Free Designing and Implementing Microsoft Azure Networking Solutions Exam AZ-700 Exam Practice Test

SIMULATIONTask 10You plan to deploy several virtual machines to subnet1-2.You need to prevent all Azure hosts outside of subnetl-2 from connecting to TCP port 5585 on hosts on subnet1-2. The solution must minimize administrative effort.

• See the Explanation below for step by step instructions

SIMULATIONTask 3You need to ensure that hosts on VNET1 and VNET2 can communicate. The solution must minimize latency between the virtual networks.

• See the Explanation below for step by step instructions

Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SD-WAN). The SD-WAN usesBGP.You have an Azure subscription that contains 20 virtual networks configured as a hub and spoke topology. The topology contains a hub virtual network named Vnetl.The virtual networks connect to the SD-WAN by using a network virtual appliance (NVA) in Vnetl.You need to ensure that BGP route advertisements will propagate between the virtual networks and the SD-WAN. The solution must minimize administrative effortWhat should you implement?

• An Azure VPN Gateway that has BGP enabled
• a NAT gateway
• Azure Traffic Manager
• Azure Route Server

You have an Azure Virtual Desktop deployment that has 500 session hosts.All outbound traffic to the internet uses a NAT gateway.During peak business hours, some users report that they cannot access internet resources. In Azure Monitor, you discover many failed SNAT connections.You need to increase the available SNAT connections.What should you do?

• Add a public IP address.
• Bind the NAT gateway to another subnet.
• Deploy Azure Standard Load Balancer that has outbound rules.

Your company has offices in Montreal. Seattle, and Paris. The outbound traffic from each office originates from a specific public IP address.You create an Azure Front Door instance named FD1 that has Azure Web Application Firewall (WAF) enabled. You configure a WAF policy named Policy! that has a rule named Rule1. Rule1 applies a rate limit of 100 requests for traffic that originates from the office in Montreal.You need to apply a rate limit of 100 requests for traffic that originates from each office.What should you do?

• Modify the conditions of Rule1.
• Create two additional associations.
• Modify the rule type of Rule1.
• Modify the rate limit threshold of Rule1.

You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance.You need to configure the policy to meet the following requirements:Log all connections from Australia.Deny all connections from New Zealand.Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute.What is the minimum number of objects you should create?

• three custom rules that each has one condition
• one custom rule that has three conditions
• one custom rule that has one condition
• one rule that has two conditions and another rule that has one condition

Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN.You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each office connects to Gateway1 by using a Site-to-Site VPN connection.You need to replace the third-party SD-WAN with an Azure Virtual WAN. What should you include in the solution?

• Delete Gateway1.
• Create new Point-to-Site (P2S) VPN connections on the firewall devices.
• Create an Azure Traffic Manager profile.
• Enable active-active mode on Gateway1.

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.You need to troubleshoot what prevents you from establishing the IPsec tunnel.Which diagnostic log should you review?

• IKEDiagnosticLog
• GatewayDiagnosticLog
• TunnelDiagnosticLog
• RouteDiagnosticLog

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.Which two actions should you include in the solution? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

• On the peerings from Vnet2 and Vnet3, select Use remote gateways.
• On the peering from Vnet1, select Allow forwarded traffic.
• On the peering from Vnet1, select Use remote gateways.
• On the peering from Vnet1, select Allow gateway transit.
• On the peerings from Vnet2 and Vnet3, select Allow gateway transit.

SIMULATIONTask 10You need to configure VNET1 to log all events and metrics. The solution must ensure that you can query the events and metrics directly from the Azure portal by using KQL.

• See the Explanation below for step by step instructions