AZ-700 Online Practice Questions and Answers

You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption.

You configure the listener for HTTPS by uploading an enterprise-signed certificate.

You need to ensure that the application gateway can provide end-to-end encryption for App1.

What should you do?

A. Increase the Unhealthy threshold setting in the custom probe.

B. Enable the SSL profile to the listener.

C. Set Listener type to Multi site.

D. Upload the public key certificate to the HTTP settings.

You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption.

You configure the listener for HTTPS by uploading an enterprise signed certificate.

You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do?

A. Set Listener type to Multi site.

B. Increase the Unhealthy threshold setting in the custom probe.

C. Upload the public key certificate to the HTTPS settings.

D. Enable the SSL profile for the listener.

Which of the following statements are true with respect to Azure Firewall?

A. Azure firewall replaces Network Security groups

B. Azure firewall is a stateless service

C. Used to inspect inbound internet traffic only

D. Azure Firewall provides inbound protection for non-HTTP/S protocols

E. Forced tunneling is supported in Azure Firewall

You need to identify a security rule that prevents a network packet from reaching an Azure virtual machine. What should you use?

A. IP flow verify

B. Next hop

C. Packet capture

D. Security group view

E. Traffic Analytics

You have the Azure virtual networks shown in the following table.

You deploy Azure Firewall to Vnet3.

You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall.

What should you configure?

A. peering links between Vnet1 and Vnet2

B. a route table associated to Subnet1-1 and Subnet2-1

C. an Azure private DNS zone

D. a route table associated to AzureFirewallSubnet

You have an on-premises datacenter and an Azure subscription.

You plan to implement ExpressRoute FastPath.

You need to create an ExpressRoute gateway. The solution must minimize downtime if a single Azure datacenter fails.

Which SKU should you use?

A. ErGw1AZ

B. High performance

C. Ultra performance

D. ErGw3AZ

E. ErGw2AZ

You have an Azure subscription that contains an Azure Front Door Premium profile named AFD1 and an Azure Web Application Firewall (WAF) policy named WAF1. AFD1 is associated with WAF1.

You need to configure a rate limit for incoming requests to AFD1.

Solution: You add a rule to the rule set of AFD1.

Does this meet the goal?

A. Yes

B. No

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements. Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. On the peering from Vnet1, select Allow for Traffic forwarded from remote virtual network.

B. On the peerings from Vnet2 and Vnet3, select Allow for Traffic forwarded from remote virtual network.

C. On the peering from Vnet1, select Use the remote virtual network's gateway or Route Server.

D. On the peering from Vnet1, select Allow for Traffic to remote virtual network.

E. On the peerings from Vnet2 and Vnet3, select Use the remote virtual network's gateway or Route Server.

HOTSPOT

You have an Azure subscription that contains an app named Appl. App1 is hosted on the Azure App Service instances shown in the following table.

You need to implement Azure Traffic Manager to meet the following requirements:

1.

App1 traffic must be assigned equally to each App Service instance in each Azure region.

2.

App1 traffic from North Europe must be routed to the Appl instances in the North Europe region.

3.

App1 traffic from North America must be routed to the Appl instances in the East US Azure region.

4.

If an App Service instance fails, all the traffic for that instance must be routed to the remaining instances in the same region.

How should you configure the Traffic Manager profiles? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

DRAG DROP

You have an Azure subscription that contains an Azure VPN gateway named GW1. GW1 provides Point-to-Site (P2S) VPN connectivity.

Users connect to GW1 from a Windows 11 device by using an SSTP connection.

You need to ensure that the P2S VPN connections support Azure AD authentication.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Select and Place: