AZ-700 practice questions 211–220

1. Question 211 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains a virtual machine scale set named VMSS1 and a public standard Azure load balancer named LB1. VMSS1 contains eight virtual machines that have private IP addresses only. VMSS1 is configured as a backend pool of LB1. LB1 has two frontend IP addresses and one outbound rule that provides internet connectivity to VMSS1. What is the maximum number of ports available to the virtual machines in VMSS1, and what should you change to increase the maximum number of SNAT ports available to VMSS1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Maximum Number of Ports: The maximum number of ports available is determined by the number of frontend IP addresses and outbound rules. Each frontend IP address in a Standard Load Balancer provides 64,000 SNAT ports. Correct Selection: 128K Since LB1 has two frontend IP addresses and each provides 64,000 SNAT ports, the total is 128K ports. Increase the Number of SNAT Ports: To increase the number of SNAT ports available, you need to add more frontend IP addresses because each frontend IP provides an additional 64,000 ports. Correct Selection: Frontend IP addresses for LB1 Adding more frontend IP addresses to LB1 will increase the total SNAT port pool.

   Source: Adapted from community discussion — deka_peace

   References

   • Microsoft Learn

   

   Next question

2. Question 212 · 339 in bank

   DRAG DROP - You have an Azure subscription that contains a virtual machine named VM1. VM1 contains a NIC named NIC1 and a public IP address named PIP1. PIP1 is assigned to NIC1. You plan to deploy four Network Virtual Appliances (NVAs). You need to ensure that all the inbound traffic from the internet to PIP1 is inspected by the NVAs. The solution must ensure that the NVA deployment is highly available. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Provided answer is wrong according to this: https://learn.microsoft.com/en-us/azure/load-balancer/tutorial-gateway-portal Correct answer is: 1. Create a gateway Load balancer 2. Deploy the NVAs 3. Link NIC1 to the load balancer (Chain virtual machine to Gateway Load Balancer)

   Source: Adapted from community discussion — bilzi

   References

   • Microsoft Learn

   

   Next question

3. Question 213 · 339 in bank

   You have two Azure virtual networks named VNet1 and VNet2 that are peered with each other. VNet1 hosts 10 virtual machines that contain web servers. VNet2 hosts five virtual machines that contain database servers. You need to configure a security solution that meets the following requirements: • Ensures that the database servers can accept connections only from the web servers • Ensures that the web servers can initiate connections only to the database servers • Ensures that all network security groups (NSGs) are associated only with subnets • Use application security groups to implement the solution What is the minimum number of application security groups required?

   • A1
   • B2
   • C4
   • D8

   Show answer

   Answer: B

   Explanation

   Answer is correct but your explanation is incorrect. In fact, you can have multiple Application Security Groups (ASGs) within a single Virtual Network (VNet), and you can use ASGs to group virtual machines (VMs) or other network interfaces (NICs) across multiple VNets. You need 2 ASG groups because 1 ASG for the web servers: This will include all web servers in VNet1. 1 ASG for the database servers: This will include all database servers in VNet2.

   Source: Adapted from community discussion — e6d6bf4

   Next question

4. Question 214 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains six Azure App Service apps. The apps have an identical configuration and are deployed across multiple Azure regions. You plan to deploy Azure Front Door to load balance traffic across the apps. You need to ensure that the round robin load-balancing algorithm will send traffic only to a limited number App Service apps based on their proximity to a user. The solution must minimize administrative effort. What should you modify, and what should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

5. Question 215 · 339 in bank

   HOTSPOT - You have an Azure Front Door instance that provides access to a web app. The web app uses a hostname of www.contoso.com. You have the routing rules shown in the following table.

   

   Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/frontdoor/front-door-route-matching

   Source: Adapted from community discussion — Pravda

   References

   • Microsoft Learn

   

   Next question

6. Question 216 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains the resources shown in the following table.

   

   You need to identify the number of established outbound connections from the virtual machines. Which resource and metric should you review? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

7. Question 217 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains a virtual network. The virtual network contains two subnets named Subnet1 and Subnet2. You have an instance of Azure Application Gateway v2 named AppGw1 that is connected to Subnet1. You need to move AppGw1 to Subnet2. The solution must minimize downtime. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   {ChatGPT} Set the frontend IP address type to: Both Reason: Ensuring that the Application Gateway supports both public and private IP addresses helps maintain connectivity during the transition. Before moving AppGw1, run: Stop-AzApplicationGateway Reason: You must stop the Application Gateway before reconfiguring or moving it to another subnet. To move AppGw1, run: Set-AzApplicationGateway Reason: This command is used to apply the necessary changes, including reconfiguring the subnet association of the Application Gateway.

   Source: Adapted from community discussion — deka_peace

   References

   • Microsoft Learn

   

   Next question

8. Question 218 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains a virtual network named VNet1. You need to deploy an instance of Azure Application Gateway v2 named AppGw1 to VNet1. AppGw1 will include one basic listener and two multi-site listeners. The listeners will be accessible only from VNet1. What is the minimum number of IP addresses required for AppGw1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

9. Question 219 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains an Azure application gateway named AG1 and two Azure App Service apps named App1 and App2 that have the following configurations: • Both apps are accessible by using HTTP and HTTPS. • HTTP host headers are used to route requests to the appropriate apps. • Both apps are hosted in a single App Service Environment in the West Europe Azure region. You need to publish the apps by using AG1. The solution must ensure that AG1 provides both HTTP and HTTPS access. What is the minimum number of resources required for AG1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Public IP addresses: 1 (for Azure application gateway AG1) Listeners: 2 (1 for HTTP and 1 for HTTPS) Backend pools: 2 (1 for each of Azure App Service apps App1 and App2)

   Source: Adapted from community discussion — pdossantos

   

   Next question

10. Question 220 · 339 in bank

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

    

    You need to ensure that the URL is accessible through the application gateway. Solution: You disable the WAF rule that has a ruleId 920300. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: A

    Explanation

    No - the action is well stated. The action is Blocked when it reaches the max anomaly count and trigger the non-disabled rule, from that rule you will see action "Blocked"

    Source: Adapted from community discussion — WorkHardBeProud

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 211. 339 questions available.