Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 171:

  You have an on-premises datacenter named DC1 that contains two routers.

  You have an Azure subscription. The subscription contains a virtual network named VNet1 and a zone-redundant ExpressRoute virtual network gateway named GW1 that uses the ErGw3Az SKU. GW1 is attached to VNet1. DC1 is connected to VNet1 by using an ExpressRoute Standard circuit named Circuit1.

  The DC1 routers are configured as endpoints for Circuit1. Circuit1 traffic traverses two physical links.

  During a link outage, the connection takes three minutes to fail over.

  You need to ensure that failovers between the links take less than one second.

  What should you do?

  A. For Circuit1, select FastPath.
  B. On the routers, configure Bidirectional Forwarding Detection (BFD).
  C. For GW1, change SKU to UltraPerformance.
  D. For GW1, set Active-active mode to Enabled.
  B. On the routers, configure Bidirectional Forwarding Detection (BFD).

• Question 172:

  HOTSPOT

  In which NSGs can you use ASG1 and to which virtual machine network interfaces can you associate ASG1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  box1: only vnets 1 and 4 are in westUS, so only NSGs in this region can re-use the existing ASG1 result: NSG1, NSG2 and NSG5 box2:

  All network interfaces assigned to an application security group have to exist in the same virtual network that the first network interface assigned to the application security group is in. For example, if the first network interface assigned to an application security group named AsgWeb is in the virtual network named VNet1, then all subsequent network interfaces assigned to ASGWeb must exist in VNet1.

  You cannot add network interfaces from different virtual networks to the same application security group.

  source:

  https://learn.microsoft.com/en-us/azure/virtual-network/application-security-groups

  result:Vm2 only (was already assigned to VM1, which is in vnet1)

• Question 173:

  You have an Azure subscription that contains an Azure Virtual WAN named VWAN1. VWAN1 contains a hub named Hub1.

  Hub1 has a security status of Unsecured.

  You need to ensure that the security status of Hub1 is marked as Secured.

  Solution: You implement Azure Firewall.

  Does this meet the requirement?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Correct Solution: You implement Azure Firewall.

  What is a secured virtual hub?

  A virtual hub is a Microsoft-managed virtual network that enables connectivity from other resources. When a virtual hub is created from a Virtual WAN in the Azure portal, a virtual hub VNet and gateways (optional) are created as its components.

  A secured virtual hub is an Azure Virtual WAN Hub with associated security and routing policies configured by Azure Firewall Manager.

  Create a secured virtual hub Using Firewall Manager in the Azure portal, you can either create a new secured virtual hub, or convert an existing virtual hub that you previously created using Azure Virtual WAN.

  References:

  https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub

• Question 174:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You need to ensure that subnet 4-3 can accommodate 507 hosts.

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See explanation below.

  ---

  Explanation

  Change subnet settings

  Step 1: Go to the Azure portal to view your virtual networks. Search for and select Virtual networks.

  Step 2: Select the name of the virtual network containing the subnet you want to change.

  Step 3: From Settings, select Subnets.

  Step 4: In the list of subnets, select the subnet you want to change settings for. We select subnet 4-3.

  Step 5: In the subnet page, change the Subnet address range setting: For 507 hosts we need a 9-bit address range or larger, that is /23.

  Change to address to /23. For example: 10.0.0.0/23 will work fine.

  Note: For example, in a virtual network with address space 10.0.0.0/16, you might define a subnet address space of 10.0.0.0/22. The smallest range you can specify is /29, which provides eight IP addresses for the subnet. Azure reserves the first and last address in each subnet for protocol conformance. Three more addresses are reserved for Azure service usage. As a result, defining a subnet with a /29 address range results in three usable IP addresses in the subnet.

  Step 6: Select Save.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

• Question 175:

  You have an Azure subscription that contains a virtual machine named VM1, a virtual network interface card (NIC) named NIC1, and a Basic SKU public IP address named IP1. NIC1 is attached to VM1. IP1 is associated to NIC1.

  You need to upgrade IP1 to the Standard SKU.

  What should you do first?

  A. Stop VM1.
  B. Create a new NIC for VM1.
  C. Detach NIC1 from VM1.
  D. Disassociate IP1 from NIC1.
  D. Disassociate IP1 from NIC1.

• Question 176:

  HOTSPOT

  You have an on-premises network.

  You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. VNet1 is peered with VNet2.

  The on-premises network is connected to VNet1 by using an ExpressRoute circuit named Circuit1.

  You need to recommend a solution to improve the routing performance between the on-premises network and the virtual networks. The solution must minimize costs.

  Which configurations should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 177:

  Which of the following statements are true with respect to Azure Firewall?

  A. Azure firewall replaces Network Security groups
  B. Azure firewall is a stateless service
  C. Used to inspect inbound internet traffic only
  D. Azure Firewall provides inbound protection for non-HTTP/S protocols
  E. Forced tunneling is supported in Azure Firewall
  D. Azure Firewall provides inbound protection for non-HTTP/S protocols
  E. Forced tunneling is supported in Azure Firewall

  ---

  Explanation

  Capabilities supported in Azure Firewall:

  Stateful firewall as a service

  Built-in high availability with unrestricted cloud scalability

  FQDN filtering

  FQDN tags

  Network traffic filtering rules

  Outbound SNAT support

  Inbound DNAT support

  Centrally create, enforce, and log application and network connectivity policies across Azure subscriptions and VNETs

  Fully integrated with Azure Monitor for logging and analytics

  https://docs.microsoft.com/en-us/azure/firewall/firewall-faq

• Question 178:

  DRAG DROP

  You have an Azure subscription that contains two virtual networks named VNet1 and VNet2.

  You plan to deploy the resources shown in the following table.

  

  You need to deploy two load balancers to manage the traffic for VMSS1, VM1. and VM2. The solution must meet the following requirements:

  1. Either VM1 or VM2 must inspect all the traffic from the internet to App1.

  2. All user connections from the internet to App1 must be load balanced.

  3. Costs must be minimized.

  Which load balancer SKU should you include in the solution? To answer, drag the appropriate SKUs to the correct resources. Each SKU may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 179:

  You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption.

  You configure the listener for HTTPS by uploading an enterprise signed certificate.

  You need to ensure that the application gateway can provide end-to-end encryption for App1.

  What should you do?

  A. Set Listener type to Multi site.
  B. Increase the Unhealthy threshold setting in the custom probe.
  C. Upload the public key certificate to the HTTPS settings.
  D. Enable the SSL profile for the listener.
  C. Upload the public key certificate to the HTTPS settings.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/end-to-end-ssl-portal

  https://docs.microsoft.com/en-us/azure/application-gateway/create-ssl-portal#configuration-tab

• Question 180:

  HOTSPOT

  You need to configure connectivity between NYCNet and SFONet. The solution must meet the connectivity requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.