Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 31:

  You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.

  You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.

  You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.

  What should you include in the solution?

  A. An Azure Virtual WAN ExpressRoute gateway
  B. A Network Virtual Appliance (NVA)
  C. A Site to site gateway (VPN gateway)
  D. A Point to site gateway (User VPN gateway)
  B. A Network Virtual Appliance (NVA)

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/virtual-wan/sd-wan-connectivity-architecture#direct-nva

• Question 32:

  HOTSPOT

  Your on-premises network uses an IP address range of 10.1.0.0 to 10.1.255.255.

  You plan to deploy a new Azure virtual network solution that will include the following elements:

  1. A virtual network named VNet1

  2. A Site-to-Site (S2S) VPN connection between VNet1 and the on-premises network

  3. GatewaySubnet in VNet1, which will be used as a route-based virtual network gateway

  You need to recommend which subnet masks to assign to VNet1 and GatewaySubnet. The solution must meet the following requirements:

  Maximize the number of available IP addresses on VNet1.

  Minimize the number of available IP addresses on GatewaySubnet.

  Which address spaces should you assign to VNet1 and GatewaySubnet? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 10.0.0.0/24

  Maximize the number of available IP addresses on VNet1.

  Box 2: 10.0.0.0/27

  Minimize the number of available IP addresses on GatewaySubnet.

  Create a gateway subnet

  The virtual network gateway requires a specific subnet named GatewaySubnet. The gateway subnet is part of IP address range for your virtual network and contains the IP addresses that the virtual network gateway resources and services use.

  When you create the gateway subnet, you specify the number of IP addresses that the subnet contains.

  The number of IP addresses needed depends on the VPN gateway configuration that you want to create.

  Some configurations require more IP addresses than others. It's best to specify /27 or larger (/26,/25 etc.) for your gateway subnet.

  References:

  https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

• Question 33:

  You plan to deploy the following types of resources in a single Azure region:

  1. Virtual machine

  2. Azure App Service

  3. Virtual Network gateway

  4. Azure SQL Managed Instance

  App Service and SQL Managed Instance will be delegated to create resources in virtual networks. You need to identify how many virtual networks and subnets are required for the solution.

  The solution must minimize costs to transfer data between virtual networks.

  What should you identify?

  A. Virtual Networks: 1
  B. Virtual Networks: 2
  C. Virtual Networks: 3
  D. Virtual Networks: 4
  E. Subnets: 1
  F. Subnets: 2
  G. Subnets: 3
  H. Subnets: 4
  A. Virtual Networks: 1
  H. Subnets: 4

  ---

  Explanation

  None of these resources has a requirement for dedicated virtual network. So, you can deploy all these resources in a single virtual network.

  Azure virtual machine must be deployed to a subnet. So, you need at least one subnet for virtual machine.

  Azure app service is delegate to create resources in the virtual network. So you need configure vNet integration for Azure app service. An integration subnet is required to integrate Azure App service with virtual network.

  You need a dedicated subnet called as gateway subnet for virtual network gateway.

  SQL Managed Instance is placed inside the Azure virtual network and the subnet that's dedicated to managed instances.

  So, in total you need a minimum of 4 subnets.

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-for-azure-services#services-that-can-be-deployed-into-a-virtual-network

• Question 34:

  HOTSPOT

  You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.

  What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 2: One NSG

  The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.

  Box 1: Two custom rules

  With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.

  The default rules in the NSG will allow all other traffic to VMScaleSet2.

• Question 35:

  You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

  You configure the application gateway to direct traffic to the URL of the application gateway.

  You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

  

  You need to ensure that the URL is accessible through the application gateway.

  Solution: You create a WAF policy exclusion request headers that contain 137.135.10.24.

  Does this meet the goat?

  A. Yes
  B. No
  B. No

• Question 36:

  HOTSPOT

  You have an Azure subscription.

  You plan to deploy an app named App1 that will be accessed by using Azure Application Gateway.

  You need to deploy the application gateway for App1. The solution must meet the following requirements:

  Support autoscaling to 100 capacity units. Minimize costs.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Standard V2 tier Configure an Application Gateway with the:

  The Azure Application Gateway Standard_v2 and WAF_v2 tiers support autoscaling and can scale up to 125 capacity units. Each capacity unit can handle a certain number of persistent connections, and additional capacity units are added as limits are reached. The Azure Application Gateway Standard_v2 tier is generally the cheaper option compared to the WAF_v2 tier. While both tiers have a base cost per hour, the WAF_v2 tier includes additional features for web application firewalling, which is reflected in its higher hourly cost.

  Box 2: 10 Set the maximum instance count to:

  You must specify a minimum and optionally maximum instance count. Minimum capacity ensures that Application Gateway and WAF v2 don't fall below the minimum instance count specified, even without traffic. The minimum instance count can range from 0 to 100. Each instance is roughly equivalent to 10 more reserved Capacity Units.

  References:

  https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant

• Question 37:

  You need to configure the default route on Vnet2 and Vnet3. The solution must meet the virtual networking requirements.

  What should you use to configure the default route?

  A. route filters
  B. BGP route exchange
  C. a user-defined route assigned to GatewaySubnet in Vnet1
  D. a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3
  B. BGP route exchange

  ---

  Explanation

  You cannot specify a virtual network gateway created as type ExpressRoute in a user-defined route because with ExpressRoute, you must use BGP for custom routes

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

• Question 38:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You need to create an Azure Firewall instance named FW1 that meets the following requirements:

  1. Has an IP address from the address range of 10.1.255.0/24

  2. Uses a new Premium firewall policy named FW-policy1

  3. Routes traffic directly to the internet

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  See the explanation below.

  Step 1: On the Azure portal menu or from the Home page, select Create a resource.

  Step 2: Type firewall in the search box and press Enter.

  Step 3: Select Firewall and then select Create.

  Step 4: On the Create a Firewall page, use the following table to configure the firewall:

  1. Name - Enter FW1 2. Firewall management - Select Use a Firewall Policy to manage this firewall.

  3. Firewall policy - Select Add new, and enter FW-policy 1.

  4. Choose a virtual network - Select Create new

  Step 4.1: Enter or select the appropriate values: Subscription - Select your Azure subscription. Resource group -Name -Region -

  Step 4.2 Select Next: IP addresses.

  Step 4.3 For IPv4 Address space, accept the default 10.0.0.0/16.

  Step 4.4 Under Subnet, select default. Subnet name -For Address range, type 10.1.255.0/24

  Step 4.5 Select Save.

  Step 4.6 Select Review + create.

  Step 4.7: Select Create.

  Step 5: Back to the Create a Firewall page:

  1. Public IP address - Add new

  Step 6: Accept the other default values, then select Review + create.

  Step 7: Review the summary, and then select Create to create the firewall.

  References:

  https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy

  https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

• Question 39:

  You are planning the IP addressing for the subnets in Azure virtual networks.

  Which type of resource requires IP addresses in the subnets?

  A. storage account
  B. internal load balancers
  C. service endpoints
  D. virtual network peering
  B. internal load balancers

  ---

  Explanation

  During the creation of the load balancer, you'll configure:

  1. Frontend IP address

  2. Backend pool

  3. Inbound load-balancing rules

  When you create an internal load balancer, a virtual network is configured as the network for the load balancer.

  A private IP address in the virtual network is configured as the frontend for the load balancer. The frontend IP address can be Static or Dynamic.

  References:

  https://learn.microsoft.com/en-us/azure/load-balancer/quickstart-load-balancer-standard-internal-portal

• Question 40:

  HOTSPOT

  You have an on-premises datacenter named DC1. DC1 hosts services that use public IPv4 and IPv6 address ranges that you own.

  You plan to migrate the services to Azure.

  You purchase a new Azure subscription.

  You need to provision the existing public IP addresses in the subscription.

  What is the smallest IP address prefix that you can use for each IP address range? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: /24 IPv4

  For migrating your own public IP addresses to Azure using the Bring Your Own IP (BYOIP) feature-formally known as Custom IP Prefixes-the smallest supported prefix sizes are: IPv4 address range: The smallest prefix is /24. This limit exists because most Internet Service Providers (ISPs) do not accept BGP advertisements for ranges smaller than a /24. Depending on the deployment model, regional (child) IPv4 prefixes derived from a global range can be as small as /26, but the parent range validated and advertised to the internet must be at least a /24.

  Box 2: /64 IPv6

  Public IPv6 prefixes must be derived from the regional ranges. Only the first 2048 IPv6 addresses of each regional /64 custom IP prefix can be utilized as valid IPv6 space. Attempting to create public IPv6 prefixes that span beyond this range results in an error.

  Custom IPv6 prefixes use a parent/child model. In this model, the Microsoft Wide Area Network (WAN) advertises the global (parent) range, and the respective Azure regions advertise the regional (child) ranges. Global ranges must be /48 in size, while regional ranges must always be /64 size. You can have multiple /64 ranges per region.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/custom-ip-address-prefix

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/create-custom-ip-address-prefix-ipv6-portal