AZ-700 Free Practice Questions

Question 1

DRAG DROP - You have two Azure subscriptions named Sub1 and Sub2. Each subscription is linked to a separate Microsoft Entra tenant. Sub1 contains a virtual machine scale set that hosts an app named App1. Sub2 contains a virtual network named VNet1. You need to connect VNet1 to App1 by using an Azure Private Link service. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 2

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. Policy1 has the following settings: • Service: Microsoft Storage • Allowed Resources: storage1 Subnet1 has the following settings: • Name: Subnet • Subnet address range: 10.0.0.0/24 • NAT gateway: None • Network security group: None • Route table: None • Service Endpoints o Services: Microsoft Storage o Service endpoint policies: Policy1 • Subnet delegation o Delegate subnet to a service: None Subnet2 has the following settings: • Name: Subnet2 • Subnet address range: 10.0.1.0/24 • NAT gateway: None • Network security group: None • Route table: None • Service Endpoints o Services: 0 selected • Subnet Delegation o Delegate subnet to a service: None For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 2

You have an Azure subscription that contains the resources shown in the following table. You need to control access to storage1 by using NSG1. What should you configure first?

Question 3

HOTSPOT - You have an Azure subscription that contains multiple virtual machines in two Azure regions. You need to load balance network traffic across the virtual machines by using a cross-region load balancer solution. Which type of load balancer should you deploy to each region, and which type of rule should you configure for the cross-region load balancer? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

Question 3

HOTSPOT - Your company has an Azure subscription that contains a virtual network named VNet1 and an Azure VPN gateway named vGW1. The company has 50 users that have Windows 11 devices. You need to ensure that the users can access the resources on VNet1. The solution must meet the following requirements: • Ensure that the users can establish Point-to-Site (P2S) VPN connections to vGW1. • Ensure that the users can authenticate by using only their Microsoft Entra credentials. Which type of tunnel should you configure, and which VPN client should you configure on the users' devices? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 4

DRAG DROP - You have an Azure subscription that contains the resources shown in the following table. VNet1 and VNet2 are peered with each other. Subnet1 contains only VM1. You need to configure Subnet11 to support 500 IP addresses. The solution must ensure that all traffic is routed between VNet1 and VNet2 and users can access App1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 4

HOTSPOT - You have an on-premises datacenter named DC1. DC1 hosts services that use public IPv4 and IPv6 address ranges that you own. You plan to migrate the services to Azure. You purchase a new Azure subscription. You need to provision the existing public IP addresses in the subscription. What is the smallest IP address prefix that you can use for each IP address range? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 5

HOTSPOT - You have an Azure subscription that contains virtual networks, network security groups (NSGs), load balancer, virtual machines, and virtual network gateways. You enable Azure Monitor Network Insights. You need to perform the following actions: • Review the NSG flow logs. • Monitor resource utilization. • Review the results of IP flow verify testing. Which Azure Monitor Network Insights feature should you use for each action? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 6

You have an Azure subscription that contains the resources shown in the following table. You test DDoSplan1 by running a simulation that targets IP1. You need to review the DDoS Protection mitigation reports. What should you use?

Question 7

You have an on-premises datacenter named DC1 that contains two routers. You have an Azure subscription. The subscription contains a virtual network named VNet1 and a zone-redundant ExpressRoute virtual network gateway named GW1 that uses the ErGw3Az SKU. GW1 is attached to VNet1 DC1 is connected to VNet1 by using an ExpressRoute Standard circuit named Circuit1. The DC1 routers are configured as endpoints for Circuit1. Circuit1 traffic traverses two physical links. During a link outage, the connection takes three minutes to fail over. You need to ensure that failovers between the links take less than one second. What should you do?