File Info
| Exam | Designing and Implementing Microsoft Azure Networking Solutions |
| Number | AZ-700 |
| File Name | Microsoft.AZ-700.VCEplus.2021-10-01.57q.vcex |
| Size | 8 MB |
| Posted | Oct 01, 2021 |
| Download | Microsoft.AZ-700.VCEplus.2021-10-01.57q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
You need to recommend a configuration for the ExpressRoute connection from the Boston datacenter. The solution must meet the hybrid networking requirements and business requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct answer: To work with this question, an Exam Simulator is required.
Question 2
You need to configure GW1 to meet the network security requirements for the P2SVPN users.
Which Tunnel type should you select in the Point-to-site configuration settings of GW1?
- IKEv2 and OpenVPN (SSL)
- IKEv2
- IKEv2 and SSTP (SSL)
- OpenVPN (SSL)
- SSTP (SSL)
Correct answer: D
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant Question Set 3 Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant Question Set 3
Question 3
Your company has a single on-premises datacenter in New York. The East US Azure region has a peering locationin New York.
The company only has Azure resources in the East US region.
You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs.
Which type of ExpressRoute circuits should you create?
- ExpressRoute Local
- ExpressRoute Direct
- ExpressRoute Premium
- ExpressRoute Standard
Correct answer: A
Explanation:
Reference: https://azure.microsoft.com/en-us/pricing/details/expressroute/ Reference:
https://azure.microsoft.com/en-us/pricing/details/expressroute/
Question 4
You are planning an Azure Point-to-Site (P2S) VPN that willuse OpenVPN.
Users will authenticate by an on-premises Active Directory domain.
Which additional service should you deploy to support the VPN authentication?
- an Azure key vault
- a RADIUS server
- a certification authority
- Azure Active Directory (Azure AD) Application Proxy
Correct answer: B
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about
Question 5
You plan to configure BGP for a Site-to-Site VPN connection between a datacenterand Azure.
Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)
NOTE: Each correct selection is worth one point.
- a virtual network gateway
- Azure Application Gateway
- Azure Firewall
- a local network gateway
- Azure Front Door
Correct answer: AD
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/bgp-howto Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/bgp-howto
Question 6
You fail to establish a Site-to-Site VPN connection between your company’s main office and an Azurevirtual network.
You need to troubleshoot what prevents you from establishing the IPsec tunnel.
Which diagnostic log should you review?
- IKEDiagnosticLog
- RouteDiagnosticLog
- GatewayDiagnosticLog
- TunnelDiagnosticLog
Correct answer: A
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics
Question 7
Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: VM2, VM3 and VM4. VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3. There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocking inbound ICMP to VNet1/Subnet2, VNet2 or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3. Box 2: VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2. Box 1: VM2, VM3 and VM4.
VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3.
There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocking inbound ICMP to VNet1/Subnet2, VNet2 or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3.
Box 2:
VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2.
Question 8
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?
- a private endpoint
- a routing table
- a service endpoint
- a private link service
- a virtual network peering
Correct answer: E
Explanation:
There is no virtual network peering between VM4’s VNet (VNet3) and VM5’s VNet (VNet4). To enable the VMs to communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4. There is no virtual network peering between VM4’s VNet (VNet3) and VM5’s VNet (VNet4). To enable the VMs to communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4.
Question 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You reset the gateway of Vnet1.
Does this meet the goal?
- Yes
- No
Correct answer: B
Explanation:
The VPN client must be downloaded again if any changes are made to VNet peering or the network topology. Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
Question 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You enable BGP on the gateway of Vnet1.
Does this meet the goal?
- Yes
- No
Correct answer: B
Explanation:
The VPN client must be downloaded again if any changes are made to VNet peering or the network topology. Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
