Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN. You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection. You need to replace the third-party SD-WAN with an Azure Virtual WAN. What should you include in the solution?

Create new Point-to-Site (P2S) VPN connections on the firewall devices.

Create an Azure Traffic Manager profile.

Enable active-active mode on Gateway1.

You have an Azure subscription that contains the Azure app service web apps show in the following table: You need to deploy Azure Traffic Manager. The solution must meet the following requirements:• Traffic to https//www.fabrikam.com must be directed to App1eu.• If App1eu becomes unresponsive, all the traffic to https://www.fabrikam.com must be directed to App1us. You need to implement Traffic Manager to meet the requirements.Which two resources should you create? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

a Traffic Manager profile that uses the priority routing method

a CNAME record in a DNS domain named fabrikam.com

a Traffic Manager profile that uses the priority routing method

a Traffic Manager profile that uses the geographic routing method

a CNAME record in a DNS domain named fabrikam.com

a TXT record in a DNS domain named tabrikam.com

a real user measurements key in Traffic Manager

You have an Azure subscription that contains the resources shown in the following table. Subshell contains Three virtual machines that host an app named App1. App1 is accessed by using the SFTP protocol.From NSG1. you configure an inbound security rule named Rule2 that allows inbound SFTP connections to ASG1.You need to ensure that the inbound SFTP connections are managed by using ASG1. The solution must minimize administrative effort.What should you do?

From each virtual machine, associate the network interface to ASG1

From NSG1. modify the priority of Rule2.

From each virtual machine, associate the network interface to ASG1

From Subnet1 create a subnet delegation.

From ASG1, modify the role assignments.

You have an Azure subscription that contains the resources shown in the following table. Users on HP1 connect to App1 by using a URL of https://app1.comoso.com.You need to ensure that the IDPS on FW1 can identify security threats in the connections from HP1 to Server1.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Enable threat intelligence for FW1.

import a server certificate to KV1.

Enable threat intelligence for FW1.

Add an application group to HP1.

Add a secured virtual network to FW1.

Your company has an office in New York.The company has an Azure subscription that contains the virtual networks shown in the following table. You need to connect the virtual networks to the office by using ExpressRoute. The solution must meet the following requirements:• The connection must have up to 1 Gbps of bandwidth.• The office must have access to all the virtual networks.• Costs must be minimized.How many ExpressRoute circuits should be provisioned, and which ExpressRoute 5KU should you enable?

one ExpressRoute Premium circuit

one ExpressRoute Standard circuit

one ExpressRoute Premium circuit

two ExpressRoute Premium circuits

four ExpressRoute Standard circuits

You have the Azure virtual networks shown in the following table. You deploy Azure Firewall to Vnet3.You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall. What should you configure?

a route table associated to AzureFitewallSubnet

peering links between Vnet1 and Vnet2

a route table associated to Subnet1 -1 and Subnet2-1

a route table associated to AzureFitewallSubnet

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.What should you include in the solution?

A Network Virtual Appliance (NVA)

An Azure Virtual WAN ExpressRoute gateway

A Network Virtual Appliance (NVA)

A Site to site gateway (VPN gateway)

A Point to site gateway (User VPN gateway)

You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines.You need to recommend a load balancing solution for the virtual network. The solution must meet the following requirements:• The virtual machines and the load balancer must be accessible only from the virtual network.• Costs must be minimized.What should you include in the recommendation?

Azure Application Gateway v1 Azure Application Gateway v2

You have three on-premises networks.You have an Azure subscription that contains a Basic Azure virtual WAN. The virtual WAN contains a single virtual hub and a virtual network ateway that is limited to a throughput of 1 Gbps.The on-premises networks connect to the virtual WAN by using Site-to-Site (S2S) VPN connections.You need to increase the throughput of the virtual WAN to 3 Gbps. The solution must minimize administrative effort.What should you do?

Increase the number of gateway scale units.

Upgrade the virtual WAN lo the Standard SKU.

Add an additional VPN gateway to the Azure subscription,

Create an additional virtual hub.

Increase the number of gateway scale units.

You have an Azure virtual machine named VM1.You need to capture all the network traffic of VM1 by using Azure Network Watcher.To which locations can the capture be written?

blob storage and a file path on VM1 only

blob storage and a premium storage account only

blob storage, a file path on VM1, and a premium storage account

You have an Azure application gateway configured for a single website that is available at https://www.contoso.com.The application gateway contains one backend pool and one rule. The backend pool contains two backend servers. Each backend server has an additional website that is available on port 8080.You need to ensure that if port 8080 is unavailable on a backend server, all the traffic for https://www.contoso.com is redirected to the other backend server.What should you do?

Change the port on the listener.

You have an internal Basic Azure Load Balancer named LB1 That has two frontend IP addresses. The backend pool of LB1 contains two Azure virtual machines named VM1 and VM2.You need to configure the rules on LB1 as shown in the following table. What should you do for each rule?

Set Session persistence to Enabled.

Set Session persistence to Disabled

Microsoft AZ-700 Practice Test 4 - Free Online Exam Prep & Questions

You have an Azure subscription that contains the resources shown in the following table.

Microsoft AZ-700 image Question 107 87963 10022024015514000000

You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:

• Prevent VM1 and VM2 from accessing any other storage accounts.

• Ensure that storage1 is accessible from the internet.

What should you use?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-700 Practice Test 4

Question

Microsoft AZ-700 Practice Tests

Practice Tests