Microsoft AZ-700 Online Practice Questions and Exam Preparation

Microsoft AZ-700 Online Questions & Answers

• Question 391:

  You need to provide access to storage1. The solution must meet the PaaS networking requirements and the business requirements.

  What should you include in the solution?

  A. a private endpoint
  B. Azure Traffic Manager
  C. Azure Front Door
  D. a service endpoint
  A. a private endpoint

  ---

  Explanation

  service endpoint limitation

  Endpoints are enabled on subnets configured in Azure virtual networks. Endpoints can't be used for traffic from your premises to Azure services

• Question 392:

  SIMULATION

  

  Username and password

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected] Azure Password: xxxxxxxxxx

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 12345678

  You plan to deploy a VPN gateway and an ExpressRoute gateway to VNET2.

  You need to prepare VNET2 to ensure that you can deploy the gateways.

  To complete this task, sign in to the Azure portal.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Configure ExpressRoute and Site-to-Site coexisting connections using the Azure portal

  Step 1: In the Azure portal, search for and select virtual networks.

  Step 2: On the Virtual networks page, select the virtual network you want to add a subnet to. Select the VNET2 virtual network.

  Step 3: On the virtual network page, select Subnets from the left navigation.

  Step 4: On the Subnets page, select + Subnet.

  Step 5: On the Add subnet screen, enter or select values for the subnet settings. You can configure the following settings for a subnet:

  Name: The name must be unique within the virtual network.

  Subnet address range: The range must be unique within the address space and can't overlap with other subnet address ranges in the virtual network. You must specify the address space by using Classless Inter-Domain Routing (CIDR) notation. The Gateway Subnet must be /27 or a shorter prefix (such as /26 or /25).

  Specify: 10.0.0.0/27

  Step 6: Select Save.

  References:

  https://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet

• Question 393:

  You have an application deployed in to two Azure app services as shown below.

  

  You need to change the front end to an active/active application instances in which both regions process incoming connections.

  What should you do?

  A. Add a load balancer to each region
  B. Add an Azure application gateway to each region
  C. Add an Azure Content Delivery Network (CDN)
  D. Modify the Traffic Manager routing method.
  D. Modify the Traffic Manager routing method.

  ---

  Explanation

  Correct Answer(s):

  Modify the Traffic Manager routing method - Azure Traffic Manager supports six traffic-routing methods to determine how to route network traffic to the various service endpoints.

  You can select Weighted routing when you want to distribute traffic across a set of endpoints based on their weight. Set the weight the same to distribute evenly across all endpoints.

  https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methodsWrongAnswers:

  Add a load balancer to each region - Existing traffic manager can distribute traffic to multiple regions.

  Azure Web App will have its own load balancer.

  Add an Azure application gateway to each region - Existing traffic manager can distribute traffic to multiple regions. Azure Web App will have its own load balancer.

  Add an Azure Content Delivery Network (CDN) - CDN is used to cache content near to user's location.

• Question 394:

  HOTSPOT

  Your on-premises network contains the subnets shown in the following table.

  

  The network contains a firewall named FW1 that uses a public IP address of 131.107.100.200.

  You have an Azure subscription that contains the resources shown in the following table.

  

  You plan to configure a Site-to-Site (S2S) VPN named VPN1 that will connect GW1 to FW1.

  You need to configure LNG1 to support VPN1. The solution must meet the following requirements:

  1. Ensure that the resources on Subnet1 and Subnet2 can communicate with the resources on VNet1.

  2. Minimize administrative effort.

  How should you configure LNG1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 395:

  You need to validate outbound connectivity from an Azure virtual machine to an external host.

  What should you use?

  A. Connection Troubleshoot
  B. Next hop
  C. NSG flow logs
  D. Traffic Analytics
  A. Connection Troubleshoot

  ---

  Explanation

  Correct Answer(s):

  Connection Troubleshoot - The connection troubleshoot capability enables you to test a connection between a VM and another VM, an FQDN, a URI, or an IPv4 address. The test returns similar information returned when using the connection monitor capability, but tests the connection at a point in time, rather than monitoring it over time, as connection monitor does

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

  Wrong Answers:

  Next hop -- Next hop helps you determine if traffic is being directed to the intended destination, or whether the traffic is being sent nowhere.

  NSG flow logs -- NSG flow logs is a feature of Azure Network Watcher that allows you to log information about IP traffic flowing through an NSG.

  Traffic Analytics It provides visibility into user and application activity in cloud networks.

• Question 396:

  HOTSPOT

  You have an Azure subscription that contains the virtual machines shown in the following table.

  

  VNet1 and VNet2 are NOT connected to each other.

  You need to block traffic from SQL Server 2019 to IIS by using application security groups. The solution must minimize administrative effort.

  How should you configure the application security groups? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 2

  All network interfaces assigned to an application security group have to exist in the same virtual network that the first network interface assigned to the application security group is in.

  We need one application security group for each of the two virtual networks.

  Box 2: 3

  One network assignment in VNet1. Two network assignments in VNET2.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/application-security-groups

• Question 397:

  You have an Azure environment as shown below.

  

  You need to find to which environments/virtual machines that VM1 can communicate?

  A. VM2 Only
  B. VM2 and VM3 Only
  C. The on-premise datacenter and VM2 only
  D. The on-premise datacenter, VM2 and VM3 only
  C. The on-premise datacenter and VM2 only

  ---

  Explanation

  VM1 is in VNET1. VNET1 has a Site-to-Site VPN connection with on-premise data center. So, VM1 can communicate with on-premise datacenter.

  VM1 is in VNET1. VNET1 is peered with VNET2. So, VM1 can communicate with VM2.

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit?toc=/azure/virtual-network/toc.json

• Question 398:

  DRAG DROP

  You have an Azure subscription that contains the resources shown in the following table.

  

  The IP Addresses settings for Vnet1 are configured as shown in the exhibit.

  

  You need to ensure that you can integrate WebApp1 and Vnet1.

  Which three actions should you perform in sequence before you can integrate WebApp1 and Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#gateway-required-vnet-integration

• Question 399:

  You plan to deploy an Azure App Service web app that will have multiple instances across multiple Azure regions. You need to deploy a load balancing service for the planned deployment. The solution must meet the following requirements:

  1. Maintain access to the app in the event of a regional outage.

  2. Support Azure Web Application Firewall (WAF).

  3. Support cookie-based affinity.

  4. Support URL routing.

  What should you deploy?

  A. Azure Front Door
  B. Azure Load Balancer
  C. Azure Traffic Manager
  D. Azure Application Gateway
  A. Azure Front Door

  ---

  Explanation

  Correct Answer(s):

  Azure Front Door - Front Door is an application delivery network that provides global load balancing and site acceleration service for web applications. It offers Layer 7 capabilities for your application like SSL offload, path-based routing, fast failover, caching, etc. to improve performance and high-availability of your applications.

  https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview#azure-load-balancing-services

  Wrong Answers:

  Azure Load Balancer - It is a regional load balancing service.

  Azure Traffic Manager - It does not support URL routing.

  Azure Application Gateway - It is a regional load balancing service.

• Question 400:

  HOTSPOT

  You have an Azure subscription that contains 20 virtual machines and a virtual network named VNet1.

  You plan to provide access to the virtual machines by using Azure Bastion.

  You need to configure a subnet for Azure Bastion. The solution must minimize the number of IP addresses required for the subnet.

  How should you configure the subnet? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: /26 Subnet mask:

  To minimize the number of IP addresses used by an Azure Bastion subnet, configure it with the smallest allowed subnet size, which is /26 (or larger, like /25 or /24). This provides the minimum necessary IP addresses while still allowing for Bastion's scaling requirements.

  Box 2:

  AzureBastionSubnet Name:

  Creating the AzureBastionSubnet: When creating the subnet for Azure Bastion, name it

  AzureBastionSubnet. Assign it a CIDR block of /26 (or larger, like /25 or /24). Ensure this subnet is within the virtual network's address space. For example, if your VNet has the address space 10.1.0.0/16, you could assign AzureBastionSubnet as 10.1.1.0/26.

  References:

  https://learn.microsoft.com/en-us/azure/bastion/configuration-settings