What resources did you use for those who passed the Microsoft AZ-700? Do you have such doubts? One of the over-referenced resources that Microsoft-Technet has come to tell you is the Microsoft AZ-700 dumps, and today is mainly to share your latest AZ-700 dump practice questions, the latest update.
From Pass4itSure AZ-700 dumps https://www.pass4itsure.com/az-700.html (Updated: Feb 19, 2022)
Share free AZ-700 dumps questions used to learn the AZ-700:
Free AZ-700 exam pdf with 12 questions and answers
google drive: https://drive.google.com/file/d/1B7GNAxwdJwev_pArUnCTGNQHzcQQUHvA/view?usp=sharing AZ-700 dumps pdf 2022
Microsoft AZ-700 practice test online (free)
QUESTION 1
HOTSPOT
You configure a route table named RT1 that has the routes shown in the following table.
Vnet1 connects to an ExpressRoute circuit. The on-premises router advertises the following routes:
1. 0.0.0.0/0
2. 10.0.0.0/16
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
QUESTION 2
You have the Azure environment shown in the exhibit.
VM1 is a virtual machine that has an instance-level public IP address (ILPIP).
Basic Load Balancer uses a public IP address. VM1 and VM2 are in the backend pool.
NAT Gateway uses a public IP address named IP3 that is associated with SubnetA.
VNet1 has a virtual network gateway that has a public IP address named IP4.
When initiating outbound traffic to the internet from VM1, which public address is used?
A. IP1
B. IP2
C. IP3
D. IP4
Correct Answer: A
QUESTION 3
You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end
encryption.
You configure the listener for HTTPS by uploading an enterprise-signed certificate.
You need to ensure that the application gateway can provide end-to-end encryption for App1.
What should you do?
A. Increase the Unhealthy threshold setting in the custom probe.
B. Enable the SSL profile to the listener.
C. Set Listener type to Multisite.
D. Upload the public key certificate to the HTTP settings.
Correct Answer: D
Reference: https://docs.microsoft.com/en-us/azure/application-gateway/end-to-end-ssl-portal
https://docs.microsoft.com/en-us/azure/application-gateway/create-ssl-portal#configuration-tab
QUESTION 4
You fail to establish a Site-to-Site VPN connection between your company\’s main office and an Azure virtual network.
You need to troubleshoot what prevents you from establishing the IPsec tunnel.
Which diagnostic log should you review?
A. IKEDiagnosticLog
B. RouteDiagnosticLog
C. GatewayDiagnosticLog
D. TunnelDiagnosticLog
Correct Answer: A
IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to
review when troubleshooting disconnections, or failure to connect VPN scenarios.
GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table.
TunnelDiagnosticLog = The TunnelDiagnosticLog table is very useful to inspect the historical connectivity statuses of
the tunnel.
RouteDiagnosticLog = The RouteDiagnosticLog table traces the activity for statically modified routes or routes received
via BGP.
P2SDiagnosticLog = The last available table for VPN diagnostics is P2SDiagnosticLog. This table traces the activity for
Point to Site.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics
QUESTION 5
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?
A. a private endpoint
B. a routing table
C. a service endpoint
D. a private link service
E. a virtual network peering
Correct Answer: E
There is no virtual network peering between VM4\\’s VNet (VNet3) and VM5\\’s VNet (VNet4). To enable the VMs to
communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4.
QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.
You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following
error.
You need to ensure that the URL is accessible through the application gateway.
Solution: You create a WAF policy exclusion for request headers that contain 137.135.10.24.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Explanation: The parameter here should be RemoteAddr, not Request header. https://docs.microsoft.com/enus/azure/web-application-firewall/ag/custom-waf-rules- overview#match-variable-required
QUESTION 7
Your company has offices in Montreal, Seattle, and Paris. The outbound traffic from each office originates from a
specific public IP address.
You create an Azure Front Door instance named FD1 that has Azure Web Application Firewall (WAF) enabled. You
configure a WAF policy named Policy1 that has a rule named Rule1. Rule1 applies a rate limit of 100 requests for traffic
that originates from the office in Montreal.
You need to apply a rate limit of 100 requests for traffic that originates from each office.
What should you do?
A. Modify the rate limit threshold of Rule1.
B. Create two additional associations.
C. Modify the conditions of Rule1.
D. Modify the rule type of Rule1.
Correct Answer: B
QUESTION 8
You need to configure the default route on Vnet2 and Vnet3. The solution must meet the virtual networking
requirements. What should you use to configure the default route?
A. route filters
B. BGP route exchange
C. a user-defined route assigned to GatewaySubnet in Vnet1
D. a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
QUESTION 9
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.
You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following
error.
You need to ensure that the URL is accessible through the application gateway.
Solution: You configure a custom cookie and an exclusion rule.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
QUESTION 10
HOTSPOT
You are implementing the virtual network requirements for VM-Analyze.
What should you include in a custom route that is linked to Subnet2? To answer, select the appropriate options in the
answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
QUESTION 11
You have an Azure subscription that contains multiple virtual machines in the West US Azure region.
You need to use Traffic Analytics.
Which two resources should you create? Each correct answer presents part of the solution. (Choose two.)
NOTE: Each correct answer selection is worth one point.
A. an Azure Monitor workbook
B. a Log Analytics workspace
C. a storage account
D. an Azure Sentinel workspace
E. an Azure Monitor data collection rule
Correct Answer: BC
A storage account is used to store network security group flow logs.
A Log Analytics workspace is used by Traffic Analytics to store the aggregated and indexed data that is then used to
generate the analytics.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics
QUESTION 12
HOTSPOT
Your company has 10 instances of a web service. Each instance is hosted in a different Azure region and is accessible
through a public endpoint.
The development department at the company is creating an application named App1. Every 10 minutes, App1 will use a list of endpoints and connect to the first available endpoint.
You plan to use Azure Traffic Manager to maintain the list of endpoints.
You need to configure a Traffic Manager profile that will minimize the impact of DNS caching.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-endpoint-types
AZ-700 exam recommendations:
Passing the AZ-700 exam requires an AZ-700 dumps and a lot of practice. Make sure you thoroughly understand every point in the exam topic and that you are confident that you know the most important topics. Confidence is also important. Give yourself about 2-3 months to learn this. Don’t rush it.
The practice questions shared above are from Pass4itSure, for more Microsoft AZ-700 dumps >>> https://www.pass4itsure.com/az-700.html (Total Q&As: 110)
