AZ-700 Free Practice Questions

Question 1

HOTSPOT - You have an Azure subscription that contains multiple virtual networks. From Microsoft Defender for Cloud, you select Regulatory Compliance and view the following compliance controls: • NS-2. Secure cloud services with network controls • NS-8. Detect and disable insecure services and protocols • NS-9. Connect on-premises or cloud network privately You need to recommend remediations for the controls. What should you include in the recommendation for each control? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 2

HOTSPOT - You have an Azure subscription that contains a user named User1 and the resources shown in the following table. You need to ensure that User1 can associate Policy1 to FW1 by using Azure Firewall Manager. The solution must follow the principle of least privilege. Which role should you assign to User1 for each resource group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 3

You have an Azure subscription that contains the resources shown in the following table. You need to control access to storage1 by using NSG1. What should you configure first?

Question 4

HOTSPOT - You have two on-premises sites named Site1 and Site2. Each site connects to the internet by using a local firewall device. You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. VNet1 and VNet2 reside in the East US Azure region and are connected by using virtual network peering. You need to configure a Site-to-Site (S2S) VPN solution that meets the following requirements: • Site1 and Site2 must connect directly to the Azure subscription by using their local firewall device. • The computers in Site1 and Site2 must be able to connect to the resources on VNet1 and VNet2. • The solution must include a virtual network gateway that uses three availability zones. What is the minimum number of virtual network gateways and local network gateways that you should deploy to Azure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 5

HOTSPOT - Your company has an Azure subscription that contains a virtual network named VNet1 and an Azure VPN gateway named vGW1. The company has 50 users that have Windows 11 devices. You need to ensure that the users can access the resources on VNet1. The solution must meet the following requirements: • Ensure that the users can establish Point-to-Site (P2S) VPN connections to vGW1. • Ensure that the users can authenticate by using only their Microsoft Entra credentials. Which type of tunnel should you configure, and which VPN client should you configure on the users' devices? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 6

HOTSPOT - You have an on-premises datacenter named DC1. DC1 hosts services that use public IPv4 and IPv6 address ranges that you own. You plan to migrate the services to Azure. You purchase a new Azure subscription. You need to provision the existing public IP addresses in the subscription. What is the smallest IP address prefix that you can use for each IP address range? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 7

DRAG DROP - You have two Azure subscriptions named Sub1 and Sub2. Each subscription is linked to a separate Microsoft Entra tenant. Sub1 contains a virtual machine scale set that hosts an app named App1. Sub2 contains a virtual network named VNet1. You need to connect VNet1 to App1 by using an Azure Private Link service. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 8

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. Policy1 has the following settings: • Service: Microsoft Storage • Allowed Resources: storage1 Subnet1 has the following settings: • Name: Subnet • Subnet address range: 10.0.0.0/24 • NAT gateway: None • Network security group: None • Route table: None • Service Endpoints o Services: Microsoft Storage o Service endpoint policies: Policy1 • Subnet delegation o Delegate subnet to a service: None Subnet2 has the following settings: • Name: Subnet2 • Subnet address range: 10.0.1.0/24 • NAT gateway: None • Network security group: None • Route table: None • Service Endpoints o Services: 0 selected • Subnet Delegation o Delegate subnet to a service: None For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 9

HOTSPOT - You have an Azure subscription that contains multiple virtual machines in two Azure regions. You need to load balance network traffic across the virtual machines by using a cross-region load balancer solution. Which type of load balancer should you deploy to each region, and which type of rule should you configure for the cross-region load balancer? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

Question 10

DRAG DROP - You have an Azure subscription that contains the resources shown in the following table. VNet1 and VNet2 are peered with each other. Subnet1 contains only VM1. You need to configure Subnet11 to support 500 IP addresses. The solution must ensure that all traffic is routed between VNet1 and VNet2 and users can access App1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.