AZ-700 practice questions 201–210

1. Question 201 · 339 in bank

   HOTSPOT - You have an Azure application gateway. You need to create a rewrite rule that will remove the origin port from the HTTP header of incoming requests that are being forwarded to the backend pool. How should you configure each setting? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The X-Forwarded-For client request header field with the client_ip variable (see explanation later in this table) appended to it in the format IP1, IP2, IP3, and so on. If the X-Forwarded-For field isn't in the client request header, the add_x_forwarded_for_proxy variable is equal to the $client_ip variable. This variable is particularly useful when you want to rewrite the X-Forwarded-For header set by Application Gateway so that the header contains only the IP address without the port information. https://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url

   Source: Adapted from community discussion — jorgesoma

   References

   • Microsoft Learn

   

   Next question

2. Question 202 · 339 in bank

   SIMULATION -

   

   Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: User-12345678@cloudslice.onmicrosoft.com Azure Password: xxxxxxxxxx - If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You need to ensure that traffic to host.fabrikam.com is directed to the Traffic Manager profile. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Missing some information in the question, But my guess is that you have a DNS zone resource where you need to create a CNAME pointing to the traffic managers DNS Name.

   Source: Adapted from community discussion — LieJ0n

   References

   • Microsoft Learn

   

   Next question

3. Question 203 · 339 in bank

   SIMULATION -

   

   Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: User-37774194@cloudslice.onmicrosoft.com Azure Password: xxxxxxxxxx - If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You have two servers that are each hosted by a separate service provider in New York and Germany. The server hosted in New York is accessible by using a host name of ny.contoso.com. The server hosted in Germany is accessible by using a host name of de.contoso.com. You need to provide a single host name to access both servers. The solution must ensure that traffic originating from Germany is routed to de.contoso.com. All other traffic must be routed to ny.contoso.com. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I would use Traffic Manager It provides geolocation-based routing, which directly addresses your need to route Application Gateway alone does not provide geolocation-based routing natively. You might need external tools or integrate with Azure Front Door for geolocation detection.

   Source: Adapted from community discussion — bobothewiseman

   

   Next question

4. Question 204 · 339 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

   

   You need to ensure that the URL is accessible through the application gateway from any IP address. Solution: You add a rewrite rule for the host header. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   The log shows that WAF rule with ruleId 920300 was trigged. Instead we should disable the WAF rule that has a ruleId 920300. Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-troubleshoot

   Next question

5. Question 205 · 339 in bank

   HOTSPOT - You have an on-premises web server that hosts a web app named App1 and has the following configurations: • IP address: 131.107.50.60 • FQDN: server1.contoso.com You have an Azure subscription. You need to publish App1 by using Azure Front Door. The solution must meet the following requirements: • Ensure that internet users can connect to App1 by using an FQDN of app1.contoso.com. • Minimize the changes required to the configuration of Front Door if Server1 is migrated to Azure. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   A CNAME record of app1 .z01.azurefd.net server1.contoso.com DNS Record: • Set a CNAME record for app1.contoso.com pointing to app1- .z01.azurefd.net (Front Door’s endpoint). 2. Azure Front Door Configuration: • Add an origin with: • Origin host name: server1.contoso.com • Backend: On-premises server’s IP (131.107.50.60). • Configure health probes to monitor the on-premises server.

   Source: Adapted from community discussion — bobothewiseman

   

   Next question

6. Question 206 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains the resources shown in the following table.

   

   You plan to deploy an app named App1 to meet the following requirements: • External users must be able to access App1 from the internet. • App1 will be load balanced across all the virtual machines. • App1 will be hosted on VM1, VM2, VM3, and VM4. • App1 must be available if an Azure region fails. • Costs must be minimized. You need to implement a global load balancer solution for App1. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 207 · 339 in bank

   You have an Azure Front Door instance named FD that contains an origin group named OG1. You need to configure a health probe for OG1. The solution must minimize the amount of traffic generated by the health probe. Which HTTP method should you use?

   • ACONNECT
   • BHEAD
   • CTRACE
   • DGET

   Show answer

   Answer: B

   Explanation

   Azure Front Door supports the following HTTP methods for sending the health probes: GET: The GET method means retrieve whatever information (in the form of an entity) gets identified by the Request-URI. HEAD: The HEAD method is identical to GET except that the server MUST NOT return a message-body in the response. For new Front Door profiles, by default, the probe method is set as HEAD. https://learn.microsoft.com/en-us/azure/frontdoor/health-probes

   Source: Adapted from community discussion — Stevo3

   References

   • Microsoft Learn

   Next question

8. Question 208 · 339 in bank

   You have an Azure subscription that contains the resources shown in the following table.

   

   You need to configure FW1 to filter traffic that originates from VNet1 and targets the FQDN of SQLDB1. Which type of rule should you use?

   • ADNAT
   • Bnetwork
   • Capplication
   • Dinfrastructure

   Show answer

   Answer: C

   Explanation

   Summary of the Azure Firewall rule types: A. DNAT (Destination Network Address Translation): Allows you to translate the destination IP address and port of incoming traffic to an internal IP address and port. Primarily used to expose internal services to the internet. Effectively, it maps a public IP/port to a private IP/port. B. Network Rules: Control traffic based on source and destination IP addresses, ports, and protocols (TCP, UDP, ICMP). Used for general network traffic filtering. C. Application Rules: Control traffic based on fully qualified domain names (FQDNs), HTTP/HTTPS protocols, and other application-specific attributes. Provides more granular control over web traffic. D. Infrastructure Rules: These are rules that the azure firewall uses for its own internal operations. These rules are used for things like the azure firewall reaching out to the internet for updates, or for other internal azure communications. These rules are mostly managed by Microsoft.

   Source: Adapted from community discussion — armpitworm

   References

   • Microsoft Learn

   Next question

9. Question 209 · 339 in bank

   DRAG DROP - You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. You plan to deploy the resources shown in the following table.

   

   You need to deploy two load balancers to manage the traffic for VMSS1, VM1, and VM2. The solution must meet the following requirements: • Either VM1 or VM2 must inspect all the traffic from the internet to App1. • All user connections from the internet to App1 must be load balanced. • Costs must be minimized. Which load balancer SKU should you include in the solution? To answer, drag the appropriate SKUs to the correct resources. Each SKU may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 210 · 339 in bank

    You have an Azure subscription that contains the resources shown in the following table.

    

    You need to configure a solution to meet the following requirements: • App1 must be assigned a private endpoint. • Access to App1 from the internet must be routed via FD1. What should you configure on FD1?

    • Aa security policy that redirects traffic
    • Ba rule that has the route configuration override action
    • Can origin that enables the Azure Private Link service
    • Da route that redirects traffic

    Show answer

    Answer: C

    Explanation

    By configuring an origin in FD1 that uses the Azure Private Link service, traffic from FD1 can reach the private endpoint of App1 securely.

    Source: Adapted from community discussion — bobothewiseman

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 201. 339 questions available.