AZ-700 Free Practice Questions — Page 5

Question 41

HOTSPOT - You have an Azure subscription that is linked to a Microsoft Entra tenant. The subscription contains a virtual network named VNet1, a storage account named storage1, an Azure App Service app named App1, and an Azure SQL database named DB1. VNet1 contains two subnets named Subnet1 and Subnet2. Subnet1 and Subnet2 each has a subnet mask of 255.255.255.224. You plan to perform the following actions: • On Subnet1, configure a service endpoint to connect to storage1 and a service endpoint to connect to the Microsoft Entra tenant. • On Subnet2, configure a private endpoint to connect to App1 and a private endpoint to connect to DB1. How many IP addresses will be available on each subnet once the planned actions are complete? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 42

HOTSPOT - You have an Azure subscription that contains 200 virtual machines. You need to use Azure Network Watcher to identify which virtual machines generate the most network traffic. The solution must minimize administrative effort. Which prerequisites should you deploy for Network Watcher, and which Network Watcher feature should you use to identify the virtual machines? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 43

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table: Each quarter, you deploy five new virtual machines to host App1. You need to add a rule to NSG1 to ensure that the virtual machines that host App1 can connect to SQL1 and SQL2. The solution must follow the principle of least privilege and minimize administrative effort. How should you configure the source property and the destination property for the rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 44

DRAG DROP - Your on-premises network uses an IP address space of 10.0.0.0/20. You have an Azure subscription that contains the resources shown in the following table. The on-premises network is connected to HubVnet by using a Site-to-Site (S2S) VPN. You deploy an Azure firewall named AZFW1 to HubVNet. You need to ensure that AZFW/1 can inspect all the traffic between the on-premises network and SpokeVNet. What should you do in RT1? To answer, drag the appropriate destination to the correct route. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 45

HOTSPOT - You have an Azure subscription that contains a virtual network. The virtual network contains two subnets named Subnet1 and Subnet2. You have an instance of Azure Application Gateway v2 named AppGw1 that is connected to Subnet1. You need to move AppGw1 to Subnet2. The solution must minimize downtime. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 46

DRAG DROP - You have two Azure subscriptions named Sub1 and Sub2 that contain the resources shown in the following table. VNet1 and VNet2 are NOT connected. You plan to create an Azure Private Link service named Link1 that will be used to connect VNet1 and VNet2. You need to ensure that Link1 meets the following requirements: • Ensures that VM1 can connect only to a web app hosted on VM2 • Prevents VM1 from connecting to the other resources that are connected to VNet2 Which additional resources should you create for each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 47

HOTSPOT - You have an Azure subscription that contains an Azure application gateway named AG1 and two Azure App Service apps named App1 and App2 that have the following configurations: • Both apps are accessible by using HTTP and HTTPS. • HTTP host headers are used to route requests to the appropriate apps. • Both apps are hosted in a single App Service Environment in the West Europe Azure region. You need to publish the apps by using AG1. The solution must ensure that AG1 provides both HTTP and HTTPS access. What is the minimum number of resources required for AG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 48

HOTSPOT - You have an Azure subscription that contains six Azure App Service apps. The apps have an identical configuration and are deployed across multiple Azure regions. You plan to deploy Azure Front Door to load balance traffic across the apps. You need to ensure that the round robin load-balancing algorithm will send traffic only to a limited number App Service apps based on their proximity to a user. The solution must minimize administrative effort. What should you modify, and what should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 49

HOTSPOT - You have an Azure subscription that contains a virtual machine scale set named VMSS1 and a public standard Azure load balancer named LB1. VMSS1 contains eight virtual machines that have private IP addresses only. VMSS1 is configured as a backend pool of LB1. LB1 has two frontend IP addresses and one outbound rule that provides internet connectivity to VMSS1. What is the maximum number of ports available to the virtual machines in VMSS1, and what should you change to increase the maximum number of SNAT ports available to VMSS1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 50

You have an Azure subscription that contains the resources shown in the following table. You need to configure a solution to meet the following requirements: • App1 must be assigned a private endpoint. • Access to App1 from the internet must be routed via FD1. What should you configure on FD1?