Designing and Implementing Microsoft Azure Networking Solutions339 questions across 34 pages are complete and free, with no account or card.
339 questions in this bank
Free access · progress saved on this device
You have an Azure subscription. You plan to deploy an app named App1 that will be accessed by using Azure Application Gateway. You need to deploy the application gateway for App1. What should you create first?
Answer: B
HOTSPOT - You have an Azure subscription that contains two virtual networks named Vnet1 and Vnet2. You register a public DNS zone named fabrikam.com. The zone is configured as shown in the Public DNS Zone exhibit.
You have a private DNS zone named fabrikam.com. The zone is configured as shown in the Private DNS Zone exhibit.
You have a virtual network link configured as shown in the Virtual Network Link exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: Yes - DNS queries from the internet use the public DNS zone. In the public DNS zone, www.fabrikam.com is a CNAME record that resolves to appservice1.fabrikam.com which resolves to 131.107.1.1. Box 2: No - DNS queries from the internet use the public DNS zone. There is no DNS record for server1.fabrikam.com in the public DNS zone. Box 3: No - The private DNS zone is linked to VNet1, not VNet2. Therefore, resources in VNet2 cannot query the private DNS zone.
Source: Adapted from community discussion — AdityaGupta
You have an Azure subscription that contains a distributed web app named App1. App1 is hosted across multiple Azure regions. You need to recommend a solution for routing user requests to App. The solution must meet the following requirements: • Support the routing of a user request to a resource based on the URL of the request. • Support query string replacement. • Minimize network latency. What should you include in the recommendation?
Answer: D
HOTSPOT - You have two Azure virtual networks named VNet1 and VNet2 in an Azure region that has three availability zones. You deploy 12 virtual machines to each virtual network, deploying four virtual machines per zone. The virtual machines in VNet1 host an app named App1. The virtual machines in VNet2 host an app named App2. You plan to use Azure Virtual Network NAT to implement outbound connectivity for App1 and App2. You need to identify the minimum number of subnets and Virtual Network NAT instances required to meet the following requirements: ✑ A failure of two zones must NOT affect the availability of either App1 or App2. ✑ A failure of two zones must NOT affect the outbound connectivity of either App1 or App2. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview
Source: Adapted from community discussion — pinchocr
HOTSPOT - You have the Azure resources shown in the following table.
WebApp1 uses the Standard pricing tier. You need to ensure that WebApp1 can access the virtual machines deployed to Vnet1\Subnet1 and Vnet2\Subnet1. The solution must minimize costs. What should you create in each virtual network? To answer, select the appropriate options in the answer area. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: An additional subnet - Regional virtual network integration: When you connect to virtual networks in the same region, you must have a dedicated subnet in the virtual network you're integrating with. Box 2: A VPN gateway - Gateway-required virtual network integration: When you connect directly to virtual networks in other regions or to a classic virtual network in the same region, you need an Azure Virtual Network gateway created in the target virtual network. Note: If your app is in an App Service Environment, it's already in a virtual network and doesn't require use of the VNet integration feature to reach resources in the same virtual network. Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration
Source: Adapted from community discussion — Cristoicach91
HOTSPOT - You have the Azure App Service app shown in the App Service exhibit.
The VNet Integration settings for as12 are configured as shown in the Vnet Integration exhibit.
The Private Endpoint connections settings for as12 are configured as shown in the Private Endpoint connections exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
YYN Y / https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#limitations Y / VNet integrated App Service uses IP from dedicated subnet to communicate resources in the VNet. ( vNet integration : outbound / private endpoint : inbound ) https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#how-regional-virtual-network-integration-works N / There's no private endpoint.
Source: Adapted from community discussion — [Removed]
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You enable BGP on the gateway of Vnet1. Does this meet the goal?
Answer: B
You have a hub-and-spoke topology. The topology includes multiple on-premises locations that connect to a hub virtual network in Azure via ExpressRoute circuits. You have an Azure Application Gateway named GW1 that provides a single point of ingress from the internet. You plan to migrate the hub-and-spoke topology to Azure Virtual WAN. You need to identify which changes must be applied to the existing topology. The solution must ensure that you maintain a single point of ingress from the internet. Which three changes should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: CDE
The given answers are correct and in correct sequence. First you need to remove existing VNET peering (E) then add VNET connections from VWAN Hub to same spoke VNETs (D) and later removed any existing UDRs you defined earlier. (C). There is no need to reploy App Gateway. Since it is VWAN there will be Vnet connection, no VNET peering.
Source: Adapted from community discussion — AdityaGupta
You have an application named App1 that listens for incoming requests on a preconfigured group of 50 TCP ports and UDP ports. You install App1 on 10 Azure virtual machines. You need to implement load balancing for App1 across all the virtual machines. The solution must minimize the number of load balancing rules. What should you include in the solution?
Answer: C
C. Azure Standard Load Balancer that has high availability (HA) ports enabled App1 is installed on 10 VMs which can be put in a Backend pool. The req is to minimize the number of load balancing rules. If you select HA it will allow you to have 1 rule for TCP and UDP ports, if you don't select HA you will need to have a minimum of 2 rules for TCP and UDP with a * range.
Source: Adapted from community discussion — Cristoicach91
DRAG DROP - You register a DNS domain with a third-party registrar. You need to host the DNS zone on Azure. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Step 1: Create a public DNS zone. Create a DNS zone - 1. Go to the Azure portal to create a DNS zone. Search for and select DNS zones. 2. Select Create DNS zone. 3. On the Create DNS zone page, enter the following values, and then select Create. Step 2: Identify the FQDNs of the name servers. Retrieve name servers. Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. Azure DNS gives name servers from a pool each time a zone is created. With the DNS zone created, in the Azure portal Favorites pane, select All resources. On the All resources page, select your DNS zone. If the subscription you've selected already has several resources in it, you can enter your domain name in the Filter by name box to easily access the application gateway. Retrieve the name servers from the DNS zone page. In this example, the zone contoso.net has been assigned name servers ns1-01.azure-dns.com, ns2- 01.azure-dns.net, *ns3-01.azure-dns.org, and ns4-01.azure-dns.info: Azure DNS automatically creates authoritative NS records in your zone for the assigned name servers. Step 3: Modify the NS records for the domain. Delegate the domain - Once the DNS zone gets created and you have the name servers, you'll need to update the parent domain with the Azure DNS name servers. Each registrar has its own DNS management tools to change the name server records for a domain. 1. In the registrar's DNS management page, edit the NS records and replace the NS records with the Azure DNS name servers. 2. When you delegate a domain to Azure DNS, you must use the name servers that Azure DNS provides. Use all four name servers, regardless of the name of your domain. Domain delegation doesn't require a name server to use the same top-level domain as your domain. Reference: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
AZ-700 practice, question 71. 339 questions available.
Version 1.0.0. How we source questions