Practice Free AZ-700 Exam Online Questions – Page 5

Question #41

What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?

A . a private endpoint
B . a virtual network peering
C . a private link service
D . a routing table
E . a service endpoint

Reveal Solution Hide Solution

Question #42

Your company has four branch offices and an Azure Subscription. The subscription contains an Azure VPN gateway named GW1.

The branch offices are configured as shown in the following table.

The branch office routers provide internet connectivity and Site-to-Site VPN connections to GW1. The users in Branch1 report that they can connect to internet resources, but cannot access Azure resources.

You need to ensure that the Branch1 users can connect to the Azure Resources.

The solution must meet the following requirements:

• Minimize downtime for all users.

• Minimize administrative effort.

What should you do first?

A . Reset RTR1.
B . Reset Connection1.
C . Reset GW1.
D . Recreate LNG1.

Reveal Solution Hide Solution

Question #43

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1.

You plan to add a private endpoint to Subnet1.

You need to ensure that you can route traffic between the private endpoint and the Azure Private Link service by using a user-defined route.

What should you do first on Subnet1?

A . Enable network policy.
B . Enable delegation.
C . Create a service endpoint.
D . Provision a Standard Azure load balancer.

Reveal Solution Hide Solution

Question #44

SIMULATION

Task 3

You need to ensure that hosts on VNET1 and VNET2 can communicate. The solution must minimize

latency between the virtual networks.

Reveal Solution Hide Solution

Correct Answer: See the

Explanation below

for step by step

instructions.

Explanation:

To ensure that hosts on VNET1 and VNET2 can communicate with minimal latency, you can

use Virtual Network Peering. This method connects the two virtual networks directly through the Microsoft backbone network, ensuring low-latency and high-bandwidth communication. Step-by-Step Solution

Step 1: Set Up Virtual Network Peering

Navigate to the Azure Portal.

Search for “Virtual networks” and select VNET1.

In the left-hand menu, select “Peerings” under the “Settings” section.

Click on “Add” to create a new peering.

Enter the following details:

Name: Enter a name for the peering (e.g., VNET1-to-VNET2).

Peer virtual network: Select VNET2.

Allow virtual network access: Ensure this is enabled.

Allow forwarded traffic: Enable if needed.

Allow gateway transit: Enable if needed.

Click on “Add”.

Step 2: Configure Peering on VNET2

Navigate to VNET2 in the Azure Portal.

In the left-hand menu, select “Peerings” under the “Settings” section.

Click on “Add” to create a new peering.

Enter the following details:

Name: Enter a name for the peering (e.g., VNET2-to-VNET1).

Peer virtual network: Select VNET1.

Allow virtual network access: Ensure this is enabled.

Allow forwarded traffic: Enable if needed.

Allow gateway transit: Enable if needed.

Click on “Add”.

Explanation

Virtual Network Peering: This feature connects two virtual networks in the same or different regions, allowing resources in both networks to communicate with each other as if they were part of the same network. The traffic between peered virtual networks uses the Microsoft backbone infrastructure, ensuring low latency and high bandwidth12.

Allow Virtual Network Access: This setting ensures that the virtual networks can communicate with each other.

Allow Forwarded Traffic: This setting allows traffic forwarded from a network security appliance in the peered virtual network.

Allow Gateway Transit: This setting allows the peered virtual network to use the gateway in the local virtual network.

By following these steps, you can ensure that hosts on VNET1 and VNET2 can communicate with

minimal latency, leveraging the high-speed Microsoft backbone network.

Question #45

HOTSPOT

You have an Azure subscription that contains an Azure application gateway named AG1 and two .

Azure App Service apps named App1 and App2 that have the following configurations:

• Both apps are accessible by using HTTP and HTTPS.

• HTTP host headers are used to route requests to the appropriate apps.

• Both apps are hosted in a single App Service Environment in the West Europe Azure region.

You need to publish the apps by using AG 1. The solution must ensure that AG1 provides both HTTP and HTTPS access.

What is the minimum number of resources required for AG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Question #46

SIMULATION

Task 11

You need to ensure that only hosts on VNET1 can access the slcnage42150372 storage account. The solution must ensure that access occurs over the Azure backbone network.

Reveal Solution Hide Solution

Correct Answer: See the

Explanation below

for step by step

instructions.

Explanation:

To ensure that only hosts on VNET1 can access the slcnage42150372 storage account and that access occurs over the Azure backbone network, you can use Azure Private Endpoints. This method secures the connection by assigning a private IP address from your virtual network to the storage account, ensuring that traffic does not traverse the public internet. Step-by-Step Solution

Step 1: Create a Private Endpoint for the Storage Account Navigate to the Azure Portal.

Search for “Storage accounts” and select the slcnage42150372 storage account.

In the storage account blade, select “Networking” under the “Security + networking” section.

Under “Private endpoint connections”, click on “Add private endpoint”.

Enter the following details:

Name: Enter a name for the private endpoint (e.g., PrivateEndpoint-VNET1).

Region: Select the same region as your virtual network (VNET1).

Click on “Next: Resource”.

Step 2: Configure the Resource

Select “Target sub-resource”: Choose the storage service you want to connect to

(e.g., blob, file, queue, table).

Click on “Next: Virtual network”.

Step 3: Select the Virtual Network and Subnet

Select the virtual network: Choose VNET1.

Select the subnet: Choose the appropriate subnet within VNET1.

Click on “Next: Configuration”.

Step 4: Configure DNS Integration (Optional)

Configure DNS settings if needed to ensure proper name resolution within your virtual network.

Click on “Next: Tags”, add any tags if necessary, and then click on “Review + create”.

Review your settings and click on “Create”.

Step 5: Restrict Public Network Access

Navigate back to the storage account.

Select “Networking” under the “Security + networking” section.

Under “Firewalls and virtual networks”, select “Selected networks”.

Ensure that only VNET1 is listed under the virtual networks section.

Click on “Save”.

Explanation

Private Endpoints: These provide secure connectivity to Azure services by assigning a private IP address from your VNet to the service, ensuring that traffic stays within the Azure backbone network12.

Firewall and Virtual Networks: Configuring the storage account to allow access only from selected networks (VNET1) ensures that no other network can access the storage account3. By following these steps, you can ensure that only hosts on VNET1 can access

the slcnage42150372 storage account, and that all access occurs over the secure Azure backbone network.

Question #47

DRAG DROP

You have an Azure subscription that contains the resources shown in the following table.

You need to associate Gateway 1 with Subnet1. The solution must minimize downtime on VM1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Reveal Solution Hide Solution

Question #48

HOTSPOT

In which NSGs can you use ASG1 and to which virtual machine network interfaces can you associate ASG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Question #49

You have an Azure subscription that contains the public IPv4 addresses shown in the following table.

You plan to create a load balancer named LB1 that will have the following settings:

* Name: LB1

* Location: West US

* Type: Public

* SKU: Standard

Which public IPv4 addresses can be used by LB1?

A . IP1 and IP3 only
B . IP3 only
C . IP3 and IP5 only
D . IP2only
E . IP1, IP2. IP3. IP4. and IP5
F . IP1, IP3, IP4, and 1P5 only

Reveal Solution Hide Solution

Question #50

HOTSPOT

You have an Azure subscription that contains multiple virtual machine scale sets and multiple Azure load balancers. The load balancers balance traffic across the scale sets.

You plan to deploy Azure Front Door to load balance traffic across the load balancers.

You need to identify which Front Door SKU to configure, and what to use to route the traffic to the load balancers. The solution must minimize costs.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

1 2 3 4 5 6 7 8 9

Exams