Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Microsoft Certified: Azure Network Engineer Associate
AZ-700
Designing and Implementing Microsoft Azure Networking Solutions Questions and Answers

Pass the Microsoft Certified: Azure Network Engineer Associate AZ-700 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-700 Premium Access

View all detail and faqs for the AZ-700 exam

Go to Exam

811 Students Passed

93% Average Score

97% Same Questions

Viewing page 3 out of 10 pages

Viewing questions 21-30 out of questions

Questions # 21:

You need to provide connectivity to storage1. The solution must meet the PaaS networking requirements and the business requirements.

What should you include in the solution?

Options:

a service endpoint

Azure Front Door

a private endpoint

Azure Traffic Manager

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview, , ]

Questions # 22:

You need to provide access to storage2. The solution must meet the PaaS networking requirements and the business requirements.

Which connectivity method should you use?

Options:

a service endpoint

a private endpoint

Azure Firewall

Azure Front Door

Answer

Questions # 23:

You need to prepare Vnet1 for the deployment of an ExpressRoute gateway. The solution must meet the hybrid connectivity requirements and the business requirements.

Which three actions should you perform in sequence for Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question # 23

Options:

Answer

Answer:

Questions # 24:

You need to implement a P2S VPN for the users in the branch office. The solution must meet the hybrid networking requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 24

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant, , , , ]

Questions # 25:

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.

Which two actions should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

On the peerings from Vnet2 and Vnet3, select Use remote gateways.

On the peering from Vnet1, select Allow forwarded traffic.

On the peering from Vnet1, select Use remote gateways.

On the peering from Vnet1, select Allow gateway transit.

On the peerings from Vnet2 and Vnet3, select Allow gateway transit.

Answer

B, D

Questions # 26:

You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements.

What should you use to configure the default route?

Options:

a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3

a user-defined route assigned to GatewaySubnet in Vnet1

BGP route exchange

route filters

Answer

Explanation

VNet 1 will get the default from BGP and propagate it to VNET 2 and 3

Questions # 27:

You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.

What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 27

Options:

Answer

Answer:

Explanation

Box 2: One NSG

The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.

Box 1: Two custom rules

With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.

The default rules in the NSG will allow all other traffic to VMScaleSet2.

Questions # 28:

You need to implement name resolution for the cloud.liwareinc.com. The solution must meet the networking requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 28

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/dns/private-dns-autoregistration, , https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances, ]

Questions # 29:

You need to recommend a configuration for the ExpressRoute connection from the Boston datacenter. The solution must meet the hybrid networking requirements and business requirements.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 29

Options:

Answer

Answer:

Explanation

For the first question, only ExpressRoute GW SKU Ultra Performance support FastPath feature.

For the second question, vnet1 will connect to ExpressRoute gw, once Vnet1 peers with Vnet2, the traffic from on-premise network will bypass GW and Vnet1, directly goes to Vnet2, while this feature is under public preview.

====Reference

ExpressRoute virtual network gateway is designed to exchange network routes and route network traffic. FastPath is designed to improve the data path performance between your on-premises network and your virtual network. When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.

To configure FastPath, the virtual network gateway must be either:

Ultra Performance

ErGw3AZ

VNet Peering - FastPath will send traffic directly to any VM deployed in a virtual network peered to the one connected to ExpressRoute, bypassing the ExpressRoute virtual network gateway.

https://docs.microsoft.com/en-us/azure/expressroute/about-fastpath

Gateway SKU

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways

Questions # 30:

In which NSGs can you use ASG1 and to which virtual machine network interfaces can you associate ASG1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 30