AZ-700 Free Practice Questions — Page 9

Question 44

DRAG DROP - Your on-premises network uses an IP address space of 10.0.0.0/20. You have an Azure subscription that contains the resources shown in the following table. The on-premises network is connected to HubVnet by using a Site-to-Site (S2S) VPN. You deploy an Azure firewall named AZFW1 to HubVNet. You need to ensure that AZFW/1 can inspect all the traffic between the on-premises network and SpokeVNet. What should you do in RT1? To answer, drag the appropriate destination to the correct route. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 45

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error. You need to ensure that the URL is accessible through the application gateway from any IP address. Solution: You add a rewrite rule for the host header. Does this meet the goal?

Question 45

HOTSPOT - You have an Azure subscription that contains a virtual network. The virtual network contains two subnets named Subnet1 and Subnet2. You have an instance of Azure Application Gateway v2 named AppGw1 that is connected to Subnet1. You need to move AppGw1 to Subnet2. The solution must minimize downtime. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 46

DRAG DROP - You have two Azure subscriptions named Sub1 and Sub2 that contain the resources shown in the following table. VNet1 and VNet2 are NOT connected. You plan to create an Azure Private Link service named Link1 that will be used to connect VNet1 and VNet2. You need to ensure that Link1 meets the following requirements: • Ensures that VM1 can connect only to a web app hosted on VM2 • Prevents VM1 from connecting to the other resources that are connected to VNet2 Which additional resources should you create for each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 46

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error. You need to ensure that the URL is accessible through the application gateway from any IP address. Solution: You create a WAF policy exclusion for request headers that contain 137.135.10.24. Does this meet the goal?

Question 47

HOTSPOT - You have an Azure subscription that contains an Azure application gateway named AG1 and two Azure App Service apps named App1 and App2 that have the following configurations: • Both apps are accessible by using HTTP and HTTPS. • HTTP host headers are used to route requests to the appropriate apps. • Both apps are hosted in a single App Service Environment in the West Europe Azure region. You need to publish the apps by using AG1. The solution must ensure that AG1 provides both HTTP and HTTPS access. What is the minimum number of resources required for AG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 47

Your company has offices in London, Tokyo, and New York. The company has a web app named App1 that has the Azure Traffic Manager profile shown in the following table. In Asia, you plan to deploy an additional endpoint that will host an updated version of App1. You need to route 10 percent of the traffic from the Tokyo office to the new endpoint during testing. What should you configure in Traffic Manager?

Question 48

HOTSPOT - You have an Azure subscription that contains six Azure App Service apps. The apps have an identical configuration and are deployed across multiple Azure regions. You plan to deploy Azure Front Door to load balance traffic across the apps. You need to ensure that the round robin load-balancing algorithm will send traffic only to a limited number App Service apps based on their proximity to a user. The solution must minimize administrative effort. What should you modify, and what should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 48

You have the Azure resources shown in the following table. You configure storage1 to provide access to the subnet in Vnet1 by using a service endpoint. You need to ensure that you can use the service endpoint to connect to the read-only endpoint of storage1 in the paired Azure region. What should you do first?

Question 49

You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The subscription contains the following resources: ✑ A virtual network named Vnet1 ✑ An App Service plan named ASP1 ✑ An Azure App Service named webapp1 An Azure private DNS zone named private.contoso.com ✑ Virtual machines on Vnet1 that cannot communicate outside the virtual network You need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https://www.private.contoso.com. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.