AZ-700 Free Practice Questions — Page 15

Question 145

DRAG DROP - You have an Azure subscription. You plan to deploy Azure Front Door with Azure Web Application Firewall (WAF). You plan to implement custom rules and managed rules that meet the following requirements: • Block malicious bots. • Throttle client IP addresses that exceed 100 connections per minute. You need to identify which Front Door SKU to configure, and which type of rule to configure for each requirement. The solution must minimize administrative effort and costs. What should you identify? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 147

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?

Question 148

You have an on-premises network named Site1. You have an Azure subscription that contains a virtual network named VNet1 and a storage account named storage1. Site1 and VNet1 are connected by using a Site-to-Site (S2S) VPN. You need to ensure that the servers in Site1 can connect to storage1 by using the S2S VPN. The solution must minimize administrative effort. What should you create on VNet1?

Question 149

HOTSPOT - You have an Azure subscription that contains 10 virtual machines. The virtual machines are assigned private IP addresses. The subscription contains the resources shown in the following table. You need to configure FWPolicy1 to meet the following requirements: • Allow incoming connections to the virtual machines from the internet on port 4567. • Block outbound connections from the virtual machines to an FQDN of *.fabrikam.com. What should you configure in FWPolicy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 150

You have an on-premises datacenter and an Azure subscription. You plan to implement ExpressRoute FastPath. You need to create an ExpressRoute gateway. The solution must minimize downtime if a single Azure datacenter fails. Which SKU should you use?

Question 151

HOTSPOT - You have an Azure application gateway. You need to create a rewrite rule that will remove the origin port from the HTTP header of incoming requests that are being forwarded to the backend pool. How should you configure each setting? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 152

HOTSPOT - You have an Azure subscription that contains an Azure key vault named Vault1 and an app registration for an Azure AD app named App1. You have a DNS domain named contoso.com that is hosted by a third-party DNS provider. You plan to deploy App1 by using Azure App Service. App1 will have the following configurations: • App1 will be hosted across five App Service apps. • Users will access App1 by using a URL of https://app1.contoso.com. • The user traffic of App1 will be managed by using Azure Front Door. • The traffic between Front Door and the App Service apps will be sent by using HTTP. • App1 will be secured by using an SSL certificate from a third-party certificate authority (CA). You need to support the Front Door deployment. Which two DNS records should you create, and to where should you import the SSL certificate for App1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 153

HOTSPOT - Your on-premises network contains a server named DNS1 that runs Windows Server 2022. DNS1 has the DNS server role and an IP address of 10.1.0.1. The network contains computers that use DNS1 for name resolution. You have an Azure subscription that contains the resources shown in the following table. The on-premises network connects to Vnet1 by using a Site-to-Site VPN. You need to ensure that the computers on the on-premises network can resolve the IP address for sql1.private.fabrikam.com. What should you do on DNS1 and DNS2? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 154

You have an Azure subscription that contains a virtual network named VNet1. VNet1 has a subnet mask of/24. You plan to implement an Azure application gateway that will have the following configurations: • Public endpoints: 1 • Private endpoints: 1 • Minimum instances: 1 • Maximum instances: 10 You need to configure the address space for the subnet of the application gateway. The solution must minimize the number of IP addresses allocated to the application gateway subnet. What is the minimum number of assignable IP addresses required?

Question 155

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?