AZ-700 practice questions 181–190

1. Question 181 · 339 in bank

   You have an internal Basic Azure Load Balancer named LB1 that has two frontend IP addresses. The backend pool of LB1 contains two Azure virtual machines named VM1 and VM2. You need to configure the rules on LB1 as shown in the following table.

   

   What should you do for each rule?

   • AEnable Floating IP.
   • BDisable Floating IP.
   • CSet Session persistence to Enabled.
   • DSet Session persistence to Disabled.

   Show answer

   Answer: A

   Explanation

   Correct Answer https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview#rule-type-2-backend-port-reuse-by-using-floating-ip If you want to reuse same port for both load balancing rules then Floating IP needs to be enabled

   Source: Adapted from community discussion — TJ001

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 182 · 339 in bank

   Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SD-WAN). The SD-WAN uses BGP. You have an Azure subscription that contains 20 virtual networks configured as a hub and spoke topology. The topology contains a hub virtual network named Vnet1. The virtual networks connect to the SD-WAN by using a network virtual appliance (NVA) in Vnet1. You need to ensure that BGP route advertisements will propagate between the virtual networks and the SD-WAN. The solution must minimize administrative effort. What should you implement?

   • AAn Azure VPN Gateway that has BGP enabled
   • Ba NAT gateway
   • CAzure Traffic Manager
   • DAzure Route Server

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/azure/route-server/overview Azure Route Server is a fully managed service and is configured with high availability. Azure Route Server simplifies dynamic routing between your network virtual appliance (NVA) and your virtual network. When BGP Peering is set up with this, it eliminates the need to manually update routes across all connected networks.

   Source: Adapted from community discussion — DeepMoon

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 183 · 339 in bank

   HOTSPOT - You have an Azure load balancer that has the following configurations: • Name: LB1 • Location: East US 2 • SKU: Standard • Private IP address: 10.3.0.7 • Load balancing rule: rule1 (Tcp/80) • Health probe: probe1 (Http:80) • NAT rules: 0 inbound The backend pool of LB1 has the following configurations: • Name: backend1 • Virtual network: Vnet2 • Backend pool configuration: NIC • IP version: IPv4 • Virtual machines: VM1, VM2, VM3 You have an Azure virtual machine named VM4 that has the following network configurations: • Network interface: vm4981 • Virtual network/subnet: Vnet3/Subnet3 • NIC private IP address: 10.4.0.4 • Accelerated networking: Enabled For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N - Tested in lab and confirmed once 1 backend pool has been configured you cannot add another backend pool on a different VNET, the original VNET is always selected. Y - VM1 is on VNET2 N - rule 1 is TCP/80, not 443 (HTTPS)

   Source: Adapted from community discussion — MightyMonarch74

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 184 · 339 in bank

   DRAG DROP - Your company, named Contoso, Ltd., has an Azure subscription that contains the resources shown in the following table.

   

   You plan to deploy Azure Front Door. The solution must meet the following requirements: • Requests to a URL of https://contoso.azurefd.net/uk must be routed to App1uk. • Requests to a URL of https://contoso.azurefd.net/us must be routed to App1us. • Requests to a URL of https://contoso.azurefd.net/images must be routed to the storage account closest to the user. What is the minimum number of backend pools and routing rules you should create? To answer, drag the appropriate number to the correct components. Each number may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   3 Backend Pools | 3 Rules I believe this is a Classic Front Door question. The first reference link provides an overview of classic routing. The questions shows we have a single frontend (contoso.azurefd.net) and there are three paths - /uk, /us, and /images. The second link shows the three paths would each be a separate rule. Regarding the number of backend pools, the question states, "...must be routed to [App1uk or App1us]" for the two App Services. The third link does not indicate there is a way to route traffic to a specific app service based on location. However, if we put each app service in its own backend pool, we can have the path rule route to the correct App Service everytime. The Latency routing logic is fine for storage accounts, but not the App Services based on the question requirements. References https://learn.microsoft.com/en-us/azure/frontdoor/front-door-routing-architecture?pivots=front-door-classic https://learn.microsoft.com/en-us/azure/frontdoor/front-door-route-matching?pivots=front-door-classic#frontend-host-matching https://learn.microsoft.com/en-us/azure/frontdoor/routing-methods

   Source: Adapted from community discussion — tester2023

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 185 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains the resource groups shown in the following table.

   

   You have the virtual networks shown in the following table.

   

   Vnet1 contains two virtual machines named VM1 and VM2. Vnet2 contains two virtual machines named VM3 and VM4. You have the network security groups (NSGs) shown in the following table that include only default rules.

   

   You have the Azure load balancers shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. NO. A backend pool can only contain resources from one virtual network. VM2 (VNet1) VM3 (VNet2) 2.YES. using the frondend Ip address. 3. NO. the defualt NSGs are blocking any ingress internet traffic

   Source: Adapted from community discussion — NoeHdzMll

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 186 · 339 in bank

   You have an Azure subscription that contains the resources shown in the following table.

   

   Gateway1 provides access to App1 by using a URL of https://app1.contoso.com. You create a new web app named App2. You need to configure Gateway1 to enable access to App2 by using a URL of https://app2.contoso.com. The solution must minimize administrative effort. What should you configure on Gateway1?

   • Aa backend pool and a routing rule
   • Ba listener and a routing rule
   • Ca listener, a backend pool, and a routing rule
   • Da listener and a backend pool

   Show answer

   Answer: C

   Explanation

   In order to enable access to App2 through Gateway1 with the URL https://app2.contoso.com, you need to configure the following components: Listener: A listener is responsible for handling incoming traffic and directing it to the appropriate backend pool based on the defined routing rules. In this case, you need to configure a new listener on Gateway1 to handle requests for the URL https://app2.contoso.com. Backend Pool: A backend pool is a collection of resources that can serve the incoming requests. In this scenario, you need to create a new backend pool specifically for App2, which will contain the necessary resources (in this case, the web app App2). Routing Rule: A routing rule determines how the incoming requests should be forwarded to the appropriate backend pool. In this case, you need to create a routing rule that matches requests for the URL https://app2.contoso.com and directs them to the backend pool associated with App2. By configuring a listener, a backend pool, and a routing rule, you can ensure that Gateway1 routes the incoming requests for https://app2.contoso.com to the correct backend pool (App2), thus enabling access to App2 through the specified URL.

   Source: Adapted from community discussion — roshingrg

   References

   • Microsoft Learn

   Next question

7. Question 187 · 339 in bank

   SIMULATION -

   

   Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: User-12345678@cloudslice.onmicrosoft.com Azure Password: xxxxxxxxxx - If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You plan to deploy a firewall to subnet1-2. The firewall will have an IP address of 10.1.2.4. You need to ensure that traffic from subnet1-1 to the IP address range of 192.168.10.0/24 is routed through the firewall that will be deployed to subnet 1-2. The solution must be achieved without using dynamic routing protocol. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 188 · 339 in bank

   Select 3

   You have an Azure application gateway named AGW1 that has a routing rule named Rule1. Rule 1 directs traffic for http://www.contoso.com to a backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1. You deploy another virtual machine scale set named VMSS2. You need to configure AGW1 to direct all traffic for http://www.adatum.com to VMSS2. The solution must ensure that requests to http://www.contoso.com continue to be directed to Pool1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AAdd a backend pool.
   • BModify an HTTP setting.
   • CAdd an HTTP setting.
   • DAdd a listener.
   • EAdd a rule.

   Show answer

   Answer: ADE

   Explanation

   Correct You need a backend for VMSS2, a listener for the site adatum.com and a rule to redirect the request from the listener to backend VMSS2

   Source: Adapted from community discussion — RickMorais

   Next question

9. Question 189 · 339 in bank

   You have two Azure virtual networks in the East US Azure region as shown in the following table.

   

   The virtual networks are peered to one another. Each virtual network contains four subnets. You plan to deploy a virtual machine named VM1 that will inspect and route traffic between all the subnets on both the virtual networks. What is the minimum number of IP addresses that you must assign to VM1?

   • A1
   • B2
   • C4
   • D8

   Show answer

   Answer: A

   Explanation

   https://learn.microsoft.com/en-us/azure/firewall/firewall-faq#can-azure-firewall-forward-and-filter-network-traffic-between-subnets-in-the-same-virtual-network-or-peered-virtual-networks Can Azure Firewall forward and filter network traffic between subnets in the same virtual network or peered virtual networks? Yes. However, configuring the UDRs to redirect traffic between subnets in the same VNET requires additional attention. While using the VNET address range as a target prefix for the UDR is sufficient, this also routes all traffic from one machine to another machine in the same subnet through the Azure Firewall instance. To avoid this, include a route for the subnet in the UDR with a next hop type of VNET. Managing these routes might be cumbersome and prone to error. The recommended method for internal network segmentation is to use Network Security Groups, which don't require UDRs.

   Source: Adapted from community discussion — _fvt

   References

   • Microsoft Learn

   Next question

10. Question 190 · 339 in bank

    You have an on-premises network. You have an Azure subscription that includes a virtual network named VNet1 and a private Azure Kubernetes Service (AKS) cluster named AKS1. VNet1 is connected to your on-premises environment via an Azure ExpressRoute circuit. AKS1 is connected to VNet1. You need to implement an off-cluster ingress controller for AKS1. The solution must provide connectivity from the on-premises environment to containerized workloads hosted on AKS1. Which Azure service should you use?

    • AAzure Application Gateway
    • BAzure Front Door
    • CAzure Traffic Manager
    • DAzure Load Balancer

    Show answer

    Answer: A

    Explanation

    While Azure Front Door, Azure Traffic Manager, and Azure Load Balancer are also capable of routing and managing network traffic, Azure Application Gateway is more suitable for this scenario because: It can be deployed within a virtual network (VNet), which allows for integration with AKS and provides the ability to route traffic from the on-premises environment (via Azure ExpressRoute) directly to containerized workloads hosted on AKS1. It provides application layer routing capabilities, which are necessary for efficiently managing and routing HTTP(S) traffic to the AKS cluster. It supports features like URL-based routing, multiple-site hosting, and Web Application Firewall (WAF) that can help in enhancing the security and performance of applications hosted on AKS.

    Source: Adapted from community discussion — evangelist

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 181. 339 questions available.