ExamGecko
Home Home / Microsoft / AZ-700

Microsoft AZ-700 Practice Test - Questions Answers, Page 3

Question list
Search
Search

List of questions

Search

Related questions











Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3. The departments at the company use the Azure subscriptions as shown in the following table.

All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region. You plan to connect all the subscriptions to the on-premises network by using ExpressRoute.

What is the minimum number of ExpressRoute circuits required?

A.
1
A.
1
Answers
B.
2
B.
2
Answers
C.
3
C.
3
Answers
D.
4
D.
4
Answers
E.
5
E.
5
Answers
Suggested answer: A

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction

Your company has offices in New York and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-to-Site VPN connection. The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region. You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises servers in the New York office by using the ExpressRoute circuits.

Which ExpressRoute option should you use?

A.
ExpressRoute FastPath
A.
ExpressRoute FastPath
Answers
B.
ExpressRoute Global Reach
B.
ExpressRoute Global Reach
Answers
C.
ExpressRoute Direct
C.
ExpressRoute Direct
Answers
D.
ExpressRoute Local
D.
ExpressRoute Local
Answers
Suggested answer: B

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-global-reach

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You reset the gateway of Vnet1.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You enable BGP on the gateway of Vnet1.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

You plan to deploy Azure virtual network.

You need to design the subnets.

Which three types of resources require a dedicated subnet? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A.
Azure Bastion
A.
Azure Bastion
Answers
B.
Azure Active Directory Domain Services
B.
Azure Active Directory Domain Services
Answers
C.
Azure Private Link
C.
Azure Private Link
Answers
D.
Azure Application Gateway v2
D.
Azure Application Gateway v2
Answers
E.
VPN gateway
E.
VPN gateway
Answers
Suggested answer: A, D, E

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-for-azure-services

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You download and reinstall the VPN client configuration.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Explanation:

The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone.

Vnet1 connects to an on-premises datacenter by using ExpressRoute.

You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
Modify the DNS server settings of Vnet1.
A.
Modify the DNS server settings of Vnet1.
Answers
B.
For FW1, configure custom DNS server.
B.
For FW1, configure custom DNS server.
Answers
C.
For FW1, enable DNS proxy.
C.
For FW1, enable DNS proxy.
Answers
D.
On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.
D.
On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.
Answers
E.
On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.
E.
On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.
Answers
Suggested answer: C, D

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder https://azure.microsoft.com/en-gb/blog/new-enhanced-dns-features-in-azure-firewall-now-generally-available/

You are planning the IP addressing for the subnets in Azure virtual networks.

Which type of resource requires IP addresses in the subnets?

A.
internal load balancers
A.
internal load balancers
Answers
B.
storage account
B.
storage account
Answers
C.
service endpoints
C.
service endpoints
Answers
D.
service endpoint policies
D.
service endpoint policies
Answers
Suggested answer: A

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

You have an Azure subscription that contains the public IP addresses shown in the following table.

You plan to deploy a NAT gateway named NAT1.

Which public IP addresses can be used as the public IP address for NAT1?

A.
IP3 only
A.
IP3 only
Answers
B.
IP5 only
B.
IP5 only
Answers
C.
IP2 and IP4 only
C.
IP2 and IP4 only
Answers
D.
IP1, IP3 and IP5 only
D.
IP1, IP3 and IP5 only
Answers
E.
IP3 and IP5 only
E.
IP3 and IP5 only
Answers
Suggested answer: A

Explanation:

Only static IPv4 addresses in the Standard SKU are supported. IPv6 doesn’t support NAT.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview

You have an Azure application gateway named AGW1 that has a routing rule named Rule1. Rule 1 directs traffic for http://www.contoso.com to a backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1. You deploy another virtual machine scale set named VMSS2.

You need to configure AGW1 to direct all traffic for http://www.adatum.com to VMSS2.

The solution must ensure that requests to http://www.contoso.com continue to be directed to Pool1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
Add a backend pool.
A.
Add a backend pool.
Answers
B.
Modify an HTTP setting.
B.
Modify an HTTP setting.
Answers
C.
Add an HTTP setting.
C.
Add an HTTP setting.
Answers
D.
Add a listener.
D.
Add a listener.
Answers
E.
Add a rule.
E.
Add a rule.
Answers
Suggested answer: A, D, E

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/application-gateway/configuration-overview

Total 236 questions
Go to page: of 24