AZ-700 practice questions 121–130

1. Question 121 · 339 in bank

   HOTSPOT - Your company has an Azure virtual network named Vnet1 that uses an IP address space of 192.168.0.0/20. Vnet1 contains a subnet named Subnet1 that uses an IP address space of 192.168.0.0/24. You create an IPv6 address range to Vnet1 by using a CIDR suffix of /48. You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company. The solution must minimize the number of additional IPv4 addresses. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/virtual-network/ipv6-overview https://docs.microsoft.com/en-us/azure/virtual-network/ipv6-add-to-existing-vnet-powershell

   Source: Adapted from community discussion — Wesgo

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 122 · 339 in bank

   You have the Azure virtual networks shown in the following table.

   

   You deploy Azure Firewall to Vnet3. You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall. What should you configure?

   • Apeering links between Vnet1 and Vnet2
   • Ba route table associated to Subnet1-1 and Subnet2-1
   • Can Azure private DNS zone
   • Da route table associated to AzureFirewallSubnet

   Show answer

   Answer: B

   Explanation

   B. a route table associated to Subnet1-1 and Subnet2-1 1. You have to create a route table first 2. Next you create the route in the table like this Route name: toFW Destination type: IP Addresses Destination IP addresses/CIDR ranges: 0.0.0.0/0 Next hop type: Virtual appliance Next hop address: Firewall IP 3. Go to Subnets Select the Vnet Associate Subnet1-1 and Subnet2-1

   Source: Adapted from community discussion — Acaer

   References

   • Microsoft Learn

   Next question

3. Question 123 · 339 in bank

   You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines. You need to recommend which subnet mask size to use for the virtual subnets. What should you recommend?

   • A/64
   • B/120
   • C/48
   • D/24

   Show answer

   Answer: A

   Explanation

   "The subnets for IPv6 must be exactly /64 in size. This ensures future compatibility should you decide to enable routing of the subnet to an on-premises network since some routers can only accept /64 IPv6 routes." https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview#capabilities

   Source: Adapted from community discussion — MrAmaeg

   References

   • Microsoft Learn

   Next question

4. Question 124 · 339 in bank

   DRAG DROP - You have two on-premises datacenters. You have an Azure subscription that contains four virtual networks named VNet1, VNet2, VNet3, and VNet4. You create an Azure virtual WAN named VWAN1. VWAN1 contains a single virtual hub that is connected to both on-premises datacenters and all the virtual networks in a full mesh topology. You create a route table named RT1. You need to configure VWAN1 to meet the following requirements: • Connectivity between VNet1 and VNet2 and both on-premises datacenters must be allowed. • Connectivity between VNet3 and VNet4 and both on-premises datacenters must be allowed. • VNet1 and VNet2 must be isolated from VNet3 and VNet4. How should you configure routing for VNet1 and VNet2 and for both on-premises datacenters? To answer, drag the appropriate route tables and route table propagation to the correct requirements. Each route table and route table propagation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Looks correct We can see such example here: https://learn.microsoft.com/en-us/azure/virtual-wan/scenario-isolate-vnets VNet1 + VNet2 Associated route table: RT1 Propagating to route tables: Default On-premises Associated route table: Default Propagating to route tables: RT1 and Default I was overthinking this a bit with this design https://learn.microsoft.com/en-us/azure/virtual-wan/scenario-isolate-vnets-custom but i guess VNet3 + 4 could be associated to route table Default since we isolate VNet1 + 2 from 3 + 4

   Source: Adapted from community discussion — Acaer

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 125 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains an Azure key vault named Vault1 and an app registration for an Azure AD app named App1. You have a DNS domain named contoso.com that is hosted by a third-party DNS provider. You plan to deploy App1 by using Azure App Service. App1 will have the following configurations: • App1 will be hosted across five App Service apps. • Users will access App1 by using a URL of https://app1.contoso.com. • The user traffic of App1 will be managed by using Azure Front Door. • The traffic between Front Door and the App Service apps will be sent by using HTTP. • App1 will be secured by using an SSL certificate from a third-party certificate authority (CA). You need to support the Front Door deployment. Which two DNS records should you create, and to where should you import the SSL certificate for App1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given answer is WRONG, i am NOT sure why no contribution from others on this point considering it is fundamentals of Azure FD 1- First thing to know is this is fresh install i.e. FD is NOT associated with App services 2- To know is that Both the FD and App services already have A records registered to them by MS and are accessible via internet 3- Third Party DNS provider is being utilized and NOT azure managed DNS 4- The domain contoso.com is already registered and has the relevant DNS records following in next paragraph

   Source: Adapted from community discussion — Lazylinux

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 126 · 339 in bank

   You have an Azure subscription that contains a virtual network named VNet1. VNet1 has a subnet mask of/24. You plan to implement an Azure application gateway that will have the following configurations: • Public endpoints: 1 • Private endpoints: 1 • Minimum instances: 1 • Maximum instances: 10 You need to configure the address space for the subnet of the application gateway. The solution must minimize the number of IP addresses allocated to the application gateway subnet. What is the minimum number of assignable IP addresses required?

   • A1
   • B2
   • C11
   • D12
   • E20

   Show answer

   Answer: C

   Explanation

   I C is correct!! For App gateway V1 subnet of 27 is required and for V2 the recommended is 24 CIDR, however based on the current configuration i.e. whole Address space for the vnet is /24 and fact max we have is 10 App GWY instances deployed at anytime then we can assign /28 CIDR for the address space for the App GWY this allows for 16 IP address of which 5 are reserved for Azure resources and this leaves us with 11 which is about enough for 1 Private Endpoint and 10 App GWY instances as for the Public IP it has nothing to do with private IP unless the App GWY requires private IP in which is not the case here

   Source: Adapted from community discussion — Lazylinux

   References

   • Microsoft Learn

   Next question

7. Question 127 · 339 in bank

   HOTSPOT - Your on-premises network contains a server named DNS1 that runs Windows Server 2022. DNS1 has the DNS server role and an IP address of 10.1.0.1. The network contains computers that use DNS1 for name resolution. You have an Azure subscription that contains the resources shown in the following table.

   

   The on-premises network connects to Vnet1 by using a Site-to-Site VPN. You need to ensure that the computers on the on-premises network can resolve the IP address for sql1.private.fabrikam.com. What should you do on DNS1 and DNS2? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The provided answer is INCORRECT On-prem DNS server DNS1 should be configured have conditional forwarder to forward traffic to AZ DNS server on IP 10.100.0.1 which acts as Azure DNS forwarder The Azure DNS server DNS2 - then forwards the DNS traffic to Azure recursive resolvers (IP 168.63.129.16) which in turn resolves the request to the on-prem client As NOTE: As of now and onwards - MS Azure no longer uses this method for name resolution to and from on-Prem - they have service called Azure DNS private resolver with inbound-outbound Endpoints with rule in place see link below - pay attention to the diagram https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#virtual-network-and-on-premises-workloads-using-a-dns-forwarder https://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16

   Source: Adapted from community discussion — Lazylinux

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 128 · 339 in bank

   DRAG DROP - You have an Azure subscription that contains the resources shown in the following table.

   

   You need to associate Gateway1 with Subnet1. The solution must minimize downtime on VM1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Using the steps found in https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat The given answers are incomplete. It should be: Disassociate PIP1 from NIC1 Change the PIP1 SKU to Standard Associate PIP1 with Gateway1

   Source: Adapted from community discussion — SilverFox22

   References

   • Microsoft Learn

   

   Next question

9. Question 129 · 339 in bank

   HOTSPOT - Your on-premises network contains the subnets shown in the following table.

   

   The network contains a firewall named FW1 that uses a public IP address of 131.107.100.200. You have an Azure subscription that contains the resources shown in the following table.

   

   You plan to configure a Site-to-Site (S2S) VPN named VPN1 that will connect GW1 to FW1. You need to configure LNG1 to support VPN1. The solution must meet the following requirements: • Ensure that the resources on Subnet1 and Subnet2 can communicate with the resources on VNet1. • Minimize administrative effort. How should you configure LNG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 130 · 339 in bank

    HOTSPOT - You plan to deploy Azure Virtual WAN. You need to deploy a virtual WAN hub that meets the following requirements: ✑ Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection ✑ Supports 8 Gbps of ExpressRoute traffic ✑ Minimizes costs What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

    Source: Adapted from community discussion — Bharat

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 121. 339 questions available.