Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 261:

  You have a web application that uses Azure Traffic Manager for load balancing.

  End users must be routed to the closest endpoint for lowest network latency.

  Which traffic-routing method should you configure?

  A. Performance
  B. Geographic
  C. Priority
  A. Performance

  ---

  Explanation

  Correct Answer(s):

  Performance Use when you have endpoints in different geographic locations, and you want end users to use the "closest" endpoint for the lowest network latency.

  Wrong Answers:

  Geographic - Select this routing method to direct users to specific endpoints (Azure, External, or Nested) based on where their DNS queries originate from geographically.

  Priority - Select this routing method when you want to have a primary service endpoint for all traffic. You can provide multiple backup endpoints in case the primary or one of the backup endpoints is unavailable

• Question 262:

  DRAG DROP

  You have an Azure Front Door instance named FrontDoor1.

  You deploy two instances of an Azure web app to different Azure regions.

  You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.

  You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#associate-the-custom-domain-with-your-front-door

  https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

• Question 263:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains an Azure Front Door Premium profile named AFD1 and an Azure Web Application Firewall (WAF) policy named WAF1. AFD1 is associated with WAF1.

  You need to configure a rate limit for incoming requests to AFD1.

  Solution: You modify the policy settings of WAF1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  References:

  https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-configure

• Question 264:

  HOTSPOT

  You have an on-premises network and an Azure virtual network named VNet1.

  You need to implement Azure Extended Network. The solution must minimize costs.

  Which type of virtual machine should you deploy to VNet1, and which tool should you use to configure Azure Extended Network? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 265:

  You have an Azure environment that contains a virtual network named VNet1 with IP address space of 10.2.0.0/16.

  No devices are connected to VNet1.

  You plan to peer VNet1 with another virtual network named VNet2.

  VNet2 has an address space of 10.2.0.0/16.

  You need to create the peering.

  What should you do first?

  A. Configure a service endpoint on VNet2.
  B. Add a gateway subnet to VNet1.
  C. Create a subnet on VNEt1 and VNet2.
  D. Modify the address space of VNet1.
  D. Modify the address space of VNet1.

  ---

  Explanation

  Correct Answer(s):

  Modify the address space of VNet1 - Address spaces of virtual networks (VNet) must not overlap to enable VNet Peering. The IP address range for VNet1 and VNet2 are overlapping. Therefore, the first step is to modify the IP address range for VNet1.

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#vnet-peering

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints

  Wrong Answers:

  Configure a service endpoint on VNet2 - Service endpoints provide secure and direct connectivity to Azure services over Azure backbone network.

  Add a gateway subnet to VNet1 - You need to create a gateway subnet for your VNet to configure a virtual network gateway. It is not required for Vnet peering.

  Create a subnet on VNEt1 and VNet2 - Subnets are not mandatory for VNet peering.

• Question 266:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You have two servers that are each hosted by a separate service provider in New York and California. The server hosted in New York is accessible by using a host name of ny.contoso.com. The server hosted in California is accessible by using a host name of ca.contoso.com.

  You need to implement an Azure solution to route users to the server that has the lowest latency. The solution must minimize costs.

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Azure Front Door Route Lowest Latency

  Set up Azure Front Door to route user traffic based on the lowest latency between the two web app servers. Start by adding a frontend host for Azure Front Door.

  1. If there is already an Azure Front Door available, select it and skip Phase

  1. Start with Phase 2.

  2. If there is already an Azure Front Door and a backend pool available, select them and skip Phase 1 and Phase

  2. Start with Phase 3.

  Phase 1: Set up an Azure Front Door

  Step 1: From the home page or the Azure menu, select + Create a resource. Select Networking > Front Door and CDN profiles.

  Step 2: On the Compare offerings page, select Explore other offerings. Then select Azure Front Door (classic). Then select Continue.

  Step 3: In the Basics tab of the Create a Front Door page, provide or select the following information, and then select

  Next: Configuration.

  Example:

  1. Subscription: Select your subscription.

  2. Resource group: Select Create new and type FrontDoorQS_rg in the text box.

  3. Resource group location: Select Central US.

  Step 4: In Frontends/domains, select + to open the Add a frontend host page.

  Step 5: For Host name, type a globally unique hostname. For example, contoso-frontend. Select Add.

  

  

  

  

  

  Step 4: Select Add a backend again. Provide or select the following information and select Add.

  Step 5: Select Add on the Add a backend pool page to finish the configuration of the backend pool.

  Phase 3: Create a routing rule

  Lastly, create a routing rule. A routing rule links your frontend host to the backend pool. The rule routes a request for contoso-frontend.azurefd.net to myBackendPool.

  Step 1: Still in Create a Front Door, in Routing rules, select + to set up a routing rule.

  Step 2: In Add a rule, for Name, type LocationRule. Keep all the default values, then select Add to create the routing rule.

  

  Warning

  It's essential that you associate each of the frontend hosts in your Azure Front Door with a routing rule that has a default path /*. This means that you need to have at least one routing rule for each of your frontend hosts at the default path /* among all of your routing rules. Otherwise, your end-user traffic may not be routed properly.

  Step 3: Select Review + create and verify the details. Then, select Create to start the deployment.

  

  Note: Lowest latencies based traffic-routing

  Deploying origins in two or more locations across the globe can improve the responsiveness of your applications by routing traffic to the destination that is 'closest' to your end users. Latency is the default traffic-routing method for your Front Door configuration. This routing method forwards requests from your end users to the closest origin behind Azure Front Door. This routing mechanism, combined with the anycast architecture of Azure Front Door, ensures that each of your end users gets the best performance based on their location.

  The 'closest' origin isn't necessarily the closest as measured by geographic distance. Instead, Azure Front Door determines the closest origin by measuring network latency.

• Question 267:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains an Azure Front Door Premium profile named AFD1 and an Azure Web Application Firewall (WAF) policy named WAF1. AFD1 is associated with WAFT.

  You need to configure a rate limit for incoming requests to AFD1.

  Solution: You configure a custom rule for WAF1.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 268:

  HOTSPOT

  You have an Azure subscription that contains a virtual network. The virtual network contains two subnets named Subnet1 and Subnet2. You have an instance of Azure Application Gateway v2 named AppGw1 that is connected to Subnet1.

  You need to move AppGw1 to Subnet2. The solution must minimize downtime.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Public Set the frontend IP address type to:

  Box 2: Stop-AzApplicationGateway Before moving AppGw1, run:

  Can I change the virtual network or subnet for an existing application gateway? You can move an application gateway across subnets within the same virtual network only. It's supported with v1 with a public and private frontend (dynamic allocation) and v2 with a public frontend only [Box 1]. We can't move the application gateway to another subnet if the private frontend IP configuration is statically allocated. The application gateway should be in a Stopped state [Box 2] to perform this action. Stopping or starting v1 changes the public IP. This operation can only be done by using Azure PowerShell and the Azure CLI by running the following commands:

  $VNet = Get-AzVirtualNetwork -Name "<VNetName>" -ResourceGroupName "<ResourceGroup>"

  $Subnet = Get-AzVirtualNetworkSubnetConfig -Name "<NewSubnetName>" -VirtualNetwork $VNet

  $AppGw = Get-AzApplicationGateway -Name "<ApplicationGatewayName>" -ResourceGroupName

  "<ResourceGroup>" Stop-AzApplicationGateway -ApplicationGateway $AppGw [Box 2] $AppGw = Set-

  AzApplicationGatewayIPConfiguration -ApplicationGateway $AppGw -Name

  $AppGw.GatewayIPConfigurations.Name -Subnet $Subnet #If you have a private frontend IP

  configuration, uncomment and run the next line: #$AppGw = Set-AzApplicationGatewayFrontendIPConfig -Name

  $AppGw.FrontendIPConfigurations.Name [1] -Subnet $Subnet -ApplicationGateway $AppGw Set-

  AzApplicationGateway -ApplicationGateway $AppGw [Box 3]

  Box 3: Set-AzApplicationGateway To move AppGw1, run:

  References:

  https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

• Question 269:

  You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe Azure region.

  You deploy an Azure App Service app named App1 to the West Europe region.

  You need to provide App1 with access to the resources in Vnet1. The solution must minimize costs.

  What should you do first?

  A. Create a private link.
  B. Create a new subnet.
  C. Create a NAT gateway.
  D. Create a gateway subnet and deploy a virtual network gateway.
  B. Create a new subnet.

  ---

  Explanation

  Create a new subnet, since both Vnet and App Service are in the same region.

  https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#enable-vnet-integration

  Regional VNet Integration = "If the VNet is in the same region, either create a new subnet or select an empty pre-existing subnet"

• Question 270:

  HOTSPOT

  You have an Azure Front Door instance that provides access to a web app. The web app uses a hostname of www.contoso.com.

  You have the routing rules shown in the following table.

  

  Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/frontdoor/front-door-route-matching