Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
| Exam Number: AZ-700 | Length of test: 120 mins |
| Exam Name: Designing and Implementing Microsoft Azure Networking Solutions | Number of questions in the actual exam: 40-60 |
| Format: PDF, VPLUS | Passing Score: 700/1000 |
|
Total Questions: 257 $30 Premium PDF file 2 months updates Last updated: November-2024 |
Total Questions: 257 FREE Premium VPLUS file Last updated: November-2024 |
Download practice test questions – AZ-700 exam topic
| Title | Size | Hits | Download |
|---|---|---|---|
| Microsoft.AZ-700.vSep-2024.by.Yande.135q | 7.60 MB | 61 | Download |
| Microsoft.AZ-700.vSep-2024.by.Yande.135q | 12.75 MB | 43 | Download |
| Microsoft.AZ-700.vJul-2024.by.Rian.124q | 8.09 MB | 73 | Download |
| Microsoft.AZ-700.vJul-2024.by.Rian.124q | 14.50 MB | 53 | Download |
| Microsoft.Pre.AZ-700.57q - DEMO | 3.14 MB | 66 | Download |
| Microsoft.AZ-700.vDec-2023.by.YaaSheen.83q | 6.86 MB | 73 | Download |
Study guide for Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Audience profile
As a candidate for this exam, you should have subject matter expertise in planning, implementing, and managing Azure networking solutions, including:
- Core network infrastructure
- Hybrid connectivity
- Application delivery services
- Private access to Azure services
- Network security
As an Azure network engineer your responsibilities include optimizing performance, resiliency, scale, and security of Azure networking solutions. You proactively monitor network environments to identify issues and minimize risk. You also identify and resolve connectivity issues.
To deliver Azure solutions, you work with:
- Solution architects
- Cloud administrators
- Security engineers
- Application developers
- DevOps engineers
As a candidate for this exam, you should have experience creating and managing compute, storage, and networking resources in Azure. You should understand networking fundamentals, such as:
- Name resolution
- Network protocols
- Network address management
Skills at a glance
Design and implement core networking infrastructure (25–30%)
- Design and implement IP addressing for Azure resources
- Design and implement name resolution
- Design and implement VNet connectivity and routing
- Monitor networks
Design, implement, and manage connectivity services (20–25%)
- Design, implement, and manage a site-to-site VPN connection
- Design, implement, and manage a point-to-site VPN connection
- Design, implement, and manage Azure ExpressRoute
- Design and implement an Azure Virtual WAN architecture
Design and implement application delivery services (15–20%)
- Design and implement Azure Load Balancer and Azure Traffic Manager
- Design and implement Azure Application Gateway
- Design and implement Azure Front Door
Design and implement private access to Azure services (10–15%)
- Design and implement Azure Private Link service and Azure private endpoints
- Design and implement service endpoints
Design and implement Azure network security services (15–20%)
- Implement and manage network security groups
- Design and implement Azure Firewall and Azure Firewall Manager
- Design and implement a Web Application Firewall (WAF) deployment
Some new questions:
Q
You have an on-premises server named Server1 that runs Windows Server.
You have an Azure subscription that contains a virtual network named VNet1.
You plan to connect Server1 to VNet1 by using Azure Network Adapter.
You need to minimize how long it takes to deploy the adapter to Server1.
What should you create first?
A. an Azure VPN gateway
B. a route server
C. a private endpoint
D. an Azure Bastion host
Q
You have the on-premises networks shown in the following table.
You have an Azure subscription that contains an Azure virtual WAN named VWAN1 and a virtual network named VNet1 VWAN1 is connected to the on-premises networks and VNet1 in a full mesh topology. The virtual hub routing preference for VWAN1 is AS Path.
You need to route traffic from VNet1 to 10.61.1.5.
Which path will be used?
A. the ExpressRoute connection to Branch2
B. the ExpressRoute connection to Branch3
C. the VPN connection to Branch1
D. the VPN connection to Branch2
Q
You have an Azure subscription that contains a virtual network named VNet1 and the virtual machines shown in the following table.
All the virtual machines are connected to VNet1.
You need to ensure that the applications hosted on the virtual machines can be accessed from the internet. The solution must ensure that the virtual machines share a single public IP address
What should you use?
A. a NAT gateway
B. an internal load balancer
C. a public load balancer
D. Azure Application Gateway
Q
HOTSPOT
You have an on premises web server that hosts a web app named App1 and has the following configurations:
* IP address 131.107.50.60
* FQDN server1.contoso.com
You have an Azure subscription.
You need to publish App1 by using Azure Front Door. The solution must meet the following requirements:
* Ensure that internet users can connect to App1 by using an FQDN of appl.contoso.com.
* Minimize the changes required to the configuration of Front Door if Server 1 is migrated to Azure.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
…………..
Some new questions:
Q
You have an Azure subscription.
You plan to implement Azure Virtual WAN as shown in the following exhibit.
What is the minimum number of route tables that you should create?
A. 1
B. 2
C. 4
D. 6
Q
You have the Azure subscriptions shown in the following table.
Each virtual network contains 20 internet-accessible resources that are assigned public IP addresses.
You need to implement Azure DDoS Network Protection to protect the resources. The solution must minimize costs.
What is the minimum number of DDoS Network Protection plans you should deploy?
A. 1
B. 2
C. 3
D. 6
Q
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1.
You plan to add a private endpoint to Subnet1.
You need to ensure that you can route traffic between the private endpoint and the Azure Private Link service by using a user-defined route.
What should you do first on Subnet1?
A. Enable network policy.
B. Enable delegation.
C. Create a service endpoint.
D. Provision a Standard Azure load balancer.
Q
SIMULATION
You have two servers that are each hosted by a separate service provider in New York and Germany. The server hosted in New York is accessible by using a host name of ny.contoso.com. The server hosted in Germany is accessible by using a host name of de.contoso.com.
You need to provide a single host name to access both servers. The solution must ensure that traffic originating from Germany is routed to de contoso.com. All other traffic must be routed to ny.contoso.com.
A. See the Explanation below for step by step instructions
Q
SIMULATION
You plan to deploy 100 virtual machines to subnet4-1. The virtual machines will NOT be assigned a public IP address. The virtual machines will call the same API. which is hosted by a third party. The virtual machines will make more than 10,000 calls per minute to the API.
You need to minimize the risk of SNAT port exhaustion. The solution must minimize administrative effort.
A. See the Explanation below for step by step instructions
…….
Some new questions:
Q
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains an Azure Virtual WAN named VWAN1. VWAN1 contains a hub named Hub1. Hub1 has a security status of Unsecured.
You need to ensure that the security status of Hub1 is marked as Secured.
Solution: You implement an Azure Front Door profile.
Does this meet the requirement?
A. Yes
B. No
Q
DRAG DROP
Your on-premises network contains two subnets named Subnet1 and Subnet2. Subnet2 contains a Hyper-V host that contains two virtual machines named VM1 and VM2. VM1 and VM2 are connected to Subnet2.
You have an Azure virtual network named VNet1 that contains GatewaySubnet and a subnet named VSubnet1. VNet1 is connected to the on-premises network by using a Site-to-Site (S2S) VPN connection.
You plan to migrate VM1 to VNet1 and maintain the existing IP address of VM1. VM2 will remain on Subnet2.
You need to prepare the environment to ensure that VM1 can communicate with VM2 once the migration is complete.
Which five actions should you perform in sequence?
Q
HOTSPOT
You have an Azure subscription that contains a dual-stack virtual network named VNet1. VNet1 has the following IP address spaces:
* IPv4:192.168.0.0/24
* IPv6: fd0adbftdeca: deed: y48
You plan to deploy an Azure VPN gateway and multiple virtual machines to VNet1.
You need to configure the subnet masks for VNet1. The solution must meet the following requirements:
* Maximize the number of usable IP addresses.
* Support the deployment of the VPN gateway and the virtual machines.
Which subnet mask should you use for each address space?
Q
HOTSPOT
You have an Azure subscription that contains the resources shown in the following table.
You plan to deploy an app named App1 to meet the following requirements.
* External users must be able to access App1 from the internet.
* App1 will be load balanced across all the virtual machines.
* App1 will be hosted on VM1, VM2. VM3. and VM4.
* App1 must be available if an Azure region fails.
* Costs must be minimized.
You need to implement a global load balancer solution for App.
What should you configure?
……………..