Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Microsoft Microsoft Certified: Azure Network Engineer Associate AZ-700 Questions and answers with CertsForce

Viewing page 3 out of 6 pages
Viewing questions 21-30 out of questions
Questions # 21:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You configure the application gateway to direct traffic to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

Question # 21

You need to ensure that the URL is accessible through the application gateway.

Solution: You configure a custom cookie and an exclusion rule.

Does this meet the goal?

Options:

A.

Yes


B.

No


Expert Solution
Questions # 22:

You have an Azure subscription that contains the virtual networks shown in the following table.

Question # 22

The subscription contains the virtual machines shown in the following table.

Question # 22

You create a load balancer named LB1 that has the following configurations:

• SKU: Basic

• Type: Internal

• Subnet: Subnetl2

• Virtual network VNet1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question # 22


Expert Solution
Questions # 23:

You have the on-premises networks shown in the following table.

Question # 23

You have an Azure subscription that contains an Azure virtual WAN named VWAN1 and a virtual network named VNet1 VWAN1 is connected to the on-premises networks and VNet1 in a full mesh topology. The virtual hub routing preference for VWAN1 is AS Path.

You need to route traffic from VNet1 to 10.61.1.5.

Which path will be used?

Options:

A.

the ExpressRoute connection to Branch2


B.

the ExpressRoute connection to Branch3


C.

the VPN connection to Branch1


D.

the VPN connection to Branch2


Expert Solution
Questions # 24:

You have an on premises web server that hosts a web app named App1 and has the following configurations:

• IP address 131.107.50.60

• FQDN server1.contoso.com

You have an Azure subscription.

You need to publish App1 by using Azure Front Door. The solution must meet the following requirements:

• Ensure that internet users can connect to App1 by using an FQDN of appl.contoso.com.

• Minimize the changes required to the configuration of Front Door if Server 1 is migrated to Azure.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 24


Expert Solution
Questions # 25:

You have an Azure subscription that contains six Azure App Service apps. The apps have an identical configuration and are deployed across multiple Azure regions.

You plan to deploy Azure Front Door to load balance traffic across the apps.

You need to ensure that the round robin load-balancing algorithm will send traffic only to a limited number App Service apps based on their proximity to a user. The solution must minimize administrative effort.

What should you modify, and what should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 25


Expert Solution
Questions # 26:

You have an Azure subscription that contains a virtual network named VNet1.

You deploy several web apps and configure the apps to use private endpoints on VNet1.

You need to identity which DNS records the web apps registered automatically.

Where will the records be created?

Options:

A.

an Azure DNS zone named azurewebsites net


B.

an Azure Private DNS zone named azurewebsites.net


C.

an Azure DNS zone named privatelink.azurewebsites.net


D.

an Azure Private DNS zone named piivatelink.azurewebsites.net


Expert Solution
Questions # 27:

You need to configure the default route on Vnet2 and Vnet3. The solution must meet the virtual networking requirements.

What should you use to configure the default route?

Options:

A.

route filters


B.

BGP route exchange


C.

a user-defined route assigned to GatewaySubnet in Vnet1


D.

a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3


Expert Solution
Questions # 28:

You need to configure a custom rule for APPGWI-WAFPolicy to allow only connections that originate from FD1. The solution must support the planned changes.

Which Match type and Match variable should you select?

Options:

A.

String and RequestCookies


B.

IP address and RemoteAddr


C.

String and RequestHeaders


D.

Geo location and RemoteAddr


Expert Solution
Questions # 29:

You need to identify which IP address space to allocate for the planned deployment of PRDNS1 to HubVNet and SpokeVNet. The solution must meet the general requirements

What should you identify for each virtual network? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question # 29


Expert Solution
Questions # 30:

Your company has offices in Montreal. Seattle, and Paris. The outbound traffic from each office originates from a specific public IP address.

You create an Azure Front Door instance named FD1 that has Azure Web Application Firewall (WAF) enabled. You configure a WAF policy named Policy! that has a rule named Rule1. Rule1 applies a rate limit of 100 requests for traffic that originates from the office in Montreal.

You need to apply a rate limit of 100 requests for traffic that originates from each office.

What should you do?

Options:

A.

Modify the conditions of Rule1.


B.

Create two additional associations.


C.

Modify the rule type of Rule1.


D.

Modify the rate limit threshold of Rule1.


Expert Solution
Viewing page 3 out of 6 pages
Viewing questions 21-30 out of questions