[UPDATED Dec-2023] Best Value Available Preparation Guide for AZ-700 Exam
1 Full AZ-700 Practice Test and 185 Unique Questions, Get it Now!
Brief Overview of the Exam
Exam AZ-700 is also known as Designing and Implementing Microsoft Azure Networking Solutions. The exam testifies that you are able to deal with hybrid networking, apply core networking infrastructure, design routing and apply it, protect networks, and create and apply private access to Azure Services. The exam includes 40-60 questions of various types which you need to complete within 100 or 120 minutes. The duration depends on the inclusion of the lab questions in the test or not. Also, be ready to pay the exam fee, which is $165. Your success in the test will be marked by scoring 700 points in the test.
NEW QUESTION # 109
You have an on-premises network.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an ExpressRoute gateway.
You need to connect VNet1 to the on-premises network by using an ExpressRoute circuit.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 110
You need to implement name resolution for the cloud.liwareinc.com. The solution must meet the networking requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/dns/private-dns-autoregistration
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances
NEW QUESTION # 111
You have an Azure subscription that contains multiple virtual machines in the West US Azure region.
You need to use Traffic Analytics.
Which two resources should you create? Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct answer selection is worth one point.
- A. an Azure Monitor data collection rule
- B. an Azure Monitor workbook
- C. a Log Analytics workspace C a storage account
- D. an Azure Sentinel workspace
Answer: C,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics A storage acccount is used to store network security group flow logs.
A Log Analytics workspace is used by Traffic Analytics to store the aggregated and indexed data that is then used to generate the analytics.
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#enable-flow-log-settings
NEW QUESTION # 112
You have an Azure subscription that contains the resources shown in the following table.
Gateway1
provides access to App1 by using a URL of http://app1.contoso.com.
You create a new web app named App2.
You need to configure Gateway1 to enable minimize administrative effort.
What should you configure on Gateway1?
- A. a backend pool and a routing
- B. a listener, a backend pool, and a rule
- C. a listener and a routing rule
- D. a listener and a backend pool
Answer: C
NEW QUESTION # 113
Your company has 40 branch offices across North America and Europe. You have an Azure subscription that contains the following virtual networks:
* Two networks in the East US Azure region
* Three networks in the West Europe Azure region
You need to implement Azure Virtual WAN. The solution must meet the following requirements:
* Each branch office in North America must have an ExpressRoute circuit and a Site-to-Site VPN that connects to the East US region.
* Each branch office in Europe must have an ExpressRoute circuit and a Site-to-Site VPN that connects to the West Europe region.
* Transitive connections must be supported between all the branch offices and all the virtual networks.
* Costs must be minimized.
What is the minimum number of Virtual WAN resources required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 114
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 115
You have an Azure subscription that contains a single virtual network and a virtual network gateway.
You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Azure Active Directory (Azure AD).
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 116
You have an Azure subscription that contains an app named Appl. App1 is hosted on the Azure App Service instances shown in the following table.
You need to implement Azure Traffic Manager to meet the following requirements:
* App1 traffic must be assigned equally to each App Service instance in each Azure region.
* App1 traffic from North Europe must be routed to the Appl instances in the North Europe region.
* App1 traffic from North America must be routed to the Appl instances in the East US Azure region.
Answer:
Explanation:
NEW QUESTION # 117
You have an Azure virtual network named Vnet1 that connects to an on-premises network.
You have an Azure Storage account named storageaccount1 that contains blob storage.
You need to configure a private endpoint for the blob storage. The solution must meet the following requirements:
Ensure that all on-premises users can access storageaccount1 through the private endpoint.
Prevent access to storageaccount1 from being interrupted.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Configure a private endpoint on storageaccount1 and disable public access to the account
2 - Deploy a virtual machine to a subnet in Vnet1
3 - Install the DNS server role and configure the forwarding of blob.core.windows.net to 168.63.129.16
4 - Configure on-premises DNS servers to forward biob.core.windows.net to the virtual machine
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints
NEW QUESTION # 118
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection Supports 8 Gbps of ExpressRoute traffic Minimizes costs What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
NEW QUESTION # 119
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection Supports 8 Gbps of ExpressRoute traffic Minimizes costs What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
NEW QUESTION # 120
You have an Azure virtual network named Vnet1.
You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.
Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. a deny rule that has a source of VirtualNetwork and a destination of Sql
- B. a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24
- C. an allow rule that has the IP address range of Vnet1 as the source and destination of Sql.EastUS
- D. a deny rule that has the IP address range of Vnet1 as the source and destination of Storage
Answer: C,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview
NEW QUESTION # 121
In which NSGs can you use ASG1 and to which virtual machine network interfaces can you associate ASG1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 122
You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.
Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.
- A. a local network gateway
- B. Azure Front Door
- C. Azure Firewall
- D. Azure Application Gateway
- E. a virtual network gateway
Answer: A,E
NEW QUESTION # 123
You need to meet the network security requirements for the NSG flow logs.
Which type of resource do you need, and how many instances should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 124
You have 10 Azure App Service instances. Each instance hosts the same web app. Each instance is in a different Azure region.
You need to configure Azure Traffic Manager to direct users to the instance that has the lowest latency.
Which routing method should you use?
- A. performance
- B. priority
- C. geographic
- D. weighted
Answer: B
NEW QUESTION # 125
You have an Azure environment shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit?toc=/azure/virtual-network/toc.json
https://docs.microsoft.com/en-ca/azure/virtual-network/ip-services/ipv6-overview#capabilities
NEW QUESTION # 126
You have an on-premises datacenter.
You have an Azure subscription that contains 10 virtual machines and a virtual network named VNe1l in the East US Azure region. The virtual machines are connected to VNet1 and replicate across three availability zones.
You need to connect the datacenter to VNetl1by using ExpressRoute. The solution must meet the following requirements:
* Maintain connectivity to the virtual machines if two availability zones fail.
* Support 1000-Mbps connections-
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 127
You have an Azure virtual network named Vnet1 and an on-premises network.
The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.
You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.
You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?
- A. Set BGP to Enabled
- B. Set IPsec / IKE policy to Custom.
- C. Set Use Azure Private IP Address to Enabled
- D. Set Connection Mode to ResponderOnly
Answer: C
NEW QUESTION # 128
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
* Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection
* Supports 8 Gbps of ExpressRoute traffic
* Minimizes costs
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, diagram Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
NEW QUESTION # 129
......
To cater to the growing need for expertise in Azure networking solutions, Microsoft has introduced the AZ-700 exam: Designing and Implementing Microsoft Azure Networking Solutions. AZ-700 exam is aimed at IT professionals who are well-versed in Azure networking solutions and are looking to enhance their skills and knowledge. AZ-700 exam is also ideal for network engineers, architects, and administrators who want to showcase their expertise in designing and implementing Azure networking solutions.
Microsoft AZ-700 certification exam is an excellent way to validate your Azure networking skills and advance your career as an Azure professional. Whether you're looking to land a new job, earn a promotion, or enhance your skills, passing AZ-700 exam can help you achieve your goals. So, start preparing for the Microsoft AZ-700 exam today and take your Azure networking expertise to the next level.
Get Instant Access to AZ-700 Practice Exam Questions: https://www.pass4training.com/AZ-700-pass-exam-training.html
The Best AZ-700 Exam Study Material Premium Files and Preparation Tool: https://drive.google.com/open?id=1giH-JSS7E-23le8c15wU8C7sOV7pBLqP
