Page: 1
/ 14
Total 328 questions
Microsoft Designing and Implementing Microsoft Azure Networking Solutions AZ-700 Exam Questions
Question 1
SIMULATION
Task 2
You need to ensure that you can deploy Azure virtual machines to the France Central Azure region. The solution must ensure that virtual machines in the France Central region are in a network segment that has an IP address range of 10.5.1.0/24.
Answer : A
To deploy Azure virtual machines to the France Central region and ensure they are in a network segment with an IP address range of 10.5.1.0/24, follow these steps:
Step-by-Step Solution
Step 1: Create a Virtual Network in France Central
Navigate to the Azure Portal.
Search for ''Virtual networks''in the search bar and select it.
Click on ''Create''.
Enter the following details:
Subscription: Select your subscription.
Resource Group: Select an existing resource group or create a new one.
Name: Enter a name for the virtual network (e.g.,VNet-FranceCentral).
Region: SelectFrance Central.
Click on ''Next: IP Addresses''.
Step 2: Configure the Address Space and Subnet
In the IP Addresses tab, enter the address space as10.5.1.0/24.
Click on ''Add subnet''.
Enter the following details:
Subnet name: Enter a name for the subnet (e.g.,Subnet-1).
Subnet address range: Enter10.5.1.0/24.
Click on ''Add''.
Click on ''Review + create''and then''Create''.
Step 3: Deploy Virtual Machines to the Virtual Network
Navigate to the Azure Portal.
Search for ''Virtual machines''in the search bar and select it.
Click on ''Create''and then''Azure virtual machine''.
Enter the following details:
Subscription: Select your subscription.
Resource Group: Select the same resource group used for the virtual network.
Virtual machine name: Enter a name for the VM.
Region: SelectFrance Central.
Image: Select the desired OS image.
Size: Select the appropriate VM size.
Click on ''Next: Disks'', configure the disks as needed, and then click on''Next: Networking''.
In the Networking tab, select the virtual network (VNet-FranceCentral) and subnet (Subnet-1) created earlier.
Complete the remaining configuration stepsand click on''Review + create''and then''Create''.
Explanation
Virtual Network: A virtual network in Azure allows you to create a logically isolated network that can host your Azure resources.
Address Space: The address space10.5.1.0/24ensures that the VMs are in a specific network segment.
Subnet: Subnets allow you to segment the virtual network into smaller, manageable sections.
Region: Deploying the virtual network and VMs in the France Central region ensures that the resources are physically located in that region.
By following these steps, you can ensure that your Azure virtual machines in the France Central region are deployed within the specified IP address range of 10.5.1.0/24.
Question 2
You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.
You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.
You need to ensure that Traffic Manager routes traffic for www.contoso.com.
Which DNS record should you create?
Answer : C
https://docs.microsoft.com/en-us/azure/traffic-manager/quickstart-create-traffic-manager-profile
https://docs.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager
Question 3
You are planning the IP addressing for the subnets in Azure virtual networks.
Which type of resource requires IP addresses in the subnets?
Answer : A
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
Question 4
You have a hybrid environment that uses ExpressRoute to connect an on-premises network and Azure.
You need to log the uptime and the latency of the connection periodically by using an Azure virtual machine and an on-premises virtual machine.
What should you use?
Answer : C
https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor
Question 5
SIMULATION
Task 1
You plan to deploy a firewall to subnetl-2. The firewall will have an IP address of 10.1.2.4.
You need to ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the firewall that will be deployed to subnetl-2. The solution must be achieved without using dynamic routing protocols.
Answer : A
To deploy a firewall to subnetl-2, you need to create a network virtual appliance (NVA) in the same virtual network as subnetl-2.An NVA is a virtual machine that performs network functions, such as firewall, routing, or load balancing1.
To create an NVA, you need to create a virtual machine in the Azure portal and select an image that has the firewall software installed.You can choose from the Azure Marketplace or upload your own image2.
To assign the IP address of 10.1.2.4 to the NVA, you need to create a static private IP address for the network interface of the virtual machine.You can do this in the IP configurations settings of the network interface3.
To ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the NVA, you need to create a user-defined route (UDR) table and associate it with subnetl-1.A UDR table allows you to override the default routing behavior of Azure and specify custom routes for your subnets4.
To create a UDR table, you need to go to the Route tables service in the Azure portal and select + Create.You can give a name and a resource group for the route table5.
To create a custom route, you need to select Routes in the route table and select + Add.You can enter the following information for the route5:
Destination: 192.168.10.0/24
Next hop type: Virtual appliance
Next hop address: 10.1.2.4
To associate the route table with subnetl-1, you need to select Subnets in the route table and select + Associate.You can select the virtual network and subnet that you want to associate with the route table5.
Question 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains an Azure Virtual WAN named VWAN1. VWAN1 contains a hub named Hub1. Hub1 has a security status of Unsecured.
You need to ensure that the security status of Hub1 is marked as Secured.
Solution: You implement an Azure Front Door profile.
Does this meet the requirement?
Answer : B
Question 7
You have an Azure virtual network and an on-premises datacenter.
You need to implement a Site-to-Site VPN connection between the datacenter and the virtual network.
Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer : A, C
https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
All Official Question Types