AZ-700 Practice Test

AZ-700 Practice Test practice questions, page 14 of 16, with answer review and explanations.

Question 66

You have three on-premises sites. Each site has a third-party VPN device. You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-to-Site VPN connection. You need to connect the third site to the other two sites by using Hub1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

Question 67

You are planning an Azure solution that will contain the following types of resources in a single Azure region: ✑ Virtual machine ✑ Azure App Service ✑ Virtual Network gateway ✑ Azure SQL Managed Instance App Service and SQL Managed Instance will be delegated to create resources in virtual networks. You need to identify how many virtual networks and subnets are required for the solution. The solution must minimize costs to transfer data between virtual networks. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 68

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You download and reinstall the VPN client configuration. Does this meet the goal?

  1. Yes
  2. No

Question 69

You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone. Vnet1 connects to an on-premises datacenter by using ExpressRoute. You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. Modify the DNS server settings of Vnet1.
  2. For FW1, configure custom DNS server.
  3. For FW1, enable DNS proxy.
  4. On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.
  5. On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.

Question 70

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?

  1. internal load balancers
  2. storage account
  3. Azure Virtual Networks NAT
  4. service endpoint policies