Leading Designing And Implementing Microsoft Azure Networking Solutions AZ-700 Actual Test

NEW QUESTION 1

You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone.
Vnet1 connects to an on-premises datacenter by using ExpressRoute.
You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.
• B. On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.
• C. Modify the DNS server settings of Vnet1.
• D. For FW1, enable DNS proxy.
• E. For FW1, configure a custom DNS server.

Answer: AC

NEW QUESTION 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.
Solution: You create a WAF policy exclusion request headers that contain 137.135.10.24. Does this meet the goat?

• A. Yes
• B. No

Answer: B

NEW QUESTION 3

You need to implement name resolution for the cloud.liwareinc.com. The solution must meet the networking requirements.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

You have the Azure Traffic Manager profiles shown in the following table.

You plan to add the endpoints shown in the following table.

Which endpoints can you add to Profile2?

• A. Endpoint1 and Endpoint4 only
• B. Endpoint1, Endpoint2, Endpoint3, and Endpoint4
• C. Endpoint1 only
• D. Endpoint2 and Endpoint3 only
• E. Endpoint3 only

Answer: A

NEW QUESTION 5

You need to provide connectivity to storage1. The solution must meet the PaaS networking requirements and the business requirements.
What should you include in the solution?

• A. a service endpoint
• B. Azure Front Door
• C. a private endpoint
• D. Azure Traffic Manager

Answer: A

NEW QUESTION 6

You have an application named App1 that listens for incoming requests on a preconfigured group of 50 TCP ports and UDP ports.
You install App1 on 10 Azure virtual machines.
You need to implement load balancing for App1 across all the virtual machines. The solution must minimize the number of load balancing rules.
What should you include in the solution?

• A. Azure Standard Load Balancer that has Floating IP enabled
• B. Azure Application Gateway V2 that has multiple listeners
• C. Azure Application Gateway v2 that has multiple site hosting enabled
• D. Azure Standard Load Balancer that has high availability (HA) ports enabled

Answer: A

NEW QUESTION 7

You have the Azure resources shown in the following table.

You configure storage1 to provide access to the subnet in Vnet1 by using a service endpoint.
You need to ensure that you can use the service endpoint to connect to the read-only endpoint of storage1 in the paired Azure region.
What should you do first?

• A. Configure the firewall settings for storage1.
• B. Fail over storage1 to the paired Azure region.
• C. Create a virtual network in the paired Azure region.
• D. Create another service endpoint.

Answer: A

NEW QUESTION 8

You have five virtual machines that run Windows Server. Each virtual machine hosts a different web app. You plan to use an Azure application gateway to provide access to each web app by using a hostname of
www.contoso.corn and a different URL path for each web app, for example: https://www.contoso.com/app1.
You need to control the flow of traffic based on the URL path. What should you configure?

• A. rules
• B. rewrites
• C. HTTP settings
• D. listeners

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/url-route-overview

NEW QUESTION 9

You have an Azure subscription that contains the following resources:
A virtual network named Vnet1
Two subnets named subnet1 and AzureFirewallSubnet
A public Azure Firewall named FW1
A route table named RT1 that is associated to Subnet1
A rule routing of 0.0.0.0/0 to FW1 in RT1
After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.
You need to ensure that the virtual machines can be activated. What should you do?

• A. On FW1, create an outbound service tag rule for AzureCloud.
• B. On FW1, create an outbound network rule that allows traffic to the Azure Key Management Service (KMS).
• C. Deploy a NAT gateway.
• D. To Subnetl, associate a network security group (NSG) that allows outbound access to port 1688.

Answer: B

Explanation:
Reference:
https://ryanmangansitblog.com/2020/05/11/firewall-considerations-windows-virtual-desktop-wvd/

NEW QUESTION 10

You have an Azure application gateway named AppGW1 that balances requests to a web app named App1. You need to modify the server variables in the response header of App1.
What should you configure on AppGW1?

• A. HTTP settings
• B. rewrites
• C. rules
• D. listeners

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url

NEW QUESTION 11

You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.

You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.
You need to ensure that Traffic Manager routes traffic for www.contoso.com. Which DNS record should you create?

• A. two A records that map wmv.contoso.com to 131 107 100 1 and 131 107 200 1
• B. a CNAME record that maps www.contoso.com to TMprofile1.azurefd.net
• C. a CNAME record that mapswww.contoso.comtoTMprofile1.trafficmanager.net
• D. a TXT record that contains a string ofas1.contoso.com and as2.contoso.com in the details

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile https://docs.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager

NEW QUESTION 12

You create NSG10 and NSG11 to meet the network security requirements.
For each of the following statements, select Yes it the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2. You have the NAT gateway shown in the NATgateway1 exhibit.

You have the virtual machine shown in the VM1 exhibit.

Subnet1 is configured as shown in the Subnet1 exhibit.

For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

You have an Azure virtual network named Vnet1 and an on-premises network.
The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.
You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.

You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?

• A. Set Use Azure Private IP Address to Enabled
• B. Set IPsec / IKE policy to Custom.
• C. Set Connection Mode to ResponderOnly
• D. Set BGP to Enabled

Answer: A

NEW QUESTION 15

You have an Azure virtual network that contains the subnets shown in the following table.

You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall. You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com. What should you do?

• A. Create a network security group (NSG) and associate the NSG to Subnet2.
• B. In a firewall policy, create an application rule.
• C. In a firewall policy, create a DNAT rule.
• D. In a firewall policy, create a network rule.

Answer: B

NEW QUESTION 16

Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 17

You have the Azure environment shown in the exhibit.

VM1 is a virtual machine that has an instance-level public IP address (ILPIP).
Basic Load Balancer uses a public IP address. VM1 and VM2 are in the backend pool. NAT Gateway uses a public IP address named IP3 that is associated to SubnetA. VNet1 has a virtual network gateway that has a public IP address named IP4.
When initiating outbound traffic to the internet from VM1, which public address is used?

• A. IP1
• B. IP2
• C. IP3
• D. IP4

Answer: A

NEW QUESTION 18
......