Cause all that matters here is passing the Microsoft AZ-700 exam. Cause all that you need is a high score of AZ-700 Designing and Implementing Microsoft Azure Networking Solutions exam. The only one thing you need to do is downloading Examcollection AZ-700 exam study guides now. We will not let you down with our money-back guarantee.
Microsoft AZ-700 Free Dumps Questions Online, Read and Test Now.
NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.
You have an Azure subscription that contains an Azure Front Door Premium profile named AFD1 and an Azure Web Application Firewall (WAF) policy named WAF1. AFD1 is associated with WAF1.
You need to configure a rate limit for incoming requests to AFD1. Solution: You modify the policy settings of WAF1.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 2
You are configuring two network virtual appliances (NVAs) in an Azure virtual network. The NVAs will be used to inspect all the traffic within the virtual network.
You need to provide high availability for the NVAs. The solution must minimize administrative effort. What shtraffic ould you include in the solution?
- A. Azure Standard Load Balancer
- B. Azure Traffic Manager
- C. Azure Application Gateway
- D. Azure Front Door
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/nva- ha?tabs=cli
NEW QUESTION 3
You have an Azure subscription that contains a user named Admin1 and a resource group named RG1.
RG1 contains an Azure Network Watcher instance named NW1.
You need to ensure that Admin1 can place a lock on NW1. The solution must use the principle of least privilege.
Which role should you assign to Admin1?
- A. User Access Administrator
- B. Network Contributor
- C. Resource Policy Contributor
- D. Monitoring Contributor
Answer: A
NEW QUESTION 4
HOTSPOT
You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2.
You have the NAT gateway shown in the NATgateway1 exhibit.
You have the virtual machine shown in the VM1 exhibit.
Subnet1 is configured as shown in the Subnet1 exhibit.
For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
Box 1: No
VM1 is in Zone2 whereas the NAT Gateway is in Zone1. The VM would need to be in the same zone as the NAT Gateway to be able to use it. Therefore, VM1 cannot use the NAT gateway.
Box 2: Yes
NATgateway1 is configured in the settings for Subnet2.
Box 3: No
The NAT gateway does not have a single public IP address, it has an IP prefix which means more than one IP address. The VMs the use the NAT Gateway can use different public IP addresses contained within the IP prefix.
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 5
You have the Azure resources shown in the following table.
You configure storage1 to provide access to the subnet in Vnet1 by using a service endpoint.
You need to ensure that you can use the service endpoint to connect to the read-only endpoint of storage1 in the paired Azure region.
What should you do first?
- A. Configure the firewall settings for storage1.
- B. Fail over storage1 to the paired Azure region.
- C. Create a virtual network in the paired Azure region.
- D. Create another service endpoint.
Answer: A
NEW QUESTION 6
You plan to publish a website that will use an FQDN of www.contoso.com. The website will
be hosted by using the Azure App Service apps shown in the following table.
You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.
You need to ensure that Traffic Manager routes traffic for www.contoso.com. Which DNS record should you create?
- A. two A records that map wmv.contoso.com to 131 107 100 1 and 131 107 200 1
- B. a CNAME record that maps www.contoso.com to TMprofile1.azurefd.net
- C. a CNAME record that mapswww.contoso.comtoTMprofile1.trafficmanager.net
- D. a TXT record that contains a string ofas1.contoso.com and as2.contoso.com in the details
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager- profile
https://docs.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager
NEW QUESTION 7
HOTSPOT
You have the Azure environment shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 8
You have the Azure load balancer shown in the Load Balancer exhibit.
LB2 has the backend pools shown in the Backend Pools exhibit.
You need to ensure that LB2 distributes traffic to all the members of VMSS1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Add a network interface to VMSS1.
- B. Configure a health probe.
- C. Add a public IP address to each member of VMSS1.
- D. Add a load balancing rule.
Answer: BD
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/quickstart-load-balancer-standard-public-portal?tabs=option-1-create-load-balancer-standard
NEW QUESTION 9
SIMULATION
Task 10
You need to configure VNET1 to log all events and metrics. The solution must ensure that you can query the events and metrics directly from the Azure portal by using KQL.
Solution:
Here are the steps and explanations for configuring VNET1 to log all events and metrics and query them by using KQL:
✑ To enable logging for VNET1, you need to create a diagnostic setting that collects the platform metrics and logs from the virtual network and routes them to one or more destinations. You can choose to send the data to a Log Analytics workspace, a storage account, an event hub, or a partner solution1.
✑ To create a diagnostic setting, you need to go to the Azure portal and select your virtual network. Then select Diagnostic settings under Monitoring and select + Add diagnostic setting1.
✑ On the Add diagnostic setting page, enter or select the following information:
✑ Select Save to create your diagnostic setting1.
✑ To query the events and metrics from the Azure portal by using KQL, you need to go to the Log Analytics workspace that you selected as the destination. Then select Logs under General and enter your KQL query in the query editor3.
✑ For example, you can use the following KQL query to get the top 10 network security group events for VNET1 in the last 24 hours:
NetworkSecurityGroupEvent
| where TimeGenerated > ago(24h)
| where ResourceId contains "VNET1"
| summarize count() by EventID
| top 10 by count_ Copy
✑ Select Run to execute your query and view the results in a table or a chart3.
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 10
HOTSPOT
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
✑ Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection
✑ Supports 8 Gbps of ExpressRoute traffic
✑ Minimizes costs
What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 11
DRAG DROP
You have an Azure Front Door instance named FrontDoor1.
You deploy two instances of an Azure web app to different Azure regions.
You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.
You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 12
SIMULATION
Task 3
You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.
You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.
Solution:
Here are the steps and explanations for creating a policy that can be linked to the planned application gateway and block connections from IP addresses in the 131.107.150.0/24 range:
✑ To create a policy, you need to go to the Azure portal and select Create a resource. Search for WAF, select Web Application Firewall, then select Create1.
✑ On the Create a WAF policy page, Basics tab, enter or select the following information and accept the defaults for the remaining settings:
✑ On the Custom rules tab, select Add a rule to create a custom rule that blocks connections from IP addresses in the 131.107.150.0/24 range2. Enter or select the following information for the custom rule:
✑ On the Review + create tab, review your settings and select Create to create your WAF policy1.
✑ To link your policy to the planned application gateway, you need to go to the Application Gateway service in the Azure portal and select your application gateway3.
✑ On the Web application firewall tab, select your WAF policy from the drop-down list and select Save
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 13
Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN.
You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection.
You need to replace the third-party SD-WAN with an Azure Virtual WAN. What should you include in the solution?
- A. Delete Gateway1.
- B. Create new Point-to-Site (P2S) VPN connections on the firewall devices.
- C. Create an Azure Traffic Manager profile.
- D. Enable active-active mode on Gateway1.
Answer: B
NEW QUESTION 14
HOTSPOT
You have an Azure subscription You plan to use Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
• Supports 4 Gbps of Site-to-Site (S2S) VPN traffic
• Supports 8 Gbps of ExpressRoute traffic
• Minimizes costs
How many scale units should you configure? To answer select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 15
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to- Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the. You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communication with Vnet2. Solution: You resize the gateway of Vnet1 to a larger SKU. Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 16
You have an Azure subscription that contains multiple virtual machines in the West US Azure region.
You need to use Traffic Analytics.
Which two resources should you create? Each correct answer presents part of the solution. (Choose two.)
NOTE: Each correct answer selection is worth one point.
- A. an Azure Monitor workbook
- B. a Log Analytics workspace C a storage account
- C. an Azure Sentinel workspace
- D. an Azure Monitor data collection rule
Answer: BC
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics A storage acccount is used to store network security group flow logs.
A Log Analytics workspace is used by Traffic Analytics to store the aggregated and indexed data that is then used to generate the analytics.
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#enable-flow-log- settings
NEW QUESTION 17
......
Thanks for reading the newest AZ-700 exam dumps! We recommend you to try the PREMIUM Downloadfreepdf.net AZ-700 dumps in VCE and PDF here: https://www.downloadfreepdf.net/AZ-700-pdf-download.html (150 Q&As Dumps)
