Home/Directory/az 700

az 700 Practice Questions

Page 1 of 1 (25 total questions)

Your company uses Azure ExpressRoute to connect its on-premises data center to Azure. You need to access Azure Storage and Azure SQL Database over the ExpressRoute connection without sending traffic over the public internet. Which type of ExpressRoute peering should you configure?
View Question & Answer ➔
You have three VNets: Hub-VNet, Spoke1-VNet, and Spoke2-VNet. Both spokes are peered to the Hub. You need VMs in Spoke1 to communicate with VMs in Spoke2 routing through an Azure Firewall deployed in the Hub-VNet. What must you configure?
View Question & Answer ➔
You are designing an application delivery solution for an e-commerce website. You need SSL offloading, URL path-based routing (e.g., /images to one server pool and /video to another), and protection against SQL injection attacks. The application is hosted entirely in a single Azure region. Which service should you choose?
View Question & Answer ➔
Your organization requires a Site-to-Site (S2S) VPN connection to Azure with the highest possible availability. You must ensure that if one VPN tunnel fails, or if maintenance occurs on the Azure VPN Gateway, the connection remains active without manual intervention. How should you configure the gateway?
View Question & Answer ➔
Your Azure VMs need to securely upload data to an Azure Storage account. Security policies dictate that the Storage account must not be accessible via the public internet, and data must not traverse the Azure public backbone routing. You also need to access the storage account from on-premises over ExpressRoute. Which feature should you use?
View Question & Answer ➔
You are deploying a global web application. Users across Europe, Asia, and North America will access it. You need to ensure the lowest possible latency for users globally, provide global load balancing, and cache static content at the edge. Which Azure service is designed for this?
View Question & Answer ➔
You have an Azure Firewall deployed to protect outbound internet traffic. You want to allow your VMs to access 'github.com' and '*.microsoft.com' on port 443. Which type of rule should you create in Azure Firewall?
View Question & Answer ➔
Your enterprise has 50 branch offices globally. You want to simplify the connectivity between all branches and Azure, as well as branch-to-branch connectivity. You want Microsoft to manage the hub routing and connectivity automatically. Which Azure service should you adopt?
View Question & Answer ➔
A user reports that they cannot connect from their Azure VM to a specific on-premises IP address over an ExpressRoute connection. You need to determine exactly which hop or security rule is blocking the traffic. Which Network Watcher tool should you use?
View Question & Answer ➔
You deploy an Azure Private DNS zone named 'corp.local' and link it to your VNet. You have 'Auto-registration' enabled on the virtual network link. What does this configuration achieve?
View Question & Answer ➔
You are configuring an Azure Standard Load Balancer. You want traffic arriving on port 80 to be distributed across your backend VMs, but you also want to ensure that packets from the same client IP address always go to the same backend VM. What should you configure?
View Question & Answer ➔
Your VNet has 100 VMs that need to download updates from the internet. To prevent SNAT port exhaustion and ensure all VMs use a single, predictable public IP address for outbound traffic without exposing them to inbound internet traffic, what is the best solution?
View Question & Answer ➔
Your company has two ExpressRoute circuits: one in London and one in Tokyo, both connecting back to your global on-premises network. You want your on-premises network in London to communicate directly with your on-premises network in Tokyo by utilizing the Microsoft backbone. Which feature enables this?
View Question & Answer ➔
You use Azure Traffic Manager to direct users to two regions: East US and West Europe. You want users to be directed to the region that provides them the lowest network latency. Which Traffic Manager routing method should you use?
View Question & Answer ➔
You need to provide secure RDP access to VMs in your VNet for remote administrators. You deploy Azure Bastion. What networking requirements must be met for Azure Bastion to function correctly?
View Question & Answer ➔
A subnet has an NSG applied. You want to allow inbound SSH (port 22) from a specific on-premises IP address, but you want to block SSH from all other sources, including other VNets. By default, there is a rule allowing VNet-to-VNet traffic. What should you configure?
View Question & Answer ➔
You deploy a third-party SD-WAN Network Virtual Appliance (NVA) in your VNet. You want the NVA to dynamically exchange BGP routes with the Azure VNet so you do not have to manually manage User-Defined Routes (UDRs) every time an on-premises subnet changes. Which Azure service enables this?
View Question & Answer ➔
Your security team requires that all outbound HTTPS traffic from your VNets to the internet must be decrypted, inspected for malicious payloads, and re-encrypted before leaving Azure. Which service must you deploy to achieve this?
View Question & Answer ➔
You are configuring a Point-to-Site (P2S) VPN for remote workers. The company requires that users authenticate using their Azure Active Directory (Entra ID) credentials and enforce Conditional Access policies (like MFA). Which tunnel type must you select?
View Question & Answer ➔
VNet-A is in East US and VNet-B is in West Europe. You want to connect them using Global VNet Peering. What happens to the network traffic between the two VNets?
View Question & Answer ➔
You have an ExpressRoute circuit connected to a virtual network gateway. You notice high latency between your on-premises servers and Azure VMs because traffic is being processed by the virtual network gateway. How can you bypass the gateway and send traffic directly to the VMs?
View Question & Answer ➔
You have a single subnet with 50 VMs: 25 Web servers and 25 Database servers. You want to create NSG rules that allow traffic from the Web servers to the Database servers without specifying 25 individual IP addresses or breaking them into multiple subnets. What feature should you use?
View Question & Answer ➔
You need to log the source IP, destination IP, port, and whether traffic was allowed or denied by an NSG for compliance auditing. You also want to visualize this traffic in Power BI. Which Azure feature should you enable?
View Question & Answer ➔
You need to load balance TCP traffic across VMs across multiple availability zones in a region. You require the highest level of SLA, support for Outbound Rules, and diagnostic metrics via Azure Monitor. Which Load Balancer SKU must you select?
View Question & Answer ➔
Your Application Gateway is returning HTTP 502 (Bad Gateway) errors to clients. You suspect the backend servers are not responding correctly. Where should you look first to determine why Application Gateway considers the backend servers unhealthy?
View Question & Answer ➔

Page 1 of 1

az 700 Practice Questions

Your company uses Azure ExpressRoute to connect its on-premises data center to Azure. You need to access Azure Storage and Azure SQL Database over the ExpressRoute connection without sending traffic over the public internet. Which type of ExpressRoute peering should you configure?

You have three VNets: Hub-VNet, Spoke1-VNet, and Spoke2-VNet. Both spokes are peered to the Hub. You need VMs in Spoke1 to communicate with VMs in Spoke2 routing through an Azure Firewall deployed in the Hub-VNet. What must you configure?

You are deploying a global web application. Users across Europe, Asia, and North America will access it. You need to ensure the lowest possible latency for users globally, provide global load balancing, and cache static content at the edge. Which Azure service is designed for this?

You have an Azure Firewall deployed to protect outbound internet traffic. You want to allow your VMs to access 'github.com' and '*.microsoft.com' on port 443. Which type of rule should you create in Azure Firewall?

Your enterprise has 50 branch offices globally. You want to simplify the connectivity between all branches and Azure, as well as branch-to-branch connectivity. You want Microsoft to manage the hub routing and connectivity automatically. Which Azure service should you adopt?

A user reports that they cannot connect from their Azure VM to a specific on-premises IP address over an ExpressRoute connection. You need to determine exactly which hop or security rule is blocking the traffic. Which Network Watcher tool should you use?

You deploy an Azure Private DNS zone named 'corp.local' and link it to your VNet. You have 'Auto-registration' enabled on the virtual network link. What does this configuration achieve?

You are configuring an Azure Standard Load Balancer. You want traffic arriving on port 80 to be distributed across your backend VMs, but you also want to ensure that packets from the same client IP address always go to the same backend VM. What should you configure?

Your VNet has 100 VMs that need to download updates from the internet. To prevent SNAT port exhaustion and ensure all VMs use a single, predictable public IP address for outbound traffic without exposing them to inbound internet traffic, what is the best solution?

You use Azure Traffic Manager to direct users to two regions: East US and West Europe. You want users to be directed to the region that provides them the lowest network latency. Which Traffic Manager routing method should you use?

You need to provide secure RDP access to VMs in your VNet for remote administrators. You deploy Azure Bastion. What networking requirements must be met for Azure Bastion to function correctly?

A subnet has an NSG applied. You want to allow inbound SSH (port 22) from a specific on-premises IP address, but you want to block SSH from all other sources, including other VNets. By default, there is a rule allowing VNet-to-VNet traffic. What should you configure?

You deploy a third-party SD-WAN Network Virtual Appliance (NVA) in your VNet. You want the NVA to dynamically exchange BGP routes with the Azure VNet so you do not have to manually manage User-Defined Routes (UDRs) every time an on-premises subnet changes. Which Azure service enables this?

Your security team requires that all outbound HTTPS traffic from your VNets to the internet must be decrypted, inspected for malicious payloads, and re-encrypted before leaving Azure. Which service must you deploy to achieve this?

You are configuring a Point-to-Site (P2S) VPN for remote workers. The company requires that users authenticate using their Azure Active Directory (Entra ID) credentials and enforce Conditional Access policies (like MFA). Which tunnel type must you select?

VNet-A is in East US and VNet-B is in West Europe. You want to connect them using Global VNet Peering. What happens to the network traffic between the two VNets?

You have an ExpressRoute circuit connected to a virtual network gateway. You notice high latency between your on-premises servers and Azure VMs because traffic is being processed by the virtual network gateway. How can you bypass the gateway and send traffic directly to the VMs?

You have a single subnet with 50 VMs: 25 Web servers and 25 Database servers. You want to create NSG rules that allow traffic from the Web servers to the Database servers without specifying 25 individual IP addresses or breaking them into multiple subnets. What feature should you use?

You need to log the source IP, destination IP, port, and whether traffic was allowed or denied by an NSG for compliance auditing. You also want to visualize this traffic in Power BI. Which Azure feature should you enable?

You need to load balance TCP traffic across VMs across multiple availability zones in a region. You require the highest level of SLA, support for Outbound Rules, and diagnostic metrics via Azure Monitor. Which Load Balancer SKU must you select?

Your Application Gateway is returning HTTP 502 (Bad Gateway) errors to clients. You suspect the backend servers are not responding correctly. Where should you look first to determine why Application Gateway considers the backend servers unhealthy?