate routes by using BGP.

  You have an Azure subscription that includes a virtual network named Vnet1 that contains a Virtual Network Gateway named Gateway 1.

  You create a local network gateway with the configuration shown in the gateway exhibit (Click the Gateway tab.)

  

  You create a Site-to-Site (S2S) connection with the configuration shown in connection exhibit. (Click the Connection tab)

  

  For each of the following statements, select Yes if the statement is true Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 10:

  Your company has two on-premises sites in New York and Los Angeles.

  Your company has Azure virtual networks in the East US Azure region and the West US Azure region.

  Each on-premises site has Azure ExpressRoute circuits to both regions.

  You need to recommend a solution that meets the following requirements:

  Outbound traffic to the Internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site.

  If an on-premises site fails, traffic from the workloads on the virtual networks to the Internet must reroute automatically to the other site.

  What should you include in the recommendation for automatic routing configuration following a failover?

  A. Host Standby Routing Protocol (HSRP)
  B. Border Gateway Protocol (BGP)
  C. Virtual Router Redundancy Protocol (VRRP)
  B. Border Gateway Protocol (BGP)

  ---

  Explanation

  Correct Answer(s):

  Border Gateway Protocol (BGP) - Microsoft does not support any router redundancy protocols (for example, HSRP, VRRP) for high availability configurations. We rely on a redundant pair of BGP sessions per peering for high availability.

  https://docs.microsoft.com/en-us/azure/expressroute/expressroute-routing

  https://docs.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing#suboptimal-routing-from-customer-to-microsoft

  Wrong Answers:

  Host Standby Routing Protocol (HSRP) -Microsoft does not support any router redundancy protocols (for example, HSRP, VRRP) for high availability configurations.

  Virtual Router Redundancy Protocol (VRRP) -Microsoft does not support any router redundancy protocols (for example, HSRP, VRRP) for high availability configurations.