AZ-700 Free Practice Questions — Page 8

Question 39

HOTSPOT - You have an Azure subscription that contains a virtual network named VNet1. You need to implement hybrid connectivity between an on-premises network and VNet1. The solution must meet the following requirements: • All cross-premises network traffic must traverse an ExpressRoute circuit. • All cross-premises network traffic must be encrypted by using a Site-to-Site (S2S) VPN. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 40

You have an Azure subscription. You plan to implement Azure Virtual WAN as shown in the following exhibit. What is the minimum number of route tables that you should create?

Question 40

HOTSPOT - You have an Azure subscription. The subscription contains multiple Azure SQL Database resources and a virtual network named VNet1 that has five subnets. All the subnets are associated with a network security group (NSG) named NSG1. NSG1 blocks all outbound traffic, unless specifically allowed by a rule. Each subnet contains 50 virtual machines. Multiple virtual machines host instances of SQL Server on Virtual Machines and will be configured to replicate with the Azure SQL Database resources. You need to configure a new outbound rule in NSG1 to allow the SQL Server on Virtual Machines instances to connect to the Azure SQL Database resources. The solution must meet the following requirements: • Minimize modifications to NSG1 when additional instances of SQL Server on Virtual Machines are deployed. • Ensure that only SQL Server on Virtual Machines instances can connect to the Azure SQL Database resources. How should you configure each setting for the new outbound rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 41

Your company has an office in New York. The company has an Azure subscription that contains the virtual networks shown in the following table. You need to connect the virtual networks to the office by using ExpressRoute. The solution must meet the following requirements: • The connection must have up to 1 Gbps of bandwidth. • The office must have access to all the virtual networks. • Costs must be minimized. How many ExpressRoute circuits should be provisioned, and which ExpressRoute SKU should you enable?

Question 41

HOTSPOT - You have an Azure subscription that is linked to a Microsoft Entra tenant. The subscription contains a virtual network named VNet1, a storage account named storage1, an Azure App Service app named App1, and an Azure SQL database named DB1. VNet1 contains two subnets named Subnet1 and Subnet2. Subnet1 and Subnet2 each has a subnet mask of 255.255.255.224. You plan to perform the following actions: • On Subnet1, configure a service endpoint to connect to storage1 and a service endpoint to connect to the Microsoft Entra tenant. • On Subnet2, configure a private endpoint to connect to App1 and a private endpoint to connect to DB1. How many IP addresses will be available on each subnet once the planned actions are complete? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 42

HOTSPOT - You have an Azure subscription that contains 200 virtual machines. You need to use Azure Network Watcher to identify which virtual machines generate the most network traffic. The solution must minimize administrative effort. Which prerequisites should you deploy for Network Watcher, and which Network Watcher feature should you use to identify the virtual machines? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 42

You have an Azure subscription that contains the resources shown in the following table. You create a virtual network named Vnet2 in the West US region. You plan to enable peering between Vnet1 and Vnet2. You need to ensure that the virtual machines connected to Vnet2 can connect to VM1 and VM2 via LB1. What should you do?

Question 43

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table: Each quarter, you deploy five new virtual machines to host App1. You need to add a rule to NSG1 to ensure that the virtual machines that host App1 can connect to SQL1 and SQL2. The solution must follow the principle of least privilege and minimize administrative effort. How should you configure the source property and the destination property for the rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 43

Your company has four branch offices and an Azure subscription. The subscription contains an Azure VPN gateway named GW1. The branch offices are configured as shown in the following table. The branch office routers provide internet connectivity and Site-to-Site VPN connections to GW1. The users in Branch1 report that they can connect to internet resources, but cannot access Azure resources. You need to ensure that the Branch1 users can connect to the Azure resources. The solution must meet the following requirements: • Minimize downtime for all users. • Minimize administrative effort. What should you do first?

Question 44

You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements: • VM1 will access the internet by using its public IP address. • VM2 will access the internet by using its public IP address. • Administrative effort must be minimized. You need to ensure that you can deploy Gateway1 to Vnet1. What is the minimum number of subnets required on Vnet1?