Microsoft Microsoft Certified: Azure Network Engineer Associate AZ-700 Questions & Answers

• Question 41:

  HOTSPOT

  You have an Azure subscription.

  You have the on-premises sites shown the following table.

  

  You plan to deploy Azure Virtual WAN.

  You are evaluating Virtual WAN Basic and Virtual WAN Standard.

  Which type of Virtual WAN can you use for each site? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

• Question 42:

  HOTSPOT

  You have an Azure subscription that contains two virtual networks named Vnet1 and Vnet2.

  You register a public DNS zone named fabrikam.com. The zone is configured as shown in the Public DNS Zone exhibit.

  

  You have a private DNS zone named fabrikam.com. The zone is configured as shown in the Private DNS Zone exhibit. You have a virtual network link configured as shown in the Virtual Network Link exhibit.

  

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  DNS queries from the internet use the public DNS zone. In the public DNS zone, www.fabrikam.com is a CNAME record that resolves to appservice1.fabrikam.com which resolves to 131.107.1.1.

  Box 2: No

  DNS queries from the internet use the public DNS zone. There is no DNS record for server1.fabrikam.com in the public DNS zone.

  Box 3: No

  The private DNS zone is linked to VNet1, not VNet2. Therefore, resources in VNet2 cannot query the private DNS zone.

• Question 43:

  HOTSTOP

  You need to connect an on-premises network and an Azure environment. The solution must use ExpressRoute and support failing over to a Site-to-Site VPN connection if there is an ExpressRoute failure.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager

• Question 44:

  HOTSPOT

  You have the Azure App Service app shown in the App Service exhibit.

  

  The VNet Integration settings for as12 are configured as shown in the Vnet Integration exhibit. The Private Endpoint connections settings for as12 are configured as shown in the Private Endpoint connections exhibit.

  

  

  For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  The integration subnet can be used by only one App Service plan.

  Box 2: No

  No Private Endpoint connections defined.

  When regional virtual network integration is enabled, your app makes outbound calls through your virtual network. The outbound addresses that are listed in the app properties portal are the addresses still used by your app. However, if your

  outbound call is to a virtual machine or private endpoint in the integration virtual network or peered virtual network, the outbound address will be an address from the integration subnet.

  Box 3: Yes

  Apps in App Service are hosted on worker roles. Regional virtual network integration works by mounting virtual interfaces to the worker roles with addresses in the delegated subnet. Because the from address is in your virtual network, it can

  access most things in or through your virtual network like a VM in your virtual network would.

  Reference:

  https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration

• Question 45:

  HOTSPOT

  You have an Azure firewall shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  If forced tunneling was enabled, the Firewall Subnet would be named AzureFirewallManagementSubnet. Forced tunneling can only be enabled during the creation of the firewall. It cannot be enabled after the firewall has been deployed.

  Box 2:

  The “Visit Azure Firewall Manager to configure and manage this firewall” link in the exhibit shows that the firewall is managed by Azure Firewall Manager.

• Question 46:

  HOTSPOT You have an Azure application gateway named AppGW1 that provides access to the following hosts: www.adatum.com

  www.contoso.com www.fabrikam.com AppGW1 has the listeners shown in the following table.

  

  You create Azure Web Application Firewall (WAF) policies for AppGW1 as shown in the following table.

  

  For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies

• Question 47:

  HOTSPOT

  You have an Azure subscription that contains the virtual machines shown in the following table.

  

  Subnet1 and Subnet2 are associated to a network security group (NSG) named NSG1 that has the following outbound rule:

  Priority: 100 Port: Any Protocol: Any Source: Any Destination: Storage Action: Deny

  You create a private endpoint that has the following settings:

  Name: Private1 Resource type: Microsoft.Storage/storageAccounts Resource: storage1 Target sub-resource: blob Virtual network: Vnet1 Subnet: Subnet1

  For each of the following statements, select Yes of the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy

• Question 48:

  HOTSPOT

  You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2.

  You have the NAT gateway shown in the NATgateway1 exhibit.

  

  You have the virtual machine shown in the VM1 exhibit.

  

  Subnet1 is configured as shown in the Subnet1 exhibit.

  

  For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  VM1 is in Zone2 whereas the NAT Gateway is in Zone1. The VM would need to be in the same zone as the NAT Gateway to be able to use it. Therefore, VM1 cannot use the NAT gateway.

  Box 2: Yes

  NATgateway1 is configured in the settings for Subnet2.

  Box 3: No

  The NAT gateway does not have a single public IP address, it has an IP prefix which means more than one IP address. The VMs the use the NAT Gateway can use different public IP addresses contained within the IP prefix.

• Question 49:

  HOTSPOT

  You have an Azure Front Door instance that provides access to a web app. The web app uses a hostname of www.contoso.com.

  You have the routing rules shown in the following table.

  

  Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/frontdoor/front-door-route-matching

• Question 50:

  HOTSPOT

  You have an Azure Traffic Manager parent profile named TM1. TM1 has two child profiles named TM2 and TM3.

  TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.

  

  TM2 uses the weighted traffic-routing method with MinChildEndpoint = 2 and has the endpoints shown in the following table.

  

  TM3 uses priority traffic-routing method and has the endpoints shown in the following table.

  

  The App2, App4, and App6 endpoints have a degraded monitoring status.

  To which endpoint is traffic directed? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-nested-profiles