Question 1

HOTSPOT
You have on-premises datacenters in New York and Seattle.
You have an Azure subscription that contains the ExpressRoute circuits shown in the following table.
Name
Azure region Datacenter ERC1
East US New Vork ERC2
West US2 Seattle
You need to ensure that all the data sent between the datacenters is routed via the ExoressRoute circuits. The solution must minimize costs.

Accepted Answer

Correct answer: A

Question 2

Your company has an office in New York.
The company has an Azure subscription that contains the virtual networks shown in the following table.
Name Location Vnet1 East LS Vnet2
North Europe Vnet3
West US Vnet4
West Europe
You need to connect the virtual networks to the office by using ExpressRoute.
The solution must meet the following requirements:
• The connection must have up to 1 Gbps of bandwidth.
• The office must have access to all the virtual networks.
• Costs must be minimized.
How many ExpressRoute circuits should be provisioned, and which ExpressRoute 5KU should you enable?

Accepted Answer

Correct answer: B

Question 3

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1
You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to
Subnet1.
You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.
What should you add to NSG1?

Accepted Answer

Correct answer: C

Question 4

SIMULATION - (Topic 4)
Task 9
You need to ensure that subnet4-3 can accommodate 507 hosts.

Accepted Answer

Here are the steps and explanations for ensuring that subnet4-3 can accommodate 507 hosts:
? To determine the subnet size that can accommodate 507 hosts, you need to use the formula: number of hosts = 2^(32 - n) - 2, where n is the number of bits in
the subnet mask1. You need to find the value of n that satisfies this equation for 507 hosts.
? To solve this equation, you can use trial and error or a binary search method. For example, you can start with n = 24, which is the default subnet mask for Class
C networks. Then, plug in the value of n into the formula and see if it is too big or too small for 507 hosts.
? If you try n = 24, you get number of hosts = 2^(32 - 24) - 2 = 254, which is too small. You need to increase the value of n to get a larger number of hosts.
? If you try n = 25, you get number of hosts = 2^(32 - 25) - 2 = 510, which is just enough to accommodate 507 hosts. You can stop here or try a smaller value of n
to see if it still works.
? If you try n = 26, you get number of hosts = 2^(32 - 26) - 2 = 254, which is too small again. You need to decrease the value of n to get a larger number of hosts.
? Therefore, the smallest value of n that can accommodate 507 hosts is n = 25. This means that the subnet mask for subnet4-3 should be /25 or 255.255.255.128
in dot-decimal notation1.
? To change the subnet mask for subnet4-3, you need to go to the Azure portal and select your virtual network. Then select Subnets under Settings and select
subnet4-3 from the list2.
? On the Edit subnet page, under Address range (CIDR block), change the value from /24 to /25. Then select Save2.

Question 5

SIMULATION - (Topic 4)
Task 2
You need to create an Azure Firewall instance named FW1 that meets the following requirements:
• Has an IP address from the address range of 10.1.255.0/24
• Uses a new Premium firewall policy named FW-pohcy1
• Routes traffic directly to the internet

Accepted Answer

? To create an Azure Firewall instance, you need to go to the Azure portal and select Create a resource. Type firewall in the search box and press Enter. Select
Firewall and then select Create1.
? To assign an IP address from the address range of 10.1.255.0/24 to the firewall, you need to select a public IP address that belongs to that range. You can either
create a new public IP address or use an existing one1.
? To use a new Premium firewall policy named FW-policy1, you need to select Premium as the Firewall tier and create a new policy with the name FW- policy12. A
Premium firewall policy allows you to configure advanced features such as TLS Inspection, IDPS, URL Filtering, and Web Categories3.
? To route traffic directly to the internet, you need to enable SNAT (Source Network Address Translation) for the firewall. SNAT allows the firewall to use its public
IP address as the source address for outbound traffic4.

Question 6

SIMULATION - (Topic 4)
Task 8
You need to ensure that the storage34280945 storage account will only accept connections from hosts on VNET1

Accepted Answer

Here are the steps and explanations for ensuring that the storage34280945 storage account will only accept connections from hosts on VNET1:
? To restrict network access to your storage account, you need to configure the Azure Storage firewall and virtual network settings for your storage account. You
can do this in the Azure portal by selecting your storage account and then selecting Networking under Settings1.
? On the Networking page, select Firewalls and virtual networks, and then select Selected networks under Allow access from1. This will block all access to your
storage account except from the networks or resources that you specify.
? Under Virtual networks, select + Add existing virtual network. Then select VNET1 from the list of virtual networks and select the subnet that contains the hosts
that you want to allow access to your storage account1. This will enable a service endpoint for Storage in the subnet and configure a virtual network rule for that
subnet through the Azure storage firewall2.
? Select Add to add the virtual network and subnet to your storage account1.
? Select Save to apply your changes1.

Question 7

SIMULATION - (Topic 4)
Task 11
You are preparing to connect your on-premises network to VNET4 by using a Site-to-Site VPN. The on-premises endpoint of the VPN will be created on a firewall
named Firewall 1.
The on-premises network has the following configurations:
• Internal address range: 10.10.0.0/16.
• Firewall 1 internal IP address: 10.10.1.1.

From SurePassExam
https://www.surepassexam.com/AZ-700-exam-dumps.html (150 New Questions)
• Firewall1 public IP address: 131.107.50.60. BGP is NOT used.
You need to create the object that will provide the IP addressing configuration of the on- premises network to the Site-to-Site VPN. You do NOT need to create a
virtual network gateway to complete this task.

Accepted Answer

Here are the steps and explanations for creating the object that will provide the IP addressing configuration of the on-premises network to the Site-to-Site VPN:
? The object that you need to create is called a local network gateway. A local network gateway represents your on-premises network and VPN device in Azure. It
contains the public IP address of your VPN device and the address prefixes of your on-premises network that you want to connect to the Azure virtual network1.
? To create a local network gateway, you need to go to the Azure portal and select Create a resource. Search for local network gateway, select Local network
gateway, then select Create2.
? On the Create local network gateway page, enter or select the following information and accept the defaults for the remaining settings:
? Select Review + create and then select Create to create your local network gateway2.

Question 8

SIMULATION - (Topic 4)
Task 6
You need to ensure that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address. The solution must minimize
administrative effort when adding hosts to the subnet.

Accepted Answer

Here are the steps and explanations for ensuring that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address:
? To use the same static public IP address for multiple hosts, you need to create a NAT gateway and associate it with subnet3-2. A NAT gateway is a resource that
performs network address translation (NAT) for outbound traffic from a subnet1. It allows you to use a single public IP address for multiple private IP addresses2.
? To create a NAT gateway, you need to go to the Azure portal and select Create a resource. Search for NAT gateway, select NAT gateway, then select Create3.
? On the Create a NAT gateway page, enter or select the following information and accept the defaults for the remaining settings:
? Select Review + create and then select Create to create your NAT gateway3.
? To associate the NAT gateway with subnet3-2, you need to go to the Virtual networks service in the Azure portal and select your virtual network.
? On the Virtual network page, select Subnets under Settings, and then select subnet3-2 from the list.
? On the Edit subnet page, under NAT gateway, select your NAT gateway from the drop-down list. Then select Save.

Question 9

SIMULATION - (Topic 4)
Task 4
You need to ensure that connections to the storage34280945 storage account can be made by using an IP address in the 10.1.1.0/24 range and the name
storage34280945.pnvatelinlcblob.core.windows.net.

Accepted Answer

Here are the steps and explanations for ensuring that connections to the storage34280945 storage account can be made by using an IP address in the 10.1.1.0/24
range and the name stor-age34280945.pnvatelinlcblob.core.windows.net:
? To allow access from a specific IP address range, you need to configure the Azure Storage firewall and virtual network settings for your storage account. You
can do this in the Azure portal by selecting your storage account and then selecting Networking under Settings1.
? On the Networking page, select Firewalls and virtual networks, and then select Selected networks under Allow access from1. This will block all access to your
storage account except from the networks or resources that you specify.
? Under Firewall, select Add rule, and then enter 10.1.1.0/24 as the IP address or range. You can also enter an optional rule name and description1. This will allow
access from any IP address in the 10.1.1.0/24 range.
? Select Save to apply your changes1.
? To map a custom domain name to your storage account, you need to create a CNAME record with your domain provider that points to your storage account
endpoint2. A CNAME record is a type of DNS record that maps a source domain name to a destination domain name.
? Sign in to your domain registrar’s website, and then go to the page for managing DNS settings2.
? Create a CNAME record with the following information2:
? Save your changes and wait for the DNS propagation to take effect2.
? To register the custom domain name with Azure, you need to go back to the Azure portal and select your storage account. Then select Custom domain under
Blob service2.
? On the Custom domain page, enter stor- age34280945.pnvatelinlcblob.core.windows.net as the custom domain name and select Save2.

Question 10

HOTSPOT - (Topic 3)
You have an Azure subscription that contains a virtual network gateway named VNetGwy1. VNetGwy1 has a public IP address of 20.25.32.214.
You need to query the health probe of VNetGwy1,
How should you complete the URI? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

From SurePassExam
https://www.surepassexam.com/AZ-700-exam-dumps.html (150 New Questions)

Accepted Answer

Correct answer: A