Free Latest Microsoft AZ-700 Practice Exam Questions With Verified Answers

test2021-12-02T06:38:45+00:00

Are you planning to become Azure Network Engineer Associate? Then Microsoft Azure Exam AZ-700: Designing and Implementing Azure Networking is what you are looking for! Anyone who is interested to pursue a career in Azure Network Engineering and an expert in Azure Networking solutions can take this exam to get certified.

If you are looking for AZ-700 Exam Practice Test with Real Exam Questions, you are in the right place. FreeTestShare has the latest AZ-700 exam question bank from Actual Exams to help you memorize and pass your exam at the very first attempt. Microsoft AZ-700 Practice Exam Questions 100% cover the latest exam pattern and topics used in the Real Test. Try it at once to test your prep!

Page 1 of 3

1. You have an Azure virtual network that contains two subnets named Subnet1 and Subnet2. Subnet1 contains a virtual machine named VM1. Subnet2 contains a virtual machine named VM2.

You have two network security groups (NSGs) named NSG1 and NSG2. NSG1 has 100 inbound security rules and is associated to VM1. NSG2 has 200 inbound security rules and is associated to Subnet1.

VM2 cannot connect to VM1.

You suspect that an NSG rule blocks connectivity.

You need to identify which rule blocks the connection. The issue must be resolved as quickly as possible.

Which Azure Network Watcher feature should you use?

Effective security rules

Connection troubleshoot

NSG diagnostic

NSG flow logs

2. HOTSPOT

You have an Azure subscription that contains the route tables and routes shown in the following table.

The subscription contains the subnets shown in the following table.

The subscription contains the virtual machines shown in the following table.

There is a Site-to-Site VPN connection to each local network gateway.

For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

3. You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN.

Users will authenticate by using an on premises Active Directory domain.

Which additional service should you deploy to support the VPN authentication?

a certification authority (CA)

a RADIUS server

an Azure key vault

Azure Active Directory (Azure AD) Application Proxy

4. DRAG DROP

You have an Azure Front Door instance named FrontDoor1.

You deploy two instances of an Azure web app to different Azure regions.

You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.

You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

5. HOTSPOT

Your company has an Azure virtual network named Vnet1 that uses an IP address space of 192.168.0.0/20. Vnet1 contains a subnet named Subnet1 that uses an IP address space of 192.168.0.0/24.

You create an IPv6 address range to Vnet1 by using a CIDR suffix of /48.

You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company. The solution must minimize the number of additional IPv4 addresses.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

6. You have an Azure subscription that contains the public IPv4 addresses shown in the following table.

You plan to create a load balancer named LB1 that will have the following settings:

* Name: LB1

* Location: West US

* Type: Public

* SKU: Standard

Which public IPv4 addresses can be used by LB1?

IP1 and IP3 only

IP3 only

IP3 and IP5 only

IP2only

IP1, IP2. IP3. IP4. and IP5

IP1, IP3, IP4, and 1P5 only

7. HOTSPOT

You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2.

You have the NAT gateway shown in the NATgateway1 exhibit.

You have the virtual machine shown in the VM1 exhibit.

Subnet1 is configured as shown in the Subnet1 exhibit.

For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

8. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You configure the application gateway to direct traffic to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.

Solution: You add a rewrite rule for the host header.

Does this meet the goal?

Yes

9. HOTSPOT

You need to meet the network security requirements for the NSG flow logs.

Which type of resource do you need, and how many instances should you create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

10. You have an Azure application gateway named AGW1 that has a routing rule named Rule1. Rule 1 directs traffic for http://www.contoso.com to a backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1.

You deploy another virtual machine scale set named VMSS2.

You need to configure AGW1 to direct all traffic for http://www.adatum.com to VMSS2.

The solution must ensure that requests to http://www.contoso.com continue to be directed to Pool1.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Add a backend pool.

Modify an HTTP setting.

Add an HTTP setting.

Add a listener.

Add a rule.

Page 2 of 3

11. You need to configure GW1 to meet the network security requirements for the P2S VPN users.

Which Tunnel type should you select in the Point-to-site configuration settings of GW1?

IKEv2

IKEv2 and SSTP (SSL)

OpenVPN (SSL)

SSTP (SSL)

12. HOTSPOT

You have an Azure subscription.

You have the on-premises sites shown the following table.

You plan to deploy Azure Virtual WAN.

You are evaluating Virtual WAN Basic and Virtual WAN Standard.

Which type of Virtual WAN can you use for each site? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

13. HOTSPOT

You have an Azure subscription that contains two virtual networks named Vnet1 and Vnet2.

You register a public DNS zone named fabrikam.com.

The zone is configured as shown in the Public DNS Zone exhibit.

You have a private DNS zone named fabrikam.com.

The zone is configured as shown in the Private DNS Zone exhibit.

You have a virtual network link configured as shown in the Virtual Network Link exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

14. You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.

You need to troubleshoot what prevents you from establishing the IPsec tunnel.

Which diagnostic log should you review?

IKEDiagnosticLog

GatewayDiagnosticLog

TunnelDiagnosticLog

RouteDiagnosticLog

15. HOTSPOT

You have an Azure Front Door instance that provides access to a web app. The web app uses a hostname of www.contoso.com.

You have the routing rules shown in the following table.

Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

16. HOTSPOT

You are planning an Azure solution that will contain the following types of resources in a single Azure region:

✑ Virtual machine

✑ Azure App Service

✑ Virtual Network gateway

✑ Azure SQL Managed Instance

App Service and SQL Managed Instance will be delegated to create resources in virtual networks.

You need to identify how many virtual networks and subnets are required for the solution.

The solution must minimize costs to transfer data between virtual networks.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

17. You have an Azure virtual network that contains the subnets shown in the following table.

You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall.

You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com.

What should you do?

Create a network security group (NSG) and associate the NSG to Subnet2.

In a firewall policy, create an application rule.

In a firewall policy, create a DNAT rule.

In a firewall policy, create a network rule.

18. You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.

Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

a virtual network gateway

Azure Application Gateway

Azure Firewall

a local network gateway

Azure Front Door

19. Topic 3, Mix Questions

You have a website that uses an FQDN of www.contoso.com. The DNS record tor www.contoso.com resolves to an on-premises web server.

You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1.

You build the website on Web1.

You plan to configure ContosoFD1 to publish the website for testing.

When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit.

You need to test the website and ContosoFD1 without affecting user access to the on-premises web server.

Which record should you create in the contoso.com DNS domain?

a CNAME record that maps www.contoso.com to ContosoFD1.azurefd.net

a CNAME record that maps www.contoso.com to Web1.contoso.com

a CNAME record that maps afdverify.www.contoso.com to ContosoFD1.azurefd.net

a CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net

20. You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements.

What should you use to configure the default route?

a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3

a user-defined route assigned to GatewaySubnet in Vnet1

BGP route exchange

route filters

Page 3 of 3

21. HOTSPOT

You configure a route table named RT1 that has the routes shown in the following table.

You have an Azure virtual network named Vnet1 that has the subnets shown in the following table.

You have the resources shown in the following table.

Vnet1 connects to an ExpressRoute circuit.

The on-premises router advertises the following routes:

* 0.0.0.0/0

* 10.0.0.0/16

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

22. DRAG DROP

You need to prepare Vnet1 for the deployment of an ExpressRoute gateway. The solution must meet the hybrid connectivity requirements and the business requirements.

Which three actions should you perform in sequence for Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

23. You have an Azure subscription that contains the following resources:

✑ A virtual network named Vnet1

✑ Two subnets named subnet1 and AzureFirewallSubnet

✑ A public Azure Firewall named FW1

✑ A route table named RT1 that is associated to Subnet1

✑ A rule routing of 0.0.0.0/0 to FW1 in RT1

After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.

You need to ensure that the virtual machines can be activated.

What should you do?

On FW1, create an outbound service tag rule for AzureCloud.

On FW1, create an outbound network rule that allows traffic to the Azure Key Management Service (KMS).

Deploy a NAT gateway.

To Subnetl, associate a network security group (NSG) that allows outbound access to port 1688.

24. You have 10 Azure App Service instances. Each instance hosts the same web app. Each instance is in a different Azure region.

You need to configure Azure Traffic Manager to direct users to the instance that has the lowest latency.

Which routing method should you use?

geographic

weighted

performance

priority

25. HOTSPOT

You need to connect an on-premises network and art Azure environment. The solution must use ExpressRoute and support failing over to a Site-to Site VPN connection if there is an ExpressRoute failure.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.