Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 221:

  You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The subscription contains the following resources:

  1. An Azure App Service app named App1

  2. An Azure DNS zone named contoso.com

  3. An Azure private DNS zone named private.contoso.com

  4. A virtual network named Vnet1

  You create a private endpoint for App1. The record for the endpoint is registered automatically in Azure

  DNS.

  You need to provide a developer with the name that is registered in Azure DNS for the private endpoint.

  What should you provide?

  A. app1.contoso.onmicrosoft.com
  B. app1.private.contoso.com
  C. app1.privatelink.azurewebsites.net
  D. app1.contoso.com
  C. app1.privatelink.azurewebsites.net

• Question 222:

  HOTSPOT

  You create NSG10 and NSG11 to meet the network security requirements.

  For each of the following statements, select Yes of the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  1. From VM1 to inbound RDP VM2, there are no NSGs blocking this. There is only a custom inbound NSG for VM1, and a custom outbound NSG for VM2-- neither of which will block our connection 2. VM2 outbound NSG has no rules blocking ping (ICMP). Next review the inbound NSG for VM1. There is an priority rule 1000 -- inbound ICMP deny, but the source is pointing to VNET4 (tricky!)

  3. Blocked. VM2 NSG has an outbound deny for 3389 RDP.

• Question 223:

  You have an Azure Front Door instance that has a single frontend named Frontend1 and an Azure Web Application Firewall (WAF) policy named Policy1. Policy1 redirects requests that have a header containing "string1" to https://www.contoso.com/redirect1.Policy1 is associated to Frontend1.

  You need to configure additional redirection settings. Requests to Frontend1 that have a header containing "string2" must be redirected to https://www.contoso.com/redirect2.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a custom rule.
  B. Create a policy.
  C. Create a frontend host.
  D. Create a frontend host.
  E. Add a custom rule to Policy1.
  F. Create an association.
  A. Create a custom rule.
  B. Create a policy.
  F. Create an association.

  ---

  Explanation

  the question itself makes no sense as already have the policy1 created hence the available options tends you to do the all process again.

  B. Create a policy.

  A. Create a custom rule.

  F. Create an association.

• Question 224:

  HOTSPOT

  You have an Azure application gateway named AppGw1.

  You need to create a rewrite rulefor AppGw1. The solution must rewrite the URL of requests from https://www.contoso.com/fashion/shirts to ttps://www.contoso.com/buy.aspx?category-fashion&product=shirts.

  How should you complete the rule? To answer NOTE: Each correct selection is worth onepoint appropriate options in the answer area.

  

  

  ---

  Box 1: uri_path

  Server variables

  Application Gateway uses server variables to store useful information about the server, the connection with the client, and the current request on the connection.

  Application gateway supports the following server variables:

  * uri_path

  Identifies the specific resource in the host that the web client wants to access. This is the part of the request URI without the arguments.

  Example: In the request

  http://contoso.com:8080/article.aspx?id=123&title=fabrikam,uri_path

  value will be /article.aspx

  Incorrect:

  * query_string

  The list of variable/value pairs that follows the "?" in the requested URL. Example: In the request

  http://contoso.com:8080/article.aspx?id=123&title=fabrikam,query_string

  value will be id=123&title=fabrikam

  * content_type

  There is no server variable named content_type.

  Box 2: URL (Both URL path and URL query string) There are 3 types of rewrites available:

  * Rewriting URL components URL path: The value to which the path is to be rewritten to.

  URL Query String: The value to which the query string is to be rewritten to.

  Re-evaluate path map

  * Rewriting request headers URL path and query string With URL rewrite capability in Application Gateway, you can:

  Rewrite the host name, path and query string of the request URL

  Choose to rewrite the URL of all requests on a listener or only those requests which match one or more of the conditions you set. These conditions are based on the request properties (request header and server variables).

  Choose to route the request (select the backend pool) based on either the original URL or the rewritten

  URL

  Note: Rewrite HTTP headers and URL with Application Gateway Application Gateway allows you to rewrite selected content of requests and responses. With this feature, you can translate URLs, query string parameters as well as modify request and response headers. It also allows you to add conditions to ensure that the URL or the specified headers are rewritten only when certain conditions are met. These conditions are based on the request and response information.

  References:

  https://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url

• Question 225:

  You have an Azure subscription that contains a web app named App1 and an Azure Web Application Firewall (WAF) on Azure Front Door instance named FD1. FD1 manages traffic for App1.

  You need to ensure that if an IP address sends abnormally high levels of traffic to App1, the traffic is detected and blocked automatically. The solution must minimize administrative effort.

  What should you include in the solution?

  A. an IP restriction rule
  B. a WAF exclusion list
  C. a bot protection rule set
  D. a rate limiting rule
  D. a rate limiting rule

• Question 226:

  You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance.

  You need to configure the policy to meet the following requirements:

  1. Log all connections from Australia.

  2. Deny all connections from New Zealand.

  3. Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute.

  What is the minimum number of objects you should create?

  A. three custom rules that each has one condition
  B. one custom rule that has three conditions
  C. one custom rule that has one condition
  D. one rule that has two conditions and another rule that has one condition
  A. three custom rules that each has one condition

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/web-application-firewall/afds/afds-overview

• Question 227:

  DRAG DROP

  You have an Azure Web Application Firewall (WAF) v2 tier named AG1 on an Azure application gateway.

  AG1 has a policy named Policy 1.

  You need to add a custom rule to Policy 1. The rule must block all requests from IP addresses in a specific

  IP address range.

  Which four PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 228:

  You have the on-premises networks shown in the following table.

  

  You have an Azure subscription that contains an Azure virtual WAN named VWAN1 and a virtual network named VNet1. VWAN is connected to the on-premises networks and VNet1 in a full mesh topology. The virtual hub routing preference for VWAN1 is AS Path.

  You need to route traffic from VNet1 to 10.61.1.5.

  Which path will be used?

  A. the VPN connection to Branch1
  B. the VPN connection to Branch2
  C. the ExpressRoute connection to Branch2
  D. the ExpressRoute connection to Branch3
  D. the ExpressRoute connection to Branch3

  ---

  Explanation

  1- VWAN prefers ER over VPN2- it doesn't have BGP prepend .. Branch 2 has three AS hops so it is less preferred

• Question 229:

  HOTSPOT

  You are planning an Azure solution that will contain the following types of resources in a single Azure region:

  1. Virtual machine

  2. Azure App Service

  3. Virtual Network gateway

  4. Azure SQL Managed Instance

  App Service and SQL Managed Instance will be delegated to create resources in virtual networks.

  You need to identify how many virtual networks and subnets are required for the solution. The solution must minimize costs to transfer data between virtual networks.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-for-azure-services#services-that-can-be-deployed-into-a-virtual-network

• Question 230:

  You need to implement name resolution for the cloud.healthengine.com.

  The solution must meet the networking requirements.

  What should you do to implement automatic DNS name registration in clould.healthengine.com?

  A. Create virtual network links
  B. Configure conditional forwarding
  C. Create an SOA record in cloud.healthengine.com
  A. Create virtual network links

  ---

  Explanation

  Scenario: Automatically register the DNS names of Azure virtual machines to the cloud.healthengine.com zone

  After you create a private DNS zone in Azure, you'll need to link a virtual network to it. Once linked, VMs hosted in that virtual network can access the private DNS zone. When creating a link between a private DNS zone and a virtual network. You have the option to enable autoregistration. With this setting enabled, the virtual network becomes a registration virtual network for the private DNS zone. A DNS record gets automatically created for any virtual machines you deploy in the virtual network. DNS records will also be created for virtual machines already deployed in the virtual network.

  https://docs.microsoft.com/en-us/azure/dns/private-dns-virtual-network-links