AZ-700 Free Practice Questions — Page 11

Question 55

DRAG DROP - You have an on-premises network. You have an Azure subscription that contains a virtual network named VNet1. VNet1 is connected to an Azure Virtual WAN hub named Hub1. You need to enable connectivity between the on-premises network and VNet1 by using Hub1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 55

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based. You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit. You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?

Question 56

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You need to ensure that network traffic is routed over the Azure backbone network for the following scenarios: • Traffic from SQLMIT to storage1 • Traffic from domain joined servers on VNet2 to storage The solution must minimize costs. What should you configure for each scenario? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 56

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network named Vnet1 A subnet named Subnet1 in Vnet1 - ✑ A virtual machine named VM1 that connects to Subnet1 ✑ Three storage accounts named storage1, storage2, and storage3 You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts. Solution: You create a network security group (NSG). You configure a service tag for Microsoft.Storage and link the tag to Subnet1. Does this meet the goal?

Question 57

Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3. The departments at the company use the Azure subscriptions as shown in the following table. All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region. You plan to connect all the subscriptions to the on-premises network by using ExpressRoute. What is the minimum number of ExpressRoute circuits required?

Question 57

HOTSPOT - You have an Azure subscription that contains 1,000 virtual machines. You collect network security group (NSG) flow logs. You need to identify all the virtual machines that have interacted with non-Azure public IP addresses during the last 30 days. How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 58

HOTSPOT - You have a firewall that is managed by using an Azure Firewall Premium policy named Policy1. You need to configure Policy1 to block outbound traffic to the following locations: • Malicious addresses identified by Microsoft. • Social networking sites The solution must minimize administrative effort. What should you configure in Policy1 for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 58

You have Azure App Service apps in the West US Azure region as shown in the following table. You need to ensure that all the apps can access the resources in a virtual network named VNet1 without forwarding traffic through the internet. How many integration subnets should you create?

Question 59

You have a website that uses an FQDN of www.contoso.com. The DNS record for www. contoso.com resolves to an on-premises web server. You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1. You build the website on Web1. You plan to configure ContosoFD1 to publish the website for testing. When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit. (Click the Exhibit tab.) You need to test the website and ContosoFD1 without affecting user access to the on-premises web server. Which record should you create in the contoso.com DNS domain?

Question 59

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an app named App1 to meet the following requirements: • External users must be able to access App1 from the internet. • App1 will be load balanced across all the virtual machines. • App1 will be hosted on VM1, VM2, VM3, and VM4. • App1 must be available if an Azure region fails. • Costs must be minimized. You need to implement a global load balancer solution for App1. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.