Question 1

You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1 You need to deploy Azure Firewall to RG1. The solution must minimize administrative effort What should you do first?

Options :

A : Create a secured virtual hub named AzureFirewallHub.

B : Create a new resource group named AzureFirewallResourceGroup.

C : Create a new virtual network named AzureFirewallNetwork.

D : On VNet1, create a virtual subnet named AzureFirewallSubnet.

Answer: D

Question 2

You have an Azure subscription that contains a virtual machine named VM1 and a network security group (NSG) named NSG1. NSG1 has the default rules configured VM1 runs Windows Server and contains a single NIC named NIC1 NIC! is associated with NSG1. You need to prevent access to the Azure Instance Metadata Service (IMDS) REST API on VM1 The solution must minimize administrative effort. What should you add to NSG1?

Options :

A : an outbound rule that blocks traffic to an IP address

B : an outbound rule that blocks traffic to a service tag

C : an inbound and outbound rule that blocks traffic to an application security group.

D : an inbound rule that blocks traffic to an IP address

Answer: B

Question 3

Your on-premises network contains a DNS server named Server 1. You have an Azure subscription that contains the resources shown in the following table.

The on-premises network is connected to VNet1 by using a Site-to-Site (S2S) VPN. You need to ensure that Server1 can resolve the DNS name of storage1. The solution must minimize costs and administrative effort. What should you use?

Options :

A : an Azure Private DNS zone

B : an Azure virtual machine that hosts a DNS service

C : an Azure public DNS zone

D : Azure DNS Private Resolver

Answer: D

Question 4

You have an Azure application gateway configured for a single website that is available at https://www. contoso.com. The application gateway contains one backend pool and one rule. The backend pool contains two backend servers. Each backend server has an additional website that is available on port 8080. You need to ensure that if port 8080 is unavailable on a backend server, all the traffic for https://www.contoso. com is redirected to the other backend server. What should you do?

Options :

A : Create a health probe.

B : Add a new rule.

C : Add a new listener.

D : Change the port on the listener.

Answer: A

Question 5

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?

Options :

A : internal load balancers

B : storage account

C : serviice endpoints

D : service endpoint policies

Answer: A

Confidently Practice Online with Free AZ-700 Exam Cram

Buying Options: