You have a website that uses an FQDN of www.contoso.com. The DNS record for www. contoso.com resolves to an onpremises web server. You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1. You build the website on Web1.You plan to configure ContosoFD1 to publish the website for testing.When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit. (Click the Exhibit tab.) You need to test the website and ContosoFD1 without affecting user access to the on-premises web server.Which record should you create in the contoso.com DNS domain?

a CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net

a CNAME record that maps afdverify.www.contoso.com to ContosoFD1.azurefd.net

a CNAME record that maps www.contoso.com to ContosoFD1.azurefd.net

a CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net

a CNAME record that maps www.contoso.com to Web1.contoso.com

You have the Azure load balancer shown in the Load Balancer exhibit. LB2 has the backend pools shown in the Backend Pools exhibit. You need to ensure that LB2 distributes traffic to all the members of VMSS1.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Add a network interface to VMSS1.

Add a public IP address to each member of VMSS1.

You have an Azure virtual network that contains the subnets shown in the following table. You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall. You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com. What should you do?

In a firewall policy, create an application rule.

In a firewall policy, create a DNAT rule.

Create a network security group (NSG) and associate the NSG to Subnet2.

In a firewall policy, create a network rule.

In a firewall policy, create an application rule.

You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance. You need to configure the policy to meet the following requirements:Log all connections from Australia.Deny all connections from New Zealand.Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute. What is the minimum number of objects you should create?

three custom rules that each has one condition

one custom rule that has three conditions

one custom rule that has one condition

one rule that has two conditions and another rule that has one condition

You have an Azure subscription that contains multiple virtual machines in the West US Azure region. You need to use Traffic Analytics.Which two resources should you create? Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct answer selection is worth one point.

an Azure Monitor data collection rule

You have an Azure subscription that contains the following resources:A virtual network named Vnet1Two subnets named subnet1 and AzureFirewallSubnet A public Azure Firewall named FW1 A route table named RT1 that is associated to Subnet1 A rule routing of 0.0.0.0/0 to FW1 in RT1 After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.You need to ensure that the virtual machines can be activated.What should you do?

Add an internet route to RI1 for the Azure Key Management Service (KMS).

Deploy an application security croup mat allows outbound traffic to 1688

Deploy an Azure Standard Load Balancer that has an outbound NAT rule

On fW1.configure a DNAT rule for port 1688.

Add an internet route to RI1 for the Azure Key Management Service (KMS).

Your company has offices in Montreal, Seattle, and Paris. The outbound traffic from each office originates from a specific public IP address. You create an Azure Front Door instance named FD1 that has Azure Web Application Firewall (WAF) enabled. You configure a WAF policy named Policy1 that has a rule named Rule1. Rule1 applies a rate limit of 100 requests for traffic that originates from the office in Montreal.You need to apply a rate limit of 100 requests for traffic that originates from each office.What should you do?

Modify the rate limit threshold of Rule1.

Create two additional associations.

Modify the conditions of Rule1.

You have an Azure virtual network named Vnet1.You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources. Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24

a deny rule that has the IP address range of Vnet1 as the source and destination of Storage

a deny rule that has a source of VirtualNetwork and a destination of Sql

an allow rule that has the IP address range of Vnet1 as the source and destination of Sql.EastUS

a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24

a deny rule that has the IP address range of Vnet1 as the source and destination of Storage

You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe Azure region. You deploy an Azure App Service app named App1 to the West Europe region.You need to provide App1 with access to the resources in Vnet1. The solution must minimize costs.What should you do first?

Create a gateway subnet and deploy a virtual network gateway.

You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The subscription contains the following resources:An Azure App Service app named App1An Azure DNS zone named contoso.comAn Azure private DNS zone named private.contoso.com A virtual network named Vnet1 You create a private endpoint for App1. The record for the endpoint is registered automatically in Azure DNS. You need to provide a developer with the name that is registered in Azure DNS for the private endpoint. What should you provide?

app1.privatelink.azurewebsites.net

Microsoft AZ-700 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.

Microsoft AZ-700 image Question 27 87883 10022024015514000000

You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2. You need to ensure that Traffic Manager routes traffic for www.contoso.com.

Which DNS record should you create?

two A records that map www.contoso.com to 131.107.100.1 and 131.107.200.1

a CNAME record that maps www.contoso.com to TMprofile1.azurefd.net

a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net

a TXT record that contains a string of as1.contoso.com and as2.contoso.com in the details

Comment (0)

Microsoft AZ-700 Practice Test 2

Question

Microsoft AZ-700 Practice Tests

Practice Tests