Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 281:

  HOTSPOT

  You create an ExpressRoute circuit named ERC1 that is enabled by your connectivity provider.

  You need to ensure that the routes for Azure Backup and Azure Cosmos DB are advertised to the on-premises network via ECR1. The solution must minimize administrative effort.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 282:

  You have Azure App Service apps in the West US Azure region as shown in the following table.

  

  You need to ensure that all the apps can access the resources in a virtual network named Vnet1 without forwarding traffic through the internet.

  How many integration subnets should you create?

  B. 1
  C. 3
  D. 4
  E. 6
  C. 3

  ---

  Explanation

  One integration subnet is required per App Service Plan regardless of how many apps are running in the App Service Plan.

  References:

  https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration

• Question 283:

  HOTSPOT

  You plan to deploy Azure Virtual WAN.

  You need to deploy a virtual WAN hub that meets the following requirements:

  1. Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection

  2. Supports 8 Gbps of ExpressRoute traffic

  3. Minimizes costs

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

• Question 284:

  You have an instance of Azure Web Application Firewall (WAF) on Azure Front Door.

  You plan to create a WAF rule that will block high rates of requests from a single IP address.

  You need to query Log Analytics to identify the optimal threshold for the rule.

  Which table should you query in Log Analytics?

  A. AZFWThreatlnte1
  B. AzureDiagnostics
  C. SecurityDetection
  D. AGWFirewallLogs
  B. AzureDiagnostics

• Question 285:

  HOTSPOT

  You have an Azure subscription. The subscription contains two virtual machine scale sets that host two apps named App1 and App2, an Azure Private Link service named PLS1, and an Azure load balancer named LB1. PLS1 uses LB1 and has TCP Proxy V2 disabled. PLS1 provides access to App1 only.

  You need to perform the following actions:

  1. Provide access to App1 and App2.

  2. Increase the number of supported private endpoint connections.

  What should you modify to provide access to App2, and what should you modify to increase the number of supported connections? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 286:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains an Azure Virtual WAN named VWAN1.

  VWAN1 contains a hub named Hub1.

  Hub1 has a security status of Unsecured.

  You need to ensure that the security status of Hub1 is marked as Secured.

  Solution: You implement Azure Web Application Firewall (WAF).

  Does this meet the requirement?

  A. Yes
  B. No
  B. No

• Question 287:

  DRAG DROP

  You have a computer named CLIENT! that runs Windows 11 and has the Azure VPN Client installed.

  You have an Azure virtual network gateway named VPNGW1.

  You need to ensure that you can connect CLIENT1 to VPNGW1. The solution must support Microsoft Entra authentication.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 288:

  You have an Azure subscription that contains the public IPv4 addresses shown in the following table.

  

  You plan to create a load balancer named LB1 that will have the following settings:

  Name: LB1

  Location: West US

  Type: Public

  SKU: Standard

  Which public IPv4 addresses can be used by LB1?

  A. IP1, IP3, IP4, and IP5 only
  B. IP3 only
  C. IP1 and IP3 only
  D. IP2 only
  E. IP1, IP2, IP3, IP4, and IP5
  F. IP3 and IP5 only
  B. IP3 only

  ---

  Explanation

  The load balancer LB1 requires a public IP address that meets the following criteria:

  Type: Public

  SKU: Standard

  Location: West US

  Among the five public IP addresses listed in the table, only IP3 meets all these criteria.

  IP1 and IP4 are located in West US and have a Basic SKU, so they cannot be used for a Standard SKU load balancer in West US.

  IP2 is located in West US and has a Basic SKU, but it is a dynamic IP address, which is not supported for a load balancer.

  IP5 is located in West US 2 and has a Standard SKU, but it cannot be used for a load balancer in West

  US.

  Therefore, the only public IP address that can be used by LB1 is IP3, which has a Standard SKU, a static assignment, and is located in West US.

• Question 289:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  You purchase a certificate for app1.contoso.com from a public certification authority (CA) and install the certificate on appservice1.

  You need to ensure that App1 can be accessed by using a URL of https://app1.contoso.com. The solution must ensure that all the traffic for App1 is routed via FD1.

  Which type of DNS record should you create, and where should you store the certificate? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  DNS: CNAME (When you added a custom domain to your Front Door's frontend hosts, you created a CNAME record in the DNS table of your domain registrar to map it to your Front Door's default .azurefd.net hostname)

  Store certificate in: KeyVault1 (Your key vault must be configured to use the Key Vault access policy permission model.) There you have a link with all explained

  https://learn.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain-https.

• Question 290:

  You are planning an Azure deployment that will contain three virtual networks in the East US Azure region as shown in the following table.

  

  A Site-to-Site VPN will connect Vnet1 to your company's on-premises network.

  You need to recommend a solution that ensures that the virtual machines on all the virtual networks can communicate with the on-premises network. The solution must minimize costs.

  What should you recommend for Vnet2 and Vnet3?

  A. VNet-to-VNet VPN connections
  B. peering
  C. service endpoints
  D. route tables
  B. peering

  ---

  Explanation

  Virtual network peering seamlessly connects two Azure virtual networks, merging the two virtual networks into one for connectivity purposes. The virtual networks appear as one for connectivity purposes. The traffic between virtual machines in peered virtual networks uses the Microsoft backbone infrastructure. Like traffic between virtual machines in the same network, traffic is routed through Microsoft's private network only.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview