Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 151:

  HOTSPOT

  You have an Azure subscription that contains two virtual networks named Vnet1 and Vnet2.

  You register a public DNS zone named fabrikam.com. The zone is configured as shown in the Public DNS Zone exhibit.

  

  You have a private DNS zone named fabrikam.com. The zone is configured as shown in the Private DNS Zone exhibit.

  

  You have a virtual network link configured as shown in the Virtual Network Link exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  DNS queries from the internet use the public DNS zone. In the public DNS zone, www.fabrikam.com is a CNAME record that resolves to appservice1.fabrikam.com which resolves to 131.107.1.1.

  Box 2: No

  DNS queries from the internet use the public DNS zone. There is no DNS record for server1.fabrikam.com in the public DNS zone.

  Box 3: No

  The private DNS zone is linked to VNet1, not VNet2. Therefore, resources in VNet2 cannot query the private DNS zone.

• Question 152:

  You need to deploy an Azure Load Balancer that support outbound traffic rules.

  Which SKU should you use? Costs must be minimal.

  A. Basic
  B. Standard
  B. Standard

  ---

  Explanation

  Correct Answer:

  Standard SKU supports outbound rules through declarative outbound NAT configuration.

  Wrong Answer:

  Basic - Basic SKU does not support outbound rules.

• Question 153:

  DRAG DROP

  You have an Azure subscription.

  You plan to deploy Azure Front Door with Azure Web Application Firewall (WAF).

  You plan to implement custom rules and managed rules that meet the following requirements:

  1. Block malicious bots.

  2. Throttle client IP addresses that exceed 100 connections per minute.

  You need to identify which Front Door SKU to configure, and which type of rule to configure for each requirement. The solution must minimize administrative effort and costs.

  What should you identify? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 154:

  You have a web application that uses a hostname of www.healthengine.com

  You have an Azure Front Door instance that provides access to the web application.

  You have the routing rules shown in the following table.

  

  Which rule will apply to www.healthengine.com/abc/def/default.htm incoming request?

  A. RuleA
  B. RuleB
  C. RuleC
  D. RuleD
  D. RuleD

  ---

  Explanation

  Correct Answer(s):

  RuleD - When a request lands on a Front Door environment one of the first things that Front Door does is determine which particular routing rule to match the request to and then take the defined action in the configuration. It uses the below logic.

  4. Look for any routing rule with an exact match on the Path.

  5. If no exact match Paths, look for routing rules with a wildcard Path that matches.

  6. If no routing rules are found with a matching Path, then reject the request and return a 400: Bad Request error HTTP response.

  The path defined in RuleD is not an exact match, but it matches with wildcard path.

  https://docs.microsoft.com/en-us/azure/frontdoor/front-door-route-matching

  Wrong Answers:

  RuleA The path defined in the RuleA is not a match with incoming request.

  RuleB The path defined in the RuleA is not a match with incoming request.

  RuleC The path defined in the RuleA is not a match with incoming request.

• Question 155:

  HOTSPOT

  You need to plan the deployment of LBGW1. The solution must support the planned changes.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 156:

  You are planning the IP addressing for the subnets in Azure virtual networks.

  Which type of resource requires IP addresses in the subnets?

  A. Azure Virtual Network NAT
  B. virtual network peering
  C. service endpoints
  D. private endpoints
  D. private endpoints

• Question 157:

  HOTSPOT

  You have an on-premises network.

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to ensure that on-premises devices can communicate with Azure resources that are connected to Subnet4.

  What should you do on each resource? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 158:

  Your company has an Azure virtual network named Vnet1 that uses an IP address space of 192.168.0.0/20.

  Vnet1 contains a subnet named Subnet1 that uses an IP address space of 192.168.0.0/24. You create an IPv6 address range to Vnet1 by using a CIDR suffix of /48. You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company.

  The solution must minimize the number of additional IPv4 addresses.

  What should you do for each virtual machine?

  A. Create an additional IP configuration
  B. Create an additional NIC
  C. Create a public IPv6 address
  A. Create an additional IP configuration

  ---

  Explanation

  You need to configure the VM NICs with an IPv6 address.

  https://docs.microsoft.com/en-us/azure/load-balancer/ipv6-add-to-existing-vnet-cli

• Question 159:

  You have an Azure environment.

  Your Azure environment contains multiple VNets peered with the VNet that is connected to ExpressRoute.

  How should the ExpressRoute FastPath deployment be modified?

  A. Connect all the virtual networks to the ExpressRoute FastPath circuit directly.
  B. Connect the VNet gateways to ExpressRoute FastPath.
  C. Modify the VNet peering configuration.
  A. Connect all the virtual networks to the ExpressRoute FastPath circuit directly.

  ---

  Explanation

  Correct Answer(s):

  Connect all the virtual networks to the ExpressRoute FastPath circuit directly - To avoid traffic being routed through the VNet gateways, connect all the VNets to ExpressRoute FastPath circuit directly.

  Wrong Answers:

  Connect the VNet gateways to ExpressRoute FastPath. - The VNet gateways still support VNet-to-Vnet peering and should not be connected directly to FastPath.

  Modify the VNet peering configuration. - The VNet gateways can still support VNet-to-Vnet peering and do not have to be modified.

• Question 160:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  Each virtual network contains 20 virtual machines and a subnet that has an IP address space of /24.

  You need to ensure that you can access the virtual machines from the internet by using Azure Bastion.

  What is the minimum number of bastion subnets you should deploy, and what is the smallest supported IP address space for each bastion subnet? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.