Microsoft AZ-700 Practice Test - Questions Answers, Page 14

You have an Azure subscription that contains the Azure app service web apps show in the following table:

You need to deploy Azure Traffic Manager. The solution must meet the following requirements:

• Traffic to https//www.fabrikam.com must be directed to App1eu.

• If App1eu becomes unresponsive, all the traffic to https://www.fabrikam.com must be directed to App1us. You need to implement Traffic Manager to meet the requirements.

Which two resources should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

HOTSPOT

You have an Azure load balancer that has the following configurations:

• Name:LB1

• Location: East US 2

• SKU: Standard

• Private IP address: 10.3.0.7

• Load balancing rule: rule! (Tcp/80)

• Health probe: probe1 (Http:80)

• NAT rules; 0 inbound

The backend pool of LB1 has the following configurations:

• Name: backend I

• Virtual network: Vnet1

• Backend pool configuration: NIC

• IP version: IPv4

• Virtual machines: VM1.VM2. VM3:

You have an Azure virtual machine named VM4 that has the following network configurations:

• Network interface: vm49Sl

• Virtual network/subnet: Vnet3/Subnet3

• NIC private IP address: 10.4.0.4

• Accelerated networking: Enabled

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

DRAG DROP

Your on-premises network contains an Active Directory Domain Services {AD DS) domain named contoso.com that has an internal certification authority (CA).

You have an Azure subscription.

You deploy an Azure application gateway named AppGwy1 and perform the following actions:

• Configure an HTTP listener.

• Associate a routing rule with the listener.

You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

You have an Azure subscription that contains the resources shown in the following table.

Subshell contains Three virtual machines that host an app named App1. App1 is accessed by using the SFTP protocol.

From NSG1. you configure an inbound security rule named Rule2 that allows inbound SFTP connections to ASG1.

You need to ensure that the inbound SFTP connections are managed by using ASG1. The solution must minimize administrative effort.

What should you do?

You have an Azure subscription that contains a virtual network name Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1.

You have an Azure Firewall Policy named FP1 that is associated to FW1.

You need to ensure that RDP requests to the public IP address of FW1 route to VM1.

What should you configure on FP1?

HOTSPOT

Your company has 40 branch offices across North America and Europe. You have an Azure subscription that contains the following virtual networks:

• Two networks in the East US Azure region

• Three networks in the West Europe Azure region

You need to implement Azure Virtual WAN. The solution must meet the following requirements:

• Each branch office in North America must have an ExpressRoute circuit and a Site-to-Site VPN that connects to the East US region.

• Each branch office in Europe must have an ExpressRoute circuit and a Site-to-Site VPN that connects to the West Europe region.

• Transitive connections must be supported between all the branch offices and all the virtual networks.

• Costs must be minimized.

What is the minimum number of Virtual WAN resources required? To answer, select the appropriate

options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

You have an Azure subscription that contains the resources shown in the following table.

Users on HP1 connect to App1 by using a URL of https://app1.comoso.com.

You need to ensure that the IDPS on FW1 can identify security threats in the connections from HP1 to Server1.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

HOTSPOT

You have on-premises datacenters in New York and Seattle.

You have an Azure subscription that contains the ExpressRoute circuits shown in the following table.

You need to ensure that all the data sent between the datacenters is routed via the ExoressRoute

circuits. The solution must minimize costs.

Your company has an office in New York.

The company has an Azure subscription that contains the virtual networks shown in the following table.

You need to connect the virtual networks to the office by using ExpressRoute. The solution must meet the following requirements:

• The connection must have up to 1 Gbps of bandwidth.

• The office must have access to all the virtual networks.

• Costs must be minimized.

How many ExpressRoute circuits should be provisioned, and which ExpressRoute 5KU should you enable?