Best Quality Microsoft AZ-700 Exam Questions ValidBraindumps Realistic Practice Exams [2025]
Critical Information To Designing and Implementing Microsoft Azure Networking Solutions Pass the First Time
Microsoft AZ-700 (Designing and Implementing Microsoft Azure Networking Solutions) certification exam is designed for IT professionals who want to validate their skills and knowledge in designing and implementing Azure networking solutions. AZ-700 exam is ideal for those who work with Azure networking technologies on a daily basis, including network architects, network engineers, and network administrators.
NEW QUESTION # 19
You have an on-premises datacenter.
You have an Azure subscription that contains 10 virtual machines and a virtual network named VNe1l in the East US Azure region. The virtual machines are connected to VNet1 and replicate across three availability zones.
You need to connect the datacenter to VNetl1by using ExpressRoute. The solution must meet the following requirements:
* Maintain connectivity to the virtual machines if two availability zones fail.
* Support 1000-Mbps connections-
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 20
You have a website that uses an FQDN of www.contoso.com. The DNS record tor www.contoso.com resolves to an on-premises web server.
You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published by using an Azure Front Door instance named ContosoFD1.
You build the website on Web1.
You plan to configure ContosoFD1 to publish the website for testing.
When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit.
You need to test the website and ContosoFD1 without affecting user access to the on-premises web server.
Which record should you create in the contoso.com DNS domain?
- A. a CNAME record that maps www.contoso.com to ContosoFD1.azurefd.net
- B. a CNAME record that maps afdverify.www.contoso.com to ContosoFD1.azurefd.net
- C. a CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net
- D. a CNAME record that maps www.contoso.com to Web1.contoso.com
Answer: A
NEW QUESTION # 21
Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: VM2, VM3 and VM4.
VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3.
There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocking inbound ICMP to VNet1/Subnet2, VNet2 or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3.
Box 2:
VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2.
NEW QUESTION # 22
You are planning an Azure Front Door deployment that will contain the resources shown in the following table.
Users will connect to the App Service through Front Door by using a URL of https://www.fabrikarn.com. You obtain a certificate for the host name of www.fabfikam.com.
You need to configure a DNS record for www.fabrikam.com and upload the certificate to Azure. What should you do? To answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 23
You have art Azure subscription.
You plan to deploy Azure Front Door with Azure Web Application Firewall (WAF).
You plan to implement custom rules and managed rules that meet the following requirements:
* Block malicious bots.
* Throttle client IP addresses that exceed 100 connections per minute.
You need to identify which Front Door SKU to configure, and which type of rule to configure for each requirement. The solution must minimize administrative effort and costs.
What should identify? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 24
You have an Azure application gateway named AppGw1.
You need to create a rewrite rule for AppGw1. The solution must rewrite the URL of requests from
https://www.contoso.com/fashion/shirts to ttps://www.contoso.com/buy.aspx?category- fashion&product=shirts.
How should you complete the rule? To answer NOTE: Each correct selection is worth one point appropriate options in the answer area.
Answer:
Explanation:
NEW QUESTION # 25
You have an Azure virtual network named Vnet1.
You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.
Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. a deny rule that has the IP address range of Vnet1 as the source and destination of Storage
- B. a deny rule that has a source of VirtualNetwork and a destination of Sq1
- C. a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24
- D. an allow rule that has the IP address range of Vnet1 as the source and destination of Sq1.EastUS
Answer: A,C
Explanation:
ference:
https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview
NEW QUESTION # 26
You have an Azure subscription that contains the resources shown in the following table.
You need to associate Gateway 1 with Subnet1. The solution must minimize downtime on VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
NEW QUESTION # 27
You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements.
What should you use to configure the default route?
- A. route filters
- B. BGP route exchange
- C. a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3
- D. a user-defined route assigned to GatewaySubnet in Vnet1
Answer: C
Explanation:
Explanation
VNet 1 will get the default from BGP and propagate it to VNET 2 and 3
NEW QUESTION # 28
You have an on-premises network named Site1.
You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1 Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN.
You need to control access to storage1 from Site1 by using network security groups (NSGs).
What should you do first?
- A. Associate a route table with Subnet1.
- B. Configure a network policy for private endpoints on Subnet1.
- C. Create a subnet delegation on Subnet1.
- D. Associate a NAT gateway with Subnet1.
Answer: B
NEW QUESTION # 29
You have an Azure subscription that contains a dual-stack virtual network named VNet1. VNet1 has the following IP address spaces:
* IPv4:192.168.0.0/24
* IPv6: fd0adbftdeca: deed: y48
You plan to deploy an Azure VPN gateway and multiple virtual machines to VNet1.
You need to configure the subnet masks for VNet1. The solution must meet the following requirements:
* Maximize the number of usable IP addresses.
* Support the deployment of the VPN gateway and the virtual machines.
Which subnet mask should you use for each address space? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 30
You have an Azure subscription that contains the resources shown in the following table.
The IP Addresses settings for Vnet1 are configured as shown in the exhibit.
You need to ensure that you can integrate WebApp1 and Vnet1.
Which three actions should you perform in sequence before you can integrate WebApp1 and Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
NEW QUESTION # 31
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that the virtual machines can access storage1, storage2, and DB1 by using service endpoints.
What is the minimum number of service endpoints you should create?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 32
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1 You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.
You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.
What should you add to NSG1?
- A. an outbound rule that has a priority 100 and blocks all internet traffic
- B. an inbound rule that has a priority of 4096 and blocks all internet traffic
- C. an inbound rule that has a priority of 100 and blocks all internet traffic
- D. an outbound rule that has a priority of 4096 and blocks all internet traffic
Answer: B
NEW QUESTION # 33
You are planning the IP addressing for the subnets in Azure virtual networks.
Which type of resource requires IP addresses in the subnets?
- A. internal load balancers
- B. storage account
- C. service endpoint policies
- D. serviice endpoints
Answer: A
NEW QUESTION # 34
You have an on-premises network.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an ExpressRoute gateway.
You need to connect VNet1 to the on-premises network by using an ExpressRoute circuit.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 35
You have the network topology shown in the Topology exhibit. (Click the Topology tab.)
You have the Azure firewall shown in the Firewall 1 exhibit. (Click the Firewall tab.)
You have the route table shown in the RouteTable1 exhibit. (Click the RouteTable1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 36
You have an Azure subscription that contains the resources shown in the following table.
The virtual network topology is shown in the following exhibit.
Firewall1 is configured as shown in following exhibit.
FirewallPolicy1 contains the following rules:
* Allow outbound traffic from Vnet1 and Vnet2 to the internet.
* Allow any traffic between Vnet1 and Vnet2.
No custom private endpoints. service endpoints. routing tables, or network security groups (NSGs) were created. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 37
You have an Azure private DNS zone named contoso.com that is linked to the virtual networks shown in the following table.
The links have auto registration enabled.
You create the virtual machines shown in the following table.
You manually add the following entry to the contoso.com zone:
Name: VM1
IP address: 10.1.10.9
For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/dns/dns-faq-private
NEW QUESTION # 38
......
Microsoft AZ-700 is a certification exam designed for professionals who want to showcase their expertise in designing and implementing Microsoft Azure networking solutions. AZ-700 exam is intended for individuals who have experience in Azure networking and are looking to advance their career by demonstrating their skills and knowledge.
AZ-700 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.validbraindumps.com/AZ-700-exam-prep.html
Best Quality Microsoft AZ-700 Exam Questions: https://drive.google.com/open?id=1eXTqo-xJvyZ2i7JTCA2qzA6xVgUhC7VS