You have an Azure virtual network named Vnet1 and an on-premises network.The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit. You need to ensure that the on-premises network can connect to the route-based GW1. What shouldyou do before you create the connection?

Set Use Azure Private IP Address to Enabled

Set IPsec / IKE policy to Custom.

Set Connection Mode to ResponderOnly

You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The subscription contains the following resources:• A virtual network named Vnet1• An App Service plan named ASPI• An Azure App Service named webapp1• An Azure private DNS zone named private.contoso.com• Virtual machines on Vnet1 that cannot communicate outside the virtual networkYou need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https:/Avwwprivate.contosocom. Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Create a private endpoint for webapp1.

Create a CNAME record that maps wwwprivatemntoso.com to webapp1.contoso.onmicrosoft.com.

Create a private endpoint for webapp1.

Create a service endpoint for webapp1.

Create a CNAME record that maps www.pnvate.contoso.com to webapp1.privatelink.azurewebsites.net.

Create a CNAME record that maps wwwprivatemntoso.com to webapp1.contoso.onmicrosoft.com.

Register an enterprise application in Azure AD for webapp1.

Create a CNAME record that maps wow.private.contoso.com to webapp 1 private@ntoso.com.

You have an Azure subscription that contains the resources is shown in the following table. You need to ensure that the apps hosted on VM1 can resolve the IP address of the What should you create first?

a public DNS zone named private ink.database.windows.net

a public DNS zone named database.windows.net

a private DNS zone named database.windows.net

a public DNS zone named private ink.database.windows.net

a private DNS zone named privatelink.database.windows.net

You have an Azure subscription that contains the resources shown in the following table. Gateway1 provides access to App1 by using a URL of http://app1.contoso.com.You create a new web app named App2.You need to configure Gateway1 to enable minimize administrative effort.What should you configure on Gateway1?

a listener, a backend pool, and a rule

You have an Azure Front Door instance named FD1 that is protected by using Azure Web Application Firewall (WAF). FD1 uses a frontend host named app1.contoso.com to provide access to Azure web apps hosted in the East US Azure region and the West US Azure region. You need to configure FD1 to block requests to app1.contoso.com from all countries other than the United States. What should you include in the WAF policy?

a custom rule that uses a match rule

a custom rule that uses a rate limit rule

a custom rule that uses a match rule

You have an application named App1 that listens for incoming requests on a preconfigured group of 50 TCP ports and UDP ports. You install App1 on 10 Azure virtual machines.You need to implement load balancing for App1 across all the virtual machines. The solution must minimize the number of load balancing rules.What should you include in the solution?

Azure Application Gateway V2 that has multiple listeners

Azure Standard Load Balancer that has Floating IP enabled

Azure Application Gateway V2 that has multiple listeners

Azure Application Gateway v2 that has multiple site hosting enabled

Azure Standard Load Balancer that has high availability (HA) ports enabled

You have a network security group named NSG1.You need to enable network security group (NSG) flow logs for NSG1. The solution must support retention policies. What should you create first?

A standard general-purpose v2 Azure Storage account

An Azure Log Analytics workspace

A premium Block blobs Azure Storage account

A standard general-purpose v1 Azure Storage account

Microsoft AZ-700 Practice Test 3 - Free Online Exam Prep & Questions

HOTSPOT

You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements. What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-700 Practice Test 3

Question

Microsoft AZ-700 Practice Tests

Practice Tests