DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Efficient Microsoft AZ-700 Exam Preparation with Updated Practice Questions

Discover the advantages of SPOTO Microsoft AZ-700 exam questions for Microsoft Azure Security Engineer Associate certification. The AZ-700 exam evaluates your proficiency in designing, implementing, managing, securing, and monitoring technical tasks such as Hybrid Networking, Core Networking Infrastructure, Routing, Networks, and Private Access to Azure Services. Prepare effectively with our comprehensive exam questions and answers that cover these critical areas. Access expertly crafted test questions designed to simulate real exam scenarios and enhance your understanding. Utilize our study materials and exam resources to strengthen your preparation strategy. Take advantage of our mock exams to assess readiness and boost confidence for a successful exam outcome. Trust SPOTO for a reliable path to passing the Microsoft Azure Security Engineer Associate AZ-700 exam.
Take other online exams
Question #1
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #2
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #3
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.You establish BGP peering between NVA1 and Hub1.You need to implement transit connectivity between VNet1 and VNet3 via Hub1 by using BGP peering. The solution must minimize costs.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #4
HOTSPOT (Drag and Drop is not supported)You have an Azure Front Door instance that provides access to a web app. The web app uses a hostname of www.contoso.com. You have the routing rules shown in the following table.Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #5
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.The IP Addresses settings for Vnet1 are configured as shown in the exhibit. You need to ensure that you can integrate WebApp1 and Vnet1.Which three actions should you perform in sequence before you can integrate WebApp1 and Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #6
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #7
You have an Azure virtual network and an on-premises datacenter.You are planning a Site-to-Site VPN connection between the datacenter and the virtual network.Which two resources should you include in your plan? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
A. user-defined route
B. virtual network gateway
C. zure Firewall
D. zure Web Application Firewall (WAF)
E. n on-premises data gateway
F. n Azure application gateway
G. local network gateway
View answer
Correct Answer: BG
Question #8
You have an Azure subscription that contains a virtual network.You plan to deploy an Azure VPN gateway and 90 Site-to-Site VPN connections. The solution must meet the following requirements:-Ensure that the Site-to-Site VPN connections remain available if an Azure datacenter fails.-Minimize costs.Which gateway SKU should you specify?
A. pnGw1AZ
B. pnGw2AZ
C. pnGw4AZ
D. pnGw5AZ
View answer
Correct Answer: C
Question #9
You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2. You need to ensure that Traffic Manager routes traffic for www.contoso.com.Which DNS record should you create?
A. wo A records that map www
B. CNAME record that maps www
C. CNAME record that maps www
D. TXT record that contains a string of as1
View answer
Correct Answer: C
Question #10
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a single virtual network and a virtual network gateway.You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Azure Active Directory (Azure AD).What should you configure? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #11
You have an on-premises datacenter and an Azure subscription.You plan to implement ExpressRoute FastPath.You need to create an ExpressRoute gateway. The solution must minimize downtime if a single Azure datacenter fails.Which SKU should you use?
A. rGw1AZ
B. igh performance
C. ltra performance
D. rGw3AZ E
View answer
Correct Answer: D
Question #12
You have a website that uses an FQDN of www.contoso.com. The DNS record for www. contoso.com resolves to an on-premises web server.You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1.You build the website on Web1.You plan to configure ContosoFD1 to publish the website for testing.When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the ex
A. CNAME record that maps afdverify
B. CNAME record that maps www
C. CNAME record that maps afdverify
D. CNAME record that maps www
View answer
Correct Answer: C
Question #13
Task 1You plan to deploy a firewall to subnetl-2. The firewall will have an IP address of 10.1.2.4.You need to ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the firewall that will be deployed to subnetl-2. The solution must be achieved without using dynamic routing protocols.
A. ee the Explanationbelow for step by step in structions
.
View answer
Correct Answer: A
Question #14
You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone.Vnet1 connects to an on-premises datacenter by using ExpressRoute.You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct s
A. nternal load balancers
B. torage account
C. zure Virtual Networks NAT
D. ervice endpoint policies
View answer
Correct Answer: CD
Question #15
Task 3You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.
A. ee the Explanationbelow for step by step in structions
.
View answer
Correct Answer: A
Question #16
You are planning the IP addressing for the subnets in Azure virtual networks.Which type of resource requires IP addresses in the subnets?
A. internal load balancers
B. Azure DDoS Protection for virtual networks
C. service endpoint policies
D. service endpoints
View answer
Correct Answer: A
Question #17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure application gateway that has Azure Web Application Firewall (W
A. es
B. o
View answer
Correct Answer: B
Question #18
You have an Azure subscription mat contains tour virtual networks named VNet1, VNet2, VNet3, and VNet4.You plan to deploy a hub and spoke topology by using virtual network peering.You need to configure VNet1 as the hub network. The solution must meet the following requirements:? Support transitive routing between spokes.? Maximize network throughput.What should you include in the solution?
A. Azure VPN Gateway
B. Azure Route Server
C. Azure Private Link
D. Azure Firewall
View answer
Correct Answer: A
Question #19
DRAG DROP (Drag and Drop is not supported)You have two Azure virtual networks named Hub1 and Spoke1. Hub1 connects to an on-premises network by using a Site-to-Site VPN connection. You are implementing peering between Hub1 and Spoke1.You need to ensure that a virtual machine connected to Spoke1 can connect to the on-premises network through Hub1.How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #20
Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN.You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection.You need to replace the third-party SD-WAN with an Azure Virtual WAN.What should you include in the solution?
A. elete Gateway1
B. reate new Point-to-Site (P2S) VPN connections on the firewall devices
C. reate an Azure Traffic Manager profile
D. nable active-active mode on Gateway1
View answer
Correct Answer: A
Question #21
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #22
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.You need to associate Gateway1 with Subnet1. The solution must minimize downtime on VM1.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #23
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You have the on-premises sites shown the following table. You plan to deploy Azure Virtual WAN.You are evaluating Virtual WAN Basic and Virtual WAN Standard.Which type of Virtual WAN can you use for each site? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #24
HOTSPOT (Drag and Drop is not supported)You have the Azure resources shown in the following table.You need to link VNet2 to Circuit1.What should you create in each subscription? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #25
HOTSPOT (Drag and Drop is not supported)You have an Azure environment shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #26
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure application gateway that has Azure Web Application Firewall (W
A. es
B. o
View answer
Correct Answer: B
Question #27
Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3.The departments at the company use the Azure subscriptions as shown in the following table.All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region.You plan to connect all the subscriptions to the on-premises network by using ExpressRoute.What is the minimum number of ExpressRoute circuits required?
A. xpressRoute FastPath
B. xpressRoute Global Reach
C. xpressRoute Direct
D. xpressRoute Local
View answer
Correct Answer: A
Question #28
HOTSPOT (Drag and Drop is not supported)Your on-premises network contains a VPN device.You have an Azure subscription that contains a virtual network and a virtual network gateway.You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #29
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?
A. private endpoint
B. routing table
C. service endpoint
D. private link service
E. virtual network peering
View answer
Correct Answer: E
Question #30
You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.You need to troubleshoot what prevents you from establishing the IPsec tunnel.Which diagnostic log should you review?
A. KEDiagnosticLog
B. outeDiagnosticLog
C. atewayDiagnosticLog
D. unnelDiagnosticLog
View answer
Correct Answer: A
Question #31
You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)NOTE: Each correct selection is worth one point.
A. KEDiagnosticLog
B. outeDiagnosticLog
C. atewayDiagnosticLog
D. unnelDiagnosticLog
View answer
Correct Answer: AD
Question #32
You have an Azure subscription that contains the public IP addresses shown in the following table.You plan to deploy a NAT gateway named NAT1.Which public IP addresses can be used as the public IP address for NAT1?
A. P3 only
B. P5 only
C. P2 and IP4 only
D. P1, IP3 and IP5 only
E. P3 and IP5 only
View answer
Correct Answer: A
Question #33
You have an Azure subscription that contains a virtual network named VNet1.You deploy several web apps and configure the apps to use private endpoints on VNet1.You need to identify which DNS records the web apps registered automatically.Where will the records be created?
A. n Azure DNS zone named privatelink
B. n Azure Private DNS zone named azurewebsites
C. n Azure Private DNS zone named privatelink
D. n Azure DNS zone named azurewebsites
View answer
Correct Answer: C
Question #34
You have an Azure Virtual Desktop deployment that has 500 session hosts.All outbound traffic to the internet uses a NAT gateway.During peak business hours.some users report that they cannot access internet resources. In Azure Monitor, you discover many failed SNAT connections. You need to increase the available SNAT connections.What should you do?
A. ind the NAT gateway to another subnet
B. dd a public IP address
C. eploy Azure Standard Load Balancer that has outbound rules
View answer
Correct Answer: B
Question #35
DRAG DROP (Drag and Drop is not supported)Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com that has an internal certification authority (CA).You have an Azure subscription.You deploy an Azure application gateway named AppGwy1 and perform the following actions:-Configure an HTTP listener-Associate a routing rule with the listenerYou need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.Which fo
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #36
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains a virtual network named Vnet1 and an Azure SQL database named SQL1. SQL1 has a private endpoint on Vnet1.You have a partner company named Fabrikam, Inc. Fabrikam has an Azure subscription that contains a virtual network named Vnet2 and a virtual machine named VM1. VM1 is connected to Vnet2.You need to provide VM1 with access to SQL1 by using an Azure Private Link service.What should you implement on each virtual network?
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #37
HOTSPOT (Drag and Drop is not supported)You plan to deploy Azure Virtual WAN.You need to deploy a virtual WAN hub that meets the following requirements:-Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection -Supports 8 Gbps of ExpressRoute traffic -MinimizescostsWhat should you configure? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #38
You are planning the IP addressing for the subnets in Azure virtual networks.Which type of resource requires IP addresses in the subnets?
A. zure Virtual Network NAT
B. ervice endpoint policies
C. nternal load balancers
D. irtual network peering
View answer
Correct Answer: C
Question #39
HOTSPOT (Drag and Drop is not supported) You are implementing the virtual network requirements for Vnet6.What is the minimum number of subnets and service endpoints you should create? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #40
HOTSPOT (Drag and Drop is not supported)You have the network topology shown in the Topology exhibit. (Click the Topology tab.)You have the Azure firewall shown in the Firewall1 exhibit. (Click the Firewall1 tab.)You have the route table shown in the RouteTable1 exhibit. (Click the RouteTable1 tab.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #41
You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)NOTE: Each correct selection is worth one point.
A. virtual network gateway
B. zure Application Gateway
C. zure Firewall
D. local network gateway
E. zure Front Door
View answer
Correct Answer: AD
Question #42
You are planning the IP addressing for the subnets in Azure virtual networks.Which type of resource requires IP addresses in the subnets?
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #43
You have an Azure subscription that contains a virtual network named VNet1. VNet1 has a subnet mask of/24.You plan to implement an Azure application gateway that will have the following configurations:•Public endpoints: 1•Private endpoints: 1•Minimum instances: 1•Maximum instances: 10You need to configure the address space for the subnet of the application gateway. The solution must minimize the number of IP addresses allocated to the application gateway subnet.What is the minimum number of assignable IP ad
A.
B.
C. 1
D. 2
E. 0
View answer
Correct Answer: C
Question #44
You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements:-VM1 will access the internet by using its public IP address.-VM2 will access the internet by using its public IP address.-Administrative effort must be minimized.You need to ensure that you can deploy Gateway1 to Vnet1.What is the minimum number of subnets required on Vnet1?
A.
B.
C.
D.
View answer
Correct Answer: B
Question #45
HOTSPOT (Drag and Drop is not supported) Your company has 40 branch offices across North America and Europe.You have an Azure subscription that contains the following virtual networks:•Two networks in the East US Azure region•Three networks in the West Europe Azure regionYou need to implement Azure Virtual WAN. The solution must meet the following requirements:•Each branch office in North America must have an ExpressRoute circuit and a Site-to-Site VPN that connects to the East US region.•Each branch office
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #46
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the virtual networks shown in the following table. You have a virtual machine named VM5 that has the following IP address configurations:-IP address:10.4.0.5-Subnet mask:255.255.255.0-Default gateway: 10.4.0.1-DNS server: 168.63.129.16You have an Azure Private DNS zone named fabrikam.com that contains the records shown in the following table.The virtual network links in the fabrikam.com DNS zone are configured as shown in t
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #47
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #48
You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com.You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA). What should you include in the solution?
A. n enterprise application in Azure Active Directory (Azure AD)
B. ctive Directory Certificate Services (AD CS)
C. zure Key Vault
D. zure Application Gateway
View answer
Correct Answer: C
Question #49
HOTSPOT (Drag and Drop is not supported)Your company has an Azure virtual network named Vnet1 that uses an IP address space of 192.168.0.0/20. Vnet1 contains a subnet named Subnet1 that uses an IP address space of 192.168.0.0/24. You create an IPv6 address range to Vnet1 by using a CIDR suffix of /48.You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company. The solution must minimize the number of additional IPv4 addresses. What should
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #50
You are planning the IP addressing for the subnets in Azure virtual networks.Which type of resource requires IP addresses in the subnets?
A. zure DDoS Protection for virtual networks
B. irtual network peering
C. nternal load balancers
D. ervice endpoints
View answer
Correct Answer: C
Question #51
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #52
Note. This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.You have an Azure subscription that contains an Azure Front Door Premium profile
A. es
B. o
.
View answer
Correct Answer: A
Question #53
You have an Azure application gateway for a web app named App1. The application gateway allows end-to- end encryption.You configure the listener for HTTPS by uploading an enterprise-signed certificate.You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do?
A. ncrease the Unhealthy threshold setting in the custom probe
B. nable the SSL profile to the listener
C. et Listener type to Multi site
D. pload the public key certificate to the HTTP settings
View answer
Correct Answer: D
Question #54
DRAG DROP (Drag and Drop is not supported)You have three on-premises sites. Each site has a third-party VPN device.You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-to-Site VPN connection.You need to connect the third site to the other two sites by using Hub1.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct o
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #55
Your company has a single on-premises datacenter in Washington DC. The East US Azure region has a peering location in Washington DC.The company only has Azure resources in the East US region.You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs.Which type of ExpressRoute circuits should you create?
A. xpressRoute Local
B. xpressRoute Direct
C. xpressRoutePremium
D. xpressRoute Standard
View answer
Correct Answer: A
Question #56
You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN.Users will authenticate by an on-premises Active Directory domain.Which additional service should you deploy to support the VPN authentication?
A. n Azure key vault
B. RADIUS server
C. certification authority
D. zure Active Directory (Azure AD) Application Proxy
View answer
Correct Answer: B
Question #57
Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN.You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection.You need to replace the third-party SD-WAN with an Azure Virtual WAN.What should you include in the solution?
A. Delete Gateway1
B. Create new Point-to-Site (P2S) VPN connections on the firewall devices
C. Create an Azure Traffic Manager profile
D. Enable active-active mode on Gateway1
View answer
Correct Answer: B
Question #58
HOTSPOT (Drag and Drop is not supported) Your on-premises network contains the subnets shown in the following table.The network contains a firewall named FW1 that uses a public IP address of 131.107.100.200.You have an Azure subscription that contains the resources shown in the following table.You plan to configure a Site-to-Site (S2S) VPN named VPN1 that will connect GW1 to FW1.You need to configure LNG1 to support VPN1. The solution must meet the following requirements:•Ensure that the resources on Subnet
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #59
SIMULATIONUsername and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Azure Username: User-12345678@cloudslice.onmicrosoft.comAzure Password: xxxxxxxxxxIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #60
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the route tables and routes shown in the following table.The subscription contains the subnets shown in the following table.The subscription contains the virtual machines shown in the following table.There is a Site-to-Site VPN connection to each local network gateway.For each of the following statements, select Yes of the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #61
You are planning the IP addressing for the subnets in Azure virtual networks.Which type of resource requires IP addresses in the subnets?
A. nternal load balancers
B. zure DDoS Protection for virtual networks
C. ervice endpoint policies
D. ervice endpoints
View answer
Correct Answer: A
Question #62
You have an Azure subscription mat contains tour virtual networks named VNet1, VNet2, VNet3, and VNet4.You plan to deploy a hub and spoke topology by using virtual network peering.You need to configure VNet1 as the hub network. The solution must meet the following requirements:-Support transitive routing between spokes.-Maximize network throughput.What should you include in the solution?
A. zure VPN Gateway
B. zure Route Server
C. zure Private Link
D. zure Firewall
View answer
Correct Answer: D
Question #63
You have three on-premises networks.You have an Azure subscription that contains a Basic Azure virtual WAN. The virtual WAN contains a single virtual hub and a virtual network gateway that is limited to a throughput of 1 Gbps.The on-premises networks connect to the virtual WAN by using Site-to-Site (S2S) VPN connections.You need to increase the throughput of the virtual WAN to 3 Gbps. The solution must minimize administrative effort.What should you do?
A. pgrade the virtual WAN to the Standard SKU
B. dd an additional VPN gateway to the Azure subscription
C. reate an additional virtual hub
D. ncrease the number of gateway scale units
View answer
Correct Answer: D
Question #64
DRAG DROP (Drag and Drop is not supported)You have two on-premises datacenters.You have an Azure subscription that contains four virtual networks named VNet1, VNet2, VNet3, and VNet4.You create an Azure virtual WAN named VWAN1. VWAN1 contains a single virtual hub that is connected to both on-premises datacenters and all the virtual networks in a full mesh topology.You create a route table named RT1.You need to configure VWAN1 to meet the following requirements:•Connectivity between VNet1 and VNet2 and both
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #65
HOTSPOT (Drag and Drop is not supported)You have an Azure Traffic Manager parent profile named TM1. TM1 has two child profiles named TM2 and TM3. TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.TM2 uses the weighted traffic-routing method with MinChildEndpoint = 2 and has the endpoints shown in the following table.TM3 uses priority traffic-routing method and has the endpoints shown in the following table.The App2, App4, and App6 endpoints have a degraded mo
A. es
B. o
View answer
Correct Answer: A
Question #66
DRAG DROP (Drag and Drop is not supported)You have an Azure Front Door instance named FrontDoor1.You deploy two instances of an Azure web app to different Azure regions.You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them i
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #67
You have an Azure application gateway named AppGW1 that balances requests to a web app named App1.You need to modify the server variables in the response header of App1. What should you configure on AppGW1?
A. TTP settings
B. ewrites
C. ules
D. isteners
View answer
Correct Answer: B
Question #68
HOTSPOT (Drag and Drop is not supported)You have the hybrid network shown in the Network Diagram exhibit. You have a peering connection between Vnet1 and Vnet2 as shown in the Peering-Vnet1-Vnet2 exhibit.You have a peering connection between Vnet1 and Vnet3 as shown in the Peering-Vnet1-Vnet3 exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #69
You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.Which two actions should you include in the solution? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: AE
Question #70
HOTSPOT (Drag and Drop is not supported)You are implementing the virtual network requirements for VM-Analyze.What should you include in a custom route that is linked to Subnet2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #71
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure key vault named Vault1 and an app registration for an Azure AD app named App1.You have a DNS domain named contoso.com that is hosted by a third-party DNS provider.You plan to deploy App1 by using Azure App Service. App1 will have the following configurations:•App1 will be hosted across five App Service apps.•Users will access App1 by using a URL of https://app1.contoso.com.•The user traffic of App1 will be managed
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #72
You have an Azure subscription that contains the resources shown in the following table.You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements:? VM1 will access the internet by using its public IP address.? VM2 will access the internet by using its public IP address.? Administrative effort must be minimized.You need to ensure that you can deploy Gateway1 to Vnet1.What is the minimum number of subnets required on Vnet1?
A. 2
B. 3
C. 4
D. 5
View answer
Correct Answer: B

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.