Free Microsoft AZ-700 Practice Questions & Answers 2026 Part1 | Microsoft Azure Networking Solutions

You have an Azure subscription that contains the resources shown in the following table.You create a service endpoint policy that has the following settings:* Associated subnets: Subnet 1* Service: Microsoft.Storage* Scope: Single account* Resource: storage1Which resources can VM1 access?

What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?

You have an Azure virtual machine named VM1.You need to capture all the network traffic of VM1 by using Azure Network Watcher. To which locations can the capture be written?

You are configuring two network virtual appliances (NVAs) in an Azure virtual network. The NVAs will be used to inspect all the traffic within the virtual network. You need to provide high availability for the NVAs. The solution must minimize administrative effort. What should you include in the solution?

You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.You need to ensure that Traffic Manager routes traffic for www.contoso.com.Which DNS record should you create?

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.Which two Azure resources should you configure? Each correct answer presents a part of the solution.Note: Each correct selection is worth one point.

Your company has an office in New York.The company has an Azure subscription that contains the virtual networks shown in the following table.You need to connect the virtual networks to the office by using ExpressRoute. The solution must meet the following requirements:The connection must have up to 1 Gbps of bandwidth.The office must have access to all the virtual networks.Costs must be minimized.How many ExpressRoute circuits should be provisioned, and which ExpressRoute SKU should you enable?

You have an Azure virtual network and an on-premises datacenter.You are planning a Site-to-Site VPN connection between the datacenter and the virtual network.Which two resources should you include in your plan? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption. You configure the listener for HTTPS by uploading an enterprise-signed certificate. You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do?

You have an Azure subscription that contains a virtual network named VNet1 and the virtual machines shown in the following table. All the virtual machines are connected to VNet1. You need to ensure that the applications hosted on the virtual machines can be accessed from the internet. The solution must ensure that the virtual machines share a single public IP address What should you use?

You need to configure APPGW1 to support end-to-end encryption. The solution must meet the security requirements.What should you do?

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.Which two actions should you include in the solution? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SD- WAN). The SD-WAN uses BGP.You have an Azure subscription that contains 20 virtual networks configured as a hub and spoke topology.The topology contains a hub virtual network named Vnetl.The virtual networks connect to the SD-WAN by using a network virtual appliance (NVA) in Vnetl.You need to ensure that BGP route advertisements will propagate between the virtual networks and the SD- WAN. The solution must minimize administrative effort What should you implement?

You have a hybrid environment that uses ExpressRoute to connect an on-premises network and Azure.You need to log the uptime and the latency of the connection periodically by using an Azure virtual machine and an on-premises virtual machine.What should you use?

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 is associated to a network security group (NSG) named NSG1. NSG1 blocks all outbound traffic that is not allowed explicitly. Subnet1 contains virtual machines that must communicate with the Azure Cosmos DB service. You need to create an outbound security rule in NSG1 to enable the virtual machines to connect to Azure Cosmos DB. What should you include in the solution?

You have an Azure subscription that contains the resources shown in the following table.

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)NOTE: Each correct selection is worth one point.

You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication?

Your company has an on-premises network and three Azure subscriptions named Subscription1,Subscription2, and Subscription3 that are linked to the same Microsoft Entra tenant.Each department at the company uses Azure resources that are connected to its own virtual network in the Azure subscription as shown in the following table.All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region.You plan to connect all five virtual networks in the three Azure subscriptions to the on-premises network by using ExpressRoute.What is the minimum number of ExpressRoute circuits required?

You need to configure GW1 to meet the network security requirements for the P2S VPN users.Which Tunnel type should you select in the Point-to-site configuration settings of GW1?

Your company has a single on-premises datacenter in Washington DC. The East US Azure region has a peering location in Washington DC.The company only has Azure resources in the East US region.You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs.Which type of ExpressRoute circuits should you create?

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.Which two actions should you include in the solution? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

You have an Azure subscription that contains the resources shown in the following table.You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements:VM1 will access the internet by using its public IP address.VM2 will access the internet by using its public IP address.Administrative effort must be minimized.You need to ensure that you can deploy Gateway1 to Vnet1.What is the minimum number of subnets that Vnet1 must have?

You have an Azure subscription that contains an Azure Front Door Premium profile named AFD1 and an Azure Web Application Firewall (WAF) policy named WAF1. AFD1 is associated with WAF1.You need to configure a rate limit for incoming requests to AFD1.Solution: You add a rule to the rule set of AFD1.Does this meet the goal?

You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Virtual Network NAT gateway named Gateway 1. The solution must meet the following requirements: * VM1 will access the internet by using its public IP address. * VM2 will access the internet by using its public IP address. * Administrative effort must be minimized. You need to ensure that you can deploy Gateway1 to Vnet1. What is the minimal number of subnets that Vnet1 must have?

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.You need to troubleshoot what prevents you from establishing the IPsec tunnel.Which diagnostic log should you review?

You have an on-premises network.You have an Azure subscription that contains a virtual network.You have an ExpressRoute service provider.You plan to connect the Azure virtual network and the on-premises network by using an ExpressRoute circuit.You create a new ExpressRoute circuit.You need to provision the new circuit.Which information should you provide to the service provider?

Note: This question is part ofa series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3.The departments at the company use the Azure subscriptions as shown in the following table.All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region.You plan to connect all the subscriptions to the on-premises network by using ExpressRoute.What is the minimum number of ExpressRoute circuits required?

You have an Azure subscription that contains an ExpressRoute Standard gateway named GW1.You need to upgrade GW1 to support ExpressRoute FastPath. The solution must minimize downtime.Which SKU should you use?

You need to provide connectivity to storage1. The solution must meet the PaaS networking requirements and the business requirements. What should you include in the solution?

Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3.The departments at the company use the Azure subscriptions as shown in the following table.All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region.You plan to connect all the subscriptions to the on-premises network by using ExpressRoute.What is the minimum number of ExpressRoute circuits required?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have two Azure virtual networks named Vnet1 and Vnet2.You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.You discover that Client1 cannot communicate with Vnet2.You need to ensure that Client1 can communicate with Vnet2.Solution: You enable BGP on the gateway of Vnet1.Does this meet the goal?

What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?