Microsoft AZ-700 Exam Dumps Opportunity To acquire Highest Result 2023

Jonnie Karnath2023-05-01T11:31:14+00:00

If you are preparing for the Designing and Implementing Microsoft Azure Networking Solutions exam, then you should consider using Microsoft AZ-700 exam dumps from Certspots. These questions are designed to help you acquire the highest possible result on the exam. Microsoft AZ-700 exam dumps from Certspots are updated regularly to ensure that they are aligned with the latest exam syllabus and exam pattern. This ensures that you are getting the most relevant and up-to-date information. By using these Microsoft AZ-700 exam dumps, you can increase your chances of passing the exam on your first attempt and acquiring the highest possible result.

Page 1 of 5

1. You have an Azure virtual network that contains two subnets named Subnet1 and Subnet2. Subnet1 contains a virtual machine named VM1. Subnet2 contains a virtual machine named VM2.

You have two network security groups (NSGs) named NSG1 and NSG2. NSG1 has 100 inbound security rules and is associated to VM1. NSG2 has 200 inbound security rules and is associated to Subnet1.

VM2 cannot connect to VM1.

You suspect that an NSG rule blocks connectivity.

You need to identify which rule blocks the connection. The issue must be resolved as quickly as possible.

Which Azure Network Watcher feature should you use?

Effective security rules

Connection troubleshoot

NSG diagnostic

NSG flow logs

2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You enable BGP on the gateway of Vnet1.

Does this meet the goal?

Yes

3. HOTSPOT

You have an Azure subscription.

You have the on-premises sites shown the following table.

You plan to deploy Azure Virtual WAN.

You are evaluating Virtual WAN Basic and Virtual WAN Standard.

Which type of Virtual WAN can you use for each site? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

4. You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.

You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.

You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.

What should you include in the solution?

An Azure Virtual WAN ExpressRoute gateway

A Network Virtual Appliance (NVA)

A Site to site gateway (VPN gateway)

A Point to site gateway (User VPN gateway)

5. You have an Azure subscription that contains the public IP addresses shown in the following table.

You plan to deploy a NAT gateway named NAT1.

Which public IP addresses can be used as the public IP address for NAT1?

IP3 and IP5 only

IP5 only

IP1, IP3, and IP5 only

IP3 only

IP2 and IP4 only

6. HOTSPOT

You have the hybrid network shown in the Network Diagram exhibit.

You have a peering connection between Vnet1 and Vnet2 as shown in the Peering-Vnet1-Vnet2 exhibit.

You have a peering connection between Vnet1 and Vnet3 as shown in the Peering -Vnet1-Vnet3 exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

7. You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements.

What should you use to configure the default route?

a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3

a user-defined route assigned to GatewaySubnet in Vnet1

BGP route exchange

route filters

8. DRAG DROP

Your on-premises network contains an Active Directory Domain Services {AD DS) domain namedcontoso.comthat has an internal certification authority (CA).

You have an Azure subscription.

You deploy an Azure application gateway named AppGwy1 and perform the following actions:

• Configure an HTTP listener.

• Associate a routing rule with the listener.

You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers tocontoso.com.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

9. HOTSPOT

You have an Azure Traffic Manager parent profile named TM1. TM1 has two child profiles named TM2 and TM3.

TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.

TM2 uses the weighted traffic-routing method with Min Child Endpoint = 2and has the endpoints shown in the following table.

TM3 uses priority traffic-routing method and has the endpoints shown in the following table.

The App2, App4, and App6 endpoints have a degraded monitoring status.

To which endpoint is traffic directed? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

10. HOTSPOT

In which NSGs can you use ASG1 and to which virtual machine network interfaces can you associate ASG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Page 2 of 5

11. HOTSPOT

You have an Azure subscription that contains a virtual network named Vnetl. Vnetl has a /24 IPv4 address space.

You need to subdivide Vnet1. The solution must maximize the number of usable subnets.

What is the maximum number of IPv4 subnets you can create, and how many usable IP addresses will be available per subnet? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

12. You need to use Traffic Analytics to monitor the usage of applications deployed to Azure virtual machines.

Which Azure Network Watcher feature should you implement first?

Connection monitor

Packet capture

NSG flow logs

IP flow verify

13. You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 is associated to a network security group (NSG) named NSG1. NSG1 blocks all outbound traffic that is not allowed explicitly.

Subnet1 contains virtual machines that must communicate with the Azure Cosmos DB service.

You need to create an outbound security rule in NSG1 to enable the virtual machines to connect to Azure Cosmos DB.

What should you include in the solution?

a service tag

a private endpoint

a subnet delegation

an application security group

14. HOTSPOT

You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.

What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

15. You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that VM1 and VM2 can connect only to storage1.

The solution must meet the following requirements:

• Prevent VM1 and VM2 from accessing any other storage accounts.

• Ensure that storage1 is accessible from the internet.

What should you use?

a network security group (NSG)

a private endpoint

a private link

a service endpoint policy

16. You have the Azure load balancer shown in the Load Balancer exhibit.

LB2 has the backend pools shown in the Backend Pools exhibit.

You need to ensure that LB2 distributes traffic to all the members of VMSS1.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Add a network interface to VMSS1.

Configure a health probe.

Add a public IP address to each member of VMSS1.

Add a load balancing rule.

17. You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance.

You need to configure the policy to meet the following requirements:

✑ Log all connections from Australia.

✑ Deny all connections from New Zealand.

✑ Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute.

What is the minimum number of objects you should create?

three custom rules that each has one condition

one custom rule that has three conditions

one custom rule that has one condition

one rule that has two conditions and another rule that has one condition

18. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network named Vnet1

* A subnet named Subnet1 in Vnet1

* A virtual machine named VM1 that connects to Subnet1

* Three storage accounts named storage1, storage2. and storage3

You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts.

Solution: You create a network security group (NSG). You configure a service tag for Microsoft Storage and link the tag to Subnet1.

Does this meet the goal?

Yes

19. Your company has an office in New York.

The company has an Azure subscription that contains the virtual networks shown in the following table.

You need to connect the virtual networks to the office by using ExpressRoute.

The solution must meet the following requirements:

• The connection must have up to 1 Gbps of bandwidth.

• The office must have access to all the virtual networks.

• Costs must be minimized.

How many ExpressRoute circuits should be provisioned, and which ExpressRoute 5KU should you enable?

one ExpressRoute Standard circuit

one ExpressRoute Premium circuit

two ExpressRoute Premium circuits

four ExpressRoute Standard circuits

20. HOTSPOT

You have the Azure environment shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Page 3 of 5

21. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You configure the application gateway to direct traffic to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.

Solution: You configure a custom cookie and an exclusion rule.

Does this meet the goal?

Yes

22. You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption.

You configure the listener for HTTPS by uploading an enterprise signed certificate.

You need to ensure that the application gateway can provide end-to-end encryption for App1.

What should you do?

Set Listener type to Multi site.

Increase the Unhealthy threshold setting in the custom probe.

Upload the public key certificate to the HTTPS settings.

Enable the SSL profile for the listener.

23. DRAG DROP

You have an Azure Front Door instance named FrontDoor1.

You deploy two instances of an Azure web app to different Azure regions.

You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.

You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

24. HOTSPOT

You have an Azure subscription that contains an app named Appl. App1 is hosted on the Azure App Service instances shown in the following table.

You need to implement Azure Traffic Manager to meet the following requirements:

• App1 traffic must be assigned equally to each App Service instance in each Azure region.

• App1 traffic from North Europe must be routed to the Appl instances in the North Europe region.

• App1 traffic from North America must be routed to the Appl instances in the East US Azure region.

25. You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains 20 subnets and 500 virtual machines. Each subnet contains a virtual machine that runs network monitoring software.

You have a network security group (NSG) named NSG1 associated to each subnet.

When a new subnet is created in Vnet1, an automated process creates an additional network monitoring virtual machine in the subnet and links the subnet to NSG1.

You need to create an inbound security rule in NS61 that will allow connections to the network monitoring virtual machines from an IP address of 131.107.1.15.

The solution must meet the following requirements:

• Ensure that only the monitoring virtual machines receive a connection from 131.107.1.15.

• Minimize changes to NSG1 when a new subnet is created.

What should you use as the destination in the inbound security rule?

a virtual network

an IP address

an application security group

a service tag

26. HOTSPOT

You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2.

You have the NAT gateway shown in the NATgateway1 exhibit, (Click the NATgateway1 tab)

You have the virtual machine shown in the VM1 exhibit, (Click the VM1 tab)

Subnet1 is configured as shown in the Subnet1 exhibit, (Click the Subnet1 tab)

For each of the following statements, select Yes if the statement is true. Otherwise, select No

27. HOTSPOT

You have an Azure subscription that contains the virtual machines shown in the following table.

VNet1 and VNet2 are NOT connected to each other.

You need to block traffic from SQL Server 2019 to IIS by using application security groups.

The solution must minimize administrative effort.

How should you configure the application security groups? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

28. You have an Azure Virtual Desktop deployment that has 500 session hosts.

All outbound traffic to the internet uses a NAT gateway.

During peak business hours, some users report that they cannot access internet resources.

In Azure Monitor, you discover many failed SNAT connections.

You need to increase the available SNAT connections.

What should you do?

Add a public IP address.

Bind the NAT gateway to another subnet.

Deploy Azure Standard Load Balancer that has outbound rules.

29. You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.

Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

On the peerings from Vnet2 and Vnet3, select Use remote gateways.

On the peering from Vnet1, select Allow forwarded traffic.

On the peering from Vnet1, select Use remote gateways.

On the peering from Vnet1, select Allow gateway transit.

On the peerings from Vnet2 and Vnet3, select Allow gateway transit.

30. You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com.

The subscription contains the following resources:

• A virtual network named Vnet1

• An App Service plan named ASPI

• An Azure App Service named webapp1

• An Azure private DNS zone named private.contoso.com

• Virtual machines on Vnet1 that cannot communicate outside the virtual network

You need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https:/Avwwprivate.contosocom.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Create a private endpoint for webapp1.

Create a service endpoint for webapp1.

Create a CNAME record that maps www.pnvate.contoso.com to webapp1.privatelink.azurewebsites.net.

Create a CNAME record that maps wwwprivatemntoso.com to webapp1.contoso.onmicrosoft.com.

Create a CNAME record that maps wow.private.contoso.com to webapp 1 [email protected].

Page 4 of 5

31. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network named Vnet1

* A subnet named Subnet1 in Vnet1

* A virtual machine named VM1 that connects to Subnet1

* Three storage accounts named storage1, storage2, and storage3

You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts.

Solution: You configure the firewall on storage1 to only accept connections from Vnet1.

Does this meet the goal?

Yes

32. You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe Azure region.

You deploy an Azure App Service app named App1 to the West Europe region.

You need to provide App1 with access to the resources in Vnet1. The solution must minimize costs.

What should you do first?

Create a private link.

Create a new subnet.

Create a NAT gateway.

Create a gateway subnet and deploy a virtual network gateway.

33. DRAG DROP

Your company, named Contoso, Ltd, has an Azure subscription that contains the resources show in the following table.

You plan to deploy Azure Front Door.

The solution must meet the following requirement:

• Requests to a URL ofhttps://contoso.azurefd.net/ukmust be routed to App1uk.

• Requests to a URL ofhttps://contoso.azurefd.net/usmust be routed to App1us.

• Requests to a URL ofhttps://contoso.azurefd.net/imagesmust be routed to the storage account closest to the user.

What is the minimum number of backend pools and routing rules you should create? To answer, the appropriate number to the correct component. Each number may be used once, more than once, or not at all. You may need to drag the spilt bar between panes scroll to view content. Note: Each correct selection is worth one point.

34. You have an Azure subscription that contains the Azure app service web apps show in the following table:

You need to deploy Azure Traffic Manager.

The solution must meet the following requirements:

• Traffic to https//www.fabrikam.commust be directed to App1eu.

• If App1eu becomes unresponsive, all the traffic tohttps://www.fabrikam.commust be directed to App1us. You need to implement Traffic Manager to meet the requirements.

Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a Traffic Manager profile that uses the priority routing method

a Traffic Manager profile that uses the geographic routing method C a CNAME record in a DNS domain namedfabrikam.com

a TXT record in a DNS domain namedtabrikam.com

a real user measurements key in Traffic Manager

35. HOTSPOT

You are planning an Azure Front Door deployment that will contain the resources shown in the following table.

Users will connect to the App Service through Front Door by using a URL of https://www.fabrikarn.com. You obtain a certificate for the host name ofwww.fabfikam.com.

You need to configure a DNS record for www.fabrikam.com and upload the certificate to Azure.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

36. DRAG DROP

You need to prepare Vnet1 for the deployment of an ExpressRoute gateway. The solution must meet the hybrid connectivity requirements and the business requirements.

Which three actions should you perform in sequence for Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

37. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You reset the gateway of Vnet1.

Does this meet the goal?

Yes

38. DRAG DROP

You have two Azure virtual networks named Hub1 and Spoke1. Hub1 connects to an on-premises network by using a Site-to-Site VPN connection.

You are implementing peering between Hub1 and Spoke1.

You need to ensure that a virtual machine connected to Spoke1 can connect to the on-premises network through Hub1.

How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

39. You have an Azure application gateway named AppGW1 that balances requests to a web app named App1.

You need to modify the server variables in the response header of App1.

What should you configure on AppGW1?

HTTP settings

rewrites

rules

listeners

40. You have an Azure subscription that contains the resources shown in the following table.

Subshell contains Three virtual machines that host an app named App1. App1 is accessed by using the SFTP protocol.

From NSG1. you configure an inbound security rule named Rule2 that allows inbound SFTP connections to ASG1.

You need to ensure that the inbound SFTP connections are managed by using ASG1. The solution must minimize administrative effort.

What should you do?

From NSG1. modify the priority of Rule2.

From each virtual machine, associate the network interface to ASG1

From Subnet1 create a subnet delegation.

From ASG1, modify the role assignments.

Page 5 of 5

41. You have an Azure subscription that contains the resources is shown in the following table.

You need to ensure that the apps hosted on VM1 can resolve the IP address of the.

What should you create first?

a public DNS zone named database.windows.net

a private DNS zone named database.windows.net

a public DNS zone named private ink.database.windows.net

a private DNS zone named privatelink.database.windows.net

42. You have an Azure virtual network and an on-premises datacenter.

You need to implement a Site-to-Site VPN connection between the datacenter and the virtual network.

Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a virtual network gateway

Azure Firewall

a local network gateway

Azure Web Application Firewall (WAF)

an on-premises data gateway

an Azure application gateway

a user-defined route

43. HOTSPOT

You have an Azure subscription that contains a virtual network gateway named VNetGwy1.

VNetGwy1 has a public IP address of 20.25.32.214.

You need to query the health probe of VNetGwy1,

How should you complete the URI? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

44. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

45. You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com.

You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA).

What should you include in the solution?

an enterprise application in Azure Active Directory (Azure AD)

Active Directory Certificate Services (AD CS)

Azure Key Vault

Azure Application Gateway

Facebook Twitter LinkedIn Google + Email