You have an Azure subscription that contains a virtual network named VNet1.You deploy several web apps and configure the apps to use private endpoints on VNet1.You need to identity which DNS records the web apps registered automatically.Where will the records be created?

an Azure Private DNS zone named piivatelink.azurewebsites.net

an Azure DNS zone named azurewebsites net

an Azure Private DNS zone named azurewebsites.net

an Azure DNS zone named privatelink.azurewebsites.net

an Azure Private DNS zone named piivatelink.azurewebsites.net

You have an Azure subscription that contains the resources shown in the following table. You create a virtual network named Vnet2 in the West US region.You plan to enable peering between Vnet1 and Vnet2.You need to ensure that the virtual machines connected to Vnet2 can connect to VM1 and VM2 via LB1.What should you do?

Change the Floating IP configurations of LB1.

From the Peerings settings of Vnet2. set Traffic forwarded from remote virtual network to Allow

From the Peerings settings of Vnet1, set Traffic forwarded from remote virtual network to Allow.

You have the on-premises networks shown in the following table. You have an Azure subscription that contains an Azure virtual WAN named VWAN1 and a virtual network named VNet1 VWAN1 is connected to the on-premises networks and VNet1 in a full mesh topology. The virtual hub routing preference for VWAN1 is AS Path.You need to route traffic from VNet1 to 10.61.1.5.Which path will be used?

the ExpressRoute connection to Branch2

the ExpressRoute connection to Branch3

You have an Azure virtual network named VNet1 that contains the subnets shown in the following table. You need to deploy an Azure application gateway named AppGW1 to VNetl To where can you deploy AppGW1?

Subnet1, Subnet2, and GatewaySubnet

You have an Azure subscription that contains a virtual machine named VM1 and a network security group (NSG) named NSG1. NSG1 has the default rules configured VM1 runs Windows Server and contains a single NIC named NIC1 NIC! is associated with NSG1.You need to prevent access to the Azure Instance Metadata Service (IMDS) REST API on VM1 The solution must minimize administrative effort.What should you add to NSG1?

an outbound rule that blocks traffic to a service tag

an outbound rule that blocks traffic to an IP address

an outbound rule that blocks traffic to a service tag

an inbound and outbound rule that blocks traffic to an application security group.

an inbound rule that blocks traffic to an IP address

Your on-premises network contains a DNS server named Server 1.You have an Azure subscription that contains the resources shown in the following table. The on-premises network is connected to VNet1 by using a Site-to-Site (S2S) VPN.You need to ensure that Server1 can resolve the DNS name of storage1. The solution must minimize costs and administrative effort.What should you use?

an Azure virtual machine that hosts a DNS service

Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SD-WAN). The SD-WAN usesBGP.You have an Azure subscription that contains 20 virtual networks configured as a hub and spoke topology. The topology contains a hub virtual network named Vnetl.The virtual networks connect to the SD-WAN by using a network virtual appliance (NVA) in Vnetl.You need to ensure that BGP route advertisements will propagate between the virtual networks and the SD-WAN. The solution must minimize administrative effortWhat should you implement?

An Azure VPN Gateway that has BGP enabled

You have an Azure virtual machine named VM1.You need to capture all the network traffic of VM1 by using Azure Network Watcher. To which locations can the capture be written?

General purpose v2 standard and a file path on VM1 only

General purpose v2 standard only

a Block blob premium account only

General purpose v2 standard and a file path on VM1 only

General purpose v2 standard and a Block blob premium account only

blob storage, a file path on VM1, and a Block blob premium account

You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1 You need to deploy Azure Firewall to RG1. The solution must minimize administrative effort What should you do first?

On VNet1, create a virtual subnet named AzureFirewallSubnet.

Create a secured virtual hub named AzureFirewallHub.

Create a new resource group named AzureFirewallResourceGroup.

Create a new virtual network named AzureFirewallNetwork.

On VNet1, create a virtual subnet named AzureFirewallSubnet.

Your company has offices in London, Tokyo, and New York.The company has a web app named App1 that has the Azure Traffic Manager profile shown in the following table. In Asia, you plan to deploy an additional endpoint that will host an updated version of App1. You need to route 10 percent of the traffic from the Tokyo office to the new endpoint during testi What should you configure in Traffic Manager?

two profiles and four endpoints

three profiles and four endpoints

two profiles and five endpoints

You need to manage connectivity from NYCNet to the Azure services that use private endpoints. The solution must meet the security requirements. What should you do first?

Enable a network policy for SUBNET-PE.

From Azure Virtual Network Manager, create a security admin configuration.

From Azure Viitual Network Manager, create a network group that has Member type set to Subnet

Microsoft AZ-700 Practice Test 7 - Free Online Exam Prep & Questions

You have an Azure subscription. The subscription contains a locally-redundant storage 1LRS) account named stoiage1 that is deployed to the US East Azure region and has a Microsoft Storage service endpoint.

You set Redundancy for storage 1 to Read-access geo-redundant storage (RA-GRS)

You need to ensure that the contents of storage1 will be accessible by using a service endpoint in a paired region. The solution must minimize administrative effort

What should you do first?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-700 Practice Test 7

Question

Microsoft AZ-700 Practice Tests

Practice Tests