AZ-700 practice questions 161–170

1. Question 161 · 339 in bank

   You have the Azure environment shown in the exhibit.

   

   VM1 is a virtual machine that has an instance-level public IP address (ILPIP). Basic Load Balancer uses a public IP address. VM1 and VM2 are in the backend pool. NAT Gateway uses a public IP address named IP3 that is associated to SubnetA. VNet1 has a virtual network gateway that has a public IP address named IP4. When initiating outbound traffic to the internet from VM1, which public address is used?

   • AIP1
   • BIP2
   • CIP3
   • DIP4

   Show answer

   Answer: C

   Explanation

   More this https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource#nat-and-vm-with-instance-level-public-ip-and-public-load-balancer Anyway the article says "On a subnet with a NAT gateway, all outbound to Internet scenarios are superseded by the NAT gateway"

   Source: Adapted from community discussion — christianpageqc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 162 · 339 in bank

   You are configuring two network virtual appliances (NVAs) in an Azure virtual network. The NVAs will be used to inspect all the traffic within the virtual network. You need to provide high availability for the NVAs. The solution must minimize administrative effort. What should you include in the solution?

   • AAzure Standard Load Balancer
   • BAzure Application Gateway
   • CAzure Traffic Manager
   • DAzure Front Door

   Show answer

   Answer: A

   Explanation

   The solution must minimize administrative effort. When it comes to the simplest solution, do you really want to be configuring a CDN (Azure Front Door), Azure Traffic Manager - with all those profiles and child profiles as we saw from the other convoluted question on this exam, or even an Azure Application Gateway (Whatever that is) Or do you want to stick with the tried and true method of just creating a Load Balancer and be done with it? Gentlemen, I think answer is obvious: Load Balancer. Hope this helps you to remember!

   Source: Adapted from community discussion — derrrp

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 163 · 339 in bank

   You have five virtual machines that run Windows Server. Each virtual machine hosts a different web app. You plan to use an Azure application gateway to provide access to each web app by using a hostname of www.contoso.com and a different URL path for each web app, for example: https://www.contoso.com/app1. You need to control the flow of traffic based on the URL path. What should you configure?

   • AHTTP settings
   • Blisteners
   • Crules
   • Drewrites

   Show answer

   Answer: C

   Explanation

   To control the flow of traffic based on the URL path, you should configure rules in the Azure application gateway. Rules in an Azure application gateway define how incoming traffic is routed to the backend pool or target. Each rule consists of a listener, which specifies the protocol, port, and hostname to listen for, and a backend pool or target, which specifies the destination for traffic that matches the listener's criteria. In this case, you can create a rule for each web app, specifying the hostname www.contoso.com and the URL path for the web app (e.g. /app1, /app2, etc.) as the listener criteria, and the corresponding virtual machine hosting the web app as the backend pool or target. This will allow you to control the flow of traffic based on the URL path, directing traffic to the appropriate virtual machine for each web app. Therefore, the correct answer is C: rules.

   Source: Adapted from community discussion — Nicolas_UY

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 164 · 339 in bank

   You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.

   

   You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2. You create a Traffic Manager profile named TMprofile1. TMprofile1 uses the weighted traffic-routing method. You need to ensure that Traffic Manager routes traffic for www.contoso.com. Which DNS record should you create?

   • Atwo A records that map www.contoso.com to 131.107.100.1 and 131.107.200.1
   • Ba CNAME record that maps www.contoso.com to TMprofile1.azurefd.net
   • Ca CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net
   • Da TXT record that contains a string of as1.contoso.com and as2.contoso.com in the details

   Show answer

   Answer: C

   Explanation

   To ensure that Traffic Manager routes traffic for www.contoso.com, you should create a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net. A CNAME (Canonical Name) record is a type of DNS record that maps a hostname to another hostname, rather than an IP address. When a client sends a request for the hostname specified in the CNAME record, the DNS server responds with the IP address of the target hostname. In this case, you can create a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net, which is the hostname of the Traffic Manager profile. This will allow clients to access the website using the hostname www.contoso.com, while Traffic Manager handles the routing of traffic between AS1 and AS2 based on the configured traffic-routing method. Therefore, the correct answer is C: a CNAME record that maps www.contoso.com to TMprofile1.trafficmanager.net.

   Source: Adapted from community discussion — Nicolas_UY

   Next question

5. Question 165 · 339 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

   

   You need to ensure that the URL is accessible through the application gateway from any IP address. Solution: You create a WAF policy exclusion for request headers that contain 137.135.10.24. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-monitor?pivots=front-door-standard-premium#waf-logs Client IP is the IP address of the client that made the request. If there was an X-Forwarded-For header in the request, the client IP address is taken from that header field instead. There wasn't an X-Forwarded-For header, so it is your IP address. Creating a WAF exclusion would allow you to connect, but that is not the goal. Any connections from a different IP would still get the 403 error. The answer is No.

   Source: Adapted from community discussion — flurgen248

   References

   • Microsoft Learn

   Next question

6. Question 166 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains the route tables and routes shown in the following table.

   

   The subscription contains the subnets shown in the following table.

   

   The subscription contains the virtual machines shown in the following table.

   

   The subscription contains the local network gateways shown in the following table.

   

   There is a Site-to-Site VPN connection to each local network gateway. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

   Source: Adapted from community discussion — jellybiscuit

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 167 · 339 in bank

   HOTSPOT - Your company has 10 instances of a web service. Each instance is hosted in a different Azure region and is accessible through a public endpoint. The development department at the company is creating an application named App1. Every 10 minutes, App1 will use a list of endpoints and connect to the first available endpoint. You plan to use Azure Traffic Manager to maintain the list of endpoints. You need to configure a Traffic Manager profile that will minimize the impact of DNS caching. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-endpoint-types

   Source: Adapted from community discussion — VonKellus

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 168 · 339 in bank

   DRAG DROP - You have an Azure Front Door instance named FrontDoor1. You deploy two instances of an Azure web app to different Azure regions. You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com. You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#associate-the-custom-domain-with-your-front-door https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

   Source: Adapted from community discussion — tartarus23

   References

   • Microsoft Learn

   

   Next question

9. Question 169 · 339 in bank

   You have a website that uses an FQDN of www.contoso.com. The DNS record for www. contoso.com resolves to an on-premises web server. You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1. You build the website on Web1. You plan to configure ContosoFD1 to publish the website for testing. When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit. (Click the Exhibit tab.)

   

   You need to test the website and ContosoFD1 without affecting user access to the on-premises web server. Which record should you create in the contoso.com DNS domain?

   • Aa CNAME record that maps afdverify.www.contoso.com to ContosoFD1.azurefd.net
   • Ba CNAME record that maps www.contoso.com to ContosoFD1.azurefd.net
   • Ca CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net
   • Da CNAME record that maps www.contoso.com to Web1.contoso.com

   Show answer

   Answer: C

   Explanation

   Answer is correct. This is to map the custom domain while regsitering to the Azure portal without affecting Web traffic traffic ... With this method, users can access your domain without interruption while the DNS mapping occurs. https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#map-the-temporary-afdverify-subdomain%20Community%20vote%20distribution

   Source: Adapted from community discussion — Mike2020

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 170 · 339 in bank

    Select 2

    You have the Azure load balancer shown in the Load Balancer exhibit.

    

    LB2 has the backend pools shown in the Backend Pools exhibit.

    

    You need to ensure that LB2 distributes traffic to all the members of VMSS1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AAdd a network interface to VMSS1.
    • BAdd a load balancing rule.
    • CConfigure a health probe.
    • DAdd a public IP address to each member of VMSS1.

    Show answer

    Answer: BC

    Explanation

    Answer: BC B - configure the load balancing rule, which maps the frontend IP with backend Pool. C - monitor the Backend pools

    Source: Adapted from community discussion — vivikar

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 161. 339 questions available.