Big Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Pass the Microsoft Microsoft Certified: Azure Network Engineer Associate AZ-700 Questions and answers with CertsForce

Viewing page 1 out of 7 pages
Viewing questions 1-10 out of questions
Questions # 1:

You need to plan the deployment of LBGW1. The solution must support the planned changes.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 1


Expert Solution
Questions # 2:

You need to configure FD1 to provide user access to app2.proseware.com. The solution must meet the security requirements and the general requirements.

What should you do first?

Options:

A.

Add a custom domain to FD1.


B.

Add a security policy to FD1.


C.

Request a certificate from a trusted root CA.


D.

Export the TLS certificate and the private key from App2.


Expert Solution
Questions # 3:

You need to configure a custom rule for APPGWI-WAFPolicy to allow only connections that originate from FD1. The solution must support the planned changes.

Which Match type and Match variable should you select?

Options:

A.

String and RequestCookies


B.

IP address and RemoteAddr


C.

String and RequestHeaders


D.

Geo location and RemoteAddr


Expert Solution
Questions # 4:

You need to manage connectivity from NYCNet to the Azure services that use private endpoints. The solution must meet the security requirements. What should you do first?

Options:

A.

Add a route table to SUBNET-PL


B.

Enable a network policy for SUBNET-PE.


C.

From Azure Virtual Network Manager, create a security admin configuration.


D.

From Azure Viitual Network Manager, create a network group that has Member type set to Subnet


Expert Solution
Questions # 5:

You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com.

You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA).

What should you include in the solution?

Options:

A.

an enterprise application in Azure Active Directory (Azure AD)


B.

Active Directory Certificate Services (AD CS)


C.

Azure Key Vault


D.

Azure Application Gateway


Expert Solution
Questions # 6:

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.

You need to troubleshoot what prevents you from establishing the IPsec tunnel.

Which diagnostic log should you review?

Options:

A.

IKEDiagnosticLog


B.

GatewayDiagnosticLog


C.

TunnelDiagnosticLog


D.

RouteDiagnosticLog


Expert Solution
Questions # 7:

You have an Azure subscription that contains the resources shown in the following table.

Question # 7

You create a virtual network named Vnet2 in the West US region.

You plan to enable peering between Vnet1 and Vnet2.

You need to ensure that the virtual machines connected to Vnet2 can connect to VM1 and VM2 via LB1.

What should you do?

Options:

A.

Change the Floating IP configurations of LB1.


B.

From the Peerings settings of Vnet2. set Traffic forwarded from remote virtual network to Allow


C.

Change the SKU of LB1


D.

From the Peerings settings of Vnet1, set Traffic forwarded from remote virtual network to Allow.


Expert Solution
Questions # 8:

You have an on-premises network.

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an ExpressRoute gateway.

You need to connect VNet1 to the on-premises network by using an ExpressRoute circuit.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question # 8


Expert Solution
Questions # 9:

Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN.

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection.

You need to replace the third-party SD-WAN with an Azure Virtual WAN. What should you include in the solution?

Options:

A.

Delete Gateway1.


B.

Create new Point-to-Site (P2S) VPN connections on the firewall devices.


C.

Create an Azure Traffic Manager profile.


D.

Enable active-active mode on Gateway1.


Expert Solution
Questions # 10:

You have an Azure subscription that contains a dual-stack virtual network named VNet1. VNet1 has the following IP address spaces:

• IPv4:192.168.0.0/24

• IPv6: fd0adbftdeca: deed: y48

You plan to deploy an Azure VPN gateway and multiple virtual machines to VNet1.

You need to configure the subnet masks for VNet1. The solution must meet the following requirements:

• Maximize the number of usable IP addresses.

• Support the deployment of the VPN gateway and the virtual machines.

Which subnet mask should you use for each address space? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 10


Expert Solution
Viewing page 1 out of 7 pages
Viewing questions 1-10 out of questions