AZ-700 practice questions 191–200

1. Question 191 · 339 in bank

   HOTSPOT - You are planning an Azure Front Door deployment that will contain the resources shown in the following table.

   

   Users will connect to the App Service through Front Door by using a URL of https://www.fabrikam.com. You obtain a certificate for the host name of www.fabrikam.com. You need to configure a DNS record for www.fabrikam.com and upload the certificate to Azure. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

2. Question 192 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains an app named App1. App1 is hosted on the Azure App Service instances shown in the following table.

   

   You need to implement Azure Traffic Manager to meet the following requirements: • App1 traffic must be assigned equally to each App Service instance in each Azure region. • App1 traffic from North Europe must be routed to the App1 instances in the North Europe region. • App1 traffic from North America must be routed to the App1 instances in the East US Azure region. • If an App Service instance fails, all the traffic for that instance must be routed to the remaining instances in the same region. How should you configure the Traffic Manager profiles? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   One parent profile configured with geographical routing method, 2 child profiles configured with weighted routing method. So: 3 minimum profiles Weighted (the question is the routing method in each region)

   Source: Adapted from community discussion — manny72

   References

   • Microsoft Learn

   

   Next question

3. Question 193 · 339 in bank

   Select 2

   You have an Azure subscription that contains the Azure App Service web apps shown in the following table.

   

   You need to deploy Azure Traffic Manager. The solution must meet the following requirements: • Traffic to https://www.fabrikam.com must be directed to App1eu. • If App1eu becomes unresponsive, all the traffic to https://www.fabrikam.com must be directed to App1us. You need to implement Traffic Manager to meet the requirements. Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa Traffic Manager profile that uses the priority routing method
   • Ba Traffic Manager profile that uses the geographic routing method
   • Ca CNAME record in a DNS domain named fabrikam.com
   • Da TXT record in a DNS domain named fabricam.com
   • Ea real user measurements key in Traffic Manager

   Show answer

   Answer: AC

   Next question

4. Question 194 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains an app named App1. App1 is deployed to the Azure App Service apps shown in the following table.

   

   You need to publish App1 by using Azure Front Door. The solution must ensure that all the requests to App1 are load balanced between all the available worker instances. What is the minimum number of origin groups and origins that you should configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1 group: Multi-region active/active deployment: Create a single origin group. Within that origin group, create an origin for each of the App Service apps. 2 origins: Your App Service app might be configured to scale out across worker instances, but from Front Door's perspective there's a single origin. https://learn.microsoft.com/en-us/azure/frontdoor/front-door-faq

   Source: Adapted from community discussion — sierra1784

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 195 · 339 in bank

   You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1. You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1. You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1. What should you add to NSG1?

   • Aan outbound rule that has a priority of 4096 and blocks all internet traffic
   • Ban inbound rule that has a priority of 4096 and blocks all internet traffic
   • Can inbound rule that has a priority of 100 and blocks all internet traffic
   • Dan outbound rule that has a priority 100 and blocks all internet traffic

   Show answer

   Answer: B

   Explanation

   B is Honey The given answer is correct, read more here https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-faq the part =>How do I use Application Gateway V2 with only private frontend IP address? Dont worry about the private the principal remains same for the public IP - pay attention to the images of NSG rules. Also as handy note, remember this classic good firewall rule practice. General rules should be low priority, and specific rules should be high priority. The more general, the lower. The more specific, the higher. The most general rule we have in firewalls is “block everything we don’t allow”; in other words, we are creating a white list of exceptions with the previously mentioned rules. So port 4096 is correct

   Source: Adapted from community discussion — Lazylinux

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 196 · 339 in bank

   You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines. You need to recommend a load balancing solution for the virtual network. The solution must meet the following requirements: • The virtual machines and the load balancer must be accessible only from the virtual network. • Costs must be minimized. What should you include in the recommendation?

   • ABasic Azure Load Balancer
   • BAzure Application Gateway v1
   • CAzure Standard Load Balancer
   • DAzure Application Gateway v2

   Show answer

   Answer: C

   Explanation

   C. In this link https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-placement-groups explains the Standard LB can use large VMSS (to 1000 VMs) against the (normal) VMSS (100 VMs) and also it has a NSG associated to filter only inboudn traffic coming from the VNET. Futhermore, the stament doesn't say it's web traffic, so only option is C, if it would say web traffic it could be D as well.

   Source: Adapted from community discussion — Feliphus

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 197 · 339 in bank

   HOTSPOT - You have an Azure Traffic Manager parent profile named TM1. TM1 has two child profiles named TM2 and TM3. TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.

   

   TM2 uses the weighted traffic-routing method with MinChildEndpoint = 2 and has the endpoints shown in the following table.

   

   TM3 uses priority traffic-routing method and has the endpoints shown in the following table.

   

   The App2, App4, and App6 endpoints have a degraded monitoring status. To which endpoint is traffic directed? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-nested-profiles

   Source: Adapted from community discussion — crawfish

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 198 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table.

   

   The subscription contains the virtual machines shown in the following table.

   

   You create a load balancer named LB1 that has the following configurations: • SKU: Basic • Type: Internal • Subnet: Subnet12 • Virtual network: VNet1 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Definitely YNN Basic LB needs vms to be in Avail set or VM scale set and in same vnet where LB is deployed but STD LB can load balance single VMs by adding single vms to backend pool but they also MUST be n same vNET where the LB is deployed

   Source: Adapted from community discussion — Lazylinux

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 199 · 339 in bank

   HOTSPOT - You have an Azure subscription. The subscription contains an Azure application gateway that has the following configurations: • Name: AppGW1 • Tier: Standard V2 • Autoscaling: Disabled You create an Azure AD user named User1. You need to ensure that User1 can change the tier of AppGW1. The solution must use the principle of least privilege. Which role should you assign to User1, and to which tiers can AppGW1 be changed? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 200 · 339 in bank

    DRAG DROP - You have an Azure subscription. You plan to deploy Azure Front Door with Azure Web Application Firewall (WAF). You plan to implement custom rules and managed rules that meet the following requirements: • Block malicious bots. • Throttle client IP addresses that exceed 100 connections per minute. You need to identify which Front Door SKU to configure, and which type of rule to configure for each requirement. The solution must minimize administrative effort and costs. What should you identify? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 191. 339 questions available.