AZ-700 practice questions 31–40

1. Question 31 · 339 in bank

   HOTSPOT - Your on-premises network uses an IP address range of 10.1.0.0 to 10.1.255.255. You plan to deploy a new Azure virtual network solution that will include the following elements: • A virtual network named VNet1 • A Site-to-Site (S2S) VPN connection between VNet1 and the on-premises network • GatewaySubnet in VNet1, which will be used as a route-based virtual network gateway You need to recommend which subnet masks to assign to VNet1 and GatewaySubnet. The solution must meet the following requirements: • Maximize the number of available IP addresses on VNet1. • Minimize the number of available IP addresses on GatewaySubnet. Which address spaces should you assign to VNet1 and GatewaySubnet? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Maximize the number of available IP addresses on VNet1 10.0.0.0/16 Minimize the number of available IP addresses on GatewaySubnet 10.0.0.0/27

   Source: Adapted from community discussion — Jackdisuin

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 32 · 339 in bank

   SIMULATION -

   

   Username and password - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: User-12345678@cloudslice.onmicrosoft.com Azure Password: xxxxxxxxxx - If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 12345678 - You have two servers that are each hosted by a separate service provider in New York and California. The server hosted in New York is accessible by using a host name of ny.contoso.com. The server hosted in California is accessible by using a host name of ca.contoso.com. You need to implement an Azure solution to route users to the server that has the lowest latency. The solution must minimize costs. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   This looks more like Traffic Manager to me.. using performance routing Plus it says DNS hostnames (Servers) and not applications (or urls) Plus Azure TMs are cheaper. https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview#https-vs-non-https:~:text=DNS%2Dbased%20traffic%20load%20balancer%20that

   Source: Adapted from community discussion — cerifyme85

   References

   • Microsoft Learn

   

   Next question

3. Question 33 · 339 in bank

   HOTSPOT - You have an Azure subscription that contains a virtual network named VNet1. You need to implement hybrid connectivity between an on-premises network and VNet1. The solution must meet the following requirements: • All cross-premises network traffic must traverse an ExpressRoute circuit. • All cross-premises network traffic must be encrypted by using a Site-to-Site (S2S) VPN. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

4. Question 34 · 339 in bank

   You have an Azure subscription that contains the resources shown in the following table.

   

   You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements: • VM1 will access the internet by using its public IP address. • VM2 will access the internet by using its public IP address. • Administrative effort must be minimized. You need to ensure that you can deploy Gateway1 to Vnet1. What is the minimum number of subnets that Vnet1 must have?

   • A2
   • B3
   • C4
   • D5

   Show answer

   Answer: C

   Explanation

   Cannot deploy in GatewaySugnet, and if deployed in Subnet1 or Subnet2 VM1 or VM2 will start accessing the Internet by using the NAT GW IP address. Thus, a new subnet (4th) is needed.

   Source: Adapted from community discussion — Jor466077

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 35 · 339 in bank

   You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?

   • AIKEDiagnosticLog
   • BRouteDiagnosticLog
   • CGatewayDiagnosticLog
   • DTunnelDiagnosticLog

   Show answer

   Answer: A

   Explanation

   Answer is correct - IKEDiagnosticLog IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to review when troubleshooting disconnections, or failure to connect VPN scenarios. GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table. TunnelDiagnosticLog = The TunnelDiagnosticLog table is very useful to inspect the historical connectivity statuses of the tunnel. RouteDiagnosticLog = The RouteDiagnosticLog table traces the activity for statically modified routes or routes received via BGP. P2SDiagnosticLog = The last available table for VPN diagnostics is P2SDiagnosticLog. This table traces the activity for Point to Site. https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

   Source: Adapted from community discussion — crawfish

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 36 · 339 in bank

   DRAG DROP - You have 100 on-premises servers with IP addresses from the 10.0.0.0/24 IP address space. You have an Azure subscription that contains a virtual network named VNet1, an Azure VPN gateway named VGW1, and 100 virtual machines. VNet1 has an IP address space of 10.0.0.0/22. VGW1 uses the VpnGw1 SKU. You need to ensure that the Azure virtual machines and the on-premises servers can communicate by using VGW1. The solution must minimize administrative effort. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think the given answer it's correct: -1 Resize Vnet1 (for example to 10.0.1.0/24 so we don't need NAT rules) -2 Create local gw -3 Add connection -4 Azure extended network

   Source: Adapted from community discussion — D10SJoker

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 37 · 339 in bank

   DRAG DROP - You have a computer named CLIENT1 that runs Windows 11 and has the Azure VPN Client installed. You have an Azure virtual network gateway named VPNGW1. You need to ensure that you can connect CLIENT1 to VPNGW1. The solution must support Microsoft Entra authentication. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer are and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   From the Azure portal, authorize the Azure VPN application. This step allows CLIENT1 to authenticate using Microsoft Entra ID. From the Azure portal, configure the tunnel type and authentication type for VPNGW1. This ensures VPNGW1 supports Microsoft Entra authentication. From the Azure portal, download the Azure VPN Client profile configuration package to CLIENT1. This package contains the necessary settings for CLIENT1 to connect. To CLIENT1, import the Vpnconfig.ovpn file. This step completes the configuration, allowing CLIENT1 to establish a VPN connection.

   Source: Adapted from community discussion — sismer

   References

   • Microsoft Learn

   

   Next question

8. Question 38 · 339 in bank

   HOTSPOT - You plan to implement an Azure Virtual WAN named VWAN1 that will contain a hub named Hub1. VWAN1 will include the virtual networks shown in the following table.

   

   You need to ensure that hosts connected to VNet1 can communicate with hosts connected to VNet3. How should you configure the routing tables for VWAN1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

9. Question 39 · 339 in bank

   You have an on-premises network. You have an Azure subscription that contains a virtual network. You have an ExpressRoute service provider. You plan to connect the Azure virtual network and the on-premises network by using an ExpressRoute circuit. You create a new ExpressRoute circuit. You need to provision the new circuit. Which information should you provide to the service provider?

   • Athe IKEv2 shared key
   • Bthe certificate
   • Cthe public IP address
   • Dthe service key

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

10. Question 40 · 339 in bank

    You have an on-premises server named Server1 that runs Windows Server. You have an Azure subscription that contains a virtual network named VNet1. You plan to connect Server1 to VNet1 by using Azure Network Adapter. You need to minimize how long it takes to deploy the adapter to Server1. What should you create first?

    • Aa route server
    • Ban Azure Bastion host
    • Ca private endpoint
    • Dan Azure VPN gateway

    Show answer

    Answer: D

    Explanation

    Considering that in the Microsoft process (here attached) for Azure Network adapter a VPN Gateway is included and usually it is not a quick task to do, I'd say the answer D seems correct. https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

    Source: Adapted from community discussion — manhattan

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-700 practice, question 31. 339 questions available.