Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 111:

  HOTSPOT

  You have an Azure application gateway named AppGW1 that provides access to the following hosts:

  www.adatum.com

  www.contoso.com

  www.fabrikam.com

  AppGW1 has the listeners shown in the following table.

  

  You create Azure Web Application Firewall (WAF) policies for AppGW1 as shown in the following table.

  

  For each of the following statements, select Yes of the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies

• Question 112:

  You have an Azure subscription that contains four virtual machines. The virtual machines host an app named App1.

  You deploy an Azure Standard Load Balancer named LB1 to load balance incoming HTTPS requests to App1.

  You need to reduce how long it takes for LB1 to stop sending App1 traffic to failed servers. The solution must minimize administrative effort.

  What should you modify?

  A. the Backend pools settings
  B. the Diagnostic settings
  C. the Load-balancing rules
  D. the Health probes settings
  D. the Health probes settings

  ---

  Explanation

  Azure Load Balancer rules require a health probe to detect the endpoint status. The configuration of the health probe and probe responses determines which backend pool instances will receive new connections.

  Use health probes to detect the failure of an application. Generate a custom response to a health probe.

  Use the health probe for flow control to manage load or planned downtime. When a health probe fails, the load balancer will stop sending new connections to the respective unhealthy instance. Outbound connectivity isn't affected, only inbound.

  Add a TCP health probe

  In this example, you'll create a TCP health probe to monitor port 80.

  1. Sign in to the Azure portal.

  2. In the search box at the top of the portal, enter Load balancer. Select Load balancers in the search results.

  3. Select myLoadBalancer or your load balancer.

  4. In the load balancer page, select Health probes in Settings.

  5. Select + Add in Health probes to add a probe.

  6. Etc.

  References:

  https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview

  https://learn.microsoft.com/en-us/azure/load-balancer/manage-probes-how-to

• Question 113:

  You have an Azure subscription named Subscription1.

  You have two virtual networks in Subscription1 named HubVNet and SpokeVNet.

  You have an Azure Firewall with a public IP address, configured as a Standard SKU in HubVNet.

  You have a Windows Server 2016 with private IP address in SpokeVNet.

  You need to connect to Windows Server using the public IP address of Azure firewall.

  What should you configure?

  A. ExpressRoute Gateway
  B. Virtual Network Peering
  C. Route Table
  D. Virtual Network Gateway
  E. NAT Rule for the Firewall
  B. Virtual Network Peering
  C. Route Table
  E. NAT Rule for the Firewall

  ---

  Explanation

  For traffic to flow between the Hub and Spoke VNets, you will need a peer connection between the virtual networks.

  You will need a route table to route ingress traffic to the firewall virtual appliance.

  You can configure a NAT rule on the firewall to translate and filter inbound Internet traffic to your subnets.

• Question 114:

  HOTSPOT

  You have an on-premises server named Server that is assigned a public IP address of 131.107.100.200.

  You have an Azure subscription that contains the resources shown in the following table.

  

  storage85347 has the Networking settings configured as shown in the following exhibit.

  

  From the Firewalls and virtual networks tab, you add Subnet1 to storage85347. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 115:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have two Azure virtual networks named Vnet1 and Vnet2.

  You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2

  VPN.

  You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

  You discover that Client1 cannot communicate with Vnet2.

  You need to ensure that Client1 can communicate with Vnet2.

  Solution: You resize the gateway of Vnet1 to a larger SKU.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

  References:

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

• Question 116:

  DRAG DROP

  You have an on-premises network.

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an ExpressRoute gateway named Gateway1.

  You need to implement an ExpressRoute solution from a third-party provider named Fabrikam, Inc. The solution must ensure that devices on the on-premises network can connect to the Azure resources on VNet1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 117:

  You need to ensure that the URL is accessible through the application gateway.

  To achieve the requirement, you create a WAF policy exclusion for request headers that contain 167.220.2.139.

  Did you achieve the requirement?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  RemoteAddr specifies the IP Address/Range of the remote computer connection. So, you should use RemoteAddr instead of request headers.

  https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/custom-waf-rules-overview#match-variable-required

• Question 118:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You need to ensure that connections to the storage12345678 storage account can be made by using an IP address in the 10.1.1.0/24 range and the name storage12345678.privatelink.blob.core.windows.net.

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See explanation below.

  ---

  Explanation

  Use private endpoints for Azure Storage

  You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service.

  Plan:

  Stage 1: Create a virtual network and subnet Stage 2: Create a private endpoint

  Stage 1: Create a virtual network and subnet

  Step 1: Sign in to the Azure portal.

  Step 2: In the search box at the top of the portal, enter Virtual network. In the search results, select Virtual networks.

  Step 3: Select + Create in Virtual networks.

  Step 4: In the Basics tab of Create virtual network, enter or select the following information.

  Subscription -Select your subscription.

  Resource group - Select Create new.

  Enter SomeName in Name and select OK.

  Instance details

  Name - Enter myVNet for example Region - Select West Europe.

  Step 5:

  Select Next: IP Addresses or the IP Addresses tab.

  Step 6: Select the IP Addresses tab or select

  Next: IP Addresses at the bottom of the page.

  Step 7: In the IP Addresses tab, enter the following information:

  * IPv4 address space - Enter 10.1.0.0/16

  Step 8: Select Add subnet. In Edit subnet, enter the following information: Subnet name - Enter mySubnet Subnet address range - Enter 10.1.1.0/24 (as specified in the question)

  Step 9: For the subnet: Select the Review + create tab or select the Review + create button.

  Step 10: For the Virtual network: Select the Review + create tab or select the Review + create button.

  Stage 2: Create a private endpoint Step 1: In the search box at the top of the portal, enter Private endpoint. Select Private endpoints.

  Step 2: Select + Create in Private endpoints.

  Step 3: In the Basics tab of Create a private endpoint, enter or select the following information.

  * Storage subresource - storage12345678.privatelink.blob.core.windows.net

  * Private DNS integration.

  Integrate with private DNS zone - Leave the default Yes.

  * Private DNS Zone

  Leave the default (New) privatelink.blob.core.windows.net.

  Step 4:

  Select Next: Resource.

  Step 5: In the Resource pane, leave the defaults.

  Step 6:

  Select Next: Virtual Network.

  Step 7: In Virtual Network, enter or select the following information.

  Virtual network - Select the virtual network you created in stage 1.

  Subnet - Select the subnet you created in stage 1.

  Step 8:

  Select Next: DNS.

  Step 9: Leave the defaults in DNS. Select Next: Tags, then

  Next: Review + create.

  Step 10: Select Create.

  References:

  https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

  https://learn.microsoft.com/en-us/azure/private-link/create-private-endpoint-portal

• Question 119:

  You have the Azure virtual networks shown in the following table.

  

  You deploy Azure Firewall to Vnet3.

  You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall.

  What should you configure?

  A. peering links between Vnet1 and Vnet2
  B. a route table associated to Subnet1-1 and Subnet2-1
  C. an Azure private DNS zone
  D. a route table associated to AzureFirewallSubnet
  B. a route table associated to Subnet1-1 and Subnet2-1

• Question 120:

  HOTSPOT

  You have multiple remote users that have either a Windows 11 device or an Ubuntu Linux 22.04 device.

  Each device has a manually registered Azure VPN Client installed.

  You have an Azure subscription that contains an Azure VPN gateway named VNetGW1.

  The Windows 11 users establish Point-to-Site (P2S) VPN connections to VNetGW1 and authenticate by using their Microsoft Entra credentials. The Ubuntu Linux users cannot establish P2S VPN connections.

  You need to ensure that the Ubuntu Linux users can establish P2S VPN connections to VNetGW1. The solution must minimize administrative effort and maximize security. To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.