Free Designing and Implementing Microsoft Azure Networking Solutions Exam AZ-700 Exam Practice Test

You have an Azure virtual network that contains two subnets named Subnet1 and Subnet2. Subnet1 contains a virtual machine named VM1. Subnet2 contains a virtual machine named VM2.You have two network security groups (NSGs) named NSG1 and NSG2. NSG1 has 100 inbound security rules and is associated to VM1. NSG2 has 200 inbound security rules and is associated to Subnet1.VM2 cannot connect to VM1.You suspect that an NSG rule blocks connectivity.You need to identify which rule blocks the connection. The issue must be resolved as quickly as possible.Which Azure Network Watcher feature should you use?

• Effective security rules
• Connection troubleshoot
• NSG diagnostic
• NSG flow logs

Your company has offices in and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-to-Site VPN connection.The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region.You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises servers in the New York office by using the ExpressRoute circuits.Which ExpressRoute option should you use?

• ExpressRoute Local
• ExpressRoute FastPath
• ExpressRoute Direct
• ExpressRoute Global Reach

SIMULATIONTask 9You plan to use VNET4 for an Azure API Management implementation.You need to configure a policy that can be used by an Azure application gateway to protect against known web attack vectors. The policy must only allow requests that originate from IP addresses in Canada. You do NOT need to create the application gateway to complete this task.

• See the Explanation below for step by step instructions

You have five virtual machines that run Windows Server. Each virtual machine hosts a different web app.You plan to use an Azure application gateway to provide access to each web app by using a hostname of www.contoso.corn and a different URL path for each web app, for example: https://www.contoso.com/app1.You need to control the flow of traffic based on the URL path.What should you configure?

• rules
• rewrites
• HTTP settings
• listeners

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an Azure Virtual Desktop host pool named Pool1.You need to implement Azure Firewall and TLS inspection for all the outbound traffic from Pool1.Which two resources should you configure? Each correct answer present part of the solution.NOTE: Each correct answer is worth one point

• an Azure Private DNS zone
• a private endpoint
• an Azure key vault
• an Azure NAT gateway
• a Microsoft Entra enterprise app
• a managed identity

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have two Azure virtual networks named Vnet1 and Vnet2.You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.You discover that Client1 cannot communicate with Vnet2.You need to ensure that Client1 can communicate with Vnet2.Solution: You enable BGP on the gateway of Vnet1.Does this meet the goal?

• Yes
• No

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.What should you include in the solution?

• An Azure Virtual WAN ExpressRoute gateway
• A Network Virtual Appliance (NVA)
• A Site to site gateway (VPN gateway)
• A Point to site gateway (User VPN gateway)

You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines.You need to recommend a load balancing solution for the virtual network. The solution must meet the following requirements:* The virtual machines and the load balancer must be accessible only from the virtual network.* Costs must be minimized.What should you include in the recommendation?

• Basic Azure Load Balancer
• Azure Application Gateway v1 Azure Application Gateway v2
• Azure Standard Load Balancer
• Azure Application Gateway v2

You have an Azure subscription that contains 100 network security groups (NSGs).You need to ensure that you log the application of specific NSG rules.Which type of log should you configure?

• flow log
• activity log
• Azure resource log
• audit log

You have 10 Azure App Service instances. Each instance hosts the same web app. Each instance is in a different Azure region.You need to configure Azure Traffic Manager to direct users to the instance that has the lowest latency.Which routing method should you use?

• geographic
• weighted
• performance
• priority