Microsoft Microsoft Certifications AZ-700 Questions & Answers

• Question 91:

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 has a subnet mask of/24. You plan to implement an Azure application gateway that will have the following configurations:

  1.

  Public endpoints: 1

  2.

  Private endpoints: 1

  3.

  Minimum instances: 1

  4.

  Maximum instances: 10

  You need to configure the address space for the subnet of the application gateway. The solution must minimize the number of IP addresses allocated to the application gateway subnet.

  What is the minimum number of assignable IP addresses required?

  A. 1

  B. 2

  C. 11

  D. 12

  E. 20

  Correct Answer: C

  Application Gateway uses one private IP address per instance, plus another private IP address if a private frontend IP is configured. https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure#size-of-the-subnet

• Question 92:

  You have an Azure subscription that contains a virtual network named VNet1.

  You deploy several web apps and configure the apps to use private endpoints on VNet1.

  You need to identify which DNS records the web apps registered automatically.

  Where will the records be created?

  A. an Azure DNS zone named privatelink.azurewebsites.net

  B. an Azure Private DNS zone named azurewebsites.net

  C. an Azure Private DNS zone named privatelink.azurewebsites.net

  D. an Azure DNS zone named azurewebsites.net

  Correct Answer: C

  On creating a private endpoint in portal:

  Your private endpoint will be integrated with the private DNS zone 'privatelink.azurewebsites.net' in the resource group of the selected subnet. If the private DNS zone does not exist, it will be created automatically.

  C. an Azure Private DNS zone named privatelink.azurewebsites.net

• Question 93:

  You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.

  You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.

  You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.

  What should you include in the solution?

  A. An Azure Virtual WAN ExpressRoute gateway

  B. A Network Virtual Appliance (NVA)

  C. A Site to site gateway (VPN gateway)

  D. A Point to site gateway (User VPN gateway)

  Correct Answer: B

  https://learn.microsoft.com/en-us/azure/virtual-wan/sd-wan-connectivity-architecture#direct-nva

• Question 94:

  You have three on-premises networks.

  You have an Azure subscription that contains a Basic Azure virtual WAN. The virtual WAN contains a single virtual hub and a virtual network gateway that is limited to a throughput of 1 Gbps.

  The on-premises networks connect to the virtual WAN by using Site-to-Site (S2S) VPN connections.

  You need to increase the throughput of the virtual WAN to 3 Gbps. The solution must minimize administrative effort.

  What should you do?

  A. Upgrade the virtual WAN to the Standard SKU.

  B. Add an additional VPN gateway to the Azure subscription.

  C. Create an additional virtual hub.

  D. Increase the number of gateway scale units.

  Correct Answer: D

  https://learn.microsoft.com/en-us/azure/virtual-wan/gateway-settings#s2s

• Question 95:

  You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines.

  You need to recommend which subnet mask size to use for the virtual subnets.

  What should you recommend?

  A. /64

  B. /120

  C. /48

  D. /24

  Correct Answer: A

  IPv6-only Virtual Machines or Virtual Machines Scale Sets aren't supported, each NIC must include at least one IPv4 IP configuration. https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview

  So in that case its dual-stack, the ipv4 subnet mask for 200 VMs is /24. And Ipv6 subnet mask is /64. But its not clear mask which is asked in the question... assuming it is referring to ipv6 as mentioned initially, answer will be /64

• Question 96:

  You have the Azure virtual networks shown in the following table.

  

  You deploy Azure Firewall to Vnet3.

  You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall.

  What should you configure?

  A. peering links between Vnet1 and Vnet2

  B. a route table associated to Subnet1-1 and Subnet2-1

  C. an Azure private DNS zone

  D. a route table associated to AzureFirewallSubnet

  Correct Answer: B

• Question 97:

  You have an Azure Private Link service named PL1 that uses an Azure load balancer named LB1.

  You need to ensure that PL1 can support a higher volume of outbound traffic.

  What should you do?

  A. Increase the number of frontend IP configurations for LB1.

  B. Increase the number of NAT IP addresses assigned to PL1.

  C. Deploy an Azure Application Gateway v2 instance to the source NAT subnet.

  D. Redeploy LB1 with a different SKU.

  Correct Answer: B

  Since the question ask for outbound traffic:

  Each NAT IP provides 64k TCP connections (64k ports) per VM behind the Standard Load Balancer. In order to scale and add more connections, you can either add new NAT IPs or add more VMs behind the Standard Load Balancer. Doing

  so will scale the port availability and allow for more connections. Connections will be distributed across NAT IPs and VMs behind the Standard Load Balancer.

  https://learn.microsoft.com/en-us/azure/private-link/private-link-faq#what-is-the-nat--network-address-translation--ip-configuration-used-in-private-link-service--how-can-i-scale-in-terms-of-available-ports-and-connections-

• Question 98:

  Your on-premises network contains a DNS server named Server1.

  You have an Azure subscription that contains the resources shown in the following table.

  

  The on-premises network is connected to VNet1 by using a Site-to-Site (S2S) VPN.

  You need to ensure that Server1 can resolve the DNS name of storage1. The solution must minimize costs and administrative effort.

  What should you use?

  A. Azure DNS Private Resolver

  B. an Azure public DNS zone

  C. an Azure Private DNS zone

  D. an Azure virtual machine that hosts a DNS service

  Correct Answer: A

  Azure DNS Private Resolver is a new service that enables you to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM based DNS servers. https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview

• Question 99:

  You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines.

  You need to recommend a load balancing solution for the virtual network. The solution must meet the following requirements:

  The virtual machines and the load balancer must be accessible only from the virtual network.

  Costs must be minimized.

  What should you include in the recommendation?

  A. Basic Azure Load Balancer

  B. Azure Application Gateway v1

  C. Azure Standard Load Balancer

  D. Azure Application Gateway v2

  Correct Answer: C

• Question 100:

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1.

  You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.

  You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.

  What should you add to NSG1?

  A. an outbound rule that has a priority of 4096 and blocks all internet traffic

  B. an inbound rule that has a priority of 4096 and blocks all internet traffic

  C. an inbound rule that has a priority of 100 and blocks all internet traffic

  D. an outbound rule that has a priority 100 and blocks all internet traffic

  Correct Answer: B