Microsoft Microsoft Certifications AZ-700 Questions & Answers

• Question 291:

  DRAG DROP

  You have an Azure subscription that contains the resources shown in the following table.

  

  The IP Addresses settings for Vnet1 are configured as shown in the exhibit.

  

  You need to ensure that you can integrate WebApp1 and Vnet1.

  Which three actions should you perform in sequence before you can integrate WebApp1 and Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#gateway-required-vnet-integration

• Question 292:

  DRAG DROP

  You have two Azure virtual networks named Hub1 and Spoke1. Hub1 connects to an on-premises network by using a Site-to-Site VPN connection.

  You are implementing peering between Hub1 and Spoke1.

  You need to ensure that a virtual machine connected to Spoke1 can connect to the on-premises network through Hub1.

  How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#virtual-network-peering

• Question 293:

  DRAG DROP

  You have three on-premises sites. Each site has a third-party VPN device.

  You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-to-Site VPN connection.

  You need to connect the third site to the other two sites by using Hub1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-site-to-site-portal

• Question 294:

  DRAG DROP

  You have an Azure virtual network named Vnet1 that connects to an on-premises network.

  You have an Azure Storage account named storageaccount1 that contains blob storage.

  You need to configure a private endpoint for the blob storage. The solution must meet the following requirements:

  Ensure that all on-premises users can access storageaccount1 through the private endpoint.

  Prevent access to storageaccount1 from being interrupted.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 295:

  DRAG DROP

  You have an Azure Front Door instance named FrontDoor1.

  You deploy two instances of an Azure web app to different Azure regions.

  You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.

  You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#associate-the-custom-domain-with-your-front-door https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

• Question 296:

  DRAG DROP

  You have two Azure subscriptions named Subscnption1 and Subscription2. Subscription1 contains a virtual network named Vnet1. Vnet1 contains an application server. Subscription2 contains a virtual network named Vnet2.

  You need to provide the virtual machines in Vnet2 with access to the application server in Vnet1 by using a private endpoint.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Deploy an Azure Load Balancer in front of the application server

  Configure your application to run behind a standard load balancer in your virtual network.

  Step 2: In Subscription 1, create a private link service and attach the service to the frontend IP configuration of the load balancer.

  Create a Private Link Service referencing the load balancer above.

  Step 3: In Subscription 2, create a private endpoint by using the private link service.

  Private Link service can be accessed from approved private endpoints in any public region. The private endpoint can be reached from the same virtual network, regionally peered VNets, globally peered VNets and on premises using private

  VPN or ExpressRoute connections.

  

  Step 4: In Subscription1, accept the private endpoint connection request.

  Network connections can be initiated only by clients that are connecting to the private endpoint.

  Not:

  Incorrect: Enable virtual network peering between Vnet1 and Vnet2.

  Reference:

  https://docs.microsoft.com/en-us/azure/private-link/private-link-service-overview

  https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview

• Question 297:

  DRAG DROP

  Your company, named Contoso, Ltd., has an Azure subscription that contains the resources shown in the following table.

  

  You plan to deploy Azure Front Door. The solution must meet the following requirements:

  1.

  Requests to a URL of https://contoso.azurefd.net/uk must be routed to App1uk.

  2.

  Requests to a URL of https://contoso.azurefd.net/us must be routed to App1us.

  3.

  Requests to a URL of https://contoso.azurefd.net/images must be routed to the storage account closest to the user.

  What is the minimum number of backend pools and routing rules you should create? To answer, drag the appropriate number to the correct components. Each number may be used once, more than once, or not at all. You may need to drag

  the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: 2

  One backend pool in East US, and One backend pool in UK West.

  Note: The backend pool is a critical component of the load balancer. The backend pool defines the group of resources that will serve traffic for a given load-balancing rule.

  Box 2: 2

  One rule to handle: Requests to a URL of https://contoso.azurefd.net/uk must be routed to App1uk.

  One rule to handle: Requests to a URL of https://contoso.azurefd.net/us must be routed to App1us.

  The third requirement (Requests to a URL of https://contoso.azurefd.net/images must be routed to the storage account closest to the user) does not need any rule. Just need to set up latency routing. Note:

  Azure Front Door supports four different traffic routing methods to determine how your HTTP/HTTPS traffic is distributed between different origins. When user requests reach the Front Door edge locations, the configured routing method gets applied to ensure requests are forwarded to the best backend resource. The four traffic routing methods are: Latency: The latency-based routing ensures that requests are sent to the lowest latency origins acceptable within a sensitivity range. In other words, requests get sent to the nearest set of origins in respect to network latency. Priority Weighted Session Affinity Reference: https://learn.microsoft.com/en-us/azure/frontdoor/routing-methods

  https://learn.microsoft.com/en-us/azure/frontdoor/front-door-route-matching https://learn.microsoft.com/en-us/azure/load-balancer/backend-pool-management

• Question 298:

  DRAG DROP

  You register a DNS domain with a third-party registrar.

  You need to host the DNS zone on Azure.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create a public DNS zone. Create a DNS zone

  1.

  Go to the Azure portal to create a DNS zone. Search for and select DNS zones.

  2.

  Select Create DNS zone.

  3.

  On the Create DNS zone page, enter the following values, and then select Create.

  

  Step 2: Identify the FQDNs of the name servers.

  Retrieve name servers.

  Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. Azure DNS gives name servers from a pool each time a zone is created.

  With the DNS zone created, in the Azure portal Favorites pane, select All resources. On the All resources page, select your DNS zone. If the subscription you've selected already has several resources in it, you can enter your domain name in

  the Filter by name box to easily access the application gateway.

  Retrieve the name servers from the DNS zone page. In this example, the zone contoso.net has been assigned name servers ns1-01.azure-dns.com, ns2-01.azure-dns.net, *ns3-01.azure-dns.org, and ns4-01.azure-dns.info:

  

  Azure DNS automatically creates authoritative NS records in your zone for the assigned name servers.

  Step 3: Modify the NS records for the domain.

  Delegate the domain

  Once the DNS zone gets created and you have the name servers, you'll need to update the parent domain with the Azure DNS name servers.

  Each registrar has its own DNS management tools to change the name server records for a domain.

  1.

  In the registrar's DNS management page, edit the NS records and replace the NS records with the Azure DNS name servers.

  2.

  When you delegate a domain to Azure DNS, you must use the name servers that Azure DNS provides. Use all four name servers, regardless of the name of your domain. Domain delegation doesn't require a name server to use the same

  top-level domain as your domain.

  Reference: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

• Question 299:

  DRAG DROP

  You have an Azure subscription that contains a virtual network named Vnet1 and an Azure SQL database named SQL1. SQL1 has a private endpoint on Vnet1.

  You have a partner company named Fabrikam, Inc. Fabrikam has an Azure subscription that contains a virtual network named Vnet2 and a virtual machine named VM1. VM1 is connected to Vnet2.

  You need to provide VM1 with access to SQL1 by using an Azure Private Link service.

  What should you implement on each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 300:

  DRAG DROP

  You have a DNS domain named contoso.com that is hosted by a third-party domain name registrar.

  You have an Azure subscription.

  You need to ensure that all DNS queries for the contoso.com domain are resolved by using Azure DNS.

  What should you create in the registrar, and what should you create in Azure? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: A delegation

  Delegate the domain

  Once the DNS zone gets created and you have the name servers, you'll need to update the parent domain with the Azure DNS name servers. Each registrar has its own DNS management tools to change the name server records for a

  domain.

  In the registrar's DNS management page, edit the NS records and replace the NS records with the Azure DNS name servers.

  When you delegate a domain to Azure DNS, you must use the name servers that Azure DNS provides. Use all four name servers, regardless of the name of your domain. Domain delegation doesn't require a name server to use the same top-

  level domain as your domain.

  Delegations that use name servers in your own zone, sometimes called vanity name servers, aren't currently supported in Azure DNS.

  Note: Azure DNS allows you to host a DNS zone and manage the DNS records for a domain in Azure. In order for DNS queries for a domain to reach Azure DNS, the domain has to be delegated to Azure DNS from the parent domain. Keep in

  mind Azure DNS isn't the domain registrar.

  Host your domain in Azure DNS

  Suppose you buy the domain contoso.com from a domain name registrar and then create a zone with the name contoso.com in Azure DNS. Since you're the owner of the domain, your registrar offers you the option to configure the name

  server (NS) records for your domain. The registrar stores the NS records in the .com parent zone. Internet users around the world are then directed to your domain in your Azure DNS zone when they try to resolve DNS records in

  contoso.com.

  Box 2: A public DNS zone

  Azure DNS provides an authoritative DNS service. It doesn't provide a recursive DNS service.

  Reference:

  https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns